6502.org Forum  Projects  Code  Documents  Tools  Forum
It is currently Sun Nov 24, 2024 4:07 am

All times are UTC




Post new topic Reply to topic  [ 7 posts ] 
Author Message
 Post subject: 6500/1 test mode
PostPosted: Wed Oct 10, 2007 8:51 am 
Offline
User avatar

Joined: Tue Sep 11, 2007 8:48 am
Posts: 27
Location: Pruszków/Poland
Hi !

I have a dozen or so of 6500/1 MCUs from the Commodore 1520 plotter. I'm wondering if anyone knows something about the mysterious "test mode" mentioned in the MOS/CSG 6500/1 datasheet.
I would like to dump the internal ROM, maybe it is possible to do this with this whole "test mode" ? ;)

_________________
Practice safe HEX !


Top
 Profile  
Reply with quote  
 Post subject:
PostPosted: Wed Oct 10, 2007 12:22 pm 
Offline

Joined: Sat May 20, 2006 2:54 pm
Posts: 43
Location: Brighton, England
I believe test mode makes the processor execute reads from successive addresses, effectively making the address bus function as a counter. The only way to get the processor out of this mode is a reset - it won't respond to interrupts. The instruction that causes this behaviour is HCF (for Halt and Catch Fire :twisted: ) Unfortunately, I don't know the hex opcode for this instruction.

_________________
Shift to the left, shift to the right,
mask in, mask out,
BYTE! BYTE! BYTE!


Top
 Profile  
Reply with quote  
 Post subject:
PostPosted: Wed Oct 10, 2007 4:54 pm 
Offline
User avatar

Joined: Tue Sep 11, 2007 8:48 am
Posts: 27
Location: Pruszków/Poland
Well, the datasheet says something about the possibility of "downloading" some code into 6500/1's RAM (64 bytes) and this is probably done via Port C. There are no timings though. No information about any strobe lines either :(

_________________
Practice safe HEX !


Top
 Profile  
Reply with quote  
 Post subject:
PostPosted: Tue Apr 14, 2009 12:21 pm 
Offline

Joined: Tue Apr 14, 2009 12:19 pm
Posts: 1
So, did you manage to load anything in there? I'm interested in this myself.


Top
 Profile  
Reply with quote  
 Post subject:
PostPosted: Tue Apr 14, 2009 8:30 pm 
Offline
User avatar

Joined: Thu Dec 11, 2008 1:28 pm
Posts: 10986
Location: England
I found the datasheet (here:

http://web.archive.org/web/%2A/http://highgate.comm.sfu.ca/~rcini/classiccmp/pdf/ds_6500.pdf

- see page 8 or the snippet below)

Sounds like pulling \RES to 10v overrides all memory reads directing them to port C. So you feed opcodes and operands into port C as if it was a 6502 data bus. (At minimum you'd need something like an EEPROM with a counter driving the address pins.) But those instructions can't read ROM because all reads are redirected. Why can't you just bring \RES down to 5v for the cycles where the ROM is read?

Perhaps you can, but if you're aiming to test the chip, you'd learn more if the code running from port C writes a secondary program into the 64 bytes of page 0 RAM. To run that program, it must be possible to feed in a JMP #0000 to port C and then bring \RES back to 5v in time for the next access.

Code:
TEST LOGIC
Special test logic provides a method for thoroughly
testing the 6500/1. Applying a +10V signal to the \RES line
places the 6500/1 in the test mode. While in this mode, all
memory fetches are made from Port PC. External test
equipment can use this feature to test internal CPU logic
and I/O. A program can be loaded into RAM allowing the
contents of the instruction ROM to be dumped to any port
for external verification.


Top
 Profile  
Reply with quote  
 Post subject: Re: 6500/1 test mode
PostPosted: Wed Jun 13, 2018 12:20 pm 
Offline
User avatar

Joined: Thu Dec 11, 2008 1:28 pm
Posts: 10986
Location: England
(See also here
viewtopic.php?p=60478#p60478
Jim Brain succeeded in dumping code from these microcontrollers.)


Top
 Profile  
Reply with quote  
 Post subject: Re: 6500/1 test mode
PostPosted: Mon Jul 02, 2018 10:30 am 
Offline
User avatar

Joined: Tue Sep 11, 2007 8:48 am
Posts: 27
Location: Pruszków/Poland
BigEd wrote:
(See also here
viewtopic.php?p=60478#p60478
Jim Brain succeeded in dumping code from these microcontrollers.)


Yes, I know this was done - I am on the CBM Hackers mailing list as well.

I need to figure out where do I have all of these piggyback R6500/1-s, I guess last time I saw them it was when I was sending one of them + 1520 MCU to Silver Dream (that was before he put up this nice page about 1520 ROM dump process).

_________________
Practice safe HEX !


Top
 Profile  
Reply with quote  
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 7 posts ] 

All times are UTC


Who is online

Users browsing this forum: No registered users and 46 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to: