u/Key_Development2082

Looking for technical help or guidance on a right to repair firmware extraction project.

Target chip: TI LM3S2620 IQC25A2SD, LQFP-100, ARM Cortex-M3, 128KB internal flash

Problem:

JTAG via FT2232H returns all ones on TDO

SWD cannot read IDR

J6 pinout verified via direct continuity to chip pins 77-80

GND verified to true ground

Unit fully powered with all daughterboards connected

Suspected cause:

Raven Industries firmware likely remapped Port C pins (PC0-PC3 = JTAG signals) to other functions, disabling debug access.

Goal:

Extract 128KB firmware binary to reflash replacement chip for right to repair purposes. Manufacturer (CNH Industrial) refuses to provide firmware for discontinued product.

Any suggestions on:

OpenOCD config tweaks

Voltage glitching approach

Alternative access methods

Professional services with experience on this specific chip

Looking for technical help or guidance on a right to repair firmware extraction project.

Target chip: TI LM3S2620 IQC25A2SD, LQFP-100, ARM Cortex-M3, 128KB internal flash

Problem:

JTAG via FT2232H returns all ones on TDO

SWD cannot read IDR

J6 pinout verified via direct continuity to chip pins 77-80

GND verified to true ground

Unit fully powered with all daughterboards connected

Suspected cause:

Raven Industries firmware likely remapped Port C pins (PC0-PC3 = JTAG signals) to other functions, disabling debug access.

Goal:

Extract 128KB firmware binary to reflash replacement chip for right to repair purposes. Manufacturer (CNH Industrial) refuses to provide firmware for discontinued product.

Any suggestions on:

OpenOCD config tweaks

Voltage glitching approach

Alternative access methods

Professional services with experience on this specific chip

I own a Raven Cruizer II GPS display unit used for precision agriculture. The unit has a failed LM3S2620 supervisory controller. The chip is available from TI for $15. The only obstacle is Raven's proprietary firmware which CNH Industrial, Raven's parent company, explicitly refuses to provide.

What I've tried:

Raven directly — declined

Agriculture leading service center (Nebraska) — no repair possible

Independent specialist with 10 years Cruizer II experience (Ireland) — can't source programmed chip

CNH Corporate escalation — case open, awaiting response

FT2232H JTAG extraction — JTAG/SWD unresponsive, Port C pins likely remapped by firmware

Professional firmware extraction firms — contacted

FTC complaint and FARM Act advocates — ready to deploy

CNH's written response: "A company is not obligated to keep anything pertaining to that product once it gets to this state."

This is exactly the scenario the FARM Act is designed to address. The unit is unrepairable not due to technical impossibility but due to a policy decision by CNH.

Has anyone successfully extracted firmware from a Stellaris LM3S series device with disabled JTAG? Or does anyone know of repair services that have cracked this specific chip?