Index: tt-loader/2nd/Makefile
===================================================================
--- tt-loader/2nd/Makefile	(revision 11)
+++ tt-loader/2nd/Makefile	(revision 12)
@@ -11,5 +11,5 @@
 
 S_SRCS = start.S
-C_SRCS = main.c usb.c
+C_SRCS = main.c usb.c crc32.c
 SRCS = $(S_SRCS) $(C_SRCS)
 
Index: tt-loader/2nd/config.h
===================================================================
--- tt-loader/2nd/config.h	(revision 11)
+++ tt-loader/2nd/config.h	(revision 12)
@@ -26,6 +26,14 @@
 #define _CONFIG_H_
 
-// Default address in SRAM
+// Default Linux commandline
+#define KERNEL_CMDLINE "mem=64M console=ttyS0,115200 noinitrd root=/dev/mtdblock_bbs5"
+
+// Default address in SRAM & RAM
+#define RAM_SIZE				0x04000000	// 64M
+#define CFG_BASESDRAM			0x10000000
 #define CFG_LOADADDR			0x20000400
+#define CFG_PARAMADDR			CFG_BASESDRAM+0x100
+#define INITRD_LOAD_ADDR		0x00800000
+#define INITRD_SIZE				0x00000000
 
 // Address to find jtag id, to check on which target we are running
Index: tt-loader/2nd/crc32.c
===================================================================
--- tt-loader/2nd/crc32.c	(revision 12)
+++ tt-loader/2nd/crc32.c	(revision 12)
@@ -0,0 +1,116 @@
+/*
+ * This file is derived from the one provided with u-boot. Check
+ * u-boot to find related files.
+ */
+
+/*
+ * This file is derived from crc32.c from the zlib-1.1.3 distribution
+ * by Jean-loup Gailly and Mark Adler.
+ */
+
+/* crc32.c -- compute the CRC-32 of a data stream
+ * Copyright (C) 1995-1998 Mark Adler
+ * For conditions of distribution and use, see copyright notice in zlib.h
+ */
+
+#include "types.h"
+
+/* ========================================================================
+ * Table of CRC-32's of all single-byte values (made by make_crc_table)
+ */
+static const u32 crc_table[256] = {
+  0x00000000L, 0x77073096L, 0xee0e612cL, 0x990951baL, 0x076dc419L,
+  0x706af48fL, 0xe963a535L, 0x9e6495a3L, 0x0edb8832L, 0x79dcb8a4L,
+  0xe0d5e91eL, 0x97d2d988L, 0x09b64c2bL, 0x7eb17cbdL, 0xe7b82d07L,
+  0x90bf1d91L, 0x1db71064L, 0x6ab020f2L, 0xf3b97148L, 0x84be41deL,
+  0x1adad47dL, 0x6ddde4ebL, 0xf4d4b551L, 0x83d385c7L, 0x136c9856L,
+  0x646ba8c0L, 0xfd62f97aL, 0x8a65c9ecL, 0x14015c4fL, 0x63066cd9L,
