Memory map, password handling for MITSUBISHI M3850x FLASH microcontroller on SPRINT


Applicable for:
 - M38507F8


Memory map:
-----------

USER FLASH: 0x08000 - 0x0FFFF	(32kB)
BOOT FLASH: 0x10000 - 0x10FFF	(4kB)


Per default both the USER and BOOT flash memory are erased, programmed and verified.
However, the user can restrict the programmable area to USER flash only by setting the
address range accordingly.


Code protection:
----------------

The content of the M3850x microntroller can be protected by code protection bits 
at address 0xFFDB. The default state of this byte is 'FF', unprotected.

Structure of the ROM code protect control:

0xFFDB: | b7 | b6 | b5 | b4 | b3 | b2 | 1 | 1 |

b7 b6 ROM code protect level 1 set bits (ROMCP1)
------------------------------------------------
0  0: Protect enabled
0  1: Protect enabled
1  0: Protect enabled
1  1: Protect disabled.

When ROMCP1 enabled, the internal flash is protected against 
readout or modification in parallel I/O mode. However, the LSI
tester can readout.

b5 b4 ROM code protect RESET bits
----------------------------------
0  0: Protect removed
0  1: Protect set bits effective
1  0: Protect set bits effective
1  1: Protect set bits effective

The ROM code protect RESET bits can be used to turn off ROM code protect
level 1 and ROM code protect level 2. However, since these bits can not 
be modified in parallel I/O mode, they need to be rewritten in application.

b3 b2 ROM code protect level 2 set bits (ROMCP2)
------------------------------------------------
0  0: Protect enabled
0  1: Protect enabled
1  0: Protect enabled
1  1: Protect disabled.

When ROMCP2 enabled, the internal flash is protected against 
readout or modification in parallel I/O mode. Readout by a shipment
inspection LSI tester also inhibited.

b0 and b1 
---------
reserved (set to '1')