search

Koenkk / Z-Stack-firmware

Compilation instructions and hex files for Z-Stack firmwares
MIT License
2.33k stars 643 forks source link

Incorrect CC2652R firmware flashed on SONOFF Zigbee 3.0 USB dongle #367

Closed leloch closed 2 years ago

leloch commented 2 years ago

Somehow I managed to flash CC2652R_coordinator_20220219.zip firmware on SONOFF Zigbee 3.0 USB, rather than CC1352P2_CC2652P_launchpad_coordinator_20220219.zip one...

Now, the device is rather bricked, the serial port is visible - but there is no response when using any of the flash tools (this one as well as Flash Programmer 2) and the 'boot' button does not seem to do anything either...

What are my recovery options? I have got FT232 JTAG cable, would that one be good enough to re-flash recover it? Possilby some other method?

Or am I pretty much screwed and should just but another unit?

Koenkk commented 2 years ago

Should be doable via a JTAG flasher and https://www.ti.com/tool/FLASH-PROGRAMMER

leloch commented 2 years ago

I only got a regular FT232 JTAG cable, it looks like these TI chips require a 'special' cJTAG interface (cc-debugger?). I could not locate any resource explaining how to connect regular JTAG to this thing - any hints would be very much apperciated.

petergebruers commented 2 years ago

Yes it is cJTAG, not compatible with JTAG. I haven't needed this myself yet... but I know this competing product is based on a nearly identical chip an the maker describes how to flash it:

https://electrolama.com/radio-docs/advanced/flash-jtag/

Basically, either you need a JLINK programmer, or one of the TI development boards which have a XDS110 onboard. I own both. He also mentions a third option, the CC-DEVPACK-DEBUG, I do not have that one.

leloch commented 2 years ago

Thank you - this is what was afraid of. I don't have either and it does not really make sense to get the adatper just to fix this one specific unit, so in such case I will just get another dongle, luckily these are quite cheap (still). The borked one will go into the drawer, maybe one day I will have the kit needed to fix it :)

kaiekaie commented 1 year ago

I did this with the ZB dongle-E and used a wire to jump the boot and ground pins to enter bootmode. Maybe you can try touching any of connectors on the (P board) close to the boot button? to see if it starts in Bootmode.

tobiasfrejo commented 1 year ago

I have been able to use a Raspberry Pi with OpenOCD as a JTAG debugger to flash the correct firmware to a generic CC2652P dongle. Though that one does have through-hole soldering points that exposes the remaining pins for a standard JTAG connection, witch it doesn't seem like the SONOFF dongle has.

I have done a write-up about it in case anyone stumbles upon the same problem with these tools available. https://gist.github.com/tobiasfrejo/d98e9f4cbbc6893662ab032b06388685

michaelp1742 commented 1 year ago

Tobias, thank you for researching and documenting this. I bricked my Sonoff ZBDongle-P (CC2652P) by programming it immediately after my Electrolama zzh! (CC2652R). I managed to tack solder directly to the two IC pads (0.5mm spacing) with fine multi-stranded wire from an old USB cable using an iPhone as a magnifier. The only change required was to drop the "adapter speed" to 500 to get a reliable JTAG connection.

BoBeRzE commented 9 months ago

@michaelp1742 I have also bricked my Sonoff ZBDongle-P. Can you please give me some details which soldering points you used? I would also try to get the device up and running again with the help of the Raspi.