- baseband-devel - lists.osmocom.org

Searching for a studendt WAS( ANN: osmo-pcap a PCAP Client and Server application)
by Holger Hans Peter Freyther 07 Jun '11

07 Jun '11

On 06/03/2011 04:32 PM, Holger Hans Peter Freyther wrote: Hi all, I would like to get more students involved and would be interested in acting as a mentor. For the below osmo-pcap codebase I have a set of bite sized tasks (of different size) and it would be great if we could get some students to pick some of these. The only requirement should be interest to learn to program in C, some self motivation (e.g. use your favorite search engine before asking) but besides that the skills are not that important. cheers holger > Hi, > > I wrote a very primitive client and server for PCAP. The osmo_pcap_client will > use libpcap to sniff on a local link, we have the usual VTY interface to > configure it, one can change the filter and the device at runtime. > > There is also a very simple server that authenticates clients based on the > remote address, that will write the pcap files to disk. The files will be > rotated based on time and size, but also when the Link Header of a client is > changing. The traffic is not encrypted yet but that is on the todolist. > > The code can be found in our git repository[1]. > > holger > > [1] http://cgit.osmocom.org/cgit/osmo-pcap/ >

3 2

Invitation
by weberbe＠ee.ethz.ch 05 Jun '11

05 Jun '11

Hi list First of all: Thanks to all of you who actively develop OsmocomBB. Second: In the past few months I worked on an interface between a GSM transceiver and ABB towards the mobile application from OsmocomBB. The findings will be presented Tuesday, May 31, 1.55 pm in ETZ J64 at ETH in Zurich (Gloriastrasse 35, 8092 Zürich). You are all invited. The goal of this project was to understand the GSM protocol flow better in order to be able to extend the hardware towards higher layers. To this end, the mobile application (L2 and L3) was used. Benjamin

4 7

Dialling in roaming
by Bogdan Alecu 05 Jun '11

05 Jun '11

Hello, I've noticed during some tests made with a SIM in roaming that when I called myself I see my local number showed instead of the E.164 format number. In Wireshark I see that the numbering plan is set to unknown in this case (but this happens only when I select a specific operator). I started then to dial local numbers (while in roaming) and I could call any local number, from any network, without having to use the country code. Is this something that operators do? Cheers, Bogdan

2 2

Testing protocol stack with OsmocomBB (cheap way)
by Drasko DRASKOVIC 05 Jun '11

05 Jun '11

Hi all, going through the documentation, I am trying to figure out what would be the best way to have whole protocol stack communication with OsmocomBB. Now, I understand that osmocon can be used to load layer1 into phones RAM, so that this code turns on Calypso and communicate with DSP with AT commands. Then osmocon gets messages from layer1 via RS232 and can distribute them to the mobile application, which sends them to layer23 for further processing or via GSM tap to Wireshark or outputs them on stdout. What I am most interested in how do we insert pacgaes on the other side of the stack, i.e. via telephone air interface (packets that will traverse through Rita, Iota, Calypso down to stdout of host). From what I understand we need some kind of BTS, and I can see that GNU Radio is used for this purpose. But for this, as I understand USPRP (http://en.wikipedia.org/wiki/Universal_Software_Radio_Peripheral) FPGA motherboard with both RX and TX doughterboards is needed, which can go up to 1k eur (too expensive for a hobbist). I was wondering so, what is the best and the cheapest way to inject packets at the protocol stack on the phone and analyze some packet flow later with Wireshark - i.e. to get some usage of the OsmocomBB and to see how it works. At this point I can only run Hello World application, or "mobile" app without any usage (or I do not know how to use it). What would be the best way to start playing around without spending too much money. Speaking of this, what would be the price of the cheapest existing packet generator that can transmit them via Um (i.e. what is the price of the cheapest BTS)? Is there some open source FPGA that can be used for this purpose? Thanks for your explanations and best regards, Drasko

5 17

SIM related question
by Drasko DRASKOVIC 04 Jun '11

04 Jun '11

Hi all, after loading L1 to RAM and starting mobile app, "show cell" is giving me : OsmocomBB# show cell 1 arfcn |MCC |MNC |LAC |cell ID|forb.LA|prio |min-db |max-pwr|rx-lev -------+-------+-------+-------+-------+-------+-------+-------+-------+------- and OsmocomBB# network search 1 logs : <0002> gsm322.c:3099 (ms 1) Event 'EVENT_USER_RESEL' for automatic PLMN selection in state 'A6 no SIM inserted' <0002> gsm322.c:3106 Event unhandled at this state. I have inserted SIM in the phone, and I know that SIM controller driver is not functional on the master branch. However, is there something that can be done even in this state to have some packet logging in Wireshark ? I.e. do we need SIM for any communication over Um. I guess not, and I want to start at this state, and observe some packets that are traversing the stack for educational reasons. Can somebody point me how this can be done (with current master and no SIM functional). Best regards, Drasko

2 1

Cygwin Windows --> Accessing serial port.
by R M 04 Jun '11

04 Jun '11

Hi, I am trying out osmocombb code in dell laptop running windows 7. It does't contain serial ports. I am using a USB to serial converter instead. How can I access the usb port to which the USB to serial converter is attached in cygwin ? Can someone who has done this, help me in this ? Regards, RM

3 2

Memeories present in a mobile phone
by R M 04 Jun '11

04 Jun '11

Hi, What sort of memories does a mobile phone have ? Do they have something like Flash, ROM and RAM or only Flash memory? Regards, RM

2 2

Interested to join the project
by pramod krishna 04 Jun '11

04 Jun '11

HI This is pramod. I am currently working with mobile platforms. How can i contribute to your project or start working with your project. -- Pramod Be happy

3 3

Participating in osmocombb development
by Sam 04 Jun '11

04 Jun '11

Hi, I would like to participate in the development of osmocomBB. I am communication engineer with good knowledge in EDGE/GPRS. With regards, Sam

3 2

gsm850 and host/layer23/src/mobile
by Joshua Lackey 03 Jun '11

03 Jun '11

I'm having issues getting the mobile application to work and I'm wondering if this is a gsm850 problem. I have a couple of debugging ideas but I thought I would post here just in case the answer is obvious to someone else. I'm testing on both a c118 and a c139. I'm using the remotes/origin/sylvain/testing branch and this does have quadband support. I've edited target/firmware/Makefile and defined CONFIG_TX_ENABLE. I have a valid SIM in my phone that works with both phones using the default Motorola firmware. The 'sim reader 1' command is able to gather (most of) the necessary information. (The access class is not correctly read from the SIM but I haven't bothered tracking down why yet -- I just hardcoded an access class of 0xffff.) The mobile program correctly scans the frequency ranges and finds a good tower and then attempts to do a location update. It generates a RACH channel request and then (appears to) send it. The problem is that the phone never receives an immediate assignment response. The log shows multiple immediate assignments received, but none match the request reference (RA and FN the burst was sent in.) So it appears that the tower never receives the channel request I send. The only test I have done so far is to monitor the uplink frequency with a USRP (uhd_fft.py) during the location update procedure. It looks like the phone is actually transmitting at the correct times, but I am not positive. (I'd have to write some custom code before I can definitively say one way or the other.) The only other idea I have right now is that perhaps the timing advance calculation is incorrect. There are a couple of constants used without any explanation and I guess it is possible that these constants don't work for my configuration. I'm going to start going through these constants to determine if I can find a value that works. Any other ideas to try here? Anyone else gotten this to work in the US?

2 3

Does any one know where can we get the old Motorola devices in bangalore(India).
by nagesh reddy 03 Jun '11

03 Jun '11

Hi All, i also wanted to contribute to this Project and already i had downloaded the source and started looking into the code. i want to test it on some device but i am not able to get the motorola devices here in India , bangalore. if anyone can help me in getting these devices it will be helpfull. regards, nageswara reddy.

1 0

First OsmocomBB Connection Tests (Unsuccessful)
by Drasko DRASKOVIC 02 Jun '11

02 Jun '11

Hi all, I am trying to have some OsmocomBB communication and my procedure is following : 1) I start osmocon with layer1 sw : ./osmocon -p /dev/ttyUSB1 -m c123xor ../../target/firmware/board/compal_e88/layer1.compalram.bin It now waits for power on button from the phone 2) In the other terminal I start mobile application : ./mobile -i 127.0.0.1 Copyright (C) 2008-2010 ... Contributions by ... License GPLv2+: GNU GPL version 2 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. VTY available on port 4247. No Mobile Station defined, creating: MS '1' <000e> sim.c:1206 init SIM client <0005> gsm48_cc.c:61 init Call Control <0001> gsm48_rr.c:4944 init Radio Ressource process <0004> gsm48_mm.c:1220 init Mobility Management process <0004> gsm48_mm.c:971 Selecting PLMN SEARCH state, because no SIM. <0002> gsm322.c:3472 init PLMN process <0003> gsm322.c:3473 init Cell Selection process Mobile '1' initialized, please start phone now! 3) Now I press a "power-on" button on the phone and I have logs comming out on the both terminals. I guess that MS is doing various cell power measurements and trying to discass with near-by cells over controle channels. However, in ./osmocon terminal it finishes like this : $ ./osmocon -p /dev/ttyUSB1 -m c123xor ../../target/firmware/board/compal_e88/layer1.compalram.bin got 1 bytes from modem, data looks like: 00 . got 1 bytes from modem, data looks like: 00 . got 1 bytes from modem, data looks like: 81 . got 4 bytes from modem, data looks like: 1b f6 02 00 .... got 1 bytes from modem, data looks like: 41 A got 1 bytes from modem, data looks like: 01 . got 1 bytes from modem, data looks like: 40 @ Received PROMPT1 from phone, responding with CMD read_file(../../target/firmware/board/compal_e88/layer1.compalram.bin): file_size=47700, hdr_len=4, dnload_len=47707 got 1 bytes from modem, data looks like: 1b . got 1 bytes from modem, data looks like: f6 . got 1 bytes from modem, data looks like: 02 . got 1 bytes from modem, data looks like: 00 . got 1 bytes from modem, data looks like: 41 A got 1 bytes from modem, data looks like: 02 . got 1 bytes from modem, data looks like: 43 C Received PROMPT2 from phone, starting download handle_write(): 1023 bytes (1023/47707) handle_write(): 768 bytes (1791/47707) handle_write(): 768 bytes (2559/47707) handle_write(): 768 bytes (3327/47707) ... handle_write(): 768 bytes (44031/47707) handle_write(): 768 bytes (44799/47707) handle_write(): 768 bytes (45567/47707) handle_write(): 768 bytes (46335/47707) handle_write(): 768 bytes (47103/47707) handle_write(): 604 bytes (47707/47707) handle_write(): finished got 1 bytes from modem, data looks like: 1b . got 1 bytes from modem, data looks like: f6 . got 1 bytes from modem, data looks like: 02 . got 1 bytes from modem, data looks like: 00 . got 1 bytes from modem, data looks like: 41 A got 1 bytes from modem, data looks like: 03 . got 1 bytes from modem, data looks like: 42 B Received DOWNLOAD ACK from phone, your code is running now! OSMOCOM Layer 1 (revision osmocon_v0.0.0-884-gd76345a) ====================================================================== Device ID code: 0xb4fb Device Version code: 0x0000 ARM ID code: 0xfff3 cDSP ID code: 0x0128 Die ID code: 2c903414df039b3f ====================================================================== REG_DPLL=0x2413 CNTL_ARM_CLK=0xf0a1 CNTL_CLK=0xff91 CNTL_RST=0xfff3 CNTL_ARM_DIV=0xfff9 ====================================================================== THIS FIRMWARE WAS COMPILED WITHOUT TX SUPPORT!!! Assert DSP into Reset Releasing DSP from Reset Setting some dsp_api.ndb values Setting API NDB parameters DSP Download Status: 0x0001 DSP API Version: 0x0000 0x0000 Finishing download phase DSP Download Status: 0x0002 DSP API Version: 0x3606 0x0000 LOST 1201! L1CTL_RESET_REQ: FULL!L1CTL_PM_REQ start=0 end=124 PM MEAS: ARFCN=0, 32 dBm at baseband, -105 dBm at RF PM MEAS: ARFCN=0, 32 dBm at baseband, -105 dBm at RF ... PM MEAS: ARFCN=98, 36 dBm at baseband, -101 dBm at RF PM MEAS: ARFCN=99, 39 dBm at baseband, -98 dBm at RF PM MEAS: ARFCN=100, 31 dBm at baseband, -106 dBm at RF PM MEAS: ARFCN=101, 30 dBm at baseband, -107 dBm at RF PM MEAS: ARFCN=110, 36 dBm at baseband, -101 dBm at RF PM MEAS: ARFCN=111, 34 dBm at baseband, -103 dBm at RF PM MEAS: ARFCN=112, 31 dBm at baseband, -107 dBm at RF PM MEAS: ARFCN=113, 33 dBm at baseband, -104 dBm at RF ... L1CTL_PM_REQ start=955 end=1023 PM MEAS: ARFCN=955, 26 dBm at baseband, -111 dBm at RF PM MEAS: ARFCN=955, 26 dBm at baseband, -111 dBm at RF PM MEAS: ARFCN=956, 27 dBm at baseband, -110 dBm at RF PM MEAS: ARFCN=957, 26 dBm at baseband, -111 dBm at RF PM MEAS: ARFCN=958, 27 dBm at baseband, -110 dBm at RF PM MEAS: ARFCN=959, 25 dBm at baseband, -112 dBm at RF ... PM MEAS: ARFCN=1020, 37 dBm at baseband, -100 dBm at RF PM MEAS: ARFCN=1021, 41 dBm at baseband, -96 dBm at RF PM MEAS: ARFCN=1022, 31 dBm at baseband, -106 dBm at RF PM MEAS: ARFCN=1023, 42 dBm at baseband, -95 dBm at RF L1CTL_RESET_REQ: FULL!L1CTL_FBSB_REQ (arfcn=121, flags=0x7) Starting FCCH RecognitionFB0 (1735:8): TOA= 9600, Power= -52dBm, Angle= 1218Hz FB1 (1745:8): TOA= 9563, Power= -52dBm, Angle= 174Hz fn_offset=1744 (fn=1745 + attempt=8 + ntdma = 7)m delay=9 (fn_offset=1744 + 11 - fn=1745 - 1 scheduling next FB/SB detection task with delay 9 =>FB @ FNR 1744 fn_offset=1744 qbits=3068 Synchronize_TDMA LOST 3054! What would this LOST 3054! say ? It does not sound good anyway, but at this point I am not skilled enough to read OsmocomBB logs. On the other side, in the ./mobile terminal I have something like this : <0002> gsm322.c:3099 (ms 1) Event 'EVENT_SWITCH_ON' for automatic PLMN selection in state 'A0 null' <000d> gsm322.c:1056 SIM is removed <0002> gsm322.c:1057 SIM is removed <0002> gsm322.c:512 new state 'A0 null' -> 'A6 no SIM inserted' <0003> gsm322.c:3319 (ms 1) Event 'EVENT_SWITCH_ON' for Cell selection in state 'C0 null' <0003> gsm322.c:2992 Switch on without SIM. <0003> gsm322.c:541 new state 'C0 null' -> 'C6 any cell selection' <0003> gsm322.c:2405 Getting PM for frequency 0 twice. Overwriting the first! Please fix prim_pm.c <0003> gsm322.c:2416 Found signal (frequency 2 rxlev -105 (5)) <0003> gsm322.c:2416 Found signal (frequency 3 rxlev -106 (4)) <0003> gsm322.c:2416 Found signal (frequency 4 rxlev -86 (24)) <0003> gsm322.c:2416 Found signal (frequency 5 rxlev -68 (42)) <0003> gsm322.c:2416 Found signal (frequency 6 rxlev -86 (24)) ... <0003> gsm322.c:2405 Getting PM for frequency 512 twice. Overwriting the first! Please fix prim_pm.c <0003> gsm322.c:2416 Found signal (frequency 512 rxlev -93 (17)) <0003> gsm322.c:2416 Found signal (frequency 516 rxlev -90 (20)) ... <0003> gsm322.c:2416 Found signal (frequency 1023 rxlev -95 (15)) <0003> gsm322.c:2349 Found 201 frequencies. <0003> gsm322.c:258 Sync to ARFCN=121 rxlev=-54 (No sysinfo yet, ccch mode NONE) <0002> gsm322.c:3099 (ms 1) Event 'EVENT_USER_RESEL' for automatic PLMN selection in state 'A6 no SIM inserted' Can somebody explain me what the hell is happening here ? I am watching all these nice Harald's presentations, like one here : http://www.youtube.com/watch?v=H7rNKZdASBE, but I am not obtaining list of cells like presented to which I can synchronize to. Actually, show cell is giving me : OsmocomBB> show cell 1 arfcn |MCC |MNC |LAC |cell ID|forb.LA|prio |min-db |max-pwr|rx-lev -------+-------+-------+-------+-------+-------+-------+-------+-------+------- OsmocomBB> As you can see, I am pretty much lost here and I would highly appreciate helping hand. Thanks and best regards, Drasko

3 7

[PATCH 1/2] mtk: uart: remove forgotten calypso-include
by Wolfram Sang 30 May '11

30 May '11

Dunno how that survived... Signed-off-by: Wolfram Sang <wolfram(a)the-dreams.de> --- src/target/firmware/board/mediatek/uart.c | 2 -- 1 files changed, 0 insertions(+), 2 deletions(-) diff --git a/src/target/firmware/board/mediatek/uart.c b/src/target/firmware/board/mediatek/uart.c index ff82245..8e86b20 100644 --- a/src/target/firmware/board/mediatek/uart.c +++ b/src/target/firmware/board/mediatek/uart.c @@ -36,8 +36,6 @@ #include <comm/sercomm.h> -#include <calypso/irq.h> - /* MT622x */ #if 0 #define BASE_ADDR_UART1 0x80130000 -- 1.7.2.5

2 3

Re: target/firmware/board/compal_e88/loader.compalram.bin T191 cable out of order
by Uli Kleemann 30 May '11

30 May '11

Hi Konrad, sorry for that but anyway thanks for your advice with the software. Which software would you like to recommend to fix that? Regards, -- Uli Kleemann

1 0

mobile crashes
by weberbe＠ee.ethz.ch 29 May '11

29 May '11

Hi guys I just run into a problem and was wondering whether anybody has experienced the same: When I start mobile with GSMTAB support (./mobile -i localhost) it crashes immediately after the first GSMTAB packet was sent. Any ideas or remedies? I compiled the current master branch and am using Ubuntu 11.04 Ben

4 6

Nokia 3310 tracing
by Duncan Salerno 28 May '11

28 May '11

Hi, I've put together a small program that puts Nokia 3310 phones into debug mode (via serial/USB cable) and forwards all sent/received GSM messages and SIM APDUs via GSMTAP to be viewed realtime in Wireshark. This allows you to see the message flows for a real phone on a real network. Nokia 3310's are very cheap and easy to come by, so should appeal to a wide audience. Thought osmocom might be a good home for this utility - could it go into git, and a short page on bb.osmocom.org? Duncan

2 2

hmm, sorry, data cable question
by labad jala 27 May '11

27 May '11

Hello techies! I am new to the list and I acquired a c139. I'd like to buy a rs232/jack 2,5mm named t191 flash (and not unlock) cable. They look 100% the same (even stickers). Is this important? I understand that I have also to use a rs232/usb adapter. The one I have (U232P9 with link/tx/rx leds) gives +/-9,4 v. So my concern is to not fry the Moto..Any advise welcome. Cheers.

8 10

Infineon PMB 6277 Chip
by Axel Walsleben 26 May '11

26 May '11

hi list, does anybody knew a device that uses an Infineon PMB 6277 chip ? it is a quad band rf edge receiver chip. i got a full datasheet for it. ;) thanks axel

2 1

Re: osmocon compal_e88/loader.compalram.bin
by Uli Kleemann 25 May '11

25 May '11

I took out the battery and I got that: got 2 bytes from modem, data looks like: 3c 00 <. got 1 bytes from modem, data looks like: 00 . got 1 bytes from modem, data looks like: 00 . got 1 bytes from modem, data looks like: 00 . got 1 bytes from modem, data looks like: 00 . got 1 bytes from modem, data looks like: 00 . got 1 bytes from modem, data looks like: 00 . So I took out the SIM Card, too but nothing changed. 2011/5/25, eisencah eisenach <wbg_1000(a)yahoo.com>: > Try taking out the battery too. > > --- On Wed, 5/25/11, Uli Kleemann <uli.radiotux(a)googlemail.com> wrote: > > From: Uli Kleemann <uli.radiotux(a)googlemail.com> > Subject: Re: osmocon compal_e88/loader.compalram.bin > To: "Gianni Tedesco" <gianni(a)scaramanga.co.uk> > Cc: baseband-devel(a)lists.osmocom.org > Date: Wednesday, May 25, 2011, 7:48 PM > > Hi Gianni, > > Many thanks for your answer. Yes I did press the power button several > times, shortly. > > All I got all I still get is this: > > /install/osmocom-bb/src/host/osmocon$ ./osmocon -p /dev/ttyUSB0 -m > c123xor ../../target/firmware/board/compal_e88/loader.compalram.bin > got 2 bytes from modem, data looks like: fe 00 .. > got 1 bytes from modem, data looks like: 00 . > got 1 bytes from modem, data looks like: 00 . > got 1 bytes from modem, data looks like: 00 . > got 1 bytes from modem, data looks like: 00 . > got 1 bytes from modem, data looks like: 00 . > got 1 bytes from modem, data looks like: 00 . > got 1 bytes from modem, data looks like: 00 . > got 1 bytes from modem, data looks like: 00 . > got 1 bytes from modem, data looks like: 00 . > got 1 bytes from modem, data looks like: 00 . > got 1 bytes from modem, data looks like: 00 . > got 1 bytes from modem, data looks like: 00 . > got 1 bytes from modem, data looks like: 00 . > got 1 bytes from modem, data looks like: 00 . > got 1 bytes from modem, data looks like: 00 . > got 1 bytes from modem, data looks like: 00 . > got 1 bytes from modem, data looks like: 00 . > got 1 bytes from modem, data looks like: 00 . > got 1 bytes from modem, data looks like: 00 . > got 1 bytes from modem, data looks like: 00 . > got 1 bytes from modem, data looks like: 00 . > got 1 bytes from modem, data looks like: 00 . > got 1 bytes from modem, data looks like: 00 . > got 1 bytes from modem, data looks like: 00 . > got 1 bytes from modem, data looks like: 00 . > got 1 bytes from modem, data looks like: 00 . > got 1 bytes from modem, data looks like: 00 . > got 1 bytes from modem, data looks like: 00 . > got 1 bytes from modem, data looks like: 00 . > got 1 bytes from modem, data looks like: 00 . > > Regards, > > Uli > > 2011/5/24, Gianni Tedesco <gianni(a)scaramanga.co.uk>: >> On Mon, 2011-05-23 at 13:43 +0200, Uli Kleemann wrote: >>> Hi fellows, >>> >>> I am new at osmocon and I would like to ask fpr some help about >>> flashing the firmware on my C118. >>> >>> I build the software as described on Ubuntu11.0.4 using gnuarm-3.4.3. >>> I use the Motorola T191 serial-cable on an Prolific Technology, Inc. >>> PL2303 Serial Port USB-Serial adapter. (module USB-serial is loaded) >>> >>> when I startosmocon like this: >>> ./osmocon -p /dev/ttyUSB0 -m c123xor >>> ../../target/firmware/board/compal_e88/loader.compalram.bin >>> >>> all I get is that: >>> >>> got 2 bytes from modem, data looks like: fe 00 .. >>> got 1 bytes from modem, data looks like: 00 . >>> got 1 bytes from modem, data looks like: 00 . >>> got 1 bytes from modem, data looks like: 00 . >>> got 1 bytes from modem, data looks like: 00 . >>> got 1 bytes from modem, data looks like: 00 . >>> got 1 bytes from modem, data looks like: 00 . >> >> Just looks like noise from plugging the cable in to the phone. >> >>> Can anybody give me an advice how to fix that? >> >> Did you press the power button on the phone? Just a quick tap is >> required, not a long press like you would normally do to turn it on. >> >> Gianni >> >> > > > -- > Uli Kleemann > > -- Uli Kleemann

2 1

osmocon compal_e88/loader.compalram.bin
by Uli Kleemann 25 May '11

25 May '11

Hi fellows, I am new at osmocon and I would like to ask fpr some help about flashing the firmware on my C118. I build the software as described on Ubuntu11.0.4 using gnuarm-3.4.3. I use the Motorola T191 serial-cable on an Prolific Technology, Inc. PL2303 Serial Port USB-Serial adapter. (module USB-serial is loaded) when I startosmocon like this: ./osmocon -p /dev/ttyUSB0 -m c123xor ../../target/firmware/board/compal_e88/loader.compalram.bin all I get is that: got 2 bytes from modem, data looks like: fe 00 .. got 1 bytes from modem, data looks like: 00 . got 1 bytes from modem, data looks like: 00 . got 1 bytes from modem, data looks like: 00 . got 1 bytes from modem, data looks like: 00 . got 1 bytes from modem, data looks like: 00 . got 1 bytes from modem, data looks like: 00 . Can anybody give me an advice how to fix that? Thanks in advance Uli -- Uli Kleemann

2 2

Re: Nuttx for Calypso
by Gregory Nutt 25 May '11

25 May '11

Hi, Let me volunteer suggestions to at some of your questions. > Also (unrelated to the patch), somethings that I think should be > discussed/addressed soon are: > > - How we will handle the boards in nuttx (including variants like > US/EU version of the same phone) Nuttx is designed to support a hiearchical configuration: processor family, chips in the family, boards that host the chips, and board software configurations. NuttX is configured with .config file. In that file you specify the family (ARM), the chip (Calypso), and the board (also Calypso now?). The family corresponds to a directory under arch/ (arch/arm) and the chip corresponds to sub-directories under arch/arm/src and arch/arm/include (arch/arm/src/calypso and arch/arm/include/calypso). * arch/arm/include holds general ARM header files * arch/arm/include/calypso holds calypso specific header files * arch/arm/src/calypso holds calypso specific source files Boards are represented by directories under configs/. Right now, I think there is only a configs/compal_e99. * configs/compal_e99/include holds Compal E99 specific header files * configs/compal_e99/src holds Compal E99 specific header files Other directories under configs/compal_e99 can hold different software configurations for the same board. For example, configs/compal_e99/ostest holds the make logic for the OS test; configs/compal_e99/nsh would hold the NuttShell (NSH) make configuration files, etc. The .config file, for example, is on of the software configuration files in those directories (it is call defconfig before it is copied to the top-level directory as .config). You can see these settings in the .config/defconfig file: CONFIG_ARCH=arm >CONFIG_ARCH_ARM=y >CONFIG_ARCH_ARM7TDMI=y >CONFIG_ARCH_CHIP=calypso >CONFIG_ARCH_CHIP_CALYPSO=y >CONFIG_ARCH_BOARD=compal_e99 >CONFIG_ARCH_BOARD_COMPALE99=y When the OS is configured, the top-level Makefile uses these definitions to create symbolic links: * arch/arm/src/chip will refer to arch/arm/src/calypso * arch/arm/include/chip will refer to arch/arm/include/calypso * arch/arm/include/board will refer to configs/compal_e99/include * arch/arm/src/board will refer to configs/compal_e99/src. And * include/arch will refer to to arch/arm/include So you can include ARM general header, calypso-specific, and board-specific header files like: #include <arch/arch.h> // architecture (ARM) specific header files >#include <arch/chip/chip.h> // Chip (calypso) specific header files >#include <arch/board/board.h> // Board specific header files So, if you want to support the same processor (calypso) on a different board, say boardX, you could create a directory: configs/boardX And put boardX specific header files and source files in: configs/boardX/include >configs/boardX/src And put boardX software configurations under config/boardX/configY > - How we will handle our different ram config (boot from ram / flash), > can we use the loader to load part of the SDRAM if we don't fit in > SRAM completely ? I would think that these would correspond to different software build configuration directories under configs/BoardX. You also ask several memory related questions that I can't really answer. I think there may be some additional memory management requirements here: > - How we will handle the memory zones (SRAM / SDRAM / Flash / XIP from > flash (or just .rodata ?)) > - Memory allocator (handling zones ...). I think that'd be something > very useful. Currently we can only allocate msgb and that's a little > limiting. Right now, the memory allocator can handle multiple, discontinuous regions of memory. There is an interface called mm_addregion() that can always add a new block of memory to the memory pool. But there is mechanism now to select which region memory will be allocated from. malloc() is the only allocator for user programs. It will allocate memory only from the best fitting free memory chunk, but does not take into account any properties of the memory. Greg

4 8

[PATCH 4/4] Initial support for Nuttx on TI Calypso platform
by l--putt 24 May '11

24 May '11

1 0

[PATCH 3/4] Initial support for Nuttx on TI Calypso platform
by l--putt 24 May '11

24 May '11

1 0

[PATCH 2/4] Initial support for Nuttx on TI Calypso platform
by l--putt 24 May '11

24 May '11

1 0

[PATCH 1/4] Initial support for Nuttx on TI Calypso platform
by l--putt 24 May '11

24 May '11

1 0

re : hmmm, data cable question
by labad jala 24 May '11

24 May '11

Thanks again. I measured 4v using a USB/RS232 (U232-P9) adapatator attached to a laptop and also a desktop + "T191" that looks exactly like http://www.cellcorner.com/xshp/unlock-phone-codes/motorola-t190-t191-t193-u….<http://www.cellcorner.com/xshp/unlock-phone-codes/motorola-t190-t191-t193-u…>Please, did someone buy this one and had good voltage and results? Regards.

2 1

[PATCH 4/4] Initial support for Nuttx on TI Calypso platform: Memory initialization Switch lights in ostest example
by Stefan Richter 24 May '11

24 May '11

Now, nuttx.bin should build and run on your phone. No console output yet but turns on backlight of compal E99 and off when ostest has finished. --- apps/examples/ostest/main.c | 50 ++++++++++++++++++ nuttx/arch/arm/src/calypso/calypso_heap.c | 81 +++++++++++++++++++++++++++++ nuttx/arch/arm/src/common/up_internal.h | 3 +- 3 files changed, 133 insertions(+), 1 deletions(-) create mode 100644 nuttx/arch/arm/src/calypso/calypso_heap.c diff --git a/apps/examples/ostest/main.c b/apps/examples/ostest/main.c index 327ec60..641c3c9 100644 --- a/apps/examples/ostest/main.c +++ b/apps/examples/ostest/main.c @@ -33,6 +33,53 @@ * ****************************************************************************/ +/* + * Debug stuff for Compal E99 + * taken from Osmocom-BB init.c + * + * Turn on backlight on entry and off when done + */ + +#include <stdint.h> +#include <arch/calypso/memory.h> + +#define ARMIO_LATCH_OUT 0xfffe4802 +#define IO_CNTL_REG 0xfffe4804 +#define ASIC_CONF_REG 0xfffef008 + +static void lights_on(void) +{ + uint16_t reg; + + reg = readw(ASIC_CONF_REG); + /* LCD Set I/O(3) / SA0 to I/O(3) mode */ + reg &= ~( (1 << 12) | (1 << 10) | (1 << 7) | (1 << 1)) ; + /* don't set function pins to I2C Mode, C155 uses UWire */ + /* TWL3025: Set SPI+RIF RX clock to rising edge */ + reg |= (1 << 13) | (1 << 14); + writew(reg, ASIC_CONF_REG); + + /* LCD Set I/O(3) to output mode and enable C155 backlight (IO1) */ + /* FIXME: Put the display backlight control to backlight.c */ + reg = readw(IO_CNTL_REG); + reg &= ~( (1 << 3) | (1 << 1)); + writew(reg, IO_CNTL_REG); + + /* LCD Set I/O(3) output low */ + reg = readw(ARMIO_LATCH_OUT); + reg &= ~(1 << 3); + reg |= (1 << 1); + writew(reg, ARMIO_LATCH_OUT); +} + +static void lights_off(void) +{ + uint16_t reg; + reg = readw(ARMIO_LATCH_OUT); + reg &= ~(1 << 1); + writew(reg, ARMIO_LATCH_OUT); +} + /**************************************************************************** * Included Files ****************************************************************************/ @@ -421,6 +468,7 @@ static int user_main(int argc, char *argv[]) #endif } printf("user_main: Exitting\n"); + lights_off(); return 0; } @@ -457,6 +505,8 @@ int user_start(int argc, char *argv[]) { int result; + lights_on(); + /* Verify that stdio works first */ stdio_test(); diff --git a/nuttx/arch/arm/src/calypso/calypso_heap.c b/nuttx/arch/arm/src/calypso/calypso_heap.c new file mode 100644 index 0000000..d35a76f --- /dev/null +++ b/nuttx/arch/arm/src/calypso/calypso_heap.c @@ -0,0 +1,81 @@ +/**************************************************************************** + * calypso_heap.c + * Initialize memory interfaces of Calypso MCU + * + * Copyright (C) 2011 Stefan Richter <ichgeh(a)l--putt.de> + * + * All rights reserved. + * + * Redistribution and use in source and binary forms, with or without + * modification, are permitted provided that the following conditions + * are met: + * + * 1. Redistributions of source code must retain the above copyright + * notice, this list of conditions and the following disclaimer. + * 2. Redistributions in binary form must reproduce the above copyright + * notice, this list of conditions and the following disclaimer in + * the documentation and/or other materials provided with the + * distribution. + * 3. Neither the name NuttX nor the names of its contributors may be + * used to endorse or promote products derived from this software + * without specific prior written permission. + * + * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS + * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT + * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS + * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE + * COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, + * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, + * BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS + * OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED + * AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT + * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN + * ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE + * POSSIBILITY OF SUCH DAMAGE. + * + ****************************************************************************/ + +#include <nuttx/config.h> + +#include <sys/types.h> +#include <debug.h> + +#include <nuttx/arch.h> +#include <arch/board/board.h> + +#include <arch/calypso/clock.h> +#include <arch/calypso/timer.h> + +#include "up_arch.h" +#include "up_internal.h" + +/**************************************************************************** + * Name: up_addregion + * + * Description: + * This function is called right after basics are initialized and right + * before IRQ system setup. + * + ****************************************************************************/ + +void up_addregion(void) +{ + /* Disable watchdog in first non-common function */ + wdog_enable(0); + + // XXX: change to initialization of extern memory with save defaults + /* Configure memory interface */ + calypso_mem_cfg(CALYPSO_nCS0, 3, CALYPSO_MEM_16bit, 1); + calypso_mem_cfg(CALYPSO_nCS1, 3, CALYPSO_MEM_16bit, 1); + calypso_mem_cfg(CALYPSO_nCS2, 5, CALYPSO_MEM_16bit, 1); + calypso_mem_cfg(CALYPSO_nCS3, 5, CALYPSO_MEM_16bit, 1); + calypso_mem_cfg(CALYPSO_CS4, 0, CALYPSO_MEM_8bit, 1); + calypso_mem_cfg(CALYPSO_nCS6, 0, CALYPSO_MEM_32bit, 1); + calypso_mem_cfg(CALYPSO_nCS7, 0, CALYPSO_MEM_32bit, 0); + + /* Set VTCXO_DIV2 = 1, configure PLL for 104 MHz and give ARM half of that */ + calypso_clock_set(2, CALYPSO_PLL13_104_MHZ, ARM_MCLK_DIV_2); + + /* Configure the RHEA bridge with some sane default values */ + calypso_rhea_cfg(0, 0, 0xff, 0, 1, 0, 0); +} diff --git a/nuttx/arch/arm/src/common/up_internal.h b/nuttx/arch/arm/src/common/up_internal.h index 803a656..21c34e2 100644 --- a/nuttx/arch/arm/src/common/up_internal.h +++ b/nuttx/arch/arm/src/common/up_internal.h @@ -64,9 +64,10 @@ #if CONFIG_NFILE_DESCRIPTORS == 0 || defined(CONFIG_DEV_LOWCONSOLE) # undef CONFIG_USE_SERIALDRIVER # undef CONFIG_USE_EARLYSERIALINIT + #elif defined(CONFIG_DEV_CONSOLE) && CONFIG_NFILE_DESCRIPTORS > 0 # define CONFIG_USE_SERIALDRIVER 1 -# define CONFIG_USE_EARLYSERIALINIT 1 +# undef CONFIG_USE_EARLYSERIALINIT #endif /* Check if an interrupt stack size is configured */ -- 1.7.1

1 0

[PATCH 3/4] Initial support for Nuttx on TI Calypso platform: IRQ support for Calypso Main patches Osmocom code to match Nuttx API
by Stefan Richter 24 May '11

24 May '11

--- nuttx/arch/arm/include/calypso/irq.h | 67 +++++++ nuttx/arch/arm/src/calypso/calypso_irq.c | 300 ++++++++++++++++++++++++++++++ 2 files changed, 367 insertions(+), 0 deletions(-) create mode 100644 nuttx/arch/arm/include/calypso/irq.h create mode 100644 nuttx/arch/arm/src/calypso/calypso_irq.c diff --git a/nuttx/arch/arm/include/calypso/irq.h b/nuttx/arch/arm/include/calypso/irq.h new file mode 100644 index 0000000..1333a6e --- /dev/null +++ b/nuttx/arch/arm/include/calypso/irq.h @@ -0,0 +1,67 @@ +/**************************************************************************** + * arch/arm/include/calypso/irq.h + * Driver for Calypso IRQ controller + * + * (C) 2010 by Harald Welte <laforge(a)gnumonks.org> + * (C) 2011 by Stefan Richter <ichgeh(a)l--putt.de> + * + * All Rights Reserved + * + * This program is free software; you can redistribute it and/or modify + * it under the terms of the GNU General Public License as published by + * the Free Software Foundation; either version 2 of the License, or + * (at your option) any later version. + * + * This program is distributed in the hope that it will be useful, + * but WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + * GNU General Public License for more details. + * + * You should have received a copy of the GNU General Public License along + * with this program; if not, write to the Free Software Foundation, Inc., + * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. + * + ****************************************************************************/ + +#ifndef __INCLUDE_NUTTX_IRQ_H +#error "This file should never be included directly! Use <nuttx/irq.h>" +#endif + +#ifndef _CALYPSO_IRQ_H +#define _CALYPSO_IRQ_H + +#ifndef __ASSEMBLY__ + +enum irq_nr { + IRQ_WATCHDOG = 0, + IRQ_TIMER1 = 1, + IRQ_TIMER2 = 2, + IRQ_TSP_RX = 3, + IRQ_TPU_FRAME = 4, + IRQ_TPU_PAGE = 5, + IRQ_SIMCARD = 6, + IRQ_UART_MODEM = 7, + IRQ_KEYPAD_GPIO = 8, + IRQ_RTC_TIMER = 9, + IRQ_RTC_ALARM_I2C = 10, + IRQ_ULPD_GAUGING = 11, + IRQ_EXTERNAL = 12, + IRQ_SPI = 13, + IRQ_DMA = 14, + IRQ_API = 15, + IRQ_SIM_DETECT = 16, + IRQ_EXTERNAL_FIQ = 17, + IRQ_UART_IRDA = 18, + IRQ_ULPD_GSM_TIMER = 19, + IRQ_GEA = 20, + _NR_IRQS +}; + +#endif /* __ASSEMBLY__ */ + +/* Don't use _NR_IRQS!!! Won't work in preprocessor... */ +#define NR_IRQS 21 + +#define IRQ_SYSTIMER IRQ_TIMER2 + +#endif /* _CALYPSO_IRQ_H */ diff --git a/nuttx/arch/arm/src/calypso/calypso_irq.c b/nuttx/arch/arm/src/calypso/calypso_irq.c new file mode 100644 index 0000000..993e475 --- /dev/null +++ b/nuttx/arch/arm/src/calypso/calypso_irq.c @@ -0,0 +1,300 @@ +/**************************************************************************** + * arch/arm/src/calypso/calypso_irq.c + * Driver for Calypso IRQ controller + * + * (C) 2010 by Harald Welte <laforge(a)gnumonks.org> + * (C) 2011 by Stefan Richter <ichgeh(a)l--putt.de> + * + * All Rights Reserved + * + * This program is free software; you can redistribute it and/or modify + * it under the terms of the GNU General Public License as published by + * the Free Software Foundation; either version 2 of the License, or + * (at your option) any later version. + * + * This program is distributed in the hope that it will be useful, + * but WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + * GNU General Public License for more details. + * + * You should have received a copy of the GNU General Public License along + * with this program; if not, write to the Free Software Foundation, Inc., + * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. + * + ****************************************************************************/ + +/**************************************************************************** + * Included Files + ****************************************************************************/ + +#include <nuttx/config.h> + +#include <stdio.h> +#include <stdint.h> +#include <nuttx/irq.h> +#include <nuttx/arch.h> +#include <arch/calypso/memory.h> + +#include "arm.h" + +/**************************************************************************** + * Pre-processor Definitions + ****************************************************************************/ + +#define BASE_ADDR_IRQ 0xfffffa00 +#define BASE_ADDR_IBOOT_EXC 0x0080001C + +enum irq_reg { + IT_REG1 = 0x00, + IT_REG2 = 0x02, + MASK_IT_REG1 = 0x08, + MASK_IT_REG2 = 0x0a, + IRQ_NUM = 0x10, + FIQ_NUM = 0x12, + IRQ_CTRL = 0x14, +}; + +#define ILR_IRQ(x) (0x20 + (x*2)) +#define IRQ_REG(x) ((void *)BASE_ADDR_IRQ + (x)) + +#ifndef ARRAY_SIZE +#define ARRAY_SIZE(x) (sizeof(x) / sizeof((x)[0])) +#endif + +/**************************************************************************** + * Public Data + ****************************************************************************/ + +volatile uint32_t *current_regs; +extern uint32_t _exceptions; + +/**************************************************************************** + * Private Data + ****************************************************************************/ + +static uint8_t default_irq_prio[] = { + [IRQ_WATCHDOG] = 0xff, + [IRQ_TIMER1] = 0xff, + [IRQ_TIMER2] = 0xff, + [IRQ_TSP_RX] = 0, + [IRQ_TPU_FRAME] = 3, + [IRQ_TPU_PAGE] = 0xff, + [IRQ_SIMCARD] = 0xff, + [IRQ_UART_MODEM] = 8, + [IRQ_KEYPAD_GPIO] = 4, + [IRQ_RTC_TIMER] = 9, + [IRQ_RTC_ALARM_I2C] = 10, + [IRQ_ULPD_GAUGING] = 2, + [IRQ_EXTERNAL] = 12, + [IRQ_SPI] = 0xff, + [IRQ_DMA] = 0xff, + [IRQ_API] = 0xff, + [IRQ_SIM_DETECT] = 0, + [IRQ_EXTERNAL_FIQ] = 7, + [IRQ_UART_IRDA] = 2, + [IRQ_ULPD_GSM_TIMER] = 1, + [IRQ_GEA] = 0xff, +}; + +/**************************************************************************** + * Private Functions + ****************************************************************************/ + +static void _irq_enable(enum irq_nr nr, int enable) +{ + uint16_t *reg = IRQ_REG(MASK_IT_REG1); + uint16_t val; + + if (nr > 15) { + reg = IRQ_REG(MASK_IT_REG2); + nr -= 16; + } + + val = readw(reg); + if (enable) + val &= ~(1 << nr); + else + val |= (1 << nr); + writew(val, reg); +} + +static void set_default_priorities(void) +{ + unsigned int i; + + for (i = 0; i < ARRAY_SIZE(default_irq_prio); i++) { + uint16_t val; + uint8_t prio = default_irq_prio[i]; + if (prio > 31) + prio = 31; + + val = readw(IRQ_REG(ILR_IRQ(i))); + val &= ~(0x1f << 2); + val |= prio << 2; + writew(val, IRQ_REG(ILR_IRQ(i))); + } +} + +/* Install the exception handlers to where the ROM loader jumps */ +static void calypso_exceptions_install(void) +{ + uint32_t *exceptions_dst = (uint32_t *) BASE_ADDR_IBOOT_EXC; + uint32_t *exceptions_src = &_exceptions; + int i; + + for (i = 0; i < 7; i++) + *exceptions_dst++ = *exceptions_src++; + +} + +/**************************************************************************** + * Public Functions + ****************************************************************************/ + +/**************************************************************************** + * Name: up_irqinitialize + * + * Description: + * Setup the IRQ and FIQ controllers + * + ****************************************************************************/ + +void up_irqinitialize(void) +{ + /* Prepare hardware */ + calypso_exceptions_install(); + current_regs = NULL; + + /* Switch to internal ROM */ + calypso_bootrom(1); + + /* set default priorities */ + set_default_priorities(); + + /* mask all interrupts off */ + writew(0xffff, IRQ_REG(MASK_IT_REG1)); + writew(0xffff, IRQ_REG(MASK_IT_REG2)); + + /* clear all pending interrupts */ + writew(0, IRQ_REG(IT_REG1)); + writew(0, IRQ_REG(IT_REG2)); + + /* enable interrupts globally to the ARM core */ +#ifndef CONFIG_SUPPRESS_INTERRUPTS + irqrestore(SVC_MODE | PSR_F_BIT); +#endif +} + +/**************************************************************************** + * Name: up_disable_irq + * + * Description: + * Disable the IRQ specified by 'irq' + * + ****************************************************************************/ + +void up_disable_irq(int irq) +{ + if((unsigned)irq < NR_IRQS) + _irq_enable(irq, 0); +} + +/**************************************************************************** + * Name: up_enable_irq + * + * Description: + * Enable the IRQ specified by 'irq' + * + ****************************************************************************/ + +void up_enable_irq(int irq) +{ + if((unsigned)irq < NR_IRQS) + _irq_enable(irq, 1); +} + +/**************************************************************************** + * Name: up_prioritize_irq + * + * Description: + * Set the priority of an IRQ. + * + ****************************************************************************/ + +#ifndef CONFIG_ARCH_IRQPRIO +int up_prioritize_irq(int nr, int prio) +{ + uint16_t val; + + if (prio == -1) + prio = default_irq_prio[nr]; + + if (prio > 31) + prio = 31; + + val = prio << 2; +/* + if (edge) + val |= 0x02; + if (fiq) + val |= 0x01; +*/ + writew(val, IRQ_REG(ILR_IRQ(nr))); + + return 0; // XXX: what's the return??? +} +#endif + +/**************************************************************************** + * Entry point for interrupts + ****************************************************************************/ + +void up_decodeirq(uint32_t *regs) +{ + uint8_t num, tmp; + uint32_t *saved_regs; + + /* XXX: What is this??? + * Passed to but ignored in IRQ handlers + * Only valid meaning is apparently non-NULL == IRQ context */ + saved_regs = (uint32_t *)current_regs; + current_regs = regs; + + /* Detect & deliver the IRQ */ + num = readb(IRQ_REG(IRQ_NUM)) & 0x1f; + irq_dispatch(num, regs); + + /* Start new IRQ agreement */ + tmp = readb(IRQ_REG(IRQ_CTRL)); + tmp |= 0x01; + writeb(tmp, IRQ_REG(IRQ_CTRL)); + + current_regs = saved_regs; +} + +/**************************************************************************** + * Entry point for FIQs + ****************************************************************************/ + +void calypso_fiq(void) +{ + uint8_t num, tmp; + uint32_t *regs; + + /* XXX: What is this??? + * Passed to but ignored in IRQ handlers + * Only valid meaning is apparently non-NULL == IRQ context */ + regs = (uint32_t *)current_regs; + current_regs = (uint32_t *)&num; + + /* Detect & deliver like an IRQ but we are in FIQ context */ + num = readb(IRQ_REG(FIQ_NUM)) & 0x1f; + irq_dispatch(num, regs); + + /* Start new FIQ agreement */ + tmp = readb(IRQ_REG(IRQ_CTRL)); + tmp |= 0x02; + writeb(tmp, IRQ_REG(IRQ_CTRL)); + + current_regs = regs; +} -- 1.7.1

