• Visit https://www.embeddedcomputers.net/ for Hardware; Software and all other things related to FlashcatUSB

Unable to verify forceware firmware with BCUSB

bushe777

Member
This will be quite a long post to read, but I don't know what else to do to make it right, I out of ideas and I can't install forceware because data verification fails and at the end of the flashing it says "New firmware sucessfully installed" but it doesn't really work.

I was able to make a 8mb original dump and a 3.07mb original firmware backup that I'm not sure if I backup them wrong and are actually corrupted, the flashing is successful on every writing without any failed message or mismatches, but I can't still enter 192.168.100.1 as when it was virgin, something is going wrong and now I can't use forceware or revive my modem. When I try with other 8mb dumps (which some include forceware and others are virgin) I get failed data verification from start to end, so only my backups have good results but for nothing since I can't even recover my modem back to normal after a successful 8mb original flash and/or the 3.07mb firmware.

I have a sb6120 that doesn't have the serial port, which that may explain why not any full dumps will work with my modem and just my backup that is from a "new" sb6120, is there someone else with a sb6120 with no serial port that has a full dump with forceware included? or do you know how can I make the forceware firmware to sucessfully get verified when flashing.

I think the script is also made for the older version of the sb6120, it will help knowing at what address I could start flashing just the forceware firmware from the "SPI Flash" tab and avoiding the use of an script.

Just for info, I have a BCUSB v1.7 with board firmware 2.02 and I have tried using BlackcatUSB builds 257, 267, 275, 304, and 318, they all detect the modem, with exception of the newest build 321 and all they say I have an Spansion S25FL064 and SPI compatible device (JEDEC ID: 01 0216) and I'm using a 3M SOIC clip so no soldering has been made to the modem.

I have uploaded my backups if that helps you compare something or try them to check if they are really corrupted. Also if someone has a valid dump to use with the SB6120_Forceware_SPI.BCS I might be able get it to work again if someone helps me, I will need the uboot, ubf1, ubf2, and nvram to try it.

The newest build 321 doesn't work because it doesn't detect my bcusb, the 320 also has the same issue, and also the new firmware for the bcusb (BCUSB.3.01.SPI.hex) that is included on this builds doesn't get my BCUSB detected on operational mode, so I have to stick to build 318 and bcusb firmware 1.09 or 2.02.

I have tried flashing with the script "SB6120_Forceware_SPI.BCS" and flashed both UBFI1 and UBFI2 with "forceWare_UBFI-v1.1r12-BETA2.bin" but I can see that the flashing is not going well and it isn't able to verify the date written to it (see picture "failed"), also the same errors happen when using "SBV6220_SPI.bcs" or "VMG300_SPI.bcs" script.

I have a screenshots ("backup finished") of when I'm flashing the backup I made when the modem was virigin, everything seems to go fine but no luck entering 192.168.100.1.

So I guess it will be necessary to start over and first focus on making the modem work back to normal with an original firmware before trying to flash the forceware firmware, but I can't make it go back to the virign state it had with my backup or other dumps I have collected.

I don't know if this has something to do, but the only way I'm actually able to detect the modem is by using the power supply and also the R362 cable, if I use power supply but don't use the R362 cable the modem has the the "power" and "online" lights in a dimmed green, the "receive" and "send" lights in blue and the "link" light somewhat purple (see pic "without r362") and it doesn't recognize the modem in this way or it does but it says "connected to device: 00 0000", also not using power supply but using the R362 doesn't correctly recognize my modem it says "connected to devide: 7F FFFF or other times 80 8080" so to make it work I have to use power supply and make sure the R362 is always making contact and all light get turned off but allows my modem to get detected (see pic "r362 contact").

After flashing the modem with my backup or any other backup the modem, and then connecting the ethernet cable, the modem has the green power light on and the blue link light with intermittent patterns but it never gets steady (see gif "light pattern"). Before trying to flash it I was able to get the four blue lights on.

When I power the modem I can see that send, receive, and online lights are dimmed and then they turn off after the "link" light blinks blue (see pic and gif "powering")

I have tried unchecking the "verify programming option" as well but that doesn't make the trick either.
 

