SRT jtag store

[elapatlantis]

Hi Chaps,
I stuffed up my SRT3720 trying to upgrade software-could be a clone unit?
I built a buffered jtag and it detects micro as STi5518MVB-X
This receiver has 29LV160BTTC-70 flash memory installed-when selecting IRD 3900 Jkeys shows this flash ic number(pretty close) - I can read tsop but when trying to erase or write to tsop ,after resetting receiver power and clicking OK within 3 seconds,I get 'flash timeout (DQ5 set)' error report.
Have also tried other IRD options on jkeys with this flash ic but also had no success in programming or erasing flash memory.
I have a mates SRT3720 and have read his flash ( 2 Meg file) and want to program mine with this file or if someone has 2Mb flash file to send me.
Is the bootloader also in this 2Mb flash file or is it stored somewhere else?
Any help appreciated from the experienced J taggers as I would like to sort this receiver and gain some experience with J Tag interface also.
Thanks Clanser

Bootloader is include in flashdump.
Flashdump is a full image of flash memory.
You can read flash memory but no write, so you can use trap of sti5518.
Flash memory should be unprotect.
Are you sure that you built correctly jtag interface.
Good connection ? good voltage (3.3 or 5v, depend of the receiver) to write ? some jtag need additionnal power unit.
Timeout = receiver don't response
best regard

[clanser]

HI Elapatlantis,
Thanks for good info,
I think Jtag interface is ok,I have built many pcb's before and I can read dump ok from receiver.
I am taking 3,3v from receiver power supply so should be OK.
Please explain how to use trap of sti5518 - I have read full 2Mb flash from a working receiver and want to flash my tsop with this file.
Thanks again for info,
Regards Clanser

[elapatlantis]

HI Elapatlantis,
Thanks for good info,
I think Jtag interface is ok,I have built many pcb's before and I can read dump ok from receiver.
I am taking 3,3v from receiver power supply so should be OK.
Please explain how to use trap of sti5518 - I have read full 2Mb flash from a working receiver and want to flash my tsop with this file.
Thanks again for info,
Regards Clanser

Trap is debug mode in sti5518
Jkey take control at startup of ird (unplug ird, dcu need reset)
I post a tuto in english from prettyboy, how using jkey with samsung 9500(sti5518 also, amd 29lv160 flashmemory)
Read it carefully. try again and use tuto step by step.
You are near but i think you forget to do something. All is important.
best regards

[elapatlantis]

Clanser
Could you post flashdump of srt 3720 in this thread
Share with all strong's users, please.

For all strong's user: If you have/find flashdump of strong unpost in this thread, please post it.
It can be very usefull for other users. thanks.

best regard

[clanser]

Hi Elapatlantis,
I Have tried to follow your instructions exactly and always get 'error erasing flash' report.
Used 2 version of Jkeys program with same error.
Jkeys shows correct flash IC,base address and size but will not erase-can program with new dump but stops with programming error and address but this is because flash memory is not blank.Any other ideas-I am going to look for 29LV160 datasheet and study it.
PS: for some reason I cannot send attachments to this thread-do you have an email address I can send flash dump to and you can post it here?
Thanks Clanser

[clanser]

HI Chaps,
I came across a thread to repair boot record using wall and Jkeys,made no difference.
Disconnected pin 1 of flash and connected to 12v-according to datasheet will disable all locks-still get errors when trying to erase tsop.
tried interface on battery supply-no difference!
I have now run out of ideas-perhaps a hardware fault? Can't see how as receiver was ok until bad flash.
Any ideas welcome.
Thanks Clanser

[elapatlantis]

Hi Elapatlantis,
I Have tried to follow your instructions exactly and always get 'error erasing flash' report.
Used 2 version of Jkeys program with same error.
Jkeys shows correct flash IC,base address and size but will not erase-can program with new dump but stops with programming error and address but this is because flash memory is not blank.Any other ideas-I am going to look for 29LV160 datasheet and study it.
PS: for some reason I cannot send attachments to this thread-do you have an email address I can send flash dump to and you can post it here?
Thanks Clanser

The flash memory must be blank before writing.You must erase before flashing.
It's strange that you cannot write blank in flash memory.
To flash, cpu must be reset to take control before booting (reading bios/flashrom):
1/ connect reset to ground on IRD interface for resetting
or
2/Let's IRD in suspend mode. Turn on with remote and press OK with jkey/flash when ask "ok or cancel". Timing is important and difficult.(1/2 second)
Some IRD use second option to catch traphandler

If you see"error reading fron DCUcontrol register", you have miss control and you have press ok when cpu wasn't in reset.(to late or to early)

Ps: mail at [email protected] thx

best regard

[clanser]

Hi Elapatlantis,
I have mailed you the srt3720 good dump read with my Jtag-
Please post on this thread.
I will report if I can get my receiver back to life and how.
Thanks for all input so far.
Regards Clanser

[elapatlantis]

SRT 3720 flashdump
post by clanser.thx

[elapatlantis]

To clanser
Tuto say: "pin wire"=cpu wire to reset ?
Join doc on sti5598
Would you help you?

best regard