OFF CHIP OTA UPDATE using external flash

RE: OFF CHIP OTA UPDATE using external flash

Priyesh Shahi — Sat, 30 Dec 2023 04:49:26 GMT

The occasional CRC failure occurred due to the 'rest_block' variable stemming from the 'FIRMWARE_BLOCK_SIZE,' which is set to 4096. Therefore, whenever the 'rest_block' size exceeded 256, this error occurred.

// CRC verification on external image

uint16_t firmware_blocks = image_size / FIRMWARE_BLOCK_SIZE;

uint8_t rest_block = image_size % FIRMWARE_BLOCK_SIZE;

uint32_t computed_crc = 0;

As this problem has been solved, my task is now completed. Thank you so much!

RE: OFF CHIP OTA UPDATE using external flash

Priyesh Shahi — Fri, 22 Dec 2023 09:57:39 GMT

Is there a way to erase the trigger settings or the settings saved for the currently downloading firmware? Because once the above error occurs, my firmware process works. However, alternatively, if it works fine this time, then the next time there might be an error. Or, if there's an error this time, it might work the next time.

I think some type of setting or data is stored in the system that isn't erased when something fails

RE: OFF CHIP OTA UPDATE using external flash

Vidar Berg — Thu, 21 Dec 2023 10:18:44 GMT

It seems it would be easier to back up the original settings to RAM. However, it's a bit surprising that you encounter occasional CRC errors in your copy routine. The image in bank 1 is validated by the post-validate function before the activation takes place.

RE: OFF CHIP OTA UPDATE using external flash

Priyesh Shahi — Thu, 21 Dec 2023 08:32:44 GMT

Should I save these values in external flash and reset them when encountering the same error? Or is there another method to retrieve the previous settings?

RE: OFF CHIP OTA UPDATE using external flash

Vidar Berg — Thu, 21 Dec 2023 08:24:55 GMT

This suggests that the bank0.crc value in bt settings may have been updated (assuming you're using CRC validation (default)). The bootloader will verify the compute the CRC of the application to verify the integrity of the app image before booting. You also need to revert the app version number.

RE: OFF CHIP OTA UPDATE using external flash

Priyesh Shahi — Thu, 21 Dec 2023 08:18:46 GMT

Yes, it does. However, The firmware version changes, and when I attempt to restart my device, it fails within the app_is_valid() function while executing the boot_validate() function. I've been investigating the cause and noticed that during the execution of this code segment:

// Postvalidate if DFU has signaled that update is ready.
if (s_dfu_settings.bank_current == NRF_DFU_CURRENT_BANK_1)
{
postvalidate();
}
#endif

The firmware version and s_dfu_settings.boot_validation_app are updated within the postvalidate_app() function.

memcpy(&s_dfu_settings.boot_validation_app, &boot_validation, sizeof(boot_validation));

s_dfu_settings.app_version = p_init->fw_version;

// The is_trusted argument specifies whether the function should have side effects.
static bool postvalidate_app(dfu_init_command_t const * p_init, uint32_t src_addr, uint32_t data_len, bool is_trusted)
{
    boot_validation_t boot_validation;

    ASSERT(p_init->type == DFU_FW_TYPE_APPLICATION);

    if (!boot_validation_extract(&boot_validation, p_init, 0, src_addr, data_len, VALIDATE_CRC))
    {
        return false;
    }
#if !NRF_DFU_IN_APP
    else if (NRF_BL_APP_SIGNATURE_CHECK_REQUIRED &&
             (boot_validation.type != VALIDATE_ECDSA_P256_SHA256))
    {
        NRF_LOG_WARNING("The boot validation of the app must be a signature check.");
        return false;
    }
#endif

    if (!is_trusted)
    {
        return true;
    }

    memcpy(&s_dfu_settings.boot_validation_app, &boot_validation, sizeof(boot_validation));

    s_dfu_settings.bank_1.bank_code = NRF_DFU_BANK_VALID_APP;

    NRF_LOG_DEBUG("Invalidating old application in bank 0.");
    s_dfu_settings.bank_0.bank_code = NRF_DFU_BANK_INVALID;

    if (!DFU_REQUIRES_SOFTDEVICE && !update_requires_softdevice(p_init))
    {
         // App does not need SD, so it should be placed where SD is.
         nrf_dfu_softdevice_invalidate();
    }

    if (!NRF_DFU_DEBUG ||
                (NRF_DFU_DEBUG && (p_init->has_is_debug == false || p_init->is_debug == false)))
    {
        s_dfu_settings.app_version = p_init->fw_version;
    }

    return true;
}

RE: OFF CHIP OTA UPDATE using external flash

Vidar Berg — Thu, 21 Dec 2023 07:46:34 GMT

Hello,

Does your bootloader not fall back to the old application when the CRCs don't match?

RE: OFF CHIP OTA UPDATE using external flash

Priyesh Shahi — Wed, 20 Dec 2023 09:01:25 GMT

Hello Vidar Berg ,

The recent changes have been effective most of the time, but occasional failures still occur in the CRC calculation following image copying. The CRC obtained from the QSPI sometimes doesn't align with the computed CRC after the image copy process. To address this, I implemented a modification: before copying the image, I perform a CRC calculation on the image stored in the external flash. Subsequently, I added a condition that allows the image to be copied only if these two CRC values match. This solution has been functioning properly. However, a problem arises when a CRC mismatch occurs. I've implemented a flag that triggers the start of the Bank 0 application, but I'm uncertain about the logic behind it.

I'm considering adjustments to the settings that would prompt the bootloader to restart the Bank 0 application. Any insights on which settings should be modified for this purpose?

static uint32_t app_activate(void) {
  // This function is only in use when new app is present in Bank 1
  uint32_t const image_size = s_dfu_settings.bank_1.image_size;

  uint32_t src_addr = s_dfu_settings.progress.update_start_address;
  uint32_t ret_val = NRF_SUCCESS;
  uint32_t target_addr = nrf_dfu_bank0_start_addr() + s_dfu_settings.write_offset;
  uint32_t length_left = (image_size - s_dfu_settings.write_offset);
  uint32_t crc;

  NRF_LOG_DEBUG("Enter nrf_dfu_app_continue");

  src_addr += s_dfu_settings.write_offset;

  if (src_addr == target_addr) {
    length_left = 0;
  }

  //qspi read
  uint32_t read_buffer[1]; // Buffer to store the read value

  // Read the value from QSPI memory into read_buffer (assumed nrf_drv_qspi_read is used)
  if (nrf_drv_qspi_read(read_buffer, sizeof(read_buffer), FW_CRC_ADDR) != NRFX_SUCCESS) {
    // Error handling if read fails
    WAIT_FOR_PERIPH();
    NRF_LOG_INFO("Failed to read initial firmware crc.\r\n");
  } else {
    // Successful read
    WAIT_FOR_PERIPH();

    downloaded_crc_val = read_buffer[0]; // Extract the read value from the buffer
    NRF_LOG_INFO("Initial firmware crc=0x%X  at: 0x%X\r\n", downloaded_crc_val, FW_CRC_ADDR);
  }

  //crc verification on external image
  uint16_t firmware_blocks = image_size / FIRMWARE_BLOCK_SIZE;
  uint8_t rest_block = image_size % FIRMWARE_BLOCK_SIZE;
  uint32_t computed_crc = 0; 


  for(uint16_t i=0; i <= firmware_blocks; i++)
  {

    uint8_t m_buffer_rx[FIRMWARE_BLOCK_SIZE];

    if(i == firmware_blocks)
    {
        if(nrf_drv_qspi_read(m_buffer_rx, rest_block,FIRMWARE_FLASH_ADDR + (FIRMWARE_BLOCK_SIZE * i)) != NRFX_SUCCESS)
        {
            WAIT_FOR_PERIPH();
            NRF_LOG_INFO("\r\nFailed read data blocks in Ext Flash.\r\n");
        }
        else
        {
            WAIT_FOR_PERIPH();
            computed_crc = crc32_compute(m_buffer_rx, rest_block, &computed_crc);
        }
    }
    else
    {
        if(nrf_drv_qspi_read(m_buffer_rx, FIRMWARE_BLOCK_SIZE,FIRMWARE_FLASH_ADDR + (FIRMWARE_BLOCK_SIZE * i)) != NRFX_SUCCESS)
        {
            WAIT_FOR_PERIPH();
            NRF_LOG_INFO("\r\nFailed read data blocks in Ext Flash.\r\n");
        }
        else
        {
            WAIT_FOR_PERIPH();
            computed_crc = crc32_compute(m_buffer_rx, FIRMWARE_BLOCK_SIZE, &computed_crc);
        }
    }
  }
  
