Добавил:
Upload Опубликованный материал нарушает ваши авторские права? Сообщите нам.
Вуз: Предмет: Файл:
AVR / datasheets / AT90USB82_162.pdf
Скачиваний:
45
Добавлен:
20.03.2015
Размер:
2.88 Mб
Скачать

Table 23. Boot Lock Bit0 Protection Modes (Application Section)(1)

BLB0 Mode

BLB02

BLB01

Protection

 

 

 

 

1

1

1

No restrictions for SPM or (E)LPM accessing the

 

 

 

Application section.

 

 

 

 

2

1

0

SPM is not allowed to write to the Application section.

 

 

 

 

3

0

0

SPM is not allowed to write to the Application section, and

 

 

 

(E)LPM executing from the Boot Loader section is not

 

 

 

allowed to read from the Application section. If Interrupt

 

 

 

Vectors are placed in the Boot Loader section, interrupts

 

 

 

are disabled while executing from the Application section.

 

 

 

 

4

0

1

(E)LPM executing from the Boot Loader section is not

 

 

 

allowed to read from the Application section. If Interrupt

 

 

 

Vectors are placed in the Boot Loader section, interrupts

 

 

 

are disabled while executing from the Application section.

 

 

 

 

Note: 1. “1” means unprogrammed, “0” means programmed

Table 24. Boot Lock Bit1 Protection Modes (Boot Loader Section)(1)

BLB1 Mode

BLB12

BLB11

Protection

 

 

 

 

1

1

1

No restrictions for SPM or (E)LPM accessing the Boot

 

 

 

Loader section.

 

 

 

 

2

1

0

SPM is not allowed to write to the Boot Loader section.

 

 

 

 

3

0

0

SPM is not allowed to write to the Boot Loader section,

 

 

 

and (E)LPM executing from the Application section is not

 

 

 

allowed to read from the Boot Loader section. If Interrupt

 

 

 

Vectors are placed in the Application section, interrupts

 

 

 

are disabled while executing from the Boot Loader

 

 

 

section.

 

 

 

 

4

0

1

(E)LPM executing from the Application section is not

 

 

 

allowed to read from the Boot Loader section. If Interrupt

 

 

 

Vectors are placed in the Application section, interrupts

 

 

 

are disabled while executing from the Boot Loader

 

 

 

section.

 

 

 

 

Note: 1. “1” means unprogrammed, “0” means programmed

Entering the Boot

The bootloader can be executed with three different conditions:

Loader Program

 

Regular application

A jump or call from the application program. This may be initiated by a trigger such as a com-

conditions.

mand received via USART, or SPI interface.

Boot Reset Fuse

The Boot Reset Fuse (BOOTRST) can be programmed so that the Reset Vector is pointing to

 

the Boot Flash start address after a reset. In this case, the Boot Loader is started after a reset.

 

After the application code is loaded, the program can start executing the application code. Note

 

that the fuses cannot be changed by the MCU itself. This means that once the Boot Reset Fuse

220

7707A–AVR–01/07

is programmed, the Reset Vector will always point to the Boot Loader Reset and the fuse can only be changed through the serial or parallel programming interface.

Table 25. Boot Reset Fuse(1)

BOOTRST

Reset Address

 

 

1

Reset Vector = Application Reset (address 0x0000)

 

 

0

Reset Vector = Boot Loader Reset (see Table 29 on page 229)

 

 

 

Note: 1.

“1” means unprogrammed, “0” means programmed

External Hardware

The Hardware Boot Enable Fuse (HWBE) can be programmed (See Table 26) so that upon spe-

conditions

cial hardware conditions under reset, the bootloader execution is forced after reset.

 

Table 26. Hardware Boot Enable Fuse(1)

 

HWBE

 

Reset Address

 

 

 

 

 

 

 

1

 

 

 

pin can not be used to force Boot Loader execution after reset

 

 

 

PD7/HWB

 

 

 

 

 

 

 

0

 

 

 

pin is used during reset to force bootloader execution after reset

 

 

 

PD7/HWB

 

 

 

 

 

 

 

 

Note: 1. “1” means unprogrammed, “0” means programmed

When the HWBE fuse is enable the PD7/HWB pin is configured as input during reset and sampled during reset rising edge. When PD7/HWB pin is ‘0’ during reset rising edge, the reset vector will be set as the Boot Loader Reset address and the Boot Loader will be executed (See Figures 93).

Figure 93. Boot Process Description

RESET

tSHRH

tHHRH

PD7/HWB

HWBE ?

