View Full Version : 5110 DSP ROM v4

18-08-2003, 09:42 AM
In attach full DSP ROM

18-08-2003, 10:41 AM

How did you read the DSP ROM program area when it is protected?

18-08-2003, 11:30 AM
There is a security hole.

18-08-2003, 11:48 AM
How is it normally protected?

18-08-2003, 12:29 PM
Originally posted by wumpus
How is it normally protected?
TI writes in datasheet:
Emulator cannot run.
Instructions from on-chip ROM can read data from on-chip ROM.
Instructions from on-chip RAM or external program cannot read data from on-chip ROM and will read FFFFh.

18-08-2003, 12:58 PM
Cool, and you managed to rip it anyway :)

They state that in what datasheet? Which chip is so alike the MAD but has a datasheet around?

18-08-2003, 01:56 PM
It's a common datasheet for all c54x family.
TMS320C54x DSP Reference Set, Volume 1, p3-30.

02-09-2003, 07:17 PM
What software are you using for reading DSP ?

It could be possible with "studio" from TI ?

Or with modified knok ?

Thanks, i'm trying to do the same with 3320 (TDMA)

02-09-2003, 09:32 PM
I think he used his ICE (In Circuit Debugger) to read the memory ranges, not sure though, he found a security hole in the DSP ROM protection.
No modified KNOK could do it though. It is not flashable or even in the MCU memory range.

AlexD:Any change you can get the DSP ROM6 dump?

03-09-2003, 01:04 PM
ICE is useless in reading ROM, it simply doesn't work with DSP.
So Code Composer Studio is useless too.

03-09-2003, 01:15 PM
I *think* I know which security hole.. hmm... takes a lot of poking and jumping around in DSP rom, that's for sure.

13-04-2006, 09:54 PM
The listed ROM4 is gone... does anybody still have it?

14-04-2006, 09:06 AM
try this site (don't know if it's ROM4 though)


just scroll down and you'll see the link to donwload ;)

15-04-2006, 12:54 PM
AlexD took the ROM out of the DSP. It is not in the phone firmware. Maybe somebody still has that file.
On the link you gave me it's a normal 5110 flash file.

17-04-2006, 01:24 PM
AlexD gave me this:

Hope it will help you too :)