- baseband-devel - lists.osmocom.org

Re: Set fixed TMSI and Kc
by Вадим Яницкий 29 Feb '16

29 Feb '16

So, please provide full logs of both osmocon and mobile processes. С наилучшими пожеланиями, Яницкий Вадим.

1 0

Re: Set fixed TMSI and Kc
by Вадим Яницкий 29 Feb '16

29 Feb '16

Did you enabled TX support (CFLAGS += -DCONFIG_TX_ENABLE)? Also try to use an IMEI from existing MS, because sometimes PLMN can reject MSes with default IMEI. С наилучшими пожеланиями, Яницкий Вадим.

1 0

OsmoDevCon 2016 date poll
by Harald Welte 28 Feb '16

28 Feb '16

Dear all, IN-Berlin has confirmed the dates in April where we could book the venue. Can those eligible + interested in attending please quickly indicate their preference at http://doodle.com/poll/if263cpxieavsqiq ? Thanks! Disclaimer: OsmoDevCon is an invitation-only event for developers with proven history of contributing to any of the Osmocom projects. The fact that there is a public poll about the scheduling of the event and/or your participation in that poll does not mean a particular applicant is invited. Regards, Harald -- - Harald Welte <laforge(a)gnumonks.org> http://laforge.gnumonks.org/ ============================================================================ "Privacy in residential applications is a desirable marketing option."

1 3

Re: Calypso BTS (C140) and Osmo BTS
by Вадим Яницкий 24 Feb '16

24 Feb '16

Hi! > Can we still use osmocomBB phones (C140,C139..) with Osmo-BTS project? Yes. I use transceiver program from *jolly/testing* branch and > firmware in compal_86 ( trx.highram.bin ) from *sylvian/testing* branch, > all from osmocomBB. > > Stop doing this mix. The firmware from one branch you use incompatible with host software form another. Use one branch only! It looks like you have a new toolchain "gnu-arm-build.3.sh". The firmware images from this branches works better if it's compiled with older toolchain version. Try to use http://bb.osmocom.org/trac/attachment/wiki/GnuArmToolchain/gnu-arm-build.2.… or https://github.com/axilirator/gnu-arm-installer. I know that Calypso BTS support only one timeslot. > > Using two phones you will be able to serve two timeslots. Follow this guide I recently wrote: http://bb.osmocom.org/trac/wiki/Tutorials/CalypsoBTS http://openbsc.osmocom.org/trac/wiki/SDR_OsmoTRX_network_from_scratch is outdated. С наилучшими пожеланиями, Яницкий Вадим.

3 5

Re: Moving from trac to a single redmine
by Вадим Яницкий 24 Feb '16

24 Feb '16

Hi all! Moving all projects to a Redmine is a good way, I think. In connection with the event I would like to offer my help with post-processing some old pages (mostly OsmocomBB) and with improving the new wiki structure. So, my suggestions: - Create the main page that will describe all all of the child projects of Osmocom umbrella including recent news and plans. - Separate the libosmocore related pages from OsmocomBB into a new section named "Libraries", for example. - Separate both SIMTrace and softSIM into a new sections. It it would be nice to enable Strict-Transport-Security to avoid some traffic interception attempts. Also what about enabling SPF and DKIM for mailing lists? With best regards, Vadim Yanitskiy. 2016-02-19 4:46 GMT+06:00 <openbsc-request(a)lists.osmocom.org>: > Send OpenBSC mailing list submissions to > openbsc(a)lists.osmocom.org > > To subscribe or unsubscribe via the World Wide Web, visit > https://lists.osmocom.org/mailman/listinfo/openbsc > or, via email, send a message with subject or body 'help' to > openbsc-request(a)lists.osmocom.org > > You can reach the person managing the list at > openbsc-owner(a)lists.osmocom.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of OpenBSC digest..." > > > Today's Topics: > > 1. Re: autoreconf v2.69 with subdir-objects: ./configure creates > directory 'src/tests/\$(top_srcdir)' (Neels Hofmeyr) > 2. Re: hnb_cs_lu.msc (Neels Hofmeyr) > 3. Re: hnb_cs_lu.msc (Harald Welte) > 4. branches: daniel/gprs-iu + sysmocom/cscn = sysmocom/iu; > merging to master (Neels Hofmeyr) > 5. Re: Moving from trac to a single redmine (Harald Welte) > 6. Re: Moving from trac to a single redmine (Holger Freyther) > 7. Re: branches: daniel/gprs-iu + sysmocom/cscn = sysmocom/iu; > merging to master (Holger Freyther) > 8. sysmocom/iu: your commits from today (Neels Hofmeyr) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Wed, 17 Feb 2016 15:44:35 +0100 > From: Neels Hofmeyr <nhofmeyr(a)sysmocom.de> > To: Eric Blake <eblake(a)redhat.com> > Cc: bug-autoconf(a)gnu.org, openbsc(a)lists.osmocom.org > Subject: Re: autoreconf v2.69 with subdir-objects: ./configure creates > directory 'src/tests/\$(top_srcdir)' > Message-ID: <20160217144435.GD2106@dub6> > Content-Type: text/plain; charset="us-ascii" > > Eric, > > you've clarified just about all of my questions. > Many thanks for your reply! > > ~Neels > > > https://lists.gnu.org/archive/html/automake/2015-12/msg00001.html >

4 6

Route call from OpenBSC to real operator using osmocombb
by robert 23 Feb '16

23 Feb '16

Hi, Is it possible to route a call from a phone connected to openBSC (virtual BTS) to a real network using an osmocombb phone. In other words, to give a user within my own network the ability to call another phone connected to any other operator without routing the call through internet.

4 9

Calypso BTS (C140) and Osmo BTS
by Mirko Kovacevic 23 Feb '16

23 Feb '16

Hi, *Can we still use osmocomBB phones (C140,C139..) with Osmo-BTS project?* I use transceiver program from *jolly/testing* branch and firmware in compal_86 ( trx.highram.bin ) from *sylvian/testing* branch, all from osmocomBB. It is the only way to get phones start sync on particular arfcn. If I write this configuration in osmo-bts.cfg: *!! OsmoBTS () configuration saved from vty!!!log stderr logging color 0 logging timestamp 0 logging level all everything logging level rsl info logging level oml info logging level rll notice logging level rr notice logging level meas notice logging level pag info logging level l1c info logging level l1p info logging level dsp debug logging level abis notice!line vty no login!phy 0 instance 0bts 0 band 900 ipa unit-id 1801 0 oml remote-ip 127.0.0.1 trx 0 phy 0 instance 0* I can make launch *osmo-bts-trx* program. After launching *osmo-nitb*, Osmo-BTS is writing this log: <000b> trx_if.c:379 transceiver (phy0.0) rejected TRX command with response: 'RSP POWERON -22' <0001> bts.c:203 Shutting down BTS 0, Reason SIGINT and when shutdown timer is elapsed, Osmo-BTS exit writing this log: Shutdown timer expired. *What should I put into osmo-bts.cfg and openbsc.cfg to make thing work ?* I know that Calypso BTS support only one timeslot. Tried to modify openbsc.cfg to support only one TS, by putting: *timeslot 0 phys_chan_config CCCH+SDCCH4 timeslot 1 phys_chan_config NONE timeslot 2 phys_chan_config NONE timeslot 3 phys_chan_config NONE timeslot 4 phys_chan_config NONE timeslot 5 phys_chan_config NONE timeslot 6 phys_chan_config NONE timeslot 7 phys_chan_config NONE* But BSC is compling with this configuration. Thanks in advance -- *Puno pozdrava,Mirko Kovačević*

2 1

Re: Moving from trac to a single redmine
by Вадим Яницкий 22 Feb '16

22 Feb '16

Hi! > Then I believe the following SPF record should be provided for > lists.osmocom.org: > "v=spf1 a mx a:gandharva.secretlabs.de -all" What for "a:gandharva.secretlabs.de" is in this string? С наилучшими пожеланиями, Яницкий Вадим.