1 0

[PATCH 2/4] Initial support for Nuttx on TI Calypso platform: Import clock and timer related files Osmocom Modify timer.c to Nuttx API
by Stefan Richter 24 May '11

24 May '11

--- nuttx/arch/arm/include/calypso/clock.h | 67 +++++++++ nuttx/arch/arm/include/calypso/timer.h | 25 ++++ nuttx/arch/arm/src/calypso/calypso_timer.c | 205 ++++++++++++++++++++++++++++ nuttx/arch/arm/src/calypso/clock.c | 202 +++++++++++++++++++++++++++ 4 files changed, 499 insertions(+), 0 deletions(-) create mode 100644 nuttx/arch/arm/include/calypso/clock.h create mode 100644 nuttx/arch/arm/include/calypso/timer.h create mode 100644 nuttx/arch/arm/src/calypso/calypso_timer.c create mode 100644 nuttx/arch/arm/src/calypso/clock.c diff --git a/nuttx/arch/arm/include/calypso/clock.h b/nuttx/arch/arm/include/calypso/clock.h new file mode 100644 index 0000000..abcfde1 --- /dev/null +++ b/nuttx/arch/arm/include/calypso/clock.h @@ -0,0 +1,67 @@ +#ifndef _CALYPSO_CLK_H +#define _CALYPSO_CLK_H + +#include <stdint.h> + +#define CALYPSO_PLL26_52_MHZ ((2 << 8) | 0) +#define CALYPSO_PLL26_86_7_MHZ ((10 << 8) | 2) +#define CALYPSO_PLL26_87_MHZ ((3 << 8) | 0) +#define CALYPSO_PLL13_104_MHZ ((8 << 8) | 0) + +enum mclk_div { + _ARM_MCLK_DIV_1 = 0, + ARM_MCLK_DIV_1 = 1, + ARM_MCLK_DIV_2 = 2, + ARM_MCLK_DIV_3 = 3, + ARM_MCLK_DIV_4 = 4, + ARM_MCLK_DIV_5 = 5, + ARM_MCLK_DIV_6 = 6, + ARM_MCLK_DIV_7 = 7, + ARM_MCLK_DIV_1_5 = 0x80 | 1, + ARM_MCLK_DIV_2_5 = 0x80 | 2, +}; + +void calypso_clock_set(uint8_t vtcxo_div2, uint16_t inp, enum mclk_div mclk_div); +void calypso_pll_set(uint16_t inp); +void calypso_clk_dump(void); + +/* CNTL_RST */ +enum calypso_rst { + RESET_DSP = (1 << 1), + RESET_EXT = (1 << 2), + RESET_WDOG = (1 << 3), +}; + +void calypso_reset_set(enum calypso_rst calypso_rst, int active); +int calypso_reset_get(enum calypso_rst); + +enum calypso_bank { + CALYPSO_nCS0 = 0, + CALYPSO_nCS1 = 2, + CALYPSO_nCS2 = 4, + CALYPSO_nCS3 = 6, + CALYPSO_nCS7 = 8, + CALYPSO_CS4 = 0xa, + CALYPSO_nCS6 = 0xc, +}; + +enum calypso_mem_width { + CALYPSO_MEM_8bit = 0, + CALYPSO_MEM_16bit = 1, + CALYPSO_MEM_32bit = 2, +}; + +void calypso_mem_cfg(enum calypso_bank bank, uint8_t ws, + enum calypso_mem_width width, int we); + +/* Enable or disable the internal bootrom mapped to 0x0000'0000 */ +void calypso_bootrom(int enable); + +/* Enable or disable the debug unit */ +void calypso_debugunit(int enable); + +/* configure the RHEA bus bridge[s] */ +void calypso_rhea_cfg(uint8_t fac0, uint8_t fac1, uint8_t timeout, + uint8_t ws_h, uint8_t ws_l, uint8_t w_en0, uint8_t w_en1); + +#endif /* _CALYPSO_CLK_H */ diff --git a/nuttx/arch/arm/include/calypso/timer.h b/nuttx/arch/arm/include/calypso/timer.h new file mode 100644 index 0000000..694e4eb --- /dev/null +++ b/nuttx/arch/arm/include/calypso/timer.h @@ -0,0 +1,25 @@ +#ifndef _CAL_TIMER_H +#define _CAL_TIMER_H + +/* Enable or Disable a timer */ +void hwtimer_enable(int num, int on); + +/* Configure pre-scaler and if timer is auto-reload */ +void hwtimer_config(int num, uint8_t pre_scale, int auto_reload); + +/* Load a timer with the given value */ +void hwtimer_load(int num, uint16_t val); + +/* Read the current timer value */ +uint16_t hwtimer_read(int num); + +/* Enable or disable the watchdog */ +void wdog_enable(int on); + +/* Reset cpu using watchdog */ +void wdog_reset(void); + +/* power up the timers */ +void hwtimer_init(void); + +#endif /* _CAL_TIMER_H */ diff --git a/nuttx/arch/arm/src/calypso/calypso_timer.c b/nuttx/arch/arm/src/calypso/calypso_timer.c new file mode 100644 index 0000000..0191c0c --- /dev/null +++ b/nuttx/arch/arm/src/calypso/calypso_timer.c @@ -0,0 +1,205 @@ +/**************************************************************************** + * arch/arm/src/calypso/calypso_timer.c + * Calypso DBB internal Timer Driver + * + * (C) 2010 by Harald Welte <laforge(a)gnumonks.org> + * (C) 2011 by Stefan Richter <ichgeh(a)l--putt.de> + * + * All Rights Reserved + * + * This program is free software; you can redistribute it and/or modify + * it under the terms of the GNU General Public License as published by + * the Free Software Foundation; either version 2 of the License, or + * (at your option) any later version. + * + * This program is distributed in the hope that it will be useful, + * but WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + * GNU General Public License for more details. + * + * You should have received a copy of the GNU General Public License along + * with this program; if not, write to the Free Software Foundation, Inc., + * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. + * + ****************************************************************************/ + +#include <stdio.h> +#include <stdint.h> +#include <nuttx/arch.h> + +#include <arch/calypso/defines.h> +#include <arch/calypso/memory.h> +#include <arch/calypso/timer.h> + + +#define BASE_ADDR_TIMER 0xfffe3800 +#define TIMER2_OFFSET 0x3000 + +#define TIMER_REG(n, m) (((n)-1) ? (BASE_ADDR_TIMER + TIMER2_OFFSET + (m)) : (BASE_ADDR_TIMER + (m))) + +enum timer_reg { + CNTL_TIMER = 0x00, + LOAD_TIMER = 0x02, + READ_TIMER = 0x04, +}; + +enum timer_ctl { + CNTL_START = (1 << 0), + CNTL_AUTO_RELOAD = (1 << 1), + CNTL_CLOCK_ENABLE = (1 << 5), +}; + +/* Regular Timers (1 and 2) */ + +void hwtimer_enable(int num, int on) +{ + uint8_t ctl; + + if (num < 1 || num > 2) { + printf("Unknown timer %u\n", num); + return; + } + + ctl = readb(TIMER_REG(num, CNTL_TIMER)); + if (on) + ctl |= CNTL_START|CNTL_CLOCK_ENABLE; + else + ctl &= ~CNTL_START; + writeb(ctl, TIMER_REG(num, CNTL_TIMER)); +} + +void hwtimer_config(int num, uint8_t pre_scale, int auto_reload) +{ + uint8_t ctl; + + ctl = (pre_scale & 0x7) << 2; + if (auto_reload) + ctl |= CNTL_AUTO_RELOAD; + + writeb(ctl, TIMER_REG(num, CNTL_TIMER)); +} + +void hwtimer_load(int num, uint16_t val) +{ + writew(val, TIMER_REG(num, LOAD_TIMER)); +} + +uint16_t hwtimer_read(int num) +{ + uint8_t ctl = readb(TIMER_REG(num, CNTL_TIMER)); + + /* somehow a read results in an abort */ + if ((ctl & (CNTL_START|CNTL_CLOCK_ENABLE)) != (CNTL_START|CNTL_CLOCK_ENABLE)) + return 0xFFFF; + return readw(TIMER_REG(num, READ_TIMER)); +} + +/************************************************************ + * Watchdog Timer + ************************************************************/ + +#define BASE_ADDR_WDOG 0xfffff800 +#define WDOG_REG(m) (BASE_ADDR_WDOG + m) + +enum wdog_reg { + WD_CNTL_TIMER = CNTL_TIMER, + WD_LOAD_TIMER = LOAD_TIMER, + WD_READ_TIMER = 0x02, + WD_MODE = 0x04, +}; + +enum wdog_ctl { + WD_CTL_START = (1 << 7), + WD_CTL_AUTO_RELOAD = (1 << 8) +}; + +enum wdog_mode { + WD_MODE_DIS_ARM = 0xF5, + WD_MODE_DIS_CONFIRM = 0xA0, + WD_MODE_ENABLE = (1 << 15) +}; + +#define WD_CTL_PRESCALE(value) (((value)&0x07) << 9) + +static void wdog_irq(__unused enum irq_nr nr) +{ + puts("=> WATCHDOG\n"); +} + +void wdog_enable(int on) +{ + if (on) { +#if 0 + irq_config(IRQ_WATCHDOG, 0, 0, 0); + irq_register_handler(IRQ_WATCHDOG, &wdog_irq); + irq_enable(IRQ_WATCHDOG); + writew(WD_MODE_ENABLE, WDOG_REG(WD_MODE)); +#endif + } else { + writew(WD_MODE_DIS_ARM, WDOG_REG(WD_MODE)); + writew(WD_MODE_DIS_CONFIRM, WDOG_REG(WD_MODE)); + } +} + +void wdog_reset(void) +{ +#if 0 + // XXX: this is supposed to reset immediately but does not seem to + writew(0xF5, WDOG_REG(WD_MODE)); + writew(0xFF, WDOG_REG(WD_MODE)); +#else + // enable watchdog + writew(WD_MODE_ENABLE, WDOG_REG(WD_MODE)); + // force expiration + writew(0x0000, WDOG_REG(WD_LOAD_TIMER)); + writew(0x0000, WDOG_REG(WD_LOAD_TIMER)); +#endif +} + +/************************************************************ + * Global Functions + ************************************************************/ + +/************************************************************ + * Function: up_timerisr + * + * Description: + * The timer ISR will perform a variety of services for + * various portions of the systems. + * + ************************************************************/ + +int up_timerisr(int irq, uint32_t *regs) +{ + /* Process timer interrupt */ + + sched_process_timer(); + return 0; +} + +/************************************************************ + * Function: up_timerinit + * + * Description: + * Setup Calypso HW timer 2 to cause system ticks. + * + * This function is called during start-up to initialize + * the timer interrupt. + * + ************************************************************/ + +void up_timerinit(void) +{ + up_disable_irq(IRQ_SYSTIMER); + + /* The timer runs at 13MHz / 32, i.e. 406.25kHz */ + /* 4062 ticks until expiry yields 100Hz interrupt */ + hwtimer_load(2, 4062); + hwtimer_config(2, 0, 1); + hwtimer_enable(2, 1); + + /* Attach and enable the timer interrupt */ + irq_attach(IRQ_SYSTIMER, (xcpt_t)up_timerisr); + up_enable_irq(IRQ_SYSTIMER); +} + diff --git a/nuttx/arch/arm/src/calypso/clock.c b/nuttx/arch/arm/src/calypso/clock.c new file mode 100644 index 0000000..77b4ea5 --- /dev/null +++ b/nuttx/arch/arm/src/calypso/clock.c @@ -0,0 +1,202 @@ +/* Driver for Calypso clock management */ + +/* (C) 2010 by Harald Welte <laforge(a)gnumonks.org> + * + * All Rights Reserved + * + * This program is free software; you can redistribute it and/or modify + * it under the terms of the GNU General Public License as published by + * the Free Software Foundation; either version 2 of the License, or + * (at your option) any later version. + * + * This program is distributed in the hope that it will be useful, + * but WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + * GNU General Public License for more details. + * + * You should have received a copy of the GNU General Public License along + * with this program; if not, write to the Free Software Foundation, Inc., + * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. + * + */ + +#include <nuttx/config.h> + +#include <stdint.h> +#include <stdio.h> + +//#define DEBUG +#include <arch/calypso/debug.h> + +#include <arch/calypso/memory.h> +#include <arch/calypso/clock.h> + +#define REG_DPLL 0xffff9800 +#define DPLL_LOCK (1 << 0) +#define DPLL_BREAKLN (1 << 1) +#define DPLL_BYPASS_DIV_SHIFT 2 /* 2 bits */ +#define DPLL_PLL_ENABLE (1 << 4) +#define DPLL_PLL_DIV_SHIFT 5 /* 2 bits */ +#define DPLL_PLL_MULT_SHIFT 7 /* 5 bits */ +#define DPLL_TEST (1 << 12) +#define DPLL_IOB (1 << 13) /* Initialize on break */ +#define DPLL_IAI (1 << 14) /* Initialize after Idle */ + +#define BASE_ADDR_CLKM 0xfffffd00 +#define CLKM_REG(m) (BASE_ADDR_CLKM+(m)) + +enum clkm_reg { + CNTL_ARM_CLK = 0, + CNTL_CLK = 2, + CNTL_RST = 4, + CNTL_ARM_DIV = 8, +}; + +/* CNTL_ARM_CLK */ +#define ARM_CLK_BIG_SLEEP (1 << 0) /* MCU Master Clock enabled? */ +#define ARM_CLK_CLKIN_SEL0 (1 << 1) /* MCU source clock (0 = DPLL output, 1 = VTCXO or CLKIN */ +#define ARM_CLK_CLKIN_SEL (1 << 2) /* 0 = VTCXO or 1 = CLKIN */ +#define ARM_CLK_MCLK_DIV5 (1 << 3) /* enable 1.5 or 2.5 division factor */ +#define ARM_CLK_MCLK_DIV_SHIFT 4 /* 3 bits */ +#define ARM_CLK_DEEP_POWER_SHIFT 8 +#define ARM_CLK_DEEP_SLEEP 12 + +/* CNTL_CLK */ +#define CLK_IRQ_CLK_DIS (1 << 0) /* IRQ clock control (0 always, 1 according ARM_MCLK_EN) */ +#define CLK_BRIDGE_CLK_DIS (1 << 1) +#define CLK_TIMER_CLK_DIS (1 << 2) +#define CLK_DPLL_DIS (1 << 3) /* 0: DPLL is not stopped during SLEEP */ +#define CLK_CLKOUT_EN (1 << 4) /* Enable CLKOUT output pins */ +#define CLK_EN_IDLE3_FLG (1 << 5) /* DSP idle flag control (1 = + * SAM/HOM register forced to HOM when DSP IDLE3) */ +#define CLK_VCLKOUT_DIV2 (1 << 6) /* 1: VCLKOUT-FR is divided by 2 */ +#define CLK_VTCXO_DIV2 (1 << 7) /* 1: VTCXO is dividied by 2 */ + +#define BASE_ADDR_MEMIF 0xfffffb00 +#define MEMIF_REG(x) (BASE_ADDR_MEMIF+(x)) + +enum memif_reg { + API_RHEA_CTL = 0x0e, + EXTRA_CONF = 0x10, +}; + +static void dump_reg16(uint32_t addr, char *name) +{ + printf("%s=0x%04x\n", name, readw(addr)); +} + +void calypso_clk_dump(void) +{ + dump_reg16(REG_DPLL, "REG_DPLL"); + dump_reg16(CLKM_REG(CNTL_ARM_CLK), "CNTL_ARM_CLK"); + dump_reg16(CLKM_REG(CNTL_CLK), "CNTL_CLK"); + dump_reg16(CLKM_REG(CNTL_RST), "CNTL_RST"); + dump_reg16(CLKM_REG(CNTL_ARM_DIV), "CNTL_ARM_DIV"); +} + +void calypso_pll_set(uint16_t inp) +{ + uint8_t mult = inp >> 8; + uint8_t div = inp & 0xff; + uint16_t reg = readw(REG_DPLL); + + reg &= ~0x0fe0; + reg |= (div & 0x3) << DPLL_PLL_DIV_SHIFT; + reg |= (mult & 0x1f) << DPLL_PLL_MULT_SHIFT; + reg |= DPLL_PLL_ENABLE; + + writew(reg, REG_DPLL); +} + +void calypso_reset_set(enum calypso_rst calypso_rst, int active) +{ + uint8_t reg = readb(CLKM_REG(CNTL_RST)); + + if (active) + reg |= calypso_rst; + else + reg &= ~calypso_rst; + + writeb(reg, CLKM_REG(CNTL_RST)); +} + +int calypso_reset_get(enum calypso_rst calypso_rst) +{ + uint8_t reg = readb(CLKM_REG(CNTL_RST)); + + if (reg & calypso_rst) + return 1; + else + return 0; +} + +void calypso_clock_set(uint8_t vtcxo_div2, uint16_t inp, enum mclk_div mclk_div) +{ + uint16_t cntl_clock = readw(CLKM_REG(CNTL_CLK)); + uint16_t cntl_arm_clk = readw(CLKM_REG(CNTL_ARM_CLK)); + + /* First set the vtcxo_div2 */ + cntl_clock &= ~CLK_VCLKOUT_DIV2; + if (vtcxo_div2) + cntl_clock |= CLK_VTCXO_DIV2; + else + cntl_clock &= ~CLK_VTCXO_DIV2; + writew(cntl_clock, CLKM_REG(CNTL_CLK)); + + /* Then configure the MCLK divider */ + cntl_arm_clk &= ~ARM_CLK_CLKIN_SEL0; + if (mclk_div & 0x80) { + mclk_div &= ~0x80; + cntl_arm_clk |= ARM_CLK_MCLK_DIV5; + } else + cntl_arm_clk &= ~ARM_CLK_MCLK_DIV5; + cntl_arm_clk &= ~(0x7 << ARM_CLK_MCLK_DIV_SHIFT); + cntl_arm_clk |= (mclk_div << ARM_CLK_MCLK_DIV_SHIFT); + writew(cntl_arm_clk, CLKM_REG(CNTL_ARM_CLK)); + + /* Then finally set the PLL */ + calypso_pll_set(inp); +} + +void calypso_mem_cfg(enum calypso_bank bank, uint8_t ws, + enum calypso_mem_width width, int we) +{ + writew((ws & 0x1f) | ((width & 3) << 5) | ((we & 1) << 7), + BASE_ADDR_MEMIF + bank); +} + +void calypso_bootrom(int enable) +{ + uint16_t conf = readw(MEMIF_REG(EXTRA_CONF)); + + conf |= (3 << 8); + + if (enable) + conf &= ~(1 << 9); + + writew(conf, MEMIF_REG(EXTRA_CONF)); +} + +void calypso_debugunit(int enable) +{ + uint16_t conf = readw(MEMIF_REG(EXTRA_CONF)); + + if (enable) + conf &= ~(1 << 11); + else + conf |= (1 << 11); + + writew(conf, MEMIF_REG(EXTRA_CONF)); +} + +#define REG_RHEA_CNTL 0xfffff900 +#define REG_API_CNTL 0xfffff902 +#define REG_ARM_RHEA 0xfffff904 + +void calypso_rhea_cfg(uint8_t fac0, uint8_t fac1, uint8_t timeout, + uint8_t ws_h, uint8_t ws_l, uint8_t w_en0, uint8_t w_en1) +{ + writew(fac0 | (fac1 << 4) | (timeout << 8), REG_RHEA_CNTL); + writew(ws_h | (ws_l << 5), REG_API_CNTL); + writew(w_en0 | (w_en1 << 1), REG_ARM_RHEA); +} -- 1.7.1

1 0

[PATCH 1/4] Initial support for Nuttx on TI Calypso platform: Add calypso chip and compal E99 board to Nuttx targets linker script no-brainer / dummy files Osmocom's debug.h, defines.h, memory.h for compatibility
by Stefan Richter 24 May '11