+  0xfa0f3d63L, 0x8d080df5L, 0x3b6e20c8L, 0x4c69105eL, 0xd56041e4L,
+  0xa2677172L, 0x3c03e4d1L, 0x4b04d447L, 0xd20d85fdL, 0xa50ab56bL,
+  0x35b5a8faL, 0x42b2986cL, 0xdbbbc9d6L, 0xacbcf940L, 0x32d86ce3L,
+  0x45df5c75L, 0xdcd60dcfL, 0xabd13d59L, 0x26d930acL, 0x51de003aL,
+  0xc8d75180L, 0xbfd06116L, 0x21b4f4b5L, 0x56b3c423L, 0xcfba9599L,
+  0xb8bda50fL, 0x2802b89eL, 0x5f058808L, 0xc60cd9b2L, 0xb10be924L,
+  0x2f6f7c87L, 0x58684c11L, 0xc1611dabL, 0xb6662d3dL, 0x76dc4190L,
+  0x01db7106L, 0x98d220bcL, 0xefd5102aL, 0x71b18589L, 0x06b6b51fL,
+  0x9fbfe4a5L, 0xe8b8d433L, 0x7807c9a2L, 0x0f00f934L, 0x9609a88eL,
+  0xe10e9818L, 0x7f6a0dbbL, 0x086d3d2dL, 0x91646c97L, 0xe6635c01L,
+  0x6b6b51f4L, 0x1c6c6162L, 0x856530d8L, 0xf262004eL, 0x6c0695edL,
+  0x1b01a57bL, 0x8208f4c1L, 0xf50fc457L, 0x65b0d9c6L, 0x12b7e950L,
+  0x8bbeb8eaL, 0xfcb9887cL, 0x62dd1ddfL, 0x15da2d49L, 0x8cd37cf3L,
+  0xfbd44c65L, 0x4db26158L, 0x3ab551ceL, 0xa3bc0074L, 0xd4bb30e2L,
+  0x4adfa541L, 0x3dd895d7L, 0xa4d1c46dL, 0xd3d6f4fbL, 0x4369e96aL,
+  0x346ed9fcL, 0xad678846L, 0xda60b8d0L, 0x44042d73L, 0x33031de5L,
+  0xaa0a4c5fL, 0xdd0d7cc9L, 0x5005713cL, 0x270241aaL, 0xbe0b1010L,
+  0xc90c2086L, 0x5768b525L, 0x206f85b3L, 0xb966d409L, 0xce61e49fL,
+  0x5edef90eL, 0x29d9c998L, 0xb0d09822L, 0xc7d7a8b4L, 0x59b33d17L,
+  0x2eb40d81L, 0xb7bd5c3bL, 0xc0ba6cadL, 0xedb88320L, 0x9abfb3b6L,
+  0x03b6e20cL, 0x74b1d29aL, 0xead54739L, 0x9dd277afL, 0x04db2615L,
+  0x73dc1683L, 0xe3630b12L, 0x94643b84L, 0x0d6d6a3eL, 0x7a6a5aa8L,
+  0xe40ecf0bL, 0x9309ff9dL, 0x0a00ae27L, 0x7d079eb1L, 0xf00f9344L,
+  0x8708a3d2L, 0x1e01f268L, 0x6906c2feL, 0xf762575dL, 0x806567cbL,
+  0x196c3671L, 0x6e6b06e7L, 0xfed41b76L, 0x89d32be0L, 0x10da7a5aL,
+  0x67dd4accL, 0xf9b9df6fL, 0x8ebeeff9L, 0x17b7be43L, 0x60b08ed5L,
+  0xd6d6a3e8L, 0xa1d1937eL, 0x38d8c2c4L, 0x4fdff252L, 0xd1bb67f1L,
+  0xa6bc5767L, 0x3fb506ddL, 0x48b2364bL, 0xd80d2bdaL, 0xaf0a1b4cL,
+  0x36034af6L, 0x41047a60L, 0xdf60efc3L, 0xa867df55L, 0x316e8eefL,
+  0x4669be79L, 0xcb61b38cL, 0xbc66831aL, 0x256fd2a0L, 0x5268e236L,
+  0xcc0c7795L, 0xbb0b4703L, 0x220216b9L, 0x5505262fL, 0xc5ba3bbeL,
+  0xb2bd0b28L, 0x2bb45a92L, 0x5cb36a04L, 0xc2d7ffa7L, 0xb5d0cf31L,
+  0x2cd99e8bL, 0x5bdeae1dL, 0x9b64c2b0L, 0xec63f226L, 0x756aa39cL,
+  0x026d930aL, 0x9c0906a9L, 0xeb0e363fL, 0x72076785L, 0x05005713L,
