ADD: `analyse nuid` - generates NUID 4byte from a UID 7byte. Mifare Classic Ev1...

[proxmark3-svn] / client / flash.c

diff --git a/client/flash.c b/client/flash.c
index 8fe874e5cab6d0722def4396280073e88e018aa4..37ee8fb0ddd2dc550085194ca576a4717ea29dc6 100644 (file)
--- a/client/flash.c
+++ b/client/flash.c
@@ -11,22 +11,35 @@
 #include <stdio.h>
 #include <string.h>
 #include <stdlib.h>
 #include <stdio.h>
 #include <string.h>
 #include <stdlib.h>

+#include "proxmark3.h"

 #include "sleep.h"
 #include "sleep.h"

-#include "proxusb.h"

 #include "flash.h"
 #include "elf.h"
 #include "proxendian.h"
 #include "flash.h"
 #include "elf.h"
 #include "proxendian.h"

+#include "usb_cmd.h"
+#include "at91sam7s512.h"
+
+void SendCommand(UsbCommand* txcmd);
+void ReceiveCommand(UsbCommand* rxcmd);
+void CloseProxmark();
+int OpenProxmark(size_t i);

 
 // FIXME: what the fuckity fuck
 unsigned int current_command = CMD_UNKNOWN;
 
 #define FLASH_START            0x100000
 
 // FIXME: what the fuckity fuck
 unsigned int current_command = CMD_UNKNOWN;
 
 #define FLASH_START            0x100000

-#define FLASH_SIZE             (256*1024)
+
+#ifdef HAS_512_FLASH
+# define FLASH_SIZE             (512*1024)
+#else
+# define FLASH_SIZE             (256*1024)
+#endif
+

 #define FLASH_END              (FLASH_START + FLASH_SIZE)
 #define BOOTLOADER_SIZE        0x2000
 #define BOOTLOADER_END         (FLASH_START + BOOTLOADER_SIZE)
 
 #define FLASH_END              (FLASH_START + FLASH_SIZE)
 #define BOOTLOADER_SIZE        0x2000
 #define BOOTLOADER_END         (FLASH_START + BOOTLOADER_SIZE)
 

-#define BLOCK_SIZE             0x100
+#define BLOCK_SIZE             0x200

 
 static const uint8_t elf_ident[] = {
        0x7f, 'E', 'L', 'F',
 
 static const uint8_t elf_ident[] = {
        0x7f, 'E', 'L', 'F',


@@ -267,11 +280,10 @@ fail:
 // Get the state of the proxmark, backwards compatible
 static int get_proxmark_state(uint32_t *state)
 {
 // Get the state of the proxmark, backwards compatible
 static int get_proxmark_state(uint32_t *state)
 {

-       HidCommand c;
+       UsbCommand c;

        c.cmd = CMD_DEVICE_INFO;
        c.cmd = CMD_DEVICE_INFO;

-       SendCommand_(&c);
-
-       HidCommand resp;
+       SendCommand(&c);
+       UsbCommand resp;

        ReceiveCommand(&resp);
 
        // Three outcomes:
        ReceiveCommand(&resp);
 
        // Three outcomes:


@@ -290,7 +302,7 @@ static int get_proxmark_state(uint32_t *state)
                        *state = resp.arg[0];
                        break;
                default:
                        *state = resp.arg[0];
                        break;
                default:

-                       fprintf(stderr, "Error: Couldn't get proxmark state, bad response type: 0x%04x\n", resp.cmd);
+                       fprintf(stderr, "Error: Couldn't get proxmark state, bad response type: 0x%04" PRIx64 "\n", resp.cmd);

                        return -1;
                        break;
        }
                        return -1;
                        break;
        }


@@ -299,47 +311,44 @@ static int get_proxmark_state(uint32_t *state)
 }
 
 // Enter the bootloader to be able to start flashing
 }
 
 // Enter the bootloader to be able to start flashing

-static int enter_bootloader(void)
+static int enter_bootloader(char *serial_port_name)

 {
        uint32_t state;
 
        if (get_proxmark_state(&state) < 0)
                return -1;
 
 {
        uint32_t state;
 
        if (get_proxmark_state(&state) < 0)
                return -1;
 

