yashsingh1/xdaforums huggingface dataset:
[Acer Iconia A700 and A510] darkspr1te:
Hi All

I recently bricked my Acer A210 and it's running in APX mode. In a effort to bring it back to life i have been researching the jtag setup.

As you can see from this image, on the rigth hand side is JDBUG1, with pin 1 mark at the top.

Now this is a A510 in the image, but the same 10 pin connect is on my A210 and possibly on the A700,

Now using many different tegra3 manuals and dev board guides i've reversed the jtag connector, well mostly, I've some more to confirm but i though i would put this out there in case any one has any thing to add, i will also upload as much info as i have and the pdf in case any one want to confirm my research,

Hopefully we can fix without $$$$ hardware.

I have a o'scope (30 years old crt based) ,arduino, buspirate, Open Source logic sniffer.

The latter two from dangerous prototypes, the main one i will use is the bus pirate in jtag mode.

I have already connected the buspirate up but no results i could rely on so i went back to research, here is what i've turned up ,

1 1.8v Tegra System Voltage
2 TRST (on A210 a 0R resistor is missing or 'un-stuffed' or not 'stuffed', see info about tying to gnd for CPU access )
3 10K to +v 1.8v for TDI
4 10K to +v 1.8v for TMS
5 100K to GND for TCK
6 10K to GND for RTCK (Return clock , see [URL="http://en.wikipedia.org/wiki/Joint_Test_Action_Group"]RTCK wiki[/URL] )
7 TDO (direct into CPU )
8 HOT_RESET (1.8v)
9 ON_KEY# (+5v )
10 GND

Now this information has been gleamed from many sources.

please see attached images for now, on the A210 the tracks are more exposed but I think its safe to assum the debug connector pin outs would be the same for the 3 devices,

EDIT** Ive found the A510 Schematic Online A510 Schematic - See Page 7 for JTAG

darkspr1te
[Acer Iconia A700 and A510] darkspr1te:
<place holder for additional files>

Various Tegra(3) Files

Tegra Files / Manuals / PDFs ETC
[Acer Iconia A700 and A510] herogjan:
Very interesting stuff, unfortunately my knowledge is not sufficient to contribute. But i'll definitely follow this topic, hope you can fix it.

Always an awesome moment went you succeeded "DIY" without spending big bucks.
[Acer Iconia A700 and A510] darkspr1te:
Yes, when We have that eureka moment and it works it's a great feeling, sadly I am not having that moment yet with the Acer. But I wont give up.

I am taking a break from the actual JTAG hacking part for Xmas and just to give myself a break from IT, I will return to the project in the new year.

Darkspr1te
[Acer Iconia A700 and A510] imtheyoyo:
What can we do with JTAG on our Acer Axxx ?

Envoyé de mon GT-I9505 en utilisant Tapatalk
[Acer Iconia A700 and A510] Dc0de:
We will be able to turn it into the most powerful tablet and take over the world *evil laugh*. Or we could recover our bricked tablets that are in apx mode like he said in post 1.
[Acer Iconia A700 and A510] darkspr1te:
Hi All,

I've made some progress

> scan_chain
TapName Enabled IdCode Expected IrLen IrCap IrMask
-- ------------------- -------- ---------- ---------- ----- ----- ------
0 tegra3.arm Y 0x330173d7 0x330173d7 2 0x01 0x01
> jtag init
JTAG tap: tegra3.arm tap/device found: 0x330173d7 (mfg: 0x1eb, part: 0x3017, ver: 0x3)
> halt
Halt timed out, wake up GDB.
timed out while waiting for target halted
in procedure 'halt'

Cant get cpu to halt, could be due to many things, am i taking to the right core? it the jtag instructions i am sending the right ones for the arm/corex cores

right now, I dont know, most users dont document building the jtag instruction up so it's going to be new for me.

