How can we implement a safe updating procedure for the main firmware? When using the Lightcrafter GUI to update main firmware, skipping bootloader update, it seems there is still a small chance that a power-cut at the wrong time will brick the unit. Reading out the flash-data over jtag confirms that the bootloader is still in place, but the system does not boot correctly, and does not enumerate on usb so we cannot fix this without a jtag adapter.
Our observations so far:
* Only bootloader in flash, the rest 0xFF, works ok.
* Bootloader + some random part of main firmware in flash, system is bricked, need JTAG to recover.
What part of the main firmware does the bootloader check before launching the main firmware?
Is it possible to modify the update-procedure to eliminate/reduce the possibility of a bricked unit after aborted update?