jtag
Differences
This shows you the differences between two versions of the page.
Both sides previous revisionPrevious revisionNext revision | Previous revisionNext revisionBoth sides next revision | ||
jtag [2016/02/17 10:22] – fix JTAG to SWJ, restructure kingkevin | jtag [2021/04/09 16:29] – [PIC USB-Blaster] fix voltage kingkevin | ||
---|---|---|---|
Line 8: | Line 8: | ||
The Debug Port is often called JTAG-DP for JTAG and SW-DP for SWD. | The Debug Port is often called JTAG-DP for JTAG and SW-DP for SWD. | ||
SWJ capable device include and often combine both, as the SWD signal pins SWDIO and SWCLK re-use the JTAG signal pin JTMS and JTCK (backwards compatible). | SWJ capable device include and often combine both, as the SWD signal pins SWDIO and SWCLK re-use the JTAG signal pin JTMS and JTCK (backwards compatible). | ||
+ | Most 32 bits micro-controllers and SoCs have one of both (or both). | ||
- | Most 32 bits micro-controllers and SoCs have one of both (or both).\\ | ||
On the other side you need a SWJ adapter so the host can speak to the device using the JTAG and/or SWD protocol. | On the other side you need a SWJ adapter so the host can speak to the device using the JTAG and/or SWD protocol. | ||
SWJ adapters can go from cheap (<5$) to expensive (> | SWJ adapters can go from cheap (<5$) to expensive (> | ||
Line 57: | Line 57: | ||
I am using cheap clones. | I am using cheap clones. | ||
+ | ==== ST-LINK/V2 clone ==== | ||
- | ==== BAITE ==== | + | {{: |
+ | {{: | ||
+ | {{: | ||
+ | {{: | ||
- | The first clone is a [[http:// | + | This is a complete rip-off of the [[http:// |
- | It supports JTAG, SWD, and SWIM (for STM8). | + | It comes in the same box, with the same cables, the enclosure is the same, even the board name has been taken over (MB936), but the board isn't the same. |
+ | The BOM doesn' | ||
+ | The original adapter comes with ESD protection, protection resistors, and a transceiver to allow operating with target signal levels of 1.65V to 5.5V. | ||
+ | This is completely missing on the clone since the connector pins are directly connected to the micro-controller. | ||
+ | Thus it only supports target signal levels of 3.3V and sometimes 5V since the pins are 5V tolerant. | ||
+ | |||
+ | For $9 you can't expect more, and if you want a cheap adapter I recommend the other ones (see below). | ||
+ | |||
+ | ==== mini ST-LINK V2 ==== | ||
+ | |||
+ | These adapters come in a small dongle sized aluminium case. | ||
+ | They supports SWD, and SWIM (for STM8), but not JTAG. | ||
+ | Also the RST signal (required for SWIM) is not controllable as SRST in SWD mode (at least not by OpenOCD). | ||
+ | |||
+ | For less than $2, they are the cheapest SWD programmer you can find. | ||
+ | I also like to use them as development board when I just need a USB dongle with just a few signals (up to 4). | ||
+ | |||
+ | Numerous board variants exist and it is hard to know what you will get. | ||
+ | Always check the pinout on the aluminium case and on the PCB since this also varies. | ||
+ | Here are the board variants I got, in chronological order. | ||
+ | |||
+ | === 2014-06-22 ST-LINK V2 === | ||
+ | |||
+ | {{: | ||
+ | {{: | ||
+ | {{: | ||
+ | |||
+ | I've reversed the {{: | ||
+ | |||
+ | One trick to get this ridiculously low price is to use STM32F101 micro-controllers. | ||
+ | Compared to the STM32F103 micro-controllers they offer less functionalities, | ||
+ | Well this is because these micro-controllers use the same die, but if not all STM32F103 feature tests pass after production they get packages as STM32F101, but it seems that USB still works well enough. | ||
+ | At least this is my guess. | ||
