1 /***************************************************************************
2 * Copyright (C) 2013 Synapse Product Development *
3 * Andrey Smirnov <andrew.smironv@gmail.com> *
4 * Angus Gratton <gus@projectgus.com> *
5 * Erdem U. Altunyurt <spamjunkeater@gmail.com> *
7 * This program is free software; you can redistribute it and/or modify *
8 * it under the terms of the GNU General Public License as published by *
9 * the Free Software Foundation; either version 2 of the License, or *
10 * (at your option) any later version. *
12 * This program is distributed in the hope that it will be useful, *
13 * but WITHOUT ANY WARRANTY; without even the implied warranty of *
14 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
15 * GNU General Public License for more details. *
17 * You should have received a copy of the GNU General Public License *
18 * along with this program. If not, see <http://www.gnu.org/licenses/>. *
19 ***************************************************************************/
26 #include <target/algorithm.h>
27 #include <target/armv7m.h>
28 #include <helper/types.h>
31 NRF51_FLASH_BASE = 0x00000000,
34 enum nrf51_ficr_registers {
35 NRF51_FICR_BASE = 0x10000000, /* Factory Information Configuration Registers */
37 #define NRF51_FICR_REG(offset) (NRF51_FICR_BASE + offset)
39 NRF51_FICR_CODEPAGESIZE = NRF51_FICR_REG(0x010),
40 NRF51_FICR_CODESIZE = NRF51_FICR_REG(0x014),
41 NRF51_FICR_CLENR0 = NRF51_FICR_REG(0x028),
42 NRF51_FICR_PPFC = NRF51_FICR_REG(0x02C),
43 NRF51_FICR_NUMRAMBLOCK = NRF51_FICR_REG(0x034),
44 NRF51_FICR_SIZERAMBLOCK0 = NRF51_FICR_REG(0x038),
45 NRF51_FICR_SIZERAMBLOCK1 = NRF51_FICR_REG(0x03C),
46 NRF51_FICR_SIZERAMBLOCK2 = NRF51_FICR_REG(0x040),
47 NRF51_FICR_SIZERAMBLOCK3 = NRF51_FICR_REG(0x044),
48 NRF51_FICR_CONFIGID = NRF51_FICR_REG(0x05C),
49 NRF51_FICR_DEVICEID0 = NRF51_FICR_REG(0x060),
50 NRF51_FICR_DEVICEID1 = NRF51_FICR_REG(0x064),
51 NRF51_FICR_ER0 = NRF51_FICR_REG(0x080),
52 NRF51_FICR_ER1 = NRF51_FICR_REG(0x084),
53 NRF51_FICR_ER2 = NRF51_FICR_REG(0x088),
54 NRF51_FICR_ER3 = NRF51_FICR_REG(0x08C),
55 NRF51_FICR_IR0 = NRF51_FICR_REG(0x090),
56 NRF51_FICR_IR1 = NRF51_FICR_REG(0x094),
57 NRF51_FICR_IR2 = NRF51_FICR_REG(0x098),
58 NRF51_FICR_IR3 = NRF51_FICR_REG(0x09C),
59 NRF51_FICR_DEVICEADDRTYPE = NRF51_FICR_REG(0x0A0),
60 NRF51_FICR_DEVICEADDR0 = NRF51_FICR_REG(0x0A4),
61 NRF51_FICR_DEVICEADDR1 = NRF51_FICR_REG(0x0A8),
62 NRF51_FICR_OVERRIDEN = NRF51_FICR_REG(0x0AC),
63 NRF51_FICR_NRF_1MBIT0 = NRF51_FICR_REG(0x0B0),
64 NRF51_FICR_NRF_1MBIT1 = NRF51_FICR_REG(0x0B4),
65 NRF51_FICR_NRF_1MBIT2 = NRF51_FICR_REG(0x0B8),
66 NRF51_FICR_NRF_1MBIT3 = NRF51_FICR_REG(0x0BC),
67 NRF51_FICR_NRF_1MBIT4 = NRF51_FICR_REG(0x0C0),
68 NRF51_FICR_BLE_1MBIT0 = NRF51_FICR_REG(0x0EC),
69 NRF51_FICR_BLE_1MBIT1 = NRF51_FICR_REG(0x0F0),
70 NRF51_FICR_BLE_1MBIT2 = NRF51_FICR_REG(0x0F4),
71 NRF51_FICR_BLE_1MBIT3 = NRF51_FICR_REG(0x0F8),
72 NRF51_FICR_BLE_1MBIT4 = NRF51_FICR_REG(0x0FC),
75 enum nrf51_uicr_registers {
76 NRF51_UICR_BASE = 0x10001000, /* User Information
77 * Configuration Regsters */
79 NRF51_UICR_SIZE = 0x100,
81 #define NRF51_UICR_REG(offset) (NRF51_UICR_BASE + offset)
83 NRF51_UICR_CLENR0 = NRF51_UICR_REG(0x000),
84 NRF51_UICR_RBPCONF = NRF51_UICR_REG(0x004),
85 NRF51_UICR_XTALFREQ = NRF51_UICR_REG(0x008),
86 NRF51_UICR_FWID = NRF51_UICR_REG(0x010),
89 enum nrf51_nvmc_registers {
90 NRF51_NVMC_BASE = 0x4001E000, /* Non-Volatile Memory
91 * Controller Regsters */
93 #define NRF51_NVMC_REG(offset) (NRF51_NVMC_BASE + offset)
95 NRF51_NVMC_READY = NRF51_NVMC_REG(0x400),
96 NRF51_NVMC_CONFIG = NRF51_NVMC_REG(0x504),
97 NRF51_NVMC_ERASEPAGE = NRF51_NVMC_REG(0x508),
