Debug Port
From OpenEZX
On the Rokr E2 and A1200 boards there are two debug ports. One on the front and one on the back of the Rokr E2. The one on the front is the debug/jtag port for the applications processor (PXA270). It is located on the opposite side from the key-lock switch. The one on the back is assumed to be the debug/jtag port for the baseband. For the A1200 there are two debug ports on the same side of the board next to one another. The top one is the debug port for the PXA270 Applications Processor.
The connector for either phone is made by FOXCONN, QT510166-L010-7F. The male connector that you will need to access the port is QT500166-L020-9F (Spec).
Applications processor debug port for the Rokr E2:
?(NC) GND ST_TDX VSUPPLY
?(NC) \ ?(NC) | ?(NC) | ST_RXD /
\ \ \ | | | / /
1 2 3 4 5 6 7 8 |
| | | | | | | | |
####################################### |
# | | | | | | | | # |
# ################################# # |
# ################################# # | <-Side of
# ################################# # | the PCB
# | | | | | | | | # |
####################################### |
| | | | | | | | |
16 15 14 13 12 11 10 9 |
/ / / | | \ \ \
nTRST / TDO | ?(NC) \ nRESET \
TDI TMS TCK ?(NC)
Applications processor debug port for the A1200:
| |<-Side of PCB, Top port | | nRESET ?(NC) TDO nTRST | ?(NC) \ TCK | TMS | TDI / | \ \ \ | | | / / | 1 2 3 4 5 6 7 8 | | | | | | | | | | ####################################### | # | | | | | | | | # | # ################################# # | # ################################# # | # ################################# # | # | | | | | | | | # | ####################################### | | | | | | | | | | 16 15 14 13 12 11 10 9 | / / / | | \ \ \ | VSUPPLY / ST_TDX | GND \ ?(NC) \ | ST_RXD ?(NC) ?(NC) ?(NC) |
The lines marked NC are either inputs to an unknown source or they are no connects.
The ST_UART signals ST_TDX and ST_RDX, GPIO 47 and 46 respectively, are configured as a serial port in sumantra.c of the kernel and hw_init.c of the boot loader. Please see the Serial console page to see how to wire to this UART. The FFUART, BTUART, and the ST_UART all appear to be configured, but I do not know what the FFUART is connected to.
nTRST, TDI, TDO, TMS, TCK, nRESET are JTag signals. To use JTAG on the phones an external power source was added to keep the Applications Processor voltage up when the phone ended a low power state. I applied 2.9V to V_Reff and VCC on the Rokr E2 and A1200.
Serial port via Debug port:
Serial port output via PL2303HX with internal level shifter.
Consider yourself LARTed! blob version 2.0.5-pre2-Intel for barbados Copyright (C) 1999 2000 2001 Jan-Derk Bakker and Erik Mouw blob comes with ABSOLUTELY NO WARRANTY; read the GNU GPL for details. This is free software, and you are welcome to redistribute it under certain conditions; read the GNU GPL for details. ELF sections layout: 0x5c000000 - 0x5c00950c .text 0x5c00950c - 0x5c009534 .rodata 0x5c00acc8 - 0x5c00cbc4 .data 0x5c00cbc4 - 0x5c00cbc4 .got 0x5c00cbc4 - 0x5c00cd90 .commandlist 0x5c00cd90 - 0x5c00cdf0 .initlist 0x5c00cdf0 - 0x5c00ce08 .exitlist 0x5c00ce08 - 0x5c00ce38 .ptaglist 0x5c010000 - 0x5c021dac .bss 0x5c01fdac - 0x5c021dac .stack (in .bss) Current stack pointer: 0x5c021b0c check Option 1,2 in/out by GPDR0 is f38b0010 Entering AP normal start up ... Blob memory address: 0xa0de007c. Booting Non-XIP RAMOS Kernel!!!Autoboot in progress, press any key to stop *** a rgv[0] = boot SDRAM is 32MB Starting kernel ... Uncompressing Linux........................................................ done , booting the kernel.
blob command list:
Autoboot aborted Type "help" to get a list of commands blob> help *** argv[0] = help The following commands are supported: * reset * reboot * boot * download * go * xdownload * flash * speed * status * fill * memtest * reload * reblob * fwrite * ferase * clockinfo * memcpy * poke * peek * dump * bitchg * call * help Use "help command" to get help on a specific command
Categories: Rokr E2 | A1200 | Hardware | Development