24 May '11

--- nuttx/arch/arm/include/calypso/debug.h | 31 ++ nuttx/arch/arm/include/calypso/defines.h | 18 ++ nuttx/arch/arm/include/calypso/memory.h | 28 ++ nuttx/arch/arm/src/Makefile | 2 +- nuttx/arch/arm/src/calypso/Make.defs | 53 ++++ nuttx/arch/arm/src/calypso/calypso_head.S | 23 ++ nuttx/arch/arm/src/calypso/calypso_lowputc.S | 136 +++++++++ nuttx/arch/arm/src/calypso/chip.h | 204 +++++++++++++ nuttx/configs/compal_e99/include/board.h | 6 + nuttx/configs/compal_e99/ld.script | 126 ++++++++ nuttx/configs/compal_e99/ostest/Make.defs | 123 ++++++++ nuttx/configs/compal_e99/ostest/appconfig | 39 +++ nuttx/configs/compal_e99/ostest/defconfig | 414 ++++++++++++++++++++++++++ nuttx/configs/compal_e99/ostest/setenv.sh | 46 +++ nuttx/configs/compal_e99/src/Makefile | 80 +++++ nuttx/configs/compal_e99/src/dummy.c | 1 + 16 files changed, 1329 insertions(+), 1 deletions(-) create mode 100644 nuttx/arch/arm/include/calypso/debug.h create mode 100644 nuttx/arch/arm/include/calypso/defines.h create mode 100644 nuttx/arch/arm/include/calypso/memory.h create mode 100644 nuttx/arch/arm/src/calypso/Make.defs create mode 100644 nuttx/arch/arm/src/calypso/calypso_head.S create mode 100644 nuttx/arch/arm/src/calypso/calypso_lowputc.S create mode 100644 nuttx/arch/arm/src/calypso/chip.h create mode 100644 nuttx/configs/compal_e99/include/board.h create mode 100644 nuttx/configs/compal_e99/ld.script create mode 100644 nuttx/configs/compal_e99/ostest/Make.defs create mode 100644 nuttx/configs/compal_e99/ostest/appconfig create mode 100644 nuttx/configs/compal_e99/ostest/defconfig create mode 100755 nuttx/configs/compal_e99/ostest/setenv.sh create mode 100644 nuttx/configs/compal_e99/src/Makefile create mode 100644 nuttx/configs/compal_e99/src/dummy.c diff --git a/nuttx/arch/arm/include/calypso/debug.h b/nuttx/arch/arm/include/calypso/debug.h new file mode 100644 index 0000000..27c4185 --- /dev/null +++ b/nuttx/arch/arm/include/calypso/debug.h @@ -0,0 +1,31 @@ +#ifndef _DEBUG_H +#define _DEBUG_H + +#ifndef ARRAY_SIZE +#define ARRAY_SIZE(x) (sizeof(x) / sizeof((x)[0])) +#endif + +/* + * Check at compile time that something is of a particular type. + * Always evaluates to 1 so you may use it easily in comparisons. + */ +#define typecheck(type,x) \ +({ type __dummy; \ + typeof(x) __dummy2; \ + (void)(&__dummy == &__dummy2); \ + 1; \ +}) + +#ifdef DEBUG +#define dputchar(x) putchar(x) +#define dputs(x) puts(x) +#define dphex(x,y) phex(x,y) +#define printd(x, args ...) printf(x, ## args) +#else +#define dputchar(x) +#define dputs(x) +#define dphex(x,y) +#define printd(x, args ...) +#endif + +#endif /* _DEBUG_H */ diff --git a/nuttx/arch/arm/include/calypso/defines.h b/nuttx/arch/arm/include/calypso/defines.h new file mode 100644 index 0000000..3c8732f --- /dev/null +++ b/nuttx/arch/arm/include/calypso/defines.h @@ -0,0 +1,18 @@ + +#ifndef _DEFINES_H +#define _DEFINES_H + +#define __attribute_const__ __attribute__((__const__)) + +/* type properties */ +#define __packed __attribute__((packed)) +#define __aligned(alignment) __attribute__((aligned(alignment))) +#define __unused __attribute__((unused)) + +/* linkage */ +#define __section(name) __attribute__((section(name))) + +/* force placement in zero-waitstate memory */ +#define __ramtext __section(".ramtext") + +#endif /* !_DEFINES_H */ diff --git a/nuttx/arch/arm/include/calypso/memory.h b/nuttx/arch/arm/include/calypso/memory.h new file mode 100644 index 0000000..b0a0490 --- /dev/null +++ b/nuttx/arch/arm/include/calypso/memory.h @@ -0,0 +1,28 @@ +#ifndef _MEMORY_H +#define _MEMORY_H + +#define __arch_getb(a) (*(volatile unsigned char *)(a)) +#define __arch_getw(a) (*(volatile unsigned short *)(a)) +#define __arch_getl(a) (*(volatile unsigned int *)(a)) + +#define __arch_putb(v,a) (*(volatile unsigned char *)(a) = (v)) +#define __arch_putw(v,a) (*(volatile unsigned short *)(a) = (v)) +#define __arch_putl(v,a) (*(volatile unsigned int *)(a) = (v)) + +#define __raw_writeb(v,a) __arch_putb(v,a) +#define __raw_writew(v,a) __arch_putw(v,a) +#define __raw_writel(v,a) __arch_putl(v,a) + +#define __raw_readb(a) __arch_getb(a) +#define __raw_readw(a) __arch_getw(a) +#define __raw_readl(a) __arch_getl(a) + +#define writeb(v,a) __arch_putb(v,a) +#define writew(v,a) __arch_putw(v,a) +#define writel(v,a) __arch_putl(v,a) + +#define readb(a) __arch_getb(a) +#define readw(a) __arch_getw(a) +#define readl(a) __arch_getl(a) + +#endif /* _MEMORY_H */ diff --git a/nuttx/arch/arm/src/Makefile b/nuttx/arch/arm/src/Makefile index 22327af..2530c05 100644 --- a/nuttx/arch/arm/src/Makefile +++ b/nuttx/arch/arm/src/Makefile @@ -67,7 +67,7 @@ SRCS = $(ASRCS) $(CSRCS) OBJS = $(AOBJS) $(COBJS) LDFLAGS = $(ARCHSCRIPT) -EXTRA_LIBS = +#EXTRA_LIBS = LINKLIBS = ifeq ($(WINTOOL),y) diff --git a/nuttx/arch/arm/src/calypso/Make.defs b/nuttx/arch/arm/src/calypso/Make.defs new file mode 100644 index 0000000..d1c14d4 --- /dev/null +++ b/nuttx/arch/arm/src/calypso/Make.defs @@ -0,0 +1,53 @@ +############################################################################ +# calypso/Make.defs +# +# Copyright (C) 2007 Gregory Nutt. All rights reserved. +# Author: Gregory Nutt <spudmonkey(a)racsa.co.cr> +# +# Copyright (C) 2011 Stefan Richter. All rights reserved. +# Author: Stefan Richter <ichgeh(a)l--putt.de> +# +# Redistribution and use in source and binary forms, with or without +# modification, are permitted provided that the following conditions +# are met: +# +# 1. Redistributions of source code must retain the above copyright +# notice, this list of conditions and the following disclaimer. +# 2. Redistributions in binary form must reproduce the above copyright +# notice, this list of conditions and the following disclaimer in +# the documentation and/or other materials provided with the +# distribution. +# 3. Neither the name Gregory Nutt nor the names of its contributors may be +# used to endorse or promote products derived from this software +# without specific prior written permission. +# +# THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS +# "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT +# LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS +# FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE +# COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, +# INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, +# BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS +# OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED +# AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT +# LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN +# ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE +# POSSIBILITY OF SUCH DAMAGE. +# +############################################################################ + +HEAD_ASRC = calypso_head.S + +CMN_ASRCS = up_saveusercontext.S up_fullcontextrestore.S up_vectors.S \ + up_nommuhead.S +CMN_CSRCS = up_allocateheap.c up_assert.c up_blocktask.c up_copystate.c \ + up_createstack.c up_dataabort.c up_mdelay.c up_udelay.c up_doirq.c \ + up_exit.c up_idle.c up_initialstate.c up_initialize.c \ + up_interruptcontext.c up_prefetchabort.c up_releasepending.c \ + up_releasestack.c up_reprioritizertr.c up_schedulesigaction.c \ + up_sigdeliver.c up_syscall.c up_unblocktask.c \ + up_undefinedinsn.c up_usestack.c + +CHIP_ASRCS = calypso_lowputc.S +CHIP_CSRCS = calypso_irq.c calypso_timer.c calypso_heap.c \ + clock.c diff --git a/nuttx/arch/arm/src/calypso/calypso_head.S b/nuttx/arch/arm/src/calypso/calypso_head.S new file mode 100644 index 0000000..eb83b68 --- /dev/null +++ b/nuttx/arch/arm/src/calypso/calypso_head.S @@ -0,0 +1,23 @@ +/* Place a branch to the real head at the entry point */ +.section .text.start + b __start + + +/* Exception Vectors like they are needed for the exception vector + indirection of the internal boot ROM. The following section must + be liked to appear at 0x80001c */ +.section .text.exceptions +_undef_instr: + b up_vectorundefinsn +_sw_interr: + b up_vectorswi +_prefetch_abort: + b up_vectorprefetch +_data_abort: + b up_vectordata +_reserved: + b _reserved +_irq: + b up_vectorirq +_fiq: + b up_vectorfiq diff --git a/nuttx/arch/arm/src/calypso/calypso_lowputc.S b/nuttx/arch/arm/src/calypso/calypso_lowputc.S new file mode 100644 index 0000000..bf30fe0 --- /dev/null +++ b/nuttx/arch/arm/src/calypso/calypso_lowputc.S @@ -0,0 +1,136 @@ +/************************************************************************** + * calypso/calypso_lowputc.S + * + * Copyright (C) 2011 Stefan Richter. All rights reserved. + * Author: Stefan Richter <ichgeh(a)l--putt.de> + * + * based on: c5471/c5471_lowputc.S + * Copyright (C) 2007, 2008 Gregory Nutt. All rights reserved. + * Author: Gregory Nutt <spudmonkey(a)racsa.co.cr> + * + * Redistribution and use in source and binary forms, with or without + * modification, are permitted provided that the following conditions + * are met: + * + * 1. Redistributions of source code must retain the above copyright + * notice, this list of conditions and the following disclaimer. + * 2. Redistributions in binary form must reproduce the above copyright + * notice, this list of conditions and the following disclaimer in + * the documentation and/or other materials provided with the + * distribution. + * 3. Neither the name NuttX nor the names of its contributors may be + * used to endorse or promote products derived from this software + * without specific prior written permission. + * + * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS + * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT + * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS + * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE + * COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, + * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, + * BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS + * OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED + * AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT + * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN + * ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE + * POSSIBILITY OF SUCH DAMAGE. + * + **************************************************************************/ + +/************************************************************************** + * Included Files + **************************************************************************/ + +#include <nuttx/config.h> + +#include "chip.h" +#include "up_arch.h" +#include "up_internal.h" + +/************************************************************************** + * Private Definitions + **************************************************************************/ + +/************************************************************************** + * Private Types + **************************************************************************/ + +/************************************************************************** + * Private Function Prototypes + **************************************************************************/ + +/************************************************************************** + * Global Variables + **************************************************************************/ + +/************************************************************************** + * Private Variables + **************************************************************************/ + +/************************************************************************** + * Private Functions + **************************************************************************/ + +/************************************************************************** + * Public Functions + **************************************************************************/ + +/************************************************************************** + * Name: up_lowputc + **************************************************************************/ + +/* This assembly language version has the advantage that it can does not + * require a C stack and uses only r0-r1. Hence it can be used during + * early boot phases. + */ + + .text + .global up_putc + .type up_putc, function +up_putc: + .global up_lowputc + .type up_lowputc, function +up_lowputc: + /* On entry, r0 holds the character to be printed */ + +#ifdef CONFIG_SERIAL_IRDA_CONSOLE + ldr r2, =UART_IRDA_BASE /* r2=IRDA UART base */ +#else + ldr r2, =UART_MODEM_BASE /* r2=Modem UART base */ +#endif + + /* Poll bit 0 of the UART_SSR register. When the bit + * is clear, the TX FIFO is no longer full + */ + +1: ldrb r1, [r2, #UART_SSR_OFFS] + tst r1, #UART_SSR_TXFULL + bne 1b + + /* Send the character by writing it into the UART_THR + * register. + */ + + strb r0, [r2, #UART_THR_OFFS] + + /* Wait for the tranmsit holding regiser (THR) to be + * emptied. This is detemined when bit 6 of the LSR + * is set. + */ + +2: ldrb r1, [r2, #UART_LSR_OFFS] + tst r1, #0x00000020 + beq 2b + + /* If the character that we just sent was a linefeed, + * then send a carriage return as well. + */ + + teq r0, #'\n' + moveq r0, #'\r' + beq 1b + + /* And return */ + + mov pc, lr + diff --git a/nuttx/arch/arm/src/calypso/chip.h b/nuttx/arch/arm/src/calypso/chip.h new file mode 100644 index 0000000..b837871 --- /dev/null +++ b/nuttx/arch/arm/src/calypso/chip.h @@ -0,0 +1,204 @@ +/**************************************************************************** + * calypso/chip.h + * + * Copyright (C) 2011 Stefan Richter. All rights reserved. + * Author: Stefan Richter <ichgeh(a)l--putt.de> + * + * based on: c5471/chip.h + * Copyright (C) 2007 Gregory Nutt. All rights reserved. + * Author: Gregory Nutt <spudmonkey(a)racsa.co.cr> + * + * Redistribution and use in source and binary forms, with or without + * modification, are permitted provided that the following conditions + * are met: + * + * 1. Redistributions of source code must retain the above copyright + * notice, this list of conditions and the following disclaimer. + * 2. Redistributions in binary form must reproduce the above copyright + * notice, this list of conditions and the following disclaimer in + * the documentation and/or other materials provided with the + * distribution. + * 3. Neither the name Gregory Nutt nor the names of its contributors may be + * used to endorse or promote products derived from this software + * without specific prior written permission. + * + * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS + * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT + * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS + * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE + * COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, + * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, + * BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS + * OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED + * AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT + * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN + * ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE + * POSSIBILITY OF SUCH DAMAGE. + * + ****************************************************************************/ + +#ifndef __CALYPSO_CHIP_H +#define __CALYPSO_CHIP_H + +/**************************************************************************** + * Included Files + ****************************************************************************/ + +/**************************************************************************** + * Definitions + ****************************************************************************/ + +/* UARTs ********************************************************************/ + +#define UART_IRDA_BASE 0xffff5000 +#define UART_MODEM_BASE 0xffff5800 +#define UARTn_IO_RANGE 0x00000800 + +/* Common UART Registers. Expressed as offsets from the BASE address */ + +#define UART_RHR_OFFS 0x00000000 /* Rcv Holding Register */ +#define UART_THR_OFFS 0x00000000 /* Xmit Holding Register */ +#define UART_FCR_OFFS 0x00000008 /* FIFO Control Register */ +#define UART_RFCR_OFFS 0x00000008 /* Rcv FIFO Control Register */ +#define UART_TFCR_OFFS 0x00000008 /* Xmit FIFO Control Register */ +#define UART_SCR_OFFS 0x0000000c /* Status Control Register */ +#define UART_LCR_OFFS 0x00000010 /* Line Control Register */ +#define UART_LSR_OFFS 0x00000005 /* Line Status Register */ +#define UART_SSR_OFFS 0x00000011 /* Supplementary Status Register */ +#define UART_MCR_OFFS 0x0000001c /* Modem Control Register */ +#define UART_MSR_OFFS 0x00000020 /* Modem Status Register */ +#define UART_IER_OFFS 0x00000024 /* Interrupt Enable Register */ +#define UART_ISR_OFFS 0x00000028 /* Interrupt Status Register */ +#define UART_EFR_OFFS 0x0000002c /* Enhanced Feature Register */ +#define UART_XON1_OFFS 0x00000030 /* XON1 Character Register */ +#define UART_XON2_OFFS 0x00000034 /* XON2 Character Register */ +#define UART_XOFF1_OFFS 0x00000038 /* XOFF1 Character Register */ +#define UART_XOFF2_OFFS 0x0000003c /* XOFF2 Character Register */ +#define UART_SPR_OFFS 0x00000040 /* Scratch-pad Register */ +#define UART_DIV_115K_OFFS 0x00000044 /* Divisor for baud generation */ +#define UART_DIV_BIT_RATE_OFFS 0x00000048 /* For baud rate generation */ +#define UART_TCR_OFFS 0x0000004c /* Transmission Control Register */ +#define UART_TLR_OFFS 0x00000050 /* Trigger Level Register */ +#define UART_MDR_OFFS 0x00000054 /* Mode Definition Register */ + +/* UART Settings ************************************************************/ + +/* Miscellaneous UART settings. */ + +#define UART_RX_FIFO_NOEMPTY 0x00000001 +#define UART_SSR_TXFULL 0x00000001 +#define UART_LSR_TREF 0x00000020 + +#define UART_XMIT_FIFO_SIZE 64 +#define UART_IRDA_XMIT_FIFO_SIZE 64 + +/* UART_LCR Register */ + /* Bits 31-7: Reserved */ +#define UART_LCR_BOC 0x00000040 /* Bit 6: Break Control */ + /* Bit 5: Parity Type 2 */ +#define UART_LCR_PAREVEN 0x00000010 /* Bit 4: Parity Type 1 */ +#define UART_LCR_PARODD 0x00000000 +#define UART_LCR_PAREN 0x00000008 /* Bit 3: Paity Enable */ +#define UART_LCR_PARDIS 0x00000000 +#define UART_LCR_2STOP 0x00000004 /* Bit 2: Number of stop bits */ +#define UART_LCR_1STOP 0x00000000 +#define UART_LCR_5BITS 0x00000000 /* Bits 0-1: Word-length */ +#define UART_LCR_6BITS 0x00000001 +#define UART_LCR_7BITS 0x00000002 +#define UART_LCR_8BITS 0x00000003 + +#define UART_FCR_FTL 0x00000000 +#define UART_FCR_FIFO_EN 0x00000001 +#define UART_FCR_TX_CLR 0x00000002 +#define UART_FCR_RX_CLR 0x00000004 + +#define UART_IER_RECVINT 0x00000001 +#define UART_IER_XMITINT 0x00000002 +#define UART_IER_LINESTSINT 0x00000004 +#define UART_IER_MODEMSTSINT 0x00000008 /* IrDA UART only */ +#define UART_IER_XOFFINT 0x00000020 +#define UART_IER_RTSINT 0x00000040 /* IrDA UART only */ +#define UART_IER_CTSINT 0x00000080 /* IrDA UART only */ +#define UART_IER_INTMASK 0x000000ff + +#define BAUD_115200 0x00000001 +#define BAUD_57600 0x00000002 +#define BAUD_38400 0x00000003 +#define BAUD_19200 0x00000006 +#define BAUD_9600 0x0000000C +#define BAUD_4800 0x00000018 +#define BAUD_2400 0x00000030 +#define BAUD_1200 0x00000060 + +#define MDR_UART_MODE 0x00000000 /* Both IrDA and Modem UARTs */ +#define MDR_SIR_MODE 0x00000001 /* IrDA UART only */ +#define MDR_AUTOBAUDING_MODE 0x00000002 /* Modem UART only */ +#define MDR_RESET_MODE 0x00000007 /* Both IrDA and Modem UARTs */ + +/* SPI **********************************************************************/ + +#define MAX_SPI 3 + +#define SPI_REGISTER_BASE 0xffff2000 + +/* ARMIO ********************************************************************/ +/* Timers / Watchdog ********************************************************/ + +#define C5471_TIMER0_CTRL 0xffff2a00 +#define C5471_TIMER0_CNT 0xffff2a04 +#define C5471_TIMER1_CTRL 0xffff2b00 +#define C5471_TIMER1_CNT 0xffff2b04 +#define C5471_TIMER2_CTRL 0xffff2c00 +#define C5471_TIMER2_CNT 0xffff2c04 + +/* Interrupts ***************************************************************/ + +#define HAVE_SRC_IRQ_BIN_REG 0 + +#define INT_FIRST_IO 0xffff2d00 +#define INT_IO_RANGE 0x5C + +#define IT_REG 0xffff2d00 +#define MASK_IT_REG 0xffff2d04 +#define SRC_IRQ_REG 0xffff2d08 +#define SRC_FIQ_REG 0xffff2d0c +#define SRC_IRQ_BIN_REG 0xffff2d10 +#define INT_CTRL_REG 0xffff2d18 + +#define ILR_IRQ0_REG 0xffff2d1C /* 0-Timer 0 */ +#define ILR_IRQ1_REG 0xffff2d20 /* 1-Timer 1 */ +#define ILR_IRQ2_REG 0xffff2d24 /* 2-Timer 2 */ +#define ILR_IRQ3_REG 0xffff2d28 /* 3-GPIO0 */ +#define ILR_IRQ4_REG 0xffff2d2c /* 4-Ethernet */ +#define ILR_IRQ5_REG 0xffff2d30 /* 5-KBGPIO[7:0] */ +#define ILR_IRQ6_REG 0xffff2d34 /* 6-Uart serial */ +#define ILR_IRQ7_REG 0xffff2d38 /* 7-Uart IRDA */ +#define ILR_IRQ8_REG 0xffff2d3c /* 8-KBGPIO[15:8] */ +#define ILR_IRQ9_REG 0xffff2d40 /* 9-GPIO3 */ +#define ILR_IRQ10_REG 0xffff2d44 /* 10-GPIO2 */ +#define ILR_IRQ11_REG 0xffff2d48 /* 11-I2C */ +#define ILR_IRQ12_REG 0xffff2d4c /* 12-GPIO1 */ +#define ILR_IRQ13_REG 0xffff2d50 /* 13-SPI */ +#define ILR_IRQ14_REG 0xffff2d54 /* 14-GPIO[19:4] */ +#define ILR_IRQ15_REG 0xffff2d58 /* 15-API */ + +/* CLKM *********************************************************************/ + +#define CLKM 0xffff2f00 +#define CLKM_CTL_RST 0xffff2f10 +#define CLKM_RESET 0xffff2f18 + +#define CLKM_RESET_EIM 0x00000008 +#define CLKM_EIM_CLK_STOP 0x00000010 +#define CLKM_CTL_RST_LEAD_RESET 0x00000000 +#define CLKM_CTL_RST_EXT_RESET 0x00000002 + +/**************************************************************************** + * Inline Functions + ****************************************************************************/ + +/**************************************************************************** + * Public Function Prototypes + ****************************************************************************/ + +#endif /* __CALYPSO_CHIP_H */ diff --git a/nuttx/configs/compal_e99/include/board.h b/nuttx/configs/compal_e99/include/board.h new file mode 100644 index 0000000..1a1a743 --- /dev/null +++ b/nuttx/configs/compal_e99/include/board.h @@ -0,0 +1,6 @@ +/************************************************************************ + * arch/board.h + * + * Supposed to be empty + * + ************************************************************************/ diff --git a/nuttx/configs/compal_e99/ld.script b/nuttx/configs/compal_e99/ld.script new file mode 100644 index 0000000..07f1ab0 --- /dev/null +++ b/nuttx/configs/compal_e99/ld.script @@ -0,0 +1,126 @@ +/* + * Linker script for running from internal SRAM on Compal phones + * + * This script is tailored specifically to the requirements imposed + * on us by the Compal bootloader. + * + */ + +OUTPUT_FORMAT("elf32-littlearm", "elf32-littlearm", "elf32-littlearm") +OUTPUT_ARCH(arm) +ENTRY(__start) +MEMORY +{ + /* compal-loaded binary: our text, initialized data */ + LRAM (rw) : ORIGIN = 0x00800000, LENGTH = 0x00010000 + /* compal-loaded binary: our unitialized data, stacks, heap */ + IRAM (rw) : ORIGIN = 0x00810000, LENGTH = 0x00010000 +} +SECTIONS +{ + . = 0x800000; + + /* romloader data section, contains passthru interrupt vectors */ + .compal.loader (NOLOAD) : { . = 0x100; } > LRAM + + /* image signature (prepended by osmocon according to phone type) */ + .compal.header (NOLOAD) : { . = 4; } > LRAM + + /* initialization code */ + . = ALIGN(4); + .text.start : { + PROVIDE(__start = .); + KEEP(*(.text.start)) + *(.text.start) + } > LRAM + + /* exception vectors from 0x80001c to 0x800034 */ + .text.exceptions 0x80001c : AT (LOADADDR(.text.start) + SIZEOF(.text.start)) { + KEEP(*(.text.exceptions)) + * (.text.exceptions) + . = ALIGN(4); + } > LRAM + PROVIDE(_exceptions = LOADADDR(.text.exceptions)); + + /* code */ + . = ALIGN(4); + .text (LOADADDR(.text.exceptions) + SIZEOF(.text.exceptions)) : + AT (LOADADDR(.text.exceptions) + SIZEOF(.text.exceptions)) { + /* regular code */ + *(.text*) + /* always-in-ram code */ + *(.ramtext*) + /* gcc voodoo */ + *(.glue_7t) *(.glue_7) *(.vfp11_veneer) *(.v4_bx) + . = ALIGN(4); + } > LRAM + PROVIDE(_text_start = LOADADDR(.text)); + PROVIDE(_text_end = LOADADDR(.text) + SIZEOF(.text)); + + /* constructor pointers */ + .ctors : { + /* ctor count */ + LONG(SIZEOF(.ctors) / 4 - 2) + /* ctor pointers */ + KEEP(*(SORT(.ctors))) + /* end of list */ + LONG(0) + } > LRAM + PROVIDE(_ctor_start = LOADADDR(.ctors)); + PROVIDE(_ctor_end = LOADADDR(.ctors) + SIZEOF(.ctors)); + + /* destructor pointers */ + .dtors : { + /* dtor count */ + LONG(SIZEOF(.dtors) / 4 - 2) + /* dtor pointers */ + KEEP(*(SORT(.dtors))) + /* end of list */ + LONG(0) + } > LRAM + PROVIDE(_dtor_start = LOADADDR(.dtors)); + PROVIDE(_dtor_end = LOADADDR(.dtors) + SIZEOF(.dtors)); + + /* read-only data */ + . = ALIGN(4); + .rodata : { + *(.rodata*) + } > LRAM + PROVIDE(_rodata_start = LOADADDR(.rodata)); + PROVIDE(_rodata_end = LOADADDR(.rodata) + SIZEOF(.rodata)); + + /* initialized data */ + . = ALIGN(4); + .data : { + *(.data) + } > LRAM + PROVIDE(_data_start = LOADADDR(.data)); + PROVIDE(_data_end = LOADADDR(.data) + SIZEOF(.data)); + + /* pic offset tables */ + . = ALIGN(4); + .got : { + *(.got) + *(.got.plt) *(.igot.plt) *(.got) *(.igot) + } > LRAM + PROVIDE(_got_start = LOADADDR(.got)); + PROVIDE(_got_end = LOADADDR(.got) + SIZEOF(.got)); + + /* uninitialized data */ + .bss (NOLOAD) : { + . = ALIGN(4); + __bss_start = .; + _sbss = ABSOLUTE(.); + *(.bss) + _ebss = ABSOLUTE(.); + } > IRAM + . = ALIGN(4); + __bss_end = .; + PROVIDE(_bss_start = __bss_start); + PROVIDE(_bss_end = __bss_end); + + /* end of image */ + . = ALIGN(4); + _end = .; + PROVIDE(end = .); +} diff --git a/nuttx/configs/compal_e99/ostest/Make.defs b/nuttx/configs/compal_e99/ostest/Make.defs new file mode 100644 index 0000000..06ef3d4 --- /dev/null +++ b/nuttx/configs/compal_e99/ostest/Make.defs @@ -0,0 +1,123 @@ +############################################################################ +# configs/compal_e99/ostest/Make.defs +# +# Copyright (C) 2007, 2008, 2011 Gregory Nutt. All rights reserved. +# Author: Gregory Nutt <spudmonkey(a)racsa.co.cr> +# +# Redistribution and use in source and binary forms, with or without +# modification, are permitted provided that the following conditions +# are met: +# +# 1. Redistributions of source code must retain the above copyright +# notice, this list of conditions and the following disclaimer. +# 2. Redistributions in binary form must reproduce the above copyright +# notice, this list of conditions and the following disclaimer in +# the documentation and/or other materials provided with the +# distribution. +# 3. Neither the name NuttX nor the names of its contributors may be +# used to endorse or promote products derived from this software +# without specific prior written permission. +# +# THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS +# "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT +# LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS +# FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE +# COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, +# INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, +# BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS +# OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED +# AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT +# LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN +# ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE +# POSSIBILITY OF SUCH DAMAGE. +# +############################################################################ + +include ${TOPDIR}/.config + +OSMODIR = $(TOPDIR)/../../osmocom-bb +EXTRA_LIBS = $(OSMODIR)/src/target/firmware/comm/libcomm.a $(OSMODIR)/src/shared/libosmocore/build-target/src/.libs/libosmocore.a $(OSMODIR)/src/target/firmware/comm/libcomm.a + # ^^^ Stupid hack! Why do I have to put it twice??? + +CROSSDEV = arm-elf- +CC = $(CROSSDEV)gcc +CPP = $(CROSSDEV)gcc -E +LD = $(CROSSDEV)ld +AR = $(CROSSDEV)ar rcs +NM = $(CROSSDEV)nm +OBJCOPY = $(CROSSDEV)objcopy +OBJDUMP = $(CROSSDEV)objdump + +ARCHCCVERSION = ${shell $(CC) -v 2>&1 | sed -n '/^gcc version/p' | sed -e 's/^gcc version $[0-9\.]$/\1/g' -e 's/[-\ ].*//g' -e '1q'} +ARCHCCMAJOR = ${shell echo $(ARCHCCVERSION) | cut -d'.' -f1} + +ifeq ("${CONFIG_DEBUG_SYMBOLS}","y") + ARCHOPTIMIZATION = -g +else + ARCHOPTIMIZATION = -Os -fno-strict-aliasing -fno-strength-reduce \ + -fomit-frame-pointer +endif + +ifeq ($(ARCHCCMAJOR),4) + ARCHCPUFLAGS = -mcpu=arm7tdmi -mfloat-abi=soft -fno-builtin +else + ARCHCPUFLAGS = -mapcs-32 -mcpu=arm7tdmi -msoft-float -fno-builtin +endif +ARCHPICFLAGS = -fpic -msingle-pic-base -mpic-register=r10 +ARCHWARNINGS = -Wall -Wstrict-prototypes -Wshadow +ARCHDEFINES = +ARCHINCLUDES = -I. -I$(OSMODIR)/src/shared/libosmocore/include -isystem $(TOPDIR)/include +ARCHSCRIPT = -T$(TOPDIR)/configs/$(CONFIG_ARCH_BOARD)/ld.script + +CFLAGS = $(ARCHWARNINGS) $(ARCHOPTIMIZATION) \ + $(ARCHCPUFLAGS) $(ARCHINCLUDES) $(ARCHDEFINES) $(EXTRADEFINES) -pipe +CPICFLAGS = $(ARCHPICFLAGS) $(CFLAGS) +CPPFLAGS = $(ARCHINCLUDES) $(ARCHDEFINES) $(EXTRADEFINES) +AFLAGS = $(CFLAGS) -D__ASSEMBLY__ + +NXFLATLDFLAGS1 = -r -d -warn-common +NXFLATLDFLAGS2 = $(NXFLATLDFLAGS1) \ + -T$(TOPDIR)/binfmt/libnxflat/gnu-nxflat.ld \ + -no-check-sections +LDNXFLATFLAGS = -e main -s 2048 + +OBJEXT = .o +LIBEXT = .a +EXEEXT = + +ifeq ("${CONFIG_DEBUG_SYMBOLS}","y") + LDFLAGS += -g +endif + +define PREPROCESS + @echo "CPP: $1->$2" + @$(CPP) $(CPPFLAGS) $1 -o $2 +endef + +define COMPILE + @echo "CC: $1" + @$(CC) -c $(CFLAGS) $1 -o $2 +endef + +define ASSEMBLE + @echo "AS: $1" + @$(CC) -c $(AFLAGS) $1 -o $2 +endef + +define ARCHIVE + echo "AR: $2"; \ + $(AR) $1 $2 || { echo "$(AR) $1 $2 FAILED!" ; exit 1 ; } +endef + +define CLEAN + @rm -f *.o *.a +endef + +MKDEP = $(TOPDIR)/tools/mkdeps.sh + +HOSTCC = gcc +HOSTINCLUDES = -I. +HOSTCFLAGS = -Wall -wstrict-prototypes -Wshadow -g -pipe +HOSTLDFLAGS = + + diff --git a/nuttx/configs/compal_e99/ostest/appconfig b/nuttx/configs/compal_e99/ostest/appconfig new file mode 100644 index 0000000..97e30c0 --- /dev/null +++ b/nuttx/configs/compal_e99/ostest/appconfig @@ -0,0 +1,39 @@ +############################################################################ +# configs/c5471evm/ostest/appconfig +# +# Copyright (C) 2011 Gregory Nutt. All rights reserved. +# Author: Gregory Nutt <spudmonkey(a)racsa.co.cr> +# +# Redistribution and use in source and binary forms, with or without +# modification, are permitted provided that the following conditions +# are met: +# +# 1. Redistributions of source code must retain the above copyright +# notice, this list of conditions and the following disclaimer. +# 2. Redistributions in binary form must reproduce the above copyright +# notice, this list of conditions and the following disclaimer in +# the documentation and/or other materials provided with the +# distribution. +# 3. Neither the name NuttX nor the names of its contributors may be +# used to endorse or promote products derived from this software +# without specific prior written permission. +# +# THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS +# "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT +# LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS +# FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE +# COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, +# INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, +# BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS +# OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED +# AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT +# LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN +# ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE +# POSSIBILITY OF SUCH DAMAGE. +# +############################################################################ + +# Path to example in apps/examples containing the user_start entry point + +CONFIGURED_APPS += examples/ostest + diff --git a/nuttx/configs/compal_e99/ostest/defconfig b/nuttx/configs/compal_e99/ostest/defconfig new file mode 100644 index 0000000..7cb55e2 --- /dev/null +++ b/nuttx/configs/compal_e99/ostest/defconfig @@ -0,0 +1,414 @@ +############################################################################ +# configs/compal_e99/ostest/defconfig +# +# Copyright (C) 2007-2011 Gregory Nutt. All rights reserved. +# Author: Gregory Nutt <spudmonkey(a)racsa.co.cr> +# +# Redistribution and use in source and binary forms, with or without +# modification, are permitted provided that the following conditions +# are met: +# +# 1. Redistributions of source code must retain the above copyright +# notice, this list of conditions and the following disclaimer. +# 2. Redistributions in binary form must reproduce the above copyright +# notice, this list of conditions and the following disclaimer in +# the documentation and/or other materials provided with the +# distribution. +# 3. Neither the name NuttX nor the names of its contributors may be +# used to endorse or promote products derived from this software +# without specific prior written permission. +# +# THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS +# "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT +# LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS +# FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE +# COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, +# INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, +# BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS +# OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED +# AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT +# LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN +# ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE +# POSSIBILITY OF SUCH DAMAGE. +# +############################################################################ +# +# architecture selection +# +# CONFIG_ARCH - identifies the arch subdirectory and, hence, the +# processor architecture. +# CONFIG_ARCH_family - for use in C code. This identifies the +# particular chip family that the architecture is implemented +# in. +# CONFIG_ARCH_architecture - for use in C code. This identifies the +# specific architecture within the chip familyl. +# CONFIG_ARCH_CHIP - Identifies the arch/*/chip subdirectory +# CONFIG_ARCH_CHIP_name - For use in C code +# CONFIG_ARCH_BOARD - identifies the configs subdirectory and, hence, +# the board that supports the particular chip or SoC. +# CONFIG_ARCH_BOARD_name - for use in C code +# CONFIG_BOARD_LOOPSPERMSEC - for delay loops +# CONFIG_ENDIAN_BIG - define if big endian (default is little endian) +# CONFIG_ROM_VECTORS - unique to c5471 +# CONFIG_DRAM_END - the size of installed DRAM. +# Unique to c5471 +# CONFIG_ARCH_LEDS - Use LEDs to show state. Unique to c5471. +# CONFIG_ARCH_INTERRUPTSTACK - This architecture supports an interrupt +# stack. If defined, this symbol is the size of the interrupt +# stack in bytes. If not defined, the user task stacks will be +# used during interrupt handling. +# CONFIG_ARCH_STACKDUMP - Do stack dumps after assertions +# +CONFIG_ARCH=arm +CONFIG_ARCH_ARM=y +CONFIG_ARCH_ARM7TDMI=y +CONFIG_ARCH_CHIP=calypso +CONFIG_ARCH_CHIP_CALYPSO=y +CONFIG_ARCH_BOARD=compal_e99 +CONFIG_ARCH_BOARD_COMPALE99=y +CONFIG_BOARD_LOOPSPERMSEC=1250 +CONFIG_ROM_VECTORS=n +CONFIG_DRAM_END=0x00840000 +CONFIG_ARCH_LEDS=n +CONFIG_ARCH_INTERRUPTSTACK=1024 +CONFIG_ARCH_STACKDUMP=y + +# +# General build options +# +# CONFIG_RRLOAD_BINARY - make the rrload binary format used with +# BSPs from www.ridgerun.com using the tools/mkimage.sh script +# CONFIG_INTELHEX_BINARY - make the Intel HEX binary format +# used with many different loaders using the GNU objcopy program +# Should not be selected if you are not using the GNU toolchain. +# CONFIG_RAW_BINARY - make a raw binary format file used with many +# different loaders using the GNU objcopy program. This option +# should not be selected if you are not using the GNU toolchain. +# CONFIG_HAVE_LIBM - toolchain supports libm.a +# +CONFIG_RRLOAD_BINARY=n +CONFIG_INTELHEX_BINARY=n +CONFIG_RAW_BINARY=y +CONFIG_HAVE_LIBM=n + +# +# General OS setup +# +# CONFIG_APPS_DIR - Identifies the relative path to the directory +# that builds the application to link with NuttX. Default: ../apps +# CONFIG_DEBUG - enables built-in debug options +# CONFIG_DEBUG_VERBOSE - enables verbose debug output +# CONFIG_DEBUG_SYMBOLS - build without optimization and with +# debug symbols (needed for use with a debugger). +# CONFIG_MM_REGIONS - If the architecture includes multiple +# regions of memory to allocate from, this specifies the +# number of memory regions that the memory manager must +# handle and enables the API mm_addregion(start, end); +# CONFIG_ARCH_LOWPUTC - architecture supports low-level, boot +# time console output +# CONFIG_TICKS_PER_MSEC - The default system timer is 100Hz +# or TICKS_PER_MSEC=10. This setting may be defined to +# inform NuttX that the processor hardware is providing +# system timer interrupts at some interrupt interval other +# than 10 msec. +# CONFIG_RR_INTERVAL - The round robin timeslice will be set +# this number of milliseconds; Round robin scheduling can +# be disabled by setting this value to zero. +# CONFIG_SCHED_INSTRUMENTATION - enables instrumentation in +# scheduler to monitor system performance +# CONFIG_TASK_NAME_SIZE - Spcifies that maximum size of a +# task name to save in the TCB. Useful if scheduler +# instrumentation is selected. Set to zero to disable. +# CONFIG_START_YEAR, CONFIG_START_MONTH, CONFIG_START_DAY - +# Used to initialize the internal time logic. +# CONFIG_JULIAN_TIME - Enables Julian time conversions +# CONFIG_DEV_CONSOLE - Set if architecture-specific logic +# provides /dev/console. Enables stdout, stderr, stdin. +# CONFIG_DEV_LOWCONSOLE - Use the simple, low-level serial console +# driver (minimul support) +# CONFIG_MUTEX_TYPES: Set to enable support for recursive and +# errorcheck mutexes. Enables pthread_mutexattr_settype(). +# CONFIG_PRIORITY_INHERITANCE : Set to enable support for priority +# inheritance on mutexes and semaphores. +# CONFIG_SEM_PREALLOCHOLDERS: This setting is only used if priority +# inheritance is enabled. It defines the maximum number of +# different threads (minus one) that can take counts on a +# semaphore with priority inheritance support. This may be +# set to zero if priority inheritance is disabled OR if you +# are only using semaphores as mutexes (only one holder) OR +# if no more than two threads participate using a counting +# semaphore. +# CONFIG_SEM_NNESTPRIO. If priority inheritance is enabled, +# then this setting is the maximum number of higher priority +# threads (minus 1) than can be waiting for another thread +# to release a count on a semaphore. This value may be set +# to zero if no more than one thread is expected to wait for +# a semaphore. +# CONFIG_FDCLONE_DISABLE. Disable cloning of all file descriptors +# by task_create() when a new task is started. If set, all +# files/drivers will appear to be closed in the new task. +# CONFIG_FDCLONE_STDIO. Disable cloning of all but the first +# three file descriptors (stdin, stdout, stderr) by task_create() +# when a new task is started. If set, all files/drivers will +# appear to be closed in the new task except for stdin, stdout, +# and stderr. +# CONFIG_SDCLONE_DISABLE. Disable cloning of all socket +# desciptors by task_create() when a new task is started. If +# set, all sockets will appear to be closed in the new task. +# CONFIG_NXFLAT. Enable support for the NXFLAT binary format. +# This format will support execution of NuttX binaries located +# in a ROMFS filesystem (see examples/nxflat). +# +#CONFIG_APPS_DIR= +CONFIG_DEBUG=n +CONFIG_DEBUG_VERBOSE=n +CONFIG_DEBUG_SYMBOLS=n +CONFIG_MM_REGIONS=2 +CONFIG_ARCH_LOWPUTC=y +CONFIG_RR_INTERVAL=200 +CONFIG_SCHED_INSTRUMENTATION=n +CONFIG_TASK_NAME_SIZE=0 +CONFIG_START_YEAR=2007 +CONFIG_START_MONTH=2 +CONFIG_START_DAY=13 +CONFIG_JULIAN_TIME=n +CONFIG_DEV_CONSOLE=n +CONFIG_DEV_LOWCONSOLE=n +CONFIG_MUTEX_TYPES=n +CONFIG_PRIORITY_INHERITANCE=n +CONFIG_SEM_PREALLOCHOLDERS=0 +CONFIG_SEM_NNESTPRIO=0 +CONFIG_FDCLONE_DISABLE=n +CONFIG_FDCLONE_STDIO=n +CONFIG_SDCLONE_DISABLE=y +CONFIG_NXFLAT=n + +# +# The following can be used to disable categories of +# APIs supported by the OS. If the compiler supports +# weak functions, then it should not be necessary to +# disable functions unless you want to restrict usage +# of those APIs. +# +# There are certain dependency relationships in these +# features. +# +# o mq_notify logic depends on signals to awaken tasks +# waiting for queues to become full or empty. +# o pthread_condtimedwait() depends on signals to wake +# up waiting tasks. +# +CONFIG_DISABLE_CLOCK=n +CONFIG_DISABLE_POSIX_TIMERS=n +CONFIG_DISABLE_PTHREAD=n +CONFIG_DISABLE_SIGNALS=n +CONFIG_DISABLE_MQUEUE=y +CONFIG_DISABLE_MOUNTPOINT=y +CONFIG_DISABLE_ENVIRON=n +CONFIG_DISABLE_POLL=y + +# +# Misc libc settings +# +# CONFIG_NOPRINTF_FIELDWIDTH - sprintf-related logic is a +# little smaller if we do not support fieldwidthes +# +CONFIG_NOPRINTF_FIELDWIDTH=n + +# +# Allow for architecture optimized implementations +# +# The architecture can provide optimized versions of the +# following to improve sysem performance +# +CONFIG_ARCH_MEMCPY=n +CONFIG_ARCH_MEMCMP=n +CONFIG_ARCH_MEMMOVE=n +CONFIG_ARCH_MEMSET=n +CONFIG_ARCH_STRCMP=n +CONFIG_ARCH_STRCPY=n +CONFIG_ARCH_STRNCPY=n +CONFIG_ARCH_STRLEN=n +CONFIG_ARCH_STRNLEN=n +CONFIG_ARCH_BZERO=n + +# +# Sizes of configurable things (0 disables) +# +# CONFIG_MAX_TASKS - The maximum number of simultaneously +# active tasks. This value must be a power of two. +# CONFIG_MAX_TASK_ARGS - This controls the maximum number of +# of parameters that a task may receive (i.e., maxmum value +# of 'argc') +# CONFIG_NPTHREAD_KEYS - The number of items of thread- +# specific data that can be retained +# CONFIG_NFILE_DESCRIPTORS - The maximum number of file +# descriptors (one for each open) +# CONFIG_NFILE_STREAMS - The maximum number of streams that +# can be fopen'ed +# CONFIG_NAME_MAX - The maximum size of a file name. +# CONFIG_STDIO_BUFFER_SIZE - Size of the buffer to allocate +# on fopen. (Only if CONFIG_NFILE_STREAMS > 0) +# CONFIG_NUNGET_CHARS - Number of characters that can be +# buffered by ungetc() (Only if CONFIG_NFILE_STREAMS > 0) +# CONFIG_PREALLOC_MQ_MSGS - The number of pre-allocated message +# structures. The system manages a pool of preallocated +# message structures to minimize dynamic allocations +# CONFIG_MQ_MAXMSGSIZE - Message structures are allocated with +# a fixed payload size given by this settin (does not include +# other message structure overhead. +# CONFIG_MAX_WDOGPARMS - Maximum number of parameters that +# can be passed to a watchdog handler +# CONFIG_PREALLOC_WDOGS - The number of pre-allocated watchdog +# structures. The system manages a pool of preallocated +# watchdog structures to minimize dynamic allocations +# CONFIG_PREALLOC_TIMERS - The number of pre-allocated POSIX +# timer structures. The system manages a pool of preallocated +# timer structures to minimize dynamic allocations. Set to +# zero for all dynamic allocations. +# +CONFIG_MAX_TASKS=64 +CONFIG_MAX_TASK_ARGS=4 +CONFIG_NPTHREAD_KEYS=4 +CONFIG_NFILE_DESCRIPTORS=32 +CONFIG_NFILE_STREAMS=16 +CONFIG_NAME_MAX=32 +CONFIG_STDIO_BUFFER_SIZE=256 +CONFIG_NUNGET_CHARS=2 +CONFIG_PREALLOC_MQ_MSGS=32 +CONFIG_MQ_MAXMSGSIZE=32 +CONFIG_MAX_WDOGPARMS=4 +CONFIG_PREALLOC_WDOGS=32 +CONFIG_PREALLOC_TIMERS=8 + +# +# TCP/IP and UDP support via uIP +# CONFIG_NET - Enable or disable all network features +# CONFIG_NET_IPv6 - Build in support for IPv6 +# CONFIG_NSOCKET_DESCRIPTORS - Maximum number of socket descriptors per task/thread. +# CONFIG_NET_SOCKOPTS - Enable or disable support for socket options +# CONFIG_NET_BUFSIZE - uIP buffer size +# CONFIG_NET_TCP - TCP support on or off +# CONFIG_NET_TCP_CONNS - Maximum number of TCP connections (all tasks) +# CONFIG_NET_TCP_READAHEAD_BUFSIZE - Size of TCP read-ahead buffers +# CONFIG_NET_NTCP_READAHEAD_BUFFERS - Number of TCP read-ahead buffers (may be zero) +# CONFIG_NET_TCPBACKLOG - Incoming connections pend in a backlog until +# accept() is called. The size of the backlog is selected when listen() is called. +# CONFIG_NET_MAX_LISTENPORTS - Maximum number of listening TCP ports (all tasks) +# CONFIG_NET_UDP - UDP support on or off +# CONFIG_NET_UDP_CHECKSUMS - UDP checksums on or off +# CONFIG_NET_UDP_CONNS - The maximum amount of concurrent UDP connections +# CONFIG_NET_ICMP - ICMP ping response support on or off +# CONFIG_NET_ICMP_PING - ICMP ping request support on or off +# CONFIG_NET_PINGADDRCONF - Use "ping" packet for setting IP address +# CONFIG_NET_STATISTICS - uIP statistics on or off +# CONFIG_NET_RECEIVE_WINDOW - The size of the advertised receiver's window +# CONFIG_NET_ARPTAB_SIZE - The size of the ARP table +# CONFIG_NET_BROADCAST - Broadcast support +# CONFIG_NET_FWCACHE_SIZE - number of packets to remember when looking for duplicates +# +CONFIG_NET=n +CONFIG_NET_IPv6=n +CONFIG_NSOCKET_DESCRIPTORS=0 +CONFIG_NET_SOCKOPTS=y +CONFIG_NET_BUFSIZE=420 +CONFIG_NET_TCP=n +CONFIG_NET_TCP_CONNS=40 +CONFIG_NET_NTCP_READAHEAD_BUFFERS=8 +CONFIG_NET_TCPBACKLOG=n +CONFIG_NET_MAX_LISTENPORTS=40 +CONFIG_NET_UDP=n +CONFIG_NET_UDP_CHECKSUMS=y +#CONFIG_NET_UDP_CONNS=10 +CONFIG_NET_ICMP=n +CONFIG_NET_ICMP_PING=n +#CONFIG_NET_PINGADDRCONF=0 +CONFIG_NET_STATISTICS=y +#CONFIG_NET_RECEIVE_WINDOW= +#CONFIG_NET_ARPTAB_SIZE=8 +CONFIG_NET_BROADCAST=n +#CONFIG_NET_FWCACHE_SIZE=2 + +# +# UIP Network Utilities +# CONFIG_NET_DHCP_LIGHT - Reduces size of DHCP +# CONFIG_NET_RESOLV_ENTRIES - Number of resolver entries +CONFIG_NET_DHCP_LIGHT=n +CONFIG_NET_RESOLV_ENTRIES=4 + +# +# Settings for examples/uip +CONFIG_EXAMPLE_UIP_NOMAC=y +CONFIG_EXAMPLE_UIP_IPADDR=(10<<24|0<<16|0<<8|2) +CONFIG_EXAMPLE_UIP_DRIPADDR=(10<<24|0<<16|0<<8|1) +CONFIG_EXAMPLE_UIP_NETMASK=(255<<24|255<<16|255<<8|0) +CONFIG_EXAMPLE_UIP_DHCPC=n + +# +# Settings for examples/nettest +CONFIG_EXAMPLE_NETTEST_SERVER=n +CONFIG_EXAMPLE_NETTEST_PERFORMANCE=n +CONFIG_EXAMPLE_NETTEST_NOMAC=y +CONFIG_EXAMPLE_NETTEST_IPADDR=(10<<24|0<<16|0<<8|2) +CONFIG_EXAMPLE_NETTEST_DRIPADDR=(10<<24|0<<16|0<<8|1) +CONFIG_EXAMPLE_NETTEST_NETMASK=(255<<24|255<<16|255<<8|0) +CONFIG_EXAMPLE_NETTEST_CLIENTIP=(10<<24|0<<16|0<<8|1) + +# +# Settings for examples/nsh +CONFIG_NSH_CONSOLE=y +CONFIG_NSH_TELNET=n +CONFIG_NSH_IOBUFFER_SIZE=512 +CONFIG_NSH_CMD_SIZE=40 +CONFIG_NSH_STACKSIZE=4096 +CONFIG_NSH_DHCPC=n +CONFIG_NSH_NOMAC=y +CONFIG_NSH_IPADDR=(10<<24|0<<16|0<<8|2) +CONFIG_NSH_DRIPADDR=(10<<24|0<<16|0<<8|1) +CONFIG_NSH_NETMASK=(255<<24|255<<16|255<<8|0) + +# +# Settings for examples/wget +# CONFIG_EXAMPLE_WGET_URL - The URL of the file to get +# CONFIG_EXAMPLE_WGET_NOMAC - (May be defined to use software assigned MAC) +# CONFIG_EXAMPLE_WGET_IPADDR - Target IP address +# CONFIG_EXAMPLE_WGET_DRIPADDR - Default router IP addess +# CONFIG_EXAMPLE_WGET_NETMASK - Network mask +CONFIG_EXAMPLE_WGET_URL="http://www.nuttx.org/index.html" +CONFIG_EXAMPLE_WGET_NOMAC=y +CONFIG_EXAMPLE_WGET_IPADDR=(10L<<24|0L<<16|0L<<8|2L) +CONFIG_EXAMPLE_WGET_DRIPADDR=(10L<<24|0L<<16|0L<<8|1L) +CONFIG_EXAMPLE_WGET_NETMASK=(255L<<24|255L<<16|255L<<8|0L) + +# +# Stack and heap information +# +# CONFIG_BOOT_RUNFROMFLASH - Some configurations support XIP +# operation from FLASH but must copy initialized .data sections to RAM. +# CONFIG_BOOT_COPYTORAM - Some configurations boot in FLASH +# but copy themselves entirely into RAM for better performance. +# CONFIG_CUSTOM_STACK - The up_ implementation will handle +# all stack operations outside of the nuttx model. +# CONFIG_STACK_POINTER - The initial stack pointer (arm7tdmi only) +# CONFIG_IDLETHREAD_STACKSIZE - The size of the initial stack. +# This is the thread that (1) performs the inital boot of the system up +# to the point where user_start() is spawned, and (2) there after is the +# IDLE thread that executes only when there is no other thread ready to +# run. +# CONFIG_USERMAIN_STACKSIZE - The size of the stack to allocate +# for the main user thread that begins at the user_start() entry point. +# CONFIG_PTHREAD_STACK_MIN - Minimum pthread stack size +# CONFIG_PTHREAD_STACK_DEFAULT - Default pthread stack size +# CONFIG_HEAP_BASE - The beginning of the heap +# CONFIG_HEAP_SIZE - The size of the heap +# +CONFIG_BOOT_RUNFROMFLASH=n +CONFIG_BOOT_COPYTORAM=n +CONFIG_CUSTOM_STACK=n +CONFIG_STACK_POINTER= +CONFIG_IDLETHREAD_STACKSIZE=4096 +CONFIG_USERMAIN_STACKSIZE=4096 +CONFIG_PTHREAD_STACK_MIN=256 +CONFIG_PTHREAD_STACK_DEFAULT=4096 +CONFIG_HEAP_BASE= +CONFIG_HEAP_SIZE= diff --git a/nuttx/configs/compal_e99/ostest/setenv.sh b/nuttx/configs/compal_e99/ostest/setenv.sh new file mode 100755 index 0000000..dc2c643 --- /dev/null +++ b/nuttx/configs/compal_e99/ostest/setenv.sh @@ -0,0 +1,46 @@ +#!/bin/bash +# c5471evm/ostest/setenv.sh +# +# Copyright (C) 2007, 2008, 2011 Gregory Nutt. All rights reserved. +# Author: Gregory Nutt <spudmonkey(a)racsa.co.cr> +# +# Redistribution and use in source and binary forms, with or without +# modification, are permitted provided that the following conditions +# are met: +# +# 1. Redistributions of source code must retain the above copyright +# notice, this list of conditions and the following disclaimer. +# 2. Redistributions in binary form must reproduce the above copyright +# notice, this list of conditions and the following disclaimer in +# the documentation and/or other materials provided with the +# distribution. +# 3. Neither the name NuttX nor the names of its contributors may be +# used to endorse or promote products derived from this software +# without specific prior written permission. +# +# THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS +# "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT +# LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS +# FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE +# COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, +# INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, +# BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS +# OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED +# AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT +# LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN +# ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE +# POSSIBILITY OF SUCH DAMAGE. +# + +if [ "$(basename $0)" = "setenv.sh" ] ; then + echo "You must source this script, not run it!" 1>&2 + exit 1 +fi + +if [ -z ${PATH_ORIG} ]; then export PATH_ORIG=${PATH}; fi + +WD=`pwd` +export BUILDROOT_BIN=${WD}/../buildroot/build_arm_nofpu/staging_dir/bin +export PATH=${BUILDROOT_BIN}:/sbin:/usr/sbin:${PATH_ORIG} + +echo "PATH : ${PATH}" diff --git a/nuttx/configs/compal_e99/src/Makefile b/nuttx/configs/compal_e99/src/Makefile new file mode 100644 index 0000000..2160ea3 --- /dev/null +++ b/nuttx/configs/compal_e99/src/Makefile @@ -0,0 +1,80 @@ +############################################################################ +# configs/compal_e99/src/Makefile +# +# Copyright (C) 2007, 2008 Gregory Nutt. All rights reserved. +# Author: Gregory Nutt <spudmonkey(a)racsa.co.cr> +# +# Copyright (C) 2011 Stefan Richter. All rights reserved. +# Author: Stefan Richter <ichgeh(a)l--putt.de> +# +# Redistribution and use in source and binary forms, with or without +# modification, are permitted provided that the following conditions +# are met: +# +# 1. Redistributions of source code must retain the above copyright +# notice, this list of conditions and the following disclaimer. +# 2. Redistributions in binary form must reproduce the above copyright +# notice, this list of conditions and the following disclaimer in +# the documentation and/or other materials provided with the +# distribution. +# 3. Neither the name NuttX nor the names of its contributors may be +# used to endorse or promote products derived from this software +# without specific prior written permission. +# +# THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS +# "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT +# LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS +# FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE +# COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, +# INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, +# BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS +# OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED +# AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT +# LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN +# ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE +# POSSIBILITY OF SUCH DAMAGE. +# +############################################################################ + +-include $(TOPDIR)/Make.defs + +CFLAGS += -I$(TOPDIR)/sched + +ASRCS = +AOBJS = $(ASRCS:.S=$(OBJEXT)) +CSRCS = dummy.c +COBJS = $(CSRCS:.c=$(OBJEXT)) + +SRCS = $(ASRCS) $(CSRCS) +OBJS = $(AOBJS) $(COBJS) + +ARCH_SRCDIR = $(TOPDIR)/arch/$(CONFIG_ARCH)/src +CFLAGS += -I$(ARCH_SRCDIR)/chip -I$(ARCH_SRCDIR)/common -I$(ARCH_SRCDIR)/arm + +all: libboard$(LIBEXT) + +$(AOBJS): %$(OBJEXT): %.S + $(call ASSEMBLE, $<, $@) + +$(COBJS) $(LINKOBJS): %$(OBJEXT): %.c + $(call COMPILE, $<, $@) + +libboard$(LIBEXT): $(OBJS) + @( for obj in $(OBJS) ; do \ + $(call ARCHIVE, $@, $${obj}); \ + done ; ) + +.depend: Makefile $(SRCS) + @$(MKDEP) $(CC) -- $(CFLAGS) -- $(SRCS) >Make.dep + @touch $@ + +depend: .depend + +clean: + @rm -f libboard$(LIBEXT) *~ .*.swp + $(call CLEAN) + +distclean: clean + @rm -f Make.dep .depend + +-include Make.dep diff --git a/nuttx/configs/compal_e99/src/dummy.c b/nuttx/configs/compal_e99/src/dummy.c new file mode 100644 index 0000000..69853a1 --- /dev/null +++ b/nuttx/configs/compal_e99/src/dummy.c @@ -0,0 +1 @@ +/* no libboard.a otherwise */ -- 1.7.1

1 0

T191 unlock cable
by R M 24 May '11

24 May '11

Hi This is my first mail to this list. I have downloaded the code and compiled it. My development environment is Eclipse using cygwin as I am a Windows user. I have succeeded in procuring Motorola C115 phone and also T191 unlock cable but the cable has a serial port on one end and 2.5 mm audio jack at the other. My laptop doesn't have a serial port. It only has USB ports. What sort of USB to serial converter should I use? I have not enquired the cost of FDTI cables in India. But they seem to cost a fortune online. Please do suggest one that is cheap say within 200 rupees. I am also having difficulty downloading Iota and Rita data sheets as the links provided in the wiki lead to chinese sites and I don't understand chinese. Can some one who has already downloaded them please tell me the process like which buttons I need to click etc. Regards, RM

2 3

GSMTAP now creates a locally bound receive socket
by Harald Welte 23 May '11

23 May '11

Hi! libosmocore >= 0.3.1 and the current osmocom-bb code will now generate not only the sending GSMTAP UDP socket, but also a locally-bound receive socket. This avoids the manual start of "nc -l -u -p 4729 >/dev/null" or iptables rules to drop the UDP packets. The local receive socket is only created if the GSMTAP IP address is a locally configured address on any of your network interfaces. So sending it to 127.0.0.1 should work well. Don't be surprised if you happen to see GSMTAP over IPv6, I'm now using getaddrinfo() and related functions, i.e. "loopback" may now resolve to ::1 instead of 127.0.0.1 Regards, Harald -- - Harald Welte <laforge(a)gnumonks.org> http://laforge.gnumonks.org/ ============================================================================ "Privacy in residential applications is a desirable marketing option." (ETSI EN 300 175-7 Ch. A6)

2 2

Re: Anybody using a BTS for debugging?
by Mohammad Hosein 23 May '11

23 May '11

most of the test systems are not built to be used for on-air operations . the ones that offer such features must be used in Shield rooms where no signal gets in or out . these rooms are expensive but usually tech universities have some rental hours for their shield and antenna rooms . its expensive as well , otherwise you are probably going to have some conflict with local regulatory sooner or later regards On Thu, May 19, 2011 at 9:04 PM, Gianni Tedesco <gianni(a)scaramanga.co.uk>wrote: > On Fri, 2011-05-13 at 15:00 +0430, Mohammad Hosein wrote: > > you could use most GSM test systems for such purpose . on ebay you > > might find very cheap ones > > regards > > I managed to track down a Racal 6103. It should arrive in next couple of > days. > > As a followup question then, I guess that these are intended for wired > rf connection or at least they transmit at very low power, and tell the > phone to do the same. > > However, one would feel a lot better using a channel unused by other > cells in my location. I've been using cell_log to put together a list of > active ARFCN's that my handset receives broadcasts from. Script for > parsing cell_log logs is attached. > > Am I to conclude that if cell_log hasn't dumped: > > [sysinfo] > arfcn 99 > > for example, after running for a reasonably long period of time (say > 24hrs) that operating test equipment on channel 99 should be safe? > > Gianni > > -- > > #!/usr/bin/python > > def getline(f): > while True: > l = f.readline() > if not l: > raise StopIteration > l = l.rstrip('\r\n') > if not l: > continue > yield l > def bsic(v): > (a,b) = v.split(',') > return (int(a),int(b)) > > def hexdump(v): > ret = bytearray() > for x in v.split(): > ret.append(int(x, 16)) > return ret > > class Parser: > pass > > class Power(Parser): > def line(self, s): > return > > class mcc: > tbl = {0x234: 'UK and Northern Ireland'} > def __init__(self, num): > x = ((num & 0xf00) >> 8, > (num & 0xf000) >> 12, > (num & 0xf)) > self.val = (x[0] << 8) | x[1] << 4 | x[2] > def __int__(self): > return self.val > def __str__(self): > return self.tbl.get(self.val, '%.3x'%self.val) > > class mnc: > tbl = {0x15: 'Vodafone', > 0x30: 'T-Mobile', > 0x10: 'O2', > 0x33: 'Orange', > } > def __init__(self, num): > x = ((num & 0xf0) >> 4, > (num & 0xf)) > self.val = (x[1] << 4) | x[0] > def __int__(self): > return self.val > def __str__(self): > return self.tbl.get(self.val, '%.2x'%self.val) > > class SystemInfo: > pass > > class SystemInfo3(SystemInfo): > def __init__(self, b): > if isinstance(b, str): > b = hexdump(b) > assert(b[0] > 9) # len > assert(b[1] == 0x06) # discr > assert(b[2] == 0x1b) # sysinfo3 > self.cell = (b[3] << 8) | b[4] > self.mcc = mcc((b[5] << 8) | b[6]) > self.mnc = mnc(b[7]) > self.lac = (b[8] << 8) | b[9] > def __str__(self): > return 'Cell(%s, %s)'%(self.mcc,self.mnc) > > class SystemInfo4(SystemInfo): > def __init__(self, b): > if isinstance(b, str): > b = hexdump(b) > assert(b[0] > 7) # len > assert(b[1] == 0x06) # discr > assert(b[2] == 0x1c) # sysinfo4 > self.cell = None > self.mcc = mcc((b[3] << 8) | b[4]) > self.mnc = mnc(b[5]) > self.lac = (b[6] << 8) | b[7] > def __str__(self): > return 'Cell(%s, %s)'%(self.mcc,self.mnc) > > class Sysinfo(Parser): > _keys = {'arfcn':int, > 'time':int, > 'rxlev':int, > 'bsic':bsic, > 'si1':hexdump, > 'si2':hexdump, > 'si2bis':hexdump, > 'si2ter':hexdump, > 'si3':SystemInfo3, > 'si4':SystemInfo4, > 'ta':int} > def line(self, s): > (k,v) = s.split(None, 1) > if self._keys.has_key(k): > setattr(self, k, self._keys[k](v)) > else: > print k, v > return > > class RFMap: > arfcns = {} > cells = {} > def commit(self, obj): > if isinstance(obj, Sysinfo): > self.arfcns.setdefault(obj.arfcn, {}) > self.arfcns[obj.arfcn][str(obj.si3.mnc)] = None > self.arfcns[obj.arfcn][str(obj.si4.mnc)] = None > > self.cells.setdefault(obj.si3.cell, {}) > self.cells[obj.si3.cell][str(obj.si3.mnc)] = None > elif isinstance(obj, Power): > return > assert(isinstance(obj, Parser)) > > def rf_map(f): > smap = {'[power]':Power, '[sysinfo]':Sysinfo} > obj = None > m = RFMap() > > for x in getline(f): > if x[0] == '[': > if obj is not None: > m.commit(obj) > obj = smap[x]() > continue > if obj is None: > raise ValueError, 'Bad state' > obj.line(x) > > if obj is not None: > m.commit(obj) > > print 'Active ARFCNs:' > x = m.arfcns.keys() > x.sort() > for i in x: > print ' %4d:'%i, ','.join(m.arfcns[i]) > print > > print 'Active Cells:' > x = m.cells.keys() > x.sort() > for i in x: > print ' 0x%.4x'%i, ','.join(m.cells[i]) > print > > def main(argv): > if len(argv) > 1: > infile = open(argv[1]) > else: > from sys import stdin > infile = stdin > > rf_map(infile) > return 0 > > if __name__ == '__main__': > from sys import argv > raise SystemExit, main(argv) > > >

4 10

Nuttx for Calypso
by l--putt 23 May '11

23 May '11

Hi list! As you can see from the patch, I made some progress with a port of Nuttx to the Calypso platform. The UART doesn't work yet. The few possible tests with just the backlight suggest that the IRQ is working. More work required but I'd like to avoid doing the work twice. Stefan

7 11

about voice
by shrek wu 23 May '11

23 May '11

hi all, About voice，I have one question. In the latest git code, when I use bb to call other phone, it will product a file voice.raw. How I can play the voice.raw? which kind of format? 16bit or 8 bit pcm?16khz and 8khz?LSE or MSE? In fact i used the cooledit to play it, both 16khz and 8khz, it has only noise. Other question, I want to input voice from pc that run BB, then the voice can be sent by C123. But I found the voice that be sent by C123 is C123 input voice. Can we realize the idea? Best Regards Shrek W

10 15

Strange error
by Sun Ich 23 May '11

23 May '11

Hi When I try to load any program from firmware/board/compal_e88/ to my C118 phone, I receive error below: ioctl(TIOCGSERIAL): Invalid argument I upload program successfully and I receive DOWNLOAD ACK from phone properly, but then I receive this strange ioctl error. I'm running Ubuntu 9 and I tried to load compal_dsp_dump.compalram.bin layer1.compalram.bin loader.compalram.bin Result is same for all of the above. Please advice. Thanks

2 1

[PATCH 0/6] osmocom-bb: get in sync with libosmocore namespace changes
by pablo＠gnumonks.org 22 May '11

22 May '11

From: Pablo Neira Ayuso <pablo(a)gnumonks.org> This patchset gets osmocom-bb in sync with the namespace fixes for libosmocore. You can find them in pablo/namespace branch. Please, merge it. BTW: I had to temporarily disable mtk62xx compilation since I hit a linking error. This problem occurs in the current git tree. I already contacted Wolfram to let him know. diff --git a/src/Makefile b/src/Makefile index d6f556f..6ff4dc4 100644 --- a/src/Makefile +++ b/src/Makefile @@ -17,7 +17,7 @@ OSMOCORE_CONFIGURE_ENV= LIBOSMOCORE_LIBS=$(TOPDIR)/shared/libosmocore/build-host LIBOSMOVTY_CFLAGS=-I$(TOPDIR)/shared/libosmocore/include \ LIBOSMOGSM_CFLAGS=-I$(TOPDIR)/shared/libosmocore/include -all: libosmocore-target nofirmware firmware mtk-firmware +all: libosmocore-target nofirmware firmware nofirmware: libosmocore-host layer23 osmocon gsmmap libosmocore-host: shared/libosmocore/build-host/src/.libs/libosmocore.la Pablo Neira Ayuso (6): src: use namespace prefix osmo_timer* src: use namespace prefix osmo_fd* and osmo_select* src: use namespace prefix osmo_signal* src: use namespace prefix osmo_wqueue* src: use namespace prefix osmo_* for utils src: use namespace prefix osmo_* for crc16 functions

4 10

Re: hmm, sorry, data cable question
by labad jala 21 May '11

21 May '11

Hi again techies. Thanks for your advises and schemas. I already bought what was announced and illustrated as a mot t191 cable at a french company but it turned to be a "flash cable" with possibly wrong pinout and voltage. If you look at http://www.cellcorner.com/xshp/unlock-phone-codes/motorola-t190-t191-t193-u…, it's looks exactly the same one as I have. Did someone buy this one and used it successfully? I measured 4 volts when putting positive pin of my voltmeter to rx and negative pin on ground of the 2.5mm jack.. As said before, don't want to fry my moto. No cable, no project:( Sorry for my noobie question on this high level mailing list...

