RIFF JTAG – JTAG Manager v1.36, RIFF Box firmware v1.27, GDB Server v1.05 released

07.10.2011   JTAG Manager v1.36, RIFF Box firmware v1.27 released

Whats new :

JTAG Manager 1.36
– Added fast presets for automatic selection of settings for most common operations on DCC Read/Write page
For this click Settings by Code button and select a desired preset from list and then click Apply Settings.
For example if user selects “Write Full Image into NAND memory” the valid settings on the DCC Read/Write page
for writting full images into devices with NAND memory will be automatically selected
– Fixed serious bug which caused resurrector DLLs which do upload data into RAM to upload broken data
For example DLLs which start Downlad Mode directly use this feature.
– Added feature to accept text name of memory chip from DCC Loader and display it (currently used to display eMMC memory product name)
– Fixed bug for resumming interrupted DCC Read: ifvcurrently cached file size was greater than > 2GB
(that is if read was interrupted on point when there was already more than 2GB of data read) the new reading data was not appended to the readout file end, but instead the file was corrupted.
– Fixed bug for saving big files (after reading on DCC Read/Write page): if size exceeded 0x7FFFFFFF bytes JTAG Manager show no free disk space error.
– Added TEGRA2 chipset selection in the Target list
– Fixed an issue with the resurrection progress bar: in some cases during resurrection operations the progress bar would always stay at 0%.

Firmware 1.27
– Added TEGRA2 debugging support (dual-core Cortex-A9)
– Added new breakpoint type: “address mismatch” which allows geniune single-stepping on Cortex-A8,A9 (CoreSight) targets
(thus GDB Server can now perform low-level single step commands)

RIFF GDB Server v1.05
– Added Thumb2 instructions CBNZ and CBZ for single stepping
– Added more Thumb2 32-bit branch exctructions for single stepping
– Added CoreSight low-level signle-stepping support (at least RIFF BOX Firmware v1.27 is required)

RIFF JTAG – RIFF Box firmware v1.21 released

21.03.2011  RIFF Box firmware v1.21 released

Whats new:

  • Added RX-polling feature (debugger-to-target) for PXA3XX DCC transfers.

RIFF BOX firmware is able now to wait (if resurrector DLL will request so) for PXA3XX target to be ready to accept
next packet over DCC: this feature slows down a little the JTAG-to-Target DCC
transfers but guaranties no packets loss for slow clocked targets;

Please click “Check For Updates” button in order to download and apply new files. Closing all running application before starting update process is recommended.

RIFF Box JTAG Manager v1.23, RIFF Box Firmware v1.17 released

07.02.2011 RIFF Box JTAG Manager v1.23, RIFF Box firmware v1.17

Firmware 1.17

* Optimized DCC transfers (debugger-to-target) for ARM9 cores (~64,3% speed increase)
* Added RX-polling feature (debugger-to-target) for ARM9 DCC transfers.

RIFF BOX firmware is able now to wait (if resurrector DLL will request so) for ARM9 target to be ready to accept next packet over DCC: this feature slows down a little the JTAG-to-ARM9 DCC transfers but guaranties no packets loss for slow clocked targets;

JTAG Manager 1.23

* Improved DCC flashing functionality (for DCC Loaders that work in targets with a small RAM capacity);
* Added 4 very low RTCK Sampling frequencies (20kHz, 40kHz, 60kHz and 80kHz) for some extreme cases
* Fixed another bug in the optimized DLL loading scheme;
* Increased ERASE waiting timeout (for slow NOR flash chips) so now erase operation for such chips will go successully and will not result in erase timeout
* Added “Usefull plugins” page;

“Usefull Plugins” will be new feature, we hope to release first one during this week. So stay tuned.

As usually, click the “Check for Updates” button to obtain latest files.

RIFF JTAG – JTAG Manager v1.15, RIFF Box firmware v1.14 released

05.10.2010 JTAG Manager v1.15, RIFF Box firmware v1.14 released

Whats new:

