OI!STER: Difference between revisions
Unbinawiki (talk | contribs) |
Unbinawiki (talk | contribs) |
||
| Line 199: | Line 199: | ||
| JTDO | | JTDO | ||
| TRACESWO | | TRACESWO | ||
|- | |- | ||
! scope="row" | 40 | ! scope="row" | 40 | ||
| PB4 | | PB4 | ||
| NJTRST | | NJTRST | ||
|- | |- | ||
! scope="row" | 41 | ! scope="row" | 41 | ||
| PB5 | | PB5 | ||
| UCPD1_DB1 | | UCPD1_DB1 | ||
|- | |- | ||
! scope="row" | 42 | ! scope="row" | 42 | ||
| PB6 | | PB6 | ||
|- | |- | ||
! scope="row" | 43 | ! scope="row" | 43 | ||
| PB7 | | PB7 | ||
| UART4_CTS | | UART4_CTS | ||
|- | |- | ||
Revision as of 11:27, 31 August 2021
The OI!STER is an STM32L5 Target Board with a QFP48 clamshell socket aimed at debugging and glitching salvaged MCUs. The board can be powered via USB-C, a 2032 coin cell battery on the back of the board or an external power suppy. All pins are broken out in the 24-pin headers on either side at the top of the board. The OI!STER contains five debug headers, to support a wide range of debugging hardware such as a Hydrabus or a Black Magic Probe. It comes with six SMA connectors arranged in I/O pairs. One pair is dedicated to glitching the external LSE clock, another for glitching the external HSE clock and one pair for power analysis and fault injection with a Chipwhisperer. Each SMA connector can be bypassed by removing a small jumper. The OI!STER also has additional solder jumpers for the external clocks and each of the power traces to the MCU to allow for quick experimentation.
The Pinout diagrams below are directed at reverse engineering. The first diagram is targeted at debugging and reverse engineering an STM32L5 MCU itself. The second diagram is aimed at the communication between external peripherals and the MCU. Although some functionaly might overlap, we've found it practical to define these two pinout groups. Additional documentation is currently under development.
Debug Pinout Diagram
| USB/UART/LPUART/USART/JTAG/SWD/OSC/OSC32 Pinout |
|---|
Debug Pinout Table
| Pin | Function | Alternate Function | ||||
|---|---|---|---|---|---|---|
| 1 | VBAT | |||||
| 2 | PC13 | |||||
| 3 | PC14 | OSC32_IN | ||||
| 4 | PC15 | OSC32_OUT | ||||
| 5 | PH0 | OSC_IN | ||||
| 6 | PH1 | OSC_OUT | ||||
| 7 | NRST | |||||
| 8 | VSSA | VREF- | ||||
| 9 | VDDA | VREF+ | ||||
| 10 | PA0 | UART4_TX | USART2_CTS | USART2_NSS | ||
| 11 | PA1 | UART4_RX | USART2_RTS | USART2_DE | ||
| 12 | PA2 | LPUART1_TX | USART2_TX | UCPD1_FRSTX1 | ||
| 13 | PA3 | LPUART1_RX | USART2_RX | |||
| 14 | PA4 | USART2_CK | ||||
| 15 | PA5 | |||||
| 16 | PA6 | LPUART1_CTS | USART3_CTS | USART3_NSS | ||
| 17 | PA7 | |||||
| 18 | PB0 | LED1 | USART3_CK | |||
| 19 | PB1 | LED2 | LPUART1_RTS | USART3_RTS | USART3_DE | |
| 20 | PB2 | UCPD1_FRSTX2 | ||||
| 21 | PB10 | USART3_TX | ||||
| 22 | PB11 | USART3_RX | ||||
| 23 | VSS | |||||
| 24 | VDD | |||||
| 25 | PB12 | USART3_CK | ||||
| 26 | PB13 | USART3_CTS | ||||
| 27 | PB14 | USART3_RTS | UCPD1_DB2 | |||
| 28 | PB15 | UCPD1_CC2 | ||||
| 29 | PA8 | USART1_CK | ||||
| 30 | PA9 | USART1_TX | ||||
| 31 | PA10 | USART1_RX | ||||