1 0

http git for nuttx-bb
by Sébastien Lorquet 19 May '11

19 May '11

Hello, I installed a git mirror with http access at http://repo.or.cz/r/nuttx-bb.git Regards Sebastien

1 0

Re: RFC: RTOS for Calypso
by Gregory Nutt 19 May '11

19 May '11

Hi, List, I heard through the grape vine that you are considering using NuttX. I don't want to influence your decision, but if the decision is final, I would like to offer any support to the project that I can give. > Indeed. The TI C5471 DSP/ARM chip seems to be virtually a predecessor of the Calypso. I have quite a bit of experience working with these TI dual core chips and would be happy to help out as much as possible. With the ARM7/c5 family, I have developed OS support (uClinux) for the C5471, DSC21, DSC24, and DM270. Also the DM320 (ARM9/c5, Linux). I founded this business in Costa Rica (http://www.ridgerun.com, also once called Cadenux). But have not been involved with the more recent ARM11/Cortex A8/c6 chips. > I'm already working on the IRQ subsystem and took a look at the UART. > But there are open questions, see above... There is a porting guide here may be helpful to you: http://nuttx.sourceforge.net/NuttxPortingGuide.html. But it does a some "To be provided" sections -- particulary in the IRQ section. > I have a c5 DSP bridge driver somewhere around on my backup disks as > well. I never released it into NuttX because there was never any > need. Perhaps that could be useful now. These DSP bridge drivers present interfaces to load programs into the DSP and to support an integrated, seamless messaging system between the ARM7 and the DSP. The DSP interfaces differ from chip to chip and the drivers that I was referring were targeted for uClinux. However, if that is something you are interested in, I would be happy to do the port a driver and integrate DSP messaging with the NuttX messaging. Greg

2 1

[PATCH] uart: make *_UART_NR platform independent
by Wolfram Sang 18 May '11

18 May '11

* convert *_UART_NR to enum uart_type in uart.h * make uart-functions use uart_type consistently (was uint8_t and int) * map uart_type to correct uart for mtk * (remove forgotten calypso-include for mtk while we are here) Binaries have been successfully tested with a Sciphone G2 and a Motorola C155. Signed-off-by: Wolfram Sang <wolfram(a)the-dreams.de> --- And I just wanted to get rid of some build warnings ;) src/target/firmware/board/mediatek/uart.c | 31 ++++++++++++--------------- src/target/firmware/calypso/uart.c | 26 +++++++++++----------- src/target/firmware/include/comm/sercomm.h | 4 --- src/target/firmware/include/console.h | 3 -- src/target/firmware/include/uart.h | 21 +++++++++++------- 5 files changed, 40 insertions(+), 45 deletions(-) diff --git a/src/target/firmware/board/mediatek/uart.c b/src/target/firmware/board/mediatek/uart.c index ff82245..6a87473 100644 --- a/src/target/firmware/board/mediatek/uart.c +++ b/src/target/firmware/board/mediatek/uart.c @@ -36,8 +36,6 @@ #include <comm/sercomm.h> -#include <calypso/irq.h> - /* MT622x */ #if 0 #define BASE_ADDR_UART1 0x80130000 @@ -48,8 +46,7 @@ /* MT 6235 */ #define BASE_ADDR_UART1 0x81030000 -//TODO make UART2 and 3 work -#define UART_REG(n,m) (BASE_ADDR_UART1 + (m)) +#define UART_REG(n,m) (BASE_ADDR_UART1 + (!n) * 0x10000 + (m)) #define LCR7BIT 0x80 #define LCRBFBIT 0x40 @@ -112,7 +109,7 @@ enum iir_bits { /* enable or disable the divisor latch for access to DLL, DLH */ -static void uart_set_lcr7bit(int uart, int on) +static void uart_set_lcr7bit(enum uart_type uart, int on) { uint8_t reg; @@ -125,7 +122,7 @@ static void uart_set_lcr7bit(int uart, int on) } static uint8_t old_lcr; -static void uart_set_lcr_bf(int uart, int on) +static void uart_set_lcr_bf(enum uart_type uart, int on) { if (on) { old_lcr = readb(UART_REG(uart, LCR)); @@ -136,7 +133,7 @@ static void uart_set_lcr_bf(int uart, int on) } /* Enable or disable the TCR_TLR latch bit in MCR[6] */ -static void uart_set_mcr6bit(int uart, int on) +static void uart_set_mcr6bit(enum uart_type uart, int on) { uint8_t mcr; /* we assume EFR[4] is always set to 1 */ @@ -148,7 +145,7 @@ static void uart_set_mcr6bit(int uart, int on) writeb(mcr, UART_REG(uart, MCR)); } -static void uart_reg_write(int uart, enum uart_reg reg, uint8_t val) +static void uart_reg_write(enum uart_type uart, enum uart_reg reg, uint8_t val) { if (reg & LCRBFBIT) uart_set_lcr_bf(uart, 1); @@ -168,7 +165,7 @@ static void uart_reg_write(int uart, enum uart_reg reg, uint8_t val) } /* read from a UART register, applying any required latch bits */ -static uint8_t uart_reg_read(int uart, enum uart_reg reg) +static uint8_t uart_reg_read(enum uart_type uart, enum uart_reg reg) { uint8_t ret; @@ -271,7 +268,7 @@ static void uart_irq_handler_sercomm(__unused int irqnr) } } -void uart_init(uint8_t uart, __unused uint8_t interrupts) +void uart_init(enum uart_type uart, __unused uint8_t interrupts) { /* no interrupts, only polling so far */ @@ -302,7 +299,7 @@ void uart_init(uint8_t uart, __unused uint8_t interrupts) uart_set_lcr7bit(uart, 0); } -void uart_poll(uint8_t uart) { +void uart_poll(enum uart_type uart) { if(uart == CONS_UART_NR) { uart_irq_handler_cons(0); } else { @@ -310,7 +307,7 @@ void uart_poll(uint8_t uart) { } } -void uart_irq_enable(uint8_t uart, enum uart_irq irq, int on) +void uart_irq_enable(enum uart_type uart, enum uart_irq irq, int on) { uint8_t ier = uart_reg_read(uart, IER); uint8_t mask = 0; @@ -333,7 +330,7 @@ void uart_irq_enable(uint8_t uart, enum uart_irq irq, int on) } -void uart_putchar_wait(uint8_t uart, int c) +void uart_putchar_wait(enum uart_type uart, int c) { /* wait while TX FIFO indicates full */ while (~readb(UART_REG(uart, LSR)) & 0x20) { } @@ -342,7 +339,7 @@ void uart_putchar_wait(uint8_t uart, int c) writeb(c, UART_REG(uart, RBR)); } -int uart_putchar_nb(uint8_t uart, int c) +int uart_putchar_nb(enum uart_type uart, int c) { /* if TX FIFO indicates full, abort */ if (~readb(UART_REG(uart, LSR)) & 0x20) @@ -352,7 +349,7 @@ int uart_putchar_nb(uint8_t uart, int c) return 1; } -int uart_getchar_nb(uint8_t uart, uint8_t *ch) +int uart_getchar_nb(enum uart_type uart, uint8_t *ch) { uint8_t lsr; @@ -379,7 +376,7 @@ int uart_getchar_nb(uint8_t uart, uint8_t *ch) return 1; } -int uart_tx_busy(uint8_t uart) +int uart_tx_busy(enum uart_type uart) { /* Check THRE bit (LSR[5]) to see if FIFO is full */ if (~readb(UART_REG(uart, LSR)) & 0x20) @@ -409,7 +406,7 @@ static const uint16_t divider[] = { [UART_921600] = 7, /* would need UART_REG(HIGHSPEED) = 1 */ }; -int uart_baudrate(uint8_t uart, enum uart_baudrate bdrt) +int uart_baudrate(enum uart_type uart, enum uart_baudrate bdrt) { uint16_t div; diff --git a/src/target/firmware/calypso/uart.c b/src/target/firmware/calypso/uart.c index d3ede4d..0355ee2 100644 --- a/src/target/firmware/calypso/uart.c +++ b/src/target/firmware/calypso/uart.c @@ -112,7 +112,7 @@ enum iir_bits { #define UART_REG_UIR 0xffff6000 /* enable or disable the divisor latch for access to DLL, DLH */ -static void uart_set_lcr7bit(int uart, int on) +static void uart_set_lcr7bit(enum uart_type uart, int on) { uint8_t reg; @@ -125,7 +125,7 @@ static void uart_set_lcr7bit(int uart, int on) } static uint8_t old_lcr; -static void uart_set_lcr_bf(int uart, int on) +static void uart_set_lcr_bf(enum uart_type uart, int on) { if (on) { old_lcr = readb(UART_REG(uart, LCR)); @@ -136,7 +136,7 @@ static void uart_set_lcr_bf(int uart, int on) } /* Enable or disable the TCR_TLR latch bit in MCR[6] */ -static void uart_set_mcr6bit(int uart, int on) +static void uart_set_mcr6bit(enum uart_type uart, int on) { uint8_t mcr; /* we assume EFR[4] is always set to 1 */ @@ -148,7 +148,7 @@ static void uart_set_mcr6bit(int uart, int on) writeb(mcr, UART_REG(uart, MCR)); } -static void uart_reg_write(int uart, enum uart_reg reg, uint8_t val) +static void uart_reg_write(enum uart_type uart, enum uart_reg reg, uint8_t val) { if (reg & LCRBFBIT) uart_set_lcr_bf(uart, 1); @@ -168,7 +168,7 @@ static void uart_reg_write(int uart, enum uart_reg reg, uint8_t val) } /* read from a UART register, applying any required latch bits */ -static uint8_t uart_reg_read(int uart, enum uart_reg reg) +static uint8_t uart_reg_read(enum uart_type uart, enum uart_reg reg) { uint8_t ret; @@ -276,7 +276,7 @@ static const uint8_t uart2irq[] = { [1] = IRQ_UART_MODEM, }; -void uart_init(uint8_t uart, uint8_t interrupts) +void uart_init(enum uart_type uart, uint8_t interrupts) { uint8_t irq = uart2irq[uart]; @@ -330,7 +330,7 @@ void uart_init(uint8_t uart, uint8_t interrupts) uart_set_lcr7bit(uart, 0); } -void uart_poll(uint8_t uart) { +void uart_poll(enum uart_type uart) { if(uart == CONS_UART_NR) { uart_irq_handler_cons(0); } else { @@ -338,7 +338,7 @@ void uart_poll(uint8_t uart) { } } -void uart_irq_enable(uint8_t uart, enum uart_irq irq, int on) +void uart_irq_enable(enum uart_type uart, enum uart_irq irq, int on) { uint8_t ier = uart_reg_read(uart, IER); uint8_t mask = 0; @@ -361,7 +361,7 @@ void uart_irq_enable(uint8_t uart, enum uart_irq irq, int on) } -void uart_putchar_wait(uint8_t uart, int c) +void uart_putchar_wait(enum uart_type uart, int c) { /* wait while TX FIFO indicates full */ while (readb(UART_REG(uart, SSR)) & 0x01) { } @@ -370,7 +370,7 @@ void uart_putchar_wait(uint8_t uart, int c) writeb(c, UART_REG(uart, THR)); } -int uart_putchar_nb(uint8_t uart, int c) +int uart_putchar_nb(enum uart_type uart, int c) { /* if TX FIFO indicates full, abort */ if (readb(UART_REG(uart, SSR)) & 0x01) @@ -380,7 +380,7 @@ int uart_putchar_nb(uint8_t uart, int c) return 1; } -int uart_getchar_nb(uint8_t uart, uint8_t *ch) +int uart_getchar_nb(enum uart_type uart, uint8_t *ch) { uint8_t lsr; @@ -407,7 +407,7 @@ int uart_getchar_nb(uint8_t uart, uint8_t *ch) return 1; } -int uart_tx_busy(uint8_t uart) +int uart_tx_busy(enum uart_type uart) { if (readb(UART_REG(uart, SSR)) & 0x01) return 1; @@ -423,7 +423,7 @@ static const uint16_t divider[] = { [UART_921600] = 1, /* 812,500! (-3% would be 893,952) */ }; -int uart_baudrate(uint8_t uart, enum uart_baudrate bdrt) +int uart_baudrate(enum uart_type uart, enum uart_baudrate bdrt) { uint16_t div; diff --git a/src/target/firmware/include/comm/sercomm.h b/src/target/firmware/include/comm/sercomm.h index 54256b5..4c23b31 100644 --- a/src/target/firmware/include/comm/sercomm.h +++ b/src/target/firmware/include/comm/sercomm.h @@ -1,12 +1,8 @@ #ifndef _SERCOMM_H #define _SERCOMM_H -/* SERCOMM layer on UART1 (modem UART) */ - #include <osmocom/core/msgb.h> -#define SERCOMM_UART_NR 1 - #define HDLC_FLAG 0x7E #define HDLC_ESCAPE 0x7D diff --git a/src/target/firmware/include/console.h b/src/target/firmware/include/console.h index 7146e99..b5a83f5 100644 --- a/src/target/firmware/include/console.h +++ b/src/target/firmware/include/console.h @@ -11,9 +11,6 @@ int cons_putchar(char c); int cons_rb_flush(void); void cons_init(void); -/* We want the console on UART 0 (IRDA UART) */ -#define CONS_UART_NR 0 - /* Size of the static ring-buffer that we keep for console print messages */ #define CONS_RB_SIZE 4096 diff --git a/src/target/firmware/include/uart.h b/src/target/firmware/include/uart.h index 81d7a15..eedb006 100644 --- a/src/target/firmware/include/uart.h +++ b/src/target/firmware/include/uart.h @@ -3,6 +3,11 @@ #include <stdint.h> +enum uart_type { + CONS_UART_NR, + SERCOMM_UART_NR, +}; + enum uart_baudrate { UART_38400, UART_57600, @@ -13,20 +18,20 @@ enum uart_baudrate { UART_921600, }; -void uart_init(uint8_t uart, uint8_t interrupts); -void uart_putchar_wait(uint8_t uart, int c); -int uart_putchar_nb(uint8_t uart, int c); -int uart_getchar_nb(uint8_t uart, uint8_t *ch); -int uart_tx_busy(uint8_t uart); -int uart_baudrate(uint8_t uart, enum uart_baudrate bdrt); +void uart_init(enum uart_type uart, uint8_t interrupts); +void uart_putchar_wait(enum uart_type uart, int c); +int uart_putchar_nb(enum uart_type uart, int c); +int uart_getchar_nb(enum uart_type uart, uint8_t *ch); +int uart_tx_busy(enum uart_type uart); +int uart_baudrate(enum uart_type uart, enum uart_baudrate bdrt); enum uart_irq { UART_IRQ_TX_EMPTY, UART_IRQ_RX_CHAR, }; -void uart_irq_enable(uint8_t uart, enum uart_irq irq, int on); +void uart_irq_enable(enum uart_type uart, enum uart_irq irq, int on); -void uart_poll(uint8_t uart); +void uart_poll(enum uart_type uart); #endif /* _UART_H */ -- 1.7.2.5

5 9

hi all
by 麦田守望 17 May '11

17 May '11

do you know the mtk chip MT6217 it is usb interface chip we can use to make a GSM network the mt6217 with pc

1 0

Re: Power management
by Dieter Spaar 17 May '11

17 May '11

Hello Stefan, On Tue, 17 May 2011 00:09:13 +0200, "l--putt" <ichgeh(a)l--putt.de> wrote: > > Saving power > Having everything on and at maximum clock drains the battery _fast_! > With the ULPD, we actually have the appropriate solution build into the > Calypso. I guess other chipsets have something similar. > It is neat to get the timing and power sequence right. But since the > TDMA timing is affected, Layer 1 must be aware of those clock/power > changes or at least tolerate to be turned on and off. Does anybody right > away have ideas how to approach this? A few notes, I don't remember the details: The basic idea is to only receive in idle mode when its necessary. This means listening only for the paging group of the IMSI and doing the neighbour cell measurements. During the other time the processor can be stopped. There are different levels to which extend the clock is stopped, for saving the most power only the 32 kHz crystal remains active. However this requires some calibration, otherwise the TDMA frames could be missed after sleeping. Most of this calibration can be done with the help of the hardware, its always done before switching to 32 kHz. Best regards, Dieter -- Dieter Spaar, Germany spaar(a)mirider.augusta.de

1 0

Power management
by l--putt 17 May '11

17 May '11

Hi list! Some time ago Harald suggested to create a complete phone, at least with minimal features. Since this hasn't been covered yet and we will have to rewrite some parts during RTOS porting anyway, I think we should consider some kind of power management: Saving power Having everything on and at maximum clock drains the battery _fast_! With the ULPD, we actually have the appropriate solution build into the Calypso. I guess other chipsets have something similar. It is neat to get the timing and power sequence right. But since the TDMA timing is affected, Layer 1 must be aware of those clock/power changes or at least tolerate to be turned on and off. Does anybody right away have ideas how to approach this? Charger The C155 has a dedicated chip which you probably just have to turn on. On the C123, it's a bit more complex but the algorithms don't seem to be too complex. Has anybody tried this already? State-of-Charge For the usual concepts on batteryuniversity.com, a random book from the university lib, and some papers, we would need some means to measure the discharge current. No Compal phone provides this since the voltage regulators are connected directly to the battery. The gta02 avoids this with a dedicated Coulomb-counting chip. The gta01 doesn't care!? Maybe the battery voltage and temperature is sufficient for reasonably correct estimates. If not, we could try to model the current. However, this requires some kind of central power management that knows activated devices, their clocks, etc. I would volunteer for the latter and C155-charging. However, I lack a C123 for tests and don't want to be responsible for exploding phones ;) Integration of the ULPD is a bit more GSM-related. Might turn out to be interesting... Cheers, Stefan

1 0

linking error on board mt62xx (current git tree)
by Pablo Neira Ayuso 16 May '11

16 May '11

Hi Wolfram, I hit the following linking error in the current LD board/mt62xx/loader_mtk.mtkram.elf arm-elf-ld: address 0x400050ec of board/mt62xx/loader_mtk.mtkram.elf section .text is not within region LRAM make[1]: *** [board/mt62xx/loader_mtk.mtkram.elf] Error 1 I'm not familiar with those bits, any clue on what's wrong? Thanks.

6 7

MacOSX build
by Klaus Rechert 16 May '11

16 May '11

Hi, some quick notes on the MacOSX build. Current git builds fine using the perbuilt GNUARM MacOS toolchain except that GCC 3.3 does not support the option -Wextra. There are also some issues building mtk firmware but this seems to be a more general issue. Cheers Klaus diff --git a/src/target/firmware/Makefile.inc b/src/target/firmware/Makefile.inc index 1f54031..c8f4323 100644 --- a/src/target/firmware/Makefile.inc +++ b/src/target/firmware/Makefile.inc @@ -12,7 +12,7 @@ OBJCOPY=objcopy DEBUGF=dwarf-2 CFLAGS=-mcpu=arm7tdmi $(INCLUDES) -CFLAGS += -Wall -Wextra -Wcast-align -Wimplicit -Wunused +CFLAGS += -Wall -Wcast-align -Wimplicit -Wunused CFLAGS += -Wswitch -Wredundant-decls -Wreturn-type -Wshadow -Wnested-externs CFLAGS += -Wbad-function-cast -Wsign-compare -Waggregate-return CFLAGS += -Os -ffunction-sections

1 1

Osmocom building in Ubuntu Error
by Sun Ich 16 May '11

16 May '11

Hi I try to compile osmocom in Ubuntu, I have gcc 4.4.3 and I installed binutils 2.20 for ARM successfully and I have arm-elf-* binaries in PATH directory when I run make in src folder of osmocom, I get error: unknown instruction "ror xor" something something.... What's problem, do I missing something? Thanks

1 0

Fwd: Fwd: RFC: RTOS for Calypso
by Alan Carvalho de Assis 16 May '11

16 May '11

FYI ---------- Forwarded message ---------- From: Gregory Nutt <spudarnia(a)yahoo.com> Date: Sun, 15 May 2011 07:52:18 -0700 (PDT) Subject: Re: Fwd: RFC: RTOS for Calypso To: Alan Carvalho de Assis <acassis(a)gmail.com> Hi Alan, I also notice that they are using a TI dual core, ARM7TDMI and C5 DSP. I already have support for a TI chip like that (the C5471) and also for an ARM9 with C5 DSP (DM320). See http://focus.ti.com.cn/cn/lit/ml/sprt239/sprt239.pdf I have a c5 DSP bridge driver somewhere around on my backup disks as well. I never released it into NuttX because there was never any need. Perhaps that could be useful now. Somewhere I also have tools that will convert the TI proprietary object files and logic to manage loading different programs into the DSP. The bridge also supports communication channels to communicate with the DSP. Greg

1 0

RFC: RTOS for Calypso
by l--putt 16 May '11

16 May '11

Hi! Is AreasOfWork in the wiki still up to date? I intend to work on the UI (Sorry Dieter, GSM testset too expensive at the moment :( ) and want to choose a RTOS. A small collection that I came across: FreeRTOS What is the problem? TNKernel http://www.tnkernel.com/tn_description.html Scheduler, Mutexes, Queues, etc. available strange (at least unfamiliar) API for memory eCos http://ecos.sourceware.org/about.html many target MCUs but are their any other than ARM in BB chipsets? powerful but complex (at least at first glance) NUT/OS http://www.ethernut.de/en/ minimalistic RTOS, easy to port seems to have sound community familiar APIs: malloc, fopen's devices, ... cooperative multithreading: Is that OK? We still have IRQs for realtime... Since we seem to barely need an OS, a full-blown OS like eCos seems excessive. For compatibility with MT6235 user space, malloc and fopen is the right direction. Hence, my favourite is NUT/OS. In fact, I tried porting it to calypso just for fun. With some wrappers, Osmocom's platform files can be used. Only turns on the backlight and occasionally outputs some bytes on the UART at the moment. However, I still call this success. It took me just a day from knowing nothing about NUT/OS and very little about calypso and ARM to do this. Seems promising in terms of portability and documentation to me. Open question: How much overhead can we afford, i.e., how much spare time is there on the CPU? Does "Disable RTC interrupt as it causes lost TDMA frames" (layer1/init.c) indicate issues? (Yes, sorry, haven't read GSM specs yet...) If yes, is it reasonable to independently handle GSM stuff with FIQ and only give IRQ to whatever OS we choose? Regards, Stefan

13 27

[PATCH,v2] SMS decode
by Gianni Tedesco 16 May '11

16 May '11

This is a folowup to previous patch implementing SMS decoding. I have removed the 7bit decoding functions to use those in libosmocore. This time I have also tried to send CP-ACK in response to the CP-DATA containing the SMS. But this seems to break the entire state machine, not sure what I'm doing wrong here. I just built the packet and used gsm48_rr_downmsg() to send it. Maybe I just need to learn more about the lower layers. A BTS or a GSM tester would be really handy I guess... Gianni diff --git a/src/host/layer23/include/osmocom/bb/mobile/gsm48_sms.h b/src/host/layer23/include/osmocom/bb/mobile/gsm48_sms.h new file mode 100644 index 0000000..99911ad --- /dev/null +++ b/src/host/layer23/include/osmocom/bb/mobile/gsm48_sms.h @@ -0,0 +1,7 @@ +#ifndef _GSM48_SMS_H +#define _GSM48_SMS_H + +int gsm48_rcv_sms(struct osmocom_ms *ms, struct msgb *msg); + +#endif /* _GSM48_SMS_H */ + diff --git a/src/host/layer23/src/mobile/Makefile.am b/src/host/layer23/src/mobile/Makefile.am index fb0423e..60e8d23 100644 --- a/src/host/layer23/src/mobile/Makefile.am +++ b/src/host/layer23/src/mobile/Makefile.am @@ -4,7 +4,7 @@ LDADD = ../common/liblayer23.a $(LIBOSMOCORE_LIBS) $(LIBOSMOVTY_LIBS) $(LIBOSMOG noinst_LIBRARIES = libmobile.a libmobile_a_SOURCES = gsm322.c gsm48_cc.c gsm48_mm.c gsm48_rr.c \ - mnccms.c settings.c subscriber.c support.c \ + gsm48_sms.c mnccms.c settings.c subscriber.c support.c \ transaction.c vty_interface.c bin_PROGRAMS = mobile diff --git a/src/host/layer23/src/mobile/gsm48_mm.c b/src/host/layer23/src/mobile/gsm48_mm.c index bf5bbc2..2155a71 100644 --- a/src/host/layer23/src/mobile/gsm48_mm.c +++ b/src/host/layer23/src/mobile/gsm48_mm.c @@ -36,6 +36,7 @@ #include <osmocom/bb/common/networks.h> #include <osmocom/bb/common/l1ctl.h> #include <osmocom/bb/mobile/gsm48_cc.h> +#include <osmocom/bb/mobile/gsm48_sms.h> #include <osmocom/bb/mobile/app_mobile.h> extern void *l23_ctx; @@ -737,10 +738,10 @@ int gsm48_mmxx_dequeue(struct osmocom_ms *ms) case GSM48_MMSS_CLASS: gsm48_rcv_ss(ms, msg); break; +#endif case GSM48_MMSMS_CLASS: gsm48_rcv_sms(ms, msg); break; -#endif } msgb_free(msg); work = 1; /* work done */ @@ -3788,11 +3789,11 @@ static int gsm48_mm_data_ind(struct osmocom_ms *ms, struct msgb *msg) rr_prim = GSM48_MMSS_DATA_IND; rr_est = GSM48_MMSS_EST_IND; break; +#endif case GSM48_PDISC_SMS: rr_prim = GSM48_MMSMS_DATA_IND; rr_est = GSM48_MMSMS_EST_IND; break; -#endif } if (rr_prim != -1) { uint8_t transaction_id = ((gh->proto_discr & 0xf0) ^ 0x80) >> 4; @@ -3847,9 +3848,10 @@ static int gsm48_mm_data_ind(struct osmocom_ms *ms, struct msgb *msg) case GSM48_PDISC_NC_SS: return gsm48_rcv_ss(ms, msg); +#endif case GSM48_PDISC_SMS: + LOGP(DMM, LOGL_NOTICE, "SMS PDISC = 0x%.2x\n", GSM48_PDISC_SMS); return gsm48_rcv_sms(ms, msg); -#endif default: LOGP(DMM, LOGL_NOTICE, "Protocol type 0x%02x unsupported.\n", diff --git a/src/host/layer23/src/mobile/gsm48_sms.c b/src/host/layer23/src/mobile/gsm48_sms.c new file mode 100644 index 0000000..5337b1e --- /dev/null +++ b/src/host/layer23/src/mobile/gsm48_sms.c @@ -0,0 +1,355 @@ +/* + * (C) 2010 by Andreas Eversberg <jolly(a)eversberg.eu> + * (C) 2011 by Gianni Tedesco <gianni(a)scaramanga.co.uk> + * + * All Rights Reserved + * + * This program is free software; you can redistribute it and/or modify + * it under the terms of the GNU General Public License as published by + * the Free Software Foundation; either version 2 of the License, or + * (at your option) any later version. + * + * This program is distributed in the hope that it will be useful, + * but WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + * GNU General Public License for more details. + * + * You should have received a copy of the GNU General Public License along + * with this program; if not, write to the Free Software Foundation, Inc., + * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. + * + */ + +#include <stdint.h> +#include <errno.h> +#include <stdio.h> +#include <string.h> +#include <stdlib.h> +#include <arpa/inet.h> + +#include <osmocom/core/msgb.h> +#include <osmocom/core/utils.h> +#include <osmocom/gsm/gsm48.h> +#include <osmocom/core/talloc.h> + +#include <osmocom/bb/common/logging.h> +#include <osmocom/bb/common/osmocom_data.h> +#include <osmocom/bb/common/networks.h> +#include <osmocom/bb/common/l1ctl.h> +#include <osmocom/bb/mobile/gsm48_sms.h> +#include <osmocom/bb/mobile/app_mobile.h> + +/* GSM 04.11 Table 8.1 */ +#define CP_DATA 1 +#define CP_ACK 4 +#define CP_ERROR 16 + +#define CP_CAUSE_INVALID_MANDATORY_INFO 96 +#define CP_CAUSE_MSG_TYPE_NOT_IMPLEMENTED 97 +#define CP_CAUSE_INFO_ELEMENT_NOT_IMPLEMENTED 97 +#define CP_CAUSE_PROTOCOL_ERROR 111 + +#define RP_DATA 1 +#define RP_ACK 3 +#define RP_ERROR 5 + +#define TP_MTI_MASK 3 +#define SMS_DELIVER 0 +#define SMS_SUBMIT_REPORT 1 +#define SMS_STATUS_REPORT 2 + +#define TP_RP 0x80 +#define TP_UDHI 0x40 +#define TP_SRI 0x20 +#define TP_MMS 0x04 + +static uint8_t hi_nibble(uint8_t byte) +{ + return byte >> 4; +} + +static uint8_t lo_nibble(uint8_t byte) +{ + return byte & 0xf; +} + +static int parse_address(struct msgb *msg, int rp, const char *name) +{ + uint8_t len, type; + + if ( !msg->len ) + return -EPROTO; + + len = msgb_get_u8(msg); + if ( !len ) + return 0; + + type = msgb_get_u8(msg); + + if ( rp ) { + /* for RP address, len is in bytes including type field */ + len = len - 1; + }else{ + /* TP address is in BCD digits, not including type field */ + len = len / 2; + } + + if ( msg->len < len ) + return -EPROTO; + + LOGP(DMM, LOGL_NOTICE, "%s: type=0x%.2x %s\n", + name, type, hexdump(msg->data, len)); + + msgb_pull(msg, len); + return 0; +} + +static int parse_timestamp(struct msgb *msg, const char *name) +{ + if ( msg->len < 7 ) + return -EPROTO; + LOGP(DMM, LOGL_NOTICE, + "%s: 20%1x%1x-%1x%1x-%1x%1x %1x%1x:%1x%1x:%1x%1x\n", + name, + lo_nibble(msg->data[0]), + hi_nibble(msg->data[0]), + lo_nibble(msg->data[1]), + hi_nibble(msg->data[1]), + lo_nibble(msg->data[2]), + hi_nibble(msg->data[2]), + lo_nibble(msg->data[3]), + hi_nibble(msg->data[3]), + lo_nibble(msg->data[4]), + hi_nibble(msg->data[4]), + lo_nibble(msg->data[5]), + hi_nibble(msg->data[5])); + msgb_pull(msg, 7); + return 0; +} + +static int sms_7bit(const uint8_t *in, size_t octets, size_t chars) +{ + char out[chars + 1]; + + if ( (chars * 7 + 6) / 8 > octets ) { + chars = (octets * 8) / 7; + octets = (chars * 7 + 6) / 8; + } + + gsm_7bit_decode(out, in, octets); + LOGP(DMM, LOGL_NOTICE, "SMS-MSG: %s\n", out); + return 0; +} + +static int sms_deliver(struct osmocom_ms *ms, struct msgb *msg, uint8_t b) +{ + uint8_t tp_pid, tp_dcs, tp_udlen; + int rc; + + if ( !(b & TP_MMS) ) + LOGP(DMM, LOGL_NOTICE, "SMS-DELIVER: More messages to send.\n"); + + rc = parse_address(msg, 0, "TP-Originating"); + if ( rc ) + return -EPROTO; + + if ( msg->len < 2 ) + return -EPROTO; + + tp_pid = msgb_get_u8(msg); + tp_dcs = msgb_get_u8(msg); + LOGP(DMM, LOGL_NOTICE, "TP-PID: 0x%.2x\n", tp_pid); + LOGP(DMM, LOGL_NOTICE, "TP-DCS: 0x%.2x\n", tp_dcs); + + rc = parse_timestamp(msg, "TP-Service-Center-Time-Stamp"); + if ( rc ) + return -EPROTO; + + if ( !msg->len ) + return -EPROTO; + tp_udlen = msgb_get_u8(msg); + + /* TODO: user-data-header? */ + + /* check for unknown data coding scheme */ + switch(tp_dcs) { + case 0: + return sms_7bit(msg->data, msg->len, tp_udlen); + default: + return -EPROTO; + } + + return 0; +} + +static int sms_tpdu_decode(struct osmocom_ms *ms, struct msgb *msg) +{ + uint8_t tp_mti; + + if ( !msg->len ) + return 0; + tp_mti = msgb_get_u8(msg); + + switch(tp_mti & TP_MTI_MASK) { + case SMS_DELIVER: + return sms_deliver(ms, msg, tp_mti); + case SMS_SUBMIT_REPORT: + LOGP(DMM, LOGL_NOTICE, "Received SMS-SUBMIT-REPORT: %s\n", + hexdump(msg->data, msg->len)); + break; + case SMS_STATUS_REPORT: + LOGP(DMM, LOGL_NOTICE, "Received SMS-STATUS-REPORT: %s\n", + hexdump(msg->data, msg->len)); + break; + default: + LOGP(DMM, LOGL_NOTICE, "Reserved MTI: 0x%.2x\n", + tp_mti); + return -EPROTO; + } + + return 0; +} + +static int rp_data_decode(struct osmocom_ms *ms, struct msgb *msg, uint8_t ref) +{ + static const char * const str[2] = {"RP-Origination", "RP-Destination"}; + unsigned int i; + uint8_t tpdu_len; + + LOGP(DMM, LOGL_NOTICE, "Received RP-DATA: ref %d\n", ref); + + for(i = 0; i < 2; i++) { + int rc; + + rc = parse_address(msg, 1, str[i]); + if ( rc ) + return -EPROTO; + } + + if ( !msg->len ) + return -EPROTO; + tpdu_len = msgb_get_u8(msg); + if ( tpdu_len < msg->len ) + return -EPROTO; + if ( tpdu_len < msg->len ) { + LOGP(DMM, LOGL_NOTICE, "RP-DATA: %u trailing bytes: %s\n", + msg->len - tpdu_len, + hexdump(msg->data + tpdu_len, msg->len - tpdu_len)); + msg->len = tpdu_len; + } + + /* TODO: pass in reference, and src/dst addresses */ + return sms_tpdu_decode(ms, msg); +} + +/* TODO: whatever happens here we need to send RP-ACK or RP-ERROR */ +static int rp_decode(struct osmocom_ms *ms, struct msgb *msg) +{ + uint8_t rp_mt, rp_ref; + + if ( msg->len < 2 ) + return -EPROTO; + + rp_mt = msgb_get_u8(msg); + rp_ref = msgb_get_u8(msg); + + switch(rp_mt) { + case RP_DATA: + return rp_data_decode(ms, msg, rp_ref); + case RP_ACK: + LOGP(DMM, LOGL_NOTICE, "Received RP-ACK: %s\n", + hexdump(msg->data, msg->len)); + return -ENOTSUP; + case RP_ERROR: + LOGP(DMM, LOGL_NOTICE, "Received RP-ERROR: %s\n", + hexdump(msg->data, msg->len)); + return -ENOTSUP; + default: + LOGP(DMM, LOGL_NOTICE, "Bad RP Message-type: 0x%.2x\n", rp_mt); + return -ENOTSUP; + } + + return 0; +} + +static int cp_tx_error(struct osmocom_ms *ms, uint8_t tid, uint8_t cause) +{ + struct gsm48_hdr *gh; + struct msgb *msg; + + msg = gsm48_l3_msgb_alloc(); + if ( NULL == msg ) + return -ENOMEM; + + gh = (struct gsm48_hdr *) msgb_put(msg, sizeof(*gh)); + gh->proto_discr = tid | GSM48_PDISC_SMS; + gh->msg_type = CP_ERROR; + msgb_put_u8(msg, cause); + return gsm48_rr_downmsg(ms, msg); +} + +static int cp_tx_ack(struct osmocom_ms *ms, uint8_t tid) +{ + struct gsm48_hdr *gh; + struct msgb *msg; + + msg = gsm48_l3_msgb_alloc(); + if ( NULL == msg ) + return -ENOMEM; + + gh = (struct gsm48_hdr *) msgb_put(msg, sizeof(*gh)); + gh->proto_discr = tid | GSM48_PDISC_SMS; + gh->msg_type = CP_ACK; + return gsm48_rr_downmsg(ms, msg); +} + +static int cp_data(struct osmocom_ms *ms, uint8_t tid, struct msgb *msg) +{ + uint8_t len; + + if ( !msg->len ) { + return cp_tx_error(ms, tid, CP_CAUSE_PROTOCOL_ERROR); + } + + len = msgb_get_u8(msg); + if ( len != msg->len ) { + LOGP(DMM, LOGL_NOTICE, "CP-DATA: size mismatch " + "%u != %u bytes\n", len, msg->len); + }else{ + LOGP(DMM, LOGL_NOTICE, "CP-DATA: %u bytes\n", len); + } + + rp_decode(ms, msg); + return cp_tx_ack(ms, tid); +} + +int gsm48_rcv_sms(struct osmocom_ms *ms, struct msgb *msg) +{ + uint8_t cp_type, tid; + int rc; + + LOGP(DMM, LOGL_NOTICE, "Received SMS: %s\n", + hexdump(msg->data, msg->len)); + + tid = msgb_get_u8(msg) & 0xf0; + if (!msg->len) { + rc = cp_tx_error(ms, tid, CP_CAUSE_PROTOCOL_ERROR); + goto out; + } + + cp_type = msgb_get_u8(msg); + + switch(cp_type) { + case CP_DATA: + rc = cp_data(ms, tid, msg); + break; + default: + LOGP(DMM, LOGL_NOTICE, "Unknown SMS type: 0x%.2x\n", cp_type); + rc = cp_tx_error(ms, tid, CP_CAUSE_MSG_TYPE_NOT_IMPLEMENTED); + break; + } + +out: + msgb_free(msg); + return rc; +}

2 1

Fw: Re: mobile - making a call
by eisencah eisenach 15 May '11

15 May '11

So any ideea where to look for the answer to the UPDATE_BINARY message? Can I have a buffer overflow on UART RX? Is the buffer size selectable somewhere? --- On Wed, 5/4/11, eisencah eisenach <wbg_1000(a)yahoo.com> wrote: From: eisencah eisenach <wbg_1000(a)yahoo.com> Subject: Re: mobile - making a call To: baseband-devel(a)lists.osmocom.org Date: Wednesday, May 4, 2011, 4:58 PM Done some more digging in the logs and it seems the sim state machine has locked earlier (when attaching to the network) while waiting for some response on UPDATE BINARY. Does this sounds familiar to anyone? :) GOOD CASE: [0;m[1;32m<0004> gsm48_mm.c:1557 AUTHENTICATION RESPONSE [0;m[1;34m<0001> gsm48_rr.c:4904 (ms 1) Message 'RR_DATA_REQ' received in state dedicated [0;m[1;34m<0001> gsm48_rr.c:235 Using and incrementing V(SD) = 0 (pdisc 5) [0;m[0;35m<000e> sim.c:209 got new job: SIM_JOB_UPDATE_BINARY (handle=00000005) [0;m[0;35m<000e> sim.c:241 SELECT (file=0x6f20) [0;m[0;35m<000e> sim.c:187 sending APDU (class 0xa0, ins 0xa4) [0;m[0;35m<000e> sim.c:876 received APDU (len=0 sw1=0x9f sw2=0x0f) [0;m[0;35m<000e> sim.c:949 command successfull [0;m[0;35m<000e> sim.c:571 GET RESPONSE (len=15) [0;m[0;35m<000e> sim.c:187 sending APDU (class 0xa0, ins 0xc0) [0;m[0;35m<000e> sim.c:876 received APDU (len=15 sw1=0x90 sw2=0x00) [0;m[0;35m<000e> sim.c:949 command successfull [0;m[0;35m<000e> sim.c:294 UPDATE BINARY (offset=0 len=9) [0;m[0;35m<000e> sim.c:187 sending APDU (class 0xa0, ins 0xd6) [0;m[0;35m<000e> sim.c:876 received APDU (len=0 sw1=0x90 sw2=0x00) [0;m[0;35m<000e> sim.c:949 command successfull [0;m[0;35m<000e> sim.c:151 sending result to callback function (type=0) [0;m[1;34m<0001> gsm48_rr.c:4488 Indicated ta 0 (actual ta 0) BAD CASE: [0;m[1;32m<0004> gsm48_mm.c:1557 AUTHENTICATION RESPONSE [0;m[1;34m<0001> gsm48_rr.c:4904 (ms 1) Message 'RR_DATA_REQ' received in state dedicated [0;m[1;34m<0001> gsm48_rr.c:235 Using and incrementing V(SD) = 0 (pdisc 5) [0;m[0;35m<000e> sim.c:209 got new job: SIM_JOB_UPDATE_BINARY (handle=00000005) [0;m[0;35m<000e> sim.c:241 SELECT (file=0x6f20) [0;m[0;35m<000e> sim.c:187 sending APDU (class 0xa0, ins 0xa4) [0;m[0;35m<000e> sim.c:876 received APDU (len=0 sw1=0x9f sw2=0x0f) [0;m[0;35m<000e> sim.c:949 command successfull [0;m[0;35m<000e> sim.c:571 GET RESPONSE (len=15) [0;m[0;35m<000e> sim.c:187 sending APDU (class 0xa0, ins 0xc0) [0;m[0;35m<000e> sim.c:876 received APDU (len=15 sw1=0x90 sw2=0x00) [0;m[0;35m<000e> sim.c:949 command successfull [0;m[0;35m<000e> sim.c:294 UPDATE BINARY (offset=0 len=9) [0;m[0;35m<000e> sim.c:187 sending APDU (class 0xa0, ins 0xd6) [0;m[1;32m<0004> gsm48_mm.c:3695 (ms 1) Received 'RR_DATA_IND' from RR in state location updating initiated --- On Wed, 5/4/11, Harald Welte <laforge(a)gnumonks.org> wrote: From: Harald Welte <laforge(a)gnumonks.org> Subject: Re: mobile - making a call To: "eisencah eisenach" <wbg_1000(a)yahoo.com> Date: Wednesday, May 4, 2011, 11:59 AM On Tue, May 03, 2011 at 03:02:58AM -0700, eisencah eisenach wrote: > So is as if the message for the sim job doesn't get pulled from the > queue, "got new job: SIM_JOB_RUN_GSM_ALGO " never appears. Must say > the computer I use osmocom on is not exactly a rocket :) (is a 500Mhz > celeron with ubuntu 6.10) , and It gets slowed down when running the > hole thing. Can that be the cause? Mihai. The L1CTL protocol goes through a unix domain socket, and you can trace it in either osmocon or in the mobile program itself. It should be relatively easy to detect if the RUN_GSM_ALGO is transmitted by mobile, or if it is lost, where it is lost. -- - Harald Welte <laforge(a)gnumonks.org> http://laforge.gnumonks.org/ ============================================================================ "Privacy in residential applications is a desirable marketing option." (ETSI EN 300 175-7 Ch. A6)

3 3

[PATCH] src: use namespace prefix osmo_* for crc16 functions
by Pablo Neira Ayuso 15 May '11

15 May '11

Summary of changes: s/crc16_table/osmo_crc16_table/g s/crc16/osmo_crc16/g s/crc16_byte/osmo_crc16_byte/g --- src/host/osmocon/osmoload.c | 8 ++++---- src/target/firmware/apps/loader/main.c | 6 +++--- src/target/firmware/apps/loader_mtk/main.c | 6 +++--- 3 files changed, 10 insertions(+), 10 deletions(-) diff --git a/src/host/osmocon/osmoload.c b/src/host/osmocon/osmoload.c index 5848e56..8a0b21c 100644 --- a/src/host/osmocon/osmoload.c +++ b/src/host/osmocon/osmoload.c @@ -575,7 +575,7 @@ loader_start_memput(uint8_t length, uint32_t address, void *data) { struct msgb *msg = msgb_alloc(MSGB_MAX, "loader"); msgb_put_u8(msg, LOADER_MEM_WRITE); msgb_put_u8(msg, length); - msgb_put_u16(msg, crc16(0, data, length)); + msgb_put_u16(msg, osmo_crc16(0, data, length)); msgb_put_u32(msg, address); memcpy(msgb_put(msg, length), data, length); loader_send_request(msg); @@ -603,7 +603,7 @@ loader_do_memdump(uint16_t crc, void *data, size_t length) { int rc; if(data && length) { - osmoload.memcrc = crc16(0, data, length); + osmoload.memcrc = osmo_crc16(0, data, length); if(osmoload.memcrc != crc) { osmoload.memoff -= osmoload.memreq; printf("\nbad crc %4.4x (not %4.4x) at offset 0x%8.8x", crc, osmoload.memcrc, osmoload.memoff); @@ -665,7 +665,7 @@ loader_do_memload() { uint8_t reqbytes = (rembytes < MEM_MSG_MAX) ? rembytes : MEM_MSG_MAX; - osmoload.memcrc = crc16(0, (uint8_t *) osmoload.binbuf + osmoload.memoff, reqbytes); + osmoload.memcrc = osmo_crc16(0, (uint8_t *) osmoload.binbuf + osmoload.memoff, reqbytes); osmoload.memreq = reqbytes; struct msgb *msg = msgb_alloc(MSGB_MAX, "loader"); @@ -705,7 +705,7 @@ loader_do_fprogram() { uint8_t reqbytes = (rembytes < MEM_MSG_MAX) ? rembytes : MEM_MSG_MAX; - osmoload.memcrc = crc16(0, (uint8_t *) osmoload.binbuf + osmoload.memoff, reqbytes); + osmoload.memcrc = osmo_crc16(0, (uint8_t *) osmoload.binbuf + osmoload.memoff, reqbytes); osmoload.memreq = reqbytes; struct msgb *msg = msgb_alloc(MSGB_MAX, "loader"); diff --git a/src/target/firmware/apps/loader/main.c b/src/target/firmware/apps/loader/main.c index a948934..2ff6f9c 100644 --- a/src/target/firmware/apps/loader/main.c +++ b/src/target/firmware/apps/loader/main.c @@ -253,7 +253,7 @@ static void cmd_handler(uint8_t dlci, struct msgb *msg) nbytes = msgb_get_u8(msg); address = msgb_get_u32(msg); - crc = crc16(0, (void *)address, nbytes); + crc = osmo_crc16(0, (void *)address, nbytes); msgb_put_u8(reply, LOADER_MEM_READ); msgb_put_u8(reply, nbytes); @@ -274,7 +274,7 @@ static void cmd_handler(uint8_t dlci, struct msgb *msg) data = msgb_get(msg, nbytes); - mycrc = crc16(0, data, nbytes); + mycrc = osmo_crc16(0, data, nbytes); if (mycrc == crc) { memcpy((void *)address, data, nbytes); @@ -392,7 +392,7 @@ static void cmd_handler(uint8_t dlci, struct msgb *msg) data = msgb_get(msg, nbytes); - mycrc = crc16(0, data, nbytes); + mycrc = osmo_crc16(0, data, nbytes); if (mycrc == crc) { res = flash_program(&the_flash, address, data, nbytes); diff --git a/src/target/firmware/apps/loader_mtk/main.c b/src/target/firmware/apps/loader_mtk/main.c index 899d765..9bfaa7e 100644 --- a/src/target/firmware/apps/loader_mtk/main.c +++ b/src/target/firmware/apps/loader_mtk/main.c @@ -194,7 +194,7 @@ static void cmd_handler(uint8_t dlci, struct msgb *msg) nbytes = msgb_get_u8(msg); address = msgb_get_u32(msg); - crc = crc16(0, (void *)address, nbytes); + crc = osmo_crc16(0, (void *)address, nbytes); msgb_put_u8(reply, LOADER_MEM_READ); msgb_put_u8(reply, nbytes); @@ -215,7 +215,7 @@ static void cmd_handler(uint8_t dlci, struct msgb *msg) data = msgb_get(msg, nbytes); - mycrc = crc16(0, data, nbytes); + mycrc = osmo_crc16(0, data, nbytes); if (mycrc == crc) { memcpy((void *)address, data, nbytes); @@ -333,7 +333,7 @@ static void cmd_handler(uint8_t dlci, struct msgb *msg) data = msgb_get(msg, nbytes); - mycrc = crc16(0, data, nbytes); + mycrc = osmo_crc16(0, data, nbytes); if (mycrc == crc) { res = flash_program(&the_flash, address, data, nbytes); -- 1.7.2.5 --------------090200050301070809080105--

1 0

[PATCH] src: use namespace prefix osmo_wqueue*
by Pablo Neira Ayuso 15 May '11

15 May '11

Summary of changes: s/struct write_queue/struct osmo_wqueue/g s/write_queue_init/osmo_wqueue_init/g s/write_queue_clear/osmo_wqueue_clear/g s/write_queue_enqueue/osmo_wqueue_enqueue/g s/write_queue_bfd_cb/osmo_wqueue_bfd_cb/g --- .../include/osmocom/bb/common/osmocom_data.h | 2 +- src/host/layer23/src/common/l1l2_interface.c | 4 ++-- src/host/layer23/src/common/sap_interface.c | 4 ++-- 3 files changed, 5 insertions(+), 5 deletions(-) diff --git a/src/host/layer23/include/osmocom/bb/common/osmocom_data.h b/src/host/layer23/include/osmocom/bb/common/osmocom_data.h index 9d8a030..9ca4114 100644 --- a/src/host/layer23/include/osmocom/bb/common/osmocom_data.h +++ b/src/host/layer23/include/osmocom/bb/common/osmocom_data.h @@ -50,7 +50,7 @@ struct rx_meas_stat { struct osmocom_ms { struct llist_head entity; char name[32]; - struct write_queue l2_wq, sap_wq; + struct osmo_wqueue l2_wq, sap_wq; uint16_t test_arfcn; uint8_t deleting, shutdown, started; diff --git a/src/host/layer23/src/common/l1l2_interface.c b/src/host/layer23/src/common/l1l2_interface.c index 3272359..2abb660 100644 --- a/src/host/layer23/src/common/l1l2_interface.c +++ b/src/host/layer23/src/common/l1l2_interface.c @@ -126,7 +126,7 @@ int layer2_open(struct osmocom_ms *ms, const char *socket_path) return rc; } - write_queue_init(&ms->l2_wq, 100); + osmo_wqueue_init(&ms->l2_wq, 100); ms->l2_wq.bfd.data = ms; ms->l2_wq.bfd.when = BSC_FD_READ; ms->l2_wq.read_cb = layer2_read; @@ -167,7 +167,7 @@ int osmo_send_l1(struct osmocom_ms *ms, struct msgb *msg) len = (uint16_t *) msgb_push(msg, sizeof(*len)); *len = htons(msg->len - sizeof(*len)); - if (write_queue_enqueue(&ms->l2_wq, msg) != 0) { + if (osmo_wqueue_enqueue(&ms->l2_wq, msg) != 0) { LOGP(DL1C, LOGL_ERROR, "Failed to enqueue msg.\n"); msgb_free(msg); return -1; diff --git a/src/host/layer23/src/common/sap_interface.c b/src/host/layer23/src/common/sap_interface.c index 4d465f0..5d92840 100644 --- a/src/host/layer23/src/common/sap_interface.c +++ b/src/host/layer23/src/common/sap_interface.c @@ -127,7 +127,7 @@ int sap_open(struct osmocom_ms *ms, const char *socket_path) return rc; } - write_queue_init(&ms->sap_wq, 100); + osmo_wqueue_init(&ms->sap_wq, 100); ms->sap_wq.bfd.data = ms; ms->sap_wq.bfd.when = BSC_FD_READ; ms->sap_wq.read_cb = sap_read; @@ -170,7 +170,7 @@ int osmosap_send(struct osmocom_ms *ms, struct msgb *msg) len = (uint16_t *) msgb_push(msg, sizeof(*len)); *len = htons(msg->len - sizeof(*len)); - if (write_queue_enqueue(&ms->sap_wq, msg) != 0) { + if (osmo_wqueue_enqueue(&ms->sap_wq, msg) != 0) { LOGP(DSAP, LOGL_ERROR, "Failed to enqueue msg.\n"); msgb_free(msg); return -1; -- 1.7.2.5 --------------080404070907070702060601--