98 NRF51_NVMC_ERASEALL = NRF51_NVMC_REG(0x50C),
99 NRF51_NVMC_ERASEUICR = NRF51_NVMC_REG(0x514),
102 enum nrf51_nvmc_config_bits {
103 NRF51_NVMC_CONFIG_REN = 0x00,
104 NRF51_NVMC_CONFIG_WEN = 0x01,
105 NRF51_NVMC_CONFIG_EEN = 0x02,
110 uint32_t code_page_size;
114 int (*write) (struct flash_bank *bank,
115 struct nrf51_info *chip,
116 const uint8_t *buffer, uint32_t offset, uint32_t count);
118 struct target *target;
121 struct nrf51_device_spec {
125 const char *build_code;
126 unsigned int flash_size_kb;
129 /* The known devices table below is derived from the "nRF51 Series
130 * Compatibility Matrix" document, which can be found by searching for
131 * ATTN-51 on the Nordic Semi website:
133 * http://www.nordicsemi.com/eng/content/search?SearchText=ATTN-51
135 * Up to date with Matrix v2.0, plus some additional HWIDs.
137 * The additional HWIDs apply where the build code in the matrix is
138 * shown as Gx0, Bx0, etc. In these cases the HWID in the matrix is
139 * for x==0, x!=0 means different (unspecified) HWIDs.
141 static const struct nrf51_device_spec nrf51_known_devices_table[] = {
142 /* nRF51822 Devices (IC rev 1). */
147 .build_code = "CA/C0",
148 .flash_size_kb = 256,
155 .flash_size_kb = 128,
162 .flash_size_kb = 128,
169 .flash_size_kb = 256,
176 .flash_size_kb = 256,
179 /* nRF51822 Devices (IC rev 2). */
185 .flash_size_kb = 256,
192 .flash_size_kb = 256,
199 .flash_size_kb = 256,
206 .flash_size_kb = 256,
213 .flash_size_kb = 256,
220 .flash_size_kb = 128,
227 .flash_size_kb = 256,
234 .flash_size_kb = 256,
241 .flash_size_kb = 256,
244 /* nRF51822 Devices (IC rev 3). */
250 .flash_size_kb = 256,
257 .flash_size_kb = 128,
264 .flash_size_kb = 256,
271 .flash_size_kb = 256,
278 .flash_size_kb = 128,
285 .flash_size_kb = 256,
292 .flash_size_kb = 256,
299 .flash_size_kb = 256,
302 /* nRF51422 Devices (IC rev 1). */
308 .flash_size_kb = 256,
315 .flash_size_kb = 256,
322 .flash_size_kb = 256,
325 /* nRF51422 Devices (IC rev 2). */
331 .flash_size_kb = 256,
338 .flash_size_kb = 256,
345 .flash_size_kb = 128,
352 .flash_size_kb = 256,
355 /* nRF51422 Devices (IC rev 3). */
361 .flash_size_kb = 256,
368 .flash_size_kb = 128,
375 .flash_size_kb = 256,
382 .flash_size_kb = 256,
389 .flash_size_kb = 128,
396 .flash_size_kb = 256,
403 .flash_size_kb = 256,
406 /* Some early nRF51-DK (PCA10028) & nRF51-Dongle (PCA10031) boards
407 with built-in jlink seem to use engineering samples not listed
408 in the nRF51 Series Compatibility Matrix V1.0. */
414 .flash_size_kb = 256,
418 static int nrf51_bank_is_probed(struct flash_bank *bank)
420 struct nrf51_info *chip = bank->driver_priv;
422 assert(chip != NULL);
424 return chip->bank[bank->bank_number].probed;
426 static int nrf51_probe(struct flash_bank *bank);
428 static int nrf51_get_probed_chip_if_halted(struct flash_bank *bank, struct nrf51_info **chip)
430 if (bank->target->state != TARGET_HALTED) {
431 LOG_ERROR("Target not halted");
432 return ERROR_TARGET_NOT_HALTED;
435 *chip = bank->driver_priv;
437 int probed = nrf51_bank_is_probed(bank);
441 return nrf51_probe(bank);
446 static int nrf51_wait_for_nvmc(struct nrf51_info *chip)
453 res = target_read_u32(chip->target, NRF51_NVMC_READY, &ready);
454 if (res != ERROR_OK) {
455 LOG_ERROR("Couldn't read NVMC_READY register");
459 if (ready == 0x00000001)
465 LOG_DEBUG("Timed out waiting for NVMC_READY");
466 return ERROR_FLASH_BUSY;
469 static int nrf51_nvmc_erase_enable(struct nrf51_info *chip)
472 res = target_write_u32(chip->target,
474 NRF51_NVMC_CONFIG_EEN);
476 if (res != ERROR_OK) {
477 LOG_ERROR("Failed to enable erase operation");
482 According to NVMC examples in Nordic SDK busy status must be
483 checked after writing to NVMC_CONFIG