  NRF_LOG_INFO("Computed QSPI CRC: 0x%X\r\n", computed_crc);

  if(computed_crc == downloaded_crc_val)
  {
      ret_val = image_copy(target_addr, src_addr, length_left, NRF_BL_FW_COPY_PROGRESS_STORE_STEP);
      if (ret_val != NRF_SUCCESS) {
        NRF_LOG_ERROR("Failed to copy firmware.");
        return ret_val;
      }
  }
  else
  {
      NRF_LOG_INFO("ERROR: CRC mismatch app activation failed");
      s_dfu_settings.bank_0.bank_code = NRF_DFU_BANK_VALID_APP;
      s_dfu_settings.bank_current == NRF_DFU_CURRENT_BANK_0;
      re_start = true;
      ret_val = NRF_ERROR_INVALID_DATA;
      return ret_val;
  }

  // Check the CRC of the copied data. Enable if so.
  crc = crc32_compute((uint8_t *)nrf_dfu_bank0_start_addr(), image_size, NULL);
  
  if (crc == s_dfu_settings.bank_1.image_crc || crc == downloaded_crc_val || crc == computed_crc) {
    NRF_LOG_DEBUG("Setting app as valid");
    s_dfu_settings.bank_0.bank_code = NRF_DFU_BANK_VALID_APP;
    s_dfu_settings.bank_0.image_crc = crc;
    s_dfu_settings.bank_0.image_size = image_size;
  } else {
    NRF_LOG_ERROR("CRC computation failed for copied app: "
                  "src crc: 0x%08x, res crc: 0x%08x",
        s_dfu_settings.bank_1.image_crc,
        crc);
  }

RE: OFF CHIP OTA UPDATE using external flash

Vidar Berg — Fri, 08 Dec 2023 14:00:41 GMT

Thank you for the update. I'm glad to hear that you found the problem.

RE: OFF CHIP OTA UPDATE using external flash

Priyesh Shahi — Fri, 08 Dec 2023 12:37:21 GMT

Yes, I found the same thing in the initial logs from background_dfu_state.c. There was a CRC that matched the computed CRC in the bootloader. Consequently, I made some changes to the code, and it's currently functioning as expected. Now, I'm in the process of testing it for the final version.

This log is from the point where the first CRC was printed.

This is the code I modified in the parse_trigger() function within the background_dfu_state.c file to store that CRC in the external QSPI flash.

static bool parse_trigger(background_dfu_context_t       * p_dfu_ctx,
                          const background_dfu_trigger_t * p_trigger)
{
    uint8_t trigger_version = (p_trigger->flags & TRIGGER_FLAGS_VERSION_MASK)
                                    >> TRIGGER_FLAGS_VERSION_OFFSET;

    if (trigger_version <= TRIGGER_VERSION)
    {
        // Base fields available from version 0.
        p_dfu_ctx->init_cmd_size = uint32_big_decode((const uint8_t *)&p_trigger->init_length);
        p_dfu_ctx->init_cmd_crc  = uint32_big_decode((const uint8_t *)&p_trigger->init_crc);
        p_dfu_ctx->firmware_size = uint32_big_decode((const uint8_t *)&p_trigger->image_length);
        p_dfu_ctx->firmware_crc  = uint32_big_decode((const uint8_t *)&p_trigger->image_crc);

        // Mode flag was added in DFU Trigger version 1.
        if (trigger_version >= 1)
        {
            p_dfu_ctx->dfu_mode = (background_dfu_mode_t)((p_trigger->flags
                                    & TRIGGER_FLAGS_MODE_MASK) >> TRIGGER_FLAGS_MODE_OFFSET);
            p_dfu_ctx->reset_suppress = (p_trigger->flags & TRIGGER_FLAGS_RESET_MASK) >>
                                          TRIGGER_FLAGS_RESET_OFFSET;

        }
        else
        {
            p_dfu_ctx->dfu_mode = BACKGROUND_DFU_MODE_UNICAST;
        }

        NRF_LOG_INFO("DFU trigger: init (sz=%d, crc=%0X) image (sz=%d, crc=%0X)",
                     p_dfu_ctx->init_cmd_size,
                     p_dfu_ctx->init_cmd_crc,
                     p_dfu_ctx->firmware_size,
                     p_dfu_ctx->firmware_crc);

                     printf("Total Number of blocks: %d\r\n",p_dfu_ctx->firmware_size/64);
    

    // Get the dynamic value of firmware_crc from p_dfu_ctx whenever needed
    uint32_t CRC_VAL = p_dfu_ctx->firmware_crc;

    // Create an array and directly initialize it with the dynamic value using a compound literal
    uint32_t CRC_VAL_BUFF[] = { CRC_VAL };

    /* erase the flash */
        
    if(nrf_drv_qspi_erase(sizeof(CRC_VAL_BUFF), FIRMWARE_CRC_ADDR) != NRFX_SUCCESS)
    {
      NRF_LOG_INFO("Failed to errase data blocks for initial firmware crc.\r\n");
    }
    else
    {
      WAIT_FOR_PERIPH();
      NRF_LOG_INFO("Succsessfully Erased Ext Flash block at: 0x%X\r\n\r\n",FIRMWARE_CRC_ADDR);
    }



    if(nrf_drv_qspi_write(CRC_VAL_BUFF, sizeof(CRC_VAL_BUFF),FIRMWARE_CRC_ADDR) != NRFX_SUCCESS)
    {
      WAIT_FOR_PERIPH();
      NRF_LOG_INFO("\r\nFailed storing initial firmware crc.\r\n");
    }
    else
    {
      WAIT_FOR_PERIPH();
      NRF_LOG_INFO("Succsessfully reead initial firmware crc=0x%X  at: 0x%X\r\n", CRC_VAL, FIRMWARE_CRC_ADDR);
    }
    
    
    
    dfu_total_blocks = p_dfu_ctx->firmware_size/64;

    if (p_dfu_ctx->firmware_size % 64 != 0) {
        dfu_total_blocks += 1;
    }

          
        return true;
    }

    return false;
}

I later modified the code in the nrf_dfu_validation_boot_validate() function within the nrf_dfu_validation.c file to read the same CRC and validate it against the computed CRC. This function is called twice: first after downloading the complete image in the external flash and then after a bootloader reset as well.

after first call of this function:

the second call of this function which comes at the end

the code which i changed

bool nrf_dfu_validation_boot_validate(boot_validation_t const * p_validation, uint32_t data_addr, uint32_t data_len)
{
    uint8_t const * p_data = (uint8_t*) data_addr;
    switch(p_validation->type)
    {
        case NO_VALIDATION:
            return true;

        case VALIDATE_CRC:
        {
            uint32_t current_crc = *(uint32_t *)p_validation->bytes;
            uint32_t crc = crc32_compute(p_data, data_len, NULL);

            //qspi read
            uint32_t read_buffer[1]; // Buffer to store the read value

            // Read the value from QSPI memory into read_buffer (assumed nrf_drv_qspi_read is used)
            if (nrf_drv_qspi_read(read_buffer, sizeof(read_buffer), FIRMWARE_CRC_ADDR) != NRFX_SUCCESS)
            {
                // Error handling if read fails
                WAIT_FOR_PERIPH();
                NRF_LOG_INFO("\r\nFailed reading initial firmware crc.\r\n");
            }
            else
            {
                // Successful read
                WAIT_FOR_PERIPH();

                CRC_VAL = read_buffer[0]; // Extract the read value from the buffer
                NRF_LOG_INFO("Succsessfully reead initial firmware crc=0x%X  at: 0x%X\r\n", CRC_VAL, FIRMWARE_CRC_ADDR);
            }