1 0

problem with Pirelli DP-L10 and upload the firmware
by Marco Schwan 14 May '11

14 May '11

Hi, I have a problem with the DP-L10. The upload the firmware in the phone is not succesfull. I have made following steps: - change the UART number in the two header files - compile the source - connected the phone with laptop - run the command "./host/osmocon/osmocon -p /dev/ttyUSB0 -m romload ./target/firmware/board/pirelli_dpl10/layer1.highram.bin" - put the accu in the mobile phone the upload the firmware start and the last message from osmocon is: handle_write_block(): 64 bytes (1024/1024) handle_write_block(): Block 51 finished Finished, sent 51 blocks in total Received block ack from phone Sending checksum: 0x55 I have follow message expected: Received block ack from phone Sending checksum: 0xaa Checksum on phone side matches, let's branch to your code Branching to 0x00820000 Received branch ack, your code is running now! I see not the error. Can you please a idea give. Marco

1 0

arm-elf-ld: region LRAM is full (board/mt62xx/loader_mtk.mtkram.elf section .rodata)
by Jens Hoffmann 14 May '11

14 May '11

Hi, when compiling the firmware I get the following error: make[2]: Entering directory `/home/hoffmaje/proseminar/install/osmocom-bb/src/target/firmware' LD board/mt62xx/loader_mtk.mtkram.elf arm-elf-ld: region LRAM is full (board/mt62xx/loader_mtk.mtkram.elf section .rodata) arm-elf-ld: region LRAM is full (board/mt62xx/loader_mtk.mtkram.elf section .rodata) I used a tool-chain mentioned in a post from 18. January 2011: ftp://ftp.pengutronix.de/pub/oselas/oselas.toolchain-1.99.3.6-arm-elf-gcc-4.3.2-newlib-1.16.0-binutils-2.18_i386.tar.bz2 I read the PreliminaryRequirements <http://www.osmocom.org/trac/wiki/PreliminaryRequirements>, the archives and I did a google search; I would be even glad just to understand what this error is about. Thanks for your help, Jens

2 1

Re: Anybody using a BTS for debugging?
by Dieter Spaar 13 May '11

13 May '11

Hello Gianni, On Fri, 13 May 2011 11:41:35 +0100, "Gianni Tedesco" <gianni(a)scaramanga.co.uk> wrote: > > Any idea of model numbers? The ones I've looked at have been > $1,000 > and only do calls, not SMS for example. The Racal 6103E can do SMS and sometimes is available for less than $US 500 (a few cheap ones were sold in the UK a while ago). Be aware of the 6103G or the "Anite" variant, they cannot be used "standalone". Best regards, Dieter -- Dieter Spaar, Germany spaar(a)mirider.augusta.de

1 0

L1 corruption?
by suraev＠stud.ntnu.no 13 May '11

13 May '11

Hi. I'm trying to follow the logic described in app_ccch_scan to send RACH bursts to my openbts. First 2-2 goes fine but after that I got constant errors - see below. It looks like after I've sent couple of packets something got corrupted in L1. How can I debug this and understand what causing all the errors? LOG: <0001> app_rach_send.c:227 registering signal handler... <0001> app_rach_send.c:229 resetting L1... <0001> app_rach_send.c:231 L3 init... <0001> app_rach_send.c:190 requesting FBSB from L1... <0001> app_rach_send.c:200 unhandled callback 1 <S_L1CTL_FBSB_RESP> fired... <0001> app_rach_send.c:111 obtained BCCH, dumping... <0001> app_rach_send.c:73 SI2 on the wrong TC: 0 <0001> app_rach_send.c:111 obtained BCCH, dumping... <0001> app_rach_send.c:75 SI3 on the wrong TC: 0 <0001> app_rach_send.c:111 obtained BCCH, dumping... <0001> app_rach_send.c:75 SI3 on the wrong TC: 0 <0001> app_rach_send.c:200 unhandled callback 5 <S_L1CTL_CCCH_MODE_CONF> fired... <0001> app_rach_send.c:200 unhandled callback 5 <S_L1CTL_CCCH_MODE_CONF> fired... <0001> app_rach_send.c:111 obtained BCCH, dumping... <0001> app_rach_send.c:86 SI4 on the wrong TC: 0 <0001> app_rach_send.c:111 obtained BCCH, dumping... <0001> app_rach_send.c:86 SI4 on the wrong TC: 0 ... <0001> app_rach_send.c:111 obtained BCCH, dumping... <0001> app_rach_send.c:86 SI4 on the wrong TC: 0 <0001> app_rach_send.c:111 obtained BCCH, dumping... <0001> app_rach_send.c:70 SI1 received. <0001> app_rach_send.c:127 sending RACH #0 on ARFCN 21... <0001> app_rach_send.c:111 obtained BCCH, dumping... <0001> app_rach_send.c:127 sending RACH #1 on ARFCN 21... <0001> app_rach_send.c:111 obtained BCCH, dumping... <0001> app_rach_send.c:127 sending RACH #2 on ARFCN 21... <0000> rslms.c:136 unknown RSLms msg_discr 0x0c <0000> rslms.c:136 unknown RSLms msg_discr 0x0c <0000> rslms.c:136 unknown RSLms msg_discr 0x0c <000b> l1ctl.c:210 Dropping frame with 80 bit errors <000b> l1ctl.c:210 Dropping frame with 80 bit errors <000b> l1ctl.c:210 Dropping frame with 80 bit errors <000b> l1ctl.c:210 Dropping frame with 59 bit errors <000b> l1ctl.c:210 Dropping frame with 59 bit errors <000b> l1ctl.c:210 Dropping frame with 59 bit errors <000b> l1ctl.c:210 Dropping frame with 58 bit errors <000b> l1ctl.c:210 Dropping frame with 58 bit errors <000b> l1ctl.c:210 Dropping frame with 58 bit errors <000b> l1ctl.c:210 Dropping frame with 61 bit errors <000b> l1ctl.c:210 Dropping frame with 61 bit errors <000b> l1ctl.c:210 Dropping frame with 61 bit errors <000b> l1ctl.c:210 Dropping frame with 62 bit errors <000b> l1ctl.c:210 Dropping frame with 60 bit errors <000b> l1ctl.c:210 Dropping frame with 61 bit errors <000b> l1ctl.c:210 Dropping frame with 61 bit errors

1 0

Osmocom project vs. sysmocom GmbH
by Harald Welte 13 May '11

13 May '11

Hi all! As some of you already know, Holger and I have recently started a new company called "sysmocom - systems for mobile communications GmbH". The process of establishing the new company has now formally concluded. Before some rumours start to spread, we would like to clarify some points and make sure there is mutual understanding between the Osmocom community and the sysmocom company. sysmocom is intended to provide commercial offerings related to the Osmocom projects. This is not entirely new. Especially on the network side, people like Holger and I have been doing quite a lot of paid development to bring those projects forward. We would not have many of the features we have today, if it wasn't for customers who actually pay us for development of OpenBSC, OsmoBSC, OsmoSGSN and the various side projects more targetted at a real network operator like cellmgr-ng, bsc-nat, gb_proxy - just to name a few. However, this has always only been freelancing development of Software. With sysmocom, we want to go one step further and work on hardware products related to the various Free Software projects. Right now I don't want to talk too much about unfinished products, but we are working towards an inexpensive BTS product, we are funding the prototypes for Osmocom SIMtrace, and we will likely also see stuff like OpenBSC appliances. Given our past involvement and exposure into other projects that share a split Free Software / business set-up, we think we understand very well where potential issues of conflict between the two sides may be. Let me make some more clarification what this is not about: * sysmocom is not about creating proprietary derivates of Osmocom software. We work on Free Software which is publicly available under OSI approved and FSF endorsed licenses. We may offer proprietary hardware and sometimes software - but those are independent projects from existing Osmocom software. * we specifically will not have a public and a non-public version of the same program with differences in features. * sysmocom is not a VC-funded startup. It's a very small company run out of personal funds with no intention to take external funding or grow rapidly. Nobody but Holger and I determine where it goes and what it does. * sysmocom does not hold any copyright on the Free Software projects. The copyrights stay distributed with the major authors such as Holger, Onwaves, Sylvain, Dieter, Andreas and myself. None of the others have any affiliation with sysmocom. I have (personally, unrelated to sysmocom) asked some of the smaller contributors for a copyright transfer to make sure we could do the AGPLv3 transition, or future re-licensing decisions without having to ask dozens and dozens of people. sysmocom does not seek to control the Free Software projects. * we will maintain a strict separation between the community side of things and the business side. Unlike some other popular projects, we will not end up in a situation where the osmocom.org websites will be full of advertisements and hidden links that lure you on the company website. * we will keep a strict separation of naming. Osmocom is for the FOSS projects, sysmocom for the business. The company will use the term "Osmocom" only in descriptive context, not as a product name, brand or for advertisement. If you do have any concerns, please feel free to share them. However, I'd like to avoid cross-posting them throguh different mailing lists. Please follow-up-to openbsc(a)lists.osmocom.org Regards, Harald -- - Harald Welte <hwelte(a)sysmocom.de> http://www.sysmocom.de/ ======================================================================= * sysmocom - systems for mobile communications GmbH * Schivelbeiner Str. 5 * 10439 Berlin, Germany * Sitz / Registered office: Berlin, HRB 134158 B * Geschaeftsfuehrer / Managing Directors: Holger Freyther, Harald Welte

1 0

Anybody using a BTS for debugging?
by Gianni Tedesco 13 May '11

13 May '11

Hi, It seems like a BTS is required in order to really debug anything one develops with osmocombb. I'm still looking at implementing SMS. However the only off-the-shelf option seems to be USRP which is about $1,000 right? Is this going to become a very expensive hobby or are there cheaper options here? Is there a way to bypass L1CTL on the phone and feed the data in to, say, openBTS? If not, it would seem useful to hack such a thing up... Gianni

2 2

Planning for Radio Village at 2011 CCC Camp
by Harald Welte 12 May '11

12 May '11

Hi all! [This message is cross-posted to many lists, please be careful when replying to it! Think twice if your respones really matters to all those projects...] In order to do some better planning for our Camp activities this summer, I would like to request all people who intend to participate in the radio village to add themselves to the wiki: https://events.ccc.de/camp/2011/wiki/index.php/RadioVillage The list of citizens is auto-generated if you use Person template like I have done in my user page at https://events.ccc.de/camp/2011/wiki/index.php/User:LaForge The large main tent is not really intended as a place to sleep, but more like a place where we set up our gear and work on the various projects, similar to what happened at HAR. Thanks in advance! -- - Harald Welte <laforge(a)gnumonks.org> http://laforge.gnumonks.org/ ============================================================================ "Privacy in residential applications is a desirable marketing option." (ETSI EN 300 175-7 Ch. A6)

1 0

reading bts parameters
by Tom Mayer 12 May '11

12 May '11

hello, I am not quite sure if this is the right place to ask, so sorry in advance for spamming ir i'm in the wrong place. I have build and run osmocom on my C123. I am using it for a university project and we try to read parameters from surrounding BTS. The final goal will be to separate real bts from imsi catchers. So my question is, can I use the osmocom library to gather some data from surrounding BTS? Are there some example programs? Would anyone know a good way to read the SIM data from the connected C123? Thanks in advance! Cheers Tom ---------------------------------------------------------------------------- Short example scenario: A very obvious catcher fault would be not having set the regional code or having set a wrong regional code. So it would theoretically be possible to read the regional code from the own SIM card and the regional code of the transmitting BTS and compare those.

5 5

[PATCH]: Implement SMS decoding
by Gianni Tedesco 12 May '11

12 May '11

Hi, Attached patch implements SMS decoding. Right now it just logs it all to DMM (when I tried DSMS I didn't get any output?!). What remains is to plumb this through to mobile so that the messages can be displayed over a vty and also to send a response other than GSM48_REJECT_MSG_TYPE_NOT_IMPLEMENTED - but I'm not sure what needs to happen here. Is anyone else working in this area? Gianni commit a244cccb6f7600cb867e4949926cc7d877b58f31 Author: Gianni Tedesco <gianni(a)scaramanga.co.uk> Date: Thu May 12 03:24:19 2011 +0100 Implement SMS decoding diff --git a/src/host/layer23/src/mobile/Makefile.am b/src/host/layer23/src/mobile/Makefile.am index fb0423e..60e8d23 100644 --- a/src/host/layer23/src/mobile/Makefile.am +++ b/src/host/layer23/src/mobile/Makefile.am @@ -4,7 +4,7 @@ LDADD = ../common/liblayer23.a $(LIBOSMOCORE_LIBS) $(LIBOSMOVTY_LIBS) $(LIBOSMOG noinst_LIBRARIES = libmobile.a libmobile_a_SOURCES = gsm322.c gsm48_cc.c gsm48_mm.c gsm48_rr.c \ - mnccms.c settings.c subscriber.c support.c \ + gsm48_sms.c mnccms.c settings.c subscriber.c support.c \ transaction.c vty_interface.c bin_PROGRAMS = mobile diff --git a/src/host/layer23/src/mobile/gsm48_mm.c b/src/host/layer23/src/mobile/gsm48_mm.c index bf5bbc2..84069f3 100644 --- a/src/host/layer23/src/mobile/gsm48_mm.c +++ b/src/host/layer23/src/mobile/gsm48_mm.c @@ -36,6 +36,7 @@ #include <osmocom/bb/common/networks.h> #include <osmocom/bb/common/l1ctl.h> #include <osmocom/bb/mobile/gsm48_cc.h> +#include <osmocom/bb/mobile/gsm48_sms.h> #include <osmocom/bb/mobile/app_mobile.h> extern void *l23_ctx; @@ -737,10 +738,10 @@ int gsm48_mmxx_dequeue(struct osmocom_ms *ms) case GSM48_MMSS_CLASS: gsm48_rcv_ss(ms, msg); break; +#endif case GSM48_MMSMS_CLASS: gsm48_rcv_sms(ms, msg); break; -#endif } msgb_free(msg); work = 1; /* work done */ @@ -3847,9 +3848,10 @@ static int gsm48_mm_data_ind(struct osmocom_ms *ms, struct msgb *msg) case GSM48_PDISC_NC_SS: return gsm48_rcv_ss(ms, msg); - case GSM48_PDISC_SMS: - return gsm48_rcv_sms(ms, msg); #endif + case GSM48_PDISC_SMS: + LOGP(DMM, LOGL_NOTICE, "SMS PDISC = 0x%.2x\n", GSM48_PDISC_SMS); + gsm48_rcv_sms(ms, msg); default: LOGP(DMM, LOGL_NOTICE, "Protocol type 0x%02x unsupported.\n", diff --git a/src/host/layer23/src/mobile/gsm48_sms.c b/src/host/layer23/src/mobile/gsm48_sms.c new file mode 100644 index 0000000..63b1965 --- /dev/null +++ b/src/host/layer23/src/mobile/gsm48_sms.c @@ -0,0 +1,306 @@ +/* + * (C) 2010 by Andreas Eversberg <jolly(a)eversberg.eu> + * (C) 2011 by Gianni Tedesco <gianni(a)scaramanga.co.uk> + * + * All Rights Reserved + * + * This program is free software; you can redistribute it and/or modify + * it under the terms of the GNU General Public License as published by + * the Free Software Foundation; either version 2 of the License, or + * (at your option) any later version. + * + * This program is distributed in the hope that it will be useful, + * but WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + * GNU General Public License for more details. + * + * You should have received a copy of the GNU General Public License along + * with this program; if not, write to the Free Software Foundation, Inc., + * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. + * + */ + +#include <stdint.h> +#include <errno.h> +#include <stdio.h> +#include <string.h> +#include <stdlib.h> +#include <arpa/inet.h> + +#include <osmocom/core/msgb.h> +#include <osmocom/core/utils.h> +#include <osmocom/gsm/gsm48.h> +#include <osmocom/core/talloc.h> + +#include <osmocom/bb/common/logging.h> +#include <osmocom/bb/common/osmocom_data.h> +#include <osmocom/bb/common/networks.h> +#include <osmocom/bb/common/l1ctl.h> +#include <osmocom/bb/mobile/gsm48_sms.h> +#include <osmocom/bb/mobile/app_mobile.h> + +#define CP_DATA 1 + +#define RP_DATA 1 +#define RP_ACK 3 +#define RP_ERROR 5 + +#define TP_MTI_MASK 3 +#define SMS_DELIVER 0 +#define SMS_SUBMIT_REPORT 1 +#define SMS_STATUS_REPORT 2 + +#define TP_RP 0x80 +#define TP_UDHI 0x40 +#define TP_SRI 0x20 +#define TP_MMS 0x04 + +static void decode_7bit(const uint8_t *inp, size_t octets, size_t len) +{ + uint8_t out[len + 1]; + unsigned int i; + + for(i = 0; i <= len; i++) { + int ipos = i - (i >> 3); + int offset = (i & 0x7); + + out[i] = (inp[ipos] & (0x7F >> offset)) << offset; + if( 0 == offset ) + continue; + + out[i] |= (inp[ipos - 1] & + (0x7F << (8 - offset)) & 0xFF) >> (8 - offset); + } + + out[len] = '\0'; + LOGP(DMM, LOGL_NOTICE, "SMS: \"%s\"\n", out); +} + +static uint8_t hi_nibble(uint8_t byte) +{ + return byte >> 4; +} + +static uint8_t lo_nibble(uint8_t byte) +{ + return byte & 0xf; +} + +static int parse_address(struct msgb *msg, int rp, const char *name) +{ + uint8_t len, type; + + if ( !msg->len ) + return -EPROTO; + + len = msgb_get_u8(msg); + if ( !len ) + return 0; + + type = msgb_get_u8(msg); + + if ( rp ) { + /* for RP address, len is in bytes including type field */ + len = len - 1; + }else{ + /* TP address is in BCD digits, not including type field */ + len = len / 2; + } + + if ( msg->len < len ) + return -EPROTO; + + LOGP(DMM, LOGL_NOTICE, "%s: type=0x%.2x %s\n", + name, type, hexdump(msg->data, len)); + + msgb_pull(msg, len); + return 0; +} + +static int parse_timestamp(struct msgb *msg, const char *name) +{ + if ( msg->len < 7 ) + return -EPROTO; + LOGP(DMM, LOGL_NOTICE, + "%s: 20%1x%1x-%1x%1x-%1x%1x %1x%1x:%1x%1x:%1x%1x\n", + name, + lo_nibble(msg->data[0]), + hi_nibble(msg->data[0]), + lo_nibble(msg->data[1]), + hi_nibble(msg->data[1]), + lo_nibble(msg->data[2]), + hi_nibble(msg->data[2]), + lo_nibble(msg->data[3]), + hi_nibble(msg->data[3]), + lo_nibble(msg->data[4]), + hi_nibble(msg->data[4]), + lo_nibble(msg->data[5]), + hi_nibble(msg->data[5])); + msgb_pull(msg, 7); + return 0; +} +static int sms_deliver(struct osmocom_ms *ms, struct msgb *msg, uint8_t b) +{ + uint8_t tp_pid, tp_dcs, tp_udlen; + int rc; + + if ( !(b & TP_MMS) ) + LOGP(DMM, LOGL_NOTICE, "SMS-DELIVER: More messages to send.\n"); + + rc = parse_address(msg, 0, "TP-Originating"); + if ( rc ) + return -EPROTO; + + if ( msg->len < 2 ) + return -EPROTO; + + tp_pid = msgb_get_u8(msg); + tp_dcs = msgb_get_u8(msg); + LOGP(DMM, LOGL_NOTICE, "TP-PID: 0x%.2x\n", tp_pid); + LOGP(DMM, LOGL_NOTICE, "TP-DCS: 0x%.2x\n", tp_dcs); + + rc = parse_timestamp(msg, "TP-Service-Center-Time-Stamp"); + if ( rc ) + return -EPROTO; + + if ( !msg->len ) + return -EPROTO; + tp_udlen = msgb_get_u8(msg); + + /* check for unknown data coding scheme */ + if (tp_dcs) + return 0; + + decode_7bit(msg->data, msg->len, tp_udlen); + return 0; +} + +static int sms_tpdu_decode(struct osmocom_ms *ms, struct msgb *msg) +{ + uint8_t tp_mti; + + if ( !msg->len ) + return 0; + tp_mti = msgb_get_u8(msg); + + switch(tp_mti & TP_MTI_MASK) { + case SMS_DELIVER: + return sms_deliver(ms, msg, tp_mti); + case SMS_SUBMIT_REPORT: + LOGP(DMM, LOGL_NOTICE, "Received SMS-SUBMIT-REPORT: %s\n", + hexdump(msg->data, msg->len)); + break; + case SMS_STATUS_REPORT: + LOGP(DMM, LOGL_NOTICE, "Received SMS-STATUS-REPORT: %s\n", + hexdump(msg->data, msg->len)); + break; + default: + LOGP(DMM, LOGL_NOTICE, "Reserved MTI: 0x%.2x\n", + tp_mti); + return -EPROTO; + } + + return 0; +} + +static int rp_data_decode(struct osmocom_ms *ms, struct msgb *msg, uint8_t ref) +{ + static const char * const str[2] = {"RP-Origination", "RP-Destination"}; + unsigned int i; + uint8_t tpdu_len; + + LOGP(DMM, LOGL_NOTICE, "Received RP-DATA: ref %d\n", ref); + + for(i = 0; i < 2; i++) { + int rc; + + rc = parse_address(msg, 1, str[i]); + if ( rc ) + return -EPROTO; + } + + if ( !msg->len ) + return -EPROTO; + tpdu_len = msgb_get_u8(msg); + if ( tpdu_len < msg->len ) + return -EPROTO; + if ( tpdu_len < msg->len ) { + LOGP(DMM, LOGL_NOTICE, "RP-DATA: %u trailing bytes: %s\n", + msg->len - tpdu_len, + hexdump(msg->data + tpdu_len, msg->len - tpdu_len)); + msg->len = tpdu_len; + } + + /* TODO: pass in reference, and src/dst addresses */ + return sms_tpdu_decode(ms, msg); +} + +static int rp_decode(struct osmocom_ms *ms, struct msgb *msg) +{ + uint8_t rp_mt, rp_ref; + + if ( msg->len < 2 ) + return -EPROTO; + + rp_mt = msgb_get_u8(msg); + rp_ref = msgb_get_u8(msg); + + switch(rp_mt) { + case RP_DATA: + return rp_data_decode(ms, msg, rp_ref); + case RP_ACK: + LOGP(DMM, LOGL_NOTICE, "Received RP-ACK: %s\n", + hexdump(msg->data, msg->len)); + return -ENOTSUP; + case RP_ERROR: + LOGP(DMM, LOGL_NOTICE, "Received RP-ERROR: %s\n", + hexdump(msg->data, msg->len)); + return -ENOTSUP; + default: + LOGP(DMM, LOGL_NOTICE, "Bad RP Message-type: 0x%.2x\n", rp_mt); + return -ENOTSUP; + } + + return 0; +} + +static int cp_data(struct osmocom_ms *ms, struct msgb *msg) +{ + uint8_t len; + + if ( !msg->len ) + return -EPROTO; + len = msgb_get_u8(msg); + if ( len != msg->len ) { + LOGP(DMM, LOGL_NOTICE, "CP-DATA: size mismatch " + "%u != %u bytes\n", len, msg->len); + }else{ + LOGP(DMM, LOGL_NOTICE, "CP-DATA: %u bytes\n", len); + } + + return rp_decode(ms, msg); +} + +int gsm48_rcv_sms(struct osmocom_ms *ms, struct msgb *msg) +{ + uint8_t cp_type; + + LOGP(DMM, LOGL_NOTICE, "Received SMS: %s\n", + hexdump(msg->data, msg->len)); + + if ( msg->len < 2) + return -EPROTO; + + msgb_pull(msg, 1); /* protocol discriminator */ + cp_type = msgb_get_u8(msg); + + switch(cp_type) { + case CP_DATA: + return cp_data(ms, msg); + default: + LOGP(DMM, LOGL_NOTICE, "Unknown SMS type: 0x%.2x\n", cp_type); + return 0; + } + + return 0; +}

2 3

GSM specs doubt
by Gerard 09 May '11

09 May '11

Hi list, while studing burst_ind (I know that burst_ind must be used in a own controlled network) i see that one SDCCH for a specific operator has been shared by more than one MS (different TMSIs), some MS use for SMS other use for calls. Is that an interpratation error (due the fact of using burst_ind in real networks) or that could be possible? i didn't find explanations on sepcs. TIA

2 1

[ANN] libosmocore stable API/ABI
by Harald Welte 08 May '11

08 May '11

Hi all! I think now that the namespace issues in libosmocore have been resolved, we seriously have to think of maintaining a stable API and ABI. This allows us to have truly independent library and application releases, and the dynamic linker library versioning support should ensure compatibility. So please think twice about any modifying libosmocore. It is safe to add new functions, but we cannot change the prototypes (number of arguments) for existing functions. As soon as new functions are introduced, we should increment the library interface number. For more information, see http://www.gnu.org/software/libtool/manual/libtool.html#Versioning especially the rules in Chapter 7.3: # If the library source code has changed at all since the last update, then increment revision (‘c:r:a’ becomes ‘c:r+1:a’). # If any interfaces have been added, removed, or changed since the last update, increment current, and set revision to 0. # If any interfaces have been added since the last public release, then increment age. # If any interfaces have been removed or changed since the last public release, then set age to 0. Regards, Harald -- - Harald Welte <laforge(a)gnumonks.org> http://laforge.gnumonks.org/ ============================================================================ "Privacy in residential applications is a desirable marketing option." (ETSI EN 300 175-7 Ch. A6)

2 2

[ADM] osmocom.org via IPv6
by Harald Welte 08 May '11

08 May '11

Hi all, JFYI: For a couple of days, *.osmocom.org is reachable via IPv6. I've had native IPv6 at my co-located servers for more than 10 years, but somehow never configured it for the virtual machines like *.osmocom.org - this is now fixed. If you encounter any difficulties, please let me know. Regards, Harald -- - Harald Welte <laforge(a)gnumonks.org> http://laforge.gnumonks.org/ ============================================================================ "Privacy in residential applications is a desirable marketing option." (ETSI EN 300 175-7 Ch. A6)

1 0

SPMA100B ringtone chip
by l--putt 07 May '11

07 May '11

Hi list! To get closer to a useful phone, I started a project to create a driver for the SPMA100B ringtone chip of the C155. I can replay the commands to play the startup and shutdown sounds and have some idea about the registers. A problem is the MIDI(?) data send to the chip: It's possible to extract the MIDI files from a flash image but the tracks are interleaved by the firmware. Some random single track files don't work either. Anybody an idea? I've found other datasheets (in particular for the W56964 of the DPL10) and they helped a lot in understanding the SPMA100B due to the similarities. Hence, I suggest a common framework for all those chips. However, even salsa (embedded version of ALSA) seems excessive since we have just a single device. I considered a really simple design with just single write-call that blocks until played. Some ioctl solve volume etc. But this doesn't communicate the state (playing, fifo empty, finished, error) well. Any ideas? Does anybody know cc-licensed MIDI ringtones? http://www.ringtonepirates.de/ seems to have only MP3 sounds. Given its name, you also need balls to download there (at least in Germany: "offensichtlich illegale Quelle" :-P ) Regards, Stefan A hack of hello_world example to play ringtones on SPMA100B chip --- src/target/firmware/apps/hello_world/main.c | 330 ++++++++++++++++++++++++++- 1 files changed, 328 insertions(+), 2 deletions(-) diff --git a/src/target/firmware/apps/hello_world/main.c b/src/target/firmware/apps/hello_world/main.c index 5e3ed85..f247795 100644 --- a/src/target/firmware/apps/hello_world/main.c +++ b/src/target/firmware/apps/hello_world/main.c @@ -68,6 +68,310 @@ static void l1a_l23_rx_cb(uint8_t dlci, struct msgb *msg) puts("\n"); } +/* Define GPIO interface */ +#define ARMIO_LATCH_OUT 0xfffe4802 +#define IO_CNTL_REG 0xfffe4804 +#define ASIC_CONF_REG 0xfffef008 + +#define IO_CONF_REG 0xfffef00a +#define CALYPSO_CONF_OFF 4 + +#define CALYPSO_IO4 (1 << 4) +#define CALYPSO_IO7 (1 << 7) +#define CALYPSO_IO8 (1 << 8) +#define CALYPSO_IO12 (1 << 12) + +#define GPIO_ENABLE(pins) { \ + uint16_t reg = readw(IO_CONF_REG); \ + reg |= (pins) >> CALYPSO_CONF_OFF; \ + writew(reg, IO_CONF_REG); } + +#define GPIO_OUTPUT(pins) { \ + uint16_t reg = readw(IO_CNTL_REG); \ + reg &= ~(pins); \ + writew(reg, IO_CNTL_REG); } + +#define GPIO_SET(pins) { \ + uint16_t reg = readw(ARMIO_LATCH_OUT); \ + reg |= (pins); \ + writew(reg, ARMIO_LATCH_OUT); } + +#define GPIO_UNSET(pins) { \ + uint16_t reg = readw(ARMIO_LATCH_OUT); \ + reg &= ~(pins); \ + writew(reg, ARMIO_LATCH_OUT); } + +/* Define W569x constants */ +#define MUSIC_REG 0x01800000 + +#define MUSIC_IRQ CALYPSO_IO4 +#define MUSIC_A0 CALYPSO_IO8 +#define MUSIC_ON CALYPSO_IO12 + +static uint8_t spma100_regread(uint8_t bank) +{ + GPIO_UNSET(MUSIC_A0); + delay_ms(1); + writeb(bank, MUSIC_REG); + GPIO_SET(MUSIC_A0); + + delay_ms(1); + + return readb(MUSIC_REG); +} + +static void spma100_dumpregs(void) +{ + int i; + for(i=0; i<256; i++) { + printf("%02x,", spma100_regread(i)); + } + printf("\n\n"); +} + +static void spma100_deltaregs(void) +{ + int i; + static uint8_t state[256]; + for(i=0; i<256; i++) { + char tmp = spma100_regread(i); + if(tmp ^ state[i]) + printf("%02x: %02x, changed by %02x\n", i, tmp, tmp ^ state[i]); + state[i] = tmp; + } + printf("\n\n"); +} + +static void spma100_regwrite(uint8_t bank, uint8_t data) +{ + GPIO_UNSET(MUSIC_A0); + delay_ms(1); + writeb(bank, MUSIC_REG); + GPIO_SET(MUSIC_A0); + + delay_ms(1); + + writeb(data, MUSIC_REG); + + delay_ms(1); + + //spma100_dumpregs(); + //spma100_deltaregs(); +} + +void music_onoff(int on) +{ + uint16_t reg = readw(0xfffe4802); + + if(on) { + reg |= 0x1000; + } else { + reg &= 0xefff; + } + + writew(reg, 0xfffe4802); +} + +/* HW init */ +void music_init(void) +{ + GPIO_ENABLE(MUSIC_ON); + GPIO_OUTPUT(MUSIC_ON); + + GPIO_ENABLE(MUSIC_IRQ); + + GPIO_ENABLE(MUSIC_A0); + GPIO_OUTPUT(MUSIC_A0); + + writeb(2, 0xfffe4818); + printf("GPIO event mode %x\n", readw(0xfffe4814)); + + music_onoff(1); +} + +int play_midi = -1; +static char midi1[] = {0x72, 0xab, 0x62, 0x00, 0xb0, 0xb3, 0x7f, 0xc0, 0xd2, 0x0b, 0xa7, 0x07, 0xef, 0x3c, 0xce, 0x2f, 0x5e, 0x40, 0x25, 0x3c, 0xb1, 0x07, 0x18, 0x60, 0x30, 0x7b, 0x57, 0x00, 0x91, 0x7f, 0x3f, 0x92, 0x63, 0xf3, 0x0b, 0x18, 0x47, 0xf3, 0xc1, 0x10, 0x54, 0x00, 0xb1, 0x4b, 0x7c, 0x81, 0xe1, 0x00, 0x60, 0x13, 0x50, 0xd6, 0x8a, 0x68, 0x43, 0x90, 0x43, 0x26, 0x74, 0x81, 0xc1, 0x4c, 0x18, 0x00, 0xd9, 0x2a, 0xe0, 0x63, 0x5b, 0xb0, 0x0b, 0x5b, 0x6a, 0x11, 0x37, 0x20, 0x13, 0x00, 0xf6, 0x60, 0x99, 0x70, 0xd6, 0x47, 0x63, 0x5b, 0x7e, 0x31, 0x7b, 0x51, 0x00, 0x90, 0x0c, 0x0a, 0x92, 0x70, 0xfd, 0x0b, 0x19, 0x47, 0xe1, 0xc1, 0x14, 0x54, 0x13, 0xb0, 0x43, 0x68, 0x81, 0xe0, 0x0b, 0x66, 0x13, 0x4c, 0xc2, 0x8a, 0x69, 0x4c, 0x91, 0x43, 0x29, 0x67, 0x92, 0xc0, 0x44, 0x19, 0x00, 0xd8, 0x32, 0xe6, 0x63, 0x48, 0xb1, 0x0b, 0x55, 0x77, 0x10, 0x37, 0x2b, 0x13, 0x13, 0xff, 0x73, 0x9b, 0x70, 0xdf, 0x48, 0x69, 0x40, 0x7a, 0x30, 0x7b, 0x49, 0x00, 0x91, 0x04, 0x12, 0x92, 0x63, 0xfc, 0x0b, 0x1a, 0x4f, 0xed, 0xc2, 0x1a, 0x5c, 0x00, 0xb1, 0x58, 0x64, 0x81, 0xe1, 0x10, 0x6a, 0x13, 0x47, 0xcf, 0x8e, 0x4a, 0x54, 0x90, 0x47, 0x94, 0x3c, 0x00, 0xfc, 0x5f, 0x68, 0x6b, 0x91, 0x47, 0x6b, 0xa7, 0x13, 0x71, 0x5e, 0x1b, 0xb1, 0x97, 0x10, 0x6d, 0x82, 0x3c, 0xef, 0x8a, 0x6b, 0x3c, 0x91, 0x48, 0x2d, 0x73, 0x92, 0xc0, 0x4b, 0x1b, 0x00, 0xd3, 0x2d, 0xef, 0x63, 0x43, 0xb1, 0x0b, 0x5c, 0x63, 0x10, 0x3c, 0x29, 0x13, 0x13, 0xf0, 0x6f, 0x9d, 0x70, 0xd0, 0x47, 0x70, 0x50, 0x66, 0x30, 0x7b, 0x5f, 0x00, 0x91, 0x00, 0x17, 0x92, 0x63, 0xf7, 0x0b, 0x1c, 0x48, 0xf9, 0xc9, 0x01, 0x5b, 0x00, 0xb1, 0x48, 0x76, 0x81, 0xe1, 0x0b, 0x71, 0x13, 0x54, 0xdb, 0x8a, 0x6c, 0x47, 0x90, 0x4c, 0x3b, 0x7e, 0x81, 0xc1, 0x43, 0x1c, 0x00, 0xdd, 0x22, 0xf2, 0x63, 0x5f, 0xb0, 0x0b, 0x5a, 0x70, 0x11, 0x3f, 0x33, 0x13, 0x00, 0xf9, 0x7a, 0x9c, 0x70, 0xd9, 0x4f, 0x74, 0x5f, 0x60, 0x31, 0x7b, 0x51, 0x00, 0x90, 0x07, 0x01, 0x92, 0x70, 0xfe, 0x0b, 0x1d, 0x48, 0xe4, 0xc9, 0x05, 0x5b, 0x13, 0xb0, 0x47, 0x6a, 0x81, 0xe0, 0x00, 0x77, 0x13, 0x4f, 0xc9, 0x8a, 0x6d, 0x4f, 0x91, 0x4c, 0x24, 0x69, 0x92, 0xc0, 0x58, 0x1e, 0x00, 0xdc, 0x34, 0xf9, 0x63, 0x4c, 0xb1, 0x0b, 0x51, 0x7d, 0x10, 0x3f, 0x37, 0x13, 0x13, 0xe3, 0x75, 0x9f, 0x70, 0xc3, 0x53, 0x7a, 0x47, 0x7f, 0x34, 0x5b, 0x4a, 0x00, 0x91, 0xac, 0x55, 0x13, 0x23, 0x80, 0x46, 0x4a, 0x68, 0xf4, 0x4c, 0x7b, 0x13, 0x06, 0xb1, 0x0a, 0x1e, 0x03, 0x92, 0x8c, 0x36, 0x47, 0x61, 0xdb, 0x0b, 0x1f, 0x00, 0xcc, 0x4f, 0x82, 0x10, 0x08, 0xc4, 0x65, 0x6b, 0x69, 0xe5, 0x23, 0x18, 0x77, 0x13, 0x4f, 0x09, 0x3e, 0x43, 0xff, 0x23, 0x07, 0x61, 0x69, 0xd6, 0x63, 0x6b, 0x20, 0x38, 0x73, 0x4c, 0x23, 0x23, 0x82, 0x2b, 0x7d, 0x79, 0xb0, 0x10, 0x1e, 0x4e, 0x69, 0xd5, 0x2b, 0x5d, 0x72, 0xf4, 0x3a, 0x11, 0x5d, 0x4a, 0xff, 0xd0, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00}; +static char midi2[] = {0x00, 0x74, 0x62, 0xc0, 0xd2, 0x07, 0xcf, 0x07, 0xcf, 0x0b, 0x8e, 0x54, 0xe9, 0xd5, 0x09, 0x47, 0x00, 0xc1, 0x06, 0x7a, 0x30, 0x77, 0x09, 0x01, 0xb1, 0x44, 0x6f, 0x81, 0xe1, 0x2c, 0x5f, 0x06, 0x4a, 0xc6, 0x8a, 0x67, 0x4c, 0x91, 0x62, 0x0c, 0x73, 0x87, 0xc1, 0x58, 0x17, 0x00, 0xde, 0x12, 0xde, 0x76, 0x4a, 0xb0, 0x0b, 0x52, 0x72, 0x11, 0x23, 0x36, 0x13, 0x01, 0xf9, 0x7b, 0x96, 0x70, 0xd9, 0x60, 0x5f, 0x49, 0x68, 0x30, 0x7b, 0x58, 0x00, 0x91, 0x13, 0x32, 0x87, 0x76, 0xfd, 0x0b, 0x17, 0x48, 0xfa, 0xdf, 0x2f, 0x4e, 0x05, 0xb0, 0x4c, 0x77, 0x81, 0xe0, 0x08, 0x78, 0x13, 0x4d, 0xd9, 0x8a, 0x67, 0x4c, 0x91, 0x5d, 0x17, 0x60, 0x87, 0xc1, 0x43, 0x17, 0x00, 0xd6, 0x38, 0xde, 0x76, 0x41, 0xb1, 0x0b, 0x54, 0x63, 0x10, 0x2b, 0x1c, 0x06, 0x05, 0xf8, 0x6a, 0x9c, 0x70, 0xd8, 0x4c, 0x77, 0x54, 0x5e, 0x30, 0x7b, 0x50, 0x00, 0x91, 0x19, 0x01, 0x87, 0x76, 0xf2, 0x0b, 0x17, 0x40, 0xcd, 0xd8, 0x2f, 0x46, 0x06, 0xb1, 0x4c, 0x4d, 0x81, 0xe1, 0x1f, 0x5f, 0x06, 0x46, 0xe9, 0x8a, 0x6d, 0x43, 0x90, 0x53, 0x35, 0x44, 0x80, 0xc1, 0x4b, 0x17, 0x00, 0xad, 0x02, 0xde, 0x76, 0x3a, 0xb1, 0x0b, 0xe8, 0x2f, 0x91, 0x1b, 0x0b, 0x74, 0x6d, 0xb1, 0x0b, 0x16, 0xb6, 0x91, 0x94, 0x0a, 0x06, 0xb4, 0xb7, 0x51, 0x13, 0x91, 0xf3, 0x10, 0x23, 0x70, 0x02, 0xb1, 0x69, 0x48, 0x50, 0xf3, 0x54, 0x5f, 0x67, 0x59, 0xe1, 0x6a, 0x17, 0x00, 0xf1, 0x0c, 0x0f, 0x66, 0x06, 0xb1, 0x54, 0x48, 0x50, 0xce, 0x52, 0x5f, 0x58, 0x5b, 0xe0, 0x55, 0x1c, 0x00, 0xcd, 0x13, 0x22, 0x4e, 0x02, 0xb1, 0x57, 0x48, 0x50, 0xcd, 0x51, 0x5f, 0x5d, 0x59, 0xe1, 0x50, 0x17, 0x00, 0xcb, 0x0f, 0x0f, 0x5c, 0x06, 0xb1, 0x52, 0x48, 0x50, 0xc8, 0x4f, 0x5f, 0x5e, 0x5b, 0xe0, 0x53, 0x1c, 0x00, 0xc7, 0x17, 0x20, 0x44, 0x02, 0xb1, 0x5d, 0x48, 0x50, 0xc7, 0x4e, 0x5f, 0x53, 0x59, 0xe1, 0x5e, 0x17, 0x0f, 0xc5, 0x12, 0x0f, 0x52, 0x06, 0xb1, 0x58, 0x48, 0x50, 0xc2, 0x4c, 0x5f, 0x54, 0x5b, 0xe0, 0x59, 0x1b, 0x00, 0xc1, 0x10, 0x3e, 0x42, 0x02, 0xb1, 0x5b, 0x48, 0x50, 0xc1, 0x4b, 0x5f, 0x49, 0x59, 0xe1, 0x44, 0x17, 0x00, 0xdf, 0x15, 0x0f, 0x48, 0x06, 0xb1, 0x46, 0x48, 0x50, 0xdc, 0x49, 0x5f, 0x4a, 0x5b, 0xe0, 0x47, 0x1b, 0x00, 0xdb, 0x13, 0x3d, 0x58, 0x02, 0xb1, 0x41, 0x48, 0x50, 0xdb, 0x48, 0x5f, 0x4f, 0x59, 0xe1, 0x42, 0x17, 0x00, 0xd9, 0x18, 0x0f, 0x4e, 0x06, 0xb1, 0x4c, 0x48, 0x50, 0xd6, 0x46, 0x5f, 0x40, 0x5b, 0xe0, 0x4d, 0x1a, 0x00, 0xd5, 0x17, 0x3b, 0x56, 0x02, 0xb1, 0x4f, 0x48, 0x50, 0xd5, 0x45, 0x5f, 0x45, 0x59, 0xe1, 0x48, 0x17, 0x00, 0xd3, 0x1b, 0x0f, 0x44, 0x06, 0xb1, 0x4a, 0x48, 0x50, 0xd0, 0x43, 0x5f, 0x46, 0x5b, 0xe0, 0x4b, 0x1a, 0x00, 0xaf, 0x18, 0x39, 0x2c, 0x02, 0xb1, 0x35, 0x48, 0x50, 0xaf, 0x42, 0x5f, 0x3b, 0x59, 0xe1, 0x36, 0x17, 0x00, 0xad, 0x1e, 0x0f, 0x3a, 0x06, 0xb1, 0x30, 0x48, 0x50, 0xaa, 0x40, 0x5f, 0x3c, 0x64, 0xe0, 0x31, 0x1a, 0x00, 0xa9, 0x2c, 0x38, 0x2a, 0x02, 0xb1, 0x33, 0x77, 0x50, 0xa9, 0x3f, 0x5f, 0x31, 0x66, 0xe1, 0x3c, 0x17, 0x00, 0xa7, 0x5e, 0x0f, 0x30, 0x06, 0xb1, 0x3e, 0x77, 0x50, 0xa4, 0x3d, 0x5f, 0x32, 0x64, 0xe0, 0x3f, 0x19, 0x00, 0xa3, 0x28, 0x36, 0x20, 0x02, 0xb1, 0x39, 0x77, 0x50, 0xa3, 0x3c, 0x5f, 0x37, 0x66, 0xe1, 0x3a, 0x17, 0x00, 0xa1, 0x5a, 0x1f, 0x29, 0x67, 0xa1}; + +/* SPMA100B driver */ +/* XXX: WARNING! Just guessed! Don't rely on anything! */ + +static void spma100_volume(uint8_t vol1, uint8_t vol2, uint8_t vol3, uint8_t vol4) +{ + /* + * Volume registers + * VDS also OK for VDD=2.8V and SPVDD=3.3V + */ + spma100_regwrite(0xe3, vol1); // MIDI or Master + spma100_regwrite(0xe4, vol2); // PCM??? + spma100_regwrite(0xe5, vol3); // PCM??? + spma100_regwrite(0xe6, vol4); // opposite of 0xe3 +} + +static void spma100_standby(void) +{ + /* Volume: Mute */ + spma100_volume(0, 0, 0, 0); + + spma100_regwrite(0xe2, 0x00); + spma100_regwrite(0xe2, 0x01); + spma100_regwrite(0xe1, 0xff); + spma100_regwrite(0xe2, 0x00); + spma100_regwrite(0xe2, 0x01); + spma100_regwrite(0xf2, 0x04); +} + +static void spma100_start(void) +{ + /* Toggle something. Power? */ + spma100_regwrite(0xe2, 0x00); + spma100_regwrite(0xe2, 0x01); + + spma100_regwrite(0xff, 0x07); + spma100_regwrite(0xe9, 0x00); + spma100_regwrite(0xf2, 0x00); + + /* Volume: Mute */ + spma100_volume(0, 0, 0, 0); + + /* Power-up sequence/disable power-downs. Clicks otherwise */ + spma100_regwrite(0xe1, 0x7e); + spma100_regwrite(0xe1, 0x1e); + spma100_regwrite(0xe1, 0x04); + spma100_regwrite(0xe1, 0x00); + + /* + * PLL settings + * With OKI's table 8, this would be 13*34/10 = 44.2MHz + * -> 0.2% error for 44.1kHz * 1000 cycles/sample + * XXX: why twice!? + */ + spma100_regwrite(0xe7, 0x22); + spma100_regwrite(0xe8, 0x09); + spma100_regwrite(0xf3, 0x22); + spma100_regwrite(0xf4, 0x09); + + /* + * Would be transition from MUTE to 0dB for W56964 + */ + spma100_volume(0, 0, 0, 0); + spma100_volume(0x1f, 0x1f, 0x1f, 0x10); + + spma100_regwrite(0xdb, 0x08); + spma100_regwrite(0xdc, 0x00); + spma100_regwrite(0xde, 0x08); + spma100_regwrite(0xdf, 0x00); +} + +static void spma100_senddata(char *data, int length) +{ + int i; + for(i=0; i<length; i++) + spma100_regwrite(0xc5, data[i]); +} + +static void spma100_play_midi(char *data, int length) +{ + spma100_regwrite(0xe0, 0x02); + spma100_regwrite(0xc8, 0x02); + spma100_regwrite(0xc8, 0x04); + spma100_regwrite(0xd6, 0x00); + spma100_regwrite(0xc4, 0x02); + spma100_regwrite(0xc6, 0xff); + spma100_regwrite(0xd6, 0x01); + spma100_senddata(data, length); + spma100_regwrite(0xd6, 0x00); + spma100_regwrite(0xc8, 0x01); +} + +static void spma100_init(void) +{ + static const char setup_cmd[] = { /* removed because of unknown copyright */ }; + + int i; + /* XOR with flash for copyright issues */ + for(i=0; i<449; i++) + midi1[i] = *(uint8_t *)(0x6f0694 + i) ^ midi1[i]; + for(i=0; i<sizeof(midi2); i++) + midi2[i] = *(uint8_t *)(0x6f0884 + i) ^ midi2[i]; + + music_init(); + +/* Not required to play music! + spma100_regwrite(0xd6, 0x01); + spma100_regwrite(0xc8, 0x06); + spma100_regwrite(0xd6, 0x00); + + // XXX: timestamp advanced! What happened? + spma100_regwrite(0xc8, 0x02); + spma100_regwrite(0xc8, 0x04); + spma100_regwrite(0xd6, 0x00); + spma100_regwrite(0xc0, 0x02); + spma100_regwrite(0xc4, 0x00); + spma100_senddata(setup_cmd, sizeof(setup_cmd)); + + // XXX: timestamp advanced! What happened? + spma100_regwrite(0xc6, 0xff); + spma100_regwrite(0xc8, 0x01); + + spma100_standby(); +*/ +} + +static void spma100_voodoo1(void) +{ + spma100_regwrite(0xda, 0x35); + spma100_regwrite(0xdb, 0x02); + spma100_regwrite(0xdd, 0x59); + spma100_regwrite(0xde, 0x02); +} + +static void spma100_voodoo2(void) +{ + spma100_regwrite(0xd2, 0x00); + spma100_regwrite(0xd3, 0x0f); + spma100_regwrite(0xd4, 0x0f); + spma100_regwrite(0xd8, 0x00); +} + +static void spma100_voodoo3(void) +{ + spma100_regwrite(0xc8, 0x06); + spma100_regwrite(0xd6, 0x00); + spma100_regwrite(0xc8, 0x06); + spma100_regwrite(0xd6, 0x00); + spma100_regwrite(0xd6, 0x00); + spma100_regwrite(0xd9, 0x0f); + spma100_regwrite(0xd9, 0x00); + spma100_regwrite(0xd3, 0x0f); + spma100_regwrite(0xd4, 0x0f); + spma100_regwrite(0xd8, 0x00); +} + +static void spma100_clear_fifo() +{ + int i; + spma100_regwrite(0xd6, 0x01); + for(i=0; i<256; i++) + spma100_regwrite(0xc5, 0); +} + +void spma100(const char *midi, int length) +{ + spma100_start(); + + /* XXX: Volume? */ + //spma100_regwrite(0xe1, 0x00); + + spma100_voodoo1(); + spma100_voodoo2(); + spma100_play_midi(midi, length); + + //spma100_clear_fifo(); + //spma100_voodoo3(); + //spma100_standby(); +} + int main(void) { board_init(); @@ -103,9 +407,30 @@ int main(void) sercomm_register_rx_cb(SC_DLCI_CONSOLE, console_rx_cb); sercomm_register_rx_cb(SC_DLCI_L1A_L23, l1a_l23_rx_cb); - /* beyond this point we only react to interrupts */ - puts("entering interrupt loop\n"); + /* MIDI player */ + int i; + spma100_init(); + puts("Play MIDI on keypress\n"); while (1) { + switch(play_midi) { + case 1: + spma100(midi1, sizeof(midi1)); + break; + case 2: + spma100(midi2, sizeof(midi2)); + break; + case 9: + printf("GPIO status %04x\n", readw(0xfffe4800)); + spma100(midi1, sizeof(midi1)); + for(i=0; i<20; i++) { + spma100_deltaregs(); + printf("GPIO status %04x\n", readw(0xfffe4800)); + delay_ms(50); + } + break; + } + play_midi = -1; + update_timers(); } @@ -132,6 +457,7 @@ void key_handler(enum key_codes code, enum key_states state) case KEY_7: case KEY_8: case KEY_9: + play_midi = code - KEY_0; sprintf(test, "%d", code - KEY_0); display_puts(test); break; -- 1.7.1