Firmware 1.14
– code is optimized to avoid deadlocks in Cortex-A8 handling routines (deadlocks appear due to communication errors);
– Cortex-A8 debug is now available in ARM/Thumb modes (use the GDBServer for this);
– ARM946E core support is added (which is mostly a debug access to the CP15 coprocessor);
– added new RESET type for ARM9xxx cores: HW_RESET – targets which have dedicated TRST can be halted
at the very first instruction core executes after the system reset signal (NRST) was applied.
Importance of this: if some harmfull/”unlucky” code is written to a boot zone of a device, which (code)
on the device startup results in h/w blocking, jtag disabling, core resetting, etc., then connecting via JTAG to such target
becomes an impossible task, since JTAG host has not enough time to halt the target before it becomes unusable by a harmfull code.
Using HW_RESET type ensures the target’s core does not execute even a single instruction after the reset signal (NRST) was applied.
– removed bug which could cause deadlocks of box during a h/w script execution.
JTAG Manager 1.15
– added extended flash chip info handling for example for NOR memories support by DCC Loaders;
– added Resume feature for interrupted writes (which could be performed by WriteMemory button (DCC Page) or by Resurrector DLL):
if target loses power, connection is broken or any other malfuntion happens during write operation, software will store current
write context; you can reconnect target and start write/resurrection again – software will prompt you whether to start again or to continue write from the
interrupted point. This feature is applicable to all write conditions (writes by resurrectors, or manual writes through the DCC Read/Write page features).
– added 3 buttons on Box Service page for quick access to the RIFF’s manual PDFs;
– fixed a not harmfull bug inside of the core reset (when NRST is applied) command sequence;
– added feature: if write error appears and ‘Ignore’ is choosen, user can order software to apply ‘Ignore’ for further write errors automatically;
– added standalone setup dialog for automatic write errors handling;
– added BAD Blocks Handling feature using the following algo:
If there are data chunks A B C & D to be written into blocks 1 2 3 & 4 respectively, and for example block 3 is found to be BAD, then software will write:
data A -> into block 1
data B -> into block 2
——–> block 3 is bypassed (and marked as bad)
data C -> into block 4
data D -> into block 5
It’s clear that block 5 was not intended to accept the data D. Thus:
– if block 5 had some other info then this info will be lost and will be overwritten with the data D.
– if block 5 was free for use, then nothing bad happens.

So, main conclusions:
1. BAD Blocks Handling is IMPOSSIBLE (POINTLESS) for writting FULL images (user can chose only ‘Ignore’ option)
2. When writting data chunks of length less than full flash size user is prompted to select 2 options:
a) Overlap (in example above this would mean to write data D into block 5)
b) Cut Excess (in example above this would mean to not touch original 5th block’s contents and just discard data D to be written)

************************************************** ************************************************** *********************************
NOTE: Bad block handling is allowed by default only through the DCC Read/Write page write.
—– Old Resurrector DLLs were not adapted for this feature, thus Bad Block handling will be implemented only in new DLLs.
If you meet a Bad Block Error during resurrection contact support in order to update DLL to a Bad Blocks adapted version.
************************************************** ************************************************** *********************************

– solved problem which caused update module to display files for download which were already up-to-date for cases
when JTAG Manager was installed on FAT (FAT/FAT32) file systems.
– very dangerous bug fixed: “Irnored” word misspelling is corrected to the valid “Ignored” one

RIFF JTAG – Samsung WAVE S8500 Unbrick/Repair beta support

31.08.2010 Samsung WAVE S8500 Unbrick/Repair boot beta support

This is beta test, and it is not available trough “Check for updates” button.

What You need to repair it ?

– RIFF Box
– Micro USB Cable
– Full charged battery (4.2v)
– Multiloader
– USB Drivers
– Firmware files


– Solder RIFF JTAG cable (use very thin wires for PCB, because of battery)
– Insert battery
– Connect Micro USB cable to phone and PC port
– Start the JTAG Manager and select Samsung S8500 PDA from the list
– Switch to “DCC Read/Write” TAB
– Set everything as on photo bellow:

– Press “Read memory” and wait to be finished
– Now switch to “JTAG Read/Write” TAB and press “Connect&Get ID” then “Halt the Target” buttons
– Click “Execute Script” and select CMM file
– Press “Run Script” button

– Ram loader will be uploaded and after its uploaded, phone will automaticaly enter download mode, and detected by PC
– IMPORTANT ! ! ! Now You must disconnect JTAG Cable from RIFF Box
– Start Multiloader 5.62, set “Boot change” and select Boot files folder
– Press download – and wait for process to be finished
– Now phone contains valid bootloader, and can be flashed, so You can desolder JTAG wires from PCB

To enter download mode hold LOCK+Volume Down + Power on Keys.

Problems which You may have:

– Target not detected – check all wires and tp, check battery, 4.2v is a MUST !
– Wrong DCC answer – low battery, or TCK too high, You can use 100KHz TCK too !
– “It not work” – no idea about this lol

RIFF JTAG – JTAG Manager v1.13, JTAG Firmware v1.13 released

27.08.2010 JTAG Manager v1.13, JTAG Firmware v1.13 released

Whats new:

JTAG Manger 1.13
– Added feature to display FLASH chip capacity information
– Added feature ‘Auto FullFlash size’ to DCC Read/Write page for simplified Full Images reading/writting
– Fixed DCC Loader Settings dialog
– Added resurrector interface function ‘GetChipSize’ which now enables resurrector DLL to receive target’s memory size
for proper data selection for flashing (like in Huawei Modem E1550 64/128MB versions);

Firmware 1.13
– fixed ARM9 core debug capabilities when core is in Thumb mode
(when ARM9 core was entering debug from Thumb state some CPSR register’s flags were lost, same was when core was leaving debug into Thumb mode);
– FFFFFFEE instruction was added into HAS scripts processing module;

Click “Check for Updates” button to download new JTAG Manager and JTAG firmware.