485 res = nrf51_wait_for_nvmc(chip);
487 LOG_ERROR("Erase enable did not complete");
492 static int nrf51_nvmc_write_enable(struct nrf51_info *chip)
495 res = target_write_u32(chip->target,
497 NRF51_NVMC_CONFIG_WEN);
499 if (res != ERROR_OK) {
500 LOG_ERROR("Failed to enable write operation");
505 According to NVMC examples in Nordic SDK busy status must be
506 checked after writing to NVMC_CONFIG
508 res = nrf51_wait_for_nvmc(chip);
510 LOG_ERROR("Write enable did not complete");
515 static int nrf51_nvmc_read_only(struct nrf51_info *chip)
518 res = target_write_u32(chip->target,
520 NRF51_NVMC_CONFIG_REN);
522 if (res != ERROR_OK) {
523 LOG_ERROR("Failed to enable read-only operation");
527 According to NVMC examples in Nordic SDK busy status must be
528 checked after writing to NVMC_CONFIG
530 res = nrf51_wait_for_nvmc(chip);
532 LOG_ERROR("Read only enable did not complete");
537 static int nrf51_nvmc_generic_erase(struct nrf51_info *chip,
538 uint32_t erase_register, uint32_t erase_value)
542 res = nrf51_nvmc_erase_enable(chip);
546 res = target_write_u32(chip->target,
552 res = nrf51_wait_for_nvmc(chip);
556 return nrf51_nvmc_read_only(chip);
559 nrf51_nvmc_read_only(chip);
561 LOG_ERROR("Failed to erase reg: 0x%08"PRIx32" val: 0x%08"PRIx32,
562 erase_register, erase_value);
566 static int nrf51_protect_check(struct flash_bank *bank)
571 /* UICR cannot be write protected so just return early */
572 if (bank->base == NRF51_UICR_BASE)
575 struct nrf51_info *chip = bank->driver_priv;
577 assert(chip != NULL);
579 res = target_read_u32(chip->target, NRF51_FICR_CLENR0,
581 if (res != ERROR_OK) {
582 LOG_ERROR("Couldn't read code region 0 size[FICR]");
586 if (clenr0 == 0xFFFFFFFF) {
587 res = target_read_u32(chip->target, NRF51_UICR_CLENR0,
589 if (res != ERROR_OK) {
590 LOG_ERROR("Couldn't read code region 0 size[UICR]");
595 for (int i = 0; i < bank->num_sectors; i++)
596 bank->sectors[i].is_protected =
597 clenr0 != 0xFFFFFFFF && bank->sectors[i].offset < clenr0;
602 static int nrf51_protect(struct flash_bank *bank, int set, int first, int last)
605 uint32_t clenr0, ppfc;
606 struct nrf51_info *chip;
608 /* UICR cannot be write protected so just bail out early */
609 if (bank->base == NRF51_UICR_BASE)
612 res = nrf51_get_probed_chip_if_halted(bank, &chip);
617 LOG_ERROR("Code region 0 must start at the begining of the bank");
621 res = target_read_u32(chip->target, NRF51_FICR_PPFC,
623 if (res != ERROR_OK) {
624 LOG_ERROR("Couldn't read PPFC register");
628 if ((ppfc & 0xFF) == 0x00) {
629 LOG_ERROR("Code region 0 size was pre-programmed at the factory, can't change flash protection settings");
633 res = target_read_u32(chip->target, NRF51_UICR_CLENR0,
635 if (res != ERROR_OK) {
636 LOG_ERROR("Couldn't read code region 0 size[UICR]");
640 if (clenr0 == 0xFFFFFFFF) {
641 res = target_write_u32(chip->target, NRF51_UICR_CLENR0,
643 if (res != ERROR_OK) {
644 LOG_ERROR("Couldn't write code region 0 size[UICR]");
649 LOG_ERROR("You need to perform chip erase before changing the protection settings");
652 nrf51_protect_check(bank);
657 static int nrf51_probe(struct flash_bank *bank)
661 struct nrf51_info *chip = bank->driver_priv;
663 res = target_read_u32(chip->target, NRF51_FICR_CONFIGID, &hwid);
664 if (res != ERROR_OK) {
665 LOG_ERROR("Couldn't read CONFIGID register");
669 hwid &= 0xFFFF; /* HWID is stored in the lower two
670 * bytes of the CONFIGID register */
672 const struct nrf51_device_spec *spec = NULL;
673 for (size_t i = 0; i < ARRAY_SIZE(nrf51_known_devices_table); i++) {
674 if (hwid == nrf51_known_devices_table[i].hwid) {
675 spec = &nrf51_known_devices_table[i];
680 if (!chip->bank[0].probed && !chip->bank[1].probed) {
