can't do flash probe on arm926ej-s

Hi everyone and good day.

I have arm926ej-s and cannot identify flash. (Using CFI)

Does anybody show me where is wrong?

I will be grateful :slight_smile:

There are one config file:

telnet_port 4444
gdb_port 2001

interface parport
parport_port 0
parport_cable dlc5
jtag_speed 0

debug_level 3

jtag_device 4 0x1 0xf 0xe
jtag_nsrst_delay 200
jtag_ntrst_delay 200

reset_config trst_and_srst

target create target0 arm926ejs -endian little -chain-position 0 -variant arm926ejs
flash bank cfi 0x10000000 0x01000000 1 2 0

and few action:

Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
Open On-Chip Debugger
> poll
target state: running

> halt
target state: halted
target halted in ARM state due to debug-request, current mode: Undefined
cpsr: 0x000000db pc: 0x00000004
MMU: disabled, D-Cache: disabled, I-Cache: disabled

> flash probe 0
memory write caused data abort (address: 0x10000aaa, size: 0x2, count: 0x1)
unknown error when probing flash bank '#0' at 0x10000000

> exit
Connection closed by foreign host.

and one log:

Debug: 64 2 command.c:108 script_command(): script_command - jtag_ntrst_delay, argv[0]=ocd_jtag_ntrst_delay
Debug: 65 2 command.c:108 script_command(): script_command - jtag_ntrst_delay, argv[1]=200
Debug: 67 2 command.c:91 script_command(): script_command - reset_config
Debug: 68 2 command.c:108 script_command(): script_command - reset_config, argv[0]=ocd_reset_config
Debug: 69 2 command.c:108 script_command(): script_command - reset_config, argv[1]=trst_and_srst
Debug: 70 2 target.c:3911 jim_target(): Target command params:
Debug: 71 2 target.c:3912 jim_target(): target create target0 arm926ejs -endian little -chain-position 0 -variant arm926ejs 
Debug: 73 3 command.c:91 script_command(): script_command - bank
Debug: 74 3 command.c:108 script_command(): script_command - bank, argv[0]=ocd_flash_bank
Debug: 75 3 command.c:108 script_command(): script_command - bank, argv[1]=cfi
Debug: 76 3 command.c:108 script_command(): script_command - bank, argv[2]=0x10000000
Debug: 77 3 command.c:108 script_command(): script_command - bank, argv[3]=0x01000000
Debug: 78 3 command.c:108 script_command(): script_command - bank, argv[4]=1
Debug: 79 3 command.c:108 script_command(): script_command - bank, argv[5]=2
Debug: 80 3 command.c:108 script_command(): script_command - bank, argv[6]=0
User : 81 3 command.c:494 command_run_line(): 
Debug: 83 3 command.c:91 script_command(): script_command - init
Debug: 84 3 command.c:108 script_command(): script_command - init, argv[0]=ocd_init
Debug: 85 4 openocd.c:144 handle_init_command(): target init complete
Debug: 86 4 parport.c:353 parport_init(): opening /dev/parport0...
Debug: 87 4 parport.c:365 parport_init(): ...open
Debug: 88 50 parport.c:237 parport_reset(): trst: 0, srst: 0
Debug: 89 50 openocd.c:151 handle_init_command(): jtag interface init complete
Debug: 90 50 jtag.c:2240 jtag_init_inner(): Init JTAG chain
Debug: 91 50 jtag.c:434 jtag_call_event_callbacks(): jtag event: JTAG controller reset (RESET or TRST)
Debug: 92 50 jtag.c:1487 jtag_reset_callback(): -
Debug: 93 50 jtag.c:434 jtag_call_event_callbacks(): jtag event: JTAG controller reset (RESET or TRST)
Debug: 94 50 jtag.c:1487 jtag_reset_callback(): -
Info : 95 53 jtag.c:1607 jtag_examine_chain(): JTAG tap: chip0.tap0 tap/device found: 0x07926f0f (Manufacturer: 0x787, Part: 0x7926, Version: 0x0)
Debug: 96 53 jtag.c:434 jtag_call_event_callbacks(): jtag event: JTAG controller reset (RESET or TRST)
Debug: 97 53 jtag.c:1487 jtag_reset_callback(): -
Debug: 98 53 openocd.c:157 handle_init_command(): jtag init complete
Debug: 99 54 embeddedice.c:401 embeddedice_write_reg(): 0: 0x00000000
Debug: 100 54 embeddedice.c:401 embeddedice_write_reg(): 12: 0x00000000
Debug: 101 54 embeddedice.c:401 embeddedice_write_reg(): 20: 0x00000000
Debug: 102 54 openocd.c:160 handle_init_command(): jtag examine complete
Debug: 103 54 openocd.c:166 handle_init_command(): flash init complete
Debug: 104 54 openocd.c:170 handle_init_command(): mflash init complete
Debug: 105 54 openocd.c:174 handle_init_command(): NAND init complete
Debug: 106 54 openocd.c:178 handle_init_command(): pld init complete
Debug: 107 54 gdb_server.c:2225 gdb_init(): gdb service for target arm926ejs at port 2001
Warn : 108 55 tcl_server.c:178 tcl_init(): no tcl port specified, using default port 6666
User : 109 55 command.c:494 command_run_line(): 


Info : 110 24186 server.c:89 add_connection(): accepting 'telnet' connection from 0
Debug: 112 27218 command.c:91 script_command(): script_command - poll
Debug: 113 27218 command.c:108 script_command(): script_command - poll, argv[0]=ocd_poll
User : 114 27219 target.c:959 target_arch_state(): target state: running
User : 115 27219 command.c:494 command_run_line(): 