| 32 | PA11 | USART1_CTS | USART1_NSS | USB_DM | ||
| 33 | PA12 | USART1_RTS | USART1_DE | USB_DP | ||
| 34 | PA13 | JTMS | SWDIO | USB_NOE | ||
| 35 | VSS_2 | |||||
| 36 | VDD_2 | |||||
| 37 | PA14 | JTCK | SWCLK | |||
| 38 | PA15 | JTDI | USART2_RX | USART3_RTS | UART4_RTS | UCPD1_CC1 |
| 39 | PB3 | JTDO | TRACESWO | |||
| 40 | PB4 | NJTRST | ||||
| 41 | PB5 | UCPD1_DB1 | ||||
| 42 | PB6 | |||||
| 43 | PB7 | UART4_CTS | ||||
| 44 | PH3 | BOOT0 | ||||
| 45 | PB8 | |||||
| 46 | PB9 | |||||
| 47 | VSS_3 | |||||
| 48 | VDD_3 | |||||
Protocol Pinout Reference
USB
| Pin | Function | Description |
|---|---|---|
| 32 | USB_DM | Data - |
| 33 | USB_DP | Data + |
| 34 | USB_NOE | Output Enable |
UART4
| Pin | Function | Description |
|---|---|---|
| 10 | UART4_TX | Transmit Data |
| 11 | UART4_RX | Receive Data |
| 38 | UART4_RTS | Request To Send |
| 43 | UART4_CTS | Clear To Send |
LPUART1
| Pin | Function | Description |
|---|---|---|
| 12 | LPUART1_TX | Transmit Data |
| 13 | LPUART1_RX | Receive Data |
| 16 | LPUART1_CTS | Clear To Send |
| 19 | LPUART1_RTS | Request To Send |
USART1
| Pin | Function | Description | |
|---|---|---|---|
| 29 | 41 | USART1_CK | Transmitter Clock |
| 30 | 42 | USART1_TX | Transmit Data |
| 31 | 43 | USART1_RX | Receive Data |
| 32 | 40 | USART1_CTS | Clear To Send |
| 33 | 39 | USART1_RTS | Request To Send |
USART2
| Pin | Function | Description | |
|---|---|---|---|
| 10 | USART2_CTS | Clear To Send | |
| 11 | USART2_RTS | Request To Send | |
| 12 | USART2_TX | Transmit Data | |
| 13 | 38 | USART2_RX | Receive Data |
| 14 | USART2_CK | Transmitter Clock | |
USART3
| Pin | Function | Description | |
|---|---|---|---|
| 16 | 26 | USART3_CTS | Clear To Send |
| 18 | 25 | USART3_CK | Transmitter Clock |
| 19 | 27 | USART3_RTS | Request To Send |
| 21 | USART3_TX | Transmit Data | |
| 22 | USART3_RX | Request Data | |
JTAG
| Pin | Function | Description |
|---|---|---|
| 34 | JTMS | Test Mode State |
| 37 | JTCK | Test Clock |
| 38 | JTDI | Test Data In |
| 39 | JTDO | Test Data Out |
| 40 | NJTRST | Reset |
SWD
| Pin | Function | Description |
|---|---|---|
| 7 | NRST | Reset |
| 34 | SWDIO | Data I/O |
| 37 | SWCLK | Clock |
| 39 | TRACESWO | Trace Output |
OSC
| Pin | Function | Description |
|---|---|---|
| 5 | OSC_IN | High Speed External Clock In (HSEI) |
| 6 | OSC_OUT | High Speed External Clock Out (HSEO) |
OSC32
| Pin | Function | Description |
|---|---|---|
| 3 | OSC32_IN | Low Speed External Clock In (LSEI) |
| 4 | OSC32_OUT | Low Speed External Clock Out (LSEO) |
Peripheral Pinout Diagram
| I2C/SPI/OCTOSPI/FDCAN Pinout |
|---|
Peripheral Pinout Table
| Pin | Function | Alternate Function | |||
|---|---|---|---|---|---|
| 1 | VBAT | ||||
| 2 | PC13 | ||||
| 3 | PC14 | ||||
| 4 | PC15 | ||||
| 5 | PH0 | ||||
| 6 | PH1 | ||||
| 7 | NRST | ||||
| 8 | VSSA | ||||
| 9 | VDDA | ||||
| 10 | PA0 | ||||
| 11 | PA1 | I2C1_SMBA | SPI1_SCK | OCTOSPI1_DQS | |
| 12 | PA2 | OCTOSPI1_NCS | |||
| 13 | PA3 | OCTOSPI1_CLK | |||
| 14 | PA4 | SPI1_NSS | SPI3_NSS | OCTOSPI1_NCS | |
| 15 | PA5 | SPI1_SCK | |||
| 16 | PA6 | SPI1_MISO | OCTOSPI1_IO3 | ||