1 0

R: Re: R: Re: lost dump ?!?!?
by screaming-pain＠libero.it 06 May '11

06 May '11

Thanks Sylvain, Harald and Alex, > >Can you please verify this? If you do have a listener on the UDP port >and still get write errors, we need to fix something in 'mobile'. >Otherwise, no need for that... > I was using nc -u -l 4729 > /dev/null I added the -p option and tried again: as you said this solved the problem!!! Thanks again, Loretta

1 0

simtrace: New mailing list / progress
by Harald Welte 06 May '11

06 May '11

Hi all! Since Kevin and I are trying to re-vitalize the simtrace project, I have decided to create a new simtrace(a)lists.osmocom.org mailing list dedicated to this project. Yesterday at a meeting we have discussed * to use a digitally-controlled analog switch to select sniffing / emulation mode (i.e. to do a software-controlled 'cut' the electrical connection between the SIM card and the phone) * to add a header next to the USB socket so we can attach a battery pack for autonomous operation * to add a SPI NOR flash (for storage of data in autonomous operation) * to not care about 1.8V-only SIM cards and make it a 3.3V-only device We expect to do a bit more schematics review and component placement + routing as well as a prototype PCB in the next couple of weeks. Kevin is in charge of the hardware prototype, while I will look at the firmware side as well as provide funding for the PCB manufacturing and prototype components. Regards, Harald -- - Harald Welte <laforge(a)gnumonks.org> http://laforge.gnumonks.org/ ============================================================================ "Privacy in residential applications is a desirable marketing option." (ETSI EN 300 175-7 Ch. A6)

1 0

R: Re: lost dump ?!?!?
by screaming-pain＠libero.it 06 May '11

06 May '11

Thanks Alex, I actually played a bit with the code and found out that exactly half of the times the write() call in the function gsmtap_fd_cb() (gsmtap_util.c) fails because of EAGAIN or EWOULDBLOCK. I implemented a retransmission in this case and this solve the problem: all the gsmtap are successfully sent and received. Though, I suspect is impacting negatively on the rest of the mobile program. Anyway I do not have a real evidence of this only the fact that after the modification I have never had a successful location update. Do you think this is plausible? am I degrading the overall performances when trying to get all the gsmtap? Can i solve this problem? Thanks Alex and list, Loretta >----Messaggio originale---- >Da: vamposdecampos(a)gmail.com >Data: 6-mag-2011 8.35 >A: "screaming-pain(a)libero.it"<screaming-pain(a)libero.it> >Cc: <baseband-devel(a)lists.osmocom.org> >Ogg: Re: lost dump ?!?!? > >On Thu, May 5, 2011 at 5:28 PM, screaming-pain(a)libero.it ><screaming-pain(a)libero.it> wrote: >> Hi list, >> >> I know I am very slow in understanding osmocom-bb, anyway this is just a quick >> question. >> Is it possible that some of the gsmtap messages are getting lost? >> For example I can see a LOCATION UPDATE and a LOCATION ACCEPT from the >> 'mobile' application log but there aren't the corresponding messages in the >> wireshark capture, >> though this does not always happen, I mean I had captures of location updates >> other times, this is why I am wondering if they are getting lost and what it >> does depend on. >> for what I understood the gsmtap functions utilities are in gsmtap_util.c and >> the one to send the messages on the socket is called by l1ctl.c am I right? >> Can you help me understanding why I cannot see all the messages? >> >> thank you in advance >> Loretta > >Hi, > >I've had this happen to me when I wasn't receiving the gsmtap packets. > >Specifically, I had the gsmtap packets sent over the network (i.e., >non-localhost). There was no UDP listener on the receiving end, such >that ICMP port-unreachable replies were being sent back. It would >appear that this causes the sender's kernel to snub some of the >outgoing packets. I don't know if the same happens on localhost. > >If this is your case, you can try "iptables -I INPUT -p udp -d 4729 -j >DROP", or something like "nc -l -u 4729 > /dev/null". > >Cheers, >Alex > >

3 2

lost dump ?!?!?
by screaming-pain＠libero.it 06 May '11

06 May '11

Hi list, I know I am very slow in understanding osmocom-bb, anyway this is just a quick question. Is it possible that some of the gsmtap messages are getting lost? For example I can see a LOCATION UPDATE and a LOCATION ACCEPT from the 'mobile' application log but there aren't the corresponding messages in the wireshark capture, though this does not always happen, I mean I had captures of location updates other times, this is why I am wondering if they are getting lost and what it does depend on. for what I understood the gsmtap functions utilities are in gsmtap_util.c and the one to send the messages on the socket is called by l1ctl.c am I right? Can you help me understanding why I cannot see all the messages? thank you in advance Loretta

3 2

Questions regarding testing branch
by ArMaND VanHell 05 May '11

05 May '11

Some questions about Sylvain testing branch: why is not merged SIMreader into master branch? is planned for mobile aplication to support SMS (sending/receiving)? Thank you, ArMaND VanHell

1 0

[PATCH 0/5] merge mtk-loader to master
by Wolfram Sang 05 May '11

05 May '11

The first four patches remove some hardcoded calypso-dependencies (as discussed on the list). The final one then adds the mtk-stuff with comments from Sylvain addressed (hopefully). The new mtk-loader was succesfully tested on my Sciphone G2 by loading and executing a bootloader. The compal loaders still compile fine (and no code was changed there). This should get rid of the branches remotes/origin/steve-m/loader_sciphone remotes/origin/steve-m/mtk_hack and should ease merging new platforms in general a bit more. Regards, Wolfram Wolfram Sang (5): comm: msgb: don't set backlight on error lib: move delay.c from calypso to lib cfi_flash: delete unused defines uart.h: move header out of calypso-directory target/boards: add infrastructure for loaders for Mediatek platforms src/Makefile | 8 +- src/target/firmware/Makefile.mtk | 33 ++ src/target/firmware/apps/loader/main.c | 2 +- src/target/firmware/apps/loader_mtk/main.c | 366 ++++++++++++++++++++ src/target/firmware/board/compal_e86/init.c | 2 +- src/target/firmware/board/compal_e88/init.c | 2 +- src/target/firmware/board/compal_e99/init.c | 2 +- src/target/firmware/board/gta0x/init.c | 2 +- src/target/firmware/board/mediatek/macros.S | 76 +++++ src/target/firmware/board/mediatek/ram.lds | 112 +++++++ src/target/firmware/board/mediatek/start.ram.S | 26 ++ src/target/firmware/board/mediatek/uart.c | 426 ++++++++++++++++++++++++ src/target/firmware/board/mt62xx/init.c | 139 ++++++++ src/target/firmware/board/pirelli_dpl10/init.c | 2 +- src/target/firmware/calypso/Makefile | 2 +- src/target/firmware/calypso/delay.c | 16 - src/target/firmware/calypso/uart.c | 2 +- src/target/firmware/comm/msgb.c | 1 - src/target/firmware/comm/sercomm.c | 2 +- src/target/firmware/comm/sercomm_cons.c | 2 +- src/target/firmware/flash/cfi_flash.c | 5 - src/target/firmware/include/calypso/uart.h | 32 -- src/target/firmware/include/mtk/emi.h | 42 +++ src/target/firmware/include/mtk/mt6235.h | 74 ++++ src/target/firmware/include/mtk/system.h | 195 +++++++++++ src/target/firmware/include/uart.h | 32 ++ src/target/firmware/lib/Makefile | 2 +- src/target/firmware/lib/console.c | 2 +- src/target/firmware/lib/delay.c | 16 + 29 files changed, 1556 insertions(+), 67 deletions(-) create mode 100644 src/target/firmware/Makefile.mtk create mode 100644 src/target/firmware/apps/loader_mtk/main.c create mode 100644 src/target/firmware/board/mediatek/macros.S create mode 100644 src/target/firmware/board/mediatek/ram.lds create mode 100644 src/target/firmware/board/mediatek/start.ram.S create mode 100644 src/target/firmware/board/mediatek/uart.c create mode 100644 src/target/firmware/board/mt62xx/init.c delete mode 100644 src/target/firmware/calypso/delay.c delete mode 100644 src/target/firmware/include/calypso/uart.h create mode 100644 src/target/firmware/include/mtk/emi.h create mode 100644 src/target/firmware/include/mtk/mt6235.h create mode 100644 src/target/firmware/include/mtk/system.h create mode 100644 src/target/firmware/include/uart.h create mode 100644 src/target/firmware/lib/delay.c -- 1.7.2.5

2 6

Anyone based in India on this list? Students?
by Harald Welte 05 May '11

05 May '11

I'm looking for somebody in India who has a deep GSM interest and who is preferrably a student. If you're quick, I have a free giveaway for you. Please simply e-mail me, details will follow. Regards, Harald -- - Harald Welte <laforge(a)gnumonks.org> http://laforge.gnumonks.org/ ============================================================================ "Privacy in residential applications is a desirable marketing option." (ETSI EN 300 175-7 Ch. A6)

2 2

Re: mobile - making a call
by eisencah eisenach 04 May '11

04 May '11

Done some more digging in the logs and it seems the sim state machine has locked earlier (when attaching to the network) while waiting for some response on UPDATE BINARY. Does this sounds familiar to anyone? :) GOOD CASE: [0;m[1;32m<0004> gsm48_mm.c:1557 AUTHENTICATION RESPONSE [0;m[1;34m<0001> gsm48_rr.c:4904 (ms 1) Message 'RR_DATA_REQ' received in state dedicated [0;m[1;34m<0001> gsm48_rr.c:235 Using and incrementing V(SD) = 0 (pdisc 5) [0;m[0;35m<000e> sim.c:209 got new job: SIM_JOB_UPDATE_BINARY (handle=00000005) [0;m[0;35m<000e> sim.c:241 SELECT (file=0x6f20) [0;m[0;35m<000e> sim.c:187 sending APDU (class 0xa0, ins 0xa4) [0;m[0;35m<000e> sim.c:876 received APDU (len=0 sw1=0x9f sw2=0x0f) [0;m[0;35m<000e> sim.c:949 command successfull [0;m[0;35m<000e> sim.c:571 GET RESPONSE (len=15) [0;m[0;35m<000e> sim.c:187 sending APDU (class 0xa0, ins 0xc0) [0;m[0;35m<000e> sim.c:876 received APDU (len=15 sw1=0x90 sw2=0x00) [0;m[0;35m<000e> sim.c:949 command successfull [0;m[0;35m<000e> sim.c:294 UPDATE BINARY (offset=0 len=9) [0;m[0;35m<000e> sim.c:187 sending APDU (class 0xa0, ins 0xd6) [0;m[0;35m<000e> sim.c:876 received APDU (len=0 sw1=0x90 sw2=0x00) [0;m[0;35m<000e> sim.c:949 command successfull [0;m[0;35m<000e> sim.c:151 sending result to callback function (type=0) [0;m[1;34m<0001> gsm48_rr.c:4488 Indicated ta 0 (actual ta 0) BAD CASE: [0;m[1;32m<0004> gsm48_mm.c:1557 AUTHENTICATION RESPONSE [0;m[1;34m<0001> gsm48_rr.c:4904 (ms 1) Message 'RR_DATA_REQ' received in state dedicated [0;m[1;34m<0001> gsm48_rr.c:235 Using and incrementing V(SD) = 0 (pdisc 5) [0;m[0;35m<000e> sim.c:209 got new job: SIM_JOB_UPDATE_BINARY (handle=00000005) [0;m[0;35m<000e> sim.c:241 SELECT (file=0x6f20) [0;m[0;35m<000e> sim.c:187 sending APDU (class 0xa0, ins 0xa4) [0;m[0;35m<000e> sim.c:876 received APDU (len=0 sw1=0x9f sw2=0x0f) [0;m[0;35m<000e> sim.c:949 command successfull [0;m[0;35m<000e> sim.c:571 GET RESPONSE (len=15) [0;m[0;35m<000e> sim.c:187 sending APDU (class 0xa0, ins 0xc0) [0;m[0;35m<000e> sim.c:876 received APDU (len=15 sw1=0x90 sw2=0x00) [0;m[0;35m<000e> sim.c:949 command successfull [0;m[0;35m<000e> sim.c:294 UPDATE BINARY (offset=0 len=9) [0;m[0;35m<000e> sim.c:187 sending APDU (class 0xa0, ins 0xd6) [0;m[1;32m<0004> gsm48_mm.c:3695 (ms 1) Received 'RR_DATA_IND' from RR in state location updating initiated --- On Wed, 5/4/11, Harald Welte <laforge(a)gnumonks.org> wrote: From: Harald Welte <laforge(a)gnumonks.org> Subject: Re: mobile - making a call To: "eisencah eisenach" <wbg_1000(a)yahoo.com> Date: Wednesday, May 4, 2011, 11:59 AM On Tue, May 03, 2011 at 03:02:58AM -0700, eisencah eisenach wrote: > So is as if the message for the sim job doesn't get pulled from the > queue, "got new job: SIM_JOB_RUN_GSM_ALGO " never appears. Must say > the computer I use osmocom on is not exactly a rocket :) (is a 500Mhz > celeron with ubuntu 6.10) , and It gets slowed down when running the > hole thing. Can that be the cause? Mihai. The L1CTL protocol goes through a unix domain socket, and you can trace it in either osmocon or in the mobile program itself. It should be relatively easy to detect if the RUN_GSM_ALGO is transmitted by mobile, or if it is lost, where it is lost. -- - Harald Welte <laforge(a)gnumonks.org> http://laforge.gnumonks.org/ ============================================================================ "Privacy in residential applications is a desirable marketing option." (ETSI EN 300 175-7 Ch. A6)

1 0

mobile - making a call
by eisencah eisenach 03 May '11

03 May '11

Hi. I'm using mobile application (sylvain/testing branch) to initiate calls. My experience is that the call si succesfull in about 20% of cases. Most of the time the connection seems to be lost after receiving the AUTHENTICATION REQUEST message. Has anyone else had this experience, it has to do with the power measurements above? Thanks, Mihai. [0;m[1;33m<0005> gsm48_cc.c:496 Sending MMCC_EST_REQ [0;m[1;32m<0004> gsm48_mm.c:3568 (ms 1) Received 'MMCC_EST_REQ' event in state MM idle [0;m[1;32m<0004> gsm48_mm.c:3571 -> substate normal service [0;m[1;32m<0004> gsm48_mm.c:3573 -> callref 1, transaction_id 255 [0;m[1;32m<0004> gsm48_mm.c:2873 Init MM Connection. [0;m[1;32m<0004> gsm48_mm.c:1332 New MM Connection (proto 0x03 trans_id 255 ref 1) [0;m[1;32m<0004> gsm48_mm.c:1291 (ref 1) new state IDLE -> CONN_PEND [0;m[1;32m<0004> gsm48_mm.c:2650 CM SERVICE REQUEST (cause 9) [0;m[1;32m<0004> gsm48_mm.c:2681 -> Using TMSI [0;m[1;34m<0001> gsm48_rr.c:4904 (ms 1) Message 'RR_EST_REQ' received in state idle [0;m[1;37m<000d> gsm48_rr.c:1181 Establish radio link due to mobility management request [0;m[34m<0003> gsm322.c:3319 (ms 1) Event 'EVENT_LEAVE_IDLE' for Cell selection in state 'C3 camped normally' [0;m[34m<0003> gsm322.c:2959 Going to camping frequency 47. [0;m[34m<0003> gsm322.c:252 Sync to ARFCN=47 rxlev=-61 (Sysinfo, ccch mode NON-COMB) [0;m[1;34m<0001> gsm48_rr.c:363 new state idle -> connection pending [0;m[1;34m<0001> gsm48_rr.c:1313 CHANNEL REQUEST: e0 (Orig TCH/F) [0;m[1;32m<0004> gsm48_mm.c:887 new state MM IDLE, normal service -> wait for RR connection (MM connection) [0;m[34m<0003> gsm322.c:2434 Channel synched. (ARFCN=47, snr=16, BSIC=33) [0;m[1;34m<0001> gsm322.c:2461 using DSC of 90 [0;m[34m<0003> gsm48_rr.c:4541 Channel provides data. [0;m[1;34m<0001> gsm48_rr.c:1452 RANDOM ACCESS (requests left 5) [0;m[1;34m<0001> gsm48_rr.c:1509 RANDOM ACCESS (Tx-integer 32 combined no S(lots) 0 ra 0xed) [0;m[1;34m<0001> gsm48_rr.c:1547 Use MS-TXPWR-MAX-CCH power value 5 (33 dBm) [0;m[1;34m<0001> gsm48_rr.c:1452 RANDOM ACCESS (requests left 4) [0;m[1;34m<0001> gsm48_rr.c:1509 RANDOM ACCESS (Tx-integer 32 combined no S(lots) 217 ra 0xed) [0;m[1;34m<0001> gsm48_rr.c:1547 Use MS-TXPWR-MAX-CCH power value 5 (33 dBm) [0;m[1;34m<0001> gsm48_rr.c:2258 IMMEDIATE ASSIGNMENT: [0;m[1;34m<0001> gsm48_rr.c:2270 (ta 1/553m ra 0xed chan_nr 0x41 MAIO 2 HSN 36 TS 1 SS 0 TSC 1) [0;m[1;34m<0001> gsm48_rr.c:2204 request ed matches (fn=4,24,16) [0;m[1;34m<0001> gsm48_rr.c:2304 resetting scheduler [0;m[1;34m<0001> gsm48_rr.c:2858 decoding mobile allocation [0;m[1;34m<0001> sysinfo.c:396 Serving cell ARFCN #0: 31 [0;m[1;34m<0001> sysinfo.c:396 Serving cell ARFCN #1: 44 [0;m[1;34m<0001> sysinfo.c:396 Serving cell ARFCN #2: 47 [0;m[1;34m<0001> sysinfo.c:396 Serving cell ARFCN #3: 57 [0;m[1;34m<0001> sysinfo.c:410 Hopping ARFCN: 0 (bit 31) [0;m[1;34m<0001> sysinfo.c:410 Hopping ARFCN: 1 (bit 44) [0;m[1;34m<0001> sysinfo.c:410 Hopping ARFCN: 2 (bit 47) [0;m[1;34m<0001> sysinfo.c:410 Hopping ARFCN: 3 (bit 57) [0;m[1;34m<0001> gsm48_rr.c:3019 sending establish message [0;m[1;34m<0001> gsm48_rr.c:235 Using and incrementing V(SD) = 0 (pdisc 5) [0;m[1;34m<0001> gsm48_rr.c:2763 setting indicated TA 1 (actual TA 1) [0;m[1;34m<0001> gsm48_rr.c:2774 using last SACCH timeout 16 [0;m[1;34m<0001> gsm48_rr.c:774 stopping pending timer T_meas [0;m[1;34m<0001> gsm48_rr.c:2666 MEAS REP: pwr=5 TA=1 meas-invalid=1 rxlev-full=-110 rxlev-sub=-110 rxqual-full=0 rxqual-sub=0 dtx 0 ba 0 no-ncell-n 0 [0;m[1;34m<0001> gsm48_rr.c:2796 establishing channel in dedicated mode [0;m[1;34m<0001> gsm48_rr.c:2800 Channel type 64, subch 0, ts 1, mode 0, cipher 1 [0;m[1;34m<0001> gsm48_rr.c:363 new state connection pending -> dedicated [0;m[1;32m<0004> gsm48_mm.c:3695 (ms 1) Received 'RR_EST_CNF' from RR in state wait for RR connection (MM connection) [0;m[1;32m<0004> gsm48_mm.c:431 starting T3230 (MM connection timeout) with 15.0 seconds [0;m[1;32m<0004> gsm48_mm.c:897 new state wait for RR connection (MM connection) -> wait for outgoing MM connection [0;m[1;34m<0001> gsm48_rr.c:4488 Indicated ta 1 (actual ta 1) [0;m[1;34m<0001> gsm48_rr.c:4490 Indicated tx_power 5 [0;m[1;34m<0001> gsm48_rr.c:1828 New SYSTEM INFORMATION 5 [0;m[1;34m<0001> gsm48_rr.c:1583 Complete set of SI5* for BA(0) [0;m[1;34m<0001> gsm48_rr.c:1593 SI5* report arfcn 1 [0;m[1;34m<0001> gsm48_rr.c:1593 SI5* report arfcn 3 [0;m[1;34m<0001> gsm48_rr.c:1593 SI5* report arfcn 6 [0;m[1;34m<0001> gsm48_rr.c:1593 SI5* report arfcn 13 [0;m[1;34m<0001> gsm48_rr.c:1593 SI5* report arfcn 17 [0;m[1;34m<0001> gsm48_rr.c:1593 SI5* report arfcn 19 [0;m[1;34m<0001> gsm48_rr.c:1593 SI5* report arfcn 20 [0;m[1;34m<0001> gsm48_rr.c:1593 SI5* report arfcn 21 [0;m[1;34m<0001> gsm48_rr.c:1593 SI5* report arfcn 24 [0;m[1;34m<0001> gsm48_rr.c:1593 SI5* report arfcn 26 [0;m[1;34m<0001> gsm48_rr.c:1593 SI5* report arfcn 30 [0;m[1;34m<0001> gsm48_rr.c:1593 SI5* report arfcn 33 [0;m[1;34m<0001> gsm48_rr.c:1593 SI5* report arfcn 36 [0;m[1;34m<0001> gsm48_rr.c:1593 SI5* report arfcn 37 [0;m[1;34m<0001> gsm48_rr.c:1593 SI5* report arfcn 40 [0;m[1;34m<0001> gsm48_rr.c:1593 SI5* report arfcn 41 [0;m[1;34m<0001> gsm48_rr.c:1593 SI5* report arfcn 42 [0;m[1;34m<0001> gsm48_rr.c:1593 SI5* report arfcn 47 [0;m[1;34m<0001> gsm48_rr.c:1593 SI5* report arfcn 49 [0;m[1;34m<0001> gsm48_rr.c:1593 SI5* report arfcn 58 [0;m[1;34m<0001> gsm48_rr.c:1593 SI5* report arfcn 59 [0;m[1;32m<0004> gsm48_mm.c:4083 (ms 1) Received 'MM_EVENT_SYSINFO' event in state wait for outgoing MM connection [0;m[34m<0003> gsm322.c:2104 Sysinfo of selected cell is updated. [0;m[1;32m<0004> gsm48_mm.c:3695 (ms 1) Received 'RR_DATA_IND' from RR in state wait for outgoing MM connection [0;m[1;32m<0004> gsm48_mm.c:3863 (ms 1) Received 'MT_MM_AUTH_REQ' in MM state wait for outgoing MM connection [0;m[1;32m<0004> gsm48_mm.c:468 stopping pending (periodic loc. upd. delay) timer T3212 [0;m[1;32m<0004> gsm48_mm.c:1533 AUTHENTICATION REQUEST (seq 1) [0;m[1;32m<0004> subscriber.c:898 Generating KEY at SIM [0;m[1;34m<0001> gsm48_rr.c:4488 Indicated ta 0 (actual ta 0) [0;m[1;34m<0001> gsm48_rr.c:4490 Indicated tx_power 5 [0;m[1;34m<0001> gsm48_rr.c:4493 setting new ta and tx_power [0;m[1;34m<0001> gsm48_rr.c:609 MON: f=47 lev=-60 snr=11 ber= 27 LAI=226 01 2b96 ID=e328 TA=0 pwr=5 TS=1/0 [0;m[1;34m<0001> gsm48_rr.c:2666 MEAS REP: pwr=5 TA=0 meas-invalid=0 rxlev-full=-60 rxlev-sub=-60 rxqual-full=0 rxqual-sub=0 dtx 0 ba 0 no-ncell-n 0 [0;m[1;34m<0001> gsm48_rr.c:4488 Indicated ta 0 (actual ta 0) [0;m[1;34m<0001> gsm48_rr.c:4490 Indicated tx_power 5 [0;m[1;34m<0001> gsm48_rr.c:4488 Indicated ta 0 (actual ta 0) [0;m[1;34m<0001> gsm48_rr.c:4490 Indicated tx_power 6 [0;m[1;34m<0001> gsm48_rr.c:4493 setting new ta and tx_power [0;m[1;34m<0001> gsm48_rr.c:609 MON: f=47 lev=-58 snr= 0 ber= 17 LAI=226 01 2b96 ID=e328 TA=0 pwr=6 TS=1/0 [0;m[1;34m<0001> gsm48_rr.c:2666 MEAS REP: pwr=6 TA=0 meas-invalid=0 rxlev-full=-58 rxlev-sub=-58 rxqual-full=0 rxqual-sub=0 dtx 0 ba 0 no-ncell-n 0 [0;m[1;34m<0001> gsm48_rr.c:4488 Indicated ta 0 (actual ta 0) [0;m[1;34m<0001> gsm48_rr.c:4490 Indicated tx_power 7 [0;m[1;34m<0001> gsm48_rr.c:4493 setting new ta and tx_power [0;m[1;34m<0001> gsm48_rr.c:4488 Indicated ta 0 (actual ta 0) [0;m[1;34m<0001> gsm48_rr.c:4490 Indicated tx_power 7 [0;m[1;34m<0001> gsm48_rr.c:609 MON: f=47 lev=-59 snr= 0 ber= 0 LAI=226 01 2b96 ID=e328 TA=0 pwr=7 TS=1/0 [0;m[1;34m<0001> gsm48_rr.c:2666 MEAS REP: pwr=7 TA=0 meas-invalid=0 rxlev-full=-59 rxlev-sub=-59 rxqual-full=0 rxqual-sub=0 dtx 0 ba 0 no-ncell-n 0 [0;m[1;34m<0001> gsm48_rr.c:4488 Indicated ta 0 (actual ta 0) [0;m[1;34m<0001> gsm48_rr.c:4490 Indicated tx_power 8 [0;m[1;34m<0001> gsm48_rr.c:4493 setting new ta and tx_power [0;m[1;34m<0001> gsm48_rr.c:4488 Indicated ta 0 (actual ta 0) [0;m[1;34m<0001> gsm48_rr.c:4490 Indicated tx_power 8 [0;m[1;34m<0001> gsm48_rr.c:609 MON: f=47 lev=-57 snr= 0 ber= 18 LAI=226 01 2b96 ID=e328 TA=0 pwr=8 TS=1/0 [0;m[1;34m<0001> gsm48_rr.c:2666 MEAS REP: pwr=8 TA=0 meas-invalid=0 rxlev-full=-57 rxlev-sub=-57 rxqual-full=0 rxqual-sub=0 dtx 0 ba 0 no-ncell-n 0 [0;m[1;34m<0001> gsm48_rr.c:4488 Indicated ta 0 (actual ta 0) [0;m[1;34m<0001> gsm48_rr.c:4490 Indicated tx_power 8 [0;m[1;34m<0001> gsm48_rr.c:4488 Indicated ta 0 (actual ta 0) [0;m[1;34m<0001> gsm48_rr.c:4490 Indicated tx_power 9 [0;m[1;34m<0001> gsm48_rr.c:4493 setting new ta and tx_power [0;m[1;34m<0001> gsm48_rr.c:609 MON: f=47 lev=-57 snr= 0 ber= 49 LAI=226 01 2b96 ID=e328 TA=0 pwr=9 TS=1/0 [0;m[1;34m<0001> gsm48_rr.c:2666 MEAS REP: pwr=9 TA=0 meas-invalid=0 rxlev-full=-57 rxlev-sub=-57 rxqual-full=0 rxqual-sub=0 dtx 0 ba 0 no-ncell-n 0 [0;m[1;34m<0001> gsm48_rr.c:4488 Indicated ta 0 (actual ta 0) [0;m[1;34m<0001> gsm48_rr.c:4490 Indicated tx_power 9 [0;m[1;32m<0004> gsm48_mm.c:3695 (ms 1) Received 'RR_DATA_IND' from RR in state wait for outgoing MM connection [0;m[1;32m<0004> gsm48_mm.c:3863 (ms 1) Received 'MT_MM_AUTH_REQ' in MM state wait for outgoing MM connection [0;m[1;32m<0004> gsm48_mm.c:1533 AUTHENTICATION REQUEST (seq 1) [0;m[1;32m<0004> subscriber.c:898 Generating KEY at SIM [0;m[1;34m<0001> gsm48_rr.c:4488 Indicated ta 0 (actual ta 0) [0;m[1;34m<0001> gsm48_rr.c:4490 Indicated tx_power 9 [0;m[1;34m<0001> gsm48_rr.c:609 MON: f=47 lev=-57 snr= 0 ber= 32 LAI=226 01 2b96 ID=e328 TA=0 pwr=9 TS=1/0 [0;m[1;34m<0001> gsm48_rr.c:2666 MEAS REP: pwr=9 TA=0 meas-invalid=0 rxlev-full=-57 rxlev-sub=-57 rxqual-full=0 rxqual-sub=0 dtx 0 ba 0 no-ncell-n 0 [0;m[1;34m<0001> gsm48_rr.c:4488 Indicated ta 0 (actual ta 0) [0;m[1;34m<0001> gsm48_rr.c:4490 Indicated tx_power 10 [0;m[1;34m<0001> gsm48_rr.c:4493 setting new ta and tx_power [0;m[1;34m<0001> gsm48_rr.c:4488 Indicated ta 0 (actual ta 0) [0;m[1;34m<0001> gsm48_rr.c:4490 Indicated tx_power 10 [0;m[1;34m<0001> gsm48_rr.c:609 MON: f=47 lev=-57 snr= 0 ber= 41 LAI=226 01 2b96 ID=e328 TA=0 pwr=10 TS=1/0 [0;m[1;34m<0001> gsm48_rr.c:2666 MEAS REP: pwr=10 TA=0 meas-invalid=0 rxlev-full=-57 rxlev-sub=-57 rxqual-full=0 rxqual-sub=0 dtx 0 ba 0 no-ncell-n 0 [0;m[1;34m<0001> gsm48_rr.c:4488 Indicated ta 0 (actual ta 0) [0;m[1;34m<0001> gsm48_rr.c:4490 Indicated tx_power 10 [0;m[1;34m<0001> gsm48_rr.c:4488 Indicated ta 0 (actual ta 0) [0;m[1;34m<0001> gsm48_rr.c:4490 Indicated tx_power 10 [0;m[1;34m<0001> gsm48_rr.c:4488 Indicated ta 0 (actual ta 0) [0;m[1;34m<0001> gsm48_rr.c:4490 Indicated tx_power 10 [0;m[1;34m<0001> gsm48_rr.c:609 MON: f=47 lev=-58 snr= 0 ber= 74 LAI=226 01 2b96 ID=e328 TA=0 pwr=10 TS=1/0 [0;m[1;34m<0001> gsm48_rr.c:2666 MEAS REP: pwr=10 TA=0 meas-invalid=0 rxlev-full=-58 rxlev-sub=-58 rxqual-full=0 rxqual-sub=0 dtx 0 ba 0 no-ncell-n 0 [0;m[1;34m<0001> gsm48_rr.c:4488 Indicated ta 0 (actual ta 0) [0;m[1;34m<0001> gsm48_rr.c:4490 Indicated tx_power 11 [0;m[1;34m<0001> gsm48_rr.c:4493 setting new ta and tx_power [0;m[1;34m<0001> gsm48_rr.c:4488 Indicated ta 0 (actual ta 0) [0;m[1;34m<0001> gsm48_rr.c:4490 Indicated tx_power 11 [0;m[1;34m<0001> gsm48_rr.c:609 MON: f=47 lev=-59 snr= 0 ber= 9 LAI=226 01 2b96 ID=e328 TA=0 pwr=11 TS=1/0 [0;m[1;34m<0001> gsm48_rr.c:2666 MEAS REP: pwr=11 TA=0 meas-invalid=0 rxlev-full=-59 rxlev-sub=-59 rxqual-full=0 rxqual-sub=0 dtx 0 ba 0 no-ncell-n 0 [0;m[1;34m<0001> gsm48_rr.c:4488 Indicated ta 0 (actual ta 0) [0;m[1;34m<0001> gsm48_rr.c:4490 Indicated tx_power 11 [0;m[1;34m<0001> gsm48_rr.c:4488 Indicated ta 0 (actual ta 0) [0;m[1;34m<0001> gsm48_rr.c:4490 Indicated tx_power 11 [0;m[1;34m<0001> gsm48_rr.c:609 MON: f=47 lev=-58 snr= 0 ber= 35 LAI=226 01 2b96 ID=e328 TA=0 pwr=11 TS=1/0 [0;m[1;34m<0001> gsm48_rr.c:2666 MEAS REP: pwr=11 TA=0 meas-invalid=0 rxlev-full=-58 rxlev-sub=-58 rxqual-full=0 rxqual-sub=0 dtx 0 ba 0 no-ncell-n 0 [0;m[1;34m<0001> gsm48_rr.c:3174 channel release request with cause 0x00) [0;m[1;34m<0001> gsm48_rr.c:363 new state dedicated -> release pending [0;m[1;34m<0001> gsm48_rr.c:738 starting T3110 with 1.500 seconds [0;m[1;37m<000d> gsm48_rr.c:4666 Requested channel aborted [0;m[1;34m<0001> gsm48_rr.c:798 stopping pending timer T3110 [0;m[1;34m<0001> gsm48_rr.c:363 new state release pending -> idle [0;m[34m<0003> gsm322.c:3319 (ms 1) Event 'EVENT_RET_IDLE' for Cell selection in state 'C3 camped normally' [0;m[34m<0003> gsm322.c:541 new state 'C3 camped normally' -> 'C5 choose cell' [0;m[34m<0003> gsm322.c:2820 No BA range(s), try sysinfo. [0;m[34m<0003> gsm322.c:2859 free sysinfo arfcn=47 [0;m[34m<0003> gsm322.c:2859 free sysinfo arfcn=66 [0;m[1;32m<0004> gsm48_mm.c:3695 (ms 1) Received 'RR_REL_IND' from RR in state wait for outgoing MM connection [0;m[1;32m<0004> gsm48_mm.c:495 stopping pending (MM connection timeout) timer T3230 [0;m[1;32m<0004> gsm48_mm.c:1367 Release any MM Connection [0;m[1;32m<0004> gsm48_mm.c:1348 Freeing MM Connection [0;m[1;32m<0004> gsm48_mm.c:1291 (ref 1) new state CONN_PEND -> IDLE [0;m[1;33m<0005> gsm48_cc.c:2122 (ms 1) Received 'MMCC_ERR_IND' in CC state MM_CONNECTION_PEND [0;m[1;33m<0005> gsm48_cc.c:189 (ms 1 ti ff) Sending 'MNCC_REL_IND' to MNCC. [0;m[1;37m<0007> mnccms.c:336 Call has been released (cause 16)

2 3

AW: mobile - making a call
by Andreas.Eversberg 03 May '11

03 May '11

hi, can you try a different sim / different network? andreas

1 0

RMS / FSF / OsmocomBB / Free Software GSM phone
by Harald Welte 02 May '11

02 May '11

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi! Some months ago, Richard Stallman (rms) has contacted me regarding my work with OsmocomBB. As it is not a big surprise to us, he is really interested in the project. After all, it would be the first mobile phone that he himself would be able to use, given that there is no proprietary software on the baseband anymore. And of course it would enable loads of other freedom-loving users to finally have an alternative to the proprietary telephony world. Here in Morocco, I've had some further discussion on the topic face to face with him, and he is sort of unhappy with the fact that nobody is working on making an actual self-contained phone (no matter how simple or limited in features) that can be used by a regular user as 'just a phone'. I explained to him that our motivation is mostly a different one (research, security, GSM-attached PBX, etc.) and thus there is no intrinsic motivation to work towards a more user-friendly version. Furthermore, we are system level hackers with an interest in communications, not particularly people who like to work on a UI or usability. So we agreed to make a public call for volunteers to wokr on that aspect of the phone. I understand this will likely cause some effort on our side (fencing off poeple who don't have the neccessary skills, integrating such code, finally deciding on a RTOS to use, etc.). However, I more or less see it as my (and our?) duty to realize the potential of our protocol stack and baseband firmware. Next to all our own self-motivated personal interestes, there is a bigger cause that we can help along: Free Software based telephony. So the least we can do is to try to find somebody who can work on that part, and help developer[s] to interact with our code. It's the question of whether we are just hacking away on our personal little pet, or if we try to achieve something bigger. I've already drafted a version of the 'job description' and with some luck the FSF will soon publish it, reaching out beyond our existing small Osmocom community. e will try to draft a similar job description related to MS-side GPRS support (L1, RLC/MAC, ..). That would be yet another area where we would appreciate some contribution, and which eventually be important beyond our existing voice telephony capabilities. Regards, Harald - -- - - Harald Welte <laforge(a)gnumonks.org> http://laforge.gnumonks.org/ ============================================================================ "Privacy in residential applications is a desirable marketing option." (ETSI EN 300 175-7 Ch. A6) -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) iD8DBQFNvs0JXaXGVTD0i/8RArkDAKCONleE9HJ2i1jp7L/XnMY0YweIjACbB8Lz puH7X4lkqY8AqzU0SAlOAxM= =Cmo8 -----END PGP SIGNATURE-----

5 6

[PATCH] linuxlist.h: silence a noisy warning
by Wolfram Sang 02 May '11

02 May '11

Fixes a couple of warnings like this: In file included from ../../shared/libosmocore/include/osmocom/core/msgb.h:24:0, from include/comm/sercomm.h:6, from apps/loader/main.c:41: ../../shared/libosmocore/include/osmocom/core/linuxlist.h: In function 'prefetch': ../../shared/libosmocore/include/osmocom/core/linuxlist.h:10:41: warning: unused parameter 'x' Signed-off-by: Wolfram Sang <wolfram(a)the-dreams.de> --- .../libosmocore/include/osmocom/core/linuxlist.h | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) diff --git a/src/shared/libosmocore/include/osmocom/core/linuxlist.h b/src/shared/libosmocore/include/osmocom/core/linuxlist.h index fb99c5e..ff2c491 100644 --- a/src/shared/libosmocore/include/osmocom/core/linuxlist.h +++ b/src/shared/libosmocore/include/osmocom/core/linuxlist.h @@ -7,7 +7,7 @@ #define inline __inline__ #endif -static inline void prefetch(const void *x) {;} +static inline void prefetch(__attribute__((unused)) const void *x) {;} /** * container_of - cast a member of a structure out to the containing structure -- 1.7.2.5

2 1

[PATCH 0/2] Remove some leaked-in calypso dependencies
by Wolfram Sang 30 Apr '11

30 Apr '11

Hi, good news: mails are back bad news: phone lost a battery pin :( Here are two small patches to help the mediatek-branch compile without calypso references. These were tested before the breakage and 'make all' still builds fine for compal. Regards, Wolfram Wolfram Sang (2): comm: msgb: don't set backlight on error lib: move delay.c from calypso to lib src/target/firmware/calypso/Makefile | 2 +- src/target/firmware/calypso/delay.c | 16 ---------------- src/target/firmware/comm/msgb.c | 1 - src/target/firmware/lib/Makefile | 2 +- src/target/firmware/lib/delay.c | 16 ++++++++++++++++ 5 files changed, 18 insertions(+), 19 deletions(-) delete mode 100644 src/target/firmware/calypso/delay.c create mode 100644 src/target/firmware/lib/delay.c -- 1.7.2.5

3 9

libosmocore viterbi decoder
by mad 29 Apr '11

29 Apr '11

Hi Sylvain, hi list! I saw you commiting a generic viterbi de-/encoder in libosmocore core/conv.c. Just when I started to learn how to implement something like that some days ago... :-) Now I'd like to know if there are also some precomputed tables available for next_output and next_state implementing the convolution codes described in GSM 05.03/3.9. Regarding the soft input bits to the algo, my guess is when just having hard bits you have to simply convert 1 to 127 and 0 to -127 in sbit_t, right? And what came to my mind while reading the code is that couldn't you improve its performance on punctured codes by remembering the re-inserted bits and excepting them from next accumulated error calculation (line 291)? If I'm understanding viterbi the right way, as punctured bits doesn't contain any information and introduce some random additional error, only real input bits should be incorporated in state decisions. Regards, Mad

2 5

[PATCH] target/boards: add infrastructure for loaders for Mediatek platforms
by Wolfram Sang 29 Apr '11