Attachments

  • 00-7FFFFF.rar
    3.2 MB · Views: 28
  • SB6120.rar
    3.1 MB · Views: 23
  • connected.png
    connected.png
    48.9 KB · Views: 85
  • failed.png
    failed.png
    41.2 KB · Views: 80
  • backup finished.png
    backup finished.png
    54.4 KB · Views: 80
  • without r362.JPG
    without r362.JPG
    292.4 KB · Views: 83
  • r362 contact.JPG
    r362 contact.JPG
    483 KB · Views: 82
  • light pattern.gif
    light pattern.gif
    4.6 MB · Views: 88
  • powering.JPG
    powering.JPG
    444.2 KB · Views: 77
  • powering.gif
    powering.gif
    8.9 MB · Views: 86
Try the attached file
I was able to flash u-boot sucessfully and with thee nvram it throws some mismatches and it is sucessful on some addresses though, here is the log:

Button Hander::Calling Event: WriteU-Boot
Write Flash operation complete!
131,072 bytes written in 0.368 seconds, 356,174 Bytes/s
Sucessfully programmed 131072 bytes
Button Hander::Calling Event: Done
Button Hander::Calling Event: WriteNvram
Address 0x7B0002: wrote 0x20 and read 0x0 (39951 mismatches)
Address 0x7B0002: wrote 0x20 and read 0x0 (39951 mismatches)
Address 0x7B0002: wrote 0x20 and read 0x0 (39951 mismatches)
Error: data verification at 0x7B0000 failed!
Address 0x7C0002: wrote 0x0 and read 0x20 (49716 mismatches)
Address 0x7C0002: wrote 0x0 and read 0x20 (49716 mismatches)
Address 0x7C0002: wrote 0x0 and read 0x20 (49716 mismatches)
Error: data verification at 0x7C0000 failed!
Address 0x7E0002: wrote 0x20 and read 0x0 (64963 mismatches)
Address 0x7E0002: wrote 0x20 and read 0x0 (64963 mismatches)
Address 0x7E0002: wrote 0x20 and read 0x0 (64963 mismatches)
Error: data verification at 0x7E0000 failed!
Address 0x7F0002: wrote 0x0 and read 0x20 (64991 mismatches)
Address 0x7F0002: wrote 0x0 and read 0x20 (64991 mismatches)
Address 0x7F0002: wrote 0x0 and read 0x20 (64991 mismatches)
Error: data verification at 0x7F0000 failed!
Write Flash operation complete!
327,680 bytes written in 2.44 seconds, 134,295 Bytes/s
Sucessfully programmed 327680 bytes
Button Hander::Calling Event: Done

I still get the same results of the modem having only power light bright and all other dimmed for some seconds until they turn off and only the power light keeps on.
 
If you just get the power LED on as you described , it should allow you access into the 192 page.
I will test your dumps out to see if they are corrupt or not .
Also the firmware 3.01 should work on all builds over 320 as i have verified that on the bcusb's that i have
 
Just checked your original dump is fine that loads ok .
How are you connecting to the SPI chip ? with a clip or solder ? also what are the lengths of your wired connection
 
Using your existing original dump , i have pre-loaded Forceware for you , so you just have to write this on the SPI Flash tab.
 

Attachments

  • Spansion_S25FL064_00-7FFFFF.rar
    3.6 MB · Views: 45
If you just get the power LED on as you described , it should allow you access into the 192 page.
I will test your dumps out to see if they are corrupt or not .
Also the firmware 3.01 should work on all builds over 320 as i have verified that on the bcusb's that i have

Yes is the only led, but when I connect a ethernet cable there is another LED on, it is the "Link", it is blue and it has an intermittent pattern that only stops after a while of not trying to enter 192 site, and as soon as I try to reload the site the light goes intermittent again.

About firmware 3.01 after flashing it on build 321 I still can't get the bcusb detected, only on firmware 1.09 or 2.02, I have the version 1.07, so I don't know what is wrong here.

Just checked your original dump is fine that loads ok .
How are you connecting to the SPI chip ? with a clip or solder ? also what are the lengths of your wired connection

So the dump is not corrupted? Where you able to enter 192 with my dump?

I'm connecting to the spi chip via clip, and about the lengths of the wires I don't have a ruler at hand but I would about 6inches or 15cm, it is the same cable as in the picture, except is has a red cover instead of blue for the R362 pin.

Using your existing original dump , i have pre-loaded Forceware for you , so you just have to write this on the SPI Flash tab.

The dump starts ok but when it gets to address 0x40000 is when verification start to fail, I assume it fails for all UBF1 and UBF2 addresses, you can see the log here http://pastebin.com/0LR8DbW5 and right at the end there are a couple of successful writing.
 