2 1

Progress of trac->redmine migration
by Holger Freyther 20 Feb '16

20 Feb '16

Hi all, I think we are close to the point of no return. All tickets and wikis have been imported. Please have a quick look if there is something obviously broken and if not I will proceed with post-processing and renaming tonight. kind regards holger

1 0

Re: http://bb.osmocom.org/trac/wiki/SIMReader page
by Вадим Яницкий 20 Feb '16

20 Feb '16

Hi! But when tried to follow this guide: > > http://bb.osmocom.org/trac/wiki/SIMReader > This guide is outdated. Currently the master branch can perform R/W operations with SIM without any problems. Just use it. С наилучшими пожеланиями, Яницкий Вадим.

1 0

Re: http://bb.osmocom.org/trac/wiki/SIMReader page
by robert.luben＠openmailbox.org 19 Feb '16

19 Feb '16

Hello, In this tutorial: http://bb.osmocom.org/trac/wiki/SIMReader Some parts for me were confusing like this one: "git clone git://git.osmocom.org/osmocom-bb.git cd osmocom-bb git checkout -b testing remotes/origin/sylvain/testing" and this one: diff --git a/src/target/firmware/Makefile b/src/target/firmware/Makefile (diff --git Does not work on Ubuntu 15.04) I tried this instead of aforementioned: mkdir osmocombb git clone git://git.osmocom.org/osmocom-bb.git master cd master/src make cd ~/osmocombb git clone git://git.osmocom.org/osmocom-bb.git -b sylvain/testing testing Then I uncommented line with #CFLAGS += -DCONFIG_TX_ENABLE inside osmocombb/master/src/target/firmware/Makefile cd master make And then followed rest of wiki guide. Any comment? Thanks. Robert.

1 0

http://bb.osmocom.org/trac/wiki/SIMReader page
by robert.luben＠openmailbox.org 19 Feb '16

19 Feb '16

Hello, I've installed osmocombb software on Ubuntu 15.04 according to this guide on wiki: http://bb.osmocom.org/trac/wiki/Software/GettingStarted No problem so far at this point, everything compiles, layer1 runs on Motorola C123 via cable etc. But when tried to follow this guide: http://bb.osmocom.org/trac/wiki/SIMReader I'm getting errors after running make inside src directory, and beside that I think that wiki guide is bit unclear here: diff --git a/src/target/firmware/Makefile b/src/target/firmware/Makefile On my Ubuntu 15.04 diff --get alone gives error 'diff: unrecognised option '--git'. I tried also via Vi to uncomment -# on -#CFLAGS += -DCONFIG_TX_ENABLE line inside /src/target/firmware/Makefile and compile but to no avail... Any help with this? Thanks in advance :) Robert.

1 0

Disable the vocoder in the DSP
by Andrey 17 Feb '16

17 Feb '16

Hello guys, I am looking for a way to disable the vocoder for voice calls, i.e., supply my own 260 bits every 20 ms to be sent in the uplink TCH instead of the output from the vocoder in the Calypso DSP, and on the downlink, receive the bits which would otherwise go into the vocoder. My question is: is it possible to do what I seek using the know-how of Calypso DSP black magic that has already been amassed by the OsmocomBB project? I am thinking of the following 3 possible starting points: 1. LCR integration: the mobile app can be configured to route voice call audio to the Linux host instead of the phone's earpiece and mic, right? At which point does it intercept the standard voice path? Does it intercept right where I want it, passing raw over-the-air TCH bits to the external host, such that Asterisk or whatever has to run the GSM codec, or is the intercept happening at the point of linear PCM samples, such that the uplink TCH bits are still generated by the DSP black box? 2. The burst_ind branch lets the Linux host see every burst that is received on the downlink, right? It would therefore include TCH bursts during voice calls, right? This way I should be able to capture all of the raw TCH bits on the downlink - but what about the uplink? 3. I've also read about the Calypso-as-BTS hack - way cool! In order to work, this hack must support both receiving and transmitting arbitrary bursts, right? If neither option 1 nor option 2 would work, do you guys think the Calypso-as-BTS implementation code would serve as a starting point for what I seek? I do need to run the OsmocomBB phone in the standard MS role, not in the BTS role, and I need to place voice calls on the network in the standard manner - but with TCH rerouted to my own source and sink for raw over-the-air bits. TIA for any guidance!

2 2

[PATCH] layer23/cell_log: Set default logfile to /dev/null
by Vadim Yanitskiy 30 Jan '16

30 Jan '16

When '/var/log/osmocom.log' does not exist the cell_log app can not start normally because it has no permissions to create a new file. Furthermore, logfile is optional now. --- src/host/layer23/src/misc/app_cell_log.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/host/layer23/src/misc/app_cell_log.c b/src/host/layer23/src/misc/app_cell_log.c index a7f42c3..5b7f7b4 100644 --- a/src/host/layer23/src/misc/app_cell_log.c +++ b/src/host/layer23/src/misc/app_cell_log.c @@ -43,7 +43,7 @@ extern void *l23_ctx; extern uint16_t basic_band_range[][2]; extern uint16_t (*band_range)[][2]; -char *logname = "/var/log/osmocom.log"; +char *logname = "/dev/null"; int RACH_MAX = 2; int _scan_work(struct osmocom_ms *ms) -- 1.9.1

1 0

[PATCH] Enable address sanitizer for tests.
by suraev＠alumni.ntnu.no 20 Jan '16

20 Jan '16

From: Max <msuraev(a)sysmocom.de> Some tests are leaky which is ok since it's one-shot programs anyway. For them mem. leak sanitizer is explicitly disabled via env. variables. Sponsored-by: On-Waves ehf --- tests/Makefile.am | 4 ++-- tests/testsuite.at | 10 +++++----- 2 files changed, 7 insertions(+), 7 deletions(-) diff --git a/tests/Makefile.am b/tests/Makefile.am index a4a6b2e..082f449 100644 --- a/tests/Makefile.am +++ b/tests/Makefile.am @@ -1,6 +1,6 @@ AM_CPPFLAGS = -I$(top_srcdir)/include -I$(top_builddir)/include -AM_CFLAGS = -Wall $(TALLOC_CFLAGS) -AM_LDFLAGS = $(TALLOC_LIBS) +AM_CFLAGS = -Wall $(TALLOC_CFLAGS) -ggdb3 -Og -fsanitize=address -fno-omit-frame-pointer +AM_LDFLAGS = $(TALLOC_LIBS) -fsanitize=address check_PROGRAMS = timer/timer_test sms/sms_test ussd/ussd_test \ smscb/smscb_test bits/bitrev_test a5/a5_test \ diff --git a/tests/testsuite.at b/tests/testsuite.at index 9cda1de..32defa3 100644 --- a/tests/testsuite.at +++ b/tests/testsuite.at @@ -1,6 +1,6 @@ AT_INIT AT_BANNER([Regression tests.]) - +AT_COLOR_TESTS # todo.. create one macro for it AT_SETUP([a5]) @@ -44,7 +44,7 @@ AT_SETUP([msgfile]) AT_KEYWORDS([msgfile]) cp $abs_srcdir/msgfile/msgconfig.cfg . cat $abs_srcdir/msgfile/msgfile_test.ok > expout -AT_CHECK([$abs_top_builddir/tests/msgfile/msgfile_test], [0], [expout]) +AT_CHECK([ASAN_OPTIONS="detect_leaks=0" $abs_top_builddir/tests/msgfile/msgfile_test], [0], [expout]) AT_CLEANUP endif @@ -81,13 +81,13 @@ AT_CLEANUP AT_SETUP([lapd]) AT_KEYWORDS([lapd]) cat $abs_srcdir/lapd/lapd_test.ok > expout -AT_CHECK([$abs_top_builddir/tests/lapd/lapd_test], [0], [expout], [ignore]) +AT_CHECK([ASAN_OPTIONS="detect_leaks=0" $abs_top_builddir/tests/lapd/lapd_test], [0], [expout], [ignore]) AT_CLEANUP AT_SETUP([gsm0808]) AT_KEYWORDS([gsm0808]) cat $abs_srcdir/gsm0808/gsm0808_test.ok > expout -AT_CHECK([$abs_top_builddir/tests/gsm0808/gsm0808_test], [0], [expout], [ignore]) +AT_CHECK([ASAN_OPTIONS="detect_leaks=0" $abs_top_builddir/tests/gsm0808/gsm0808_test], [0], [expout], [ignore]) AT_CLEANUP AT_SETUP([gsm0408]) @@ -164,7 +164,7 @@ AT_SETUP([bssgp-fc]) AT_KEYWORDS([bssgp-fc]) cat $abs_srcdir/gb/bssgp_fc_tests.ok > expout cat $abs_srcdir/gb/bssgp_fc_tests.err > experr -AT_CHECK([$abs_top_srcdir/tests/gb/bssgp_fc_tests.sh $abs_top_builddir/tests/gb], [0], [expout], [experr]) +AT_CHECK([ASAN_OPTIONS="detect_leaks=0" $abs_top_srcdir/tests/gb/bssgp_fc_tests.sh $abs_top_builddir/tests/gb], [0], [expout], [experr]) AT_CLEANUP AT_SETUP([timer]) -- 2.5.0

