using BDI2000 to access Secured Silicon Sector on Spansion Flash (CFI commandset 0002)

[Peter Vollmer]

On Wed, 04 Mar 2009 13:49:18 +0100, Peter Vollmer  
<pvollmer-linux-mtd at innominate.com> wrote:

> Hi all,
>
> I'm sorry if this is slightly off-topic, but I hope to reach somebody  
> with
> experience using the BDI2000 (or other jtag tools) to run cfi commands
> (command set 0002) directly, i.e without booting the linux kernel.

Hi,

answering my own post, sorry. I found my problem, somehow I have to shift  
the addresses: addr<<2
instead of 0xfe0002aa its 0xfe000aa8
instead of 0xfe000555 its 0xfe001554

when doing this I can easily access the secured sector using just the  
BDI2000 :

#enter secured sector
SEC>mm 0xfe001554 0x00aa00aa ; mm 0xfe000aa8 0x00550055 ; mm 0xfe001554  
0x00880088
SEC>md 0xfe000000
fe000000 : ffffffff ffffffff ffffffff ffffffff  ................
...
# write access (!!! works only once !!!)
SEC>mm 0xfe001554 0x00aa00aa ; mm 0xfe000aa8 0x00550055 ; mm 0xfe001554  
0x00A000A0 ; mm 0xfe000000 0x7FFFFFFF
# read back
SEC>md 0xfe000000
fe000000 : 7fffffff ffffffff ffffffff ffffffff  ................
...
# leave secured sector
SEC>mm 0xfe001554 0x00aa00aa ; mm 0xfe000aa8 0x00550055 ; mm 0xfe001554  
0x00900090 ; mm 0xfe000aa8 0x00000000


just for the record, the CFI ID of this chip is 0x2101, and the linux mtd  
drivers work flawlessly.

best regards

-- 
Peter Vollmer
Innominate Security Technologies AG
Berlin / Germany