darkspr1te
[Acer Iconia A700 and A510] darkspr1te:
Hi All,

I've made some progress

> scan_chain
TapName Enabled IdCode Expected IrLen IrCap IrMask
-- ------------------- -------- ---------- ---------- ----- ----- ------
0 tegra3.arm Y 0x330173d7 0x330173d7 2 0x01 0x01
> jtag init
JTAG tap: tegra3.arm tap/device found: 0x330173d7 (mfg: 0x1eb, part: 0x3017, ver: 0x3)
> halt
Halt timed out, wake up GDB.
timed out while waiting for target halted
in procedure 'halt'

Cant get cpu to halt, could be due to many things, am i taking to the right core? it the jtag instructions i am sending the right ones for the arm/corex cores

right now, I dont know, most users dont document building the jtag instruction up so it's going to be new for me.

EDIT** Seems what I am looking at here is the JTAG Route controller (similar to TI's ICEPICK router controller) but as I have not information yet on how to shift the router controller I am lost, Anyone got any input ?

for the ICEPICK it does the following commands to setup the router controller

# Utilities for TI ICEpick-C ... used in DaVinci, OMAP3, and more.

# jrc	== TAP name for the ICEpick
# port	== a port number, 0..15
proc icepick_c_tapenable {jrc port} {

# NOTE: it's important not to enter RUN/IDLE state until
# done sending these instructions and data to the ICEpick.
# And never to enter RESET, which will disable the TAPs.

# select router
irscan $jrc 7 -endstate IRPAUSE
drscan $jrc 8 0x89 -endstate DRPAUSE

# set ip control
irscan $jrc 2 -endstate IRPAUSE
drscan $jrc 32 [expr 0xa0002108 + ($port << 24)] -endstate DRPAUSE

irscan $jrc 0x3F -endstate RUN/IDLE
runtest 10
}

Now i dont know if the Tegra3 has it's own route controller an how it's programmed/setup

This is my first time into JTAG so it's a massive learning curve,

I am assuming that once i send the tegra3 the correct IRSCAN/DRSCAN jtag codes it will setup access in to the device further.

EDIT **

Some additional information I am still trying to understand/process, it's from tegra2 but one could assume it's valid for tegra3 as a lot of what i've turned up has been the case. This excludes security

based information

Note that in the circuit in Figure 24, there is an optional resistor on JTAG_TRST_N. For normal JTAG operation, this resistor
should not be present. The JTAG_TRST_N pin on the Tegra 250 selects whether the JTAG interface is to be used for
communicating with the Tegra 250 CPU complex, or for Test/Scan purposes. When JTAG_TRST_N is pulled low, the JTAG
interface is enabled for access to the CPU complex. When high, it is in Test/Scan mode.
When used in the normal operating mode to access the internal CPUs, in order to reset the Tegra 250 JTAG block, a reset
command is used rather than toggling the JTAG_TRST_N pin.

darkspr1te
[Acer Iconia A700 and A510] darkspr1te:
Right now, with current public information, Nothing. But Who knows what it may turn up, access to SBK maybe? I dont know, I am not that level of expert, but it may turn up some interesting stuff. it may allow users to debrick devices (hopefully)
[Acer Iconia A700 and A510] darkspr1te:
Let me start todays post off with a small request,

if anyone knows of a guide to using openocd/buspirate to investigate a jtag connection that is totally unknown then please post a link here,

I have read billions (well maybe dozens) of ducuments talking about boundry scans, config files, jtag route controllers but it seems almost none show you, they all are the same, they talk about in a vague way that your already ment to know what they are on about. Gah.

Anyway, i've ran some irscan/drscan commands and i've really got no where, i am confirming that keeping TRSRT high gives you the IDCODE of 0x330173d7 and if low then it errors out and you get all zeros,

ive found some tegra2 setup files for a jtag system called BDI-x0000 and they include a lot of info on the registers which are similar if not the same as tegra3, but the IDCODE is different and it's a different language to openocd, again plenty of documents hint at it being a simple conversion but i dont see it, maybe a case of 'cant see the wood for the trees' but it's not for noobs, which drives me a little insane,

Has anyone seen any docs of nexus 7 jtag ? i mean it's operation/setup not pin outs, i've got copies of that info but not actual irscan/drscan codes or anything.