29 Apr '11

We are just interested in the loaders here, no other applications needed. Split it from the compal-based phones. Add mt62xx as first user. Based on a patch by Steve, but cleaned up and seperated from compal/calypso. Signed-off-by: Steve Markgraf <steve(a)steve-m.de> Signed-off-by: Wolfram Sang <wolfram(a)the-dreams.de> --- The new loader was succesfully tested on my Sciphone G2 by loading and executing a bootloader. This should get rid of the branches remotes/origin/steve-m/loader_sciphone remotes/origin/steve-m/mtk_hack src/Makefile | 8 +- src/target/firmware/Makefile.mtk | 34 ++ src/target/firmware/apps/loader_mtk/main.c | 394 +++++++++++++++++ .../board/mediatek/exceptions_redirected.S | 20 + src/target/firmware/board/mediatek/handlers.S | 82 ++++ src/target/firmware/board/mediatek/header.S | 11 + src/target/firmware/board/mediatek/macros.S | 76 ++++ src/target/firmware/board/mediatek/ram.lds | 120 ++++++ src/target/firmware/board/mediatek/start.ram.S | 26 ++ src/target/firmware/board/mediatek/uart.c | 441 ++++++++++++++++++++ src/target/firmware/board/mt62xx/init.c | 140 +++++++ src/target/firmware/include/mtk/emi.h | 42 ++ src/target/firmware/include/mtk/mt6235.h | 74 ++++ src/target/firmware/include/mtk/system.h | 195 +++++++++ 14 files changed, 1662 insertions(+), 1 deletions(-) create mode 100644 src/target/firmware/Makefile.mtk create mode 100644 src/target/firmware/apps/loader_mtk/main.c create mode 100644 src/target/firmware/board/mediatek/exceptions_redirected.S create mode 100644 src/target/firmware/board/mediatek/handlers.S create mode 100644 src/target/firmware/board/mediatek/header.S create mode 100644 src/target/firmware/board/mediatek/macros.S create mode 100644 src/target/firmware/board/mediatek/ram.lds create mode 100644 src/target/firmware/board/mediatek/start.ram.S create mode 100644 src/target/firmware/board/mediatek/uart.c create mode 100644 src/target/firmware/board/mt62xx/init.c create mode 100644 src/target/firmware/include/mtk/emi.h create mode 100644 src/target/firmware/include/mtk/mt6235.h create mode 100644 src/target/firmware/include/mtk/system.h diff --git a/src/Makefile b/src/Makefile index 1b6f2f7..d6f556f 100644 --- a/src/Makefile +++ b/src/Makefile @@ -17,7 +17,7 @@ OSMOCORE_CONFIGURE_ENV= LIBOSMOCORE_LIBS=$(TOPDIR)/shared/libosmocore/build-host LIBOSMOVTY_CFLAGS=-I$(TOPDIR)/shared/libosmocore/include \ LIBOSMOGSM_CFLAGS=-I$(TOPDIR)/shared/libosmocore/include -all: libosmocore-target nofirmware firmware +all: libosmocore-target nofirmware firmware mtk-firmware nofirmware: libosmocore-host layer23 osmocon gsmmap libosmocore-host: shared/libosmocore/build-host/src/.libs/libosmocore.la @@ -93,6 +93,10 @@ host/layer23/layer23: host/layer23/Makefile libosmocore-host firmware: libosmocore-target make -C target/firmware CROSS_COMPILE=$(CROSS_TOOL_PREFIX) +.PHONY: mtk-firmware +mtk-firmware: libosmocore-target + make -C target/firmware -f Makefile.mtk CROSS_COMPILE=$(CROSS_TOOL_PREFIX) + clean: make -C shared/libosmocore/build-host $@ @@ -100,10 +104,12 @@ clean: make -C host/layer23 $@ make -C host/osmocon $@ make -C target/firmware $@ + make -C target/firmware -f Makefile.mtk $@ distclean: rm -rf shared/libosmocore/build-host rm -rf shared/libosmocore/build-target make -C host/layer23 $@ make -C host/osmocon $@ +# 'firmware' also handles 'mtk-firmware' make -C target/firmware $@ diff --git a/src/target/firmware/Makefile.mtk b/src/target/firmware/Makefile.mtk new file mode 100644 index 0000000..3a8d57b --- /dev/null +++ b/src/target/firmware/Makefile.mtk @@ -0,0 +1,34 @@ +# List of all supported boards (meant to be overridden on command line) +BOARDS?=mt62xx + +# List of all applications (meant to be overridden on command line) +APPLICATIONS?=loader_mtk + +mtkram_LDS=board/mediatek/ram.lds +mtkram_OBJS=board/mediatek/start.ram.o board/mediatek/exceptions_redirected.o board/mediatek/handlers.o + +mtk_COMMON_OBJS=board/mediatek/uart.o + +# Mediatek MT62xx +mt62xx_OBJS=$(mtk_COMMON_OBJS) board/mt62xx/init.o +mt62xx_ENVIRONMENTS=mtkram + +# Global include path +INCLUDES=-Iinclude/ -I../../../include -I../../shared/libosmocore/include + +FLASH_OBJS=flash/cfi_flash.o + +# Objects that go in all applications +ANY_APP_OBJS+=$(FLASH_OBJS) + +# Various objects that are currently linked into all applications +# (should not use libcalypso; needed functionality should be refactored (yeah, unlikely, I know)) +ANY_APP_LIBS+=calypso/libcalypso.a lib/libmini.a comm/libcomm.a ../../shared/libosmocore/build-target/src/.libs/libosmocore.a + +# Libraries are defined in subdirectories +-include calypso/Makefile +-include comm/Makefile +-include lib/Makefile + +# Include rules +-include Makefile.inc diff --git a/src/target/firmware/apps/loader_mtk/main.c b/src/target/firmware/apps/loader_mtk/main.c new file mode 100644 index 0000000..cabcf1d --- /dev/null +++ b/src/target/firmware/apps/loader_mtk/main.c @@ -0,0 +1,394 @@ +/* + * boot loader for MTK phones (based on the calypso-version) + * + * (C) 2010 by Ingo Albrecht <prom(a)berlin.ccc.de> + * (C) 2011 by Wolfram Sang <wolfram(a)the-dreams.de> + * + * All Rights Reserved + * + * This program is free software; you can redistribute it and/or modify + * it under the terms of the GNU General Public License as published by + * the Free Software Foundation; either version 2 of the License, or + * (at your option) any later version. + * + * This program is distributed in the hope that it will be useful, + * but WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + * GNU General Public License for more details. + * + * You should have received a copy of the GNU General Public License along + * with this program; if not, write to the Free Software Foundation, Inc., + * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. + * + */ + +#include <stdint.h> +#include <stdio.h> +#include <string.h> + +#include <debug.h> +#include <memory.h> +#include <delay.h> +#include <keypad.h> +#include <board.h> +#include <console.h> +#include <manifest.h> + +#include <osmocom/core/crc16.h> + +#include <comm/sercomm.h> + +#include <calypso/uart.h> + +#include <flash/cfi_flash.h> + +#include <mtk/emi.h> +#include <mtk/mt6235.h> +#include <mtk/system.h> + +#include "../loader/protocol.h" + +/* Main Program */ +const char *hr = + "======================================================================\n"; + +static void key_handler(enum key_codes code, enum key_states state); +static void cmd_handler(uint8_t dlci, struct msgb *msg); + +int flag = 0; + +static void flush_uart(void) +{ + unsigned i; + for (i = 0; i < 500; i++) { + uart_poll(SERCOMM_UART_NR); + delay_ms(1); + } +} + +static void device_poweroff(void) +{ + flush_uart(); + writew(BBPU_MAGIC | RTC_BBPU_WRITE_EN, + MTK_RTC_BBPU); + writew(1, MTK_RTC_WRTGR); +} + +static void device_reset(void) +{ + flush_uart(); +} + +static void device_enter_loader(unsigned char bootrom) +{ + flush_uart(); + delay_ms(2000); + void (*entry)( void ) = (void (*)(void))0; + entry(); +} + +static void device_jump(void *entry) +{ + flush_uart(); + + void (*f) (void) = (void (*)(void))entry; + f(); +} + +static void loader_send_simple(struct msgb *msg, uint8_t dlci, uint8_t command) +{ + msgb_put_u8(msg, command); + sercomm_sendmsg(dlci, msg); +} + +extern unsigned char _start; + +static void loader_send_init(uint8_t dlci) +{ + struct msgb *msg = sercomm_alloc_msgb(9); + msgb_put_u8(msg, LOADER_INIT); + msgb_put_u32(msg, 0); + msgb_put_u32(msg, &_start); + sercomm_sendmsg(dlci, msg); +} + +flash_t the_flash; + +extern void putchar_asm(uint32_t c); + +static const uint8_t phone_ack[] = { 0x1b, 0xf6, 0x02, 0x00, 0x41, 0x03, 0x42 }; + +int main(void) +{ + board_init (); + + /* Initialize HDLC subsystem */ + sercomm_init(); + + /* Say hi */ + puts("\n\nOSMOCOM Loader (revision " GIT_REVISION ")\n"); + puts(hr); + + /* Identify environment */ + printf("\nRunning on %s in environment %s\n", manifest_board, + manifest_environment); + + printf("\nHW_CODE = 0x%04x", readw(MTK_CONFG_HW_CODE)); + + /* Set up loader communications */ + sercomm_register_rx_cb(SC_DLCI_LOADER, &cmd_handler); + + /* Wait for events */ + + while (1) { + uart_poll(SERCOMM_UART_NR); + } + +} + +static void cmd_handler(uint8_t dlci, struct msgb *msg) +{ + if (msg->data_len < 1) { + return; + } + + uint8_t command = msgb_get_u8(msg); + + int res; + + flash_lock_t lock; + + void *data; + + uint8_t chip; + uint8_t nbytes; + uint16_t crc, mycrc; + uint32_t address; + + struct msgb *reply = sercomm_alloc_msgb(256); // XXX + + if (!reply) { + printf("Failed to allocate reply buffer!\n"); + goto out; + } + + switch (command) { + + case LOADER_PING: + loader_send_simple(reply, dlci, LOADER_PING); + break; + + case LOADER_RESET: + loader_send_simple(reply, dlci, LOADER_RESET); + device_reset(); + break; + + case LOADER_POWEROFF: + loader_send_simple(reply, dlci, LOADER_POWEROFF); + device_poweroff(); + break; + + case LOADER_ENTER_ROM_LOADER: + loader_send_simple(reply, dlci, LOADER_ENTER_ROM_LOADER); + device_enter_loader(1); + break; + + case LOADER_ENTER_FLASH_LOADER: + loader_send_simple(reply, dlci, LOADER_ENTER_FLASH_LOADER); + device_enter_loader(0); + break; + + case LOADER_MEM_READ: + + nbytes = msgb_get_u8(msg); + address = msgb_get_u32(msg); + + crc = crc16(0, (void *)address, nbytes); + + msgb_put_u8(reply, LOADER_MEM_READ); + msgb_put_u8(reply, nbytes); + msgb_put_u16(reply, crc); + msgb_put_u32(reply, address); + + memcpy(msgb_put(reply, nbytes), (void *)address, nbytes); + + sercomm_sendmsg(dlci, reply); + + break; + + case LOADER_MEM_WRITE: + + nbytes = msgb_get_u8(msg); + crc = msgb_get_u16(msg); + address = msgb_get_u32(msg); + + data = msgb_get(msg, nbytes); + + mycrc = crc16(0, data, nbytes); + + if (mycrc == crc) { + memcpy((void *)address, data, nbytes); + } + + msgb_put_u8(reply, LOADER_MEM_WRITE); + msgb_put_u8(reply, nbytes); + msgb_put_u16(reply, mycrc); + msgb_put_u32(reply, address); + + sercomm_sendmsg(dlci, reply); + + break; + + case LOADER_JUMP: + + address = msgb_get_u32(msg); + + msgb_put_u8(reply, LOADER_JUMP); + msgb_put_u32(reply, address); + + sercomm_sendmsg(dlci, reply); + + device_jump((void *)address); + + break; + + case LOADER_FLASH_INFO: + + msgb_put_u8(reply, LOADER_FLASH_INFO); + msgb_put_u8(reply, 1); // nchips + + // chip 1 + msgb_put_u32(reply, the_flash.f_base); + msgb_put_u32(reply, the_flash.f_size); + msgb_put_u8(reply, the_flash.f_nregions); + + int i; + for (i = 0; i < the_flash.f_nregions; i++) { + msgb_put_u32(reply, the_flash.f_regions[i].fr_bnum); + msgb_put_u32(reply, the_flash.f_regions[i].fr_bsize); + } + + sercomm_sendmsg(dlci, reply); + + break; + + case LOADER_FLASH_ERASE: + case LOADER_FLASH_UNLOCK: + case LOADER_FLASH_LOCK: + case LOADER_FLASH_LOCKDOWN: + + chip = msgb_get_u8(msg); + address = msgb_get_u32(msg); + + if (command == LOADER_FLASH_ERASE) { + res = flash_block_erase(&the_flash, address); + } + if (command == LOADER_FLASH_UNLOCK) { + res = flash_block_unlock(&the_flash, address); + } + if (command == LOADER_FLASH_LOCK) { + res = flash_block_lock(&the_flash, address); + } + if (command == LOADER_FLASH_LOCKDOWN) { + res = flash_block_lockdown(&the_flash, address); + } + + msgb_put_u8(reply, command); + msgb_put_u8(reply, chip); + msgb_put_u32(reply, address); + msgb_put_u32(reply, (res != 0)); + + sercomm_sendmsg(dlci, reply); + + break; + + case LOADER_FLASH_GETLOCK: + + chip = msgb_get_u8(msg); + address = msgb_get_u32(msg); + + lock = flash_block_getlock(&the_flash, address); + + msgb_put_u8(reply, command); + msgb_put_u8(reply, chip); + msgb_put_u32(reply, address); + + switch (lock) { + case FLASH_UNLOCKED: + msgb_put_u32(reply, LOADER_FLASH_UNLOCKED); + break; + case FLASH_LOCKED: + msgb_put_u32(reply, LOADER_FLASH_LOCKED); + break; + case FLASH_LOCKED_DOWN: + msgb_put_u32(reply, LOADER_FLASH_LOCKED_DOWN); + break; + default: + msgb_put_u32(reply, 0xFFFFFFFF); + break; + } + + sercomm_sendmsg(dlci, reply); + + break; + + case LOADER_FLASH_PROGRAM: + + nbytes = msgb_get_u8(msg); + crc = msgb_get_u16(msg); + msgb_get_u8(msg); // XXX align + chip = msgb_get_u8(msg); + address = msgb_get_u32(msg); + + data = msgb_get(msg, nbytes); + + mycrc = crc16(0, data, nbytes); + + if (mycrc == crc) { + res = flash_program(&the_flash, address, data, nbytes); + } + + msgb_put_u8(reply, LOADER_FLASH_PROGRAM); + msgb_put_u8(reply, nbytes); + msgb_put_u16(reply, mycrc); + msgb_put_u8(reply, 0); // XXX align + msgb_put_u8(reply, chip); + msgb_put_u32(reply, address); + + msgb_put_u32(reply, (uint32_t) res); // XXX + + sercomm_sendmsg(dlci, reply); + + break; + + default: + printf("unknown command %d\n", command); + + msgb_free(reply); + + break; + } + + out: + + msgb_free(msg); +} + +static void key_handler(enum key_codes code, enum key_states state) +{ + if (state != PRESSED) + return; + + switch (code) { + case KEY_POWER: + puts("Powering off due to keypress.\n"); + device_poweroff(); + break; + case KEY_OK: + puts("Resetting due to keypress.\n"); + device_reset(); + break; + default: + break; + } +} diff --git a/src/target/firmware/board/mediatek/exceptions_redirected.S b/src/target/firmware/board/mediatek/exceptions_redirected.S new file mode 100644 index 0000000..6908396 --- /dev/null +++ b/src/target/firmware/board/mediatek/exceptions_redirected.S @@ -0,0 +1,20 @@ + +/* Exception Vectors like they are needed for the exception vector + indirection of the internal boot ROM. The following section must be liked + to appear at 0x80001c */ +.section .text.exceptions +_undef_instr: + b handle_abort +_sw_interr: + b _sw_interr +_prefetch_abort: + b handle_abort +_data_abort: + b handle_abort +_reserved: + b _reserved +_irq: + b irq_entry +_fiq: + b fiq_entry + diff --git a/src/target/firmware/board/mediatek/handlers.S b/src/target/firmware/board/mediatek/handlers.S new file mode 100644 index 0000000..2824ad5 --- /dev/null +++ b/src/target/firmware/board/mediatek/handlers.S @@ -0,0 +1,82 @@ + + .EQU I_BIT, 0x80 + .EQU F_BIT, 0x40 + +.section .text + +/* handler for all kinds of aborts */ +.global handle_abort +handle_abort: + @ print the PC we would jump back to... + sub lr, lr, #4 @ we assume to be ARM32 + + mov r0, lr + mov r1, #8 +/* + FIXME: Do all this for mtk + + bl phex + + @ print abort message + mov r0, #'A' + bl putchar_asm + mov r0, #'B' + bl putchar_asm + mov r0, #'O' + bl putchar_asm + mov r0, #'R' + bl putchar_asm + mov r0, #'T' + bl putchar_asm +*/ + @ disable IRQ and FIQ + msr CPSR_c, #I_BIT | F_BIT + +0: @ dead + b 0b + +/* entry point for IRQs */ +.global irq_entry +irq_entry: + /* Adjust and save LR_irq in IRQ stack */ + sub lr, lr, #4 + stmfd sp!, {lr} + + /* Save SPSR for nested interrupt */ + mrs r14, SPSR + stmfd sp!, {r14} + + /* Call the interrupt handler C function */ + stmfd sp!, {r0-r4, r12} + bl irq + ldmfd sp!, {r0-r4, r12} + + /* Restore SPSR_irq from IRQ stack */ + ldmia sp!, {r14} + msr SPSR_cxsf, r14 + + /* Restore adjusted LR_irq from IRQ stack directly in the PC */ + ldmia sp!, {pc}^ + +/* entry point for FIQs */ +.global fiq_entry +fiq_entry: + /* Adjust and save LR_irq in IRQ stack */ + sub lr, lr, #4 + stmfd sp!, {lr} + + /* Save SPSR for nested interrupt */ + mrs r14, SPSR + stmfd sp!, {r14} + + /* Call the interrupt handler C function */ + stmfd sp!, {r0-r4, r12} + bl fiq + ldmfd sp!, {r0-r4, r12} + + /* Restore SPSR_irq from IRQ stack */ + ldmia sp!, {r14} + msr SPSR_cxsf, r14 + + /* Restore adjusted LR_irq from IRQ stack directly in the PC */ + ldmia sp!, {pc}^ diff --git a/src/target/firmware/board/mediatek/header.S b/src/target/firmware/board/mediatek/header.S new file mode 100644 index 0000000..747f680 --- /dev/null +++ b/src/target/firmware/board/mediatek/header.S @@ -0,0 +1,11 @@ +/* + * This is a textual header that is prepended to images where appropriate. + * + * It is meant to ease identification of our firmwares in dumps as well + * as filling some space that is used for the same purpose by the vendor. + * + */ +.section .compal.header +.ascii "OSMOCOM" +. = 0x20 +.ascii GIT_REVISION diff --git a/src/target/firmware/board/mediatek/macros.S b/src/target/firmware/board/mediatek/macros.S new file mode 100644 index 0000000..14ee6e6 --- /dev/null +++ b/src/target/firmware/board/mediatek/macros.S @@ -0,0 +1,76 @@ + +.macro clear_bss + mov r0, #0 + ldr r1, =__bss_start + ldr r2, =__bss_end +loop_bss: + cmp r1, r2 + strlo r0, [r1], #4 + blo loop_bss +.endm + +.macro copy_data + ldr r0, =__data_start + ldr r1, =_data_start + ldr r2, =__data_end + cmp r0, r2 + beq done_data +loop_data: + ldrb r4, [r0], #1 + strb r4, [r1], #1 + cmp r0, r2 + bne loop_data +done_data: +.endm + +.macro copy_ramtext + ldr r0, =__ramtext_start + ldr r1, =_ramtext_start + ldr r2, =__ramtext_end + cmp r0, r2 + beq done_ramtext +loop_ramtext: + ldrb r4, [r0], #1 + strb r4, [r1], #1 + cmp r0, r2 + bne loop_ramtext +done_ramtext: +.endm + + .EQU ARM_MODE_FIQ, 0x11 + .EQU ARM_MODE_IRQ, 0x12 + .EQU ARM_MODE_SVC, 0x13 + + .EQU I_BIT, 0x80 + .EQU F_BIT, 0x40 + +#define TOP_OF_RAM 0x4000a000 +#define FIQ_STACK_SIZE 1024 +#define IRQ_STACK_SIZE 1024 + +.macro init_stacks + /* initialize stacks, starting at TOP_OF_RAM */ + ldr r0, =TOP_OF_RAM + + /* initialize FIQ stack */ + msr CPSR_c, #ARM_MODE_FIQ | I_BIT | F_BIT + mov r13, r0 + sub r0, r0, #FIQ_STACK_SIZE + + /* initialize IRQ stack */ + msr CPSR_c, #ARM_MODE_IRQ | I_BIT | F_BIT + mov r13, r0 + sub r0, r0, #IRQ_STACK_SIZE + + /* initialize supervisor stack */ + msr CPSR_c, #ARM_MODE_SVC | I_BIT | F_BIT + mov r13, r0 +.endm + +.macro call_ctors + /* call constructor functions */ + ldr r0, =_ctor_start + ldr r1, =_ctor_end + bl do_global_ctors +.endm + diff --git a/src/target/firmware/board/mediatek/ram.lds b/src/target/firmware/board/mediatek/ram.lds new file mode 100644 index 0000000..1bff82b --- /dev/null +++ b/src/target/firmware/board/mediatek/ram.lds @@ -0,0 +1,120 @@ +/* + * Linker script for running from internal SRAM on Compal phones + * + * This script is tailored specifically to the requirements imposed + * on us by the Compal bootloader. + * + */ +OUTPUT_FORMAT("elf32-littlearm", "elf32-littlearm", "elf32-littlearm") +OUTPUT_ARCH(arm) +ENTRY(_start) +MEMORY +{ + /* compal-loaded binary: our text, initialized data */ + LRAM (rw) : ORIGIN = 0x40000000, LENGTH = 0x00005000 + /* compal-loaded binary: our unitialized data, stacks, heap */ + IRAM (rw) : ORIGIN = 0x40005000, LENGTH = 0x00005000 +} +SECTIONS +{ + . = 0x40000000; + + /* romloader data section, contains passthru interrupt vectors */ + .compal.loader (NOLOAD) : { . = 0x1400; } > LRAM + + /* initialization code */ + . = ALIGN(4); + .text.start : { + PROVIDE(_start = .); + KEEP(*(.text.start)) + *(.text.start) + } > LRAM + + /* exception vectors from 0x80001c to 0x800034 */ + .text.exceptions 0x4000001c : AT (LOADADDR(.text.start) + SIZEOF(.text.start)) { + KEEP(*(.text.exceptions)) + * (.text.exceptions) + . = ALIGN(4); + } > LRAM + PROVIDE(_exceptions = LOADADDR(.text.exceptions)); + + /* code */ + . = ALIGN(4); + .text (LOADADDR(.text.exceptions) + SIZEOF(.text.exceptions)) : + AT (LOADADDR(.text.exceptions) + SIZEOF(.text.exceptions)) { + /* regular code */ + *(.text*) + /* always-in-ram code */ + *(.ramtext*) + /* gcc voodoo */ + *(.glue_7t) *(.glue_7) *(.vfp11_veneer) *(.v4_bx) + . = ALIGN(4); + } > LRAM + PROVIDE(_text_start = LOADADDR(.text)); + PROVIDE(_text_end = LOADADDR(.text) + SIZEOF(.text)); + + /* constructor pointers */ + .ctors : { + /* ctor count */ + LONG(SIZEOF(.ctors) / 4 - 2) + /* ctor pointers */ + KEEP(*(SORT(.ctors))) + /* end of list */ + LONG(0) + } > LRAM + PROVIDE(_ctor_start = LOADADDR(.ctors)); + PROVIDE(_ctor_end = LOADADDR(.ctors) + SIZEOF(.ctors)); + + /* destructor pointers */ + .dtors : { + /* dtor count */ + LONG(SIZEOF(.dtors) / 4 - 2) + /* dtor pointers */ + KEEP(*(SORT(.dtors))) + /* end of list */ + LONG(0) + } > LRAM + PROVIDE(_dtor_start = LOADADDR(.dtors)); + PROVIDE(_dtor_end = LOADADDR(.dtors) + SIZEOF(.dtors)); + + /* read-only data */ + . = ALIGN(4); + .rodata : { + *(.rodata*) + } > LRAM + PROVIDE(_rodata_start = LOADADDR(.rodata)); + PROVIDE(_rodata_end = LOADADDR(.rodata) + SIZEOF(.rodata)); + + /* initialized data */ + . = ALIGN(4); + .data : { + *(.data) + } > LRAM + PROVIDE(_data_start = LOADADDR(.data)); + PROVIDE(_data_end = LOADADDR(.data) + SIZEOF(.data)); + + /* pic offset tables */ + . = ALIGN(4); + .got : { + *(.got) + *(.got.plt) *(.igot.plt) *(.got) *(.igot) + } > LRAM + PROVIDE(_got_start = LOADADDR(.got)); + PROVIDE(_got_end = LOADADDR(.got) + SIZEOF(.got)); + + /* uninitialized data */ + .bss (NOLOAD) : { + . = ALIGN(4); + __bss_start = .; + *(.bss) + } > IRAM + . = ALIGN(4); + __bss_end = .; + PROVIDE(_bss_start = __bss_start); + PROVIDE(_bss_end = __bss_end); + + /* end of image */ + . = ALIGN(4); + _end = .; + PROVIDE(end = .); +} diff --git a/src/target/firmware/board/mediatek/start.ram.S b/src/target/firmware/board/mediatek/start.ram.S new file mode 100644 index 0000000..c8f242c --- /dev/null +++ b/src/target/firmware/board/mediatek/start.ram.S @@ -0,0 +1,26 @@ + +.section .text.start + +#include "macros.S" + +.globl _start +_start: + /* clear bss section */ + clear_bss + + /* initialize all stacks */ + init_stacks + + /* call constructors */ + call_ctors + + /* jump to main */ + ldr pc, _jump_main + + /* endless loop at end of program */ +_loop: + b _loop + b _start + +_jump_main: + .word main diff --git a/src/target/firmware/board/mediatek/uart.c b/src/target/firmware/board/mediatek/uart.c new file mode 100644 index 0000000..bf37c0c --- /dev/null +++ b/src/target/firmware/board/mediatek/uart.c @@ -0,0 +1,441 @@ +/* MediaTek MT62xx internal UART Driver + * + * based on the Calypso driver, so there might be some cruft from it left... + * + * (C) 2010 by Harald Welte <laforge(a)gnumonks.org> + * (C) 2010 by Ingo Albrecht <prom(a)berlin.ccc.de> + * (C) 2010 by Steve Markgraf <steve(a)steve-m.de> + * + * All Rights Reserved + * + * This program is free software; you can redistribute it and/or modify + * it under the terms of the GNU General Public License as published by + * the Free Software Foundation; either version 2 of the License, or + * (at your option) any later version. + * + * This program is distributed in the hope that it will be useful, + * but WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + * GNU General Public License for more details. + * + * You should have received a copy of the GNU General Public License along + * with this program; if not, write to the Free Software Foundation, Inc., + * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. + * + */ + +#include <debug.h> + +#include <memory.h> +#include <stdint.h> +#include <string.h> +#include <stdio.h> + +#include <defines.h> +#include <console.h> +#include <comm/sercomm.h> + +#include <calypso/irq.h> +#include <calypso/uart.h> + +/* MT622x */ +#if 0 +#define BASE_ADDR_UART1 0x80130000 +#define BASE_ADDR_UART2 0x80180000 +#define BASE_ADDR_UART3 0x801b0000 +#endif + +/* MT 6235 */ +#define BASE_ADDR_UART1 0x81030000 + +//TODO make UART2 and 3 work +#define UART_REG(n,m) (BASE_ADDR_UART1 + (m)) + +#define LCR7BIT 0x80 +#define LCRBFBIT 0x40 +#define MCR6BIT 0x20 +#define REG_OFFS(m) ((m) & ~(LCR7BIT|LCRBFBIT|MCR6BIT)) +/* read access LCR[7] = 0 */ +enum uart_reg { + RBR = 0x00, + IER = 0x04, + IIR = 0x08, + LCR = 0x0c, + MCR = 0x10, + LSR = 0x14, + MSR = 0x18, + SCR = 0x1c, + AUTOBAUD_EN = 0x20, + HIGHSPEED = 0x24, + SAMPLE_COUNT = 0x28, + SAMPLE_POINT = 0x2c, + AUTOBAUD_REG = 0x30, + RATE_FIX_REG = 0x34, /* undocumented */ + AUTOBAUDSAMPLE = 0x38, + GUARD = 0x3c, + ESCAPE_DAT = 0x40, + ESCAPE_EN = 0x44, + SLEEP_EN = 0x48, + VFIFO_EN = 0x4c, +/* read access LCR[7] = 1 */ + DLL = RBR, + DLH = IER, +/* read/write access LCR[7:0] = 0xbf */ + EFR = IIR | LCRBFBIT, + XON1 = MCR | LCRBFBIT, + XON2 = LSR | LCRBFBIT, + XOFF1 = MSR | LCRBFBIT, + XOFF2 = SCR | LCRBFBIT, +}; + +enum fcr_bits { + FIFO_EN = (1 << 0), + RX_FIFO_CLEAR = (1 << 1), + TX_FIFO_CLEAR = (1 << 2), + DMA_MODE = (1 << 3), +}; +#define TX_FIFO_TRIG_SHIFT 4 +#define RX_FIFO_TRIG_SHIFT 6 + +enum iir_bits { + IIR_INT_PENDING = 0x01, + IIR_INT_TYPE = 0x3E, + IIR_INT_TYPE_RX_STATUS_ERROR = 0x06, + IIR_INT_TYPE_RX_TIMEOUT = 0x0C, + IIR_INT_TYPE_RBR = 0x04, + IIR_INT_TYPE_THR = 0x02, + IIR_INT_TYPE_MSR = 0x00, + IIR_INT_TYPE_XOFF = 0x10, + IIR_INT_TYPE_FLOW = 0x20, + IIR_FCR0_MIRROR = 0xC0, +}; + + +/* enable or disable the divisor latch for access to DLL, DLH */ +static void uart_set_lcr7bit(int uart, int on) +{ + uint8_t reg; + + reg = readb(UART_REG(uart, LCR)); + if (on) + reg |= (1 << 7); + else + reg &= ~(1 << 7); + writeb(reg, UART_REG(uart, LCR)); +} + +static uint8_t old_lcr; +static void uart_set_lcr_bf(int uart, int on) +{ + if (on) { + old_lcr = readb(UART_REG(uart, LCR)); + writeb(0xBF, UART_REG(uart, LCR)); + } else { + writeb(old_lcr, UART_REG(uart, LCR)); + } +} + +/* Enable or disable the TCR_TLR latch bit in MCR[6] */ +static void uart_set_mcr6bit(int uart, int on) +{ + uint8_t mcr; + /* we assume EFR[4] is always set to 1 */ + mcr = readb(UART_REG(uart, MCR)); + if (on) + mcr |= (1 << 6); + else + mcr &= ~(1 << 6); + writeb(mcr, UART_REG(uart, MCR)); +} + +static void uart_reg_write(int uart, enum uart_reg reg, uint8_t val) +{ + if (reg & LCRBFBIT) + uart_set_lcr_bf(uart, 1); + else if (reg & LCR7BIT) + uart_set_lcr7bit(uart, 1); + else if (reg & MCR6BIT) + uart_set_mcr6bit(uart, 1); + + writeb(val, UART_REG(uart, REG_OFFS(reg))); + + if (reg & LCRBFBIT) + uart_set_lcr_bf(uart, 0); + else if (reg & LCR7BIT) + uart_set_lcr7bit(uart, 0); + else if (reg & MCR6BIT) + uart_set_mcr6bit(uart, 0); +} + +/* read from a UART register, applying any required latch bits */ +static uint8_t uart_reg_read(int uart, enum uart_reg reg) +{ + uint8_t ret; + + if (reg & LCRBFBIT) + uart_set_lcr_bf(uart, 1); + else if (reg & LCR7BIT) + uart_set_lcr7bit(uart, 1); + else if (reg & MCR6BIT) + uart_set_mcr6bit(uart, 1); + + ret = readb(UART_REG(uart, REG_OFFS(reg))); + + if (reg & LCRBFBIT) + uart_set_lcr_bf(uart, 0); + else if (reg & LCR7BIT) + uart_set_lcr7bit(uart, 0); + else if (reg & MCR6BIT) + uart_set_mcr6bit(uart, 0); + + return ret; +} + +static void uart_irq_handler_cons(__unused enum irq_nr irqnr) +{ + const uint8_t uart = CONS_UART_NR; + uint8_t iir; + + //uart_putchar_nb(uart, 'U'); + + iir = uart_reg_read(uart, IIR); + if (iir & IIR_INT_PENDING) + return; + + switch (iir & IIR_INT_TYPE) { + case IIR_INT_TYPE_RBR: + break; + case IIR_INT_TYPE_THR: + if (cons_rb_flush() == 1) { + /* everything was flushed, disable RBR IRQ */ + uint8_t ier = uart_reg_read(uart, IER); + ier &= ~(1 << 1); + uart_reg_write(uart, IER, ier); + } + break; + case IIR_INT_TYPE_MSR: + break; + case IIR_INT_TYPE_RX_STATUS_ERROR: + break; + case IIR_INT_TYPE_RX_TIMEOUT: + break; + case IIR_INT_TYPE_XOFF: + break; + } +} + +static void uart_irq_handler_sercomm(__unused enum irq_nr irqnr) +{ + const uint8_t uart = SERCOMM_UART_NR; + uint8_t iir, ch; + + //uart_putchar_nb(uart, 'U'); + + iir = uart_reg_read(uart, IIR); + if (iir & IIR_INT_PENDING) + return; + + switch (iir & IIR_INT_TYPE) { + case IIR_INT_TYPE_RX_TIMEOUT: + case IIR_INT_TYPE_RBR: + /* as long as we have rx data available */ + while (uart_getchar_nb(uart, &ch)) { + if (sercomm_drv_rx_char(ch) < 0) { + /* sercomm cannot receive more data right now */ + uart_irq_enable(uart, UART_IRQ_RX_CHAR, 0); + } + } + break; + case IIR_INT_TYPE_THR: + /* as long as we have space in the FIFO */ + while (!uart_tx_busy(uart)) { + /* get a byte from sercomm */ + if (!sercomm_drv_pull(&ch)) { + /* no more bytes in sercomm, stop TX interrupts */ + uart_irq_enable(uart, UART_IRQ_TX_EMPTY, 0); + break; + } + /* write the byte into the TX FIFO */ + uart_putchar_nb(uart, ch); + } + break; + case IIR_INT_TYPE_MSR: + printf("UART IRQ MSR\n"); + break; + case IIR_INT_TYPE_RX_STATUS_ERROR: + printf("UART IRQ RX_SE\n"); + break; + case IIR_INT_TYPE_XOFF: + printf("UART IRQXOFF\n"); + break; + } +} + +static const uint8_t uart2irq[] = { + [0] = IRQ_UART_IRDA, + [1] = IRQ_UART_MODEM, +}; + +void uart_init(uint8_t uart, uint8_t interrupts) +{ + uint8_t irq = uart2irq[uart]; + + uart_reg_write(uart, IER, 0x00); + if (uart == CONS_UART_NR) { + cons_init(); + if(interrupts) { + irq_register_handler(irq, &uart_irq_handler_cons); + irq_config(irq, 0, 0, 0xff); + irq_enable(irq); + } + } else { + sercomm_init(); + if(interrupts) { + irq_register_handler(irq, &uart_irq_handler_sercomm); + irq_config(irq, 0, 0, 0xff); + irq_enable(irq); + } + uart_irq_enable(uart, UART_IRQ_RX_CHAR, 1); + } + + uart_reg_write(uart, AUTOBAUD_EN, 0x00); /* disable AUTOBAUD */ + uart_reg_write(uart, EFR, 0x10); /* Enhanced Features Register */ + + /* no XON/XOFF flow control, ENHANCED_EN, no auto-RTS/CTS */ + uart_reg_write(uart, EFR, (1 << 4)); + /* enable Tx/Rx FIFO, Tx trigger at 56 spaces, Rx trigger at 60 chars */ + //FIXME check those FIFO settings + uart_reg_write(uart, IIR, FIFO_EN | RX_FIFO_CLEAR | TX_FIFO_CLEAR | + (3 << TX_FIFO_TRIG_SHIFT) | (1 << RX_FIFO_TRIG_SHIFT)); + + /* RBR interrupt only when TX FIFO and TX shift register are empty */ + uart_reg_write(uart, SCR, (1 << 0));// | (1 << 3)); + + /* 8 bit, 1 stop bit, no parity, no break */ + uart_reg_write(uart, LCR, 0x03); + + uart_set_lcr7bit(uart, 0); +} + +void uart_poll(uint8_t uart) { + if(uart == CONS_UART_NR) { + uart_irq_handler_cons(0); + } else { + uart_irq_handler_sercomm(0); + } +} + +void uart_irq_enable(uint8_t uart, enum uart_irq irq, int on) +{ + uint8_t ier = uart_reg_read(uart, IER); + uint8_t mask = 0; + + switch (irq) { + case UART_IRQ_TX_EMPTY: + mask = (1 << 1); + break; + case UART_IRQ_RX_CHAR: + mask = (1 << 0); + break; + } + + if (on) + ier |= mask; + else + ier &= ~mask; + + uart_reg_write(uart, IER, ier); +} + + +void uart_putchar_wait(uint8_t uart, int c) +{ + /* wait while TX FIFO indicates full */ + while (~readb(UART_REG(uart, LSR)) & 0x20) { } + + /* put character in TX FIFO */ + writeb(c, UART_REG(uart, RBR)); +} + +int uart_putchar_nb(uint8_t uart, int c) +{ + /* if TX FIFO indicates full, abort */ + if (~readb(UART_REG(uart, LSR)) & 0x20) + return 0; + + writeb(c, UART_REG(uart, RBR)); + return 1; +} + +int uart_getchar_nb(uint8_t uart, uint8_t *ch) +{ + uint8_t lsr; + + lsr = readb(UART_REG(uart, LSR)); + + /* something strange happened */ + if (lsr & 0x02) + printf("LSR RX_OE\n"); + if (lsr & 0x04) + printf("LSR RX_PE\n"); + if (lsr & 0x08) + printf("LSR RX_FE\n"); + if (lsr & 0x10) + printf("LSR RX_BI\n"); + if (lsr & 0x80) + printf("LSR RX_FIFO_STS\n"); + + /* is the Rx FIFO empty? */ + if (!(lsr & 0x01)) + return 0; + + *ch = readb(UART_REG(uart, RBR)); + //printf("getchar_nb(%u) = %02x\n", uart, *ch); + return 1; +} + +int uart_tx_busy(uint8_t uart) +{ + /* Check THRE bit (LSR[5]) to see if FIFO is full */ + if (~readb(UART_REG(uart, LSR)) & 0x20) + return 1; + return 0; +} + +#if 0 +/* 26MHz clock input (used when no PLL initialized directly after poweron) */ +static const uint16_t divider[] = { + [UART_38400] = 42, + [UART_57600] = 28, + [UART_115200] = 14, + [UART_230400] = 7, + [UART_460800] = 14, /* would need UART_REG(HIGHSPEED) = 1 or 2 */ + [UART_921600] = 7, /* would need UART_REG(HIGHSPEED) = 2 */ +}; +#endif + +/* 52MHz clock input (after PLL init) */ +static const uint16_t divider[] = { + [UART_38400] = 85, + [UART_57600] = 56, + [UART_115200] = 28, + [UART_230400] = 14, + [UART_460800] = 7, + [UART_921600] = 7, /* would need UART_REG(HIGHSPEED) = 1 */ +}; + +int uart_baudrate(uint8_t uart, enum uart_baudrate bdrt) +{ + uint16_t div; + + if (bdrt > ARRAY_SIZE(divider)) + return -1; + + div = divider[bdrt]; + uart_set_lcr7bit(uart, 1); + writeb(div & 0xff, UART_REG(uart, DLL)); + writeb(div >> 8, UART_REG(uart, DLH)); + uart_set_lcr7bit(uart, 0); + + return 0; +} diff --git a/src/target/firmware/board/mt62xx/init.c b/src/target/firmware/board/mt62xx/init.c new file mode 100644 index 0000000..f9e2130 --- /dev/null +++ b/src/target/firmware/board/mt62xx/init.c @@ -0,0 +1,140 @@ +/* Initialization for the MT62xx Basebands */ + +/* (C) 2010 by Steve Markgraf <steve(a)steve-m.de> + * + * All Rights Reserved + * + * This program is free software; you can redistribute it and/or modify + * it under the terms of the GNU General Public License as published by + * the Free Software Foundation; either version 2 of the License, or + * (at your option) any later version. + * + * This program is distributed in the hope that it will be useful, + * but WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + * GNU General Public License for more details. + * + * You should have received a copy of the GNU General Public License along + * with this program; if not, write to the Free Software Foundation, Inc., + * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. + * + */ + +#include <stdint.h> +#include <stdio.h> + +#include <debug.h> +#include <ctors.h> +#include <memory.h> +#include <board.h> +#include <keypad.h> +#include <console.h> + +#include <flash/cfi_flash.h> + +/* We emulate the calypso interface */ +#include <calypso/uart.h> + +#include <comm/sercomm.h> +#include <comm/timer.h> + +#include <mtk/emi.h> +#include <mtk/mt6235.h> +#include <mtk/system.h> + +void pll_init(void) +{ + /* Power on PLL */ + writew(0, MTK_PLL_PDN_CON); + writew(PLL_CLKSQ_DIV2_DSP | PLL_CLKSQ_DIV2_MCU, MTK_PLL_CLK_CON); + + writew(PLL_RST, MTK_PLL_PLL); + writew(0, MTK_PLL_PLL); + delay_ms(1); + + /* Turn on PLL for MCU, DSP and USB */ + writew(PLL_MPLLSEL_PLL | PLL_DPLLSEL | PLL_UPLLSEL, MTK_PLL_PLL); + + /* + * Setup MCU clock register: + * ARMCLK = 208MHz, AHBx4CLK = 52MHz, AHBx8CLK = 104MHz + * we have to write to the read-only part (EMICLK) as well, otherwise + * the EMI won't work! (datasheet lies) + */ + writew(7 << MCUCLK_CON_AHBX8CLK_SHIFT | + 3 << MCUCLK_CON_AHBX4CLK_SHIFT | + 15 << MCUCLK_CON_ARMCLK_SHIFT | + 7 << MCUCLK_CON_EMICLK_SHIFT, + MTK_CONFG_MCUCLK_CON); +} + +void memory_init(void) +{ + int i; + + /* Initialization for Hynix RAM */ + + /* Configure DRAM controller */ + writel(0x0001000e, MTK_EMI_GEND); + writel(0x00088a0a, MTK_EMI_GENA); + writel(0x00000280, MTK_EMI_GENB); + writel(0x52945294, MTK_EMI_GENC); + writel(0x1c016605, MTK_EMI_CONL); + writel(0x00002828, MTK_EMI_CONM); + writel(0x02334000, MTK_EMI_CONI); + writel(0x16c12212, MTK_EMI_CONJ); + writel(0x032d0000, MTK_EMI_CONK); + + for (i = 0; i < 5; ++i) { + /* Setup five single bits, one by one for DRAM init */ + writel((1 << (24 + i)) | (0x400013), MTK_EMI_CONN); + delay_ms(1); + writel(0x400013, MTK_EMI_CONN); + delay_ms(1); + } + +#if 0 + /* Initialization for Toshiba RAM */ + + /* Configure DRAM controller */ + writel(0x0001000E, MTK_EMI_GEND); + writel(0x00088E3A, MTK_EMI_GENA); + writel(0x000000C0, MTK_EMI_GENB); + writel(0x18C618C6, MTK_EMI_GENC); + writel(0x18007505, MTK_EMI_CONL); + writel(0x00002828, MTK_EMI_CONM); + writel(0x00332000, MTK_EMI_CONI); + writel(0x3CD24431, MTK_EMI_CONJ); + writel(0x02000000, MTK_EMI_CONK); + + for (i = 0; i < 5; ++i) { + /* Setup five single bits, one by one for DRAM init */ + writel((1 << (24 + i)) | (0x500013), MTK_EMI_CONN); + delay_ms(1); + writel(0x500013, MTK_EMI_CONN); + delay_ms(1); + } + +#endif +} + +void board_init(void) +{ + /* powerup the baseband */ + writew(POWERKEY1_MAGIC, MTK_RTC_POWERKEY1); + writew(POWERKEY2_MAGIC, MTK_RTC_POWERKEY2); + writew(BBPU_MAGIC | RTC_BBPU_WRITE_EN | + RTC_BBPU_BBPU | RTC_BBPU_AUTO, + MTK_RTC_BBPU); + writew(1, MTK_RTC_WRTGR); + + /* disable watchdog timer */ + writew(WDT_MODE_KEY, MTK_RGU_WDT_MODE); + + pll_init(); + memory_init(); + + /* Initialize UART without interrupts */ + uart_init(SERCOMM_UART_NR, 0); + uart_baudrate(SERCOMM_UART_NR, UART_115200); +} diff --git a/src/target/firmware/include/mtk/emi.h b/src/target/firmware/include/mtk/emi.h new file mode 100644 index 0000000..1818499 --- /dev/null +++ b/src/target/firmware/include/mtk/emi.h @@ -0,0 +1,42 @@ +/* + * (C) 2010 by Tieto <www.tieto.com> + * Marcin Mielczarczyk <marcin.mielczarczyk(a)tieto.com> + * + * All Rights Reserved + * + * This program is free software; you can redistribute it and/or modify + * it under the terms of the GNU General Public License as published by + * the Free Software Foundation; either version 2 of the License, or + * (at your option) any later version. + * + * This program is distributed in the hope that it will be useful, + * but WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + * GNU General Public License for more details. + * + * You should have received a copy of the GNU General Public License along + * with this program; if not, write to the Free Software Foundation, Inc., + * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. + * + */ + +#ifndef __MTK_EMI_H_ +#define __MTK_EMI_H_ + +/* External Memory Interface register definitions */ +#define MTK_EMI_CONA (MTK_EMI_BASE + 0x00) +#define MTK_EMI_CONB (MTK_EMI_BASE + 0x08) +#define MTK_EMI_CONC (MTK_EMI_BASE + 0x10) +#define MTK_EMI_COND (MTK_EMI_BASE + 0x18) +#define MTK_EMI_CONI (MTK_EMI_BASE + 0x40) +#define MTK_EMI_CONJ (MTK_EMI_BASE + 0x48) +#define MTK_EMI_CONK (MTK_EMI_BASE + 0x50) +#define MTK_EMI_CONL (MTK_EMI_BASE + 0x58) +#define MTK_EMI_CONM (MTK_EMI_BASE + 0x60) +#define MTK_EMI_CONN (MTK_EMI_BASE + 0x68) +#define MTK_EMI_GENA (MTK_EMI_BASE + 0x70) +#define MTK_EMI_GENB (MTK_EMI_BASE + 0x78) +#define MTK_EMI_GENC (MTK_EMI_BASE + 0x80) +#define MTK_EMI_GEND (MTK_EMI_BASE + 0x88) + +#endif diff --git a/src/target/firmware/include/mtk/mt6235.h b/src/target/firmware/include/mtk/mt6235.h new file mode 100644 index 0000000..fb9d368 --- /dev/null +++ b/src/target/firmware/include/mtk/mt6235.h @@ -0,0 +1,74 @@ +/* + * (C) 2010 by Tieto <www.tieto.com> + * Marcin Mielczarczyk <marcin.mielczarczyk(a)tieto.com> + * + * All Rights Reserved + * + * This program is free software; you can redistribute it and/or modify + * it under the terms of the GNU General Public License as published by + * the Free Software Foundation; either version 2 of the License, or + * (at your option) any later version. + * + * This program is distributed in the hope that it will be useful, + * but WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + * GNU General Public License for more details. + * + * You should have received a copy of the GNU General Public License along + * with this program; if not, write to the Free Software Foundation, Inc., + * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. + * + */ + +#ifndef __MT6235_H +#define __MT6235_H + +/* Peripheral base addresses */ +#define MTK_EFUSE_BASE 0x80000000 +#define MTK_CONFG_BASE 0x80010000 +#define MTK_GPIO_BASE 0x80020000 +#define MTK_RGU_BASE 0x80030000 +#define MTK_EMI_BASE 0x81000000 +#define MTK_CIRQ_BASE 0x81010000 +#define MTK_DMA_BASE 0x81020000 +#define MTK_UART1_BASE 0x81030000 +#define MTK_UART2_BASE 0x81040000 +#define MTK_UART3_BASE 0x81050000 +#define MTK_GPT_BASE 0x81060000 +#define MTK_KP_BASE 0x81080000 +#define MTK_PWM_BASE 0x81090000 +#define MTK_SIM_BASE 0x810A0000 +#define MTK_RTC_BASE 0x810C0000 +#define MTK_SEJ_BASE 0x810D0000 +#define MTK_BM_BASE 0x810E0000 +#define MTK_IRDA_BASE 0x810F0000 +#define MTK_I2C_BASE 0x81100000 +#define MTK_MSDC_BASE 0x81110000 +#define MTK_NFI_BASE 0x81120000 +#define MTK_MSSDC2_BASE 0x81140000 +#define MTK_TDMA_BASE 0x82000000 +#define MTK_BSI_BASE 0x82010000 +#define MTK_BPI_BASE 0x82020000 +#define MTK_AFC_BASE 0x82030000 +#define MTK_APC_BASE 0x82040000 +#define MTK_AUXADC_BASE 0x82050000 +#define MTK_DIVIDER_BASE 0x82060000 +#define MTK_FSC_BASE 0x82070000 +#define MTK_GCU_BASE 0x82080000 +#define MTK_CSD_ACC_BASE 0x82090000 +#define MTK_SHARE1_BASE 0x820A0000 +#define MTK_IRDBG1_BASE 0x820B0000 +#define MTK_SHARE2_BASE 0x820C0000 +#define MTK_IRDBG2_BASE 0x820D0000 +#define MTK_PATCH_BASE 0x820E0000 +#define MTK_AFE_BASE 0x820F0000 +#define MTK_BFE_BASE 0x82100000 +#define MTK_PLL_BASE 0x83000000 +#define MTK_ACIF_BASE 0x83010000 +#define MTK_GMC_BASE 0x84000000 +#define MTK_G2D_BASE 0x84010000 +#define MTK_GCMQ_BASE 0x84020000 +#define MTK_CAM_BASE 0x840B0000 +#define MTK_CRZ_BASE 0x840E0000 + +#endif diff --git a/src/target/firmware/include/mtk/system.h b/src/target/firmware/include/mtk/system.h new file mode 100644 index 0000000..4543029 --- /dev/null +++ b/src/target/firmware/include/mtk/system.h @@ -0,0 +1,195 @@ +/* + * (C) 2010 by Tieto <www.tieto.com> + * Marcin Mielczarczyk <marcin.mielczarczyk(a)tieto.com> + * + * All Rights Reserved + * + * This program is free software; you can redistribute it and/or modify + * it under the terms of the GNU General Public License as published by + * the Free Software Foundation; either version 2 of the License, or + * (at your option) any later version. + * + * This program is distributed in the hope that it will be useful, + * but WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + * GNU General Public License for more details. + * + * You should have received a copy of the GNU General Public License along + * with this program; if not, write to the Free Software Foundation, Inc., + * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. + * + */ + +#ifndef __MTK_SYSTEM_H_ +#define __MTK_SYSTEM_H_ + +/* + * Configuration block section (Clock, Power Down, Version and Reset + */ + +/* Register definitions */ +#define MTK_CONFG_HW_VERSION (MTK_CONFG_BASE + 0x000) +#define MTK_CONFG_FW_VERSION (MTK_CONFG_BASE + 0x004) +#define MTK_CONFG_HW_CODE (MTK_CONFG_BASE + 0x008) +#define MTK_CONFG_SLEEP_CON (MTK_CONFG_BASE + 0x114) +#define MTK_CONFG_MCUCLK_CON (MTK_CONFG_BASE + 0x118) +#define MTK_CONFG_DSPCLK_CON (MTK_CONFG_BASE + 0x11C) +#define MTK_CONFG_IDN_SEL (MTK_CONFG_BASE + 0x200) +#define MTK_CONFG_PDN_CON0 (MTK_CONFG_BASE + 0x300) +#define MTK_CONFG_PDN_CON1 (MTK_CONFG_BASE + 0x304) +#define MTK_CONFG_PDN_CON2 (MTK_CONFG_BASE + 0x308) +#define MTK_CONFG_PDN_CON3 (MTK_CONFG_BASE + 0x30C) +#define MTK_CONFG_PDN_SET0 (MTK_CONFG_BASE + 0x310) +#define MTK_CONFG_PDN_SET1 (MTK_CONFG_BASE + 0x314) +#define MTK_CONFG_PDN_SET2 (MTK_CONFG_BASE + 0x318) +#define MTK_CONFG_PDN_SET3 (MTK_CONFG_BASE + 0x31C) +#define MTK_CONFG_PDN_CLR0 (MTK_CONFG_BASE + 0x320) +#define MTK_CONFG_PDN_CLR1 (MTK_CONFG_BASE + 0x324) +#define MTK_CONFG_PDN_CLR2 (MTK_CONFG_BASE + 0x328) +#define MTK_CONFG_PDN_CLR3 (MTK_CONFG_BASE + 0x32C) + +/* CONFG_MCUCLK_CON bit fields definitions */ +#define MCUCLK_CON_AHBX8CLK_SHIFT (0) +#define MCUCLK_CON_AHBX4CLK_SHIFT (4) +#define MCUCLK_CON_ARMCLK_SHIFT (8) +#define MCUCLK_CON_EMICLK_SHIFT (12) + +/* PDN_CON0 bit fields definitions */ +#define PDN_CON0_CON0_DMA (1 << 0) +#define PDN_CON0_USB (1 << 1) +#define PDN_CON0_GCU (1 << 2) +#define PDN_CON0_WAVE (1 << 3) +#define PDN_CON0_SEJ (1 << 4) +#define PDN_CON0_IR (1 << 6) +#define PDN_CON0_PWM3 (1 << 7) +#define PDN_CON0_PWM (1 << 8) +#define PDN_CON0_SIM2 (1 << 10) +#define PDN_CON0_IRDBG1 (1 << 12) +#define PDN_CON0_IRDBG2 (1 << 13) + +/* PDN_CON1 bit fields definitions */ +#define PDN_CON1_GPT (1 << 0) +#define PDN_CON1_KP (1 << 1) +#define PDN_CON1_GPIO (1 << 2) +#define PDN_CON1_UART1 (1 << 3) +#define PDN_CON1_SIM (1 << 4) +#define PDN_CON1_PWM1 (1 << 5) +#define PDN_CON1_LCD (1 << 7) +#define PDN_CON1_UART2 (1 << 8) +#define PDN_CON1_MSDC (1 << 9) +#define PDN_CON1_TP (1 << 10) +#define PDN_CON1_PWM2 (1 << 11) +#define PDN_CON1_NFI (1 << 12) +#define PDN_CON1_UART3 (1 << 14) +#define PDN_CON1_IRDA (1 << 15) + +/* PDN_CON2 bit fields definitions */ +#define PDN_CON2_TDMA (1 << 0) +#define PDN_CON2_RTC (1 << 1) +#define PDN_CON2_BSI (1 << 2) +#define PDN_CON2_BPI (1 << 3) +#define PDN_CON2_AFC (1 << 4) +#define PDN_CON2_APC (1 << 5) + +/* + * Reset Generation Unit block section + */ +#define MTK_RGU_WDT_MODE (MTK_RGU_BASE + 0x00) +#define MTK_RGU_WDT_LENGTH (MTK_RGU_BASE + 0x04) +#define MTK_RGU_WDT_RESTART (MTK_RGU_BASE + 0x08) +#define MTK_RGU_WDT_STA (MTK_RGU_BASE + 0x0C) +#define MTK_RGU_SW_PERIPH_RSTN (MTK_RGU_BASE + 0x10) +#define MTK_RGU_SW_DSP_RSTN (MTK_RGU_BASE + 0x14) +#define MTK_RGU_WDT_RSTINTERVAL (MTK_RGU_BASE + 0x18) +#define MTK_RGU_WDT_SWRST (MTK_RGU_BASE + 0x1C) + +#define WDT_MODE_KEY 0x2200 +#define WDT_LENGTH_KEY 0x0008 +#define WDT_RESTART_KEY 0x1971 +#define SW_PERIPH_RSTN_KEY 0x0037 +#define WDT_SWRST_KEY 0x1209 + +/* + * RTC block section + */ + +/* RTC registers definition */ +#define MTK_RTC_BBPU (MTK_RTC_BASE + 0x00) +#define MTK_RTC_IRQ_STA (MTK_RTC_BASE + 0x04) +#define MTK_RTC_IRQ_EN (MTK_RTC_BASE + 0x08) +#define MTK_RTC_CII_EN (MTK_RTC_BASE + 0x0C) +#define MTK_RTC_AL_MASK (MTK_RTC_BASE + 0x10) +#define MTK_RTC_TC_SEC (MTK_RTC_BASE + 0x14) +#define MTK_RTC_TC_MIN (MTK_RTC_BASE + 0x18) +#define MTK_RTC_TC_HOU (MTK_RTC_BASE + 0x1C) +#define MTK_RTC_TC_DOM (MTK_RTC_BASE + 0x20) +#define MTK_RTC_TC_DOW (MTK_RTC_BASE + 0x24) +#define MTK_RTC_TC_MTH (MTK_RTC_BASE + 0x28) +#define MTK_RTC_TC_YEA (MTK_RTC_BASE + 0x2C) +#define MTK_RTC_AL_SEC (MTK_RTC_BASE + 0x30) +#define MTK_RTC_AL_MIN (MTK_RTC_BASE + 0x34) +#define MTK_RTC_AL_HOU (MTK_RTC_BASE + 0x38) +#define MTK_RTC_AL_DOM (MTK_RTC_BASE + 0x3C) +#define MTK_RTC_AL_DOW (MTK_RTC_BASE + 0x40) +#define MTK_RTC_AL_MTH (MTK_RTC_BASE + 0x44) +#define MTK_RTC_AL_YEA (MTK_RTC_BASE + 0x48) +#define MTK_RTC_XOSCCALI (MTK_RTC_BASE + 0x4C) +#define MTK_RTC_POWERKEY1 (MTK_RTC_BASE + 0x50) +#define MTK_RTC_POWERKEY2 (MTK_RTC_BASE + 0x54) +#define MTK_RTC_PDN1 (MTK_RTC_BASE + 0x58) +#define MTK_RTC_PDN2 (MTK_RTC_BASE + 0x5C) +#define MTK_RTC_SPAR1 (MTK_RTC_BASE + 0x64) +#define MTK_RTC_DIFF (MTK_RTC_BASE + 0x6C) +#define MTK_RTC_CALI (MTK_RTC_BASE + 0x70) +#define MTK_RTC_WRTGR (MTK_RTC_BASE + 0x74) + +#define POWERKEY1_MAGIC 0xA357 +#define POWERKEY2_MAGIC 0x67D2 + +/* RTC_BBPU bit fields definitions */ +#define RTC_BBPU_PWREN (1 << 0) +#define RTC_BBPU_WRITE_EN (1 << 1) +#define RTC_BBPU_BBPU (1 << 2) +#define RTC_BBPU_AUTO (1 << 3) +#define RTC_BBPU_CLRPKY (1 << 4) +#define RTC_BBPU_RELOAD (1 << 5) +#define RTC_BBPU_CBUSY (1 << 6) +#define RTC_BBPU_DBING (1 << 7) +#define RTC_BBPU_KEY_BBPU (1 << 8) + +/* RTC_BBPU write is only acceptable when KEY_BBPU=0x43 */ +#define BBPU_MAGIC 0x4300 + +/* + * PLL block section + */ + +/* PLL registers definition */ +#define MTK_PLL_PLL (MTK_PLL_BASE + 0x00) +#define MTK_PLL_PLL2 (MTK_PLL_BASE + 0x04) +#define MTK_PLL_CLK_CON (MTK_PLL_BASE + 0x18) +#define MTK_PLL_PDN_CON (MTK_PLL_BASE + 0x1C) + +/* MTK_PLL_PLL bit fields definitions */ +#define PLL_PLLVCOSEL (0 << 0) +#define PLL_MPLLSEL_SYSCLK (1 << 3) +#define PLL_MPLLSEL_PLL (2 << 3) +#define PLL_DPLLSEL (1 << 5) +#define PLL_UPLLSEL (1 << 6) +#define PLL_RST (1 << 7) +#define PLL_CALI (1 << 8) + +/* MTK_PLL_CLK_CON bit fields definitions */ +#define PLL_CLKSQ_DIV2_DSP (1 << 0) +#define PLL_CLKSQ_DIV2_MCU (1 << 1) +#define PLL_CLKSQ_PLD (1 << 2) +#define PLL_SRCCLK (1 << 7) +#define PLL_CLKSQ_TEST (1 << 15) + +/* MTK_PLL_PDN_CON bit fields definitions */ +#define PLL_PDN_CON_CLKSQ (1 << 11) +#define PLL_PDN_CON_MCU_DIV2 (1 << 12) +#define PLL_PDN_CON_PLL (1 << 13) +#define PLL_PDN_CON_DSP_DIV2 (1 << 15) + +#endif -- 1.7.2.5

