(Nano-)Bootloader, Flashloader (<=SSP 1.3.0), Downloader, Secure Boot Manager (S5 only): Please advise what to choose for a S3A1 UART/USB field update?

Hi,

The Synergy S3 devices do not have the same security and crypto capabilities as the S5 series and as such the SBM is not suitable for the S3 parts. Namely, the S3 does not have hardware support for public/private key crypto (RSA/ECC) or SHA256 hashing both of which are required by the SBM. The SBM also uses symmetric AES crypto which the S3 series does have.

Therefore, I would look at the flashloader project. This project is designed as a starting point to assist in developing a bootloader. It would be possible to add security features within the capabilities of the S3 hardware if necessary.

Below is a link to a pack file for the flashloader which can be used with versions of the SSP beyond 1.3.0.

renesasrulz.com/.../REA.Synergy_5F00_flashloader.0.0.0.pack.zip

Regards,

Ian.

Hi Ian,

thank you for your reply and the link to the pack file!
Yes I knew that only S5 MCU provide a secure bootloader function, I only want to point out that in this case the provided information are not clear compared to other modules.
So after installing the pack I can see now the regarding Renesas stacks. Is there any sample project or further documention available or can I use the document "Customizable Flashloader Solution for Synergy MCUs (R11AN0073EU0112 Rev.1.12 Dec 28, 2018)" even if it is limited to SSP 1.3.x ?

Thank you very much and best regards

Ralph

Thank you for your replies!

Yes,  Jeremy you are right, after adding "NOLOAD" in the linker script to the ID code,  they weren't part of crc calculation any longer and crc values are equal now!

I've compiled the flashloader projekt with Visual studio and replaced "r_fl_mot_converter.py" with "r_fl_mot_converter_modified.py".

But nevertheless, if I wan't to convert the srec file into a bch file or if I want to connect to the S3A1 MCU nothing happens, no entry to the log window (only after saving the default options):

 

So actually I'm still stucking in the flashloader app! I hope I'm not to annoying, but I'm very grateful for any support!

Thanks and best regards

Ralph

The python scripts need to be in the same directory as the executable. If I debug the GUI under VS I see :-

If I leave the python scripts in their default location.

If I then copy the scripts into the directory where the .exe is (while still debugging under VS):-

The GUI runs as expected :-

 

pyserial and modcrc need to be downloaded and installed in python as well.

Hi Jeremy,

thank you very much for your very helpful reply!

I've copied the files and installed pyserial and modcrc successfully, so far so good.

 

But the visual studio output window shows the following syntax errors:

 The first one is shown when I press the convert button,  the 2nd one when I press the connect button. Do you have any idea what's going wrong?

 

Thank you and best regards!

Ralph

Which version of Python are you using? I see :-

When I try to open an invalid s-record file. The flashloader documentation shows :-

 

I am using python 2.7.16

Hi Jeremy,

thanks again for your advice! I've installed Python V3.8, which is obviously not compatible with the actual provided flashloader scripts.
But indeed with Python Version 2.7.16 it works so far (convert and connect), during the day I will also test the download function...

Thank you and best regards

Ralph

Hi Jeremy,

with Python Version 2.7.16 the programming of the MCU slots works as well. Thanks a lot for your support!

Best regards

Ralph

Hi Jeremy,
may be you have an idea concerning the following problem: I would like to use threads in our own bootloader (e.g. for USB), but as soon as I add a single thread (only with one tx_thread_sleep()) , the bootloader doesn't jump to the application anymore (I've checked the jump address, all seems to be correct).
First I thought it is because of active interrupts in the background (I had the same effect with pure "HAL"-bootloader, if I didn't close all running timer before jumping to the application, it fails), but I saw just before the bootloader performs the jump to the appliction, all INT's were disabled.

Is there any possibility to use threads in the bootloader and if yes, what issue I have to take care of, that the application jump succeeds?

Thank you and best regards

Ralph

Yes it is possible to use ThreadX in the bootloader, you just have to make sure the device is in the correct state before you jump to the application. The CPU will need to be in the state it is at start up (using the correct stack etc), the MPU stack monitor will need to be disabled (both the PSP and MSP stack monitor will be enabled in an SSP 1.7.0 threadX based project), peripheral drivers closed so no interrupts occurs (this will also mean the Systick timer).

Hi Jeremy,

I found this piece of code in the forum and would like to ask , whether this is it, what I have to do before I jump to the applicatiopn, but unfortunately "_ux_system_host" is marked as an undeclared symbol from the compiler. I don't know where it is decalred?

if( DISABLE == EnableDisable )
{
/** Store the interrupt state */
old_primask = __get_PRIMASK();

/* Disable other threads whilst flash erasing */
// tx_thread_suspend(&_ux_system_host->ux_system_host_hcd_thread );

/* Disable the SysTick timer */
control_reg_value = SysTick->CTRL;
SysTick->CTRL = 0;
NVIC_DisableIRQ( SysTick_IRQn ); /* Disable the SysTick timer IRQ */
NVIC_ClearPendingIRQ( SysTick_IRQn ); /* Clear any pending SysTick timer IRQ */

__disable_irq(); /* Disable interrupts */
}

Thank you and best regards

Ralph

Hi Jeremy,

I've added "USB on ux" to my idle thread in the configurator, after this "_ux_system_host" was declared and I could compile the project, but the jump to application failed again.

Thank you and best regards

Ralph

Hi Jeremy,

I've added "USB on ux" to my idle thread in the configurator, after this "_ux_system_host" was declared and I could compile the project, but the jump to application failed again.

Thank you and best regards

Ralph

Do you disable the Stack monitor before doing the jump from the bootloader to the application :-

R_SPMON->MSPMPUCTL = 0xA500; /* Enable writes to MSP SPMON registers */
R_SPMON->PSPMPUCTL = 0xA500; /* Enable writes to PSP SPMON registers */

R_SPMON->MSPMPUCTL = (uint16_t)0x0000; /* Disable MSP monitoring */
R_SPMON->PSPMPUCTL = (uint16_t)0x0000; /* Disable PSP monitoring */

__set_CONTROL(0); // Set the CPU to use MSP stack

__ISB(); //Ensure instructions use the new stack setting

Hi Jeremy,
thanks a lot for your support!!! Now the jump works, also staying in Bootloader in case jump fails!
Next step is customizing the downloading and flashing function...

Best regards
Ralph

Hi Jeremy,

in the meanwhile I've nearly finished my bootloader in that way, that the bootloader itself receives the raw main application bin file from a small PC application via USB or UART and writes it directly to the internal code flash and then jumps to the main application, so far so very good!

Actually I use as main application the tiny downloader application provided by the sample from Renesas. The application consits only of a blinky function and one thread with the sf_downloader framework, which I don't use due to the fact, that the downloading job is performed by the bootloader itself.

In my bootloader solution - If I understand it correct - I only use the "sf_firmware_image_file_header" generated by the sf_downloader framework and inserted at memory address ". = __ROM_Start + 0x800;" via the linker script , which is used from the bootloader to detect whether a valid main application is stored in the internal code flash or not. For my opionion the remainig features (including comms and mcu memory, ... ) of sf_downloader framework won't be used and are not necessary in my case.

So my question is: Is there any possibility to provide only the "sf_firmware_image_file_header", with its data, whithout adding the complete sf_downloader framework (including comms and memory, ... ).
And if yes, how can I ensure that the "sf_firmware_image_file_header" struct is filled with the correct values or how can I do that manually (e.g. own struct with the same members)?

I hope my description is not too confused to understand my issue.

Thank you and best regards
Ralph