utils/imx_hid_recovery/imx_hid_recovery.c

   1 #include <stdio.h>
   2 #include <stdlib.h>
   3 #include <string.h>
   4 #include <libusb.h>
   5 #include <stdint.h>
   6
   7 void put32le(uint8_t *buf, uint32_t i)
   8 {
   9     *buf++ = i & 0xff;
  10     *buf++ = (i >> 8) & 0xff;
  11     *buf++ = (i >> 16) & 0xff;
  12     *buf++ = (i >> 24) & 0xff;
  13 }
  14
  15 void put32be(uint8_t *buf, uint32_t i)
  16 {
  17     *buf++ = (i >> 24) & 0xff;
  18     *buf++ = (i >> 16) & 0xff;
  19     *buf++ = (i >> 8) & 0xff;
  20     *buf++ = i & 0xff;
  21 }
  22
  23 int main(int argc, char **argv)
  24 {
  25     int ret;
  26     uint8_t msg[0x20];
  27     uint8_t *p;
  28     FILE *f;
  29     int i, xfer_size, nr_xfers, recv_size;
  30
  31     if(argc != 3)
  32     {
  33         printf("usage: %s <xfer size> <file>\n", argv[0]);
  34         return 1;
  35     }
  36
  37     char *end;
  38     xfer_size = strtol(argv[1], &end, 0);
  39     if(end != (argv[1] + strlen(argv[1])))
  40     {
  41         printf("Invalid transfer size !\n");
  42         return 1;
  43     }
  44
  45     libusb_device_handle *dev;
  46
  47     libusb_init(NULL);
  48
  49     libusb_set_debug(NULL, 3);
  50
  51     dev = libusb_open_device_with_vid_pid(NULL, 0x066F, 0x3780);
  52     if(dev == NULL)
  53     {
  54         printf("Cannot open device\n");
  55         return 1;
  56     }
  57
  58     libusb_detach_kernel_driver(dev, 0);
  59     libusb_detach_kernel_driver(dev, 4);
  60
  61     libusb_claim_interface (dev, 0);
  62     libusb_claim_interface (dev, 4);
  63
  64     if (!dev)
  65     {
  66         printf("No dev\n");
  67         exit(1);
  68     }
  69
  70     f = fopen(argv[2], "r");
  71     if(f == NULL)
  72     {
  73         perror("cannot open file");
  74         return 1;
  75     }
  76     fseek(f, 0, SEEK_END);
  77     size_t size = ftell(f);
  78     fseek(f, 0, SEEK_SET);
  79
  80     printf("Transfer size: %d\n", xfer_size);
  81     nr_xfers = (size + xfer_size - 1) / xfer_size;
  82     uint8_t *file_buf = malloc(nr_xfers * xfer_size);
  83     memset(file_buf, 0xff, nr_xfers * xfer_size); // pad with 0xff
  84     if(fread(file_buf, size, 1, f) != 1)
  85     {
  86         perror("read error");
  87         fclose(f);
  88         return 1;
  89     }
  90     fclose(f);
  91
  92     memset(msg, 0, 0x20);
  93
  94     p = msg;
  95
  96     *p++ = 0x01; // Init upload command
  97     *p++ = 'B'; // Signature
  98     *p++ = 'L';
  99     *p++ = 'T';
 100     *p++ = 'C';
 101     put32le(p, 0x1); // I guess version or sub-command
 102     p += 4;
 103     put32le(p, size); // Payload size
 104
 105     // The second command starts at 0x20
 106
 107     p = &msg[0x10];
 108
 109     *p++ = 0x02; // Start upload
 110     put32be(p, size); // Payload size, again
 111
 112     ret = libusb_control_transfer(dev,
 113         LIBUSB_REQUEST_TYPE_CLASS | LIBUSB_RECIPIENT_INTERFACE, 0x9, 0x201, 0,
 114         msg, 0x20, 1000);
 115     if(ret < 0)
 116     {
 117         printf("transfer error at init step\n");
 118         return 1;
 119     }
 120
 121     uint8_t *xfer_buf = malloc(1 + xfer_size);
 122
 123     for(i = 0; i < nr_xfers; i++)
 124     {
 125         xfer_buf[0] = 0x2;
 126         memcpy(&xfer_buf[1], &file_buf[i * xfer_size], xfer_size);
 127
 128         ret = libusb_control_transfer(dev,
 129             LIBUSB_REQUEST_TYPE_CLASS | LIBUSB_RECIPIENT_INTERFACE,
 130             0x9, 0x202, 0, xfer_buf, xfer_size + 1, 1000);
 131         if(ret < 0)
 132         {
 133             printf("transfer error at send step %d\n", i);
 134             return 1;
 135         }
 136     }
 137
 138     ret = libusb_interrupt_transfer(dev, 0x81, xfer_buf, xfer_size, &recv_size,
 139         1000);
 140     if(ret < 0)
 141     {
 142         printf("transfer error at final stage\n");
 143         return 1;
 144     }
 145
 146     printf("ret %i\n", ret);
 147
 148     return 0;
 149 }
 150