682 LOG_INFO("nRF%s-%s(build code: %s) %ukB Flash",
683 spec->part, spec->variant, spec->build_code,
684 spec->flash_size_kb);
686 LOG_WARNING("Unknown device (HWID 0x%08" PRIx32 ")", hwid);
689 if (bank->base == NRF51_FLASH_BASE) {
690 /* The value stored in NRF51_FICR_CODEPAGESIZE is the number of bytes in one page of FLASH. */
691 res = target_read_u32(chip->target, NRF51_FICR_CODEPAGESIZE,
692 &chip->code_page_size);
693 if (res != ERROR_OK) {
694 LOG_ERROR("Couldn't read code page size");
698 /* Note the register name is misleading,
699 * NRF51_FICR_CODESIZE is the number of pages in flash memory, not the number of bytes! */
700 uint32_t num_sectors;
701 res = target_read_u32(chip->target, NRF51_FICR_CODESIZE, &num_sectors);
702 if (res != ERROR_OK) {
703 LOG_ERROR("Couldn't read code memory size");
707 bank->num_sectors = num_sectors;
708 bank->size = num_sectors * chip->code_page_size;
710 if (spec && bank->size / 1024 != spec->flash_size_kb)
711 LOG_WARNING("Chip's reported Flash capacity does not match expected one");
713 bank->sectors = calloc(bank->num_sectors,
714 sizeof((bank->sectors)[0]));
716 return ERROR_FLASH_BANK_NOT_PROBED;
718 /* Fill out the sector information: all NRF51 sectors are the same size and
719 * there is always a fixed number of them. */
720 for (int i = 0; i < bank->num_sectors; i++) {
721 bank->sectors[i].size = chip->code_page_size;
722 bank->sectors[i].offset = i * chip->code_page_size;
724 /* mark as unknown */
725 bank->sectors[i].is_erased = -1;
726 bank->sectors[i].is_protected = -1;
729 nrf51_protect_check(bank);
731 chip->bank[0].probed = true;
733 bank->size = NRF51_UICR_SIZE;
734 bank->num_sectors = 1;
735 bank->sectors = calloc(bank->num_sectors,
736 sizeof((bank->sectors)[0]));
738 return ERROR_FLASH_BANK_NOT_PROBED;
740 bank->sectors[0].size = bank->size;
741 bank->sectors[0].offset = 0;
743 /* mark as unknown */
744 bank->sectors[0].is_erased = 0;
745 bank->sectors[0].is_protected = 0;
747 chip->bank[1].probed = true;
753 static int nrf51_auto_probe(struct flash_bank *bank)
755 int probed = nrf51_bank_is_probed(bank);
762 return nrf51_probe(bank);
765 static struct flash_sector *nrf51_find_sector_by_address(struct flash_bank *bank, uint32_t address)
767 struct nrf51_info *chip = bank->driver_priv;
769 for (int i = 0; i < bank->num_sectors; i++)
770 if (bank->sectors[i].offset <= address &&
771 address < (bank->sectors[i].offset + chip->code_page_size))
772 return &bank->sectors[i];
776 static int nrf51_erase_all(struct nrf51_info *chip)
778 LOG_DEBUG("Erasing all non-volatile memory");
779 return nrf51_nvmc_generic_erase(chip,
784 static int nrf51_erase_page(struct flash_bank *bank,
785 struct nrf51_info *chip,
786 struct flash_sector *sector)
790 LOG_DEBUG("Erasing page at 0x%"PRIx32, sector->offset);
791 if (sector->is_protected) {
792 LOG_ERROR("Cannot erase protected sector at 0x%" PRIx32, sector->offset);
796 if (bank->base == NRF51_UICR_BASE) {
798 res = target_read_u32(chip->target, NRF51_FICR_PPFC,
800 if (res != ERROR_OK) {
801 LOG_ERROR("Couldn't read PPFC register");
805 if ((ppfc & 0xFF) == 0xFF) {
806 /* We can't erase the UICR. Double-check to
807 see if it's already erased before complaining. */
808 default_flash_blank_check(bank);
809 if (sector->is_erased == 1)
812 LOG_ERROR("The chip was not pre-programmed with SoftDevice stack and UICR cannot be erased separately. Please issue mass erase before trying to write to this region");
816 res = nrf51_nvmc_generic_erase(chip,
817 NRF51_NVMC_ERASEUICR,
822 res = nrf51_nvmc_generic_erase(chip,
823 NRF51_NVMC_ERASEPAGE,
828 sector->is_erased = 1;
833 static const uint8_t nrf51_flash_write_code[] = {