Well I hope someone can provide a little input.

darkspr1te
[Acer Iconia A700 and A510] darkspr1te:
And i am double posting again.
[Acer Iconia A700 and A510] darkspr1te:
Another support agent in south africa, who after 3 hours of contant hello's finally answered.

Jacques: Hi, my name is Jacques. How may I help you?
darkspr1te: hello
darkspr1te: hello, is there anyone there
Jacques: yes can we help you?
darkspr1te: i have a acer A210 and it's not booting , i was watching a video and it rebooted, in the top left it said fastboot error and now windows only detects Nvidia APX device
Jacques: you will have to restore the operating system
darkspr1te: ok,
darkspr1te: how do i do that ?
Jacques: you can send it in for repair so we can reflash the device
darkspr1te: Jacques, I am currently not in a situation where that can be done, please I am begging you to assist me with my secure boot key so i can do it, I've sent two tablets to south africa in the past, first one stolen, second one came back still broken ( at the cost of the tablet), i cant afford the third.
darkspr1te: i know using nvflash and the BCT file thats linked to my secure boot key will fix the device
Jacques: we do not supply the files available for download on any of our sites , so to get assistance you will have to send it for repairs
darkspr1te: but I cant, please, i am begging.
darkspr1te: hello, are you still there
Jacques: I'm here
Jacques: unfortunately nothing more I can assist with as the files you looking for is not available for downbload
darkspr1te: Please Jacques, I am only asking for the key to my own device,
darkspr1te: i can give you the URL for acer Tiawan where acer support perrsonell get the key from
darkspr1te: but as i dont have a acer login account i cant get the key for my device
darkspr1te: if i had the key i can just use NVFLASH to fix in seconds
darkspr1te: all you need is the CPUID
darkspr1te: which is androidboot.serialno=015d256487300205
darkspr1te: ?
darkspr1te: are you still there
darkspr1te: hello
darkspr1te: hello
darkspr1te: hello
darkspr1te: anyone there ?

That was support in south africa

darkspr1te
[Acer Iconia A700 and A510] darkspr1te:
Hi All,

i recently picked up this project again, I've got some new doc's and info but as yet no solution.

My current thinking is to attack the emmc, to which ive produced some photo doc's to upload.

In the first picture is the underneath of the emmc,

Red is CLK or clock

Yellow is CMD or command

light blue is VSS @ 1.8v

red border shows the outline of the emmc chip on the otherside of the pcb. see the picture called blend for a blended view of the same.

My current thinking is the emmc has failed or locked up, why ? well on the clock and cmd lines i get a nice clear trace on my logic sniffer and scope,

Now looking at the the picture called marked, look in the bottom right of the red box, those resistors more or less lighn up with the DAT0/7 pins but i do not get any signal at all from them with the scope. The system outputs CMD's down the CMD line to the emmc at power on, that and the clock can clearly be seen on the scope.

I have also referred to the a510 schema and emmc pins are ment to be the following on the T30 cpu

Dat0 - B6 (z = floating)

CLK - F8 z

CMD - H10 z

i have hunted around this area with the scope and found nothing.

from the SMARC sAT30 manual, it says the following for the EMMC

Either A:

DAT0 - K1 (pu = pull up)

CMD -N6 pu

CLK - M6 pu

or B:

DAT0 L27

CMD - J29

CLK - G30

both location have not shown either clk/cmd or a response from DAT0. Still more research to do.

last time i buy a tegra i can tell you. damn locked up piece of sh!t.

darkspr1te

Edit: I forgot to add the specs for the EMMC

Samsung KLMAG2GE4A

PDF attached

Futher reading ont this emmc at ps3wiki http://www.psdevwiki.com/ps3/KLMAG2GE4A-A001
[Acer Iconia A700 and A510] darkspr1te:
More pictures Of EMMC
[Acer Iconia A700 and A510] darkspr1te:
Final group of pictures
[Acer Iconia A700 and A510] E:V:A:
WTF! That eMMC is really blank! Do you have any info on that? Can you do anything to it's surface to see what it says?

