cancel
Showing results for 
Search instead for 
Did you mean: 

Issue with STM32H735 Bootloader in RDP Level 1 (0xBB) Mode

SHm
Associate II

Hello,

I’m working with the STM32H735, and I need to enter bootloader mode to program the microcontroller. I modify the SYSCFG->UR2 register to set the address to 0x1FF00000, then perform a software reset. I use this method because I have no control over the BOOT0 pin (it's directly connected to GND) and the reset pin. After the reset, I use STM32_Programmer_CLI.exe to program the microcontroller with the following python script:

 

 

 

import subprocess

# Define the path to STM32_Programmer_CLI.exe
stm32_cli_path = "STM32_Programmer_CLI.exe"

# Define the commands to be executed
command1 = [stm32_cli_path, "-c", "port=COM7", "br=115200", "-rdu"]
command2 = [stm32_cli_path, "-c", "port=COM7", "br=115200", "-e", "all", "-w", "Test.hex", "-v", "-ob", "rdp=0xBB"]

try:
    # Execute the first command
    result1 = subprocess.run(command1, capture_output=True, text=True, check=True)
    print("Command 1 Output:")
    print(result1.stdout)
    
    # Execute the second command
    result2 = subprocess.run(command2, capture_output=True, text=True, check=True)
    print("Command 2 Output:")
    print(result2.stdout)

except subprocess.CalledProcessError as e:
    print(f"An error occurred while executing the command: {e}")
    print(f"Error Output: {e.stderr}")

 

 

 

 

This works fine when the microcontroller is in unprotected mode (RDP=0xAA). However, when RDP is set to 0xBB, after the software reset, the bootloader does not program the microcontroller (I get a timeout error). I see that the Flash memory is empty after this process, so it seems the protection is disabled temporarily, but the programming of the .hex file does not proceed.

Has anyone encountered a similar issue or have any suggestions on how to resolve this?

best Regards,

5 REPLIES 5
embedko
Associate II

Hi. See RM0468 Reference manual. With RDP Level 2 boot from RAM and System Flash memory are disabled.

embedko_0-1730887711805.png

If you want to use RDP Level 2, you must write your own loader.

SHm
Associate II

Hello,

Another approach I’m considering is to disable the RDP level directly through code before attempting the bootloader entry. Here’s the outline of the process:

  1. After setting the boot address in the SYSCFG->UR2 register, I would disable the RDP protection by modifying the option bytes to change the RDP level from Level 1 to Level 0.
  2. This code should be executed from RAM, writing option bytes and performing a soft reset requires execution outside of Flash, because when changing the RDP level the Flash will be erased

I would copy the code that changes the RDP level and initiates the software reset into RAM, then execute it from there.

This way, I would effectively downgrade the RDP level to allow bootloader access and proceed with programming.

Does this approach seem feasible, or are there any potential issues with executing the RDP downgrade and reset sequence from RAM?

AScha.3
Chief III

>Has anyone encountered a similar issue or have any suggestions on how to resolve this?

1. There is no "issue" here with the chip. The "issue" is just stupidity and ignorance.

2. To resolve "this" : 

A:  rtfm. Before setting any RDP level !

B: Replace (now useless chip) and try again.

C: And trust the rm, if read rm : 

AScha3_0-1730890652827.png

 

If you feel a post has answered your question, please click "Accept as Solution".
SHm
Associate II

Apologies for the confusion. I made a mistake in the title. It should have read "Issue with STM32H735 Bootloader in RDP Level 1 (0xBB) Mode" instead of "Issue with STM32H735 Bootloader in RDP Level 2 (0xBB) Mode."

I corrected the title, I'm talking about Level 1