求助: WHR-G54S 改8M闪存 刷不了8M固件.

星风

CFE转过来了.
按RESET开机
192.168.11.1,TFTP刷4M番茄.正常

听坛友说的,从WEB升级番茄8M版.10多分钟依然亮红灯.没刷好

请问,是不是要飞地址线什么的才能认出8M?

星风

F:\jtag>brjtag -probeonly /nobreak

===============================================
Broadcom EJTAG Debrick Utility v1.8c-hugebird
===============================================

Probing bus ... Done

Instruction Length set to 8

CPU assumed running under LITTLE endian

CPU Chip ID: 00000101001101010010000101111111 (0535217F)
*** Found a Broadcom manufactured BCM5352 REV 01 CPU ***

    - EJTAG IMPCODE ....... : 00000000100000000000100100000100 (00800904)
    - EJTAG Version ....... : 1 or 2.0
    - EJTAG DMA Support ... : Yes
    - EJTAG Implementation flags: R4k MIPS32

Issuing Processor / Peripheral Reset ... Done
Enabling Memory Writes ... Done
Halting Processor ... Skipped
Clearing Watchdog ... Done
Loading CPU Configuration Code ... Skipped

Probing Flash at Address: 0x1FC00000 ...
Detected Chip ID (VenIDevID = 047E : 0201)
*** Found a CFI Compatiable Flash Chip from Fujitshu



*** REQUESTED OPERATION IS COMPLETE ***


F:\jtag>brjtag -flash:cfe

===============================================
Broadcom EJTAG Debrick Utility v1.8c-hugebird
===============================================

Probing bus ... Done

Instruction Length set to 8

CPU assumed running under LITTLE endian

CPU Chip ID: 00000101001101010010000101111111 (0535217F)
*** Found a Broadcom manufactured BCM5352 REV 01 CPU ***

    - EJTAG IMPCODE ....... : 00000000100000000000100100000100 (00800904)
    - EJTAG Version ....... : 1 or 2.0
    - EJTAG DMA Support ... : Yes
    - EJTAG Implementation flags: R4k MIPS32

Issuing Processor / Peripheral Reset ... Done
Enabling Memory Writes ... Done
Halting Processor ... <rocessor Entered Debug Mode!> ... Done
Clearing Watchdog ... Done
Loading CPU Configuration Code ... Skipped

Probing Flash at Address: 0x1FC00000 ...
Detected Chip ID (VenIDevID = 047E : 0201)
*** Found a CFI Compatiable Flash Chip from Fujitshu

    - Flash Chip Window Start .... : 1C000000
    - Flash Chip Window Length ... : 00800000
    - Selected Area Start ........ : 1C000000
    - Selected Area Length ....... : 00040000

*** You Selected to Flash the CFE.BIN ***

=========================
Flashing Routine Started
=========================
Total Blocks to Erase: 11

Erasing block: 1 (addr = 1c000000)...Done
Erasing block: 2 (addr = 1c002000)...Done
Erasing block: 3 (addr = 1c004000)...Done
Erasing block: 4 (addr = 1c006000)...Done
Erasing block: 5 (addr = 1c008000)...Done
Erasing block: 6 (addr = 1c00a000)...Done
Erasing block: 7 (addr = 1c00c000)...Done
Erasing block: 8 (addr = 1c00e000)...Done
Erasing block: 9 (addr = 1c010000)...Done
Erasing block: 10 (addr = 1c020000)...Done
Erasing block: 11 (addr = 1c030000)...Done

Loading CFE.BIN to Flash Memory...
Done  (CFE.BIN loaded into Flash Memory OK)

=========================
Flashing Routine Complete
=========================
elapsed time: 639 seconds


*** REQUESTED OPERATION IS COMPLETE ***


F:\jtag>brjtag -erase:nvram

===============================================
Broadcom EJTAG Debrick Utility v1.8c-hugebird
===============================================