+ | It would be interesting to check if the other STM32F103 peripherals normally not present on the STM32F101 work as well, but I wouldn' | ||
+ | After all, they are probably marked as STM32F101 for a good reason.\\ | ||
+ | Similarly the STM32F103C8 is only rated having 64 kB of flash because it didn't pass the flash test, compared to the 128 kB for the STM32F103CB, | ||
+ | |||
+ | One other nice trick they used is to have twos LEDs on the same pin (PA9): | ||
+ | * when the pin is set to output high, only one LED lights up | ||
+ | * when the pin is set to output low, the other LED light up | ||
+ | * when set to input floating, both LEDs are off | ||
+ | * when PWM output is used, you can mix the two colors (red and blue) quite well due to the persistence of vision (also because the LEDs are next to each other and the small hole in the case is in the center). | ||
+ | |||
+ | === alternative pinout === | ||
+ | |||
+ | {{: | ||
+ | {{: | ||
+ | {{: | ||
+ | |||
+ | From the outside this looks very similar to the previous one, except that the connector pinout is very different (except for power) and there is only one LED.\\ | ||
+ | No markings are on the board. | ||
+ | |||
+ | === 2016-01-18 MX-LINK V2 === | ||
+ | |||
+ | {{: | ||
+ | {{: | ||
+ | {{: | ||
+ | |||
+ | This one has an " | ||
+ | |||
+ | === SWDIO/SWCLK swap === | ||
+ | |||
+ | {{: | ||
+ | {{: | ||
+ | {{: | ||
+ | |||
+ | This variant uses an STM32F103. | ||
+ | It seems this micro-controller got so popular that it is now cheaper than the STM32F101 (with less features). | ||
+ | The annoying details of this variant is that the SWDIO and SWCLK signal described on the pinout engraved in the aluminium case are swapped. | ||
+ | This shows again the importance of also checking the pinout on the board itself, else you can waste a couple of hours debugging. | ||
+ | |||
+ | === QFN === | ||
+ | |||
+ | {{: | ||
+ | {{: | ||
+ | {{: | ||
+ | |||
+ | This variant uses an STM32F103 in the UFQFN-48 package. | ||
+ | This is just a couple of cents cheaper than the more traditional TQFP-48 package, but this is enough en mass to change the footprint on the board. | ||
+ | |||
+ | === MINI ST-Link V2E === | ||
+ | |||
+ | {{: | ||
+ | {{: | ||
+ | {{: | ||
+ | |||
+ | Instead on an STM32F103, this dongle uses a [[http:// | ||
+ | I've seen pin compatible alternatives (ST STM8S003 vs Nuvoton N76E003), even architecture compatible (ST STM32F103 vs GigeDevice GD32F103), but they always had some differences (architecture, | ||
+ | The CS32F103 seems like a complete clone of the STM32F103 (exact same pinout, architecture, | ||
+ | So far I could not not see any difference (I tested flash, USB, SWD). | ||
+ | I guess this micro-controller is so popular that it was just a question of time until it was ripped-off. | ||
+ | To check if this is a complete clone you could decapsulate the chip and compare the silicon die, or check the errata behaviour (I can't imagine they re-implemented it themselves, up to the mistakes). | ||
+ | The next step would be to have a CS32F103 chip in a package marked as STM32F103. | ||
+ | |||
+ | == GC == | ||
+ | |||
+ | {{: | ||
+ | {{: | ||
+ | {{: | ||
+ | |||
+ | Most ST-LINK minis which I get now use the CKS32 chip. | ||
+ | I'm a bit sad because the CS32F103C8 really only has the advertised 64 KB of flash, while the STM32F103C8 actually has 128 KB (e.g. what the STM32F103CB has), and when you have a lot of debugging strings in your firmware, you very soon reach the limit of the 64 KB. | ||
+ | Thus, on my quest to find ST-LINK minis with STM32F103 (e.g. where the ground pin is not between SWDIO and SWCLK) I landed on this one. | ||
+ | Sadly it also does not use a STM32F103, but a STM32GC102C8. | ||
+ | I have no idea what this chip is. | ||