834 /* See contrib/loaders/flash/cortex-m0.S */
836 0x0d, 0x68, /* ldr r5, [r1, #0] */
837 0x00, 0x2d, /* cmp r5, #0 */
838 0x0b, 0xd0, /* beq.n 1e <exit> */
839 0x4c, 0x68, /* ldr r4, [r1, #4] */
840 0xac, 0x42, /* cmp r4, r5 */
841 0xf9, 0xd0, /* beq.n 0 <wait_fifo> */
842 0x20, 0xcc, /* ldmia r4!, {r5} */
843 0x20, 0xc3, /* stmia r3!, {r5} */
844 0x94, 0x42, /* cmp r4, r2 */
845 0x01, 0xd3, /* bcc.n 18 <no_wrap> */
846 0x0c, 0x46, /* mov r4, r1 */
847 0x08, 0x34, /* adds r4, #8 */
849 0x4c, 0x60, /* str r4, [r1, #4] */
850 0x04, 0x38, /* subs r0, #4 */
851 0xf0, 0xd1, /* bne.n 0 <wait_fifo> */
853 0x00, 0xbe /* bkpt 0x0000 */
857 /* Start a low level flash write for the specified region */
858 static int nrf51_ll_flash_write(struct nrf51_info *chip, uint32_t offset, const uint8_t *buffer, uint32_t bytes)
860 struct target *target = chip->target;
861 uint32_t buffer_size = 8192;
862 struct working_area *write_algorithm;
863 struct working_area *source;
864 uint32_t address = NRF51_FLASH_BASE + offset;
865 struct reg_param reg_params[4];
866 struct armv7m_algorithm armv7m_info;
867 int retval = ERROR_OK;
870 LOG_DEBUG("Writing buffer to flash offset=0x%"PRIx32" bytes=0x%"PRIx32, offset, bytes);
871 assert(bytes % 4 == 0);
873 /* allocate working area with flash programming code */
874 if (target_alloc_working_area(target, sizeof(nrf51_flash_write_code),
875 &write_algorithm) != ERROR_OK) {
876 LOG_WARNING("no working area available, falling back to slow memory writes");
878 for (; bytes > 0; bytes -= 4) {
879 retval = target_write_memory(chip->target, offset, 4, 1, buffer);
880 if (retval != ERROR_OK)
883 retval = nrf51_wait_for_nvmc(chip);
884 if (retval != ERROR_OK)
894 LOG_WARNING("using fast async flash loader. This is currently supported");
895 LOG_WARNING("only with ST-Link and CMSIS-DAP. If you have issues, add");
896 LOG_WARNING("\"set WORKAREASIZE 0\" before sourcing nrf51.cfg to disable it");
898 retval = target_write_buffer(target, write_algorithm->address,
899 sizeof(nrf51_flash_write_code),
900 nrf51_flash_write_code);
901 if (retval != ERROR_OK)
905 while (target_alloc_working_area(target, buffer_size, &source) != ERROR_OK) {
907 buffer_size &= ~3UL; /* Make sure it's 4 byte aligned */
908 if (buffer_size <= 256) {
909 /* free working area, write algorithm already allocated */
910 target_free_working_area(target, write_algorithm);
912 LOG_WARNING("No large enough working area available, can't do block memory writes");
913 return ERROR_TARGET_RESOURCE_NOT_AVAILABLE;
917 armv7m_info.common_magic = ARMV7M_COMMON_MAGIC;
918 armv7m_info.core_mode = ARM_MODE_THREAD;
920 init_reg_param(®_params[0], "r0", 32, PARAM_IN_OUT); /* byte count */
921 init_reg_param(®_params[1], "r1", 32, PARAM_OUT); /* buffer start */
922 init_reg_param(®_params[2], "r2", 32, PARAM_OUT); /* buffer end */
923 init_reg_param(®_params[3], "r3", 32, PARAM_IN_OUT); /* target address */
925 buf_set_u32(reg_params[0].value, 0, 32, bytes);
926 buf_set_u32(reg_params[1].value, 0, 32, source->address);
927 buf_set_u32(reg_params[2].value, 0, 32, source->address + source->size);
928 buf_set_u32(reg_params[3].value, 0, 32, address);
930 retval = target_run_flash_async_algorithm(target, buffer, bytes/4, 4,
933 source->address, source->size,
934 write_algorithm->address, 0,
937 target_free_working_area(target, source);
938 target_free_working_area(target, write_algorithm);
940 destroy_reg_param(®_params[0]);
941 destroy_reg_param(®_params[1]);
942 destroy_reg_param(®_params[2]);
943 destroy_reg_param(®_params[3]);
948 /* Check and erase flash sectors in specified range then start a low level page write.
949 start/end must be sector aligned.