            NRF_LOG_INFO("Validate CRC\r\nCuurent CRC: 0x%08x, Computed CRC: 0x%08x, initial crc: 0x%08x\r\n",current_crc,crc,CRC_VAL);

            if (!(crc == current_crc || crc == CRC_VAL))
            {
                // CRC does not match with what is stored.
                NRF_LOG_DEBUG("CRC check of app failed. Return %d \r\nCuurent CRC: 0x%08x, Computed CRC: 0x%08x", NRF_DFU_DEBUG,current_crc,crc);
                return NRF_DFU_DEBUG;
            }
            return true;
        }

        case VALIDATE_SHA256:
            return nrf_dfu_validation_hash_ok(p_validation->bytes, data_addr, data_len, false);

        case VALIDATE_ECDSA_P256_SHA256:
        {
            nrf_dfu_result_t res_code = nrf_dfu_validation_signature_check(
                                            DFU_SIGNATURE_TYPE_ECDSA_P256_SHA256,
                                            p_validation->bytes,
                                            NRF_CRYPTO_ECDSA_SECP256R1_SIGNATURE_SIZE,
                                            p_data,
                                            data_len);
            return (res_code == NRF_DFU_RES_CODE_SUCCESS);
        }

        default:
            ASSERT(false);
            return false;
    }
}

Afterward, I updated the app_activate() function in nrf_bootloader_fw_activation.c to perform the same validation against the computed CRC, and this part is also functioning correctly.

log of this function

the code which i changed

static uint32_t app_activate(void)
{
    // This function is only in use when new app is present in Bank 1
    uint32_t const image_size  = s_dfu_settings.bank_1.image_size;

    uint32_t src_addr    = s_dfu_settings.progress.update_start_address;
    uint32_t ret_val     = NRF_SUCCESS;
    uint32_t target_addr = nrf_dfu_bank0_start_addr() + s_dfu_settings.write_offset;
    uint32_t length_left = (image_size - s_dfu_settings.write_offset);
    uint32_t crc;

    NRF_LOG_DEBUG("Enter nrf_dfu_app_continue");

    src_addr += s_dfu_settings.write_offset;

    if (src_addr == target_addr)
    {
        length_left = 0;
    }

    ret_val = image_copy(target_addr, src_addr, length_left, NRF_BL_FW_COPY_PROGRESS_STORE_STEP);
    if (ret_val != NRF_SUCCESS)
    {
        NRF_LOG_ERROR("Failed to copy firmware.");
        return ret_val;
    }

    // Check the CRC of the copied data. Enable if so.
    crc = crc32_compute((uint8_t*)nrf_dfu_bank0_start_addr(), image_size, NULL);
    
    //qspi read
    uint32_t read_buffer[1]; // Buffer to store the read value

    // Read the value from QSPI memory into read_buffer (assumed nrf_drv_qspi_read is used)
    if (nrf_drv_qspi_read(read_buffer, sizeof(read_buffer), FIRMWARE_CRC_ADDR) != NRFX_SUCCESS)
    {
        // Error handling if read fails
        WAIT_FOR_PERIPH();
        NRF_LOG_INFO("\r\nFailed reading initial firmware crc.\r\n");
    }
    else
    {
        // Successful read
        WAIT_FOR_PERIPH();

        CRC_VAL_INI = read_buffer[0]; // Extract the read value from the buffer
        NRF_LOG_INFO("Succsessfully reead initial firmware crc=0x%X  at: 0x%X\r\n", CRC_VAL_INI, FIRMWARE_CRC_ADDR);
    }



    if (crc == s_dfu_settings.bank_1.image_crc || crc == CRC_VAL_INI)
    {
        NRF_LOG_DEBUG("Setting app as valid");
        s_dfu_settings.bank_0.bank_code = NRF_DFU_BANK_VALID_APP;
        s_dfu_settings.bank_0.image_crc = crc;
        s_dfu_settings.bank_0.image_size = image_size;
    }
    else
    {
        NRF_LOG_ERROR("CRC computation failed for copied app: "
                      "src crc: 0x%08x, res crc: 0x%08x",
                      s_dfu_settings.bank_1.image_crc,
                      crc);
    }

    return ret_val;
}

As of now i have done this process four times and it's working

I've nearly completed the task at hand, and currently, everything is functioning smoothly. I'm in the process of conducting final tests to ensure everything is perfect. If any difficulties arise, I'll return here for further assistance.

Thank you for your support throughout this process.

RE: OFF CHIP OTA UPDATE using external flash

Vidar Berg — Fri, 08 Dec 2023 11:46:33 GMT

It is the FW images that are interesting to compare in this case. If they are identical, then that indicates that everything from receiving the FW image to the QSPI to storing it to bank 0 is being handled correctly.

Another thing you can try is to generate the settings page with nrfutil and see if it gives the same CRC value as the one computed by the bootloader.

$ nrfutil nrf5sdk-tools settings generate --application <your application hex> --application-version 2 --bl-settings-version 2 --bootloader-version 1 --family NRF52840 settings.hex

RE: OFF CHIP OTA UPDATE using external flash

Priyesh Shahi — Fri, 08 Dec 2023 07:25:35 GMT

Sorry, I was using different build files for comparison.

After using the same build files, there is no difference in the application area. The only distinction lies in the settings area of the flash. This time, I'm comparing direct flash and flash after DFU.

Perhaps the reason for this difference is that I generate different setting files to flash this app on my device.

