JTAG Port

From Sharpfin
Revision as of 16:36, 8 December 2006 by Philipp (talk | contribs)
Jump to navigation Jump to search
Bottom view of Barracuda module with probable JTAG pins:
.
.        O ???        O TMS/TDI
.
.              O TDI/TMS
.
.
.             O ???    O ???


Diagnostic

Presently, a possible location for the JTAG port has been identified, but which pin is which has not.

JTAG consists of 4 or 5 pins:

  • TRST - A Reset line, which could be tied low via an R, permanently disabling the JTAG interface.
  • TDI - Data In
  • TDO - Data Out
  • TMS - The Mode Select pin, which actually drives the JTAG TAP Controller around a simple state machine.
  • TCK - Clock

And Is Driven by a State Machine

JTAG-SM.png

Pin identification without risk of re-programming

TDO will have to be identified by impedence / voltage level testing.

  • TCK: Burst Clock for period of test
  • TDI: 000000000000000000
  • TMS: 011111011000000000

1) TDI & TMS Change on TCK falling. 2) The '11111' of TMS forces the state machine to reset. 3) The '01100' of TMS forces it into the Shift-IR state. 4) The '00000000' of TMS forces the TDI in, and the Current Instruction Out.

If the inputs pins are connected incorrectly, the worst that can happen is '0' can be clocked into TMS twice, which should force the machine to stay in it's Run-Test/Idle state, and no damage can occur.

If the input pins are connected correctly, some data should be seen on TDO as the instruction register last two bits are always '01'.