Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome Lists | Featured Topics | Projects

https://github.com/nerivec/silabs-firmware-recovery

Tools to help in the recovery of misbehaving/bricked devices
https://github.com/nerivec/silabs-firmware-recovery

bricked ember emberznet ezsp silabs silicon-labs z2m zigbee zigbee2mqtt

Last synced: about 1 month ago
JSON representation

Tools to help in the recovery of misbehaving/bricked devices

Awesome Lists containing this project

README 

        
# Silicon Labs firmware recovery



Tools to help in the recovery of misbehaving/bricked devices.



> [!CAUTION]

> This is highly experimental, and should only be used as a last resort. Consult the manufacturer of your device before. **Use at your own risk; no guarantee anything will work.**



# GBL firmware to clear flash areas



Depending on the state of your device, you may need to do some research into how to force the device into bootloader. Some adapters have a dedicated button, others require opening the casing.



_If your device cannot even enter the bootloader, you will not be able to use the methods below._



Some methods to (usually) force into bootloader:



-   Sonoff ZBDongle-E

    -   pressing the `BOOT` button (inside the casing), plugging it in, then releasing `BOOT` after a few seconds.

-   SMLight (SLZB-06 series)

    -   connecting `G` and `0` (inside the casing) then plugging it in. [More details](https://smlight.tech/flasher/#SLZB-06)

-   SMLight (SLZB-07 series)

    -   connecting `FLSH` with the metal part of the antenna (inside the casing). [More details](https://smlight.tech/manual-slzb-07/)



> [!TIP]

> In some cases, [universal-silabs-flasher](https://github.com/NabuCasa/universal-silabs-flasher) or [ember-zli](https://github.com/Nerivec/ember-zli) might be able to do that for you without opening the casing (`--bootloader-reset [yellow|ihost|slzb07|sonoff]` for the former, `Force reset` for the latter).



#### Flashing



You can try the following (non-exhaustive) software:



-   [universal-silabs-flasher](https://github.com/NabuCasa/universal-silabs-flasher) (dedicated to Silabs products)

-   [ember-zli](https://github.com/Nerivec/ember-zli) (dedicated to Silabs products)

-   [ExtraPuTTY](https://sourceforge.net/projects/extraputty/) (with XMODEM file transfer)

-   [SecureCRT](https://www.vandyke.com/products/securecrt/) (with XMODEM file transfer)



## NVM3 Clear



Clears the entire NVM3 section. Erases the non-volatile memory, including network configs, etc.. After flashing, you will need to restore or create a new network.



The file name format is as follow:

`______.gbl`



> [!IMPORTANT]

> Current builds are only intended for use with default project parameters (no customization to the bootloader or other relevant areas) used by `silabs-firmware-builder` projects. Check in the relevant location ([example](https://github.com/NabuCasa/silabs-firmware-builder/blob/522332517f5bd9fb1c418c2c883596b4879fe8e1/src/zigbee_ncp/zigbee_ncp.slcp#L48-L49)) in the repository of your firmware provider for the `NVM3_DEFAULT_NVM_SIZE` you should use.



#### Tested on:



-   Sonoff ZBDongle-E NCP (`EFR32MG21A020F768IM32_nvm3_clear_0_786432_8192_16384_32768.gbl`)



## APP Clear



Clears the entire section after the bootloader (including NVM3). Erases any firmware previously flashed. After flashing, only the bootloader will be available (automatically entered by the chip), and a new firmware will have to be flashed then run.



The file name format is as follow:

`_____.gbl`



> [!IMPORTANT]

> These are unusually big GBL files, flashing will take a lot longer than usual (~5 minutes for serial, 2-3 times that for TCP). Make sure your connection is solid and won't drop over the duration or you may have to start over.



#### Tested on bricked:



-   SMLight SLZB07mg24 (`EFR32MG24A020F1024IM40_app_clear_134217728_1048576_8192_134242304.gbl`)

-   TubesZB MGM24PA (`MGM240PA32VNN_app_clear_134217728_1572864_8192_134242304.gbl`)