1 0

[PATCH] Extend bitvec.
by suraev＠alumni.ntnu.no 19 Jan '16

19 Jan '16

From: Max <msuraev(a)sysmocom.de> Add functions for shifting, filling, printing. Add corresponding tests. Fix interface to use unsigned int where appropriate. Add missing gitignore entries. Sponsored-by: On-Waves ehf --- .gitignore | 3 + include/osmocom/core/bitvec.h | 19 ++++-- src/bitvec.c | 140 +++++++++++++++++++++++++++++++++++++---- tests/bitvec/bitvec_test.c | 143 +++++++++++++++++++++++++++++++++++++++++- tests/bitvec/bitvec_test.ok | 119 +++++++++++++++++++++++++++++++++++ 5 files changed, 406 insertions(+), 18 deletions(-) diff --git a/.gitignore b/.gitignore index 598f88a..955634e 100644 --- a/.gitignore +++ b/.gitignore @@ -81,6 +81,9 @@ tests/strrb/strrb_test tests/vty/vty_test tests/gb/gprs_bssgp_test tests/smscb/gsm0341_test +tests/bitvec/bitvec_test +tests/gprs/gprs_test +tests/msgb/msgb_test utils/osmo-arfcn utils/osmo-auc-gen diff --git a/include/osmocom/core/bitvec.h b/include/osmocom/core/bitvec.h index 89eb784..9808671 100644 --- a/include/osmocom/core/bitvec.h +++ b/include/osmocom/core/bitvec.h @@ -3,6 +3,7 @@ /* bit vector utility routines */ /* (C) 2009 by Harald Welte <laforge(a)gnumonks.org> + * (C) 2015 by Sysmocom s.f.m.c. GmbH * * All Rights Reserved * @@ -39,6 +40,7 @@ */ #include <stdint.h> +#include <stdbool.h> /*! \brief A single GSM bit * @@ -66,12 +68,19 @@ int bitvec_set_bit_pos(struct bitvec *bv, unsigned int bitnum, enum bit_value bit); int bitvec_set_bit(struct bitvec *bv, enum bit_value bit); int bitvec_get_bit_high(struct bitvec *bv); -int bitvec_set_bits(struct bitvec *bv, enum bit_value *bits, int count); -int bitvec_set_uint(struct bitvec *bv, unsigned int in, int count); -int bitvec_get_uint(struct bitvec *bv, int num_bits); +int bitvec_set_bits(struct bitvec *bv, enum bit_value *bits, unsigned int count); +int bitvec_set_uint(struct bitvec *bv, uint32_t in, unsigned int count); +int bitvec_get_uint(struct bitvec *bv, unsigned int num_bits); int bitvec_find_bit_pos(const struct bitvec *bv, unsigned int n, enum bit_value val); int bitvec_spare_padding(struct bitvec *bv, unsigned int up_to_bit); -int bitvec_get_bytes(struct bitvec *bv, uint8_t *bytes, int count); -int bitvec_set_bytes(struct bitvec *bv, const uint8_t *bytes, int count); +int bitvec_get_bytes(struct bitvec *bv, uint8_t *bytes, unsigned int count); +int bitvec_set_bytes(struct bitvec *bv, const uint8_t *bytes, unsigned int count); +int bitvec_fill(struct bitvec *bv, unsigned int num_bits, enum bit_value fill); +char bit_value_to_char(enum bit_value v); +void bitvec_to_string_r(const struct bitvec *bv, char *str); +void bitvec_zero(struct bitvec *bv); +unsigned bitvec_rl(const struct bitvec *bv, bool b); +void bitvec_shiftl(struct bitvec *bv, unsigned int n); +int16_t bitvec_get_int16_msb(const struct bitvec *bv, unsigned int num_bits); /*! @} */ diff --git a/src/bitvec.c b/src/bitvec.c index 726a768..df868c8 100644 --- a/src/bitvec.c +++ b/src/bitvec.c @@ -31,8 +31,11 @@ #include <errno.h> #include <stdint.h> +#include <stdio.h> #include <string.h> +#include <stdbool.h> +#include <osmocom/core/bits.h> #include <osmocom/core/bitvec.h> #define BITNUM_FROM_COMP(byte, bit) ((byte*8)+bit) @@ -190,7 +193,7 @@ int bitvec_get_bit_high(struct bitvec *bv) * \param[in] bits array of \ref bit_value * \param[in] count number of bits to set */ -int bitvec_set_bits(struct bitvec *bv, enum bit_value *bits, int count) +int bitvec_set_bits(struct bitvec *bv, enum bit_value *bits, unsigned int count) { int i, rc; @@ -204,7 +207,7 @@ int bitvec_set_bits(struct bitvec *bv, enum bit_value *bits, int count) } /*! \brief set multiple bits (based on numeric value) at current pos */ -int bitvec_set_uint(struct bitvec *bv, unsigned int ui, int num_bits) +int bitvec_set_uint(struct bitvec *bv, unsigned int ui, unsigned int num_bits) { int i, rc; @@ -220,8 +223,23 @@ int bitvec_set_uint(struct bitvec *bv, unsigned int ui, int num_bits) return 0; } +/*! \brief get multiple bits (num_bits) from beginning of vector (MSB side) */ +int16_t bitvec_get_int16_msb(const struct bitvec *bv, unsigned int num_bits) +{ + if (num_bits > 15 || bv->cur_bit < num_bits) return -EINVAL; + + if (num_bits < 9) { + return bv->data[0] >> (8 - num_bits); + } + + uint8_t tmp[2]; + memcpy(tmp, bv->data, 2); + uint16_t t = osmo_load16be(tmp); + return t >> (16 - num_bits); +} + /*! \brief get multiple bits (based on numeric value) from current pos */ -int bitvec_get_uint(struct bitvec *bv, int num_bits) +int bitvec_get_uint(struct bitvec *bv, unsigned int num_bits) { int i; unsigned int ui = 0; @@ -238,17 +256,26 @@ int bitvec_get_uint(struct bitvec *bv, int num_bits) return ui; } -/*! \brief pad all remaining bits up to num_bits */ -int bitvec_spare_padding(struct bitvec *bv, unsigned int up_to_bit) +/*! \brief fill num_bits with \fill starting from the current position + * returns 0 on success, negative otherwise (out of vector boundary) + */ +int bitvec_fill(struct bitvec *bv, unsigned int num_bits, enum bit_value fill) { - unsigned int i; - - for (i = bv->cur_bit; i <= up_to_bit; i++) - bitvec_set_bit(bv, L); + unsigned i, stop = bv->cur_bit + num_bits; + for (i = bv->cur_bit; i < stop; i++) + if (bitvec_set_bit(bv, fill) < 0) return -EINVAL; return 0; } +/*! \brief pad all remaining bits up to num_bits */ +int bitvec_spare_padding(struct bitvec *bv, unsigned int up_to_bit) +{ + int n = up_to_bit - bv->cur_bit + 1; + if (n < 1) return 0; + return bitvec_fill(bv, n, L); +} + /*! \brief find first bit set in bit vector */ int bitvec_find_bit_pos(const struct bitvec *bv, unsigned int n, enum bit_value val) @@ -269,7 +296,7 @@ int bitvec_find_bit_pos(const struct bitvec *bv, unsigned int n, * \param[in] bytes array * \param[in] count number of bytes to copy */ -int bitvec_get_bytes(struct bitvec *bv, uint8_t *bytes, int count) +int bitvec_get_bytes(struct bitvec *bv, uint8_t *bytes, unsigned int count) { int byte_offs = bytenum_from_bitnum(bv->cur_bit); int bit_offs = bv->cur_bit % 8; @@ -304,7 +331,7 @@ int bitvec_get_bytes(struct bitvec *bv, uint8_t *bytes, int count) * \param[in] bytes array * \param[in] count number of bytes to copy */ -int bitvec_set_bytes(struct bitvec *bv, const uint8_t *bytes, int count) +int bitvec_set_bytes(struct bitvec *bv, const uint8_t *bytes, unsigned int count) { int byte_offs = bytenum_from_bitnum(bv->cur_bit); int bit_offs = bv->cur_bit % 8; @@ -336,4 +363,95 @@ int bitvec_set_bytes(struct bitvec *bv, const uint8_t *bytes, int count) bv->cur_bit += count * 8; return 0; } + +/*! \brief convert enum to corresponding character */ +char bit_value_to_char(enum bit_value v) +{ + switch (v) { + case ZERO: return '0'; + case ONE: return '1'; + case L: return 'L'; + case H: return 'H'; + } + return 'X'; // make compiler happy +} + +/*! \brief prints bit vector to provided string + * It's caller's responcibility to ensure that we won't shoot him in the foot. + */ +void bitvec_to_string_r(const struct bitvec *bv, char *str) +{ + unsigned i, pos = 0; + char *cur = str; + for (i = 0; i < bv->cur_bit; i++) { + if (0 == i % 8) *cur++ = ' '; + *cur++ = bit_value_to_char(bitvec_get_bit_pos(bv, i)); + pos++; + } + *cur = 0; +} + +/* we assume that x have at least 1 non-b bit */ +inline unsigned _leading_bits(uint8_t x, bool b) +{ + if (b) { + if (x < 0x80) return 0; + if (x < 0xC0) return 1; + if (x < 0xE0) return 2; + if (x < 0xF0) return 3; + if (x < 0xF8) return 4; + if (x < 0xFC) return 5; + if (x < 0xFE) return 6; + } else { + if (x > 0x7F) return 0; + if (x > 0x3F) return 1; + if (x > 0x1F) return 2; + if (x > 0xF) return 3; + if (x > 7) return 4; + if (x > 3) return 5; + if (x > 1) return 6; + } + return 7; +} +/*! \brief force bit vector to all 0 and current bit to the beginnig of the vector */ +void bitvec_zero(struct bitvec *bv) +{ + bv->cur_bit = 0; + memset(bv->data, 0, bv->data_len); +} + +/*! \brief Return number (bits) of uninterrupted run of \b in \bv starting from the MSB */ +unsigned bitvec_rl(const struct bitvec *bv, bool b) +{ + unsigned i; + for (i = 0; i < (bv->cur_bit % 8 ? bv->cur_bit / 8 + 1 : bv->cur_bit / 8); i++) { + if ( (b ? 