Probing bus ... Done

Instruction Length set to 8

CPU assumed running under LITTLE endian

CPU Chip ID: 00000101001101010010000101111111 (0535217F)
*** Found a Broadcom manufactured BCM5352 REV 01 CPU ***

    - EJTAG IMPCODE ....... : 00000000100000000000100100000100 (00800904)
    - EJTAG Version ....... : 1 or 2.0
    - EJTAG DMA Support ... : Yes
    - EJTAG Implementation flags: R4k MIPS32

Issuing Processor / Peripheral Reset ... Done
Enabling Memory Writes ... Done
Halting Processor ... <rocessor Entered Debug Mode!> ... Done
Clearing Watchdog ... Done
Loading CPU Configuration Code ... Skipped

Probing Flash at Address: 0x1FC00000 ...
Detected Chip ID (VenIDevID = 047E : 0201)
*** Found a CFI Compatiable Flash Chip from Fujitshu

    - Flash Chip Window Start .... : 1C000000
    - Flash Chip Window Length ... : 00800000
    - Selected Area Start ........ : 1C7E0000
    - Selected Area Length ....... : 00020000

*** You Selected to Erase the NVRAM.BIN ***

=========================
Erasing Routine Started
=========================
Total Blocks to Erase: 9

Erasing block: 134 (addr = 1c7e0000)...Done
Erasing block: 135 (addr = 1c7f0000)...Done
Erasing block: 136 (addr = 1c7f2000)...Done
Erasing block: 137 (addr = 1c7f4000)...Done
Erasing block: 138 (addr = 1c7f6000)...Done
Erasing block: 139 (addr = 1c7f8000)...Done
Erasing block: 140 (addr = 1c7fa000)...Done
Erasing block: 141 (addr = 1c7fc000)...Done
Erasing block: 142 (addr = 1c7fe000)...Done
=========================
Erasing Routine Complete
=========================
elapsed time: 5 seconds


*** REQUESTED OPERATION IS COMPLETE ***



F:\jtag>brjtag -probeonly /nobreak

===============================================
Broadcom EJTAG Debrick Utility v1.8c-hugebird
===============================================

Probing bus ... Done

Instruction Length set to 8

CPU assumed running under LITTLE endian

CPU Chip ID: 00000101001101010010000101111111 (0535217F)
*** Found a Broadcom manufactured BCM5352 REV 01 CPU ***

    - EJTAG IMPCODE ....... : 00000000100000000000100100000100 (00800904)
    - EJTAG Version ....... : 1 or 2.0
    - EJTAG DMA Support ... : Yes
    - EJTAG Implementation flags: R4k MIPS32

Issuing Processor / Peripheral Reset ... Done
Enabling Memory Writes ... Done
Halting Processor ... Skipped
Clearing Watchdog ... Done
Loading CPU Configuration Code ... Skipped

Probing Flash at Address: 0x1FC00000 ...
Detected Chip ID (VenIDevID = 047E : 0201)
*** Found a CFI Compatiable Flash Chip from Fujitshu



*** REQUESTED OPERATION IS COMPLETE ***


F:\jtag>brjtag -flash:cfe

===============================================
Broadcom EJTAG Debrick Utility v1.8c-hugebird
===============================================

Probing bus ... Done

Instruction Length set to 8

CPU assumed running under LITTLE endian

CPU Chip ID: 00000101001101010010000101111111 (0535217F)
*** Found a Broadcom manufactured BCM5352 REV 01 CPU ***

    - EJTAG IMPCODE ....... : 00000000100000000000100100000100 (00800904)
    - EJTAG Version ....... : 1 or 2.0
    - EJTAG DMA Support ... : Yes
    - EJTAG Implementation flags: R4k MIPS32

Issuing Processor / Peripheral Reset ... Done
Enabling Memory Writes ... Done
Halting Processor ... <rocessor Entered Debug Mode!> ... Done
Clearing Watchdog ... Done
Loading CPU Configuration Code ... Skipped