-       if (state & DEVICE_INFO_FLAG_CURRENT_MODE_BOOTROM) {
-               /* Already in flash state, we're done. */
+       /* Already in flash state, we're done. */
+       if (state & DEVICE_INFO_FLAG_CURRENT_MODE_BOOTROM)

                return 0;
                return 0;

-       }

 
        if (state & DEVICE_INFO_FLAG_CURRENT_MODE_OS) {
                fprintf(stderr,"Entering bootloader...\n");
 
        if (state & DEVICE_INFO_FLAG_CURRENT_MODE_OS) {
                fprintf(stderr,"Entering bootloader...\n");

-               HidCommand c;
+               UsbCommand c;

                memset(&c, 0, sizeof (c));
 
                if ((state & DEVICE_INFO_FLAG_BOOTROM_PRESENT)
                memset(&c, 0, sizeof (c));
 
                if ((state & DEVICE_INFO_FLAG_BOOTROM_PRESENT)

-                       && (state & DEVICE_INFO_FLAG_OSIMAGE_PRESENT))
-               {
+                       && (state & DEVICE_INFO_FLAG_OSIMAGE_PRESENT)) {

                        // New style handover: Send CMD_START_FLASH, which will reset the board
                        // and enter the bootrom on the next boot.
                        c.cmd = CMD_START_FLASH;
                        // New style handover: Send CMD_START_FLASH, which will reset the board
                        // and enter the bootrom on the next boot.
                        c.cmd = CMD_START_FLASH;

-                       SendCommand_(&c);
+                       SendCommand(&c);

                        fprintf(stderr,"(Press and release the button only to abort)\n");
                } else {
                        // Old style handover: Ask the user to press the button, then reset the board
                        c.cmd = CMD_HARDWARE_RESET;
                        fprintf(stderr,"(Press and release the button only to abort)\n");
                } else {
                        // Old style handover: Ask the user to press the button, then reset the board
                        c.cmd = CMD_HARDWARE_RESET;

-                       SendCommand_(&c);
+                       SendCommand(&c);

                        fprintf(stderr,"Press and hold down button NOW if your bootloader requires it.\n");
                }
                        fprintf(stderr,"Press and hold down button NOW if your bootloader requires it.\n");
                }

-               fprintf(stderr,"Waiting for Proxmark to reappear on USB...");
-
+               msleep(100);

                CloseProxmark();
                CloseProxmark();

-               sleep(1);
-               while (!OpenProxmark(0)) {
+
+               fprintf(stderr,"Waiting for Proxmark to reappear on %s",serial_port_name);
+               do {

                        sleep(1);
                        fprintf(stderr, ".");
                        sleep(1);
                        fprintf(stderr, ".");

-               }
+               } while (!OpenProxmark(0));

                fprintf(stderr," Found.\n");
                fprintf(stderr," Found.\n");

-

                return 0;
        }
 
                return 0;
        }
 


@@ -347,23 +356,22 @@ static int enter_bootloader(void)
        return -1;
 }
 
        return -1;
 }
 

-static int wait_for_ack(void)
+static int wait_for_ack(UsbCommand *ack) 

 {
 {

-       HidCommand ack;
-       ReceiveCommand(&ack);
-       if (ack.cmd != CMD_ACK) {
-               printf("Error: Unexpected reply 0x%04x (expected ACK)\n", ack.cmd);
+       ReceiveCommand(ack);
+       if (ack->cmd != CMD_ACK) {
+               printf("Error: Unexpected reply 0x%04" PRIx64 " %s (expected ACK)\n", ack->cmd, (ack->cmd==CMD_NACK)?"NACK":"");

                return -1;
        }
        return 0;
 }
 
 // Go into flashing mode
                return -1;
        }
        return 0;
 }
 
 // Go into flashing mode

-int flash_start_flashing(int enable_bl_writes)
+int flash_start_flashing(int enable_bl_writes,char *serial_port_name)

 {
        uint32_t state;
 
 {
        uint32_t state;
 

-       if (enter_bootloader() < 0)
+       if (enter_bootloader(serial_port_name) < 0)

                return -1;
 
        if (get_proxmark_state(&state) < 0)
                return -1;
 
        if (get_proxmark_state(&state) < 0)


@@ -372,7 +380,7 @@ int flash_start_flashing(int enable_bl_writes)
        if (state & DEVICE_INFO_FLAG_UNDERSTANDS_START_FLASH) {
                // This command is stupid. Why the heck does it care which area we're
                // flashing, as long as it's not the bootloader area? The mind boggles.
        if (state & DEVICE_INFO_FLAG_UNDERSTANDS_START_FLASH) {
                // This command is stupid. Why the heck does it care which area we're
                // flashing, as long as it's not the bootloader area? The mind boggles.