| 17 | PA7 | I2C3_SCL | SPI1_MOSI | OCTOSPI1_IO2 | |
| 18 | PB0 | SPI1_NSS | OCTOSPI1_IO1 | ||
| 19 | PB1 | OCTOSPI1_IO0 | |||
| 20 | PB2 | I2C3_SMBA | OCTOSPI1_DQS | ||
| 21 | PB10 | I2C2_SCL | I2C4_SCL | SPI2_SCK | OCTOSPI1_CLK |
| 22 | PB11 | I2C2_SDA | I2C4_SDA | OCTOSPI1_NCS | |
| 23 | VSS | ||||
| 24 | VDD | ||||
| 25 | PB12 | I2C2_SMBA | SPI2_NSS | OCTOSPI_NCLK | |
| 26 | PB13 | I2C2_SCL | SPI2_SCK | ||
| 27 | PB14 | I2C2_SDA | SPI2_MISO | ||
| 28 | PB15 | SPI2_MOSI | |||
| 29 | PA8 | ||||
| 30 | PA9 | SPI2_SCK | |||
| 31 | PA10 | ||||
| 32 | PA11 | SPI1_MISO | FDCAN1_RX | ||
| 33 | PA12 | SPI1_MOSI | FDCAN1_TX | ||
| 34 | PA13 | ||||
| 35 | VSS_2 | ||||
| 36 | VDD_2 | ||||
| 37 | PA14 | I2C1_SMBA | I2C4_SMBA | ||
| 38 | PA15 | SPI1_NSS | SPI3_NSS | ||
| 39 | PB3 | SPI1_SCK | SPI3_SCK | ||
| 40 | PB4 | I2C3_SDA | SPI1_MISO | SPI3_MISO | |
| 41 | PB5 | I2C1_SMBA | SPI1_MOSI | SPI3_MOSI | OCTOSPI_NCLK |
| 42 | PB6 | I2C2_SCL | I2C4_SCL | ||
| 43 | PB7 | I2C1_SDA | I2C4_SDA | ||
| 44 | PH3 | ||||
| 45 | PB8 | I2C1_SCL | FDCAN1_RX | ||
| 46 | PB9 | I2C1_SDA | SPI2_NSS | FDCAN1_TX | |
| 47 | VSS_3 | ||||
| 48 | VDD_3 | ||||
Protocol Pinout Reference
I2C1
| Pin | Function | Description | |
|---|---|---|---|
| 11 | 41 | I2C1_SMBA | System Management Bus Alert (SMBus mode) |
| 43 | 46 | I2C1_SDA | Serial Data Line |
| 42 | 45 | I2C1_SCL | Serial Clock Line |
I2C2
| Pin | Function | Description | |
|---|---|---|---|
| 21 | 26 | I2C2_SCL | Serial Clock Line |
| 22 | 27 | I2C2_SDA | Serial Data Line |
| 25 | I2C2_SMBA | System Management Bus Alert (SMBus mode) | |
I2C3
| Pin | Function | Description |
|---|---|---|
| 17 | I2C3_SCL | Serial Clock Line |
| 25 | I2C3_SMBA | System Management Bus Alert (SMBus mode) |
| 40 | I2C3_SDA | Serial Data Line |
I2C4
| Pin | Function | Description | |
|---|---|---|---|
| 21 | 42 | I2C4_SCL | Serial Clock Line |
| 22 | 43 | I2C4_SDA | Serial Data Line |
| 37 | I2C4_SMBA | System Management Bus Alert (SMBus mode) | |
SPI1
| Pin | Function | Description | ||
|---|---|---|---|---|
| 11 | 15 | 39 | SPI1_SCK | Serial Clock |
| 14 | 18 | 38 | SPI1_NSS | Slave Select |
| 16 | 32 | 40 | SPI1_MISO | Master-in, Slave-out |
| 17 | 33 | 41 | SPI1_MOSI | Master-out, Slave-in |
SPI2
| Pin | Function | Description | |
|---|---|---|---|
| 21 | 26 | SPI2_SCK | Serial Clock |
| 25 | SPI2_NSS | Slave Select | |
| 27 | SPI2_MISO | Master-in, Slave-out | |
| 28 | SPI2_MOSI | Master-out, Slave-in | |
SPI3
| Pin | Function | Description | |
|---|---|---|---|
| 14 | 38 | SPI3_NSS | Slave Select |
| 39 | SPI3_SCK | Serial Clock | |
| 40 | SPI3_MISO | Master-in, Slave-out | |
| 41 | SPI3_MOSI | Master-out, Slave-in | |
OCTOSPI1
| Pin | Function | Description | |
|---|---|---|---|
| 11 | 20 | OCTOSPI1_DQS | Data Strobe |
| 12 | 14 | OCTOSPI1_NCS | Chip Select |
| 13 | 21 | OCTOSPI1_CLK | Clock |
| 16 | OCTOSPI1_IO3 | I/O Data Line | |
| 17 | OCTOSPI1_IO2 | I/O Data Line | |
| 18 | OCTOSPI1_IO1 | I/O Data Line | |
| 25 | 41 | OCTOSPI1_NCLK | Differential Clock |
FDCAN
| Pin | Function | Description |
|---|---|---|
| 32 | FDCAN_RX | Receive Data |
| 33 | FDCAN_TX | Transmit Data |