1 //-----------------------------------------------------------------------------
2 // Copyright (C) 2009 Michael Gernoth <michael at gernoth.net>
3 // Copyright (C) 2010 iZsh <izsh at fail0verflow.com>
5 // This code is licensed to you under the terms of the GNU GPL, version 2 or,
6 // at your option, any later version. See the LICENSE.txt file for the text of
8 //-----------------------------------------------------------------------------
9 // Code for communicating with the proxmark3 hardware.
10 //-----------------------------------------------------------------------------
15 #if defined(__linux__) && !defined(NO_UNLINK)
16 #include <unistd.h> // for unlink()
21 #include "util_darwin.h"
22 #include "util_posix.h"
25 // Serial port that we are communicating with the PM3 on.
26 static serial_port sp
= NULL
;
27 static char *serial_port_name
= NULL
;
29 // If TRUE, then there is no active connection to the PM3, and we will drop commands sent.
33 bool run
; // If TRUE, continue running the uart_communication thread
34 bool block_after_ACK
; // if true, block after receiving an ACK package
35 } communication_arg_t
;
37 static communication_arg_t conn
;
38 static pthread_t USB_communication_thread
;
41 static UsbCommand txBuffer
;
42 static bool txBuffer_pending
= false;
43 static pthread_mutex_t txBufferMutex
= PTHREAD_MUTEX_INITIALIZER
;
44 static pthread_cond_t txBufferSig
= PTHREAD_COND_INITIALIZER
;
46 // Used by UsbReceiveCommand as a ring buffer for messages that are yet to be
47 // processed by a command handler (WaitForResponse{,Timeout})
48 static UsbCommand rxBuffer
[CMD_BUFFER_SIZE
];
50 // Points to the next empty position to write to
51 static int cmd_head
= 0;
53 // Points to the position of the last unread command
54 static int cmd_tail
= 0;
56 // to lock rxBuffer operations from different threads
57 static pthread_mutex_t rxBufferMutex
= PTHREAD_MUTEX_INITIALIZER
;
59 // These wrappers are required because it is not possible to access a static
60 // global variable outside of the context of a single file.
62 void SetOffline(bool new_offline
) {
63 offline
= new_offline
;
70 void SendCommand(UsbCommand
*c
) {
72 printf("Sending %04x cmd\n", c
->cmd
);
76 PrintAndLog("Sending bytes to proxmark failed - offline");
80 pthread_mutex_lock(&txBufferMutex
);
82 This causes hangups at times, when the pm3 unit is unresponsive or disconnected. The main console thread is alive,
83 but comm thread just spins here. Not good.../holiman
85 while (txBuffer_pending
) {
86 pthread_cond_wait(&txBufferSig
, &txBufferMutex
); // wait for communication thread to complete sending a previous commmand
90 txBuffer_pending
= true;
91 pthread_cond_signal(&txBufferSig
); // tell communication thread that a new command can be send
93 pthread_mutex_unlock(&txBufferMutex
);
99 * @brief This method should be called when sending a new command to the pm3. In case any old
100 * responses from previous commands are stored in the buffer, a call to this method should clear them.
101 * A better method could have been to have explicit command-ACKS, so we can know which ACK goes to which
102 * operation. Right now we'll just have to live with this.
104 void clearCommandBuffer()
106 //This is a very simple operation
107 pthread_mutex_lock(&rxBufferMutex
);
109 pthread_mutex_unlock(&rxBufferMutex
);
113 * @brief storeCommand stores a USB command in a circular buffer
116 static void storeCommand(UsbCommand
*command
)
118 pthread_mutex_lock(&rxBufferMutex
);
119 if( (cmd_head
+1) % CMD_BUFFER_SIZE
== cmd_tail
)
121 // If these two are equal, we're about to overwrite in the
123 PrintAndLog("WARNING: Command buffer about to overwrite command! This needs to be fixed!");
126 // Store the command at the 'head' location
127 UsbCommand
* destination
= &rxBuffer
[cmd_head
];
128 memcpy(destination
, command
, sizeof(UsbCommand
));
130 cmd_head
= (cmd_head
+1) % CMD_BUFFER_SIZE
; //increment head and wrap
131 pthread_mutex_unlock(&rxBufferMutex
);
136 * @brief getCommand gets a command from an internal circular buffer.
