Upgrade Flash Memory Options

[burn79]

Hi everybody!

I have a Simpad SL4 and I installed the Ångström Distribution with opie on it.
I want to install more software like a webbrowser, but there is not much space left on the flash memory. I found on opensimpad.org that it is possible to upgrade the flash.
Is there anybody who has upgraded the simpad to 64 MB flash? Does it work?
Where can I get a compatible flash chip for my simpad to upgrade it?

burn

[burn79]

Hey mr_nice,

with urjtag the command "detectflash" needs a parameter. I can use detectflash 0 and detectflash 1. Only 0 and 1 work, some other numbers gives an errors, so I think the output is for the first and for the second flash chip

CODE

jtag> detectflash 0
Query identification string:
Primary Algorithm Command Set and Control Interface ID Code: 0x0001 (Intel/Sharp Extended Command Set)
Alternate Algorithm Command Set and Control Interface ID Code: 0x0000 (null)
Query system interface information:
Vcc Logic Supply Minimum Write/Erase or Write voltage: 2700 mV
Vcc Logic Supply Maximum Write/Erase or Write voltage: 3600 mV
Vpp [Programming] Supply Minimum Write/Erase voltage: 0 mV
Vpp [Programming] Supply Maximum Write/Erase voltage: 0 mV
Typical timeout per single byte/word program: 64 us
Typical timeout for maximum-size multi-byte program: 128 us
Typical timeout per individual block erase: 1024 ms
Typical timeout for full chip erase: 0 ms
Maximum timeout for byte/word program: 256 us
Maximum timeout for multi-byte program: 1024 us
Maximum timeout per individual block erase: 4096 ms
Maximum timeout for chip erase: 0 ms
Device geometry definition:
Device Size: 33554432 B (32768 KiB, 32 MiB)
Flash Device Interface Code description: 0x0002 (x8/x16)
Maximum number of bytes in multi-byte program: 32
Number of Erase Block Regions within device: 1
Erase Block Region Information:
Region 0:
Erase Block Size: 131072 B (128 KiB)
Number of Erase Blocks: 256

jtag> detectflash 1
Query identification string:
Primary Algorithm Command Set and Control Interface ID Code: 0x0001 (Intel/Sharp Extended Command Set)
Alternate Algorithm Command Set and Control Interface ID Code: 0x0000 (null)
Query system interface information:
Vcc Logic Supply Minimum Write/Erase or Write voltage: 2700 mV
Vcc Logic Supply Maximum Write/Erase or Write voltage: 3600 mV
Vpp [Programming] Supply Minimum Write/Erase voltage: 0 mV
Vpp [Programming] Supply Maximum Write/Erase voltage: 0 mV
Typical timeout per single byte/word program: 64 us
Typical timeout for maximum-size multi-byte program: 128 us
Typical timeout per individual block erase: 1024 ms
Typical timeout for full chip erase: 0 ms
Maximum timeout for byte/word program: 256 us
Maximum timeout for multi-byte program: 1024 us
Maximum timeout per individual block erase: 4096 ms
Maximum timeout for chip erase: 0 ms
Device geometry definition:
Device Size: 33554432 B (32768 KiB, 32 MiB)
Flash Device Interface Code description: 0x0002 (x8/x16)
Maximum number of bytes in multi-byte program: 32
Number of Erase Block Regions within device: 1
Erase Block Region Information:
Region 0:
Erase Block Size: 131072 B (128 KiB)
Number of Erase Blocks: 256

I flashed the Test_bootldr.img with urjtag.

CODE

jtag> flashmem 0 Test_bootldr.img
Manufacturer: Intel
Chip: 28F256J3A
program:

block 0 unlocked
erasing block 0: 0
addr: 0x0001F000
block 1 unlocked
erasing block 1: 0
addr: 0x0003FFFE
verify:
addr: 0x0003FFFE
Done.

Urjtag knows the Chip! "28F256J3A" The other jtag tool only said "Chip: Unknown (0x1D)!"