Ext. Hardware

Conditions ?

BOOTRST ?

 

Reset Vector = Application Reset

Reset Vector =Boot Lhoader Reset

221

7707A–AVR–01/07

Store Program

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

The Store Program Memory Control and Status Register contains the control bits needed to con-

Memory Control and

trol the Boot Loader operations.

 

 

 

 

 

 

 

 

 

 

Status Register –

Bit

7

6

5

4

 

 

 

 

3

2

1

0

 

SPMCSR

 

SPMIE

RWWSB

SIGRD

RWWSRE

 

BLBSET

PGWRT

PGERS

SPMEN

SPMCSR

 

Read/Write

R/W

R

R/W

R/W

R/W

R/W

R/W

R/W

 

Initial Value

0

0

0

0

 

 

 

 

0

0

0

0

 

• Bit 7 – SPMIE: SPM Interrupt Enable

When the SPMIE bit is written to one, and the I-bit in the Status Register is set (one), the SPM ready interrupt will be enabled. The SPM ready Interrupt will be executed as long as the SPMEN bit in the SPMCSR Register is cleared.

• Bit 6 – RWWSB: Read-While-Write Section Busy

When a Self-Programming (Page Erase or Page Write) operation to the RWW section is initiated, the RWWSB will be set (one) by hardware. When the RWWSB bit is set, the RWW section cannot be accessed. The RWWSB bit will be cleared if the RWWSRE bit is written to one after a Self-Programming operation is completed. Alternatively the RWWSB bit will automatically be cleared if a page load operation is initiated.

• Bit 5 – SIGRD: Signature Row Read

If this bit is written to one at the same time as SPMEN, the next LPM instruction within three clock cycles will read a byte from the signature row into the destination register. see “Reading the Signature Row from Software” on page 227 for details. An SPM instruction within four cycles after SIGRD and SPMEN are set will have no effect. This operation is reserved for future use and should not be used.

• Bit 4 – RWWSRE: Read-While-Write Section Read Enable

When programming (Page Erase or Page Write) to the RWW section, the RWW section is blocked for reading (the RWWSB will be set by hardware). To re-enable the RWW section, the user software must wait until the programming is completed (SPMEN will be cleared). Then, if the RWWSRE bit is written to one at the same time as SPMEN, the next SPM instruction within four clock cycles re-enables the RWW section. The RWW section cannot be re-enabled while the Flash is busy with a Page Erase or a Page Write (SPMEN is set). If the RWWSRE bit is written while the Flash is being loaded, the Flash load operation will abort and the data loaded will be lost.

• Bit 3 – BLBSET: Boot Lock Bit Set

If this bit is written to one at the same time as SPMEN, the next SPM instruction within four clock cycles sets Boot Lock bits, according to the data in R0. The data in R1 and the address in the Z- pointer are ignored. The BLBSET bit will automatically be cleared upon completion of the Lock bit set, or if no SPM instruction is executed within four clock cycles.

An (E)LPM instruction within three cycles after BLBSET and SPMEN are set in the SPMCSR Register, will read either the Lock bits or the Fuse bits (depending on Z0 in the Z-pointer) into the destination register. See “Reading the Fuse and Lock Bits from Software” on page 226 for details.

• Bit 2 – PGWRT: Page Write

If this bit is written to one at the same time as SPMEN, the next SPM instruction within four clock cycles executes Page Write, with the data stored in the temporary buffer. The page address is taken from the high part of the Z-pointer. The data in R1 and R0 are ignored. The PGWRT bit will auto-clear upon completion of a Page Write, or if no SPM instruction is executed within four clock cycles. The CPU is halted during the entire Page Write operation if the NRWW section is addressed.

• Bit 1 – PGERS: Page Erase

222

7707A–AVR–01/07

Addressing the

Flash During Self-

Programming

7707A–AVR–01/07

If this bit is written to one at the same time as SPMEN, the next SPM instruction within four clock cycles executes Page Erase. The page address is taken from the high part of the Z-pointer. The data in R1 and R0 are ignored. The PGERS bit will auto-clear upon completion of a Page Erase, or if no SPM instruction is executed within four clock cycles. The CPU is halted during the entire Page Write operation if the NRWW section is addressed.