-               HidCommand c = {CMD_START_FLASH};
+               UsbCommand c = {CMD_START_FLASH};

 
                if (enable_bl_writes) {
                        c.arg[0] = FLASH_START;
 
                if (enable_bl_writes) {
                        c.arg[0] = FLASH_START;


@@ -383,8 +391,8 @@ int flash_start_flashing(int enable_bl_writes)
                        c.arg[1] = FLASH_END;
                        c.arg[2] = 0;
                }
                        c.arg[1] = FLASH_END;
                        c.arg[2] = 0;
                }

-               SendCommand_(&c);
-               return wait_for_ack();
+               SendCommand(&c);
+               return wait_for_ack(&c);

        } else {
                fprintf(stderr, "Note: Your bootloader does not understand the new START_FLASH command\n");
                fprintf(stderr, "      It is recommended that you update your bootloader\n\n");
        } else {
                fprintf(stderr, "Note: Your bootloader does not understand the new START_FLASH command\n");
                fprintf(stderr, "      It is recommended that you update your bootloader\n\n");


@@ -396,24 +404,23 @@ int flash_start_flashing(int enable_bl_writes)
 static int write_block(uint32_t address, uint8_t *data, uint32_t length)
 {
        uint8_t block_buf[BLOCK_SIZE];
 static int write_block(uint32_t address, uint8_t *data, uint32_t length)
 {
        uint8_t block_buf[BLOCK_SIZE];

-

        memset(block_buf, 0xFF, BLOCK_SIZE);
        memcpy(block_buf, data, length);
        memset(block_buf, 0xFF, BLOCK_SIZE);
        memcpy(block_buf, data, length);

-
-       HidCommand c = {CMD_SETUP_WRITE};
-       for (int i = 0; i < 240; i += 48) {
-               memcpy(c.d.asBytes, block_buf + i, 48);
-               c.arg[0] = i / 4;
-               SendCommand_(&c);
-               if (wait_for_ack() < 0)
-                       return -1;
+       UsbCommand c = {CMD_FINISH_WRITE, {address, 0, 0}};
+       memcpy(c.d.asBytes, block_buf, length);
+       SendCommand(&c);
+       int ret = wait_for_ack(&c);
+       if (ret && c.arg[0]) {
+               uint32_t lock_bits = c.arg[0] >> 16;
+               bool lock_error = c.arg[0] & AT91C_MC_LOCKE;
+               bool prog_error = c.arg[0] & AT91C_MC_PROGE;
+               bool security_bit = c.arg[0] & AT91C_MC_SECURITY;
+               printf("%s", lock_error ? "       Lock Error\n" : "");
+               printf("%s", prog_error ? "       Invalid Command or bad Keyword\n" : "");
+               printf("%s", security_bit ? "       Security Bit is set!\n" : "");
+               printf("       Lock Bits:      0x%04x\n", lock_bits);

        }
        }

-
-       c.cmd = CMD_FINISH_WRITE;
-       c.arg[0] = address;
-       memcpy(c.d.asBytes, block_buf+240, 16);
-       SendCommand_(&c);
-       return wait_for_ack();
+       return ret;

 }
 
 // Write a file's segments to Flash
 }
 
 // Write a file's segments to Flash


@@ -472,7 +479,8 @@ void flash_free(flash_file_t *ctx)
 
 // just reset the unit
 int flash_stop_flashing(void) {
 
 // just reset the unit
 int flash_stop_flashing(void) {

-       HidCommand c = {CMD_HARDWARE_RESET};
-       SendCommand_(&c);
+       UsbCommand c = {CMD_HARDWARE_RESET};
+       SendCommand(&c);
+       msleep(100);

        return 0;
 }
        return 0;
 }