After flashing the bootloader there is this output on the serial console:

CODE

U3
@00000348
F04000000

*MTST
00000001
00000002
00000004
00000008
00000010
00000020
00000040
00000080
00000100
00000200
00000400
00000800
00001000
00002000
00004000
00008000
00010000
00020000
00040000
00080000
00100000
00200000
00400000
00800000
01000000
02000000
04000000
08000000
10000000
20000000
40000000
80000000
MBK2
00000001
0000E59F
00000002
0000E59F
00000004
0000E59F
00000008
0000E59F
00000010
0000E59F
00000020
0000E59F
00000040
0000E59F
00000080
0000E59F
00000100
0000E59F
00000200
0000E59F
00000400
0000E59F
00000800
0000E59F
00001000
0000E59F
00002000
0000E59F
00004000
0000E59F
00008000
0000E59F
00010000
0001E59F
00020000
0002E59F
00040000
0004E59F
00080000
0008E59F
00100000
0010E59F
00200000
0020E59F
00400000
0040E59F
00800000
0080E59F
01000000
0100E59F
02000000
0200E59F
04000000
0400E59F
08000000
0800E59F
10000000
1000E59F
20000000
2000E59F
40000000
4000E59F
80000000
8000E59F
ENDM
STKP
C19F3FF0
sett▒▒g flashword=50000000
Flash style = 1x16
verify flash size...
btflash_init: mfrid=00000089
devid=0000001D
mfrid=00000089
deviceid=0000001D
walking flash descriptors (1x16)
btflash_init: FAILED! Unknown flasj type!
Read back MQ200 ID is 0x4BE00C02

Correct Device ID should be 0x02004D51. - retrying
Rebooting...

After that the simpad restarts again and again, everytime with the same output on the serial console. Any ideas what I have to do?

regards,
burn

[mr_nice]

hm, the good news is you can flash the flash now. the bad news bootldr cannot handle it :/
i don't know what is the latest version of bootldr for the simpad I once saved this one [1]
Slims and I tried to port uboot [2] [5] and redboot (Slims alone) [3] [4] to the simpad but both are not stable but maybe easier to patch for you.
For all 3 you will need to write a patch for the flash.
uboot is the most common on other devices nowerdays.

best regards
nice

1 http://linuxtogo.org/~mr_nice/simpad/saved.stuff/Bootloader/
2 http://opensimpad.org/index.php/U-boot
3 http://opensimpad.org/index.php/RedBoot
4 http://git.linuxtogo.org/?p=mr_nice/redboot/.git;a=summary
5 http://git.linuxtogo.org/?p=mr_nice/u-boot/.git;a=summary

[burn79]

Status report: after some problems installing a cross compiler to build a new uboot bootloader, I did some compiling tests. But at this time my selfmade bootloader doesn't work.
After pressing the power button on the simpad, the background-light of the display shortly lights up, but there is no output on the serial console.

I don't give up!

[mr_nice]

hi,

In theory you should only need to replace [1] those lines (simpad.h).

CODE

#define PHYS_FLASH_SIZE         0x02000000      /* 32 MB */
#define PHYS_FLASH_BANK_SIZE    0x01000000      /* 16 MB Banks */
#define PHYS_FLASH_SECT_SIZE    0x00020000      /* 128 KB sectors */

here [2] is a short description about how I build the loader a year ago

happy hacking
nice

1 http://git.linuxtogo.org/?p=mr_nice/u-boot...db2801abc8#l148

2 http://begu.org/?p=36

[jochen]

hi,

In theory you should only need to replace [1] those lines (simpad.h).

CODE

#define PHYS_FLASH_SIZE         0x02000000      /* 32 MB */
#define PHYS_FLASH_BANK_SIZE    0x01000000      /* 16 MB Banks */
#define PHYS_FLASH_SECT_SIZE    0x00020000      /* 128 KB sectors */

here [2] is a short description about how I build the loader a year ago

happy hacking
nice

1 http://git.linuxtogo.org/?p=mr_nice/u-boot...db2801abc8#l148

2 http://begu.org/?p=36

I updated the U-Boot loader. This should autodetect FLASH and RAM size. Current GIT is on:

http://git.bocc.de/cgi-bin/gitweb.cgi?p=u-...fs/heads/simpad

A precompiled binary is at http://www.bocc.de/u-boot.bin

Thanks,
Jochen

[mr_nice]

Thanks for the update
Do you have a simpad with the a flash mod?
I hope I find some time to test the loader (currently uni is eating all my time )

If you like to further hack at the uboot front - adding some wake up code would be awesome!

