/* flasher for HomeMatic-devices supporting OTA updates
*
- * Copyright (c) 2014-16 Michael Gernoth <michael@gernoth.net>
+ * Copyright (c) 2014-17 Michael Gernoth <michael@gernoth.net>
+ * Copyright (c) 2017 noansi (TSCULFW-support)
*
* Permission is hereby granted, free of charge, to any person obtaining a copy
* of this software and associated documentation files (the "Software"), to
enum message_type {
MESSAGE_TYPE_E = 1,
MESSAGE_TYPE_R = 2,
+ MESSAGE_TYPE_B = 3,
};
enum hmuartlgw_state {
uint8_t credits;
enum hmuartlgw_state uartlgw_state;
uint8_t uartlgw_version[3];
+ uint8_t is_TSCUL; // tsculfw
};
static int parse_hmcfgusb(uint8_t *buf, int buf_len, void *data)
{
struct recv_data *rdata = data;
int pos = 0;
+ int rpos = 0; // read index
- memset(rdata, 0, sizeof(struct recv_data));
+ memset(rdata->message, 0, sizeof(rdata->message));
+ rdata->message_type = 0;
if (buf_len <= 3)
return 0;
if (buf[1] == 's')
return 0;
- while(validate_nibble(buf[(pos * 2) + 1]) &&
- validate_nibble(buf[(pos * 2) + 2]) &&
- (pos + 1 < buf_len)) {
- rdata->message[pos] = ascii_to_nibble(buf[(pos * 2) + 1]) << 4;
- rdata->message[pos] |= ascii_to_nibble(buf[(pos * 2) + 2]);
+ if ((buf[1] == 'p') || (buf[1] == 't')) // tsculfw: ping or set timestamp command echoed?
+ return 0;
+
+ if (buf[1] == '?') {// tsculfw: unknown command
+ fprintf(stderr, "unknown ASKSIN command sent\n");
+ return 0;
+ }
+
+ if (buf[1] == 'F') { // tsculfw: timestamp message?
+ rdata->is_TSCUL = 1;
+ if (buf_len <= (3+14)) // tsculfw: reasonable len?
+ return 0;
+ if (!validate_nibble(buf[3]) || !validate_nibble(buf[4])) // tsculfw: hex?
+ return 0;
+
+ rdata->credits = ascii_to_nibble(buf[3]); // tsculfw: coarse credits info, 0 = full credits (1800 x10ms) available
+
+ //AFF1B000053A1010F0520CB1122334BD57110
+ switch(ascii_to_nibble(buf[4]) & 0x7) { // tsculfw: message type?
+ case 0: // tsculfw: send fail message repeat fail or AES Auth error
+ fprintf(stderr, "send didn't complete, repeat fail or AES Auth error\n");
+ return 0;
+ case 1: // tsculfw: received message
+ rpos += 7; // tsculfw: ignore timestamp data for now
+ break;
+ case 2: // tsculfw: ping answer
+ return 0;
+ case 3: // tsculfw: send success
+ rdata->message_type = MESSAGE_TYPE_B;
+ return 0;
+ case 4: // tsculfw: send fail channel busy message
+ fprintf(stderr, "CCA didn't complete, too much traffic\n");
+ return 0;
+ case 5: // tsculfw: send fail credits message
+ fprintf(stderr, "send didn't complete, not enough credits left\n");
+ return 0;
+ case 6: // tsculfw: send timestamp fail message no buffer or send message length error
+ fprintf(stderr, "send didn't complete, not enough credits left -> wait 30 minutes with TSCUL powered and not reset\n");
+ return 0;
+ case 7: // tsculfw: send fail due to cc1101 TX-FIFO underflow error message
+ fprintf(stderr, "send didn't complete, cc1101 TX-FIFO underflow\n");
+ return 0;
+ default:
+ break;
+ }
+ }
+
+ while(validate_nibble(buf[(rpos * 2) + 1]) &&
+ validate_nibble(buf[(rpos * 2) + 2]) &&
+ (rpos + 1 < buf_len)) {
+ rdata->message[pos] = ascii_to_nibble(buf[(rpos * 2) + 1]) << 4;
+ rdata->message[pos] |= ascii_to_nibble(buf[(rpos * 2) + 2]);