137 * @param response location to write command
138 * @return 1 if response was returned, 0 if nothing has been received
140 static int getCommand(UsbCommand
* response
)
142 pthread_mutex_lock(&rxBufferMutex
);
143 //If head == tail, there's nothing to read, or if we just got initialized
144 if (cmd_head
== cmd_tail
){
145 pthread_mutex_unlock(&rxBufferMutex
);
149 //Pick out the next unread command
150 UsbCommand
* last_unread
= &rxBuffer
[cmd_tail
];
151 memcpy(response
, last_unread
, sizeof(UsbCommand
));
152 //Increment tail - this is a circular buffer, so modulo buffer size
153 cmd_tail
= (cmd_tail
+ 1) % CMD_BUFFER_SIZE
;
155 pthread_mutex_unlock(&rxBufferMutex
);
160 //----------------------------------------------------------------------------------
161 // Entry point into our code: called whenever we received a packet over USB.
162 // Handle debug commands directly, store all other commands in circular buffer.
163 //----------------------------------------------------------------------------------
164 static void UsbCommandReceived(UsbCommand
*UC
)
167 // First check if we are handling a debug message
168 case CMD_DEBUG_PRINT_STRING
: {
169 char s
[USB_CMD_DATA_SIZE
+1];
170 memset(s
, 0x00, sizeof(s
));
171 size_t len
= MIN(UC
->arg
[0],USB_CMD_DATA_SIZE
);
172 memcpy(s
,UC
->d
.asBytes
,len
);
173 PrintAndLog("#db# %s", s
);
177 case CMD_DEBUG_PRINT_INTEGERS
: {
178 PrintAndLog("#db# %08x, %08x, %08x \r\n", UC
->arg
[0], UC
->arg
[1], UC
->arg
[2]);
191 #ifdef __has_attribute
192 #if __has_attribute(force_align_arg_pointer)
193 __attribute__((force_align_arg_pointer
))
196 *uart_communication(void *targ
) {
197 communication_arg_t
*conn
= (communication_arg_t
*)targ
;
200 UsbCommand
*prx
= &rx
;
202 #if defined(__MACH__) && defined(__APPLE__)
203 disableAppNap("Proxmark3 polling UART");
208 bool ACK_received
= false;
209 if (uart_receive(sp
, (uint8_t *)prx
, sizeof(UsbCommand
) - (prx
-&rx
), &rxlen
) && rxlen
) {
211 if (prx
-&rx
< sizeof(UsbCommand
)) {
214 UsbCommandReceived(&rx
);
215 if (rx
.cmd
== CMD_ACK
) {
222 pthread_mutex_lock(&txBufferMutex
);
224 if (conn
->block_after_ACK
) {
225 // if we just received an ACK, wait here until a new command is to be transmitted
227 while (!txBuffer_pending
) {
228 pthread_cond_wait(&txBufferSig
, &txBufferMutex
);
233 if(txBuffer_pending
) {
234 if (!uart_send(sp
, (uint8_t*) &txBuffer
, sizeof(UsbCommand
))) {
235 PrintAndLog("Sending bytes to proxmark failed");
237 txBuffer_pending
= false;
238 pthread_cond_signal(&txBufferSig
); // tell main thread that txBuffer is empty
241 pthread_mutex_unlock(&txBufferMutex
);
244 #if defined(__MACH__) && defined(__APPLE__)
254 * Data transfer from Proxmark to client. This method times out after
255 * ms_timeout milliseconds.
256 * @brief GetFromBigBuf
257 * @param dest Destination address for transfer
258 * @param bytes number of bytes to be transferred
259 * @param start_index offset into Proxmark3 BigBuf[]
260 * @param response struct to copy last command (CMD_ACK) into
261 * @param ms_timeout timeout in milliseconds
262 * @param show_warning display message after 2 seconds
263 * @return true if command was returned, otherwise false
265 bool GetFromBigBuf(uint8_t *dest
, int bytes
, int start_index
, UsbCommand
*response
, size_t ms_timeout
, bool show_warning
)
267 UsbCommand c
= {CMD_DOWNLOAD_RAW_ADC_SAMPLES_125K
, {start_index
, bytes
, 0}};
270 uint64_t start_time
= msclock();
273 if (response
== NULL
) {
277 int bytes_completed
= 0;
279 if (getCommand(response
)) {
280 if (response
->cmd
== CMD_DOWNLOADED_RAW_ADC_SAMPLES_125K
) {
281 int copy_bytes
= MIN(bytes
- bytes_completed
, response
->arg
[1]);
282 memcpy(dest
+ response
->arg
[0], response
->d
.asBytes
, copy_bytes
);
283 bytes_completed
+= copy_bytes
;
284 } else if (response
->cmd
== CMD_ACK
) {
289 if (msclock() - start_time
> ms_timeout
) {
293 if (msclock() - start_time
> 2000 && show_warning
) {
294 PrintAndLog("Waiting for a response from the proxmark...");
295 PrintAndLog("You can cancel this operation by pressing the pm3 button");