• Bit 0 – SPMEN: Store Program Memory Enable

This bit enables the SPM instruction for the next four clock cycles. If written to one together with either RWWSRE, BLBSET, PGWRT’ or PGERS, the following SPM instruction will have a special meaning, see description above. If only SPMEN is written, the following SPM instruction will store the value in R1:R0 in the temporary page buffer addressed by the Z-pointer. The LSB of the Z-pointer is ignored. The SPMEN bit will auto-clear upon completion of an SPM instruction, or if no SPM instruction is executed within four clock cycles. During Page Erase and Page Write, the SPMEN bit remains high until the operation is completed.

Writing any other combination than “10001”, “01001”, “00101”, “00011” or “00001” in the lower five bits will have no effect.

Note: Only one SPM instruction should be active at any time.

The Z-pointer is used to address the SPM commands. The Z pointer consists of the Z-registers ZL and ZH in the register file. The number of bits actually used is implementation dependent.

Since the Flash is organized in pages (see Table 42 on page 238), the Program Counter can be treated as having two different sections. One section, consisting of the least significant bits, is addressing the words within a page, while the most significant bits are addressing the pages. This is shown in Figure 94. Note that the Page Erase and Page Write operations are addressed independently. Therefore it is of major importance that the Boot Loader software addresses the same page in both the Page Erase and Page Write operation. Once a programming operation is initiated, the address is latched and the Z-pointer can be used for other operations.

The (E)LPM instruction use the Z-pointer to store the address. Since this instruction addresses the Flash byte-by-byte, also bit Z0 of the Z-pointer is used.

223

Figure 94. Addressing the Flash During SPM(1)

BIT 15

 

 

 

ZPCMSB

 

 

 

ZPAGEMSB 1 0

 

Z - REGISTER

 

 

 

 

 

 

 

 

 

 

 

 

0

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

PROGRAM

 

PCMSB

 

 

 

PAGEMSB

 

 

 

 

 

 

 

PCPAGE

PCWORD

 

 

 

 

 

 

COUNTER

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

PAGE ADDRESS

 

 

WORD ADDRESS

 

 

 

 

WITHIN THE FLASH

 

 

WITHIN A PAGE

 

PROGRAM MEMORY

 

 

 

 

 

 

 

 

 

PAGE

PCWORD[PAGEMSB:0]:

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

PAGE

 

 

 

 

 

 

 

 

 

 

 

 

INSTRUCTION WORD

00

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

01

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

02

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

PAGEEND

Self-Programming

the Flash

Note: 1. The different variables used in Figure 94 are listed in Table 31 on page 230.

The program memory is updated in a page by page fashion. Before programming a page with the data stored in the temporary page buffer, the page must be erased. The temporary page buffer is filled one word at a time using SPM and the buffer can be filled either before the Page Erase command or between a Page Erase and a Page Write operation:

Alternative 1, fill the buffer before a Page Erase

Fill temporary page buffer

Perform a Page Erase

Perform a Page Write

Alternative 2, fill the buffer after Page Erase

Perform a Page Erase

Fill temporary page buffer

Perform a Page Write

If only a part of the page needs to be changed, the rest of the page must be stored (for example in the temporary page buffer) before the erase, and then be rewritten. When using alternative 1, the Boot Loader provides an effective Read-Modify-Write feature which allows the user software to first read the page, do the necessary changes, and then write back the modified data. If alternative 2 is used, it is not possible to read the old data while loading since the page is already erased. The temporary page buffer can be accessed in a random sequence. It is essential that the page address used in both the Page Erase and Page Write operation is addressing the same page. See “Simple Assembly Code Example for a Boot Loader” on page 228 for an assembly code example.

224

7707A–AVR–01/07

Performing Page To execute Page Erase, set up the address in the Z-pointer, write “X0000011” to SPMCSR and Erase by SPM execute SPM within four clock cycles after writing SPMCSR. The data in R1 and R0 is ignored.

The page address must be written to PCPAGE in the Z-register. Other bits in the Z-pointer will be ignored during this operation.

Page Erase to the RWW section: The NRWW section can be read during the Page Erase.

Page Erase to the NRWW section: The CPU is halted during the operation.

Filling the Temporary To write an instruction word, set up the address in the Z-pointer and data in R1:R0, write Buffer (Page Loading) “00000001” to SPMCSR and execute SPM within four clock cycles after writing SPMCSR. The content of PCWORD in the Z-register is used to address the data in the temporary buffer. The temporary buffer will auto-erase after a Page Write operation or by writing the RWWSRE bit in SPMCSR. It is also erased after a system reset. Note that it is not possible to write more than

one time to each address without erasing the temporary buffer.

If the EEPROM is written in the middle of an SPM Page Load operation, all data loaded will be lost.