pos++;
+ rpos++;
}
- if (hmid && (SRC(rdata->message) != hmid))
+ if (hmid && (SRC(rdata->message) != (int)hmid))
return 0;
rdata->message_type = MESSAGE_TYPE_E;
char *s;
char *e;
+ if (!strncmp((char*)buf, "VTS", 3)) { // tsculfw: "VTS x.xx NNNNNN"
+ rdata->is_TSCUL = 1;
+ rdata->version = 0xffff;
+ break;
+ }
+
s = ((char*)buf) + 2;
e = strchr(s, '.');
if (!e) {
return 1;
}
+int send_wait_hmuartlgw(struct hm_dev *dev, struct recv_data *rdata, uint8_t *data, int data_len,
+ enum hmuartlgw_dst dst, enum hmuartlgw_state srcstate,
+ enum hmuartlgw_state dststate)
+{
+ int cnt = 5;
+
+ do {
+ rdata->uartlgw_state = srcstate;
+ hmuartlgw_send(dev->hmuartlgw, data, data_len, dst);
+ do { hmuartlgw_poll(dev->hmuartlgw, 500); } while (rdata->uartlgw_state != dststate);
+ if (rdata->status != HMUARTLGW_ACK_EINPROGRESS)
+ break;
+ usleep(200*1000);
+ } while (cnt--);
+ if (rdata->status == HMUARTLGW_ACK_EINPROGRESS) {
+ fprintf(stderr, "IO thinks it is busy, you might have to reset it!\n");
+ return 0;
+ }
+
+ return 1;
+}
+
int send_hm_message(struct hm_dev *dev, struct recv_data *rdata, uint8_t *msg)
{
static uint32_t id = 1;
memcpy(&out[0x0f], msg, msg[0] + 1);
- memset(rdata, 0, sizeof(struct recv_data));
+ memset(rdata->message, 0, sizeof(rdata->message));
+ rdata->message_type = 0;
hmcfgusb_send(dev->hmcfgusb, out, sizeof(out), 1);
while (1) {
buf[2 + (i * 2) ] = '\r';
buf[2 + (i * 2) + 1] = '\n';
- memset(rdata, 0, sizeof(struct recv_data));
+ memset(rdata->message, 0, sizeof(rdata->message));
+ rdata->message_type = 0;
if (culfw_send(dev->culfw, buf, 2 + (i * 2) + 1) == 0) {
fprintf(stderr, "culfw_send failed!\n");
exit(EXIT_FAILURE);
}
+ /* Wait for TSCUL to ACK send */
+ if (rdata->is_TSCUL) {
+ do {
+ errno = 0;
+ pfd = culfw_poll(dev->culfw, 200);
+ if ((pfd < 0) && errno) {
+ if (errno != ETIMEDOUT) {
+ perror("\n\nculfw_poll");
+ exit(EXIT_FAILURE);
+ }
+ }
+ } while (rdata->message_type != MESSAGE_TYPE_B);
+ }
+
if (msg[CTL] & 0x20) {
int cnt = 5;
int pfd;
uint8_t respbuf[16];
uint8_t *resp;
+ if (rdata->is_TSCUL) {
+ printf("AES handled by TSCUL\n");
+ break;
+ }
+
req_kNo = rdata->message[rdata->message[LEN]] / 2;
memcpy(challenge, &(rdata->message[PAYLOAD+1]), 6);
return 0;
}
}
+
+ /* Delay for non-TSCUL */
+ if (!rdata->is_TSCUL) {
+ usleep(50*1000);
+ }
}
break;
case DEVICE_TYPE_HMUARTLGW:
out[3] = (msg[CTL] & 0x10) ? 0x01 : 0x00; /* Burst?! */
memcpy(&out[4], &msg[1], msg[0]);
- memset(rdata, 0, sizeof(struct recv_data));
+ memset(rdata->message, 0, sizeof(rdata->message));
+ rdata->message_type = 0;
hmuartlgw_send(dev->hmuartlgw, out, msg[0] + 4, HMUARTLGW_APP);
while (1) {
(rdata.version >> 8) & 0xff,
rdata.version & 0xff);
} else {
- printf("a-culfw\n");
+ if (rdata.is_TSCUL) {
+ culfw_send(dev.culfw, "At1\r\n", 5); // tsculfw: try switch on timestamp protocol
+ printf("tsculfw\n");
+ culfw_flush(dev.culfw);
+ culfw_send(dev.culfw, "ApTiMeStAmP\r\n", 13); // tsculfw: send ping to get credits info
+ pfd = culfw_poll(dev.culfw, 1000);
+ if ((pfd < 0) && errno) {
+ if (errno != ETIMEDOUT) {
+ perror("\n\nhmcfgusb_poll");
+ exit(EXIT_FAILURE);
+ }
+ }
+ if (rdata.credits) { // tsculfw: maximum credits available?