0xFF : 0) != bv->data[i]) return i * 8 + _leading_bits(bv->data[i], b); + } + + return bv->cur_bit; +} + +/*! \brief Shifts bitvec to the left, n MSB bits lost */ +void bitvec_shiftl(struct bitvec *bv, unsigned n) +{ + if (0 == n) return; + if (n >= bv->cur_bit) { + bitvec_zero(bv); + return; + } + + memmove(bv->data, bv->data + n / 8, bv->data_len - n / 8); + + uint8_t tmp[2]; + unsigned i; + for (i = 0; i < bv->data_len - 2; i++) { + uint16_t t = osmo_load16be(bv->data + i); + osmo_store16be(t << (n % 8), &tmp); + bv->data[i] = tmp[0]; + } + + bv->data[bv->data_len - 1] <<= (n % 8); + bv->cur_bit -= n; +} + /*! @} */ diff --git a/tests/bitvec/bitvec_test.c b/tests/bitvec/bitvec_test.c index 624e334..c31e5df 100644 --- a/tests/bitvec/bitvec_test.c +++ b/tests/bitvec/bitvec_test.c @@ -3,9 +3,82 @@ #include <stdlib.h> #include <stdint.h> #include <string.h> +#include <time.h> +#include <stdbool.h> +#include <errno.h> #include <osmocom/core/utils.h> #include <osmocom/core/bitvec.h> +#include <osmocom/core/bits.h> + +#define BIN_PATTERN "%d%d%d%d%d%d%d%d" +#define BIN(byte) \ + (byte & 0x80 ? 1 : 0), \ + (byte & 0x40 ? 1 : 0), \ + (byte & 0x20 ? 1 : 0), \ + (byte & 0x10 ? 1 : 0), \ + (byte & 0x08 ? 1 : 0), \ + (byte & 0x04 ? 1 : 0), \ + (byte & 0x02 ? 1 : 0), \ + (byte & 0x01 ? 1 : 0) + +static char lol[1024]; // we pollute this with printed vectors +static inline void test_rl(const struct bitvec *bv) +{ + bitvec_to_string_r(bv, lol); + printf("%s [%d] RL0=%d, RL1=%d\n", lol, bv->cur_bit, bitvec_rl(bv, false), bitvec_rl(bv, true)); +} + +static inline void test_shift(struct bitvec *bv, unsigned n) +{ + bitvec_to_string_r(bv, lol); + printf("%s << %d:\n", lol, n); + bitvec_shiftl(bv, n); + bitvec_to_string_r(bv, lol); + printf("%s\n", lol); +} + +static inline void test_get(struct bitvec *bv, unsigned n) +{ + bitvec_to_string_r(bv, lol); + printf("%s [%d]", lol, bv->cur_bit); + int16_t x = bitvec_get_int16_msb(bv, n); + uint8_t tmp[2]; + osmo_store16be(x, &tmp); + printf(" -> %d (%u bit) ["BIN_PATTERN" "BIN_PATTERN"]:\n", x, n, BIN(tmp[0]), BIN(tmp[1])); + bitvec_to_string_r(bv, lol); + printf("%s [%d]\n", lol, bv->cur_bit); +} + +static inline void test_fill(struct bitvec *bv, unsigned n, enum bit_value val) +{ + bitvec_to_string_r(bv, lol); + unsigned bvlen = bv->cur_bit; + int fi = bitvec_fill(bv, n, val); + printf("%c> FILL %s [%d] -%d-> [%d]:\n", bit_value_to_char(val), lol, bvlen, n, fi); + bitvec_to_string_r(bv, lol); + printf(" %s [%d]\n\n", lol, bv->cur_bit); +} + +static inline void test_spare(struct bitvec *bv, unsigned n) +{ + bitvec_to_string_r(bv, lol); + unsigned bvlen = bv->cur_bit; + int sp = bitvec_spare_padding(bv, n); + printf("%c> SPARE %s [%d] -%d-> [%d]:\n", bit_value_to_char(L), lol, bvlen, n, sp); + bitvec_to_string_r(bv, lol); + printf(" %s [%d]\n\n", lol, bv->cur_bit); +} + +static inline void test_set(struct bitvec *bv, enum bit_value bit) +{ + bitvec_to_string_r(bv, lol); + unsigned bvlen = bv->cur_bit; + int set = bitvec_set_bit(bv, bit); + printf("%c> SET %s [%d] ++> [%d]:\n", bit_value_to_char(bit), lol, bvlen, set); + bitvec_to_string_r(bv, lol); + printf(" %s [%d]\n\n", lol, bv->cur_bit); +} static void test_byte_ops() { @@ -33,7 +106,7 @@ static void test_byte_ops() rc = bitvec_set_uint(&bv, 0x7e, 8); OSMO_ASSERT(rc >= 0); - fprintf(stderr, "bitvec: %s\n", osmo_hexdump(bv.data, bv.data_len)); + printf("bitvec: %s\n", osmo_hexdump(bv.data, bv.data_len)); /* Read from bitvec */ memset(out, 0xff, sizeof(out)); @@ -45,7 +118,7 @@ static void test_byte_ops() rc = bitvec_get_uint(&bv, 8); OSMO_ASSERT(rc == 0x7e); - fprintf(stderr, "out: %s\n", osmo_hexdump(out, sizeof(out))); + printf("out: %s\n", osmo_hexdump(out, sizeof(out))); OSMO_ASSERT(out[0] == 0xff); OSMO_ASSERT(out[in_size+1] == 0xff); @@ -57,6 +130,72 @@ static void test_byte_ops() int main(int argc, char **argv) { + srand(time(NULL)); + + struct bitvec bv; + uint8_t i = 8, test[i]; + + memset(test, 0, i); + bv.data_len = i; + bv.data = test; + bv.cur_bit = 0; + + printf("test shifting...\n"); + + bitvec_set_uint(&bv, 0x0E, 7); + test_shift(&bv, 3); + test_shift(&bv, 17); + bitvec_set_uint(&bv, 0, 32); + bitvec_set_uint(&bv, 0x0A, 7); + test_shift(&bv, 24); + + printf("checking RL functions...\n"); + + bitvec_zero(&bv); + test_rl(&bv); + bitvec_set_uint(&bv, 0x000F, 32); + test_rl(&bv); + bitvec_shiftl(&bv, 18); + test_rl(&bv); + bitvec_set_uint(&bv, 0x0F, 8); + test_rl(&bv); + bitvec_zero(&bv); + bitvec_set_uint(&bv, 0xFF, 8); + test_rl(&bv); + bitvec_set_uint(&bv, 0xFE, 7); + test_rl(&bv); + bitvec_set_uint(&bv, 0, 17); + test_rl(&bv); + bitvec_shiftl(&bv, 18); + test_rl(&bv); + + printf("probing bit access...\n"); + + bitvec_zero(&bv); + bitvec_set_uint(&bv, 0x3747817, 32); + bitvec_shiftl(&bv, 10); + + test_get(&bv, 2); + test_get(&bv, 7); + test_get(&bv, 9); + test_get(&bv, 13); + test_get(&bv, 16); + test_get(&bv, 42); + + printf("feeling bit fills...\n"); + + test_set(&bv, ONE); + test_fill(&bv, 3, ZERO); + test_spare(&bv, 38); + test_spare(&bv, 43); + test_spare(&bv, 1); + test_spare(&bv, 7); + test_fill(&bv, 5, ONE); + test_fill(&bv, 3, L); + + printf("byte me...\n"); + test_byte_ops(); + return 0; } diff --git a/tests/bitvec/bitvec_test.ok b/tests/bitvec/bitvec_test.ok index 1f329af..38575f7 100644 --- a/tests/bitvec/bitvec_test.ok +++ b/tests/bitvec/bitvec_test.ok @@ -1,2 +1,121 @@ +test shifting... + 0001110 << 3: + 1110 + 1110 << 17: + + 00000000 00000000 00000000 00000000 0001010 << 24: + 00000000 0001010 +checking RL functions... + [0] RL0=0, RL1=0 + 00000000 00000000 00000000 00001111 [32] RL0=28, RL1=0 + 00000000 001111 [14] RL0=10, RL1=0 + 00000000 00111100 001111 [22] RL0=10, RL1=0 + 11111111 [8] RL0=0, RL1=8 + 11111111 1111110 [15] RL0=0, RL1=14 + 11111111 11111100 00000000 00000000 [32] RL0=0, RL1=14 + 00000000 000000 [14] RL0=14, RL1=0 +probing bit access... + 11010001 11100000 010111 [22] -> 3 (2 bit) [00000000 00000011]: + 11010001 11100000 010111 [22] + 11010001 11100000 010111 [22] -> 104 (7 bit) [00000000 01101000]: + 11010001 11100000 010111 [22] + 11010001 11100000 010111 [22] -> 419 (9 bit) [00000001 10100011]: + 11010001 11100000 010111 [22] + 11010001 11100000 010111 [22] -> 6716 (13 bit) [00011010 00111100]: + 11010001 11100000 010111 [22] + 11010001 11100000 010111 [22] -> -22 (16 bit) [11111111 11101010]: + 11010001 11100000 010111 [22] + 11010001 11100000 010111 [22] -> -22 (42 bit) [11111111 11101010]: + 11010001 11100000 010111 [22] +feeling bit fills... +1> SET 11010001 11100000 010111 [22] ++> [0]: + 11010001 11100000 0101111 [23] + +0> FILL 11010001 11100000 0101111 [23] -3-> [0]: + 11010001 11100000 01011110 00 [26] + +L> SPARE 11010001 11100000 01011110 00 [26] -38-> [0]: + 11010001 11100000 01011110 00101011 0010101 [39] + +L> SPARE 11010001 11100000 01011110 00101011 0010101 [39] -43-> [0]: + 11010001 11100000 01011110 00101011 00101011 0010 [44] + +L> SPARE 11010001 11100000 01011110 00101011 00101011 0010 [44] -1-> [0]: + 11010001 11100000 01011110 00101011 00101011 0010 [44] + +L> SPARE 11010001 11100000 01011110 00101011 00101011 0010 [44] -7-> [0]: + 11010001 11100000 01011110 00101011 00101011 0010 [44] + +1> FILL 11010001 11100000 01011110 00101011 00101011 0010 [44] -5-> [0]: + 11010001 11100000 01011110 00101011 00101011 00101111 1 [49] + +L> FILL 11010001 11100000 01011110 00101011 00101011 00101111 1 [49] -3-> [0]: + 11010001 11100000 01011110 00101011 00101011 00101111 1010 [52] + +byte me... === start test_byte_ops === +bitvec: 7e 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 7e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 +out: ff 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a ff +bitvec: 3f 20 a1 21 a2 22 a3 23 a4 24 a5 25 a6 26 a7 27 a8 28 a9 29 aa 2a ab 2b ac 2c ad 3f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 +out: ff 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a ff +bitvec: 1f 90 50 90 d1 11 51 91 d2 12 52 92 d3 13 53 93 d4 14 54 94 d5 15 55 95 d6 16 56 9f 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 +out: ff 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a ff +bitvec: 0f c8 28 48 68 88 a8 c8 e9 09 29 49 69 89 a9 c9 ea 0a 2a 4a 6a 8a aa ca eb 0b 2b 4f c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 +out: ff 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a ff +bitvec: 07 e4 14 24 34 44 54 64 74 84 94 a4 b4 c4 d4 e4 f5 05 15 25 35 45 55 65 75 85 95 a7 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 +out: ff 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a ff +bitvec: 03 f2 0a 12 1a 22 2a 32 3a 42 4a 52 5a 62 6a 72 7a 82 8a 92 9a a2 aa b2 ba c2 ca d3 f0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 +out: ff 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a ff +bitvec: 01 f9 05 09 0d 11 15 19 1d 21 25 29 2d 31 35 39 3d 41 45 49 4d 51 55 59 5d 61 65 69 f8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 +out: ff 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a ff +bitvec: 00 fc 82 84 86 88 8a 8c 8e 90 92 94 96 98 9a 9c 9e a0 a2 a4 a6 a8 aa ac ae b0 b2 b4 fc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 +out: ff 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a ff +bitvec: 00 7e 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 7e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 +out: ff 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a ff +bitvec: 00 3f 20 a1 21 a2 22 a3 23 a4 24 a5 25 a6 26 a7 27 a8 28 a9 29 aa 2a ab 2b ac 2c ad 3f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 +out: ff 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a ff +bitvec: 00 1f 90 50 90 d1 11 51 91 d2 12 52 92 d3 13 53 93 d4 14 54 94 d5 15 55 95 d6 16 56 9f 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 +out: ff 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a ff +bitvec: 00 0f c8 28 48 68 88 a8 c8 e9 09 29 49 69 89 a9 c9 ea 0a 2a 4a 6a 8a aa ca eb 0b 2b 4f c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 +out: ff 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a ff +bitvec: 00 07 e4 14 24 34 44 54 64 74 84 94 a4 b4 c4 d4 e4 f5 05 15 25 35 45 55 65 75 85 95 a7 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 +out: ff 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a ff +bitvec: 00 03 f2 0a 12 1a 22 2a 32 3a 42 4a 52 5a 62 6a 72 7a 82 8a 92 9a a2 aa b2 ba c2 ca d3 f0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 +out: ff 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a ff +bitvec: 00 01 f9 05 09 0d 11 15 19 1d 21 25 29 2d 31 35 39 3d 41 45 49 4d 51 55 59 5d 61 65 69 f8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 +out: ff 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a ff +bitvec: 00 00 fc 82 84 86 88 8a 8c 8e 90 92 94 96 98 9a 9c 9e a0 a2 a4 a6 a8 aa ac ae b0 b2 b4 fc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 +out: ff 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a ff +bitvec: 00 00 7e 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 7e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 +out: ff 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a ff +bitvec: 00 00 3f 20 a1 21 a2 22 a3 23 a4 24 a5 25 a6 26 a7 27 a8 28 a9 29 aa 2a ab 2b ac 2c ad 3f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 +out: ff 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a ff +bitvec: 00 00 1f 90 50 90 d1 11 51 91 d2 12 52 92 d3 13 53 93 d4 14 54 94 d5 15 55 95 d6 16 56 9f 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 +out: ff 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a ff +bitvec: 00 00 0f c8 28 48 68 88 a8 c8 e9 09 29 49 69 89 a9 c9 ea 0a 2a 4a 6a 8a aa ca eb 0b 2b 4f c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 +out: ff 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a ff +bitvec: 00 00 07 e4 14 24 34 44 54 64 74 84 94 a4 b4 c4 d4 e4 f5 05 15 25 35 45 55 65 75 85 95 a7 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 +out: ff 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a ff +bitvec: 00 00 03 f2 0a 12 1a 22 2a 32 3a 42 4a 52 5a 62 6a 72 7a 82 8a 92 9a a2 aa b2 ba c2 ca d3 f0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 +out: ff 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a ff +bitvec: 00 00 01 f9 05 09 0d 11 15 19 1d 21 25 29 2d 31 35 39 3d 41 45 49 4d 51 55 59 5d 61 65 69 f8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 +out: ff 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a ff +bitvec: 00 00 00 fc 82 84 86 88 8a 8c 8e 90 92 94 96 98 9a 9c 9e a0 a2 a4 a6 a8 aa ac ae b0 b2 b4 fc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 +out: ff 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a ff +bitvec: 00 00 00 7e 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 7e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 +out: ff 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a ff +bitvec: 00 00 00 3f 20 a1 21 a2 22 a3 23 a4 24 a5 25 a6 26 a7 27 a8 28 a9 29 aa 2a ab 2b ac 2c ad 3f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 +out: ff 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a ff +bitvec: 00 00 00 1f 90 50 90 d1 11 51 91 d2 12 52 92 d3 13 53 93 d4 14 54 94 d5 15 55 95 d6 16 56 9f 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 +out: ff 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a ff +bitvec: 00 00 00 0f c8 28 48 68 88 a8 c8 e9 09 29 49 69 89 a9 c9 ea 0a 2a 4a 6a 8a aa ca eb 0b 2b 4f c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 +out: ff 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a ff +bitvec: 00 00 00 07 e4 14 24 34 44 54 64 74 84 94 a4 b4 c4 d4 e4 f5 05 15 25 35 45 55 65 75 85 95 a7 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 +out: ff 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a ff +bitvec: 00 00 00 03 f2 0a 12 1a 22 2a 32 3a 42 4a 52 5a 62 6a 72 7a 82 8a 92 9a a2 aa b2 ba c2 ca d3 f0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 +out: ff 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a ff +bitvec: 00 00 00 01 f9 05 09 0d 11 15 19 1d 21 25 29 2d 31 35 39 3d 41 45 49 4d 51 55 59 5d 61 65 69 f8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 +out: ff 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a ff +bitvec: 00 00 00 00 fc 82 84 86 88 8a 8c 8e 90 92 94 96 98 9a 9c 9e a0 a2 a4 a6 a8 aa ac ae b0 b2 b4 fc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 +out: ff 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a ff === end test_byte_ops === -- 2.5.0