Performing a Page To execute Page Write, set up the address in the Z-pointer, write “X0000101” to SPMCSR and Write execute SPM within four clock cycles after writing SPMCSR. The data in R1 and R0 is ignored.

The page address must be written to PCPAGE. Other bits in the Z-pointer must be written to zero during this operation.

Page Write to the RWW section: The NRWW section can be read during the Page Write.

Page Write to the NRWW section: The CPU is halted during the operation.

Using the SPM

If the SPM interrupt is enabled, the SPM interrupt will generate a constant interrupt when the

Interrupt

SPMEN bit in SPMCSR is cleared. This means that the interrupt can be used instead of polling

 

the SPMCSR Register in software. When using the SPM interrupt, the Interrupt Vectors should

 

be moved to the BLS section to avoid that an interrupt is accessing the RWW section when it is

 

blocked for reading. How to move the interrupts is described in “Interrupts” on page 61.

Consideration While

Special care must be taken if the user allows the Boot Loader section to be updated by leaving

Updating BLS

Boot Lock bit11 unprogrammed. An accidental write to the Boot Loader itself can corrupt the

 

entire Boot Loader, and further software updates might be impossible. If it is not necessary to

 

change the Boot Loader software itself, it is recommended to program the Boot Lock bit11 to

 

protect the Boot Loader software from any internal software changes.

Prevent Reading the

During Self-Programming (either Page Erase or Page Write), the RWW section is always

RWW Section During

blocked for reading. The user software itself must prevent that this section is addressed during

Self-Programming

the self programming operation. The RWWSB in the SPMCSR will be set as long as the RWW

 

section is busy. During Self-Programming the Interrupt Vector table should be moved to the BLS

 

as described in “Interrupts” on page 61, or the interrupts must be disabled. Before addressing

 

the RWW section after the programming is completed, the user software must clear the

 

RWWSB by writing the RWWSRE. See “Simple Assembly Code Example for a Boot Loader” on

 

page 228 for an example.

225

7707A–AVR–01/07

Setting the Boot

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

To set the Boot Loader Lock bits, write the desired data to R0, write “X0001001” to SPMCSR

Loader Lock Bits by

and execute SPM within four clock cycles after writing SPMCSR. The only accessible Lock bits

SPM

are the Boot Lock bits that may prevent the Application and Boot Loader section from any soft-

 

ware update by the MCU.

 

 

 

 

 

 

 

 

 

 

 

 

Bit

7

6

5

 

4

 

3

2

1

0

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

R0

1

1

BLB12

 

BLB11

 

BLB02

BLB01

1

1

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

See Table 23 and Table 24 for how the different settings of the Boot Loader bits affect the Flash access.

If bits 5..2 in R0 are cleared (zero), the corresponding Boot Lock bit will be programmed if an SPM instruction is executed within four cycles after BLBSET and SPMEN are set in SPMCSR. The Z-pointer is don’t care during this operation, but for future compatibility it is recommended to load the Z-pointer with 0x0001 (same as used for reading the lOck bits). For future compatibility it is also recommended to set bits 7, 6, 1, and 0 in R0 to “1” when writing the Lock bits. When programming the Lock bits the entire Flash can be read during the operation.

EEPROM Write

Note that an EEPROM write operation will block all software programming to Flash. Reading the

Prevents Writing to

Fuses and Lock bits from software will also be prevented during the EEPROM write operation. It

SPMCSR

is recommended that the user checks the status bit (EEPE) in the EECR Register and verifies

 

that the bit is cleared before writing to the SPMCSR Register.

 

 

 

Reading the Fuse and

It is possible to read both the Fuse and Lock bits from software. To read the Lock bits, load the

Lock Bits from

Z-pointer with 0x0001 and set the BLBSET and SPMEN bits in SPMCSR. When an (E)LPM

Software

instruction is executed within three CPU cycles after the BLBSET and SPMEN bits are set in

 

SPMCSR, the value of the Lock bits will be loaded in the destination register. The BLBSET and

 

SPMEN bits will auto-clear upon completion of reading the Lock bits or if no (E)LPM instruction

 

is executed within three CPU cycles or no SPM instruction is executed within four CPU cycles.

 

When BLBSET and SPMEN are cleared, (E)LPM will work as described in the Instruction set

 

Manual.