+ fprintf(stderr, "\n\ntsculfw does not report full credits, try again later\n");
+ exit(EXIT_FAILURE);
+ }
+
+ if (kNo > 0) {
+ char keybuf[64] = { 0 };
+ int i;
+
+ printf("Setting AES-key\n");
+ snprintf(keybuf, sizeof(keybuf) - 1, "Ak%02x", kNo - 1);
+
+ for (i = 0; i < 16; i++) {
+ keybuf[4 + (i * 2)] = nibble_to_ascii((key[i] >> 4) & 0xf);
+ keybuf[4 + (i * 2) + 1] = nibble_to_ascii(key[i] & 0xf);
+ }
+ keybuf[4 + (i * 2) ] = '\r';
+ keybuf[4 + (i * 2) + 1] = '\n';
+ culfw_send(dev.culfw, keybuf, strlen(keybuf)); // tsculfw: send ping to get credits info
+ pfd = culfw_poll(dev.culfw, 1000);
+ if ((pfd < 0) && errno) {
+ if (errno != ETIMEDOUT) {
+ perror("\n\nhmcfgusb_poll");
+ exit(EXIT_FAILURE);
+ }
+ }
+ }
+ }
+ else {
+ printf("a-culfw\n");
+ }
}
if (rdata.version < 0x013a) {
hmuartlgw_set_debug(debug);
- dev.hmuartlgw = hmuart_init(uart, parse_hmuartlgw, &rdata);
+ dev.hmuartlgw = hmuart_init(uart, parse_hmuartlgw, &rdata, 1);
if (!dev.hmuartlgw) {
fprintf(stderr, "Can't initialize HM-MOD-UART\n");
exit(EXIT_FAILURE);
dev.type = DEVICE_TYPE_HMUARTLGW;
out[0] = HMUARTLGW_APP_GET_HMID;
- do {
- rdata.uartlgw_state = HMUARTLGW_STATE_GET_HMID;
- hmuartlgw_send(dev.hmuartlgw, out, 1, HMUARTLGW_APP);
- do { hmuartlgw_poll(dev.hmuartlgw, 500); } while (rdata.uartlgw_state != HMUARTLGW_STATE_ACK_APP);
- } while (rdata.status == 0x08);
+ send_wait_hmuartlgw(&dev, &rdata, out, 1, HMUARTLGW_APP, HMUARTLGW_STATE_GET_HMID, HMUARTLGW_STATE_ACK_APP);
out[0] = HMUARTLGW_OS_GET_FIRMWARE;
- do {
- rdata.uartlgw_state = HMUARTLGW_STATE_GET_FIRMWARE;
- hmuartlgw_send(dev.hmuartlgw, out, 1, HMUARTLGW_OS);
- do { hmuartlgw_poll(dev.hmuartlgw, 500); } while (rdata.uartlgw_state != HMUARTLGW_STATE_DONE);
- } while (rdata.status == 0x08);
+ send_wait_hmuartlgw(&dev, &rdata, out, 1, HMUARTLGW_OS, HMUARTLGW_STATE_GET_FIRMWARE, HMUARTLGW_STATE_DONE);
out[0] = HMUARTLGW_OS_GET_CREDITS;
- do {
- rdata.uartlgw_state = HMUARTLGW_STATE_GET_CREDITS;
- hmuartlgw_send(dev.hmuartlgw, out, 1, HMUARTLGW_OS);
- do { hmuartlgw_poll(dev.hmuartlgw, 500); } while (rdata.uartlgw_state != HMUARTLGW_STATE_DONE);
- } while (rdata.status == 0x08);
+ send_wait_hmuartlgw(&dev, &rdata, out, 1, HMUARTLGW_OS, HMUARTLGW_STATE_GET_CREDITS, HMUARTLGW_STATE_DONE);
printf("HM-MOD-UART firmware version: %u.%u.%u, used credits: %u%%\n",
rdata.uartlgw_version[0],
out[1] = (new_hmid >> 16) & 0xff;
out[2] = (new_hmid >> 8) & 0xff;
out[3] = new_hmid & 0xff;
- do {
- rdata.uartlgw_state = HMUARTLGW_STATE_WAIT_APP;
- hmuartlgw_send(dev.hmuartlgw, out, 4, HMUARTLGW_APP);