[jochen]

Thanks for the update
Do you have a simpad with the a flash mod?
I hope I find some time to test the loader (currently uni is eating all my time )

If you like to further hack at the uboot front - adding some wake up code would be awesome!

My SIMpad is a CL4 with an additional flash chip added to the board.

Currently, I'm running U-Boot and OpenWRT on this device:

CODE

U-Boot 2010.03-00150-g9d7ee52-dirty (Apr 17 2010 - 12:00:42)

DRAM:  16 MB
Flash: 32 MB
MQ200: Initialization start
MQ200: Initialization finished
In:    serial
Out:   serial
Err:   serial
Hit any key to stop autoboot:  3  2  1  0
## Booting kernel from Legacy Image at 00060000 ...
   Image Name:   Linux-2.6.32.12
   Image Type:   ARM Linux Kernel Image (uncompressed)
   Data Size:    824232 Bytes = 804.9 kB
   Load Address: c0008000
   Entry Point:  c0008000
   Verifying Checksum ... OK
   Loading Kernel Image ... OK
OK

Starting kernel ...

Uncompressing Linux... done, booting the kernel.
Linux version 2.6.32.12 (jochen@dev1.bocc.de) (gcc version 4.3.4 (GCC) ) #2 Tue Apr 27 15:19:12 CEST 2010
CPU: StrongARM-1110 [6901b118] revision 8 (ARMv4), cr=c000717f
CPU: VIVT data cache, VIVT instruction cache
Machine: Simpad
Ignoring unrecognised tag 0x54410008
Memory policy: ECC disabled, Data cache writeback
Built 1 zonelists in Zone order, mobility grouping off.  Total pages: 4064
Kernel command line: console=ttySA0,115200n8
PID hash table entries: 64 (order: -4, 256 bytes)
Dentry cache hash table entries: 2048 (order: 1, 8192 bytes)
Inode-cache hash table entries: 1024 (order: 0, 4096 bytes)
Memory: 16MB = 16MB total
Memory: 13056KB available (2016K code, 126K data, 100K init, 0K highmem)
Hierarchical RCU implementation.
NR_IRQS:49
console [ttySA0] enabled
Calibrating delay loop... 137.21 BogoMIPS (lpj=686080)
Mount-cache hash table entries: 512
CPU: Testing write buffer coherency: ok
NET: Registered protocol family 16
bio: create slab <bio-0> at 0
Switching to clocksource oscr
NET: Registered protocol family 2
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 512 (order: 0, 4096 bytes)
TCP bind hash table entries: 512 (order: -1, 2048 bytes)
TCP: Hash tables configured (established 512 bind 512)
TCP reno registered
NET: Registered protocol family 1
NetWinder Floating Point Emulator V0.97 (double precision)
squashfs: version 4.0 (2009/01/31) Phillip Lougher
Registering mini_fo version $Id$
JFFS2 version 2.2. (NAND) (SUMMARY)  © 2001-2006 Red Hat, Inc.
msgmni has been set to 25
io scheduler noop registered
io scheduler deadline registered (default)
mq200 video driver found Vendor: 0x4D51 Device: 0x200
MQ-200: DC00R = 0x0EF2082A
Serial: 8250/16550 driver, 2 ports, IRQ sharing disabled
Serial: SA11x0 driver
sa11x0-uart.1: ttySA1 at MMIO 0x80010000 (irq = 15) is a SA1100
sa11x0-uart.3: ttySA0 at MMIO 0x80050000 (irq = 17) is a SA1100
input: Touchscreen panel as /devices/virtual/input/input0
sa1100-0: Found 1 x16 devices at 0x0 in 16-bit bank
Intel/Sharp Extended Query Table at 0x0031
Intel/Sharp Extended Query Table at 0x0031
Using buffer write method
cfi_cmdset_0001: Erase suspend on write enabled
SA1100 flash: CFI device at 0x00000000, 16MiB, 16-bit
sa1100-1: Found 1 x16 devices at 0x0 in 16-bit bank
Intel/Sharp Extended Query Table at 0x0031
Intel/Sharp Extended Query Table at 0x0031
Using buffer write method
cfi_cmdset_0001: Erase suspend on write enabled
SA1100 flash: CFI device at 0x08000000, 16MiB, 16-bit
Concatenating MTD devices:
(0): "sa1100-0"
(1): "sa1100-1"
into device "sa1100"
RedBoot partition parsing not available
SA1100 flash: using static partition definition
Creating 4 MTD partitions on "sa1100":
0x000000000000-0x000000040000 : "u-boot"
0x000000040000-0x000000060000 : "u-boot env"
0x000000060000-0x000000160000 : "uimage"
0x000000160000-0x000002000000 : "rootfs"
mtd: partition "rootfs" set to be root filesystem
mtd: partition "rootfs_data" created automatically, ofs=240000, len=1DC0000
0x000000240000-0x000002000000 : "rootfs_data"
sa1100_udc: version Apr 27 2010
sa11x0-udc sa11x0-udc: initialized, rx fe000000 tx fe000020 irq 13
g_ether gadget: using random self ethernet address
g_ether gadget: using random host ethernet address
usb0: MAC f2:45:68:75:0b:c2
usb0: HOST MAC ee:04:46:8e:a4:2a
g_ether gadget: Ethernet Gadget, version: Memorial Day 2008
g_ether gadget: g_ether ready
sa11x0-udc sa11x0-udc: Resetting
TCP westwood registered
NET: Registered protocol family 17
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
VFS: Mounted root (squashfs filesystem) readonly on device 31:3.
Freeing init memory: 100K
Please be patient, while OpenWrt loads ...
- preinit -
Press the [f] key and hit [enter] to enter failsafe mode
- regular preinit -
switching to jffs2
mini_fo: using base directory: /
mini_fo: using storage directory: /overlay
- init -

