WRT54GS flash broken

[Hauke Mehrtens]

Hi,

I wanted to flash a recent OpenWrt onto a WRT54GS today and broke something.

I used the recovery mechanism in the CFE boot loader:
--------
CFE version 1.0.37 for BCM947XX (32bit,SP,LE)
Build Date: Fri Jun 25 15:49:22 CST 2004 (root at Amin)
Copyright (C) 2000,2001,2002,2003 Broadcom Corporation.

Initializing Arena.
Initializing Devices.
et0: Broadcom BCM47xx 10/100 Mbps Ethernet Controller 3.60.13.0
rndis0: Broadcom USB RNDIS Network Adapter (P-t-P)
CPU type 0x29007: 200MHz
Total memory: 0x2000000 bytes (32MB)

Total memory used by CFE:  0x80300000 - 0x8043DF30 (1302320)
Initialized Data:          0x803381A0 - 0x8033A550 (9136)
BSS Area:                  0x8033A550 - 0x8033BF30 (6624)
Local Heap:                0x8033BF30 - 0x8043BF30 (1048576)
Stack Area:                0x8043BF30 - 0x8043DF30 (8192)
Text (code) segment:       0x80300000 - 0x803381A0 (229792)
Boot area (physical):      0x0043E000 - 0x0047E000
Relocation Factor:         I:00000000 - D:00000000

Boot version: v3.2
The boot is CFE

mac_init(): Find mac [00:0F:66:D3:94:95] in location 1
Nothing...

No eou key find
Device eth0:  hwaddr 00-0F-66-D3-94-95, ipaddr 192.168.1.1, mask 
255.255.255.0
         gateway not set, nameserver not set
Reading :: CODE Pattern is CORRECT!
upgrade_ver[v4.80.1] upgrade_ver[48001] 4712_ver[15000]
Done. 5181472 bytes read
fname=flash1.trx
CODE Pattern is correct! (W54S)
Programming...W
--------
The system was hanging after this operation.

When I tried this again it never went further than "Programming..."

I also tried to manually flash it like this:
--------
CFE> flash -ctheader : flash1.trx
Reading :: CODE Pattern is CORRECT!
upgrade_ver[v4.80.1] upgrade_ver[48001] 4712_ver[15000]
Done. 2756640 bytes read
fname=flash1.trx
CODE Pattern is correct! (W54S)
Programming...�
--------

I was sending the file like this:
--------
atftp --trace --option "timeout 1" --option "mode octet" --put 
--local-file 
bin/targets/bcm47xx/legacy/openwrt-bcm47xx-legacy-linksys_wrt54gs-squashfs.bin 
192.168.1.1
--------

Some old webpages said the image should be less than 3MB, so I 
deactivated many applications I do not need for a sysupgrade.


How can I recover this device again?
Currently I have UART connected only and no JTAG yet.

Hauke