+  0x95bf4a82L, 0xe2b87a14L, 0x7bb12baeL, 0x0cb61b38L, 0x92d28e9bL,
+  0xe5d5be0dL, 0x7cdcefb7L, 0x0bdbdf21L, 0x86d3d2d4L, 0xf1d4e242L,
+  0x68ddb3f8L, 0x1fda836eL, 0x81be16cdL, 0xf6b9265bL, 0x6fb077e1L,
+  0x18b74777L, 0x88085ae6L, 0xff0f6a70L, 0x66063bcaL, 0x11010b5cL,
+  0x8f659effL, 0xf862ae69L, 0x616bffd3L, 0x166ccf45L, 0xa00ae278L,
+  0xd70dd2eeL, 0x4e048354L, 0x3903b3c2L, 0xa7672661L, 0xd06016f7L,
+  0x4969474dL, 0x3e6e77dbL, 0xaed16a4aL, 0xd9d65adcL, 0x40df0b66L,
+  0x37d83bf0L, 0xa9bcae53L, 0xdebb9ec5L, 0x47b2cf7fL, 0x30b5ffe9L,
+  0xbdbdf21cL, 0xcabac28aL, 0x53b39330L, 0x24b4a3a6L, 0xbad03605L,
+  0xcdd70693L, 0x54de5729L, 0x23d967bfL, 0xb3667a2eL, 0xc4614ab8L,
+  0x5d681b02L, 0x2a6f2b94L, 0xb40bbe37L, 0xc30c8ea1L, 0x5a05df1bL,
+  0x2d02ef8dL
+};
+
+static u32 cbsize = 0 ;
+static u32 cbtotal = 0 ;
+#define CB_BLOCK_SIZE 1024*1024
+
+/* ========================================================================= */
+#define DO1(buf) crc = crc_table[((int)crc ^ (*buf++)) & 0xff] ^ (crc >> 8);
+#define DO2(buf)  DO1(buf); DO1(buf);
+#define DO4(buf)  DO2(buf); DO2(buf);
+#define DO8(buf)  DO4(buf); DO4(buf);
+
+/* ========================================================================= */
+u32 crc32( u32 crc, char* buf, u32 len, crc_cb_fnc_t* cb)
+{
+	// Check to handle callback
+	if (cb)
+	{
+		cbsize = 0 ;
+		cbtotal = len ;
+	}
+	
+    crc = crc ^ 0xffffffffL;
+    while (len >= 8)
+    {
+    	DO8(buf);
+    	len -= 8;
+	 	if (cb)
+		{
+	  		cbsize += 8 ;
+			if (cbsize >= CB_BLOCK_SIZE)
+			{
+				(cb)( cbtotal-len, cbtotal, crc );
+				cbsize = 0 ;
+			}
+		}
+	}	
+    
+    if (len) do {
+      DO1(buf);
+    } while (--len);
+    return crc ^ 0xffffffffL;
+}
Index: tt-loader/2nd/main.c
===================================================================
--- tt-loader/2nd/main.c	(revision 11)
+++ tt-loader/2nd/main.c	(revision 12)
@@ -4,4 +4,8 @@
  * Copyright (C) 2008 Guillaume Bougard <gbougard@pkg.fr>
  * Copyright (C) 2005 Luis Recuerda <lrec@helios.homeip.net>
+ *
+ * ARM kernel loader. Adapt from qemu-neo1973
+ * Copyright (c) 2006-2007 CodeSourcery.
+ * Written by Paul Brook
  *
  * This program is free software; you can redistribute it and/or
@@ -24,14 +28,16 @@
 #include "usb.h"
 