2 1

[PATCH] fix failed .deb build due to failing bssgp test
by Max 18 Jan '16

18 Jan '16

Signed-off-by: Max <max.suraev(a)fairwaves.co> --- tests/Makefile.am | 1 + tests/gb/gprs_bssgp_test.c | 20 +------------------- 2 files changed, 2 insertions(+), 19 deletions(-) diff --git a/tests/Makefile.am b/tests/Makefile.am index 6f76e5a..a739ab9 100644 --- a/tests/Makefile.am +++ b/tests/Makefile.am @@ -69,6 +69,7 @@ gb_bssgp_fc_test_LDADD = $(top_builddir)/src/libosmocore.la $(top_builddir)/src/ gb_gprs_bssgp_test_SOURCES = gb/gprs_bssgp_test.c gb_gprs_bssgp_test_LDADD = $(top_builddir)/src/libosmocore.la $(top_builddir)/src/gb/libosmogb.la $(LIBRARY_DL) +gb_gprs_bssgp_test_LDFLAGS = -static -Wl,--wrap=gprs_ns_sendmsg gb_gprs_ns_test_SOURCES = gb/gprs_ns_test.c gb_gprs_ns_test_LDADD = $(top_builddir)/src/libosmocore.la $(top_builddir)/src/gb/libosmogb.la $(LIBRARY_DL) diff --git a/tests/gb/gprs_bssgp_test.c b/tests/gb/gprs_bssgp_test.c index 14ba4d1..4fb24df 100644 --- a/tests/gb/gprs_bssgp_test.c +++ b/tests/gb/gprs_bssgp_test.c @@ -34,24 +34,6 @@ static struct osmo_prim_hdr last_oph = {0}; /* override */ -ssize_t sendto(int sockfd, const void *buf, size_t len, int flags, - const struct sockaddr *dest_addr, socklen_t addrlen) -{ - typedef ssize_t (*sendto_t)(int, const void *, size_t, int, - const struct sockaddr *, socklen_t); - static sendto_t real_sendto = NULL; - uint32_t dest_host = htonl(((struct sockaddr_in *)dest_addr)->sin_addr.s_addr); - - if (!real_sendto) - real_sendto = dlsym(RTLD_NEXT, "sendto"); - - fprintf(stderr, "MESSAGE to 0x%08x, msg length %d\n%s\n", - dest_host, len, osmo_hexdump(buf, len)); - - return len; -} - -/* override */ int gprs_ns_callback(enum gprs_ns_evt event, struct gprs_nsvc *nsvc, struct msgb *msg, uint16_t bvci) { @@ -64,7 +46,7 @@ int gprs_ns_callback(enum gprs_ns_evt event, struct gprs_nsvc *nsvc, struct msgb *last_ns_tx_msg = NULL; /* override */ -int gprs_ns_sendmsg(struct gprs_ns_inst *nsi, struct msgb *msg) +int __wrap_gprs_ns_sendmsg(struct gprs_ns_inst *nsi, struct msgb *msg) { msgb_free(last_ns_tx_msg); last_ns_tx_msg = msg; -- 2.1.4