Debug: 117 30348 command.c:91 script_command(): script_command - halt
Debug: 118 30348 command.c:108 script_command(): script_command - halt, argv[0]=ocd_halt
Debug: 119 30348 target.c:1744 handle_halt_command(): -
Debug: 120 30348 arm7_9_common.c:1054 arm7_9_halt(): target->state: running
Debug: 121 30348 embeddedice.c:401 embeddedice_write_reg(): 0: 0x00000002
Debug: 122 30348 embeddedice.c:401 embeddedice_write_reg(): 0: 0x00000005
Debug: 123 30348 embeddedice.c:401 embeddedice_write_reg(): 0: 0x00000005
Debug: 124 30349 arm926ejs.c:343 arm926ejs_examine_debug_reason(): internal debug request
Debug: 125 30349 arm7_9_common.c:1153 arm7_9_debug_entry(): target entered debug from ARM state
Debug: 126 30357 arm7_9_common.c:1185 arm7_9_debug_entry(): target entered debug state in Undefined mode
Debug: 127 30357 arm7_9_common.c:1216 arm7_9_debug_entry(): r0: 0xb961f7d8
Debug: 128 30357 arm7_9_common.c:1216 arm7_9_debug_entry(): r1: 0x3adebedf
Debug: 129 30357 arm7_9_common.c:1216 arm7_9_debug_entry(): r2: 0xb1d376f9
Debug: 130 30357 arm7_9_common.c:1216 arm7_9_debug_entry(): r3: 0x7d5ebd7a
Debug: 131 30357 arm7_9_common.c:1216 arm7_9_debug_entry(): r4: 0xded8267e
Debug: 132 30357 arm7_9_common.c:1216 arm7_9_debug_entry(): r5: 0xdf9233de
Debug: 133 30357 arm7_9_common.c:1216 arm7_9_debug_entry(): r6: 0x3b940026
Debug: 134 30357 arm7_9_common.c:1216 arm7_9_debug_entry(): r7: 0xb887a1eb
Debug: 135 30357 arm7_9_common.c:1216 arm7_9_debug_entry(): r8: 0x54979195
Debug: 136 30357 arm7_9_common.c:1216 arm7_9_debug_entry(): r9: 0x50eecfbb
Debug: 137 30357 arm7_9_common.c:1216 arm7_9_debug_entry(): r10: 0xf692fc1d
Debug: 138 30357 arm7_9_common.c:1216 arm7_9_debug_entry(): r11: 0x4b287dda
Debug: 139 30357 arm7_9_common.c:1216 arm7_9_debug_entry(): r12: 0x75ec3fbe
Debug: 140 30357 arm7_9_common.c:1216 arm7_9_debug_entry(): r13: 0x3dc27ad1
Debug: 141 30357 arm7_9_common.c:1216 arm7_9_debug_entry(): r14: 0x00000008
Debug: 142 30357 arm7_9_common.c:1216 arm7_9_debug_entry(): r15: 0x00000004
Debug: 143 30357 arm7_9_common.c:1222 arm7_9_debug_entry(): entered debug state at PC 0x4
Debug: 144 30359 arm926ejs.c:477 arm926ejs_post_debug_entry(): cp15_control_reg: 000500f8
Debug: 145 30361 arm926ejs.c:498 arm926ejs_post_debug_entry(): D FSR: 0x000000a9, D FAR: 0x6dfda5ff, I FSR: 0x00000008
Debug: 146 30362 target.c:696 target_call_event_callbacks(): target event 4 (early-halted)
Debug: 147 30362 target.c:3054 target_handle_event(): event: 4 early-halted - no action
Debug: 148 30362 target.c:696 target_call_event_callbacks(): target event 5 (halted)
Debug: 149 30362 target.c:3054 target_handle_event(): event: 5 halted - no action
User : 150 30362 target.c:959 target_arch_state(): target state: halted
User : 151 30362 arm926ejs.c:597 arm926ejs_arch_state(): target halted in ARM state due to debug-request, current mode: Undefined
cpsr: 0x000000db pc: 0x00000004
MMU: disabled, D-Cache: disabled, I-Cache: disabled
User : 152 30362 command.c:494 command_run_line(): 
Debug: 153 30458 arm926ejs.c:112 arm926ejs_catch_broken_irscan(): caught ARM926EJ-S invalid Capture-IR result after CP15 access


Debug: 155 39557 command.c:91 script_command(): script_command - probe
Debug: 156 39557 command.c:108 script_command(): script_command - probe, argv[0]=ocd_flash_probe
Debug: 157 39557 command.c:108 script_command(): script_command - probe, argv[1]=0
Debug: 158 39557 embeddedice.c:401 embeddedice_write_reg(): 0: 0x00000004
Debug: 159 39561 embeddedice.c:401 embeddedice_write_reg(): 0: 0x00000005
Warn : 160 39563 arm7_9_common.c:2302 arm7_9_write_memory(): memory write caused data abort (address: 0x10000aaa, size: 0x2, count: 0x1)
Debug: 161 39563 arm9tdmi.c:620 arm9tdmi_write_xpsr_im8(): xpsr_im: db, rot: 0, spsr: 0
User : 162 39563 command.c:383 command_print(): unknown error when probing flash bank '#0' at 0x10000000
User : 163 39563 command.c:494 command_run_line(): 
Debug: 165 46099 command.c:91 script_command(): script_command - exit
Debug: 166 46099 command.c:108 script_command(): script_command - exit, argv[0]=ocd_exit
Info : 167 46099 server.c:452 server_loop(): dropped 'telnet' connection - error -400

Same exact problem here. Iā€™m trying to do it on a feroceon though, which is a related chip. I can halt it, but it fails probing the flash.