From 87692449099ae85922842f7f01acc0ab71e382d7 Mon Sep 17 00:00:00 2001 From: Wolfram Sang Date: Thu, 20 Oct 2011 11:40:54 +0200 Subject: imx_hid_recovery: add tool This tool allows to send a bootloader to a mxs-target via USB-recovery-mode (entered when primary boot fails). Taken from rockbox.org. Signed-off-by: Wolfram Sang --- imx_hid_recovery/Makefile | 15 ++++ imx_hid_recovery/imx_hid_recovery.c | 174 ++++++++++++++++++++++++++++++++++++ 2 files changed, 189 insertions(+) create mode 100644 imx_hid_recovery/Makefile create mode 100644 imx_hid_recovery/imx_hid_recovery.c diff --git a/imx_hid_recovery/Makefile b/imx_hid_recovery/Makefile new file mode 100644 index 0000000..24d0b8e --- /dev/null +++ b/imx_hid_recovery/Makefile @@ -0,0 +1,15 @@ +CC=gcc +LD=gcc + +all: imx_hid_recovery + +imx_hid_recovery.o: imx_hid_recovery.c + $(CC) -c -Wall -O2 -std=c99 `pkg-config --cflags libusb-1.0` -o $@ $< + +imx_hid_recovery: imx_hid_recovery.o + $(LD) -o $@ $< `pkg-config --libs libusb-1.0` + +clean: + rm -rf imx_hid_recovery.o + + diff --git a/imx_hid_recovery/imx_hid_recovery.c b/imx_hid_recovery/imx_hid_recovery.c new file mode 100644 index 0000000..ba4645f --- /dev/null +++ b/imx_hid_recovery/imx_hid_recovery.c @@ -0,0 +1,174 @@ +/*************************************************************************** + * __________ __ ___. + * Open \______ \ ____ ____ | | _\_ |__ _______ ___ + * Source | _// _ \_/ ___\| |/ /| __ \ / _ \ \/ / + * Jukebox | | ( <_> ) \___| < | \_\ ( <_> > < < + * Firmware |____|_ /\____/ \___ >__|_ \|___ /\____/__/\_ \ + * \/ \/ \/ \/ \/ + * $Id$ + * + * Copyright (C) 2010 Amaury Pouly + * + * This program is free software; you can redistribute it and/or + * modify it under the terms of the GNU General Public License + * as published by the Free Software Foundation; either version 2 + * of the License, or (at your option) any later version. + * + * This software is distributed on an "AS IS" basis, WITHOUT WARRANTY OF ANY + * KIND, either express or implied. + * + ****************************************************************************/ +#include +#include +#include +#include +#include + +void put32le(uint8_t *buf, uint32_t i) +{ + *buf++ = i & 0xff; + *buf++ = (i >> 8) & 0xff; + *buf++ = (i >> 16) & 0xff; + *buf++ = (i >> 24) & 0xff; +} + +void put32be(uint8_t *buf, uint32_t i) +{ + *buf++ = (i >> 24) & 0xff; + *buf++ = (i >> 16) & 0xff; + *buf++ = (i >> 8) & 0xff; + *buf++ = i & 0xff; +} + +int main(int argc, char **argv) +{ + int ret; + uint8_t msg[0x20]; + uint8_t *p; + FILE *f; + int i, xfer_size, nr_xfers, recv_size; + + if(argc != 3) + { + printf("usage: %s \n", argv[0]); + return 1; + } + + char *end; + xfer_size = strtol(argv[1], &end, 0); + if(end != (argv[1] + strlen(argv[1]))) + { + printf("Invalid transfer size !\n"); + return 1; + } + + libusb_device_handle *dev; + + libusb_init(NULL); + + libusb_set_debug(NULL, 3); + + /* MX23 */ + dev = libusb_open_device_with_vid_pid(NULL, 0x066F, 0x3780); + if(dev == NULL) + /* MX28 */ + dev = libusb_open_device_with_vid_pid(NULL, 0x15A2, 0x004F); + if(dev == NULL) + { + printf("Cannot open device\n"); + return 1; + } + + libusb_detach_kernel_driver(dev, 0); + libusb_detach_kernel_driver(dev, 4); + + libusb_claim_interface (dev, 0); + libusb_claim_interface (dev, 4); + + if (!dev) + { + printf("No dev\n"); + exit(1); + } + + f = fopen(argv[2], "r"); + if(f == NULL) + { + perror("cannot open file"); + return 1; + } + fseek(f, 0, SEEK_END); + size_t size = ftell(f); + fseek(f, 0, SEEK_SET); + + printf("Transfer size: %d\n", xfer_size); + nr_xfers = (size + xfer_size - 1) / xfer_size; + uint8_t *file_buf = malloc(nr_xfers * xfer_size); + memset(file_buf, 0xff, nr_xfers * xfer_size); // pad with 0xff + if(fread(file_buf, size, 1, f) != 1) + { + perror("read error"); + fclose(f); + return 1; + } + fclose(f); + + memset(msg, 0, 0x20); + + p = msg; + + *p++ = 0x01; // Init upload command + *p++ = 'B'; // Signature + *p++ = 'L'; + *p++ = 'T'; + *p++ = 'C'; + put32le(p, 0x1); // I guess version or sub-command + p += 4; + put32le(p, size); // Payload size + + // The second command starts at 0x20 + + p = &msg[0x10]; + + *p++ = 0x02; // Start upload + put32be(p, size); // Payload size, again + + ret = libusb_control_transfer(dev, + LIBUSB_REQUEST_TYPE_CLASS | LIBUSB_RECIPIENT_INTERFACE, 0x9, 0x201, 0, + msg, 0x20, 1000); + if(ret < 0) + { + printf("transfer error at init step\n"); + return 1; + } + + uint8_t *xfer_buf = malloc(1 + xfer_size); + + for(i = 0; i < nr_xfers; i++) + { + xfer_buf[0] = 0x2; + memcpy(&xfer_buf[1], &file_buf[i * xfer_size], xfer_size); + + ret = libusb_control_transfer(dev, + LIBUSB_REQUEST_TYPE_CLASS | LIBUSB_RECIPIENT_INTERFACE, + 0x9, 0x202, 0, xfer_buf, xfer_size + 1, 1000); + if(ret < 0) + { + printf("transfer error at send step %d\n", i); + return 1; + } + } + + ret = libusb_interrupt_transfer(dev, 0x81, xfer_buf, xfer_size, &recv_size, + 1000); + if(ret < 0) + { + printf("transfer error at final stage\n"); + return 1; + } + + printf("ret %i\n", ret); + + return 0; +} + -- cgit v1.2.3