Also, on the OP schematics there's a "UART debug" port. What's on that?
[Acer Iconia A700 and A510] Tom_Perman:
I am having a similar issue using JTAG on a Tegra 2 device.

Would it possible for you to post the Tegra 2 documentation you have?
[Acer Iconia A700 and A510] darkspr1te:
I can tell that you will find the most useful docs via baidu

also search for terga2 and terga3, some docs were misspelled.

I will post any documentation i've created if I can find it, i've recently moved a lot of data to archive that i was not working on, the acer stuff was among it .

How far along are you jtag wise? any comms with the chips ?

darkspr1te
[Acer Iconia A700 and A510] protektwar:
Do you have a photo with your JTAG connection? which acer is it?
[Acer Iconia A700 and A510] protektwar:
Hi, do you still have an extended photo with JDBUG1? IMG7427.JPG bottom.
[Acer Iconia A700 and A510] darkspr1te:
here you go,

darkspr1te
[Acer Iconia A700 and A510] darkspr1te:
it was a Acer iconotab A200 Rev 1.0 , board ID : LA-898
[Nexus 5 General] _AtilA_:
Hi there!

I needed adbd to always run as root in order to push/pull files, but I wanted to stick as close as possible to stock, so I just modified the production boot.img with a patched version of adbd that enforces it to always run as root. I used a boot.img for Android 4.4.2 extracted from the factory images [1] provided by Google.

I thought that it could be usefull to somebody else so... here you have.

It comes in two flavors:

CWM installable .zip [2]

boot.img for fastboot[/URL] [3]

LINKS

[1] Google Factory Images : (https) developers.google.com/android/nexus/images?hl=es#hammerhead

[2] CWM Installable .zip : (https) mega.co.nz/#!lJVxWCaA!QA4Zo04_bnzxEjmHDyjUDl9cFiAjJ5QCuIzuYFNbnFU

[3] boot.img : (https) mega.co.nz/#!sYE0xDZL!PpR1GzIraGCMxr9BOqrZ0wFbBnJO6HSdsee4mGFd5PA

Enjoy!!

P.D.: Sorry if this is no the right place to open a thread like this, but I still don't have permissions to open a new one into Development forums neither post external URLs :_(
[Nexus 5 Accessories] krash183:
I just got my amCASE hybrid case and I'm quite pleased with it! First time buying an amCASE case but definitely won't be my last time.

Packaging

One thing I like to see with packaging is when its kept to a minimum. It's more eco-friendly and it keeps cost down for the manufacturer and consumer. We don't need a flashy package do we? They spend the money were it belongs, on the product!

Build Quality/Design

The build quality seems to be high. No rough corners, sharp edges or defects. All lines are clean and well made. It does have a white "amCASE" logo on the back that doesn't seem to quite fit with everything else but it's not too noticeable or distracting. They went with a two tone two material hybrid design. The back is a harder frosted plastic while the sides are a glossy tpu rubber material. It transitions from on material to the other seemlessly.

The frosted back is transparent but gives a smoked/blurry effect when looking through it. Which I kinda like; sort of artsy don't you say?

All cutouts seem to be perfectly aligned. No ports are covered. I like how they went with a big cutout for the micro usb port so we can use any micro usb cable to charge our phones. Also the cutout for the headphone jack is decently big. Would like it to be a tad bigger so ANY headphone plug can be used but it looks like most if not all plugs would be okay with this case. I hate it when a cases headphone cutout is too small to use with your headphones but that wasn't the case with this one.

The "buttons" on the case to simulate where the actually buttons are of not the best quality but definitely not the worst I've seen on tpu cases. Finding the buttons in pocket wasn't a problem as it has a good feel to them. Pressing them was good also. I never felt like I had to exert too much effort to get the button press to register with the phone.

It's also worth mentioning that the edges are raised to prevent scratching the phone when placing it face down on a table.

