I recently bricked my router, a WRT54g v1.0, and was unable to recover using the shorting pins + tftp method, so I constructed a JTAG cable and I am trying to reflash the CFE using the utility written by HairyDairyMaid. I got a new CFE.bin from this site: http://lonewolf.hacker-nin.com/wrt/cfe/
I am running the utility on Windows. I loaded the giveio driver, and I was able to get my PC to talk to the router, and I get the following output, using v4.5 of the utility:
******************************************************
C:\openwrt\flash>wrt54g -flash:cfe /noreset /nobreak /silent
====================================
WRT54G/GS EJTAG Debrick Utility v4.5
====================================
Probing bus ... Done
Instruction Length set to 5
CPU Chip ID: 00000100011100010000000101111111 (0471017F)
*** Found a Broadcom BCM4702 Rev 1 CPU chip ***
- EJTAG IMPCODE ....... : 00000000100000000000100100001000 (00800908)
- EJTAG Version ....... : 1 or 2.0
- EJTAG DMA Support ... : Yes
Issuing Processor / Peripheral Reset ... Skipped
Enabling Memory Writes ... Done
Halting Processor ... Skipped
Clearing Watchdog ... Done
Probing Flash at (Flash Window: 0x1fc00000) ... Done
Flash Vendor ID: 00000000000000000000000000000001 (00000001)
Flash Device ID: 00000000000000000010001011111001 (000022F9)
*** Found a AMD 29lv320DB 2Mx16 BotB (4MB) Flash Chip ***
- Flash Chip Window Start .... : 1fc00000
- Flash Chip Window Length ... : 00400000
- Selected Area Start ........ : 1fc00000
- Selected Area Length ....... : 00040000
*** You Selected to Flash the CFE.BIN ***
=========================
Flashing Routine Started
=========================
Total Blocks to Erase: 11
Erasing block: 1 (addr = 1fc00000)...Done
Erasing block: 2 (addr = 1fc02000)...Done
Erasing block: 3 (addr = 1fc04000)...Done
Erasing block: 4 (addr = 1fc06000)...Done
Erasing block: 5 (addr = 1fc08000)...Done
Erasing block: 6 (addr = 1fc0a000)...Done
Erasing block: 7 (addr = 1fc0c000)...Done
Erasing block: 8 (addr = 1fc0e000)...Done
Erasing block: 9 (addr = 1fc10000)...Done
Erasing block: 10 (addr = 1fc20000)...Done
Erasing block: 11 (addr = 1fc30000)...Done
Loading CFE.BIN to Flash Memory...
4% bytes = 12216
********************************************
It always halts at this point during the flash. I have tried starting the flash within 1 second of the router being powered on, or powering it on and waiting an hour or two, but to no avail. I have to use the /noreset /nobreak switches or it halts during the "Clearing watchdog" step. Before I tried this, I was able to successfully run -backup:cfe, -erase:nvram, and -erase:kernel, but unfortunately that still did not produce a ping response, so I am trying to reflash the CFE. Does anyone have any idea why this might be failing? Could it be a problem with the CFEs from that site? I don't think that's it since it fails even while trying to reflash the backup. Could it be a problem with the cable, or with my PC? Should I try running the utility from Linux? Any ideas or thoughts would be greatly apprecated, as non v5 routers are currently a bit expensive on ebay. Thank you very much.
-Anthony