dnk124 ~ nrfjprog --memrd 0x0 --n 1048576 > qspi_flash.hex
dnk124 ~ nrfjprog --memrd 0x0 --n 1048576 > flash.hex
dnk124 ~ cmp qspi_flash.hex flash.hex
qspi_flash.hex flash.hex differ: byte 4204678, line 60938
dnk124 ~ 1 diff qspi_flash.hex flash.hex
60938,61027c60938,61027
< 0x000EE090: FFFF0026 C4100402 00000000 000003EA |&...............|
< 0x000EE0A0: 000003EC 1D049C28 65E2F7EE 146DA9C1 |....(......e..m.|
< 0x000EE0B0: 656F9674 B15B635F 0AB10002 FFF40007 |t.oe_c[.........|
< 0x000EE0C0: FFFF0020 BFFD8B82 80573BF0 52DF1B7E | ........;W.~..R|
< 0x000EE0D0: 9B630F2F EEDEFAAB EC74EBE6 9C0D6EED |/.c.......t..n..|
< 0x000EE0E0: C2E2718D FFF40003 FFFF0026 C4100402 |.q......&.......|
< 0x000EE0F0: 00000000 000003EB 000007D4 1D049C28 |............(...|
< 0x000EE100: 65E2F7EE 146DA9C1 656F9674 B15B635F |...e..m.t.oe_c[.|
< 0x000EE110: 146D0002 FFF40003 FFFF0026 C4100402 |..m.....&.......|
< 0x000EE120: 00000000 000003EB 00000BBC 1D049C28 |............(...|
< 0x000EE130: 65E2F7EE 146DA9C1 656F9674 B15B635F |...e..m.t.oe_c[.|
< 0x000EE140: 146D0002 FFF40003 FFFF0026 C4100402 |..m.....&.......|
< 0x000EE150: 00000000 000003EB 00000FA4 1D049C28 |............(...|
< 0x000EE160: 65E2F7EE 146DA9C1 656F9674 B15B635F |...e..m.t.oe_c[.|
< 0x000EE170: 146D0002 FFF40003 FFFF0026 C4100402 |..m.....&.......|
< 0x000EE180: 00000000 000003EB 0000138C 1D049C28 |............(...|
< 0x000EE190: 65E2F7EE 146DA9C1 656F9674 B15B635F |...e..m.t.oe_c[.|
< 0x000EE1A0: 20030002 FFF40003 FFFF0026 C4100402 |... ....&.......|
< 0x000EE1B0: 00000000 000003EB 00001774 1D049C28 |........t...(...|
< 0x000EE1C0: 65E2F7EE 146DA9C1 656F9674 B15B635F |...e..m.t.oe_c[.|
< 0x000EE1D0: 20030002 FFF40003 FFFF0026 C4100402 |... ....&.......|
< 0x000EE1E0: 00000000 000003EB 00001B5C 1D049C28 |........\...(...|
< 0x000EE1F0: 65E2F7EE 146DA9C1 656F9674 B15B635F |...e..m.t.oe_c[.|
< 0x000EE200: 20030002 FFF40003 FFFF0026 C4100402 |... ....&.......|
< 0x000EE210: 00000000 000003EB 00001F44 1D049C28 |........D...(...|
< 0x000EE220: 65E2F7EE 146DA9C1 656F9674 B15B635F |...e..m.t.oe_c[.|
< 0x000EE230: 20030002 FFF40003 FFFF0026 C4100402 |... ....&.......|
< 0x000EE240: 00000000 000003EB 0000232C 1D049C28 |........,#..(...|
< 0x000EE250: 65E2F7EE 146DA9C1 656F9674 B15B635F |...e..m.t.oe_c[.|
< 0x000EE260: 20030002 FFF40003 FFFF0026 C4100402 |... ....&.......|
< 0x000EE270: 00000000 000003EB 00002714 1D049C28 |.........'..(...|
< 0x000EE280: 65E2F7EE 146DA9C1 656F9674 B15B635F |...e..m.t.oe_c[.|
< 0x000EE290: 00000002 FFF40003 FFFF0026 C4100402 |........&.......|
< 0x000EE2A0: 00000000 000003EB 00002AFC 1D049C28 |.........*..(...|
< 0x000EE2B0: 65E2F7EE 146DA9C1 656F9674 B15B635F |...e..m.t.oe_c[.|
< 0x000EE2C0: 20030002 FFF40003 FFFF0026 C4100402 |... ....&.......|
< 0x000EE2D0: 00000000 000003EB 00002EE4 1D049C28 |............(...|
< 0x000EE2E0: 65E2F7EE 146DA9C1 656F9674 B15B635F |...e..m.t.oe_c[.|
< 0x000EE2F0: 00000002 FFF40003 FFFF0026 C4100402 |........&.......|
< 0x000EE300: 00000000 000003EB 000032CC 1D049C28 |.........2..(...|
< 0x000EE310: 65E2F7EE 146DA9C1 656F9674 B15B635F |...e..m.t.oe_c[.|
< 0x000EE320: 20030002 FFF40003 FFFF0026 C4100402 |... ....&.......|
< 0x000EE330: 00000000 000003EB 000036B4 1D049C28 |.........6..(...|
< 0x000EE340: 65E2F7EE 146DA9C1 656F9674 B15B635F |...e..m.t.oe_c[.|
< 0x000EE350: 19130002 FFF40003 FFFF0026 C4100402 |........&.......|
< 0x000EE360: 00000000 000003EB 00003A9C 1D049C28 |.........:..(...|
< 0x000EE370: 65E2F7EE 146DA9C1 656F9674 B15B635F |...e..m.t.oe_c[.|
< 0x000EE380: 20030002 FFF40003 FFFF0026 C4100402 |... ....&.......|
< 0x000EE390: 00000000 000003EB 00003E84 1D049C28 |.........>..(...|
< 0x000EE3A0: 65E2F7EE 146DA9C1 656F9674 B15B635F |...e..m.t.oe_c[.|
< 0x000EE3B0: 20030002 FFF40003 FFFF0026 C4100402 |... ....&.......|
< 0x000EE3C0: 00000000 000003EB 0000426C 1D049C28 |........lB..(...|
< 0x000EE3D0: 65E2F7EE 146DA9C1 656F9674 B15B635F |...e..m.t.oe_c[.|
< 0x000EE3E0: 00000002 FFF40003 FFFF0026 C4100402 |........&.......|
< 0x000EE3F0: 00000000 000003EB 00004654 1D049C28 |........TF..(...|
< 0x000EE400: 65E2F7EE 146DA9C1 656F9674 B15B635F |...e..m.t.oe_c[.|
< 0x000EE410: 20030002 FFF40003 FFFF0026 C4100402 |... ....&.......|
< 0x000EE420: 00000000 000003EB 00004A3C 1D049C28 |........<J..(...|
< 0x000EE430: 65E2F7EE 146DA9C1 656F9674 B15B635F |...e..m.t.oe_c[.|
< 0x000EE440: 00000002 FFF40003 FFFF0026 C4100402 |........&.......|
< 0x000EE450: 00000000 000003EB 00004E24 1D049C28 |........$N..(...|
< 0x000EE460: 65E2F7EE 146DA9C1 656F9674 B15B635F |...e..m.t.oe_c[.|
< 0x000EE470: 146D0002 FFF40003 FFFF0026 C4100402 |..m.....&.......|
< 0x000EE480: 00000000 000003EB 0000520C 1D049C28 |.........R..(...|
< 0x000EE490: 65E2F7EE 146DA9C1 656F9674 B15B635F |...e..m.t.oe_c[.|
< 0x000EE4A0: 146D0002 FFF40003 FFFF0026 C4100402 |..m.....&.......|
< 0x000EE4B0: 00000000 000003EB 000055F4 1D049C28 |.........U..(...|
< 0x000EE4C0: 65E2F7EE 146DA9C1 656F9674 B15B635F |...e..m.t.oe_c[.|
< 0x000EE4D0: 20030002 FFF40003 FFFF0026 C4100402 |... ....&.......|
< 0x000EE4E0: 00000000 000007D4 000059DC 1D049C28 |.........Y..(...|
< 0x000EE4F0: 65E2F7EE 146DA9C1 656F9674 B15B635F |...e..m.t.oe_c[.|
< 0x000EE500: 00000002 FFF40003 FFFF0026 C4100402 |........&.......|
< 0x000EE510: 00000000 000007D5 000059DF 1D049C28 |.........Y..(...|
< 0x000EE520: 65E2F7EE 146DA9C1 656F9674 B15B635F |...e..m.t.oe_c[.|
< 0x000EE530: 00000002 FFF40003 FFFF0026 C4100402 |........&.......|
< 0x000EE540: 00000000 000007D7 00005DC7 1D049C28 |.........]..(...|
< 0x000EE550: 65E2F7EE 146DA9C1 656F9674 B15B635F |...e..m.t.oe_c[.|
< 0x000EE560: 146D0002 FFF40003 FFFF0026 C4100402 |..m.....&.......|
< 0x000EE570: 00000000 000007D7 000061AF 1D049C28 |.........a..(...|
< 0x000EE580: 65E2F7EE 146DA9C1 656F9674 B15B635F |...e..m.t.oe_c[.|
< 0x000EE590: 146D0002 FFF40003 FFFF0026 C4100402 |..m.....&.......|
< 0x000EE5A0: 00000000 000007D7 00006597 1D049C28 |.........e..(...|
< 0x000EE5B0: 65E2F7EE 146DA9C1 656F9674 B15B635F |...e..m.t.oe_c[.|
< 0x000EE5C0: 146D0002 FFF40003 FFFF0026 C4100402 |..m.....&.......|
< 0x000EE5D0: 00000000 000007D7 0000697F 1D049C28 |.........i..(...|
< 0x000EE5E0: 65E2F7EE 146DA9C1 656F9674 B15B635F |...e..m.t.oe_c[.|
< 0x000EE5F0: 146D0002 FFF40003 FFFF0026 C4100402 |..m.....&.......|
< 0x000EE600: 00000000 000007D7 00006D67 1D049C28 |........gm..(...|
< 0x000EE610: 65E2F7EE 146DA9C1 656F9674 B15B635F |...e..m.t.oe_c[.|
< 0x000EE620: 146D0002 FFFFFFFF FFFFFFFF FFFFFFFF |..m.............|
---
> 0x000EE090: FFFF0026 C4110402 00000000 000003EB |&...............|
> 0x000EE0A0: 000003EC 1D049C28 6538672A C7766CA3 |....(...*g8e.lv.|
> 0x000EE0B0: 3307B21B B45FB38F 0AB10002 FFF40007 |...3.._.........|
> 0x000EE0C0: FFFF0020 F4338CEC 094B7121 1C369312 | .....3.!qK...6.|
> 0x000EE0D0: 3218A5D4 A1FD3457 87E9CB2B 13F752D6 |...2W4..+....R..|
> 0x000EE0E0: 17361FE3 FFF40003 FFFF0026 C4110402 |..6.....&.......|
> 0x000EE0F0: 00000000 000007D4 000007D4 1D049C28 |............(...|
> 0x000EE100: 6538672A C7766CA3 3307B21B B45FB38F |*g8e.lv....3.._.|
> 0x000EE110: 00000002 FFFFFFFF FFFFFFFF FFFFFFFF |................|
> 0x000EE120: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
> 0x000EE130: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
> 0x000EE140: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
> 0x000EE150: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
> 0x000EE160: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
> 0x000EE170: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
> 0x000EE180: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
> 0x000EE190: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
> 0x000EE1A0: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
> 0x000EE1B0: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
> 0x000EE1C0: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
> 0x000EE1D0: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
> 0x000EE1E0: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
> 0x000EE1F0: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
> 0x000EE200: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
> 0x000EE210: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
> 0x000EE220: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
> 0x000EE230: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
> 0x000EE240: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
> 0x000EE250: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
> 0x000EE260: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
> 0x000EE270: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
> 0x000EE280: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
> 0x000EE290: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
> 0x000EE2A0: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
> 0x000EE2B0: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
> 0x000EE2C0: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
> 0x000EE2D0: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
> 0x000EE2E0: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
> 0x000EE2F0: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
> 0x000EE300: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
> 0x000EE310: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
> 0x000EE320: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
> 0x000EE330: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
> 0x000EE340: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
> 0x000EE350: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
> 0x000EE360: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
> 0x000EE370: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
> 0x000EE380: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
> 0x000EE390: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
> 0x000EE3A0: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
> 0x000EE3B0: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
> 0x000EE3C0: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
> 0x000EE3D0: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
> 0x000EE3E0: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
> 0x000EE3F0: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
> 0x000EE400: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
> 0x000EE410: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
> 0x000EE420: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
> 0x000EE430: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
> 0x000EE440: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
> 0x000EE450: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
> 0x000EE460: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
> 0x000EE470: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
> 0x000EE480: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
> 0x000EE490: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
> 0x000EE4A0: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
> 0x000EE4B0: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
> 0x000EE4C0: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
> 0x000EE4D0: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
> 0x000EE4E0: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
> 0x000EE4F0: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