296 show_warning
= false;
304 bool GetFromFpgaRAM(uint8_t *dest
, int bytes
)
306 UsbCommand c
= {CMD_HF_PLOT
, {0, 0, 0}};
309 uint64_t start_time
= msclock();
313 int bytes_completed
= 0;
314 bool show_warning
= true;
316 if (getCommand(&response
)) {
317 if (response
.cmd
== CMD_DOWNLOADED_RAW_ADC_SAMPLES_125K
) {
318 int copy_bytes
= MIN(bytes
- bytes_completed
, response
.arg
[1]);
319 memcpy(dest
+ response
.arg
[0], response
.d
.asBytes
, copy_bytes
);
320 bytes_completed
+= copy_bytes
;
321 } else if (response
.cmd
== CMD_ACK
) {
326 if (msclock() - start_time
> 2000 && show_warning
) {
327 PrintAndLog("Waiting for a response from the proxmark...");
328 PrintAndLog("You can cancel this operation by pressing the pm3 button");
329 show_warning
= false;
337 bool OpenProxmark(void *port
, bool wait_for_port
, int timeout
, bool flash_mode
) {
338 char *portname
= (char *)port
;
339 if (!wait_for_port
) {
340 sp
= uart_open(portname
);
342 printf("Waiting for Proxmark to appear on %s ", portname
);
346 sp
= uart_open(portname
);
350 } while(++openCount
< timeout
&& (sp
== INVALID_SERIAL_PORT
|| sp
== CLAIMED_SERIAL_PORT
));
354 // check result of uart opening
355 if (sp
== INVALID_SERIAL_PORT
) {
356 printf("ERROR: invalid serial port\n");
358 serial_port_name
= NULL
;
360 } else if (sp
== CLAIMED_SERIAL_PORT
) {
361 printf("ERROR: serial port is claimed by another process\n");
363 serial_port_name
= NULL
;
366 // start the USB communication thread
367 serial_port_name
= portname
;
369 conn
.block_after_ACK
= flash_mode
;
370 pthread_create(&USB_communication_thread
, NULL
, &uart_communication
, &conn
);
376 void CloseProxmark(void) {
380 // In Android O and later, if an invalid pthread_t is passed to pthread_join, it calls fatal().
381 // https://github.com/aosp-mirror/platform_bionic/blob/ed16b344e75f422fb36fbfd91fb30de339475880/libc/bionic/pthread_internal.cpp#L116-L128
383 // In Bionic libc, pthread_t is an integer.
385 if (USB_communication_thread
!= 0) {
386 pthread_join(USB_communication_thread
, NULL
);
389 // pthread_t is a struct on other libc, treat as an opaque memory reference
390 pthread_join(USB_communication_thread
, NULL
);
397 #if defined(__linux__) && !defined(NO_UNLINK)
398 // Fix for linux, it seems that it is extremely slow to release the serial port file descriptor /dev/*
400 // This may be disabled at compile-time with -DNO_UNLINK (used for a JNI-based serial port on Android).
401 if (serial_port_name
) {
402 unlink(serial_port_name
);
406 // Clean up our state
408 serial_port_name
= NULL
;
410 memset(&USB_communication_thread
, 0, sizeof(pthread_t
));
416 * Waits for a certain response type. This method waits for a maximum of
417 * ms_timeout milliseconds for a specified response command.
418 *@brief WaitForResponseTimeout
419 * @param cmd command to wait for, or CMD_UNKNOWN to take any command.
420 * @param response struct to copy received command into.
422 * @param show_warning display message after 2 seconds
423 * @return true if command was returned, otherwise false
425 bool WaitForResponseTimeoutW(uint32_t cmd
, UsbCommand
* response
, size_t ms_timeout
, bool show_warning
) {
430 printf("Waiting for %04x cmd\n", cmd
);
433 if (response
== NULL
) {
437 uint64_t start_time
= msclock();
439 // Wait until the command is received
441 while(getCommand(response
)) {
442 if (cmd
== CMD_UNKNOWN
|| response
->cmd
== cmd
) {
447 if (msclock() - start_time
> ms_timeout
) {
451 if (msclock() - start_time
> 2000 && show_warning
) {
452 // 2 seconds elapsed (but this doesn't mean the timeout was exceeded)
453 PrintAndLog("Waiting for a response from the proxmark...");
454 PrintAndLog("You can cancel this operation by pressing the pm3 button");
455 show_warning
= false;
462 bool WaitForResponseTimeout(uint32_t cmd
, UsbCommand
* response
, size_t ms_timeout
) {
463 return WaitForResponseTimeoutW(cmd
, response
, ms_timeout
, true);
466 bool WaitForResponse(uint32_t cmd
, UsbCommand
* response
) {
467 return WaitForResponseTimeoutW(cmd
, response
, -1, true);