It's not the slimmest nor the bulkiest but a good compromise between the two. It won't protect your phone from a drop 2 stories up but it will provide good protection all the way around your phone for those minor drops we all have.

Giveaway! A brand new unopned hybrid case

Totally free but continental USA only as I'm covering the shipping. Sorry other countries.

https://www.facebook.com/TechMatte

Must Like TechMatte's Facebook page!

Write on the wall that you read this review AND provide a link to this review in the post.

Then write a reply with your thoughts on this review and this will end in 1 week. I will PM the winner for his/her address and I will send it out. I will send it via usps. No insurance so if it gets lost in the mail; sorry but I won't be buying another one to send you.
[Nexus 5 Accessories] krash183:
phew; just dropped my phone and the case protected it like a champ!
[Nexus 5 Accessories] XorZone:
Have same case.

Great hybrid case if you are into TPU feel.

Pros:

- Precise cutouts

- USB cutout works with larger samsung cable

- Not slippery, comparing with YESOO Ultra slim Frosted http://amzn.com/B00GG2KWZY

- Just a tiny bit bulkier then YESOO Ultra slim Frosted

- Great (read tight, but not over tight) fit

Cons:

- Power button became not responsive, it works, but you cannot feel the click, I might just get exacto knife and remove it from case.

- Glossy sides, I would prefer matte, but it's personal design preference

Conclusion:

I would definitely recommend this case if you like TPU feel of the sides and don't mind glossy black sides.

All in all a lot more protection from the rubbery sides!
[Nexus 5 Accessories] krash183:
Doing a giveaway now! Read the review and the rules are there! Ends in 1 week. Merry Christmas!
[Nexus 5 Accessories] armyboy11b:
Wooot I need to order me a case soon lol
[Xperia Z Q&A, Help & Troubleshooting] Chechare:
Hi guys, I think I have a serious problem with my Xperia Z...

The glass is a little unglued from the upper left conner, I didn't noticed it until today when I wash my XZ (It had many finger print) so the device began to works a little weird, It unlocks and unlocks by itself and the down volume key starts to fail also.

The acelerometer is not working now and I am scared about if the warranty covers it. I didn't submerge I just wash out to clean it. Also, when I open the camera app i can see that the camera is working yet, but suddenly after a second the phone restart by itself.

In the past three days I went to the beach and used over the water to take pictures, I didn't submerge because I was concious about the seawater can cause problems in the devices, but my phone fell in the sand and I decided to washed it with potable water, It also the lens of the camera got tarnished but It returns to normality after a little minutes so I think that only was the glass that got a little tarnished in cause of the changes of temperature.

I am afraid about if the warranty covers this kind of issues, I am from Mexico and a friend bougth it for me in USA, what Can I do?

Sorry for my english, thanks.
[Xperia Z Q&A, Help & Troubleshooting] DrKrFfXx:
It is condensation. Just let it be, it will be gone in a while.

What I did though, was to make the phone hot by playing games, it gets quite hot and it'll evaporate the water inside the lens.
[Xperia Z Q&A, Help & Troubleshooting] Chechare:
But the acelorometer is not working yet
[Xperia Z Q&A, Help & Troubleshooting] DrKrFfXx:
Well, then, leave it on rice for the night, turned off with all flaps open.
[Xperia Z Q&A, Help & Troubleshooting] Chechare:
It could works, but I need to repair the unglued glass
[Xperia Z Q&A, Help & Troubleshooting] Denhot:
Happened to me 2 days back

Same cleaning from water :( and then power button went buzurk along with water condensation on camera lens within 2 hours I was at the service centre..

Are any of your water indicators red instead of white??!

If not then send it under warranty without taking a breath..because as someone specified on an another thread the power button and volume problem will remain even later.
[Xperia Z Q&A, Help & Troubleshooting] Chechare:
Actually all my water indicator are in white, but until today the acelorometer and giroscoper are not working yet :/ That's mean I can't initialize the camera without the device reboot itself.