- do { hmuartlgw_poll(dev.hmuartlgw, 500); } while (rdata.uartlgw_state != HMUARTLGW_STATE_ACK_APP);
- } while (rdata.status == 0x08);
+ send_wait_hmuartlgw(&dev, &rdata, out, 4, HMUARTLGW_APP, HMUARTLGW_STATE_WAIT_APP, HMUARTLGW_STATE_ACK_APP);
my_hmid = new_hmid;
}
out[0] = HMUARTLGW_APP_SET_CURRENT_KEY;
memcpy(&(out[1]), key, 16);
out[17] = kNo;
-
- do {
- rdata.uartlgw_state = HMUARTLGW_STATE_WAIT_APP;
- hmuartlgw_send(dev.hmuartlgw, out, 18, HMUARTLGW_APP);
- do { hmuartlgw_poll(dev.hmuartlgw, 500); } while (rdata.uartlgw_state != HMUARTLGW_STATE_ACK_APP);
- } while (rdata.status == 0x08);
+ send_wait_hmuartlgw(&dev, &rdata, out, 18, HMUARTLGW_APP, HMUARTLGW_STATE_WAIT_APP, HMUARTLGW_STATE_ACK_APP);
memset(out, 0, sizeof(out));
out[0] = HMUARTLGW_APP_SET_OLD_KEY;
memcpy(&(out[1]), key, 16);
out[17] = kNo;
-
- do {
- rdata.uartlgw_state = HMUARTLGW_STATE_WAIT_APP;
- hmuartlgw_send(dev.hmuartlgw, out, 18, HMUARTLGW_APP);
- do { hmuartlgw_poll(dev.hmuartlgw, 500); } while (rdata.uartlgw_state != HMUARTLGW_STATE_ACK_APP);
- } while (rdata.status == 0x08);
+ send_wait_hmuartlgw(&dev, &rdata, out, 18, HMUARTLGW_APP, HMUARTLGW_STATE_WAIT_APP, HMUARTLGW_STATE_ACK_APP);
}
} else {
uint32_t new_hmid = my_hmid;
out[5] = 0x00; /* WakeUp? */
out[6] = 0x00; /* WakeUp? */
- do {
- rdata.uartlgw_state = HMUARTLGW_STATE_WAIT_APP;
- hmuartlgw_send(dev.hmuartlgw, out, 7, HMUARTLGW_APP);
- do { hmuartlgw_poll(dev.hmuartlgw, 500); } while (rdata.uartlgw_state != HMUARTLGW_STATE_ACK_APP);
- } while (rdata.status == 0x08);
+ send_wait_hmuartlgw(&dev, &rdata, out, 7, HMUARTLGW_APP, HMUARTLGW_STATE_WAIT_APP, HMUARTLGW_STATE_ACK_APP);
break;
}
if (serial && !strncmp((char*)&(rdata.message[0x0b]), serial, 10)) {
hmid = SRC(rdata.message);
break;
- } else if (!serial && SRC(rdata.message) == hmid) {
+ } else if (!serial && SRC(rdata.message) == (int)hmid) {
serial = (char*)&(rdata.message[0x0b]);
break;
}
out[5] = 0x00; /* WakeUp? */
out[6] = 0x00; /* WakeUp? */
- do {
- rdata.uartlgw_state = HMUARTLGW_STATE_WAIT_APP;
- hmuartlgw_send(dev.hmuartlgw, out, 7, HMUARTLGW_APP);
- do { hmuartlgw_poll(dev.hmuartlgw, 500); } while (rdata.uartlgw_state != HMUARTLGW_STATE_ACK_APP);
- } while (rdata.status == 0x08);
+ send_wait_hmuartlgw(&dev, &rdata, out, 7, HMUARTLGW_APP, HMUARTLGW_STATE_WAIT_APP, HMUARTLGW_STATE_ACK_APP);
break;
}
if (((pos + payloadlen) - &(fw->fw[block][2])) == len)
ack = 1;
- memset(&rdata, 0, sizeof(rdata));
+ memset(rdata.message, 0, sizeof(rdata.message));
+ rdata.message_type = 0;
memset(out, 0, sizeof(out));