| 8devices Community https://www.8devices.com/community/ |
|
| Carambola2 USB Booting https://www.8devices.com/community/viewtopic.php?f=13&t=574 |
Page 1 of 2 |
| Author: | zorromymy [ 12 Sep 2013, 13:09 ] |
| Post subject: | Carambola2 USB Booting |
I have just discovered that the internal ROM of AR9331 has code to boot from USB instead of serial SPI. As discribed in AR9331 datasheet pulling down GPIO1 at powerup trig this feature... Does someone has more information about that and how to exploit it ? Question for 8devices 's people... Do you use the feature to upload the serial flash or do you use JTAG ? Here is the log from Uart... Hornet USB booting... VID=0xcf3,PID=0x9330 iManufacturer=0x10,iProduct=0x20,iSerialNumber=0x30 bMaxPower=0xfa -> COLD_START bUSBPhyBias=0x3 RUN Default State HS HS HS HS HS |
|
| Author: | FPeter [ 12 Sep 2013, 21:37 ] |
| Post subject: | Re: Carambola2 USB Booting |
| Author: | zorromymy [ 13 Sep 2013, 08:31 ] |
| Post subject: | Re: Carambola2 USB Booting |
Don't know, if USB configures as host or device... Probably "Host" because of GPIO13 (High level by default on Carambola2, see AR9331 datasheet). I try to attach USB-Key... Log on uart stops after "RUN" line until the key is removed I try to attach USB-Serial... same behaviour... I try to attach to a Host... No reaction ! Will try faking a VID=0xcf3,PID=0x9330 device... Is the boot rom memory mapped when running from SPI ? in that case, reversing the code may help... I suppose the code is loaded by Atheros because you can trig the same log from TpLink MR3220 Any chance to get this information from Atheros ? regards |
|
| Author: | zorromymy [ 13 Sep 2013, 09:02 ] |
| Post subject: | Re: Carambola2 USB Booting |
One more step... Pulling down GPIO1 (SPI/ROM) and GPIO13 (HOST/DEVICE) at powerup configures the AR9331 as a device. It registers (as expected) as VID=0xcf3,PID=0x9330 device on the desktop... |
|
| Author: | FPeter [ 13 Sep 2013, 09:15 ] |
| Post subject: | Re: Carambola2 USB Booting |
| Author: | FPeter [ 13 Sep 2013, 09:51 ] |
| Post subject: | Re: Carambola2 USB Booting |
there is an additional configuration function on GPIO16, called "FW_DOWNLOAD" - but its already set to low:USB mode - i think its a bootlader mode selector for internal ROM mode: You can switch between USB bootloader and wired network (MDIO) bootloader mode if You set it to high, then You should see different mode on UART console during startup |
|
| Author: | zorromymy [ 13 Sep 2013, 12:13 ] |
| Post subject: | Re: Carambola2 USB Booting |
Here is the linux dmesg log... [ 1.526243] usb 1-1: new high-speed USB device number 2 using ehci_hcd [ 1.873459] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9330 [ 1.873473] usb 1-1: New USB device strings: Mfr=16, Product=32, SerialNumber=48 [ 1.873484] usb 1-1: Product: USB2.0 WLAN [ 1.873493] usb 1-1: Manufacturer: ATHEROS [ 1.873503] usb 1-1: SerialNumber: 12345 |
|
| Author: | zorromymy [ 13 Sep 2013, 12:30 ] |
| Post subject: | Re: Carambola2 USB Booting |
Yes, GPIO16 High + GPIO1 Low start MDIO mode... Here is the uart output: MAC booting... ROM>:mdio download ready |
|
| Author: | gedass [ 13 Sep 2013, 14:09 ] |
| Post subject: | Re: Carambola2 USB Booting |
| Author: | zorromymy [ 13 Sep 2013, 14:48 ] |
| Post subject: | Re: Carambola2 USB Booting |
| Page 1 of 2 | All times are UTC |
| Powered by phpBB® Forum Software © phpBB Group http://www.phpbb.com/ |
|