951 static int nrf51_write_pages(struct flash_bank *bank, uint32_t start, uint32_t end, const uint8_t *buffer)
953 int res = ERROR_FAIL;
954 struct nrf51_info *chip = bank->driver_priv;
955 struct flash_sector *sector;
958 assert(start % chip->code_page_size == 0);
959 assert(end % chip->code_page_size == 0);
961 /* Erase all sectors */
962 for (offset = start; offset < end; offset += chip->code_page_size) {
963 sector = nrf51_find_sector_by_address(bank, offset);
965 LOG_ERROR("Invalid sector @ 0x%08"PRIx32, offset);
966 return ERROR_FLASH_SECTOR_INVALID;
969 if (sector->is_protected) {
970 LOG_ERROR("Can't erase protected sector @ 0x%08"PRIx32, offset);
974 if (sector->is_erased != 1) { /* 1 = erased, 0= not erased, -1 = unknown */
975 res = nrf51_erase_page(bank, chip, sector);
976 if (res != ERROR_OK) {
977 LOG_ERROR("Failed to erase sector @ 0x%08"PRIx32, sector->offset);
981 sector->is_erased = 0;
984 res = nrf51_nvmc_write_enable(chip);
988 res = nrf51_ll_flash_write(chip, start, buffer, (end - start));
992 return nrf51_nvmc_read_only(chip);
995 nrf51_nvmc_read_only(chip);
997 LOG_ERROR("Failed to write to nrf51 flash");
1001 static int nrf51_erase(struct flash_bank *bank, int first, int last)
1004 struct nrf51_info *chip;
1006 res = nrf51_get_probed_chip_if_halted(bank, &chip);
1007 if (res != ERROR_OK)
1010 /* For each sector to be erased */
1011 for (int s = first; s <= last && res == ERROR_OK; s++)
1012 res = nrf51_erase_page(bank, chip, &bank->sectors[s]);
1017 static int nrf51_code_flash_write(struct flash_bank *bank,
1018 struct nrf51_info *chip,
1019 const uint8_t *buffer, uint32_t offset, uint32_t count)
1023 /* Need to perform reads to fill any gaps we need to preserve in the first page,
1024 before the start of buffer, or in the last page, after the end of buffer */
1025 uint32_t first_page = offset/chip->code_page_size;
1026 uint32_t last_page = DIV_ROUND_UP(offset+count, chip->code_page_size);
1028 uint32_t first_page_offset = first_page * chip->code_page_size;
1029 uint32_t last_page_offset = last_page * chip->code_page_size;
1031 LOG_DEBUG("Padding write from 0x%08"PRIx32"-0x%08"PRIx32" as 0x%08"PRIx32"-0x%08"PRIx32,
1032 offset, offset+count, first_page_offset, last_page_offset);
1034 uint32_t page_cnt = last_page - first_page;
1035 uint8_t buffer_to_flash[page_cnt*chip->code_page_size];
1037 /* Fill in any space between start of first page and start of buffer */
1038 uint32_t pre = offset - first_page_offset;
1040 res = target_read_memory(bank->target,
1045 if (res != ERROR_OK)
1049 /* Fill in main contents of buffer */
1050 memcpy(buffer_to_flash+pre, buffer, count);
1052 /* Fill in any space between end of buffer and end of last page */
1053 uint32_t post = last_page_offset - (offset+count);
1055 /* Retrieve the full row contents from Flash */
1056 res = target_read_memory(bank->target,
1060 buffer_to_flash+pre+count);
1061 if (res != ERROR_OK)
1065 return nrf51_write_pages(bank, first_page_offset, last_page_offset, buffer_to_flash);
1068 static int nrf51_uicr_flash_write(struct flash_bank *bank,
1069 struct nrf51_info *chip,
1070 const uint8_t *buffer, uint32_t offset, uint32_t count)
1073 uint8_t uicr[NRF51_UICR_SIZE];
1074 struct flash_sector *sector = &bank->sectors[0];
1076 if ((offset + count) > NRF51_UICR_SIZE)
1079 res = target_read_memory(bank->target,
1085 if (res != ERROR_OK)
1088 if (sector->is_erased != 1) {
1089 res = nrf51_erase_page(bank, chip, sector);
1090 if (res != ERROR_OK)
1094 res = nrf51_nvmc_write_enable(chip);
1095 if (res != ERROR_OK)
1098 memcpy(&uicr[offset], buffer, count);
1100 res = nrf51_ll_flash_write(chip, NRF51_UICR_BASE, uicr, NRF51_UICR_SIZE);