-#define _LSR_   ((volatile u8 *) 0xfffb0014)
-#define _THR_   ((volatile u8 *) 0xfffb0000)
-#define _RHR_   ((volatile u8 *) 0xfffb0000)
-
-#define MEM_READ_SIZE	32
+extern u32 crc32( u32 crc, char* buf, u32 len, crc_cb_fnc_t* cb);
+
+/*
+ * Length of memory dump done by 2nd.bin, must be a multiple of DUMP_LINE_SIZE from host main.c
+ * Must also be sufficient to output lines of text, let's say 128 bytes
+ */
+#define MEM_READ_SIZE	128*32
+#define CHUNK_SIZE		8192
 
 static char *usb_hdr = "TIS" ;
-static char usb_outbuffer[64];
-
-// limited strcpy
+static char usb_outbuffer[MEM_READ_SIZE+4];
+
 static u32 strcpy ( char *dest, char *src )
 {
@@ -39,5 +45,5 @@
 	char *tmp = dest, *s = src;
 	
-	while ( ++count < 256 && *s != '\0' )
+	while ( ++count < MEM_READ_SIZE && *s != '\0' )
 		*tmp++ = *s++ ;
 	
@@ -45,4 +51,16 @@
 	
 	return count ;
+}
+
+static u32 strlen ( char *src )
+{
+	u32 len = 0 ;
+	
+	while ( *src != '\0' ) {
+		src++ ;
+		len ++ ;
+	}
+	
+	return len ;
 }
 
@@ -56,70 +74,4 @@
 	
 	return count ;
-}
-
-static void bsend (char ch)
-{
-	while (!((*_LSR_) & 0x20));
-	*_THR_= ch;
-}
-
-static inline int check_serial (void) { return (*_LSR_) & 0x01; }
-
-static char brecv (void)
-{
-	while (!((*_LSR_) & 0x01));
-	return *_RHR_;
-}
-
-char crecv (void)
-{
-	return brecv ();
-}
-
-void csend (char ch)
-{
-	if (ch == '\n')
-		bsend ('\r');
-	bsend (ch);
-}
-
-void tsend (const char *text)
-{
-	while (*text)
-		csend (*text++);
-}
-
-void xsend (unsigned value)
-{
-	if (value < 10)
-		bsend (value + '0');
-	else
-		bsend (value + ('A'-10));
-}
-
-void x8send (u8 value)
-{
-	xsend (value >> 4);
-	xsend (value & 0xf);
-}
-
-void x16send (u16 value)
-{
-	int	i;
-	for (i= 0; i < 4; ++i)
-	{
-		xsend (value >> 12);
-		value<<= 4;
-	}
-}
-
-void x32send (u32 value)
-{
-	int	i;
-	for (i= 0; i < 8; ++i)
-	{
-		xsend (value >> 28);
-		value<<= 4;
-	}
 }
 
