[underwurlde]

Ok, thank you @judges . I'll wind my neck in. I'm trying to stop smoking and it's making me act like an animal!

Neck officially in now.

I do take on board what we've both spotted - 18 address lines. Even reflects this in the service manual. So question is, how the hell DOES it work? I feel as if I am missing the obvious, because the obvious is missing. And also, WHY would the designers do it like this. Bl00dy wierdness abounds but will probably make sense when I take some time to make sense of it when I am not being distracted my girlfriend, ex-wife, kids and nicotine cravings!

Andy

[defyboy]

Hello Everyone,

Just to clear up some confusion here, in the early days of flashing I did investigate the possibility of flashing through the SS2 to make a universal low-cost flasher (aka Teensy++) that doesn't need to handle interleaving or bad blocks etc. I have however, never dumped or written flash via the SS2.

I originally theorized that the SS2 would use paged Word access as there are simply not enough address lines to address all 256mb provided.

I have analyzed the bus and briefly studied the outcome, it does indeed appear to be paged word access and the control lines appear to do what you would expect them to do. I never documented any of this further as I managed to kill my NAND console attempting something else.

I never built any hardware or wrote any software to interface with this but yes, It is quite possible to flash using this interface. One would assume that is how Sony flashes them at factory, hence the test-points.

Edit: I don't know why I stated that I have flashed via the SS2, this is not correct. I had however, at that stage recorded reads and a firmware flash over the SS2. These dumps were only somewhat useful as my analyzer simply wasn't capable of handling that much I/O at those speeds.

[euss]

http://www.ps3devwiki.com/wiki/EBUS

[baileyscream]

Originally Posted by euss http://www.ps3devwiki.com/wiki/EBUS

thank you thats a big help.