+ | The GC series does not exist (at least ST doesn' | ||
+ | I'm not sure if this was to save cost, because this is the first board I see with 2 ESD protections (one for USB, the other for SWDIO/SWCLK in addition to the inline protection resistors, and none for RST/ | ||
+ | |||
+ | ==== Baite ==== | ||
+ | |||
+ | {{: | ||
+ | {{: | ||
+ | {{: | ||
+ | {{: | ||
+ | |||
+ | The [[http:// | ||
+ | |||
+ | They seem to use the same board also for several other programmers, | ||
- | {{: | ||
- | {{: | ||
- | {{: | ||
{{: | {{: | ||
{{: | {{: | ||
- | STM32F103C8 connection: | + | I've also reversed the board layout to get the {{:jtag: |
- | ^ STM32F103C8 signal ^ STM32F103C8 pin ^ adapter pin ^ adapter signal ^ | + | The connector pins are all protected with 220 ohms resistors. |
- | | PA7 | 17 | 1 | JRST | | + | |
- | | AMS1117 | | 2 | 3V3 | | + | |
- | | USB VCC | | 3 | 5V | | + | |
- | | PA4 | 14 | 4 | JTCK/SWCLK | | + | |
- | | PB11 | 22 | 5 | SWIM | | + | |
- | | PA14 | 37 | 6 | JTMS/SWDIO | | + | |
- | | USB GND | | 7 | GND | | + | |
- | | PA5 | 15 | 8 | JTDO | | + | |
- | | PB6 | 42 | 9 | SWIM_RST | | + | |
- | | PA6 | 16 | 10 | JTDI | | + | |
- | | PB12,PB14 | 25,27 | | 100 ohms | | + | |
- | | PB5 | 41 | | LED | | + | |
- | the adapter pins are protected with a 220 ohms resistor. | + | {{: |
+ | {{: | ||
- | ==== aluminium ==== | + | There is a newer version marked as " |
+ | * all pads for the micro-controller are present (there is even solder mask between them) | ||
+ | * they added a SWD port | ||
+ | * the STM32F103C8 has been replaced with a STM32F101CB, | ||
+ | * the passives are smaller | ||
+ | * the routing is horrible | ||
- | This [[http:// | + | ===== Black Magic Probe ===== |
- | It supports SWD, and SWIM (for STM8), but not JTAG. | + | |
- | They replaced the additional JTAG pins with power pins. | + | |
- | {{:jtag: | + | The [[https://github.com/ |
- | {{: | + | Thus no need to have an OpenOCD server to control the SWJ adapter. |
- | {{: | + | You can directly connect GDB to this adapter (over USB CDC ACM).\\ |
- | {{: | + | It also comes with a UART port (over a second USB CDC ACM). |
+ | This is very useful while developing (for printf debugging). | ||
- | STM32F103C8 connection: | + | The hardware comes with some disadvantages though: |
- | ^ STM32F103C8 signal ^ STM32F103C8 pin ^ adapter pin ^ adapter signal ^ | + | |
- | | PB6 | 42 | 1 | RST | | + | |
- | | PB14 | 27 | 2 | SWDIO | | + | |
- | | USB GND | | 3 | GND | | + | |
- | | USB GND | | 4 | GND | | + | |
- | | PB8/PB11 | 45/22 | 5 | SWIM | | + | |
- | | PA5/PB13 | 15/26 | 6 | SWCLK | | + | |
- | | LDO VCC | | 7 | 3.3V | | + | |
- | | LDO VCC | | 8 | 3.3V | | + | |
- | | USB VCC | | 9 | 5V | | + | |
- | | USB VCC | | 10 | 5V | | + | |
- | | PA9 | 30 | current source | + | |
+ | Because the firmware is open source it is possible to port it to other hardware, and [[https:// | ||
+ | It has been [[https:// | ||
+ | It has also been [[http:// | ||
+ | So I decided to port it to the [[# | ||
+ | This has less power pins (who needs 2xGND, 2x5V, 3x3.3V anyway), but provides enough function pins to add UART (and SRST). | ||
+ | |||
+ | To build the firmware ([[https:// | ||
+ | <code bash> | ||
+ | git clone https:// | ||
+ | cd blackmagic | ||
+ | git submodule init | ||
+ | git submodule update | ||
+ | make | ||
+ | cd src | ||
+ | make clean | ||
+ | make PROBE_HOST=baite | ||
+ | </ | ||
+ | |||
+ | Now we need to re-flash the Baite dongle.\\ | ||
+ | As you can see on the {{: | ||
+ | But on the back of the board you can find test points so to program the device using the serial bootloader: | ||
+ | |||
+ | ^ pin ^ signal ^ | ||
+ | | 1 (square) | RX | | ||