A problem is that here in my town there are no service centers. I don't know what to do :/
[Xperia Z Q&A, Help & Troubleshooting] Denhot:
I think maybe you should go to a local mobile repair shop..I'm not sure if the device will be water proof after that.. But it will not be dead atleast

If even that's not viable.

Because the damage is continuing.

As someone said then you should try drying it..leave the flaps on keep it in rice..

Hope nothing big is damaged man.

Camera won't work if it doesn't get Reading from the gyro.. Hence it's rebooting..so the cam may still be fine.
[Xperia Z Q&A, Help & Troubleshooting] Chechare:
I prefer that Sony take hands on the business, the model is not available in Mexico so I'm not sure about some technician can fixed it correctly, I will try to contact to Sony USA and Mexico.

I will try to put it in a bag of rice hoping it works for the moment :/

Thanks.

Just I have the doubt about if the back glass will unglue after Sony fixed.
[AT&T Samsung Galaxy S 4 Q&A, Help & Troubleshootin] galaxynote3N900:
I have a galaxy S4 at&t, and I'm looking for custom rom that will work with galaxy gear had custom rom on it. Please let me know the custom rom of galaxy S4 at&t that will get internet for galaxy gear had null rom on it. Help Please!!!:crying:
[JAM, MDA Compact, S100 General] macpel:
Hi,

I've been trying for hours trying to connect my PALM to my Imate JAM to make my Palm surf via GPRS over the JAM. I've tried everything, also tried Wireless Modem mode. Do I need a different bluetooth stack to make this work? Any suggestions on connecting another PDA to the JAM to browse GPRS?

Thanks!
[8.9" Kindle Fire HD Q&A, Help & Troubleshooting] maverick31210:
Not sure if this is the best place to post this, if it isn't maybe someone can shoot me in the right direction.

I just got a Kindle Fire HD 8.9 running 8.4.6. I really dislike the crap Amazon OS on there. I've seen a few threads about rooting it and installing a custom ROM but I'm not sure about doing it on 8.4.6. Can someone maybe point me in the right direction on this? Ideally I'd just like to install a more vanilla Android experience. Any help is very much appreciated!
[Galaxy S I9000 Q&A, Help & Troubleshooting] fparri:
Hi,

I've just debranded my Galaxy S I9000 using stock I9000XWJW7 (2.3.6):

CSC_ITVJW2.tar.md5

PDA_XWJW7_Sbl.tar.md5

PHONE_XWJW1.tar.md5

s1_odin_20100512.pit

Then I apply CF-Root-XX_OXA_JW4-v4.4-CWM3RFS.tar.

I have problems flashing a custom rom. Here's what I do:

restart the phone with CWM, do the usual wipes and then install from sd (I tried both internal and external sd) and choose the rom file (I tried both cyanogenmod 10.2 and SlimBean 4.3).

A couple of seconds after the flashing of the a custom rom such as CM 10.2 or SB 4.3 has started, the phone reboots, showing Cyanogenmod logo or Sephora logo and then hangs or bootloop.

What am I doing wrong? Please help me :)
[Galaxy S I9000 Q&A, Help & Troubleshooting] xsenman:
Look at this flashing guide and check, if you are doing it correctly

Check this out! Links to useful Guides and " Banned " Documentaries ​
[Galaxy S I9000 Q&A, Help & Troubleshooting] fparri:
Problem solved: When I started flashing a modded rom, the new kernel in it made my phone reboot. The solution was to enter one more time the recovery, after that, and reflash the rom again. This time, the flashing works flawlessly until the end :)
[Xperia SP Q&A, Help & Troubleshooting] Jayden69:
Hello, today I noticed that my phone was a bit slow, I went to see the processes and noticed that Facebook is consuming a lot of RAM, it will be?

I have all the source.

sorry for my english. Google Translator hahah
[Xperia SP Q&A, Help & Troubleshooting] mrjraider:
That is facebook. My max is 211 MB :eek: weird. You can solve it by disable it and use another application for facebook but I havent found any good one (yet)