> 0x000EE500: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
> 0x000EE510: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
> 0x000EE520: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
> 0x000EE530: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
> 0x000EE540: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
> 0x000EE550: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
> 0x000EE560: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
> 0x000EE570: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
> 0x000EE580: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
> 0x000EE590: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
> 0x000EE5A0: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
> 0x000EE5B0: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
> 0x000EE5C0: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
> 0x000EE5D0: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
> 0x000EE5E0: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
> 0x000EE5F0: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
> 0x000EE600: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
> 0x000EE610: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
> 0x000EE620: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
65025c65025
< 0x000FE000: CB0B2FB5 00000002 00000002 00000001 |./..............|
---
> 0x000FE000: 40FFE85D 00000002 00000001 00000001 |]..@............|
65029,65062c65029,65062
< 0x000FE040: 00000000 00000000 00066000 00000000 |.........`......|
< 0x000FE050: 00000000 00000000 00000000 FFFFFFFF |................|
< 0x000FE060: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
< 0x000FE070: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
< 0x000FE080: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
< 0x000FE090: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
< 0x000FE0A0: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
< 0x000FE0B0: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
< 0x000FE0C0: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
< 0x000FE0D0: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
< 0x000FE0E0: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
< 0x000FE0F0: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
< 0x000FE100: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
< 0x000FE110: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
< 0x000FE120: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
< 0x000FE130: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
< 0x000FE140: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
< 0x000FE150: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
< 0x000FE160: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
< 0x000FE170: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
< 0x000FE180: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
< 0x000FE190: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
< 0x000FE1A0: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
< 0x000FE1B0: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
< 0x000FE1C0: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
< 0x000FE1D0: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
< 0x000FE1E0: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
< 0x000FE1F0: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
< 0x000FE200: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
< 0x000FE210: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
< 0x000FE220: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
< 0x000FE230: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
< 0x000FE240: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
< 0x000FE250: FFFFFFFF FFFFFFFF FFFFFFFF F0678FEF |..............g.|
---
> 0x000FE040: 00000000 00000000 00000000 00000000 |................|
> 0x000FE050: 00000000 00000000 00000000 00000000 |................|
> 0x000FE060: 00000000 00000000 00000000 00000000 |................|
> 0x000FE070: 00000000 00000000 00000000 00000000 |................|
> 0x000FE080: 00000000 00000000 00000000 00000000 |................|
> 0x000FE090: 00000000 00000000 00000000 00000000 |................|
> 0x000FE0A0: 00000000 00000000 00000000 00000000 |................|
> 0x000FE0B0: 00000000 00000000 00000000 00000000 |................|
> 0x000FE0C0: 00000000 00000000 00000000 00000000 |................|
> 0x000FE0D0: 00000000 00000000 00000000 00000000 |................|
> 0x000FE0E0: 00000000 00000000 00000000 00000000 |................|
> 0x000FE0F0: 00000000 00000000 00000000 00000000 |................|
> 0x000FE100: 00000000 00000000 00000000 00000000 |................|
> 0x000FE110: 00000000 00000000 00000000 00000000 |................|
> 0x000FE120: 00000000 00000000 00000000 00000000 |................|
> 0x000FE130: 00000000 00000000 00000000 00000000 |................|
> 0x000FE140: 00000000 00000000 00000000 00000000 |................|
> 0x000FE150: 00000000 00000000 00000000 00000000 |................|
> 0x000FE160: 00000000 00000000 00000000 00000000 |................|
> 0x000FE170: 00000000 00000000 00000000 00000000 |................|
> 0x000FE180: 00000000 00000000 00000000 00000000 |................|
> 0x000FE190: 00000000 00000000 00000000 00000000 |................|
> 0x000FE1A0: 00000000 00000000 00000000 00000000 |................|
> 0x000FE1B0: 00000000 00000000 00000000 00000000 |................|
> 0x000FE1C0: 00000000 00000000 00000000 00000000 |................|
> 0x000FE1D0: 00000000 00000000 00000000 00000000 |................|
> 0x000FE1E0: 00000000 00000000 00000000 00000000 |................|
> 0x000FE1F0: 00000000 00000000 00000000 00000000 |................|
> 0x000FE200: 00000000 00000000 00000000 00000000 |................|
> 0x000FE210: 00000000 00000000 00000000 00000000 |................|
> 0x000FE220: 00000000 00000000 00000000 00000000 |................|
> 0x000FE230: 00000000 00000000 00000000 00000000 |................|
> 0x000FE240: 00000000 00000000 00000000 00000000 |................|
> 0x000FE250: 00000000 00000000 00000000 CE832C27 |............',..|
65067c65067
< 0x000FE2A0: 805A0100 00001EC7 00000000 00000000 |..Z.............|
---
> 0x000FE2A0: 60720100 0000CED2 00000000 00000000 |..r`............|
65281c65281
< 0x000FF000: CB0B2FB5 00000002 00000002 00000001 |./..............|
---
> 0x000FF000: 40FFE85D 00000002 00000001 00000001 |]..@............|
65285,65318c65285,65318
< 0x000FF040: 00000000 00000000 00066000 00000000 |.........`......|
< 0x000FF050: 00000000 00000000 00000000 FFFFFFFF |................|
< 0x000FF060: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
< 0x000FF070: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
< 0x000FF080: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
< 0x000FF090: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
< 0x000FF0A0: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
< 0x000FF0B0: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
< 0x000FF0C0: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
< 0x000FF0D0: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
< 0x000FF0E0: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
< 0x000FF0F0: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
< 0x000FF100: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
< 0x000FF110: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
< 0x000FF120: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
< 0x000FF130: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
< 0x000FF140: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
< 0x000FF150: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
< 0x000FF160: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
< 0x000FF170: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
< 0x000FF180: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
< 0x000FF190: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
< 0x000FF1A0: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
< 0x000FF1B0: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
< 0x000FF1C0: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
< 0x000FF1D0: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
< 0x000FF1E0: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
< 0x000FF1F0: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
< 0x000FF200: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
< 0x000FF210: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
< 0x000FF220: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
< 0x000FF230: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
< 0x000FF240: FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF |................|
< 0x000FF250: FFFFFFFF FFFFFFFF FFFFFFFF F0678FEF |..............g.|
---
> 0x000FF040: 00000000 00000000 00000000 00000000 |................|
> 0x000FF050: 00000000 00000000 00000000 00000000 |................|
> 0x000FF060: 00000000 00000000 00000000 00000000 |................|
> 0x000FF070: 00000000 00000000 00000000 00000000 |................|
> 0x000FF080: 00000000 00000000 00000000 00000000 |................|
> 0x000FF090: 00000000 00000000 00000000 00000000 |................|
> 0x000FF0A0: 00000000 00000000 00000000 00000000 |................|
> 0x000FF0B0: 00000000 00000000 00000000 00000000 |................|
> 0x000FF0C0: 00000000 00000000 00000000 00000000 |................|
> 0x000FF0D0: 00000000 00000000 00000000 00000000 |................|
> 0x000FF0E0: 00000000 00000000 00000000 00000000 |................|
> 0x000FF0F0: 00000000 00000000 00000000 00000000 |................|
> 0x000FF100: 00000000 00000000 00000000 00000000 |................|
> 0x000FF110: 00000000 00000000 00000000 00000000 |................|
> 0x000FF120: 00000000 00000000 00000000 00000000 |................|
> 0x000FF130: 00000000 00000000 00000000 00000000 |................|
> 0x000FF140: 00000000 00000000 00000000 00000000 |................|
> 0x000FF150: 00000000 00000000 00000000 00000000 |................|
> 0x000FF160: 00000000 00000000 00000000 00000000 |................|
> 0x000FF170: 00000000 00000000 00000000 00000000 |................|
> 0x000FF180: 00000000 00000000 00000000 00000000 |................|
> 0x000FF190: 00000000 00000000 00000000 00000000 |................|
> 0x000FF1A0: 00000000 00000000 00000000 00000000 |................|
> 0x000FF1B0: 00000000 00000000 00000000 00000000 |................|
> 0x000FF1C0: 00000000 00000000 00000000 00000000 |................|
> 0x000FF1D0: 00000000 00000000 00000000 00000000 |................|
> 0x000FF1E0: 00000000 00000000 00000000 00000000 |................|
> 0x000FF1F0: 00000000 00000000 00000000 00000000 |................|
> 0x000FF200: 00000000 00000000 00000000 00000000 |................|
> 0x000FF210: 00000000 00000000 00000000 00000000 |................|
> 0x000FF220: 00000000 00000000 00000000 00000000 |................|
> 0x000FF230: 00000000 00000000 00000000 00000000 |................|
> 0x000FF240: 00000000 00000000 00000000 00000000 |................|
> 0x000FF250: 00000000 00000000 00000000 CE832C27 |............',..|
65323c65323
< 0x000FF2A0: 805A0100 00001EC7 00000000 00000000 |..Z.............|
---
> 0x000FF2A0: 60720100 0000CED2 00000000 00000000 |..r`............|