3 3

[PATCH] Fix and expand bitvec interface.
by suraev＠alumni.ntnu.no 14 Jan '16

14 Jan '16

From: Max <msuraev(a)sysmocom.de> Fix all bit counters to take unsigned value only. Add functions for shifting and run length detection. Add tests and pretty-print function. Sponsored-by: On-Waves ehf Signed-off-by: Max <msuraev(a)sysmocom.de> --- .gitignore | 1 + include/osmocom/core/bitvec.h | 11 ++++-- src/bitvec.c | 89 +++++++++++++++++++++++++++++++++++++++++-- tests/Makefile.am | 10 +++-- tests/bits/bitvec_test.c | 43 +++++++++++++++++++++ tests/bits/bitvec_test.ok | 14 +++++++ tests/testsuite.at | 6 +++ 7 files changed, 165 insertions(+), 9 deletions(-) create mode 100644 tests/bits/bitvec_test.c create mode 100644 tests/bits/bitvec_test.ok diff --git a/.gitignore b/.gitignore index 598f88a..25c9d97 100644 --- a/.gitignore +++ b/.gitignore @@ -64,6 +64,7 @@ tests/msgfile/msgfile_test tests/ussd/ussd_test tests/smscb/smscb_test tests/bits/bitrev_test +tests/bits/bitvec_test tests/a5/a5_test tests/comp128/comp128_test tests/auth/milenage_test diff --git a/include/osmocom/core/bitvec.h b/include/osmocom/core/bitvec.h index 62e2e7b..3f7f166 100644 --- a/include/osmocom/core/bitvec.h +++ b/include/osmocom/core/bitvec.h @@ -31,6 +31,7 @@ */ #include <stdint.h> +#include <stdbool.h> /*! \brief A single GSM bit * @@ -58,10 +59,14 @@ int bitvec_set_bit_pos(struct bitvec *bv, unsigned int bitnum, enum bit_value bit); int bitvec_set_bit(struct bitvec *bv, enum bit_value bit); int bitvec_get_bit_high(struct bitvec *bv); -int bitvec_set_bits(struct bitvec *bv, enum bit_value *bits, int count); -int bitvec_set_uint(struct bitvec *bv, unsigned int in, int count); -int bitvec_get_uint(struct bitvec *bv, int num_bits); +int bitvec_set_bits(struct bitvec *bv, enum bit_value *bits, unsigned count); +int bitvec_set_uint(struct bitvec *bv, unsigned int in, unsigned count); +int bitvec_get_uint(struct bitvec *bv, unsigned num_bits); int bitvec_find_bit_pos(const struct bitvec *bv, unsigned int n, enum bit_value val); int bitvec_spare_padding(struct bitvec *bv, unsigned int up_to_bit); +void bitvec_print(struct bitvec *bv); +void bitvec_zero(struct bitvec *bv); +unsigned bitvec_rl(struct bitvec *bv, bool b); +void bitvec_shiftl(struct bitvec *bv, unsigned n); /*! @} */ diff --git a/src/bitvec.c b/src/bitvec.c index 8da5a48..c791926 100644 --- a/src/bitvec.c +++ b/src/bitvec.c @@ -30,7 +30,11 @@ #include <errno.h> #include <stdint.h> +#include <stdio.h> +#include <string.h> +#include <stdbool.h> +#include <osmocom/core/bits.h> #include <osmocom/core/bitvec.h> #define BITNUM_FROM_COMP(byte, bit) ((byte*8)+bit) @@ -188,7 +192,7 @@ int bitvec_get_bit_high(struct bitvec *bv) * \param[in] bits array of \ref bit_value * \param[in] count number of bits to set */ -int bitvec_set_bits(struct bitvec *bv, enum bit_value *bits, int count) +int bitvec_set_bits(struct bitvec *bv, enum bit_value *bits, unsigned count) { int i, rc; @@ -202,7 +206,7 @@ int bitvec_set_bits(struct bitvec *bv, enum bit_value *bits, int count) } /*! \brief set multiple bits (based on numeric value) at current pos */ -int bitvec_set_uint(struct bitvec *bv, unsigned int ui, int num_bits) +int bitvec_set_uint(struct bitvec *bv, unsigned int ui, unsigned num_bits) { int i, rc; @@ -219,7 +223,7 @@ int bitvec_set_uint(struct bitvec *bv, unsigned int ui, int num_bits) } /*! \brief get multiple bits (based on numeric value) from current pos */ -int bitvec_get_uint(struct bitvec *bv, int num_bits) +int bitvec_get_uint(struct bitvec *bv, unsigned num_bits) { int i; unsigned int ui = 0; @@ -261,4 +265,83 @@ int bitvec_find_bit_pos(const struct bitvec *bv, unsigned int n, return -1; } +/*! \brief prints bit vector to stdout */ +void bitvec_print(struct bitvec *bv) +{ + unsigned i; + for (i = 0; i < bv->cur_bit; i++) { + if (0 == i % 8) printf(" "); + switch (bitvec_get_bit_pos(bv, i)) { + case ZERO: printf("0"); break; + case ONE: printf("1"); break; + case L: printf("L"); break; + case H: printf("H"); break; + } + } +} + +/* we assume that x have at least 1 non-b bit */ +inline unsigned _leading_bits(uint8_t x, bool b) +{ + if (b) { + if (x < 0x80) return 0; + if (x < 0xC0) return 1; + if (x < 0xE0) return 2; + if (x < 0xF0) return 3; + if (x < 0xF8) return 4; + if (x < 0xFC) return 5; + if (x < 0xFE) return 6; + } else { + if (x > 0x7F) return 0; + if (x > 0x3F) return 1; + if (x > 0x1F) return 2; + if (x > 0xF) return 3; + if (x > 7) return 4; + if (x > 3) return 5; + if (x > 1) return 6; + } + return 7; +} + +/*! \brief Return number (bits) of uninterrupted run of \b in \bv starting from the MSB */ +unsigned bitvec_rl(struct bitvec *bv, bool b) +{ + unsigned i; + for (i = 0; i < bv->data_len; i++) { + if ( (b ? 0xFF : 0) != bv->data[i]) return i * 8 + _leading_bits(bv->data[i], b); + } + + return bv->cur_bit; +} + +/*! \brief Shifts bitvec to the left, n MSB bits lost */ +void bitvec_shiftl(struct bitvec *bv, unsigned n) +{ + if (0 == n) return; + if (n >= bv->cur_bit) { + bitvec_zero(bv); + return; + } + + memmove(bv->data, bv->data + n / 8, bv->data_len - n / 8); + + uint8_t tmp[2]; + unsigned i; + for (i = 0; i < bv->data_len - 2; i++) { + uint16_t t = osmo_load16be(bv->data + i); + osmo_store16be(t << (n % 8), &tmp); + bv->data[i] = tmp[0]; + } + + bv->data[bv->data_len - 1] <<= (n % 8); + bv->cur_bit -= n; +} + +/*! \brief force bit vector to all 0 and current bit to the beginnig of the vector */ +void bitvec_zero(struct bitvec *bv) +{ + bv->cur_bit = 0; + memset(bv->data, 0, bv->data_len); +} + /*! @} */ diff --git a/tests/Makefile.am b/tests/Makefile.am index 3dc9bd9..eaeda72 100644 --- a/tests/Makefile.am +++ b/tests/Makefile.am @@ -3,9 +3,9 @@ AM_CFLAGS = -Wall $(TALLOC_CFLAGS) AM_LDFLAGS = $(TALLOC_LIBS) check_PROGRAMS = timer/timer_test sms/sms_test ussd/ussd_test \ - smscb/smscb_test bits/bitrev_test a5/a5_test \ + smscb/smscb_test bits/bitrev_test bits/bitvec_test \ conv/conv_test auth/milenage_test lapd/lapd_test \ - gsm0808/gsm0808_test gsm0408/gsm0408_test \ + gsm0808/gsm0808_test gsm0408/gsm0408_test a5/a5_test \ gb/bssgp_fc_test gb/gprs_bssgp_test gb/gprs_ns_test \ kasumi/kasumi_test logging/logging_test fr/fr_test \ loggingrb/loggingrb_test strrb/strrb_test \ @@ -37,6 +37,9 @@ auth_milenage_test_LDADD = $(top_builddir)/src/libosmocore.la $(top_builddir)/sr bits_bitrev_test_SOURCES = bits/bitrev_test.c bits_bitrev_test_LDADD = $(top_builddir)/src/libosmocore.la +bits_bitvec_test_SOURCES = bits/bitvec_test.c +bits_bitvec_test_LDADD = $(top_builddir)/src/libosmocore.la + conv_conv_test_SOURCES = conv/conv_test.c conv_conv_test_LDADD = $(top_builddir)/src/libosmocore.la @@ -112,7 +115,8 @@ $(srcdir)/package.m4: $(top_srcdir)/configure.ac EXTRA_DIST = testsuite.at $(srcdir)/package.m4 $(TESTSUITE) \ timer/timer_test.ok sms/sms_test.ok ussd/ussd_test.ok \ - smscb/smscb_test.ok bits/bitrev_test.ok a5/a5_test.ok \ + bits/bitrev_test.ok bits/bitvec_test.ok \ + smscb/smscb_test.ok a5/a5_test.ok \ conv/conv_test.ok auth/milenage_test.ok \ lapd/lapd_test.ok gsm0408/gsm0408_test.ok \ gsm0808/gsm0808_test.ok gb/bssgp_fc_tests.err \ diff --git a/tests/bits/bitvec_test.c b/tests/bits/bitvec_test.c new file mode 100644 index 0000000..c53e011 --- /dev/null +++ b/tests/bits/bitvec_test.c @@ -0,0 +1,43 @@ +#include <inttypes.h> +#include <stdio.h> +#include <stdlib.h> +#include <stdint.h> +#include <string.h> +#include <time.h> +#include <stdbool.h> + +#include <osmocom/core/utils.h> +#include <osmocom/core/bits.h> +#include <osmocom/core/bitvec.h> + +int main(int argc, char **argv) +{ + srand(time(NULL)); + + struct bitvec bv; + uint8_t i = 8, test[i]; + + memset(test, 0, i); + bv.data_len = i; + bv.data = test; + bv.cur_bit = 0; + + printf("checking RL functions...\n"); + + bitvec_zero(&bv); bitvec_print(&bv); printf(" RL0=%d, RL1=%d\n", bitvec_rl(&bv, false), bitvec_rl(&bv, true)); + bitvec_set_uint(&bv, 0x000F, 32); bitvec_print(&bv); printf(" RL0=%d, RL1=%d\n", bitvec_rl(&bv, false), bitvec_rl(&bv, true)); + bitvec_shiftl(&bv, 18); bitvec_print(&bv); printf(" RL0=%d, RL1=%d\n", bitvec_rl(&bv, false), bitvec_rl(&bv, true)); + bitvec_set_uint(&bv, 0x0F, 8); bitvec_print(&bv); printf(" RL0=%d, RL1=%d\n", bitvec_rl(&bv, false), bitvec_rl(&bv, true)); + bitvec_zero(&bv); + bitvec_set_uint(&bv, 0xFF, 8); bitvec_print(&bv); printf(" RL0=%d, RL1=%d\n", bitvec_rl(&bv, false), bitvec_rl(&bv, true)); + bitvec_set_uint(&bv, 0xFE, 7); bitvec_print(&bv); printf(" RL0=%d, RL1=%d\n", bitvec_rl(&bv, false), bitvec_rl(&bv, true)); + + printf("test shifting...\n"); + + bitvec_set_uint(&bv, 0x0E, 7); bitvec_print(&bv); printf(" << 3:\n"); bitvec_shiftl(&bv, 3); bitvec_print(&bv); printf("\n"); + bitvec_print(&bv); printf(" << 17:\n"); bitvec_shiftl(&bv, 17); bitvec_print(&bv); printf("\n"); + bitvec_set_uint(&bv, 0, 32); bitvec_set_uint(&bv, 0x0A, 7); + bitvec_print(&bv); printf(" << 24:\n"); bitvec_shiftl(&bv, 24); bitvec_print(&bv); printf("\n"); + + return 0; +} diff --git a/tests/bits/bitvec_test.ok b/tests/bits/bitvec_test.ok new file mode 100644 index 0000000..e72ae34 --- /dev/null +++ b/tests/bits/bitvec_test.ok @@ -0,0 +1,14 @@ +checking RL functions... + RL0=0, RL1=0 + 00000000 00000000 00000000 00001111 RL0=28, RL1=0 + 00000000 001111 RL0=10, RL1=0 + 00000000 00111100 001111 RL0=10, RL1=0 + 11111111 RL0=0, RL1=8 + 11111111 1111110 RL0=0, RL1=14 +test shifting... + 11111111 11111100 001110 << 3: + 11111111 11100001 110 + 11111111 11100001 110 << 17: + 10 + 10000000 00000000 00000000 00000000 00000101 0 << 24: + 00000000 00000101 0 diff --git a/tests/testsuite.at b/tests/testsuite.at index a542798..84ae2c9 100644 --- a/tests/testsuite.at +++ b/tests/testsuite.at @@ -21,6 +21,12 @@ cat $abs_srcdir/bits/bitrev_test.ok > expout AT_CHECK([$abs_top_builddir/tests/bits/bitrev_test], [0], [expout]) AT_CLEANUP +AT_SETUP([bitvec]) +AT_KEYWORDS([bitvec]) +cat $abs_srcdir/bits/bitvec_test.ok > expout +AT_CHECK([$abs_top_builddir/tests/bits/bitvec_test], [0], [expout]) +AT_CLEANUP + AT_SETUP([conv]) AT_KEYWORDS([conv]) cat $abs_srcdir/conv/conv_test.ok > expout -- 2.5.0

