Hardware Debugging faulty BCM4356 / orange screen / boot loop

linuxares

The inadequate, autocratic beast!
Global Moderator
Joined
Aug 5, 2007
Messages
13,365
Trophies
2
XP
18,260
Country
Sweden
That's impossible. As far as I know screen the orange screen is caused by an kernel panic indicating a fault with the WiFi/Bluetooth chip.
RCM mode doesn't require Horizon OS's kernel.
Am I right?
It's a recovery mode, so it's possible that it doesn't care for kernel panics. But it all depends if the switch got the rcm bug.
 

TariqSoftDev

~Zexceil
Member
Joined
Sep 18, 2013
Messages
716
Trophies
1
Location
London
XP
1,018
Country
If you can boot Android/Linux, you could prolly probe for faults; doubt that'd go anywhere though; I'll take a better look at this thread once I finish college.
 
  • Like
Reactions: ds34

TariqSoftDev

~Zexceil
Member
Joined
Sep 18, 2013
Messages
716
Trophies
1
Location
London
XP
1,018
Country
He tried that already.
We definitely need a low level payload for checking the Switch's hardware.
I'll see what I can do when I get home, I'll prolly make a payload that tests the parts and etc, gives as much info as it can; I'll prolly make it use UART-A for dumping the info too in-case MicroSD is not working :P
 
  • Like
Reactions: GrimDim and ds34

GrimDim

Well-Known Member
OP
Newcomer
Joined
Aug 16, 2019
Messages
77
Trophies
0
Age
34
XP
195
Country
Germany
What about the components around the BCM chip? Where did your get the replacement chip?
The caps around the BCM don't show any shorts. I got it from ZedLabz, a UK eBay seller, but looks legit, well packaged with clean solder balls, so most likely new from the factory.

Indeed. They might be able to help. Could this also be related to the SoC?
I think it might be personally. I would go to the forum for Tronics Fix and ask. This is some really cool thing with the X-ray.
Hmm maybe? but I can't be anything major as all the functionality is there: screen, touch, audio, buttons, joycons, SD card, I can get into RCM, or boot Linux or Android. Only Horizon refuses to boot.

@GrimDim can your switch boot in to example RCM mode? Or orange instantly?
That's impossible. As far as I know screen the orange screen is caused by an kernel panic indicating a fault with the WiFi/Bluetooth chip.
RCM mode doesn't require Horizon OS's kernel.
Am I right?
It's a recovery mode, so it's possible that it doesn't care for kernel panics. But it all depends if the switch got the rcm bug.
Yeah the orange screen only appears if the switch is running afaik, for me it only happened once at the very beginning while the switch was running, after which the boot issue started.

If you can boot Android/Linux, you could prolly probe for faults; doubt that'd go anywhere though; I'll take a better look at this thread once I finish college.
Yeah I can definitely boot Linux! As mentioned the WiFi adapter is not detected there, but I don't know what/how else to test there.

I'll see what I can do when I get home, I'll prolly make a payload that tests the parts and etc, gives as much info as it can; I'll prolly make it use UART-A for dumping the info too in-case MicroSD is not working :P
Wow thank you that would be amazing! My microSD slot definitely works without a hitch
-----
I was actually wondering how you can read out UART from the switch ^_^
Also do you know if Horizon puts out any logs during boot?
 
Last edited by GrimDim,
  • Like
Reactions: ds34 and linuxares

linuxares

The inadequate, autocratic beast!
Global Moderator
Joined
Aug 5, 2007
Messages
13,365
Trophies
2
XP
18,260
Country
Sweden
I don't know much about the bluetooth/wifi module. But I bet it's solder on the board? I don't know how experienced you're with a hotgun station incase it's really confirmed it is that chip.
 

GrimDim

Well-Known Member
OP
Newcomer
Joined
Aug 16, 2019
Messages
77
Trophies
0
Age
34
XP
195
Country
Germany
I don't know much about the bluetooth/wifi module. But I bet it's solder on the board? I don't know how experienced you're with a hotgun station incase it's really confirmed it is that chip.
Yeah that was my suspicion, which is why I replaced the chip (using hot air). I botched my first attempt though (shown in the third picture, here the switch would not power on), then I took the chip off again, reballed it (twice until I got it halfway right, here the switch was back to getting stuck on boot), and then I bought another one thinking better use factory balling to make sure. That one went on well I think and produced the first picture.
 

linuxares

The inadequate, autocratic beast!
Global Moderator
Joined
Aug 5, 2007
Messages
13,365
Trophies
2
XP
18,260
Country
Sweden
Hmm... well I can't really help much then. I'm superbad with these kind of things and the peeps I pinged know a lot more. Especially @mattytrog that seem to be the Wizard of making the Switch talk on hardware.
 
  • Like
Reactions: FXDX

ZachyCatGames

Well-Known Member
Member
Joined
Jun 19, 2018
Messages
3,398
Trophies
1
Location
Hell
XP
4,209
Country
United States
That's impossible. As far as I know screen the orange screen is caused by an kernel panic indicating a fault with the WiFi/Bluetooth chip.
RCM mode doesn't require Horizon OS's kernel.
Am I right?
Orange screens are Secure Monitor panics, usually they indicate some kind of SoC hardware failure.
It wouldn’t matter for RCM, correct.
 

TariqSoftDev

~Zexceil
Member
Joined
Sep 18, 2013
Messages
716
Trophies
1
Location
London
XP
1,018
Country
Do you know if ReSwitched got some tool or such to dump the boot process to see where it fails?
Could use UART to dump out the process; unsure if there's a dump to log but maybe there is; just check AMS Git; if you can inject AMS and get a dump during the boot or output to UART.

edit: AMS does have UART support, just checked the git; most likely will need to self compile it.

