Hi,
We use a fail back mecanism for Linux but no such mechanism fo u-boot.
During the upgrade, we do also a CRC check to be sure that the updgrade was done correctly.
And with a flag written in a custom config sector of the flash, we can tell to ppcboot if the upgraded kernel was running correctly.

But for our safety we won't never upgrade ppcboot.

> -----Original Message-----
> From: Chris Simmonds [mailto:chris@2net.co.uk]
> Sent: Tuesday, December 02, 2003 3:39 PM
> To: u-boot-users@lists.sourceforge.net
> Subject: [U-Boot-Users] Field upgrade
>
>
> Hi,
>
> One of my requirements is that the firmware be field upgradeable. The
> problem at the moment is that if something goes wrong while
> erasing and
> programming a new u-boot there is no recovery without a jtag/bdm
> debugger. Does anyone have a solution, or is it not a problem in
> practice? I was playing with the idea of having a backup
> u-boot and some
> method of falling back to it if the primary copy is corrupt.
>
> Chris.
>
>
> --
> Chris Simmonds                        2net Limited
> chris@2net.co.uk                      http://www.2net.co.uk/
> Tel:   +44 (0)1962 869003             Fax:   +44 (0)870 056 7556
> "If it's not connected, it's not effective"(tm)
>
>
>
> -------------------------------------------------------
> This SF.net email is sponsored by: SF.net Giveback Program.
> Does SourceForge.net help you be more productive?  Does it
> help you create better code?  SHARE THE LOVE, and help us help
> YOU!  Click Here: http://sourceforge.net/donate/
> _______________________________________________
> U-Boot-Users mailing list
> U-Boot-Users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/u-boot-users
>