3 3

RE:Nokia 3310 tracing
by Bogdan Alecu 29 Apr '11

29 Apr '11

It shows the communication messages like Osmocom? Does it also supports SMS messages? Maybe you can also write a small wiki on how to use (with Wireshark).

4 7

Merging G2-loader
by Wolfram Sang 29 Apr '11

29 Apr '11

Hi, do the following assumptions and conclusions make sense? - The Sciphone G2 is intended as a platform where we want to run L1/2/3 natively on Linux (somewhen). - Thus, from all the applications in osmocom-bb for the targets, we only need the loader to get the first bootloader onto the system (in case JTAG is not available or wanted) - Being that different, it doesn't make sense to fit the mediatek-platform into the existing makefile-templates which build all applications for all boards. I'd suggest to create a new top-level target "mtk" which only builds the loaders for mediatek-phones. All unneeded applications and libraries are skipped. A preview of a possible directory-structure to add mtk-support could look like this then: . ├── board │ ├── mediatek │ │ ├── exceptions_redirected.S │ │ ├── exceptions_redirect.S │ │ ├── handlers.S │ │ ├── header.S │ │ ├── macros.S │ │ ├── ram.lds │ │ ├── start.ram.S │ │ ├── start.rom.S │ │ └── uart.c │ └── mt62xx │ └── init.c └── include └── mtk ├── bfe.h ├── bpi.h ├── bsi.h ├── emi.h ├── mt6235.h ├── mt6235_sciphone_g2.h ├── system.h └── tdma_timer.h It can be cleaned up a bit once there is a working state. Of course, a few modifications to makefiles are also needed. Note there is now a seperate uart.c in the mediatek-folder. Any objections? Anything I missed? Regards, Wolfram

2 2

Re: Transmitting voice with Osmocom
by Huseyin Turan 28 Apr '11

28 Apr '11

Thank you very much. A firm from Turkey called Aselsan succeeded to make encrypted conversation over GSM. It transfers the voice data (1.2 kbit/s ) with Synthetic Voice Modulator technology. http://www.aselsan.com.tr/images/dokuman/HC/AHSPD/kripto/2110/2110_whitepap…

3 2

[PATCH] target/firmware: make build less verbose like the rest of the tree
by Wolfram Sang 28 Apr '11

28 Apr '11

As usual V=1 will give the full output. Signed-off-by: Wolfram Sang <wolfram(a)the-dreams.de> --- src/target/firmware/Makefile.inc | 23 +++++++++++++++++------ 1 files changed, 17 insertions(+), 6 deletions(-) diff --git a/src/target/firmware/Makefile.inc b/src/target/firmware/Makefile.inc index 11c63ec..1f54031 100644 --- a/src/target/firmware/Makefile.inc +++ b/src/target/firmware/Makefile.inc @@ -24,6 +24,17 @@ ASFLAGS=$(INCLUDES) -D__ASSEMBLY__ LDFLAGS = -nostartfiles -nostdlib -nodefaultlibs --gc-sections --cref +#### QUIET OUTPUT #### + +ifndef V + V = 0 +endif + +Q_CC = $(if $(V:1=),@echo " CC $@";) +Q_LD = $(if $(V:1=),@echo " LD $@";) +Q_AR = $(if $(V:1=),@echo " AR $@";) +Q_OBJ = $(if $(V:1=),@echo " OBJ $@";) + #### GIT VERSION #### GIT_COMMIT:=$(shell git describe --always) @@ -71,7 +82,7 @@ $(1)_$(2)_$(3)_LIBS := $(ANY_APP_LIBS) # define manifest compilation board/$(2)/$(1).$(3).manifest.o: board/manifest.c - $(CROSS_COMPILE)$(CC) $(CFLAGS) -DAPPLICATION=\"$(1)\" -DBOARD=\"$(2)\" -DENVIRONMENT=\"$(3)\" -c -o $$@ $$< + $$(Q_CC)$(CROSS_COMPILE)$(CC) $(CFLAGS) -DAPPLICATION=\"$(1)\" -DBOARD=\"$(2)\" -DENVIRONMENT=\"$(3)\" -c -o $$@ $$< # generate dummy dependencies for manifest board/$(2)/$(1).$(3).manifest.p: board/manifest.c @@ -82,7 +93,7 @@ $(1)_$(2)_$(3)_OBJS+=board/$(2)/$(1).$(3).manifest.o $$($(3)_OBJS) # define compilation rule, also generates map file board/$(2)/$(1).$(3).elf board/$(2)/$(1).$(3).map: $$($(1)_$(2)_$(3)_OBJS) $$($(1)_$(2)_$(3)_LIBS) $$($(3)_LDS) - $(CROSS_COMPILE)$(LD) $(LDFLAGS) -T $$($(3)_LDS) -Bstatic \ + $$(Q_LD)$(CROSS_COMPILE)$(LD) $(LDFLAGS) -T $$($(3)_LDS) -Bstatic \ -Map board/$(2)/$(1).$(3).map -o board/$(2)/$(1).$(3).elf \ --start-group $$($(1)_$(2)_$(3)_OBJS) $$($(1)_$(2)_$(3)_LIBS) --end-group @@ -139,7 +150,7 @@ $(1)_OBJS:=$$($(1)_SRCS_REL:.c=.o) $(1)_OBJS:=$$($(1)_OBJS:.S=.o) $$($(1)_DIR)/lib$(1).a: $$($(1)_OBJS) - $(CROSS_COMPILE)$(AR) cru $$($(1)_DIR)/lib$(1).a $$($(1)_OBJS) + $$(Q_AR)$(CROSS_COMPILE)$(AR) cru $$($(1)_DIR)/lib$(1).a $$($(1)_OBJS) ALL_LIBS+=$$($(1)_DIR)/lib$(1).a @@ -171,14 +182,14 @@ depend: $(ALL_DEPS) @sed 's|.*\.o:|$(@:.p=.o): |g' < $*.d > $@; rm -f $*.d; [ -s $@ ] || rm -f $@ %.o: %.c - $(CROSS_COMPILE)$(CC) $(CFLAGS) -Wa,-adhlns=$(@:.o=.lst) -c -o $@ $< + $(Q_CC)$(CROSS_COMPILE)$(CC) $(CFLAGS) -Wa,-adhlns=$(@:.o=.lst) -c -o $@ $< %.o: %.S - $(CROSS_COMPILE)$(CC) $(ASFLAGS) -Wa,-adhlns=$(@:.o=.lst) -c -o $@ $< + $(Q_CC)$(CROSS_COMPILE)$(CC) $(ASFLAGS) -Wa,-adhlns=$(@:.o=.lst) -c -o $@ $< %.bin: %.elf - $(CROSS_COMPILE)objcopy --gap-fill=0xff -O binary $^ $@ + $(Q_OBJ)$(CROSS_COMPILE)objcopy --gap-fill=0xff -O binary $^ $@ #### CLEANUP RULES #### -- 1.7.2.5

2 1

None
by Sim IJskes 28 Apr '11

28 Apr '11

1 0

AW: [PATCH] [layer23] fix sim path handling and msisdn path location
by Andreas.Eversberg 28 Apr '11

28 Apr '11

hi nico, thanx for this patch. i would like to review it this weekend before i commit it. best regards, andreas -----Ursprüngliche Nachricht----- Von: baseband-devel-bounces(a)lists.osmocom.org [mailto:baseband-devel-bounces@lists.osmocom.org] Im Auftrag von Nico Golde Gesendet: Dienstag, 26. April 2011 16:54 An: baseband-devel(a)lists.osmocom.org Cc: nico(a)ngolde.de Betreff: [PATCH] [layer23] fix sim path handling and msisdn path location From: Nico Golde <nico(a)ngolde.de> --- src/host/layer23/src/common/sim.c | 2 +- src/host/layer23/src/mobile/subscriber.c | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/src/host/layer23/src/common/sim.c b/src/host/layer23/src/common/sim.c index 3ef3cf8..5e94c3e 100644 --- a/src/host/layer23/src/common/sim.c +++ b/src/host/layer23/src/common/sim.c @@ -688,7 +688,7 @@ static int sim_process_job(struct osmocom_ms *ms) /* check MF / DF */ i = 0; while (sh->path[i] && sim->path[i]) { - if (sh->path[i] != sh->path[i]) + if (sh->path[i] != sim->path[i]) break; i++; } diff --git a/src/host/layer23/src/mobile/subscriber.c b/src/host/layer23/src/mobile/subscriber.c index 3ba78f3..a16539a 100644 --- a/src/host/layer23/src/mobile/subscriber.c +++ b/src/host/layer23/src/mobile/subscriber.c @@ -492,7 +492,7 @@ static struct subscr_sim_file { { 1, { 0 }, 0x2fe2, subscr_sim_iccid }, { 1, { 0x7f20, 0 }, 0x6f07, subscr_sim_imsi }, { 1, { 0x7f20, 0 }, 0x6f7e, subscr_sim_loci }, - { 0, { 0x7f20, 0 }, 0x6f40, subscr_sim_msisdn }, + { 0, { 0x7f10, 0 }, 0x6f40, subscr_sim_msisdn }, { 0, { 0x7f20, 0 }, 0x6f20, subscr_sim_kc }, { 0, { 0x7f20, 0 }, 0x6f30, subscr_sim_plmnsel }, { 0, { 0x7f20, 0 }, 0x6f31, subscr_sim_hpplmn }, -- 1.7.4.4

1 0

Transmitting voice with Osmocom
by Michael Dvoishes 28 Apr '11

28 Apr '11

Hi All, I am trying to transmit voice with my GTA02 and Osmocom. Upon looking into code I did not find any code transmitting voice. I have tried to do it myself but without much success. What have I done: 1. Merge branch "jolly/voice" into main. 2. Add handling of L1CTL_VOICE_REQ at l23_api.c 3. Create additional queue for voice requests to be handled within the scheduler 4. Create "loopback" code, issuing L1CTL_VOICE_REQ each time voice is received at layer23 5. At l1s_tch_cmd, add code, sending the frame from voice request queue, similar to code, sending FACCH frame. 6. During tests against OpenBTS, it appears, that the voice frames are being sent, but all of them have "Stolen" bit turned on, e.g. BTS considers them FACCH frames. My question is how do I transmit TCH frame with "Stolen" indicator turned off. Or even better, is there any other implementation of transmitting voice via TCH? Code fragment from l1s_tch_cmd, ------------------------------------------------------------------------------------------------ if (facch_tx_now) { uint16_t *info_ptr = dsp_api.ndb->a_fu; struct msgb *msg; const uint8_t *data; /* Pull FACCH data (if ready) */ if (icnt > 26) { msg = msgb_dequeue(&l1s.tx_queue[L1S_CHAN_MAIN]); if(!msg && (tch_mode == TCH_FS_MODE)) { msg = msgb_dequeue(&l1s.tx_queue[L1S_CHAN_VOICE]); if(msg && msg->l3h) { tx_sent++; printf("rx_frames: %d tx_recv: %d tx_sent: %d\n", rx_frames, tx_recv, tx_sent); printf("l1s_tch_cmd: voice data = %s\n", hexdump(msg->l3h, 33)); } } } else { msg = NULL; } ------------------------------------------------------------------------------------------------ Many thanks Michael

5 7

Sniff Tool Development offer for c118
by Marten Christophe 28 Apr '11

28 Apr '11

Hello List, If any one on the list have time to take my assignment to develop tool to tune C118 to sniff it must be able to enter/input parameter with full signalling and voice support also tell me you development Fees and remuneration for this work. 1 ARFCN 2 TS ( time slot) 3 Hoping sequence I would like students or free time programmers to develop custom application for sniffing on c118 it should be cable for manually entries for (as option of command line) means the tool must be able to tune C118 in Mobile application mode( under full voice function) the desired parameter of user's choice 1 ARFCN 2 TS ( time slot) 3 Hoping sequence it is something we can tune C118 in full voice support to our own choice of AFRCN TS and hopping sequence we must be able to manually enter these parameter while MS is in mobile application mode( DSP in full voice support) I would like you to decide your remunerations /expanses/ development fees. http://bb.osmocom.org/trac/wiki/Sniffing Kind Regards, Maten On Mon, Apr 25, 2011 at 5:04 AM, Marten Christophe <technosabby(a)gmail.com> wrote: > Hello List, > > I would like students or free time programmers to develop custom > application for sniffing > > it should be cable for manually entries for (as option of command line) > means the tool must be able to tune C118 in Mobile application mode( > under full voice function) > the desired parameter of user's choice > > 1 ARFCN > 2 TS ( time slot) > 3 Hoping sequence > > it is something we can tune C131 in full voice support to our own > choice of AFRCN TS and hopping sequence we must be able to manually > enter these parameter while MS is in mobile application mode( DSP in > full voice support) > > I would like you to decide your remunerations /expanses/ development fees. > > http://bb.osmocom.org/trac/wiki/Sniffing > > Kind Regards, > Maten > > > ========== > ======== > Hi, > > > Since a lot of people are asking the same questions and there seems to > be a rush on the C123 on ebay I tought some clarification is needed. > > > Short version: > - The exact tools I used on stage are _not_ and will _not_ be > released (or sold ... several people asked ...) > - Any one willing to re-code them without any apriori knowledge of > GSM would most likely need months to read/understand both the > specifications and the way the code works. (That's thousands of page > of GSM spec and thousands of line of code) > - Osmocom-BB project is not designed to be a sniffer, it's a baseband > implementation, I just used part of it as a base. > > So basically, unless you are really interested in GSM and are willing > to dedicate time to understand it deeply and to contribute the various > projects, there is not much point in you buying phones, or hanging out > in the ml/irc or whatever ... > > > For those who are still reading and interested here's a little more detail: > > * The HLR query step: > -> Go watch the awesome 25C3 talk about it > > * The TMSI recovering step > - Won't be published > - If you know how paging works, you know what to do anyway and it's > trivial. Method is in the talk, > there is nothing to it. > > * The targeted sniffing application > - Won't be published either > - Some improvements to the layer23 app frame work will be done but > these are generic framework stuff, not app-specific > - Again, if you know how L2 works and have looked at several traces, > it's obvious what to do. > - The 'DSP' part of the sniffer is public for a while with a small > demo app (single phone and doesn't exploit the full potential of the > DSP patch) and it's perfectly sufficient to debug things on your o > wn controlled network. (This is basically what I showed at Deepsec 2010). > > * The tool to generate the input to Kraken > - Won't be published either > - Making the guesses is easy for anyone that knows what he's doing. > > * The improved Kraken > - No idea about it, see with Karsten / Sacha / Frank, I only got > access to it 1 hour or so before the talk :) > > * Conversion from burst to audio > - This was a hacked software mostly with airprobe code. > - The exact app will not be released but I'd like to see the > capability put in some clean library we > can re-use from airprobe and other application without having to > multiply the code each time. > - ... But since I'd like it to support AMR and viterbi softoutput > before that happens, it could take > some time. > - Anyone familiar with GSM, airprobe and C could re-hack the same > thing in an hour ... > > As you can see, everything you need to analyze your own network / your > own traffic, even at the burst level is already published and has been > for more than a month. > The other tools have been written only so that we could demonstrate > that what we _say_ is possible for about year, we can now do it > _practically_. It's apparently needed to get people attentions, > "theoretical" attacks are not enough to get the operators / gsma to > react. We'll see if that did it ... > > > A few advices that are always good: > > - Make sure to checkout the a5/1 project ML and airprobe project ML and try > to ask your questions in the proper mailing list as much as possible. > - Check the wiki and mailing list archives toroughly before asking questions. > > > Cheers, > > Sylvain Munaut > > > PS: I only posted on this list because it seems a lot of people were > pointed here while in fact airprobe would probably be more appropriate > to discuss attack scenarios and such, so make sure to answer / start > new discussion on the right list. >

7 13

[PATCH] get osmocom-bb in sync with libosmocore 0.2.0
by pablo＠gnumonks.org 27 Apr '11

27 Apr '11

From: Pablo Neira Ayuso <pablo(a)gnumonks.org> This patch gets osmocom-bb in sync with libosmocore 0.2.0. Basically, I invoked git-subtree to get a fresh libosmocore tree (currently 0.2.0) and change all the include paths to point to the new osmocom/[core|gsm] directories. You can get these changes from the pablo/libosmocore-updates branch. Please, merge it! Pablo Neira Ayuso (1): src: use new libosmogsm and include/osmocom/[gsm|core] path to headers

4 5

[PATCH] [layer23] fix sim path handling and msisdn path location
by Nico Golde 26 Apr '11

26 Apr '11

From: Nico Golde <nico(a)ngolde.de> --- src/host/layer23/src/common/sim.c | 2 +- src/host/layer23/src/mobile/subscriber.c | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/src/host/layer23/src/common/sim.c b/src/host/layer23/src/common/sim.c index 3ef3cf8..5e94c3e 100644 --- a/src/host/layer23/src/common/sim.c +++ b/src/host/layer23/src/common/sim.c @@ -688,7 +688,7 @@ static int sim_process_job(struct osmocom_ms *ms) /* check MF / DF */ i = 0; while (sh->path[i] && sim->path[i]) { - if (sh->path[i] != sh->path[i]) + if (sh->path[i] != sim->path[i]) break; i++; } diff --git a/src/host/layer23/src/mobile/subscriber.c b/src/host/layer23/src/mobile/subscriber.c index 3ba78f3..a16539a 100644 --- a/src/host/layer23/src/mobile/subscriber.c +++ b/src/host/layer23/src/mobile/subscriber.c @@ -492,7 +492,7 @@ static struct subscr_sim_file { { 1, { 0 }, 0x2fe2, subscr_sim_iccid }, { 1, { 0x7f20, 0 }, 0x6f07, subscr_sim_imsi }, { 1, { 0x7f20, 0 }, 0x6f7e, subscr_sim_loci }, - { 0, { 0x7f20, 0 }, 0x6f40, subscr_sim_msisdn }, + { 0, { 0x7f10, 0 }, 0x6f40, subscr_sim_msisdn }, { 0, { 0x7f20, 0 }, 0x6f20, subscr_sim_kc }, { 0, { 0x7f20, 0 }, 0x6f30, subscr_sim_plmnsel }, { 0, { 0x7f20, 0 }, 0x6f31, subscr_sim_hpplmn }, -- 1.7.4.4

1 0

R: running error with branch burst_ind
by screaming-pain＠libero.it 26 Apr '11

26 Apr '11

Hi, I'm having the same problem and as far as I've understood, you need a different serial or usb cableThe program is trying to set a high baud rate which is not supported by your cable.To the best of my understanding a FTDI usb to serial cable it's needed, because this supports higher baud rates. Loretta ----Messaggio originale---- Da: cnwutong(a)gmail.com Data: 25-apr-2011 6.01 A: <baseband-devel(a)lists.osmocom.org> Ogg: running error with branch burst_ind Hi all, Working with a C118 and everything was fine with the master branch, then switched to the burst_ind branch and complied successfully, when running: $ ./osmocon -p /dev/ttyUSB0 -m c123xor ../../target/firmware/board/compal_e88/layer1.compalram.bingot 1 bytes from modem, data looks like: 2f /got 1 bytes from modem, data looks like: 00 . got 5 bytes from modem, data looks like: 1b f6 02 00 41 ....Agot 1 bytes from modem, data looks like: 01 .got 1 bytes from modem, data looks like: 40 @Received PROMPT1 from phone, responding with CMD read_file(../../target/firmware/board/compal_e88/layer1.compalram.bin): file_size=48564, hdr_len=4, dnload_len=48571got 1 bytes from modem, data looks like: 1b .got 1 bytes from modem, data looks like: f6 . got 1 bytes from modem, data looks like: 02 .got 1 bytes from modem, data looks like: 00 .got 1 bytes from modem, data looks like: 41 Agot 1 bytes from modem, data looks like: 02 . got 1 bytes from modem, data looks like: 43 CReceived PROMPT2 from phone, starting downloadhandle_write(): 4096 bytes (4096/48571)handle_write(): 4096 bytes (8192/48571)handle_write(): 4096 bytes (12288/48571) handle_write(): 4096 bytes (16384/48571)handle_write(): 4096 bytes (20480/48571)handle_write(): 4096 bytes (24576/48571)handle_write(): 4096 bytes (28672/48571)handle_write(): 4096 bytes (32768/48571) handle_write(): 4096 bytes (36864/48571)handle_write(): 4096 bytes (40960/48571)handle_write(): 4096 bytes (45056/48571)handle_write(): 3515 bytes (48571/48571)handle_write(): finished got 1 bytes from modem, data looks like: 1b .got 1 bytes from modem, data looks like: f6 .got 1 bytes from modem, data looks like: 02 .got 1 bytes from modem, data looks like: 00 . got 1 bytes from modem, data looks like: 41 Agot 1 bytes from modem, data looks like: 03 .got 1 bytes from modem, data looks like: 42 BReceived DOWNLOAD ACK from phone, your code is running now! ioctl(TIOCSSERIAL): Invalid argument $ ./mobileCopyright (C) 2008-2010 ...Contributions by ... License GPLv2+: GNU GPL version 2 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it.There is NO WARRANTY, to the extent permitted by law. VTY available on port 4247.No Mobile Station defined, creating: MS '1' <000e> sim.c:1206 init SIM client<0005> gsm48_cc.c:61 init Call Control<0001> gsm48_rr.c:4944 init Radio Ressource process<0004> gsm48_mm.c:1220 init Mobility Management process <0004> gsm48_mm.c:971 Selecting PLMN SEARCH state, because no SIM.<0002> gsm322.c:3471 init PLMN process<0003> gsm322.c:3472 init Cell Selection process<0003> gsm322.c:3526 No stored BA list Mobile '1' initialized, please start phone now! then no reaction with the mobile application either rebooting the phone (press power bottom) or not, for layer23 application acts the same. tried to search for the message "ioctl(TIOCSSERIAL): Invalid argument" but failed to get any useful information. could anyone help and many thanks for your time and considerations! best regards, flaw

3 2

running error with branch burst_ind
by 吴彤 25 Apr '11

25 Apr '11

Hi all, Working with a C118 and everything was fine with the master branch, then switched to the burst_ind branch and complied successfully, when running: $ ./osmocon -p /dev/ttyUSB0 -m c123xor ../../target/firmware/board/compal_e88/layer1.compalram.bin got 1 bytes from modem, data looks like: 2f / got 1 bytes from modem, data looks like: 00 . got 5 bytes from modem, data looks like: 1b f6 02 00 41 ....A got 1 bytes from modem, data looks like: 01 . got 1 bytes from modem, data looks like: 40 @ Received PROMPT1 from phone, responding with CMD read_file(../../target/firmware/board/compal_e88/layer1.compalram.bin): file_size=48564, hdr_len=4, dnload_len=48571 got 1 bytes from modem, data looks like: 1b . got 1 bytes from modem, data looks like: f6 . got 1 bytes from modem, data looks like: 02 . got 1 bytes from modem, data looks like: 00 . got 1 bytes from modem, data looks like: 41 A got 1 bytes from modem, data looks like: 02 . got 1 bytes from modem, data looks like: 43 C Received PROMPT2 from phone, starting download handle_write(): 4096 bytes (4096/48571) handle_write(): 4096 bytes (8192/48571) handle_write(): 4096 bytes (12288/48571) handle_write(): 4096 bytes (16384/48571) handle_write(): 4096 bytes (20480/48571) handle_write(): 4096 bytes (24576/48571) handle_write(): 4096 bytes (28672/48571) handle_write(): 4096 bytes (32768/48571) handle_write(): 4096 bytes (36864/48571) handle_write(): 4096 bytes (40960/48571) handle_write(): 4096 bytes (45056/48571) handle_write(): 3515 bytes (48571/48571) handle_write(): finished got 1 bytes from modem, data looks like: 1b . got 1 bytes from modem, data looks like: f6 . got 1 bytes from modem, data looks like: 02 . got 1 bytes from modem, data looks like: 00 . got 1 bytes from modem, data looks like: 41 A got 1 bytes from modem, data looks like: 03 . got 1 bytes from modem, data looks like: 42 B Received DOWNLOAD ACK from phone, your code is running now! ioctl(TIOCSSERIAL): Invalid argument $ ./mobile Copyright (C) 2008-2010 ... Contributions by ... License GPLv2+: GNU GPL version 2 or later <http://gnu.org/licenses/gpl.html > This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. VTY available on port 4247. No Mobile Station defined, creating: MS '1' <000e> sim.c:1206 init SIM client <0005> gsm48_cc.c:61 init Call Control <0001> gsm48_rr.c:4944 init Radio Ressource process <0004> gsm48_mm.c:1220 init Mobility Management process <0004> gsm48_mm.c:971 Selecting PLMN SEARCH state, because no SIM. <0002> gsm322.c:3471 init PLMN process <0003> gsm322.c:3472 init Cell Selection process <0003> gsm322.c:3526 No stored BA list Mobile '1' initialized, please start phone now! then no reaction with the mobile application either rebooting the phone (press power bottom) or not, for layer23 application acts the same. tried to search for the message "ioctl(TIOCSSERIAL): Invalid argument" but failed to get any useful information. could anyone help and many thanks for your time and considerations! best regards, flaw

3 2

Osmocom + Freerunner compilation issue
by zredlined 25 Apr '11

25 Apr '11

I have been trying to compile the latest osmocom-bb build target binaries directly on my Freerunner, which is running Om2008.8. uname -a // Linux om-gta02 2.6.28-rc4 #1 PREEMPT Mon Mar 2 19:43:22 CET 2009 armv4tl unknown Unfortunately, I am getting an error during compilation in: directory // `/src/shared/libosmocore/build-target/src' GCC output: make[3]: Entering directory `/home/root/osmocom/src/shared/libosmocore/build-target/src' make: *** [shared/libosmocore/build-target/src/.libs/libosmocore.a] Error 2 > Making all in . > make[4]: Entering directory > `/home/root/osmocom/src/shared/libosmocore/build-target/src' > CC gsmtap_util.lo > In file included from ../../src/gsmtap_util.c:37: > /usr/include/netinet/in.h:365: error: expected declaration specifiers or > '...' before '(' token -sh: syntax error: "(" unexpected root@om-gta02 ~/osmocom/src $ /usr/include/netinet/in.h:365: error: expected ')' before '?' token -sh: /usr/include/netinet/in.h:365:: not found root@om-gta02 ~/osmocom/src $ /usr/include/netinet/in.h:366: error: expected declaration specifiers or '...' before '(' token -sh: /usr/include/netinet/in.h:366:: not found root@om-gta02 ~/osmocom/src $ /usr/include/netinet/in.h:366: error: expected ')' before '?' token -sh: /usr/include/netinet/in.h:366:: not found root@om-gta02 ~/osmocom/src $ /usr/include/netinet/in.h:368: error: expected declaration specifiers or '...' before '(' token -sh: /usr/include/netinet/in.h:368:: not found root@om-gta02 ~/osmocom/src $ /usr/include/netinet/in.h:368: error: expected ')' before '?' token -sh: /usr/include/netinet/in.h:368:: not found root@om-gta02 ~/osmocom/src $ /usr/include/netinet/in.h:370: error: expected declaration specifiers or '...' before '(' token -sh: /usr/include/netinet/in.h:370:: not found root@om-gta02 ~/osmocom/src $ /usr/include/netinet/in.h:370: error: expected ')' before '?' token -sh: /usr/include/netinet/in.h:370:: not found root@om-gta02 ~/osmocom/src $ ../../src/gsmtap_util.c: In function 'gsmtap_fd_cb': -sh: ../../src/gsmtap_util.c:: not found root@om-gta02 ~/osmocom/src $ ../../src/gsmtap_util.c:155: warning: implicit declaration of function 'perror' -sh: ../../src/gsmtap_util.c:155:: not found root@om-gta02 ~/osmocom/src $ make[4]: *** [gsmtap_util.lo] Error 1 A google search for "implicit declaration of function 'perror'" made it look like I am missing header declarations included in the "build-essential" packages, but this package does not exist for Om2008.8. I have included my config.log. Any ideas what I am missing? -Alex http://baseband-devel.722152.n3.nabble.com/file/n2851445/config.log config.log -- View this message in context: http://baseband-devel.722152.n3.nabble.com/Osmocom-Freerunner-compilation-i… Sent from the baseband-devel mailing list archive at Nabble.com.

4 5

Wavetek 4201s - GSM Test Set
by Luca Bongiorni 25 Apr '11

25 Apr '11

Hi all, i'm selling my Wavetek 4201s. Unfortunately some days ago i was upgrading the firmware and the power went down. Now it stucks at initializing process. http://tinyurl.com/3dnetqu As you can see was fully working and i used it to make tests with osmocomBB and airprobe. http://tinyurl.com/43exn2s http://tinyurl.com/3qlvz52 As i guess, is possible to repair the corrupted firmware through serial or an internal jtag, unfortunately i have no time to do it and i'm buying another one. I bought it, 3 months ago, fully calibrated and working. (payed 750 €). About the price i thought around 250 euro (because is only a software problem and on ebay is still around 1500 €). About the shipping… will be signed-for (from 4 to 7 days Worldwide), around 30 €. About the payment: Paypal (i'll value other ways, if suggested). What is included: - Wavetek 4201s - Power cable (EU) - Serial Cable - Coupler Antenna R&S CMD-z10 (see here: http://tinyurl.com/3fxf4t8 ) - Manual (IT) - Firmware upgrades by email If someone is interested, please contact me. Thank you for attention Cheers Luca Bongiorni P.S: I apologize for the spam, but i thought that here is the right place to find people with enough skills, time and few money to repair and use it, instead to leave him on the desk and accumulating dust.

1 0

Sniff Tool Development offer
by Marten Christophe 25 Apr '11

25 Apr '11

Hello List, I would like students or free time programmers to develop custom application for sniffing it should be cable for manually entries for (as option of command line) means the tool must be able to tune C131 in Mobile application mode( under full voice function) the desired parameter of user's choice 1 ARFCN 2 TS ( time slot) 3 Hoping sequence it is something we can tune C131 in full voice support to our own choice of AFRCN TS and hopping sequence we must be able to manually enter these parameter while MS is in mobile application mode( DSP in full voice support) I would like you to decide your remunerations /expanses/ development fees. http://bb.osmocom.org/trac/wiki/Sniffing Kind Regards, Maten ========== ======== Hi, Since a lot of people are asking the same questions and there seems to be a rush on the C123 on ebay I tought some clarification is needed. Short version: - The exact tools I used on stage are _not_ and will _not_ be released (or sold ... several people asked ...) - Any one willing to re-code them without any apriori knowledge of GSM would most likely need months to read/understand both the specifications and the way the code works. (That's thousands of page of GSM spec and thousands of line of code) - Osmocom-BB project is not designed to be a sniffer, it's a baseband implementation, I just used part of it as a base. So basically, unless you are really interested in GSM and are willing to dedicate time to understand it deeply and to contribute the various projects, there is not much point in you buying phones, or hanging out in the ml/irc or whatever ... For those who are still reading and interested here's a little more detail: * The HLR query step: -> Go watch the awesome 25C3 talk about it * The TMSI recovering step - Won't be published - If you know how paging works, you know what to do anyway and it's trivial. Method is in the talk, there is nothing to it. * The targeted sniffing application - Won't be published either - Some improvements to the layer23 app frame work will be done but these are generic framework stuff, not app-specific - Again, if you know how L2 works and have looked at several traces, it's obvious what to do. - The 'DSP' part of the sniffer is public for a while with a small demo app (single phone and doesn't exploit the full potential of the DSP patch) and it's perfectly sufficient to debug things on your o wn controlled network. (This is basically what I showed at Deepsec 2010). * The tool to generate the input to Kraken - Won't be published either - Making the guesses is easy for anyone that knows what he's doing. * The improved Kraken - No idea about it, see with Karsten / Sacha / Frank, I only got access to it 1 hour or so before the talk :) * Conversion from burst to audio - This was a hacked software mostly with airprobe code. - The exact app will not be released but I'd like to see the capability put in some clean library we can re-use from airprobe and other application without having to multiply the code each time. - ... But since I'd like it to support AMR and viterbi softoutput before that happens, it could take some time. - Anyone familiar with GSM, airprobe and C could re-hack the same thing in an hour ... As you can see, everything you need to analyze your own network / your own traffic, even at the burst level is already published and has been for more than a month. The other tools have been written only so that we could demonstrate that what we _say_ is possible for about year, we can now do it _practically_. It's apparently needed to get people attentions, "theoretical" attacks are not enough to get the operators / gsma to react. We'll see if that did it ... A few advices that are always good: - Make sure to checkout the a5/1 project ML and airprobe project ML and try to ask your questions in the proper mailing list as much as possible. - Check the wiki and mailing list archives toroughly before asking questions. Cheers, Sylvain Munaut PS: I only posted on this list because it seems a lot of people were pointed here while in fact airprobe would probably be more appropriate to discuss attack scenarios and such, so make sure to answer / start new discussion on the right list.

2 2

buzzer driver
by José Luis Pereira 24 Apr '11

24 Apr '11

Hi all, my name is Jose Pereira, and i'm very interested in helping you with some code! I've wrote the buzzer driver for calypso, not so sure if will help you of anything, but was just for experimenting :) Anyway, i send the patch in attachement. The interface can be simply #include <calypso/buzzer.h> buzzer_mode_pwt(1); buzzer_volume(40); buzzer_note(NOTE(NOTE_E,OCTAVE_5)); Please let me know what do you think of the code, and in what way i can further help. Best regards, -- José Pereira http://onaips.blogspot.com

2 1

Unable to dump traffic with wireshark using C139
by Benedikt Braunger 24 Apr '11

24 Apr '11

Hi, i launched following commands: 1) ./osmocon -p /dev/ttyUSB0 -m c140xor -c ../../target/firmware/board/compal_e86/layer1.highram.bin ../../target/firmware/board/compal_e86/chainload.compalram.bin http://pastebin.com/xcJTuNDF 2) ./mobile -i 127.0.0.1 http://pastebin.com/h3aPFgs1 3) telnet localhost 4247 http://pastebin.com/7nA7KbN8 mobile.cfg: http://pastebin.com/FBM6PCqq unfortunately wireshark 1.5+ devel) or tcpdump couldn't sniff any traffic on lo-interface. can anyone find a missconfiguration? any hint would be awesome! thank you :)

1 0

R: Channel sync error (problem with mobile application)
by screaming-pain＠libero.it 22 Apr '11

22 Apr '11

Hi everybody, I looked a bit more at the code and output of the mobile application, and it seems the problem is that the connection is always dropped because of channel sync failure. Sylvain suggested (to someone having a similar problem) to use the stick option, and actually after trying this, I observed a different behavior it seems the phone performed the identification and the authentication procedures and during a different trial the location update was performed. Can someone explain the stick option? Anyway, I still can't receive or make calls this is what usally happens when trying to make a call <0007> mnccms.c:534 Make call to 150 <0007> mnccms.c:150 support TCH/H also <0007> mnccms.c:174 support full rate v2 <0007> mnccms.c:178 support full rate v1 <0007> mnccms.c:187 support half rate v1 <0005> gsm48_cc.c:496 Sending MMCC_EST_REQ <0004> gsm48_mm.c:3568 (ms 1) Received 'MMCC_EST_REQ' event in state MM idle <0004> gsm48_mm.c:3571 -> substate normal service <0004> gsm48_mm.c:3573 -> callref 8, transaction_id 255 <0004> gsm48_mm.c:2873 Init MM Connection. <0004> gsm48_mm.c:1332 New MM Connection (proto 0x03 trans_id 255 ref 8) <0004> gsm48_mm.c:1291 (ref 8) new state IDLE -> CONN_PEND <0004> gsm48_mm.c:2650 CM SERVICE REQUEST (cause 9) <0004> gsm48_mm.c:2685 -> Using IMSI 234------------- <0001> gsm48_rr.c:4911 (ms 1) Message 'RR_EST_REQ' received in state idle <0001> gsm48_rr.c:4271 Not camping normally, rejecting! (cs->state = 7) <000d> gsm48_rr.c:4241 Establishing radio link not possible <0004> gsm48_mm.c:887 new state MM IDLE, normal service -> wait for RR connection (MM connection) <0004> gsm48_mm.c:3695 (ms 1) Received 'RR_REL_IND' from RR in state wait for RR connection (MM connection) <0004> gsm48_mm.c:1367 Release any MM Connection <0004> gsm48_mm.c:1348 Freeing MM Connection <0004> gsm48_mm.c:1291 (ref 8) new state CONN_PEND -> IDLE <0004> gsm48_mm.c:1055 We are in registered LAI as returning to MM IDLE <0004> gsm48_mm.c:892 new state wait for RR connection (MM connection) -> MM IDLE, normal service <0005> gsm48_cc.c:2122 (ms 1) Received 'MMCC_ERR_IND' in CC state MM_CONNECTION_PEND <0005> gsm48_cc.c:189 (ms 1 ti ff) Sending 'MNCC_REL_IND' to MNCC. <0007> mnccms.c:336 Call has been released (cause 21) Can someone help me with this? I do not understand why is not possible to establish the radio link, and does anyone know where I can find out what 'cause 21' means? Thanks, loretta

1 0

Re: eres de Spain?
by Manuel Borrego 20 Apr '11

20 Apr '11

Sip! Que tal? Pebsaba contactar con los españoles de la lista, pero no he tenido tiempo :P Enviado desde mi iPhone El 18/04/2011, a las 06:55, "Pedro Collado" <edrocoyote(a)yahoo.es> escribió: > por el nombre > >

1 0

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

baseband-devel