RE: OFF CHIP OTA UPDATE using external flash

Vidar Berg — Fri, 08 Dec 2023 05:47:40 GMT

I see there's a timestamp here. I guess it might be showing when the firmware was built? Regardless, you need to ensure you are programming the same hex file ever time. The DFU image must also be from the same build.

RE: OFF CHIP OTA UPDATE using external flash

Priyesh Shahi — Thu, 07 Dec 2023 13:00:37 GMT

I simply flashed the same application twice using j link(not dfu) by following all the steps .

and still there is difference in both hex files.

dnk124 ~ nrfjprog --memrd 0x0 --n 1048576 > flash_on_board.hex
dnk124 ~ nrfjprog --memrd 0x0 --n 1048576 > flash_on_board2.hex
dnk124 ~ cmp flash_on_board.hex flash_on_board2.hex
flash_on_board.hex flash_on_board2.hex differ: byte 1762439, line 25543
dnk124 ~ 1 diff flash_on_board.hex flash_on_board2.hex
25543,25544c25543,25544
< 0x00063C60: 20206365 30322037 31203332 39313A38 |ec 7 2023 18:19|
< 0x00063C70: 0038323A 6F727245 6E692072 61687320 |:28.Error in sha|
---
> 0x00063C60: 20206365 30322037 31203332 33323A38 |ec 7 2023 18:23|
> 0x00063C70: 0035353A 6F727245 6E692072 61687320 |:55.Error in sha|
60938,60943c60938,60943
< 0x000EE090: FFFF0026 C4320402 00000000 000003EA |&.....2.........|
< 0x000EE0A0: 000003EB 0504C84E 147D016A 2D24DB7D |....N...j.}.}.$-|
< 0x000EE0B0: 7A2DC0CC DC4F0076 0AB10002 FFF40007 |..-zv.O.........|
< 0x000EE0C0: FFFF0020 3D33E0D3 C5638CC0 E76FBB73 | .....3=..c.s.o.|
< 0x000EE0D0: 8D48228A 5967488E D7E90C97 8F3891A9 |."H..HgY......8.|
< 0x000EE0E0: 3F784A25 FFFFFFFF FFFFFFFF FFFFFFFF |%Jx?............|
---
> 0x000EE090: FFFF0026 C4330402 00000000 000003EA |&.....3.........|
> 0x000EE0A0: 000003EB 0504C84E E9DEB6BA AEDF0E4C |....N.......L...|
> 0x000EE0B0: 8B4A8FCE 8EEED222 0AB10002 FFF40007 |..J."...........|
> 0x000EE0C0: FFFF0020 787E306D 482D2AD0 06EE9446 | ...m0~x.*-HF...|
> 0x000EE0D0: 062B3A5A 0069BE23 1EA55933 1806B761 |Z:+.#.i.3Y..a...|
> 0x000EE0E0: 56F8A127 FFFFFFFF FFFFFFFF FFFFFFFF |'..V............|
65025,65026c65025,65026
< 0x000FE000: 1341AA60 00000002 00000001 00000001 |`.A.............|
< 0x000FE010: 00000000 00000000 00064F38 895C458F |........8O...E\.|
---
> 0x000FE000: AD7C8D5D 00000002 00000001 00000001 |].|.............|
> 0x000FE010: 00000000 00000000 00064F38 C9CBBF5C |........8O..\...|
65062c65062
< 0x000FE250: 00000000 00000000 00000000 37CD1E9A |...............7|
---
> 0x000FE250: 00000000 00000000 00000000 151DE479 |............y...|
65067c65067
< 0x000FE2A0: 458F0100 0000895C 00000000 00000000 |...E\...........|
---
> 0x000FE2A0: BF5C0100 0000C9CB 00000000 00000000 |..\.............|
65281,65282c65281,65282
< 0x000FF000: 1341AA60 00000002 00000001 00000001 |`.A.............|
< 0x000FF010: 00000000 00000000 00064F38 895C458F |........8O...E\.|
---
> 0x000FF000: AD7C8D5D 00000002 00000001 00000001 |].|.............|
> 0x000FF010: 00000000 00000000 00064F38 C9CBBF5C |........8O..\...|
65318c65318
< 0x000FF250: 00000000 00000000 00000000 37CD1E9A |...............7|
---
> 0x000FF250: 00000000 00000000 00000000 151DE479 |............y...|
65323c65323
< 0x000FF2A0: 458F0100 0000895C 00000000 00000000 |...E\...........|
---
> 0x000FF2A0: BF5C0100 0000C9CB 00000000 00000000 |..\.............|
dnk124 ~ 1

RE: OFF CHIP OTA UPDATE using external flash

Vidar Berg — Wed, 06 Dec 2023 14:29:27 GMT

I would still like you to verify that the updated binary stored in the bank 0 matches the binary you uploaded through DFU. Since you are not able to read data from your external flash, you can program the hex file of your new application to the device, then read out the memory. Then, repeat the same steps but when loading the image through DFU and not via the debug interface.

If the images are identical, then that suggests that the CRC computed by the application and the one computed by the bootloader were not computed over the same area.

RE: OFF CHIP OTA UPDATE using external flash

Priyesh Shahi — Wed, 06 Dec 2023 13:06:57 GMT

hey I tried all possible commands to read external qspi flash, but as I am using custom board none of them worked.

so i tried another way. even though crc calculation fails, i jumped to start the app directly buy changing the code in nrf_bootloader_init() function and my dfu is complete after this.

return NRF_ERROR_INTERNAL; // Should not reach this.

case ACTIVATION_ERROR:
default:
return NRF_ERROR_INTERNAL;
}

if (dfu_enter)
{
nrf_bootloader_app_start();
nrf_bootloader_wdt_init();
scheduler_init();
dfu_enter_flags_clear();

// Call user-defined init function if implemented
ret_val = nrf_dfu_init_user();
if (ret_val != NRF_SUCCESS)
{
return NRF_ERROR_INTERNAL;
}

nrf_bootloader_dfu_inactivity_timer_restart(initial_timeout, inactivity_timeout);

in above juggad code nrf_bootloader_app_start(); function is used to start the app code. and it works and my app version 2 is working perfectlly.

my device sends Payloads on server and on the server i can see the update and ota version as well.

in this payload you can see at the last 2 is wrrten which represents the app version.

and in another payload ota done message is visible.

and also in j link it is visible

even this ota is done but still why that crc calculation fails? and if let this run then without crc verification this ota process is just like the single bank dfu process.

so please help me in this crc calculation

RE: OFF CHIP OTA UPDATE using external flash

Vidar Berg — Fri, 01 Dec 2023 10:14:29 GMT

You can use regex or a text processing tool like 'awk' to filter out the address column from the output.

Example of using regex in Vs code:

RE: OFF CHIP OTA UPDATE using external flash

Priyesh Shahi — Fri, 01 Dec 2023 08:06:53 GMT

To read from the external flash, a specific command is required by the nrfprog tool. Unfortunately, while retrieving data from the external flash, this command appends the address to each line, thereby impeding the direct comparison between the data retrieved from the internal and external flash sources.