+ | | 2 | TX | | ||
+ | | 3 | BOOT0 | | ||
+ | | 4 | +5V | | ||
+ | | 5 | GND | | ||
+ | |||
+ | Use any USB to UART converter and connect the corresponding pins to this port. | ||
+ | Don't power the Baite dongle over USB since it might then boot the normal application. | ||
+ | Instead let the USB to UART converter power it. | ||
+ | To start the serial bootloader when powering the dongle you need to set BOOT0 high by connecting it to +3.3V or DTR (or any high signal present on the USB to UART converter). | ||
+ | |||
+ | To flash the Black Magic firmware I used [[https:// | ||
+ | Since the flash is read/write protected you first need to clear these option bits. | ||
+ | |||
+ | <code bash> | ||
+ | # disable flash read protection | ||
+ | stm32flash -k / | ||
+ | # disable flash write protection | ||
+ | stm32flash -u / | ||
+ | # erase flash | ||
+ | stm32flash -o / | ||
+ | # flash the DFU bootloader | ||
+ | stm32flash -w blackmagic_dfu.bin -v / | ||
+ | # flash the main firmware | ||
+ | stm32flash -w blackmagic.bin -v -S 0x08002000 / | ||
+ | </ | ||
+ | |||
+ | Unplug and re-plug the Baite dongle. | ||
+ | The adapter should be running the main application and two USB CDC ACM ports will appear. | ||
+ | |||
+ | You can re-flash the device from the main application using the DFU bootloader with: | ||
+ | <code bash> | ||
+ | python2 ../ | ||
+ | </ | ||
+ | |||
+ | Note: Since this adapter is based on an STM32F103C8 micro-controller with 64 kB of flash the DFU bootloader only advertises 56 kB of flash available for the main application. | ||
+ | Because the blackmagic firmware exceeds this size it will not be possible to flash it through if the DFU software doesn' | ||
+ | STM32F103C8 micro-controllers often have 128 kB of flash though, thus it is still possible to flash the blackmagic firmware using the serial bootloader (at address 0x08002000, with verification enbaled ot ensured the whole firmware has been written successfully) or '' | ||
+ | |||
+ | Here is the new "BMP Baite" {{ : | ||
+ | ^ signal ^ pin ^ pin ^ signal ^ | ||
+ | | SRST | 1 | 2| +3.3V | | ||
+ | | +5V | 3 | 4 | JTCK/SWCLK | | ||
+ | | RX | 5 (key) | 6 | JTMS/SWDIO | | ||
+ | | GND | 7 | 8 | JTDO/ | ||
+ | | TX | 9 | 10 | JTDI | | ||
+ | |||
+ | **note**: the RX pin is pulled up by a 620 ohms resistor. Thus the TX connected to BMP Baite must by strong enough to drive it low (e.g. not like with the CH340 USB to UART converter). | ||
+ | |||
+ | If you connect SRST to the target NRST, it is even possible to reset the target board without having to press on the on-board reset button (of there is any): | ||
+ | <code bash> | ||
+ | gdb --eval-command=" | ||
+ | </ | ||
===== Altera USB-Blaster ===== | ===== Altera USB-Blaster ===== | ||
+ | |||
+ | {{ : | ||
The [[https:// | The [[https:// | ||
It is often used to flash FPGA, but is a general purpose JTAG adapter. | It is often used to flash FPGA, but is a general purpose JTAG adapter. | ||
- | |||
- | I have a cheap [[http:// | ||
- | The original uses FTDI FT245 and MAX CPLD chips. | ||
- | This one uses a Silicon Labs C8051F321 micro-controller and a 74LVC125 quad buffer, but there are many other clone variants. | ||
- | |||
- | {{: | ||
- | {{: | ||
- | {{: | ||
- | {{: | ||
:!: be aware that here the VCC{TARGET} pin has to be connected to a reference voltage used for the JTAG communication, | :!: be aware that here the VCC{TARGET} pin has to be connected to a reference voltage used for the JTAG communication, | ||
Line 136: | Line 308: | ||
</ | </ | ||
- | To be able to use it I had to recompile OpenOCD for the USB-Blaster to use libftdi (probable | + | To be able to use it I had to recompile OpenOCD for the USB-Blaster to use libftdi (maybe because it's a clone). |