Please press Enter to activate this console.


BusyBox v1.16.1 (2010-04-27 14:10:05 CEST) built-in shell (ash)
Enter 'help' for a list of built-in commands.

  _______                     ________        __
|       |.-----.-----.-----.|  |  |  |.----.|  |_
|   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
|_______||   __|_____|__|__||________||__|  |____|
          |__| W I R E L E S S   F R E E D O M
KAMIKAZE (bleeding edge, r21182) ------------------
  * 10 oz Vodka       Shake well with ice and strain
  * 10 oz Triple sec  mixture into 10 shot glasses.
  * 10 oz lime juice  Salute!
---------------------------------------------------
root@OpenWrt:/# PPP generic driver version 2.4.2
ip_tables: (C) 2000-2006 Netfilter Core Team
NET: Registered protocol family 24
nf_conntrack version 0.5.0 (205 buckets, 820 max)

root@OpenWrt:/# sa11x0-udc sa11x0-udc: Resetting
sa11x0-udc sa11x0-udc: Resetting
sa11x0-udc sa11x0-udc: Resetting
sa11x0-udc sa11x0-udc: Resetting
sa11x0-udc sa11x0-udc: Resetting
sa11x0-udc sa11x0-udc: Resetting
sa11x0-udc sa11x0-udc: Resetting
usbep0: I have been assigned address: 3
g_ether gadget: full speed config #1: CDC Subset/SAFE
ep0_queue: zero byte packet being queued. Setting DE and OPR end exiting
usbep0: Configured (OMP=00000040 IMP=00000040)
ep0_queue: zero byte packet being queued. Setting DE and OPR end exiting

root@OpenWrt:/# ifconfig
lo        Link encap:Local Loopback  
          inet addr:127.0.0.1  Mask:255.0.0.0
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)

usb0      Link encap:Ethernet  HWaddr F2:45:68:75:0B:C2  
          inet addr:192.168.1.12  Bcast:192.168.1.255  Mask:255.255.255.0
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:36 errors:0 dropped:0 overruns:0 frame:0
          TX packets:9 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:8428 (8.2 KiB)  TX bytes:2572 (2.5 KiB)

root@OpenWrt:/# ping 192.168.1.2
PING 192.168.1.2 (192.168.1.2): 56 data bytes
64 bytes from 192.168.1.2: seq=0 ttl=64 time=3.035 ms
64 bytes from 192.168.1.2: seq=1 ttl=64 time=3.596 ms
64 bytes from 192.168.1.2: seq=2 ttl=64 time=3.327 ms
64 bytes from 192.168.1.2: seq=3 ttl=64 time=3.108 ms
^C
--- 192.168.1.2 ping statistics ---
4 packets transmitted, 4 packets received, 0% packet loss
round-trip min/avg/max = 3.035/3.266/3.596 ms
root@OpenWrt:/#

All current code is on http://git.bocc.de.

Thanks,
Jochen