@@ -181,7 +133,90 @@
 }
 
+// stl_raw is qemu related
+#define stl_raw(x,v) *(u32 *)(x) = v
+static void set_kernel_args(u32 ram_size, int initrd_size, const char *kernel_cmdline, u32 ram_start)
+{
+    u32 *p;
+	
+	// Set pointer to kernel params
+    p = (u32 *)(CFG_PARAMADDR);
+	
+    /* ATAG_CORE */
+    stl_raw(p++, 5);
+    stl_raw(p++, 0x54410001);
+    stl_raw(p++, 0); // 0 = ro ; 1= rw
+    stl_raw(p++, 0x1000); // Page size
+    stl_raw(p++, 0); // root device overrided by cmdline
+    /* ATAG_MEM */
+    stl_raw(p++, 4);
+    stl_raw(p++, 0x54410002);
+    stl_raw(p++, ram_size);
+    stl_raw(p++, ram_start);
+    if (initrd_size) {
+        /* ATAG_INITRD2 */
+        stl_raw(p++, 4);
+        stl_raw(p++, 0x54420005);
+        stl_raw(p++, ram_start + INITRD_LOAD_ADDR);
+        stl_raw(p++, initrd_size);
+    }
+    if (kernel_cmdline && *kernel_cmdline) {
+        /* ATAG_CMDLINE */
+        int cmdline_size;
+
+        cmdline_size = strlen((char *)kernel_cmdline);
+        memcpy ((char *)p + 2, (char *)kernel_cmdline, cmdline_size + 1);
+        cmdline_size = (cmdline_size >> 2) + 1;
+        stl_raw(p++, cmdline_size + 2);
+        stl_raw(p++, 0x54410009);
+        p += cmdline_size;
+    }
+    /* ATAG_END */
+    stl_raw(p++, 0);
+    stl_raw(p++, 0);
+}
+
+#define C1_DC		(1<<2)		/* dcache off/on */
+#define C1_IC		(1<<12)		/* icache off/on */
+
+void cleanup_before_linux (void)
+{
+	/*
+	 * this function is called just before we call linux
+	 * it prepares the processor for linux
+	 *
+	 * we turn off caches etc ...
+	 */
+
+	unsigned long i;
+
+	/* turn off I/D-cache */
+	asm ("mrc p15, 0, %0, c1, c0, 0":"=r" (i));
+	i &= ~(C1_DC | C1_IC);
+	asm ("mcr p15, 0, %0, c1, c0, 0": :"r" (i));
+
+	/* flush I/D-cache */
+	i = 0;
+	asm ("mcr p15, 0, %0, c7, c7, 0": :"r" (i));
+}
+
+void usb_crc32_pos( u32 pos, u32 total, u32 crc )
+{
+	u32 len = strcpy(usb_outbuffer,usb_hdr);
+	usb_outbuffer[len-1] = 'x' ;
+	(*(u32 *)(usb_outbuffer+len)) = pos ;
+	len += sizeof(u32);
+	(*(u32 *)(usb_outbuffer+len)) = total ;
+	len += sizeof(u32);
+	(*(u32 *)(usb_outbuffer+len)) = crc ;
+	len += sizeof(u32);
+	usb_send ( usb_outbuffer, len );
+	while (!usb_sent ());
+}
+
 u32 _main (void)
 {	
+	u32 params = CFG_PARAMADDR ;
 	u32 address = CFG_LOADADDR ;
+	u32 crc = 0 ;
 	usb_msg ('m', "In omap plateform");
 	
@@ -205,5 +240,5 @@
 		u32 total, cmd, index = 0 ;
 		
-		u8 usb_inbuffer[64];
+		u8 usb_inbuffer[CHUNK_SIZE];
 		usb_recv (usb_inbuffer, sizeof (usb_inbuffer));
 		while (!usb_rcvd ());
@@ -239,4 +274,52 @@
 			
 		} else
+		if ((char)cmd == 'C') // set crc32 value for next download
+		{
+			crc = *(u32 *) &usb_inbuffer[index];
+			usb_code ('i', crc);
+			
+		} else
+		if ((char)cmd == 'm') // Download size from memory
+		{
+			total= *(u32 *) &usb_inbuffer[index];
+			u32 size = 0;
+			
+			usb_code ('I', total);
+			
+			// Check crc32 if it has been set
+			if (total && crc)
+			{
+				crc_cb_fnc_t* cb = NULL ;
+				if (total>1024*1024)
+					cb = &usb_crc32_pos ;
+				u32 foundcrc = crc32(0, (char *)address,total,cb) ;
+				usb_code ('C', foundcrc);
+				// Skip download on crc match
+				if (foundcrc == crc)
+					total = 0 ;
+			}
+			
+			if (total == 0)
+				usb_blk ('D', (char *)address, 0);
+			
+			while (size < total)
+			{
+				u32 bs = MEM_READ_SIZE ;
+				if ( total - size < MEM_READ_SIZE)
+					bs = total - size ;
+				usb_blk ('D', (char *)address, bs);
+				address += bs ;
+				size += bs ;
+			}
+			
+			// reset crc for next download anyway
+			crc = 0 ;
+			
+		} else
+		if ((char)cmd == 'e') // End, just loop
+		{
+			usb_reset();
+			
+		} else
 		if ((char)cmd == 'f') // load file ACK
 		{
@@ -256,7 +339,28 @@
 			