 

 

 

 

 

 

 

 

 

 

Bit

7

6

5

4

3

2

1

0

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Rd

BLB12

BLB11

BLB02

BLB01

LB2

LB1

 

 

 

 

 

 

 

 

 

 

 

 

 

The algorithm for reading the Fuse Low byte is similar to the one described above for reading the Lock bits. To read the Fuse Low byte, load the Z-pointer with 0x0000 and set the BLBSET and SPMEN bits in SPMCSR. When an (E)LPM instruction is executed within three cycles after the BLBSET and SPMEN bits are set in the SPMCSR, the value of the Fuse Low byte (FLB) will be loaded in the destination register as shown below. Refer to Table 36 on page 235 for a detailed description and mapping of the Fuse Low byte.

Bit

 

7

6

5

4

3

2

1

0

Rd

FLB7

FLB6

FLB5

FLB4

FLB3

FLB2

FLB1

FLB0

 

 

 

 

 

 

 

 

 

 

Similarly, when reading the Fuse High byte, load 0x0003 in the Z-pointer. When an (E)LPM instruction is executed within three cycles after the BLBSET and SPMEN bits are set in the SPMCSR, the value of the Fuse High byte (FHB) will be loaded in the destination register as shown below. Refer to Table 35 on page 235 for detailed description and mapping of the Fuse High byte.

Bit

 

7

6

5

4

3

2

1

0

Rd

FHB7

FHB6

FHB5

FHB4

FHB3

FHB2

FHB1

FHB0

 

 

 

 

 

 

 

 

 

 

When reading the Extended Fuse byte, load 0x0002 in the Z-pointer. When an (E)LPM instruction is executed within three cycles after the BLBSET and SPMEN bits are set in the SPMCSR, the value of the Extended Fuse byte (EFB) will be loaded in the destination register as shown below. Refer to Table 34 on page 234 for detailed description and mapping of the Extended Fuse byte.

Bit

7

6

5

4

3

2

1

0

226

7707A–AVR–01/07

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Rd

EFB2

EFB1

EFB0

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Fuse and Lock bits that are programmed, will be read as zero. Fuse and Lock bits that are unprogrammed, will be read as one.

Reading the Signature To read the Signature Row from software, load the Z-pointer with the signature byte address Row from Software given in Table 27 on page 227 and set the SIGRD and SPMEN bits in SPMCSR. When an LPM instruction is executed within three CPU cycles after the SIGRD and SPMEN bits are set in SPMCSR, the signature byte value will be loaded in the destination register. The SIGRD and SPMEN bits will auto-clear upon completion of reading the Signature Row Lock bits or if no LPM instruction is executed within three CPU cycles. When SIGRD and SPMEN are cleared, LPM will

work as described in the Instruction set Manual.

Table 27. Signature Row Addressing

Signature Byte

Z-Pointer Address

 

 

Device Signature Byte 1

0x0000

 

 

Device Signature Byte 2

0x0002

 

 

Device Signature Byte 3

0x0004

 

 

RC Oscillator Calibration Byte

0x0001

 

 

Note: All other addresses are reserved for future use.

Preventing Flash During periods of low VCC, the Flash program can be corrupted because the supply voltage is Corruption too low for the CPU and the Flash to operate properly. These issues are the same as for board

level systems using the Flash, and the same design solutions should be applied.

A Flash program corruption can be caused by two situations when the voltage is too low. First, a regular write sequence to the Flash requires a minimum voltage to operate correctly. Secondly, the CPU itself can execute instructions incorrectly, if the supply voltage for executing instructions is too low.

Flash corruption can easily be avoided by following these design recommendations (one is sufficient):

1.If there is no need for a Boot Loader update in the system, program the Boot Loader Lock bits to prevent any Boot Loader software updates.

2.Keep the AVR RESET active (low) during periods of insufficient power supply voltage. This can be done by enabling the internal Brown-out Detector (BOD) if the operating volt-

age matches the detection level. If not, an external low VCC reset protection circuit can be used. If a reset occurs while a write operation is in progress, the write operation will be completed provided that the power supply voltage is sufficient.

3.Keep the AVR core in Power-down sleep mode during periods of low VCC. This will prevent the CPU from attempting to decode and execute instructions, effectively protecting the SPMCSR Register and thus the Flash from unintentional writes.

Programming Time for The calibrated RC Oscillator is used to time Flash accesses. Table 28 shows the typical pro- Flash when Using gramming time for Flash accesses from the CPU.

SPM

Table 28. SPM Programming Time

Symbol

Min Programming Time

Max Programming Time

 

 

 

Flash write (Page Erase, Page Write,

3.7 ms

4.5 ms

and write Lock bits by SPM)

 

 

 

 

 

227

7707A–AVR–01/07

Соседние файлы в папке datasheets