Attachments

  • bcatkitad.png
    bcatkitad.png
    866.2 KB · Views: 78
Use this command in the console tab Memory.EraseBulk and then load the full dump i posted and tell me if you still get mismatch errors
 
Use this command in the console tab Memory.EraseBulk and then load the full dump i posted and tell me if you still get mismatch errors

I got excited at the beginning since it successfully verified pass 0x40000 but I got 3 mismatches around the end of UBF2 i suppose, at least it is a lot less errors than before, here is the log:

LibUsbDotNet version: 2.2.8.104
BlackcatUSB Script Engine build: 200
Welcome to BlackcatUSB interfacing software, build: 318
Running on: Microsoft Windows 7 Ultimate (32 bit)
Device connected in SPI mode, firmware version: 2.02
Opening device in SPI Mode 0 (Fosc/2 MSB)
Connected to Flash (JEDEC: 01 0216)
Flash detected: Spansion S25FL064 (8,388,608 bytes)
Programming mode: SPI (high-speed)
Erasing entire flash device, total size: 8,388,608 bytes (this may take a moment)
Flash erase complete in .07 seconds
Opened file for writing: Spansion_S25FL064_00-7FFFFF.bin (binary hex format), total file size: 8,388,608 bytes
Address 0x3AC000: wrote 0x0 and read 0xFF (16384 mismatches)
Address 0x3AC000: wrote 0x0 and read 0xFF (16384 mismatches)
Address 0x3AC000: wrote 0x0 and read 0xFF (16384 mismatches)
Error: data verification at 0x3A0000 failed!
Address 0x57C000: wrote 0x0 and read 0x71 (16309 mismatches)
Address 0x57C000: wrote 0x0 and read 0x71 (16309 mismatches)
Address 0x57C000: wrote 0x0 and read 0x71 (16309 mismatches)
Error: data verification at 0x570000 failed!
Address 0x698000: wrote 0x0 and read 0xA (16318 mismatches)
Address 0x698000: wrote 0x0 and read 0xA (16318 mismatches)
Address 0x698000: wrote 0x0 and read 0xA (16318 mismatches)
Error: data verification at 0x690000 failed!
Write Flash operation complete!
8,388,608 bytes written in 23.884 seconds, 351,223 Bytes/s

0x3AC000, 0x57C000, 0x698000 are the only problem now. Can't enter 192 :(

I also have tried the command and then flashing only the firmware and it doesn't work I get many mismatches, just using your dump I'm able to get pretty good results except for the 3 mismatches.
 
Ok it seems to have erased it very quickly , when you do the erase command , can you restart the modem and software and tell me if in the SPI flash tab it is all FFFFF all the way through
 
Yeah the erasing is very fast, .06 ~.08 seconds most of the time, here is a picture after using erase command and restarting modem and program after doing it, I can confirm it isn't all F's

Is there a specific way to use the erase command? I know it got me better results but if everything should be F's the command isn't working right?
 

Attachments

  • after memory.bulk.png
    after memory.bulk.png
    154.1 KB · Views: 77
Did you just use the erase command and restart both modem and software to check if it was all FFFF's ? I do not want you to program anything just yet .We need to make sure the device is erasing properly.
 
Yes I restarted both, this is the process I do:

1. Power modem
2. Connect BCUSB to PC
3. Open software
4. Use erase command
5. Close software
6. Power off both modem and BCUSB
7. Power them on again.
8. Open software
 
So with that process is it all FFFF's or is it as your screenshot with visible data ?
 
Yes I have visible data after doing that process, the picture I uploaded last is taken after doing all that.

How long should the erase take?
 
Right so your BCUSB is not erasing it properly , now this could be one of 2 things , either the connection to the board (using the clip) is not 100% or there is an issue with your BCUSB itself, the reason i think there may be an issue with the BCUSB is because you seem to have an issue with running on the newer firmware 3.01. . Tell me are you able to swap from SPI to EJTAG firmware ? i just want to see if the programmer is doing that properly.
 
I have just noticed that the new firmware 3.01 does not work on the BCUSB's with the old at90usb162 chips , i have notified the developer about this ,,, so that is one problem out the way , we know it is not the BCUSB at fault , but more than likely the connection to the board ,,, like the clip
 
I don't know why but I'm not able to go back to EJTAG mode after flashing the firmware :s
I had it working in EJTAG mode before changing it to SPI. I tried several builds and firmwares. Maybe it had something to do with the 3.01 firmware

I will restart the pc to see if something changes.
 
Back
Top