Spartan-6“安全更新”机制无法正常运行

大家好，
我正在尝试让“安全更新”机制正常运行。
我希望在地址为0x0的FLASH中有一个小的HEADER图像，它将使用地址0x600000处的MAIN图像对FPGA进行编程。
但是，如果MAIN映像损坏，那么我希望FPGA“返回”并使用地址0x10000处的GOLDEN映像进行编程。
MAIN图像和GOLDEN图像都允许我用新图像覆盖（通过以太网）字段中的MAIN图像。
GOLDEN图像位于受保护的FLASH区域，因此无法在现场覆盖。
我手动生成了一个HEADER图像。
我已将MAIN图像的地址设置为0x600000，将GOLDEN图像的地址设置为0x10000。
我已将HEADER，GOLDEN和MAINimages写入FLASH。当我为FPGA供电时，HEADER图像加载并使用MAIN图像对FPGA进行编程。
但是，如果我损坏MAIN映像并重新启动FPGA，则不会加载GOLDEN映像。
考虑到我必须在错误的地址处设置GOLDEN图像，我在HEADER图像中交换了MAIN和GOLDEN图像的地址，并对FPGA进行了电源循环。
HEADER图像使用GOLDEN图像加载和编程FPGA。
因此，GOLDEN和MAIN图像的FLASH中的地址是正确的，并且HEADER图像看起来配置正确，但“后备”机制似乎不起作用。
我做错了什么？
谢谢，
西蒙



以下为原文

Hi All,

I am trying to get the 'Safe Update' mechanism working. I want to have a small HEADER image in FLASH at address 0x0 that will program the FPGA with the MAIN image at address 0x600000. However, if that MAIN image is corrupt then I want the FPGA to 'fallback' and be programmed with the GOLDEN image at address 0x10000. Both the MAIN image and GOLDEN image allow me to overwrite (via Ethernet) the MAIN image in the field with a new image. The GOLDEN image is in an area of FLASH that is protected so cannot be overwritten in the field.



I have manually generated a HEADER image.



I have set the address of the MAIN image to 0x600000 and the address of the GOLDEN image to 0x10000. I have written the HEADER, GOLDEN and MAIN images to FLASH. When I powercycle the FPGA the HEADER image loads and programs the FPGA with the MAIN image.

However, if I corrupt the MAIN image and powercycle the FPGA the GOLDEN image is not loaded. Thinking that I must have the GOLDEN image at the incorrect address I swapped the addresses of the MAIN and GOLDEN images in the HEADER image and powercycled the FPGA. The HEADER image loads and programs the FPGA with the GOLDEN image. Therefore, the addresses in FLASH of the GOLDEN and MAIN images are correct and the HEADER image appears to be configured correctly, but the 'fallback' mechanism doesn't appear to be working.

What have I done wrong?

Thanks,

Simon