Unfortunately even with only the CFE in the flash, the router goes into a continuos boot loop. I obtained the log below from the serial console (MAC address masked.) From the log, it seems the TFTPd has not been started before the exception occurred.
I'm very certain that the CFE I flashed took effect as I could change the default MAC address in the CFE with a Hex editor before flashing into the chip and the boot log shows the changed MAC address.
I think the CFE could not initialize the Ethernet port and threw an exception.
--------------------------
CFE version 2010.09.20.0 based on BBP 1.0.37 for BCM947XX (32bit,SP,LE)
Build Date: Fri Nov 12 11:01:26 CST 2010 (lzh@team2-complier)
Copyright (C)
2000-2008 Broadcom Corporation.
Init Arena
Init Devs.
No DPN
This is a Serial Flash
Boot partition size = 262144(0x40000)
Found an ST compatible serial flash with 256 64KB blocks; total size 16MB
sflash_cfe_probe: flash type ST, nparts 4
sflash_cfe_probe: idx 0, name boot, descr ST Serial flash offset
00000000 size 256KB
sflash_cfe_probe: idx 1, name trx, descr ST Serial flash offset
00040000 size 1KB
sflash_cfe_probe: idx 2, name os, descr ST Serial flash offset 0004001C size 16068KB
sflash_cfe_probe: idx 3, name nvram, descr ST Serial flash offset 00FF1000 size 60KB
sflash_cfe_probe: flash type ST, nparts 3
sflash_cfe_probe: idx 0, name boot, descr ST Serial flash offset
00000000 size 256KB
sflash_cfe_probe: idx 1, name trx, descr ST Serial flash offset
00040000 size 16068KB
sflash_cfe_probe: idx 2, name nvram, descr ST Serial flash offset 00FF1000 size 60KB
sflash_cfe_probe: flash type ST, nparts 0
CPU type 0x19740: 133MHz
Tot mem: 65536 KBytes
CFE mem: 0x80700000 - 0x8079EA40 (649792)
Data: 0x80734000 - 0x80737FE0 (16352)
BSS: 0x80737FE0 - 0x80738A40 (2656)
Heap: 0x80738A40 - 0x8079CA40 (409600)
Stack: 0x8079CA40 - 0x8079EA40 (8192)
Text: 0x80700000 - 0x80734000 (212992)
board_final_init: commit=0, restore_defaults=0Boot version: v5.2
The boot is CFE
mac_init(): Find mac [xx:xx:xx:xx:xx:xx] in location 1
Nothing...
country_init(): Find country code in location 0
The country is same
**Exception 8: EPC=80718DDC, Cause=
80000008 (TLBMissRd)
RA=80718DE4, VAddr=0000000C
0 ($00) =
00000000 AT ($01) = 807300A8
v0 ($02) =
00000000 v1 ($03) =
00000000
a0 ($04) = 80739A80 a1 ($05) = 8072E345
a2 ($06) =
00000001 a3 ($07) = 80738A58
t0 ($08) = 8079E5D4 t1 ($09) =
00000000
t2 ($10) = 807337EC t3 ($11) =
00000000
t4 ($12) =
00000000 t5 ($13) = 48534C46
t6 ($14) = 9FC036BC t7 ($15) = FBFFFEDF
s0 ($16) =
00000000 s1 ($17) = 8072E32C
s2 ($18) = 8072E2E4 s3 ($19) = 8072E2F0
s4 ($20) = 8079E800 s5 ($21) = 8079E800
s6 ($22) = 19A14716 s7 ($23) =
00000001
t8 ($24) =
04000000 t9 ($25) =
00000000
k0 ($26) = CAD1CAD1 k1 ($27) = CAD1CAD1
gp ($28) = 8073C000 sp ($29) = 8079E7D8
fp ($30) =
00000000 ra ($31) = 80718DE4