summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
-rw-r--r--imx_hid_recovery/Makefile15
-rw-r--r--imx_hid_recovery/imx_hid_recovery.c174
2 files changed, 189 insertions, 0 deletions
diff --git a/imx_hid_recovery/Makefile b/imx_hid_recovery/Makefile
new file mode 100644
index 0000000..24d0b8e
--- /dev/null
+++ b/imx_hid_recovery/Makefile
@@ -0,0 +1,15 @@
+CC=gcc
+LD=gcc
+
+all: imx_hid_recovery
+
+imx_hid_recovery.o: imx_hid_recovery.c
+ $(CC) -c -Wall -O2 -std=c99 `pkg-config --cflags libusb-1.0` -o $@ $<
+
+imx_hid_recovery: imx_hid_recovery.o
+ $(LD) -o $@ $< `pkg-config --libs libusb-1.0`
+
+clean:
+ rm -rf imx_hid_recovery.o
+
+
diff --git a/imx_hid_recovery/imx_hid_recovery.c b/imx_hid_recovery/imx_hid_recovery.c
new file mode 100644
index 0000000..ba4645f
--- /dev/null
+++ b/imx_hid_recovery/imx_hid_recovery.c
@@ -0,0 +1,174 @@
+/***************************************************************************
+ * __________ __ ___.
+ * Open \______ \ ____ ____ | | _\_ |__ _______ ___
+ * Source | _// _ \_/ ___\| |/ /| __ \ / _ \ \/ /
+ * Jukebox | | ( <_> ) \___| < | \_\ ( <_> > < <
+ * Firmware |____|_ /\____/ \___ >__|_ \|___ /\____/__/\_ \
+ * \/ \/ \/ \/ \/
+ * $Id$
+ *
+ * Copyright (C) 2010 Amaury Pouly
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation; either version 2
+ * of the License, or (at your option) any later version.
+ *
+ * This software is distributed on an "AS IS" basis, WITHOUT WARRANTY OF ANY
+ * KIND, either express or implied.
+ *
+ ****************************************************************************/
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+#include <libusb.h>
+#include <stdint.h>
+
+void put32le(uint8_t *buf, uint32_t i)
+{
+ *buf++ = i & 0xff;
+ *buf++ = (i >> 8) & 0xff;
+ *buf++ = (i >> 16) & 0xff;
+ *buf++ = (i >> 24) & 0xff;
+}
+
+void put32be(uint8_t *buf, uint32_t i)
+{
+ *buf++ = (i >> 24) & 0xff;
+ *buf++ = (i >> 16) & 0xff;
+ *buf++ = (i >> 8) & 0xff;
+ *buf++ = i & 0xff;
+}
+
+int main(int argc, char **argv)
+{
+ int ret;
+ uint8_t msg[0x20];
+ uint8_t *p;
+ FILE *f;
+ int i, xfer_size, nr_xfers, recv_size;
+
+ if(argc != 3)
+ {
+ printf("usage: %s <xfer size> <file>\n", argv[0]);
+ return 1;
+ }
+
+ char *end;
+ xfer_size = strtol(argv[1], &end, 0);
+ if(end != (argv[1] + strlen(argv[1])))
+ {
+ printf("Invalid transfer size !\n");
+ return 1;
+ }
+
+ libusb_device_handle *dev;
+
+ libusb_init(NULL);
+
+ libusb_set_debug(NULL, 3);
+
+ /* MX23 */
+ dev = libusb_open_device_with_vid_pid(NULL, 0x066F, 0x3780);
+ if(dev == NULL)
+ /* MX28 */
+ dev = libusb_open_device_with_vid_pid(NULL, 0x15A2, 0x004F);
+ if(dev == NULL)
+ {
+ printf("Cannot open device\n");
+ return 1;
+ }
+
+ libusb_detach_kernel_driver(dev, 0);
+ libusb_detach_kernel_driver(dev, 4);
+
+ libusb_claim_interface (dev, 0);
+ libusb_claim_interface (dev, 4);
+
+ if (!dev)
+ {
+ printf("No dev\n");
+ exit(1);
+ }
+
+ f = fopen(argv[2], "r");
+ if(f == NULL)
+ {
+ perror("cannot open file");
+ return 1;
+ }
+ fseek(f, 0, SEEK_END);
+ size_t size = ftell(f);
+ fseek(f, 0, SEEK_SET);
+
+ printf("Transfer size: %d\n", xfer_size);
+ nr_xfers = (size + xfer_size - 1) / xfer_size;
+ uint8_t *file_buf = malloc(nr_xfers * xfer_size);
+ memset(file_buf, 0xff, nr_xfers * xfer_size); // pad with 0xff
+ if(fread(file_buf, size, 1, f) != 1)
+ {
+ perror("read error");
+ fclose(f);
+ return 1;
+ }
+ fclose(f);
+
+ memset(msg, 0, 0x20);
+
+ p = msg;
+
+ *p++ = 0x01; // Init upload command
+ *p++ = 'B'; // Signature
+ *p++ = 'L';
+ *p++ = 'T';
+ *p++ = 'C';
+ put32le(p, 0x1); // I guess version or sub-command
+ p += 4;
+ put32le(p, size); // Payload size
+
+ // The second command starts at 0x20
+
+ p = &msg[0x10];
+
+ *p++ = 0x02; // Start upload
+ put32be(p, size); // Payload size, again
+
+ ret = libusb_control_transfer(dev,
+ LIBUSB_REQUEST_TYPE_CLASS | LIBUSB_RECIPIENT_INTERFACE, 0x9, 0x201, 0,
+ msg, 0x20, 1000);
+ if(ret < 0)
+ {
+ printf("transfer error at init step\n");
+ return 1;
+ }
+
+ uint8_t *xfer_buf = malloc(1 + xfer_size);
+
+ for(i = 0; i < nr_xfers; i++)
+ {
+ xfer_buf[0] = 0x2;
+ memcpy(&xfer_buf[1], &file_buf[i * xfer_size], xfer_size);
+
+ ret = libusb_control_transfer(dev,
+ LIBUSB_REQUEST_TYPE_CLASS | LIBUSB_RECIPIENT_INTERFACE,
+ 0x9, 0x202, 0, xfer_buf, xfer_size + 1, 1000);
+ if(ret < 0)
+ {
+ printf("transfer error at send step %d\n", i);
+ return 1;
+ }
+ }
+
+ ret = libusb_interrupt_transfer(dev, 0x81, xfer_buf, xfer_size, &recv_size,
+ 1000);
+ if(ret < 0)
+ {
+ printf("transfer error at final stage\n");
+ return 1;
+ }
+
+ printf("ret %i\n", ret);
+
+ return 0;
+}
+