Furthermore, regarding the progress of the DFU process, I'd like to inform you that we have reached the final stages:

The application has been successfully downloaded to the external flash.
Hash verification has been completed without any issues.
DFU bank 1 has been appropriately configured.
The bootloader has been reset as per the protocol.
The bootloader is effectively replacing the entire code from the external flash to the internal flash.
Upon replacement, a CRC computation over the image in the internal flash is conducted. However, this step encounters failure, and despite diligent efforts, the root cause behind this failure remains elusive.

RE: OFF CHIP OTA UPDATE using external flash

Vidar Berg — Tue, 28 Nov 2023 14:53:58 GMT

It looks like you are using the QSPI flash API correctly. Could you please read out the image stored in the QSPI flash and compare it to the image stored in Bank 1 to see if they match?

RE: OFF CHIP OTA UPDATE using external flash

Priyesh Shahi — Tue, 28 Nov 2023 04:13:23 GMT

[quote userid="129185" url="~/f/nordic-q-a/105096/off-chip-ota-update-using-external-flash/457265"]i have changed the image_copy function and in logs i can see it is working and writes my image completely[/quote]

after this i have shared a code snippet of image_copy() inside that i have changed this

// Flash one page

uint32_t m_buffer_rx[bytes];

if(nrf_drv_qspi_read(m_buffer_rx, bytes,firmware_flash_addr ) != NRFX_SUCCESS)
{
NRF_LOG_INFO("Failed read application for bootloader reset in Ext Flash.\r\n");
}
else
{
NRF_LOG_INFO("Succsessfully read application for bootloader reset from: 0x%lX\r\n",firmware_flash_addr);
WAIT_FOR_PERIPH();
NRF_LOG_DEBUG("Copying 0x%x to 0x%x, size: 0x%x", src_addr, dst_addr, bytes);
ret_val = nrf_dfu_flash_store(dst_addr,
(uint32_t *)m_buffer_rx,
ALIGN_NUM(sizeof(uint32_t), bytes),
NULL);
}

and code which was earlier copying the image is here:

//NRF_LOG_DEBUG("Copying 0x%x to 0x%x, size: 0x%x", src_addr, dst_addr, bytes);
//ret_val = nrf_dfu_flash_store(dst_addr,
// (uint32_t *)src_addr,
// ALIGN_NUM(sizeof(uint32_t), bytes),
// NULL);

RE: OFF CHIP OTA UPDATE using external flash

Vidar Berg — Mon, 27 Nov 2023 12:55:30 GMT

Yes, but you are not showing how you adapted the copy function to read the image from external flash.

RE: OFF CHIP OTA UPDATE using external flash

Priyesh Shahi — Mon, 27 Nov 2023 12:54:37 GMT

Bank 1 is the temporary address where the app was initially supposed to be downloaded, but I changed it to external flash.

Bank 0 is the address in the internal flash where the app runs after the download completes. In the bootloader, we erase the old image from bank 0 and replace it with bank 1 (in this case, external flash) after performing a CRC check.

RE: OFF CHIP OTA UPDATE using external flash

Vidar Berg — Mon, 27 Nov 2023 12:40:14 GMT

Are you copying the image from bank 1 in external flash? I can't tell from your code snippet where the image is copied from.

RE: OFF CHIP OTA UPDATE using external flash

Priyesh Shahi — Fri, 24 Nov 2023 07:53:14 GMT

I have solved the above problems. from last conversation to till today

1: now both size matches

2: download is complete.

3: Hash verification and crc is completed and it working fine

4: i have started log in bootloader so now i am able to see the problem of bootloader reset.

i have changed the image_copy function and in logs i can see it is working and writes my image completely .

static uint32_t image_copy(uint32_t dst_addr,
                           uint32_t src_addr,
                           uint32_t size,
                           uint32_t progress_update_step)
{
    if (src_addr == dst_addr)
    {
        NRF_LOG_DEBUG("No copy needed");
        return NRF_SUCCESS;
    }

    ASSERT(src_addr >= dst_addr);
    ASSERT(progress_update_step > 0);
    ASSERT((dst_addr % CODE_PAGE_SIZE) == 0);

    uint32_t max_safe_progress_upd_step = (src_addr - dst_addr)/CODE_PAGE_SIZE;
    ASSERT(max_safe_progress_upd_step > 0);

    uint32_t ret_val = NRF_SUCCESS;
    uint32_t pages_left = CEIL_DIV(size, CODE_PAGE_SIZE);

    //Firmware copying is time consuming operation thus watchdog handling is started
    nrf_bootloader_wdt_init();

    progress_update_step = MIN(progress_update_step, max_safe_progress_upd_step);

    while (size > 0)
    {
        uint32_t pages;
        uint32_t bytes;
        if (pages_left <= progress_update_step)
        {
            pages = pages_left;
            bytes = size;
        }
        else
        {
            pages = progress_update_step;
            bytes = progress_update_step * CODE_PAGE_SIZE;
        }
        // Erase the target pages
        ret_val = nrf_dfu_flash_erase(dst_addr, pages, NULL);
        if (ret_val != NRF_SUCCESS)
        {
            return ret_val;
        }

        // Flash one page

        uint32_t m_buffer_rx[bytes];

        if(nrf_drv_qspi_read(m_buffer_rx, bytes,firmware_flash_addr ) != NRFX_SUCCESS)
        {
          NRF_LOG_INFO("Failed read application for bootloader reset in Ext Flash.\r\n");
        }
        else
        {
          NRF_LOG_INFO("Succsessfully read application for bootloader reset from: 0x%lX\r\n",firmware_flash_addr);
          WAIT_FOR_PERIPH();
          NRF_LOG_DEBUG("Copying 0x%x to 0x%x, size: 0x%x", src_addr, dst_addr, bytes);
          ret_val = nrf_dfu_flash_store(dst_addr,
                                      (uint32_t *)m_buffer_rx,
                                      ALIGN_NUM(sizeof(uint32_t), bytes),
                                      NULL);
        }
        //NRF_LOG_DEBUG("Copying 0x%x to 0x%x, size: 0x%x", src_addr, dst_addr, bytes);
        //ret_val = nrf_dfu_flash_store(dst_addr,
        //                              (uint32_t *)src_addr,
        //                              ALIGN_NUM(sizeof(uint32_t), bytes),
        //                              NULL);


        if (ret_val != NRF_SUCCESS)
        {
            return ret_val;
        }
        else
        {
          NRF_LOG_INFO("flash store successfull...\r\n");
        }

        pages_left  -= pages;
        size        -= bytes;
        dst_addr    += bytes;
        src_addr    += bytes;
        s_dfu_settings.write_offset += bytes;
        firmware_flash_addr += bytes; 

        //store progress in flash on every successful chunk write
        ret_val = nrf_dfu_settings_write_and_backup(NULL);
        if (ret_val != NRF_SUCCESS)
        {
            NRF_LOG_ERROR("Failed to write image copying progress to settings page.");
            return ret_val;
        }
    }

    return ret_val;
}

here is the log of that

but after this in app_activate() function there is crc calculation on bank 0 and crc calculation fails and there is an error.

the code of app_activate() function

static uint32_t app_activate(void)
{
    // This function is only in use when new app is present in Bank 1
    uint32_t const image_size  = s_dfu_settings.bank_1.image_size;

    uint32_t src_addr    = s_dfu_settings.progress.update_start_address;
    uint32_t ret_val     = NRF_SUCCESS;
    uint32_t target_addr = nrf_dfu_bank0_start_addr() + s_dfu_settings.write_offset;
    uint32_t length_left = (image_size - s_dfu_settings.write_offset);
    uint32_t crc;

    NRF_LOG_DEBUG("Enter nrf_dfu_app_continue");

    src_addr += s_dfu_settings.write_offset;

    if (src_addr == target_addr)
    {
        length_left = 0;
    }

    ret_val = image_copy(target_addr, src_addr, length_left, NRF_BL_FW_COPY_PROGRESS_STORE_STEP);
    if (ret_val != NRF_SUCCESS)
    {
        NRF_LOG_ERROR("Failed to copy firmware.");
        return ret_val;
    }

