diff options
Diffstat (limited to 'utils/imx_hid_recovery')
-rw-r--r-- | utils/imx_hid_recovery/Makefile | 9 | ||||
-rw-r--r-- | utils/imx_hid_recovery/imx_hid_recovery.c | 150 |
2 files changed, 159 insertions, 0 deletions
diff --git a/utils/imx_hid_recovery/Makefile b/utils/imx_hid_recovery/Makefile new file mode 100644 index 0000000000..291d5db225 --- /dev/null +++ b/utils/imx_hid_recovery/Makefile | |||
@@ -0,0 +1,9 @@ | |||
1 | all: imx_hid_recovery | ||
2 | |||
3 | imx_hid_recovery: imx_hid_recovery.c | ||
4 | gcc -Wall -O2 -std=c99 `pkg-config --libs --cflags libusb-1.0` -o $@ $< | ||
5 | |||
6 | clean: | ||
7 | rm -rf imx_hid_recovery | ||
8 | |||
9 | |||
diff --git a/utils/imx_hid_recovery/imx_hid_recovery.c b/utils/imx_hid_recovery/imx_hid_recovery.c new file mode 100644 index 0000000000..546e244338 --- /dev/null +++ b/utils/imx_hid_recovery/imx_hid_recovery.c | |||
@@ -0,0 +1,150 @@ | |||
1 | #include <stdio.h> | ||
2 | #include <stdlib.h> | ||
3 | #include <string.h> | ||
4 | #include <libusb.h> | ||
5 | #include <stdint.h> | ||
6 | |||
7 | void put32le(uint8_t *buf, uint32_t i) | ||
8 | { | ||
9 | *buf++ = i & 0xff; | ||
10 | *buf++ = (i >> 8) & 0xff; | ||
11 | *buf++ = (i >> 16) & 0xff; | ||
12 | *buf++ = (i >> 24) & 0xff; | ||
13 | } | ||
14 | |||
15 | void put32be(uint8_t *buf, uint32_t i) | ||
16 | { | ||
17 | *buf++ = (i >> 24) & 0xff; | ||
18 | *buf++ = (i >> 16) & 0xff; | ||
19 | *buf++ = (i >> 8) & 0xff; | ||
20 | *buf++ = i & 0xff; | ||
21 | } | ||
22 | |||
23 | int main(int argc, char **argv) | ||
24 | { | ||
25 | int ret; | ||
26 | uint8_t msg[0x20]; | ||
27 | uint8_t *p; | ||
28 | FILE *f; | ||
29 | int i, xfer_size, nr_xfers, recv_size; | ||
30 | |||
31 | if(argc != 3) | ||
32 | { | ||
33 | printf("usage: %s <xfer size> <file>\n", argv[0]); | ||
34 | return 1; | ||
35 | } | ||
36 | |||
37 | char *end; | ||
38 | xfer_size = strtol(argv[1], &end, 0); | ||
39 | if(end != (argv[1] + strlen(argv[1]))) | ||
40 | { | ||
41 | printf("Invalid transfer size !\n"); | ||
42 | return 1; | ||
43 | } | ||
44 | |||
45 | libusb_device_handle *dev; | ||
46 | |||
47 | libusb_init(NULL); | ||
48 | |||
49 | libusb_set_debug(NULL, 3); | ||
50 | |||
51 | dev = libusb_open_device_with_vid_pid(NULL, 0x066F, 0x3780); | ||
52 | if(dev == NULL) | ||
53 | { | ||
54 | printf("Cannot open device\n"); | ||
55 | return 1; | ||
56 | } | ||
57 | |||
58 | libusb_detach_kernel_driver(dev, 0); | ||
59 | libusb_detach_kernel_driver(dev, 4); | ||
60 | |||
61 | libusb_claim_interface (dev, 0); | ||
62 | libusb_claim_interface (dev, 4); | ||
63 | |||
64 | if (!dev) | ||
65 | { | ||
66 | printf("No dev\n"); | ||
67 | exit(1); | ||
68 | } | ||
69 | |||
70 | f = fopen(argv[2], "r"); | ||
71 | if(f == NULL) | ||
72 | { | ||
73 | perror("cannot open file"); | ||
74 | return 1; | ||
75 | } | ||
76 | fseek(f, 0, SEEK_END); | ||
77 | size_t size = ftell(f); | ||
78 | fseek(f, 0, SEEK_SET); | ||
79 | |||
80 | printf("Transfer size: %d\n", xfer_size); | ||
81 | nr_xfers = (size + xfer_size - 1) / xfer_size; | ||
82 | uint8_t *file_buf = malloc(nr_xfers * xfer_size); | ||
83 | memset(file_buf, 0xff, nr_xfers * xfer_size); // pad with 0xff | ||
84 | if(fread(file_buf, size, 1, f) != 1) | ||
85 | { | ||
86 | perror("read error"); | ||
87 | fclose(f); | ||
88 | return 1; | ||
89 | } | ||
90 | fclose(f); | ||
91 | |||
92 | memset(msg, 0, 0x20); | ||
93 | |||
94 | p = msg; | ||
95 | |||
96 | *p++ = 0x01; // Init upload command | ||
97 | *p++ = 'B'; // Signature | ||
98 | *p++ = 'L'; | ||
99 | *p++ = 'T'; | ||
100 | *p++ = 'C'; | ||
101 | put32le(p, 0x1); // I guess version or sub-command | ||
102 | p += 4; | ||
103 | put32le(p, size); // Payload size | ||
104 | |||
105 | // The second command starts at 0x20 | ||
106 | |||
107 | p = &msg[0x10]; | ||
108 | |||
109 | *p++ = 0x02; // Start upload | ||
110 | put32be(p, size); // Payload size, again | ||
111 | |||
112 | ret = libusb_control_transfer(dev, | ||
113 | LIBUSB_REQUEST_TYPE_CLASS | LIBUSB_RECIPIENT_INTERFACE, 0x9, 0x201, 0, | ||
114 | msg, 0x20, 1000); | ||
115 | if(ret < 0) | ||
116 | { | ||
117 | printf("transfer error at init step\n"); | ||
118 | return 1; | ||
119 | } | ||
120 | |||
121 | uint8_t *xfer_buf = malloc(1 + xfer_size); | ||
122 | |||
123 | for(i = 0; i < nr_xfers; i++) | ||
124 | { | ||
125 | xfer_buf[0] = 0x2; | ||
126 | memcpy(&xfer_buf[1], &file_buf[i * xfer_size], xfer_size); | ||
127 | |||
128 | ret = libusb_control_transfer(dev, | ||
129 | LIBUSB_REQUEST_TYPE_CLASS | LIBUSB_RECIPIENT_INTERFACE, | ||
130 | 0x9, 0x202, 0, xfer_buf, xfer_size + 1, 1000); | ||
131 | if(ret < 0) | ||
132 | { | ||
133 | printf("transfer error at send step %d\n", i); | ||
134 | return 1; | ||
135 | } | ||
136 | } | ||
137 | |||
138 | ret = libusb_interrupt_transfer(dev, 0x81, xfer_buf, xfer_size, &recv_size, | ||
139 | 1000); | ||
140 | if(ret < 0) | ||
141 | { | ||
142 | printf("transfer error at final stage\n"); | ||
143 | return 1; | ||
144 | } | ||
145 | |||
146 | printf("ret %i\n", ret); | ||
147 | |||
148 | return 0; | ||
149 | } | ||
150 | |||