1101 if (res != ERROR_OK) {
1102 nrf51_nvmc_read_only(chip);
1106 return nrf51_nvmc_read_only(chip);
1110 static int nrf51_write(struct flash_bank *bank, const uint8_t *buffer,
1111 uint32_t offset, uint32_t count)
1114 struct nrf51_info *chip;
1116 res = nrf51_get_probed_chip_if_halted(bank, &chip);
1117 if (res != ERROR_OK)
1120 return chip->bank[bank->bank_number].write(bank, chip, buffer, offset, count);
1124 FLASH_BANK_COMMAND_HANDLER(nrf51_flash_bank_command)
1126 static struct nrf51_info *chip;
1128 switch (bank->base) {
1129 case NRF51_FLASH_BASE:
1130 bank->bank_number = 0;
1132 case NRF51_UICR_BASE:
1133 bank->bank_number = 1;
1136 LOG_ERROR("Invalid bank address 0x%08" PRIx32, bank->base);
1141 /* Create a new chip */
1142 chip = calloc(1, sizeof(*chip));
1146 chip->target = bank->target;
1149 switch (bank->base) {
1150 case NRF51_FLASH_BASE:
1151 chip->bank[bank->bank_number].write = nrf51_code_flash_write;
1153 case NRF51_UICR_BASE:
1154 chip->bank[bank->bank_number].write = nrf51_uicr_flash_write;
1158 chip->bank[bank->bank_number].probed = false;
1159 bank->driver_priv = chip;
1164 COMMAND_HANDLER(nrf51_handle_mass_erase_command)
1167 struct flash_bank *bank = NULL;
1168 struct target *target = get_current_target(CMD_CTX);
1170 res = get_flash_bank_by_addr(target, NRF51_FLASH_BASE, true, &bank);
1171 if (res != ERROR_OK)
1174 assert(bank != NULL);
1176 struct nrf51_info *chip;
1178 res = nrf51_get_probed_chip_if_halted(bank, &chip);
1179 if (res != ERROR_OK)
1184 res = target_read_u32(target, NRF51_FICR_PPFC,
1186 if (res != ERROR_OK) {
1187 LOG_ERROR("Couldn't read PPFC register");
1191 if ((ppfc & 0xFF) == 0x00) {
1192 LOG_ERROR("Code region 0 size was pre-programmed at the factory, "
1193 "mass erase command won't work.");
1197 res = nrf51_erase_all(chip);
1198 if (res != ERROR_OK) {
1199 LOG_ERROR("Failed to erase the chip");
1200 nrf51_protect_check(bank);
1204 for (int i = 0; i < bank->num_sectors; i++)
1205 bank->sectors[i].is_erased = 1;
1207 res = nrf51_protect_check(bank);
1208 if (res != ERROR_OK) {
1209 LOG_ERROR("Failed to check chip's write protection");
1213 res = get_flash_bank_by_addr(target, NRF51_UICR_BASE, true, &bank);
1214 if (res != ERROR_OK)
1217 bank->sectors[0].is_erased = 1;
1222 static int nrf51_info(struct flash_bank *bank, char *buf, int buf_size)
1226 struct nrf51_info *chip;
1228 res = nrf51_get_probed_chip_if_halted(bank, &chip);
1229 if (res != ERROR_OK)
1233 const uint32_t address;
1236 { .address = NRF51_FICR_CODEPAGESIZE },
1237 { .address = NRF51_FICR_CODESIZE },
1238 { .address = NRF51_FICR_CLENR0 },
1239 { .address = NRF51_FICR_PPFC },
1240 { .address = NRF51_FICR_NUMRAMBLOCK },
1241 { .address = NRF51_FICR_SIZERAMBLOCK0 },
1242 { .address = NRF51_FICR_SIZERAMBLOCK1 },
1243 { .address = NRF51_FICR_SIZERAMBLOCK2 },
1244 { .address = NRF51_FICR_SIZERAMBLOCK3 },
1245 { .address = NRF51_FICR_CONFIGID },
1246 { .address = NRF51_FICR_DEVICEID0 },
1247 { .address = NRF51_FICR_DEVICEID1 },
1248 { .address = NRF51_FICR_ER0 },
1249 { .address = NRF51_FICR_ER1 },
1250 { .address = NRF51_FICR_ER2 },
1251 { .address = NRF51_FICR_ER3 },
1252 { .address = NRF51_FICR_IR0 },
1253 { .address = NRF51_FICR_IR1 },
1254 { .address = NRF51_FICR_IR2 },
1255 { .address = NRF51_FICR_IR3 },
1256 { .address = NRF51_FICR_DEVICEADDRTYPE },
1257 { .address = NRF51_FICR_DEVICEADDR0 },
1258 { .address = NRF51_FICR_DEVICEADDR1 },
1259 { .address = NRF51_FICR_OVERRIDEN },
1260 { .address = NRF51_FICR_NRF_1MBIT0 },
1261 { .address = NRF51_FICR_NRF_1MBIT1 },
1262 { .address = NRF51_FICR_NRF_1MBIT2 },
1263 { .address = NRF51_FICR_NRF_1MBIT3 },
1264 { .address = NRF51_FICR_NRF_1MBIT4 },