    // Check the CRC of the copied data. Enable if so.
    crc = crc32_compute((uint8_t*)nrf_dfu_bank0_start_addr(), image_size, NULL);

    if (crc == s_dfu_settings.bank_1.image_crc)
    {
        NRF_LOG_DEBUG("Setting app as valid");
        s_dfu_settings.bank_0.bank_code = NRF_DFU_BANK_VALID_APP;
        s_dfu_settings.bank_0.image_crc = crc;
        s_dfu_settings.bank_0.image_size = image_size;
    }
    else
    {
        NRF_LOG_ERROR("CRC computation failed for copied app: "
                      "src crc: 0x%08x, res crc: 0x%08x",
                      s_dfu_settings.bank_1.image_crc,
                      crc);
    }

    return ret_val;
}

i want to know why this crc calculation fails because before bootloader reset same crc calculation is correct.

here is more log which is from bootloader

0> 
00> <debug> app: Copying 0xBE000 to 0x59000, size: 0x8000
00> 
00> <debug> nrf_dfu_flash: nrf_fstorage_write(addr=0x00059000, src=0x2001FED8, len=32768 bytes), queue usage: 1
00> 
00> <debug> nrf_dfu_flash: Flash write success: addr=0x00059000, pending 0
00> 
00> <info> app: flash store successfull...
00> 
00> 
00> 
00> <debug> nrf_dfu_settings: Writing settings...
00> 
00> <debug> nrf_dfu_settings: Erasing old settings at: 0x000FF000
00> 
00> <debug> nrf_dfu_flash: nrf_fstorage_erase(addr=0x0x000FF000, len=1 pages), queue usage: 1
00> 
00> <debug> nrf_dfu_flash: Flash erase success: addr=0x000FF000, pending 0
00> 
00> <debug> nrf_dfu_flash: nrf_fstorage_write(addr=0x000FF000, src=0x200012EC, len=896 bytes), queue usage: 1
00> 
00> <debug> nrf_dfu_flash: Flash write success: addr=0x000FF000, pending 0
00> 
00> <info> nrf_dfu_settings: Backing up settings page to address 0xFE000.
00> 
00> <debug> nrf_dfu_settings: Writing settings...
00> 
00> <debug> nrf_dfu_settings: Erasing old settings at: 0x000FE000
00> 
00> <debug> nrf_dfu_flash: nrf_fstorage_erase(addr=0x0x000FE000, len=1 pages), queue usage: 1
00> 
00> <debug> nrf_dfu_flash: Flash erase success: addr=0x000FE000, pending 0
00> 
00> <debug> nrf_dfu_flash: nrf_fstorage_write(addr=0x000FE000, src=0x20000F68, len=896 bytes), queue usage: 1
00> 
00> <debug> nrf_dfu_flash: Flash write success: addr=0x000FE000, pending 0
00> 
00> <debug> nrf_dfu_flash: nrf_fstorage_erase(addr=0x0x00061000, len=5 pages), queue usage: 1
00> 
00> <debug> nrf_dfu_flash: Flash erase success: addr=0x00061000, pending 0
00> 
00> <info> app: Succsessfully read application for bootloader reset from: 0x160000
00> 
00> 
00> 
00> <debug> app: Copying 0xC6000 to 0x61000, size: 0x4F30
00> 
00> <debug> nrf_dfu_flash: nrf_fstorage_write(addr=0x00061000, src=0x2002C218, len=20272 bytes), queue usage: 1
00> 
00> <debug> nrf_dfu_flash: Flash write success: addr=0x00061000, pending 0
00> 
00> <info> app: flash store successfull...
00> 
00> 
00> 
00> <debug> nrf_dfu_settings: Writing settings...
00> 
00> <debug> nrf_dfu_settings: Erasing old settings at: 0x000FF000
00> 
00> <debug> nrf_dfu_flash: nrf_fstorage_erase(addr=0x0x000FF000, len=1 pages), queue usage: 1
00> 
00> <debug> nrf_dfu_flash: Flash erase success: addr=0x000FF000, pending 0
00> 
00> <debug> nrf_dfu_flash: nrf_fstorage_write(addr=0x000FF000, src=0x200012EC, len=896 bytes), queue usage: 1
00> 
00> <debug> nrf_dfu_flash: Flash write success: addr=0x000FF000, pending 0
00> 
00> <info> nrf_dfu_settings: Backing up settings page to address 0xFE000.
00> 
00> <debug> nrf_dfu_settings: Writing settings...
00> 
00> <debug> nrf_dfu_settings: Erasing old settings at: 0x000FE000
00> 
00> <debug> nrf_dfu_flash: nrf_fstorage_erase(addr=0x0x000FE000, len=1 pages), queue usage: 1
00> 
00> <debug> nrf_dfu_flash: Flash erase success: addr=0x000FE000, pending 0
00> 
00> <debug> nrf_dfu_flash: nrf_fstorage_write(addr=0x000FE000, src=0x20000F68, len=896 bytes), queue usage: 1
00> 
00> <debug> nrf_dfu_flash: Flash write success: addr=0x000FE000, pending 0
00> 
00> <error> app: CRC computation failed for copied app: src crc: 0xBF28E606, res crc: 0x5B2DA0B8
00> 
00> <debug> nrf_dfu_settings: Writing settings...
00> 
00> <debug> nrf_dfu_settings: Erasing old settings at: 0x000FF000
00> 
00> <debug> nrf_dfu_flash: nrf_fstorage_erase(addr=0x0x000FF000, len=1 pages), queue usage: 1
00> 
00> <debug> nrf_dfu_flash: Flash erase success: addr=0x000FF000, pending 0
00> 
00> <debug> nrf_dfu_flash: nrf_fstorage_write(addr=0x000FF000, src=0x200012EC, len=896 bytes), queue usage: 1
00> 
00> <debug> nrf_dfu_flash: Flash write success: addr=0x000FF000, pending 0
00> 
00> <info> nrf_dfu_settings: Backing up settings page to address 0xFE000.
00> 
00> <debug> nrf_dfu_settings: Writing settings...
00> 
00> <debug> nrf_dfu_settings: Erasing old settings at: 0x000FE000
00> 
00> <debug> nrf_dfu_flash: nrf_fstorage_erase(addr=0x0x000FE000, len=1 pages), queue usage: 1
00> 
00> <debug> nrf_dfu_flash: Flash erase success: addr=0x000FE000, pending 0
00> 
00> <debug> nrf_dfu_flash: nrf_fstorage_write(addr=0x000FE000, src=0x20000F68, len=896 bytes), queue usage: 1
00> 
00> <debug> nrf_dfu_flash: Flash write success: addr=0x000FE000, pending 0
00> 
00> <debug> app: Resetting bootloader.
00> 
00> <info> nrf_dfu_settings: B<info> app: Inside main
00> 
00> 
00> 
00> <debug> app: In nrf_bootloader_init
00> 
00> <debug> nrf_dfu_settings: Calling nrf_dfu_settings_init()...
00> 
00> <debug> nrf_dfu_flash: Initializing nrf_fstorage_nvmc backend.
00> 
00> <debug> nrf_dfu_settings: Using settings page.
00> 
00> <debug> nrf_dfu_settings: Copying forbidden parts from backup page.
00> 
00> <debug> nrf_dfu_settings: Destination settings are identical to source, write not needed. Skipping.
00> 
00> <info> nrf_dfu_settings: Backing up settings page to address 0xFE000.
00> 
00> <debug> nrf_dfu_settings: Destination settings are identical to source, write not needed. Skipping.
00> 
00> <debug> app: Enter nrf_bootloader_fw_activate
00> 
00> <info> app: No firmware to activate.
00> 
00>  feeding watchdog.
00> 
00> <debug> app: timer_activate (0x20000018)
00> 
00> <debug> app: in weak nrf_dfu_init_user
00> 
00> <debug> app: timer_stop (0x20000008)
00> 
00> <debug> app: timer_activate (0x20000008)
00> 
00> <info> app: Entering DFU mode.
00> 
00> <debug> app: Initializing transports (found: 0)
00> 
00> <debug> nrf_dfu_flash: Initializing nrf_fstorage_nvmc backend.
00> 
00> <debug> app: Enter main loop
00>

RE: OFF CHIP OTA UPDATE using external flash

Vidar Berg — Thu, 09 Nov 2023 12:05:22 GMT

I thought the issue had been resolved since the last log you posted showed that both the transfer and post-validation were successful.

[quote user="Priyesh Shahi"]download to external flash is not getting completed and there are two types of error during download . either Object size must be page aligned or "Creating the object with size 0x%08x would overflow firmware size.\r\n"
"Offset is 0x%08x and firmware size is 0x%08x."[/quote]

My suggestion then is that you retrace the changes you've made to pinpoint what caused this problem. I assume you don't encounter this issue when you run the unmodified SDK application, correct?