All, We are designing a "loader" for field firmware updates. Unfortunately we do not have the code space (P89C668) to have two sets of code in on-chip flash. Therefore we will use a scheme where we have the loader code located in sector one and all the ISRs in sector zero as the loader will use interrupts. The rest of the application will be in sectors 2 and up. The loader will erase the upper sectors and program the new code there. It will then erase sector zero and reprogram the vector table and the ISRs. Block one, the loader, will remain unchanged. Questions: I think I can locate the code in sector one and the ISRs in sector zero using user classes. I have done this with some ARM code in uVision. How can I be sure that the loader will have all the run-time modules it needs in sector zero? In other words, I cannot have the loader calling code in sectors that have been erased. It will have to be completely self contained except for the ISRs. Is this a reasonable plan? Anyone have a better way to do this? Rich
DO visualize wha will happen with your scheme if power fail at any time during the process. I have seen more dead chips due to this than anything else. If you decide to go ahead with a scheme where such can happen, at least socket your processor. Erik
Without the space to duplcate the code there is not much option.
then why not use NoTouch and the ISP Erik
The units are potted and on a 485 bus.
,i>The units are potted and on a 485 bus. on all such bopards, I have a connector to a "remote" MAX232equivalent just for ISP. Erik
When installed, the units are not accessible.
But the connectot I suggest will be
But the connector I suggest will be
Erik, are you helping? ;-) Actually I appreciate the replies. The plan du jour is to have the loader in one sector which does not use interrupts or libaries. When the loader starts the BV is changed to the loader entry, that way, if power should fail etc, we end up back in the loader. Once the loader has downloaded and verified all code we reprogram the BV to FC in case we need ISP in the future. Then we let the WDT timeout. The units are not acessible at all, only the network is. Rich
We have the same problem in a number of products. Our solution is to put the boot loader and the interrupt vectors in the first part of memory ... in our case the first 4k. We have the application start at 0x1000, while the Boot starts at 0x100, the interrupt vector processing is the only code at 0. Do this by relocating the interrupt vectors (see C51 TAB in uVision) and changing the StartUp.A51. We reserve an unused interrupt vector block in the application to keep a checksum that is generated by the Boot after successful download. The actual interrupt code uses the same scheme that RTX uses ... ie. we set a bit (RTX uses F0) to indicate that we are in the boot. If an interrupt occurs while in the boot, we use an AJMP to 0x103 + (8*Int#). If an application interrupt occurs we do a LJMP to 0x1003 + (8*Int#). The two jumps and the JNB InBootBit all fit in the standard 8 byte interrupt vector slot. When the processor is reset, the Boot executes first and jumps to 0x1000 if the application checksum is valid. If not it simply waits for download. In this manner, the boot is really simple and handles the TxEnable and any other special stuff.
View all questions in Keil forum