<code bash> | <code bash> | ||
git clone http:// | git clone http:// | ||
Line 200: | Line 372: | ||
Info : stm32f1x.cpu: | Info : stm32f1x.cpu: | ||
</ | </ | ||
+ | |||
+ | The original uses FTDI FT245 and MAX CPLD chips. | ||
+ | There are numerous clone variants, with various quality and voltage support. | ||
+ | |||
+ | ==== SiLabs USB-Blaster ==== | ||
+ | |||
+ | This one uses a Silicon Labs C8051F321 micro-controller and a 74LVC125 quad buffer (for signal voltages from 1.65 to 3.6 V). | ||
+ | |||
+ | {{: | ||
+ | {{: | ||
+ | |||
+ | ==== PIC USB-Blaster ==== | ||
+ | |||
+ | This one uses a Microchip PIC18F14 micro-controller (with embedded 3.3V LDO) and has no buffer (thus only supporting 3.3 V signals). | ||
+ | |||
+ | {{: | ||
+ | {{: | ||
+ | |||
+ | ==== ARMJISHU USB-Blaster ==== | ||
+ | |||
+ | This one uses a ST STM32F101 (as a STM32F103 with USB support) micro-controller and a 74HC244 octal-buffer (for signal voltages from 2.0 to 6.0 V). | ||
+ | |||
+ | {{: | ||
+ | {{: | ||
+ | |||
+ | I also reversed the {{: | ||
+ | It shows that the hardware can also drive the signals (at 3.3 V) in case Vcc_target is not connected, and you can add an uSD card slot or SPI flash. | ||
+ | I don't know if these features are supported in software. | ||
+ | |||
+ | {{: | ||
+ | {{: | ||
===== SEGGER J-Link ===== | ===== SEGGER J-Link ===== | ||
- | The [[http://www.aliexpress.com/item/ | + | The [[https://www.segger.com/jlink_base.html|SEGGER J-Link]] |
+ | That makes it one of the most complete JTAG adapter. | ||
+ | The differences between the versions are documented [[https://wiki.segger.com/ | ||
+ | |||
+ | There are plenty of different J-Link v8 and v9 clones available, from light version with the minimum number of components, to full version with all features. | ||
+ | But v8 and v9 are not supported anymore by J-Link, meaning no new feature will be added to them. | ||
+ | Instead I recommend to get the [[https:// | ||
+ | |||
+ | Here pictures from devices not from official distributors, | ||
+ | |||
+ | They come in the same case: | ||
{{: | {{: | ||
{{: | {{: | ||
- | {{: | ||
- | It supports JTAG, SWD, SWO, RTCK, and voltage reference. | + | Here a J-Link v8 with large passives: |
- | That makes it the most complete | + | |
+ | {{: | ||
+ | {{: | ||
+ | |||
+ | Here a J-Link v8 with smaller and a bit less passives: | ||
+ | |||
+ | {{: | ||
+ | {{: | ||
+ | |||
+ | Here a light J-Link v9. | ||
+ | v9 uses a STM32F205 (providing 20 MHz JTAG/15 MHz SWD) while v8 uses a AT91SAM7S (providing 10 MHz JTAG/4 MHz SWD): | ||
+ | |||
+ | {{: | ||
+ | {{: | ||
+ | |||
+ | Here a J-Link v10. | ||
+ | It uses a NXP LPC4337 which supports | ||
+ | In addition to the others, it adds cJTAG support: | ||
+ | |||
+ | {{: | ||
+ | {{: | ||
+ | |||
+ | Here a [[https:// | ||
+ | It is supposed to be embedded on development board and provide an easy way to flash the main micro-controller. | ||
+ | It have much less capabilities (no JTAG, only SWD, ...) and less protections, but is a lot smaller and sufficient for most tasks. | ||
+ | Additionally it provides a UART interface, ideal for printf debugging. | ||
+ | I actually can be implemented on several micro-controller, and in my case a STM32F072. | ||
+ | |||
+ | {{: | ||
+ | {{: | ||
+ | |||
+ | |||
+ | ===== Texas Instruments XDS100v3 ===== | ||
+ | |||
+ | The [[http:// | ||
+ | |||
+ | Note: this adapter uses the [[http:// | ||
+ | |||
+ | {{: | ||
+ | {{: | ||
+ | {{: | ||
+ | |||
+ | ===== DISTORTEC JTAG-lock-pick Tiny 2 ===== | ||
+ | |||
+ | The [[http:// | ||
+ | {{: | ||
+ | {{: | ||
====== tricks ====== | ====== tricks ====== | ||
jtag.txt · Last modified: 2024/01/07 17:49 by 127.0.0.1