So it can't be outputted like so due to how things work, sorry for the bad news :P
 
Last edited by TariqSoftDev,
  • Like
Reactions: linuxares and ds34

acidcoolxxx

Active Member
Newcomer
Joined
Mar 14, 2019
Messages
35
Trophies
0
Age
24
XP
105
Country
Austria
Hi,

i have the same issue here. I replaced the BCM4356 today with a new one, but still stuck on the switch logo. I can boot into android but no wifi but blutooth works. So maybe we work this out together.
Im working in a computer manufactory. So we have many stuff like xray and so on.
Tomorrow I check the caps for shorts.

This must be the wifi not working thing!
 
  • Like
Reactions: ds34

GrimDim

Well-Known Member
OP
Newcomer
Joined
Aug 16, 2019
Messages
77
Trophies
0
Age
34
XP
195
Country
Germany
Hi,

i have the same issue here. I replaced the BCM4356 today with a new one, but still stuck on the switch logo. I can boot into android but no wifi but blutooth works. So maybe we work this out together.
Im working in a computer manufactory. So we have many stuff like xray and so on.
Tomorrow I check the caps for shorts.

This must be the wifi not working thing!
Hey, awesome to see someone stuck in the same boat as me! :lol:

Today I actually came across some threads here where people mentioned that Nintendo might use custom firmware for the chip which could mean that new chips are not going to work. Not sure if that's true or not, but since I have some donor boards lying around I will be trying to use the BCM chip from one of those boards next, maybe tomorrow if I have time.
With my previous attempts I feel semi-confident now to perform a reball (as painful as it is). Will report back with the results!
 

acidcoolxxx

Active Member
Newcomer
Joined
Mar 14, 2019
Messages
35
Trophies
0
Age
24
XP
105
Country
Austria
Hey, awesome to see someone stuck in the same boat as me! :lol:

Today I actually came across some threads here where people mentioned that Nintendo might use custom firmware for the chip which could mean that new chips are not going to work. Not sure if that's true or not, but since I have some donor boards lying around I will be trying to use the BCM chip from one of those boards next, maybe tomorrow if I have time.
With my previous attempts I feel semi-confident now to perform a reball (as painful as it is). Will report back with the results!

My guess thats not true, because the Blutooth work. And both are on the same chip.

Maybe there is a tool for Android to read out why its not initializing.
 
Last edited by acidcoolxxx,

GrimDim

Well-Known Member
OP
Newcomer
Joined
Aug 16, 2019
Messages
77
Trophies
0
Age
34
XP
195
Country
Germany
My guess thats not true, because the Blutooth work. And both are on the same chip.
Maybe the WiFi module has different firmware than the Bluetooth module?
---
Actually, I found this section from the datasheet (https://www.cypress.com/file/298796/download) quite interesting:
9.2 One-Time Programmable Memory
Various hardware configuration parameters may be stored in an internal One-Time Programmable (OTP) memory, which is read by the system software after device reset. In addition, customer-specific parameters, including the system vendor ID and the MAC address can be stored, depending on the specific board design. Up to 484 bytes of user-accessible OTP are available. The initial state of all bits in an unprogrammed OTP device is 0. After any bit is programmed to a 1, it cannot be reprogrammed to 0. The entire OTP array can be programmed in a single write cycle using a utility provided with the Cypress WLAN manufacturing test tools. Alternatively, multiple write cycles can be used to selectively program specific bytes, but only bits which are still in the 0 state can be altered during each programming cycle. Prior to OTP programming, all values should be verified using the appropriate editable nvram.txt file, which is provided with the reference board design package.
It is referencing a memory that can only be initialized once, and contains hardware configurations. Maybe this is the exact information missing on factory chips to make them work with the switch?

Maybe there is a tool for Android to read out why its not initializing.
That would be handy
 
Last edited by GrimDim,
  • Like
Reactions: acidcoolxxx

acidcoolxxx

Active Member
Newcomer
Joined
Mar 14, 2019
Messages
35
Trophies
0
Age
24
XP
105
Country
Austria
Maybe the WiFi module has different firmware than the Bluetooth module?
---
Actually, I found this section from the datasheet (https://www.cypress.com/file/298796/download) quite interesting:
9.2 One-Time Programmable Memory
Various hardware configuration parameters may be stored in an internal One-Time Programmable (OTP) memory, which is read by the system software after device reset. In addition, customer-specific parameters, including the system vendor ID and the MAC address can be stored, depending on the specific board design. Up to 484 bytes of user-accessible OTP are available. The initial state of all bits in an unprogrammed OTP device is 0. After any bit is programmed to a 1, it cannot be reprogrammed to 0. The entire OTP array can be programmed in a single write cycle using a utility provided with the Cypress WLAN manufacturing test tools. Alternatively, multiple write cycles can be used to selectively program specific bytes, but only bits which are still in the 0 state can be altered during each programming cycle. Prior to OTP programming, all values should be verified using the appropriate editable nvram.txt file, which is provided with the reference board design package.
It is referencing a memory that can only be initialized once, and contains hardware configurations. Maybe this is the exact information missing on factory chips to make them work with the switch?

Thats a Point your Right
 

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
    K3Nv2 @ K3Nv2: https://www.acepcs.com/products/wizbox-g-mini-pc-amd-r7-7735hs lol wizbox +1