 		} else
+		if ((char)cmd == 'p') // do a poke on address
+		{
+			u32 size = memcpy( (char *) address, (char *) &usb_inbuffer[index], 4);
+			address += size ;
+			usb_code ('i', address );
+			
+		} else
+		if ((char)cmd == 'P') // do a peek on address
+		{
+			usb_code ('i', *(u32 *) address );
+			address += 4 ;
+			
+		} else
 		if ((char)cmd == 'c') // call command
 		{
-			index = ((u32_fnc_t *)address)();
+			__asm__ __volatile__ (
+						"mov r0, #0	;"
+						"mov r1, #0	;"
+						"mov r2, #0	;"
+						"ldr r3, %1	;"
+						"blx r3		;"
+						"mov %0, r0	;"
+						: "=r"(index) : "m"(address) : "r0", "r1", "r2", "r3"
+						);
 			usb_code ('i', index);
 			
@@ -265,7 +369,42 @@
 		{
 			usb_code ('b', address );
-			// Just return the address where is store the branch to do
-			u32 bootaddress = (u32) &address ; // Convert/cast address just to avoid gcc warning
-			return bootaddress ;
+			usb_reset();
+			__asm__ __volatile__ (
+						"ldr r0, %0	;"
+						"mov pc, r0	;"
+						: : "m"(address)
+						);
+			
+		} else
+		if ((char)cmd == 'k') // boot kernel command
+		{
+			int machid =  * (int *) &usb_inbuffer[index];
+			usb_code ('I', machid);
+			set_kernel_args( RAM_SIZE, INITRD_SIZE, KERNEL_CMDLINE, CFG_BASESDRAM );
+			usb_code ('b', address );
+			usb_reset();
+			cleanup_before_linux();
+			__asm__ __volatile__ (
+						"mov r0, #0	;"
+						"ldr r1, %0	;"
+						"ldr r2, %1	;"
+						"mov r3, #0	;"
+						"mov r4, #0	;"
+						"ldr r5, %2	;"
+						"mov pc, r5	;"
+						: : "m" (machid), "m"(params), "m"(address)
+						);
+		} else
+		if ((char)cmd == 'S') // Stack command
+		{
+			__asm__ __volatile__ (
+						"ldr fp, %0	;"
+						"sub fp, #4 ;"
+						"mov sp, fp	;"
+						"sub sp, #256 ;"
+						: : "m"(address)
+						);
+			usb_code ('i', address);
+			
 		}
 	}
Index: tt-loader/2nd/start.S
===================================================================
--- tt-loader/2nd/start.S	(revision 11)
+++ tt-loader/2nd/start.S	(revision 12)
@@ -102,6 +102,4 @@
 	.extern _main
 	bl _main
-	ldr pc, [r0]			// Branch to content of mem returned as boot command
-
 
 WSPR_VAL1:
Index: tt-loader/2nd/types.h
===================================================================
--- tt-loader/2nd/types.h	(revision 11)
+++ tt-loader/2nd/types.h	(revision 12)
@@ -32,4 +32,5 @@
 typedef u32 (u32_fnc_t) (void);
 typedef void (init_fnc_t) (void);
+typedef void (crc_cb_fnc_t) (u32,u32,u32);
 
 #endif
Index: tt-loader/2nd/usb.c
===================================================================
--- tt-loader/2nd/usb.c	(revision 11)
+++ tt-loader/2nd/usb.c	(revision 12)
@@ -261,2 +261,8 @@
 	return result;
 }
+
+void usb_reset()
+{
+	USBS_SYSCON1 &= ~_PULLUP_EN ;
+	USBS_SYSCON1 |= _PULLUP_EN ;
+}
Index: tt-loader/2nd/usb.h
===================================================================
--- tt-loader/2nd/usb.h	(revision 11)
+++ tt-loader/2nd/usb.h	(revision 12)
@@ -31,5 +31,5 @@
 int usb_rcvd (void);
 
-void usb_debug (void);
+void usb_reset (void);
 
 #endif