1265 { .address = NRF51_FICR_BLE_1MBIT0 },
1266 { .address = NRF51_FICR_BLE_1MBIT1 },
1267 { .address = NRF51_FICR_BLE_1MBIT2 },
1268 { .address = NRF51_FICR_BLE_1MBIT3 },
1269 { .address = NRF51_FICR_BLE_1MBIT4 },
1271 { .address = NRF51_UICR_CLENR0, },
1272 { .address = NRF51_UICR_RBPCONF },
1273 { .address = NRF51_UICR_XTALFREQ },
1274 { .address = NRF51_UICR_FWID },
1277 for (size_t i = 0; i < ARRAY_SIZE(ficr); i++) {
1278 res = target_read_u32(chip->target, ficr[i].address,
1280 if (res != ERROR_OK) {
1281 LOG_ERROR("Couldn't read %" PRIx32, ficr[i].address);
1286 for (size_t i = 0; i < ARRAY_SIZE(uicr); i++) {
1287 res = target_read_u32(chip->target, uicr[i].address,
1289 if (res != ERROR_OK) {
1290 LOG_ERROR("Couldn't read %" PRIx32, uicr[i].address);
1295 snprintf(buf, buf_size,
1296 "\n[factory information control block]\n\n"
1297 "code page size: %"PRIu32"B\n"
1298 "code memory size: %"PRIu32"kB\n"
1299 "code region 0 size: %"PRIu32"kB\n"
1300 "pre-programmed code: %s\n"
1301 "number of ram blocks: %"PRIu32"\n"
1302 "ram block 0 size: %"PRIu32"B\n"
1303 "ram block 1 size: %"PRIu32"B\n"
1304 "ram block 2 size: %"PRIu32"B\n"
1305 "ram block 3 size: %"PRIu32 "B\n"
1306 "config id: %" PRIx32 "\n"
1307 "device id: 0x%"PRIx32"%08"PRIx32"\n"
1308 "encryption root: 0x%08"PRIx32"%08"PRIx32"%08"PRIx32"%08"PRIx32"\n"
1309 "identity root: 0x%08"PRIx32"%08"PRIx32"%08"PRIx32"%08"PRIx32"\n"
1310 "device address type: 0x%"PRIx32"\n"
1311 "device address: 0x%"PRIx32"%08"PRIx32"\n"
1312 "override enable: %"PRIx32"\n"
1313 "NRF_1MBIT values: %"PRIx32" %"PRIx32" %"PRIx32" %"PRIx32" %"PRIx32"\n"
1314 "BLE_1MBIT values: %"PRIx32" %"PRIx32" %"PRIx32" %"PRIx32" %"PRIx32"\n"
1315 "\n[user information control block]\n\n"
1316 "code region 0 size: %"PRIu32"kB\n"
1317 "read back protection configuration: %"PRIx32"\n"
1318 "reset value for XTALFREQ: %"PRIx32"\n"
1319 "firmware id: 0x%04"PRIx32,
1321 (ficr[1].value * ficr[0].value) / 1024,
1322 (ficr[2].value == 0xFFFFFFFF) ? 0 : ficr[2].value / 1024,
1323 ((ficr[3].value & 0xFF) == 0x00) ? "present" : "not present",
1326 (ficr[6].value == 0xFFFFFFFF) ? 0 : ficr[6].value,
1327 (ficr[7].value == 0xFFFFFFFF) ? 0 : ficr[7].value,
1328 (ficr[8].value == 0xFFFFFFFF) ? 0 : ficr[8].value,
1330 ficr[10].value, ficr[11].value,
1331 ficr[12].value, ficr[13].value, ficr[14].value, ficr[15].value,
1332 ficr[16].value, ficr[17].value, ficr[18].value, ficr[19].value,
1334 ficr[21].value, ficr[22].value,
1336 ficr[24].value, ficr[25].value, ficr[26].value, ficr[27].value, ficr[28].value,
1337 ficr[29].value, ficr[30].value, ficr[31].value, ficr[32].value, ficr[33].value,
1338 (uicr[0].value == 0xFFFFFFFF) ? 0 : uicr[0].value / 1024,
1339 uicr[1].value & 0xFFFF,
1340 uicr[2].value & 0xFF,
1341 uicr[3].value & 0xFFFF);
1346 static const struct command_registration nrf51_exec_command_handlers[] = {
1348 .name = "mass_erase",
1349 .handler = nrf51_handle_mass_erase_command,
1350 .mode = COMMAND_EXEC,
1351 .help = "Erase all flash contents of the chip.",
1353 COMMAND_REGISTRATION_DONE
1356 static const struct command_registration nrf51_command_handlers[] = {
1359 .mode = COMMAND_ANY,
1360 .help = "nrf51 flash command group",
1362 .chain = nrf51_exec_command_handlers,
1364 COMMAND_REGISTRATION_DONE
1367 struct flash_driver nrf51_flash = {
1369 .commands = nrf51_command_handlers,
1370 .flash_bank_command = nrf51_flash_bank_command,
1372 .erase = nrf51_erase,
1373 .protect = nrf51_protect,
1374 .write = nrf51_write,
1375 .read = default_flash_read,
1376 .probe = nrf51_probe,
1377 .auto_probe = nrf51_auto_probe,
1378 .erase_check = default_flash_blank_check,
1379 .protect_check = nrf51_protect_check,