Probing Flash at Address: 0x1FC00000 ...
Detected Chip ID (VenIDevID = 047E : 0201)
*** Found a CFI Compatiable Flash Chip from Fujitshu

    - Flash Chip Window Start .... : 1C000000
    - Flash Chip Window Length ... : 00800000
    - Selected Area Start ........ : 1C000000
    - Selected Area Length ....... : 00040000

*** You Selected to Flash the CFE.BIN ***

=========================
Flashing Routine Started
=========================
Total Blocks to Erase: 11

Erasing block: 1 (addr = 1c000000)...Done
Erasing block: 2 (addr = 1c002000)...Done
Erasing block: 3 (addr = 1c004000)...Done
Erasing block: 4 (addr = 1c006000)...Done
Erasing block: 5 (addr = 1c008000)...Done
Erasing block: 6 (addr = 1c00a000)...Done
Erasing block: 7 (addr = 1c00c000)...Done
Erasing block: 8 (addr = 1c00e000)...Done
Erasing block: 9 (addr = 1c010000)...Done
Erasing block: 10 (addr = 1c020000)...Done
Erasing block: 11 (addr = 1c030000)...Done

Loading CFE.BIN to Flash Memory...
Done  (CFE.BIN loaded into Flash Memory OK)

=========================
Flashing Routine Complete
=========================
elapsed time: 639 seconds


*** REQUESTED OPERATION IS COMPLETE ***


F:\jtag>brjtag -erase:nvram

===============================================
Broadcom EJTAG Debrick Utility v1.8c-hugebird
===============================================

Probing bus ... Done

Instruction Length set to 8

CPU assumed running under LITTLE endian

CPU Chip ID: 00000101001101010010000101111111 (0535217F)
*** Found a Broadcom manufactured BCM5352 REV 01 CPU ***

    - EJTAG IMPCODE ....... : 00000000100000000000100100000100 (00800904)
    - EJTAG Version ....... : 1 or 2.0
    - EJTAG DMA Support ... : Yes
    - EJTAG Implementation flags: R4k MIPS32

Issuing Processor / Peripheral Reset ... Done
Enabling Memory Writes ... Done
Halting Processor ... <rocessor Entered Debug Mode!> ... Done
Clearing Watchdog ... Done
Loading CPU Configuration Code ... Skipped

Probing Flash at Address: 0x1FC00000 ...
Detected Chip ID (VenIDevID = 047E : 0201)
*** Found a CFI Compatiable Flash Chip from Fujitshu

    - Flash Chip Window Start .... : 1C000000
    - Flash Chip Window Length ... : 00800000
    - Selected Area Start ........ : 1C7E0000
    - Selected Area Length ....... : 00020000

*** You Selected to Erase the NVRAM.BIN ***

=========================
Erasing Routine Started
=========================
Total Blocks to Erase: 9

Erasing block: 134 (addr = 1c7e0000)...Done
Erasing block: 135 (addr = 1c7f0000)...Done
Erasing block: 136 (addr = 1c7f2000)...Done
Erasing block: 137 (addr = 1c7f4000)...Done
Erasing block: 138 (addr = 1c7f6000)...Done
Erasing block: 139 (addr = 1c7f8000)...Done
Erasing block: 140 (addr = 1c7fa000)...Done
Erasing block: 141 (addr = 1c7fc000)...Done
Erasing block: 142 (addr = 1c7fe000)...Done
=========================
Erasing Routine Complete
=========================
elapsed time: 5 seconds


*** REQUESTED OPERATION IS COMPLETE ***

378159128

WHR-G54S要飞FLASH的A21地址线的


可以参照下面图来飞线  我已经改过2台成功

星风

谢谢楼上的
不过,
太高深了.
我不敢刮U,
所以寄回卖家叫卖家帮改了.

我已经很努力的换上8M的FLASH,并且JTAG刷CFE,然后再固件...
听论坛的其它人说,TFTP刷4M固件,然后换WEB升级刷8M,结果还是砖了.呵呵