3 3

dsp_extcode
by etienne . 10 Jan '16

10 Jan '16

Hello, In the sylvain/testing and jolly/testing branches of osmocom-bb, I don't see source code for dsp_extcode. Is a release planned ? Regards,

2 1

[PATCH 1/2] Fix for "Added runtime selection of gps device"
by Vadim Yanitskiy 10 Jan '16

10 Jan '16

From: Яницкий Ва дим <axilirator(a)gmail.com> The 'gps host HOST:PORT' line in the config file now is generated correctly. So that it is parsed correctly when loading the config on next startup. Also the gpsd port now is parsed as it should without a colon. --- src/host/layer23/src/mobile/vty_interface.c | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/src/host/layer23/src/mobile/vty_interface.c b/src/host/layer23/src/mobile/vty_interface.c index 5782a17..73aaa78 100644 --- a/src/host/layer23/src/mobile/vty_interface.c +++ b/src/host/layer23/src/mobile/vty_interface.c @@ -1075,7 +1075,7 @@ DEFUN(cfg_gps_host, cfg_gps_host_cmd, "gps host HOST:PORT", if (colon != NULL) { memcpy(g.gpsd_host, argv[0], colon - argv[0] - 1); g.gpsd_host[colon - argv[0]] = '\0'; - memcpy(g.gpsd_port, colon, strlen(colon)); + memcpy(g.gpsd_port, colon + 1, strlen(colon)); g.gpsd_port[strlen(colon)] = '\0'; } else { snprintf(g.gpsd_host, ARRAY_SIZE(g.gpsd_host), "%s", argv[0]); @@ -1499,8 +1499,7 @@ static int config_write(struct vty *vty) struct osmocom_ms *ms; #ifdef _HAVE_GPSD - vty_out(vty, "gpsd host %s%s", g.gpsd_host, VTY_NEWLINE); - vty_out(vty, "gpsd port %s%s", g.gpsd_port, VTY_NEWLINE); + vty_out(vty, "gps host %s:%s%s", g.gpsd_host, g.gpsd_port, VTY_NEWLINE); #endif vty_out(vty, "gps device %s%s", g.device, VTY_NEWLINE); if (g.baud) -- 1.9.1

1 1

[PATCH] Improved SAP interface integration
by Вадим Яницкий 04 Jan '16

04 Jan '16

This is final patch version. I did some tests and it seems works fine. One thing that I can't test is how SAP connection works because I have no working sap-server setup. If anyone have please test. Now the `sim sap MS_NAME` command just enables SAP connection and `sim remove MS_MANE` closes connection if it's active. What I have done: - Fixed GPSD configuration r/w errors; - Fixed sap_socket_path configuration r/w errors; - SAP interface starts only if it is configured as SIM source; - Now SAP interface is selectable as SIM source using the sim command in VTY. diff --git a/src/host/layer23/include/osmocom/bb/common/sap_interface.h b/src/host/layer23/include/osmocom/bb/common/sap_interface.h index bf19356..e4e64ce 100644 --- a/src/host/layer23/include/osmocom/bb/common/sap_interface.h +++ b/src/host/layer23/include/osmocom/bb/common/sap_interface.h @@ -11,6 +11,7 @@ int osmosap_sapsocket(struct osmocom_ms *ms, const char *path); int osmosap_init(struct osmocom_ms *ms); enum osmosap_state { + SAP_SOCKET_ERROR, SAP_NOT_CONNECTED, SAP_IDLE, SAP_CONNECTION_UNDER_NEGOTIATION, diff --git a/src/host/layer23/include/osmocom/bb/mobile/subscriber.h b/src/host/layer23/include/osmocom/bb/mobile/subscriber.h index 79a2ecc..ac785d4 100644 --- a/src/host/layer23/include/osmocom/bb/mobile/subscriber.h +++ b/src/host/layer23/include/osmocom/bb/mobile/subscriber.h @@ -23,7 +23,8 @@ struct gsm_sub_plmn_na { enum { GSM_SIM_TYPE_NONE = 0, GSM_SIM_TYPE_READER, - GSM_SIM_TYPE_TEST + GSM_SIM_TYPE_TEST, + GSM_SIM_TYPE_SAP }; struct gsm_subscriber { @@ -86,6 +87,8 @@ int gsm_subscr_init(struct osmocom_ms *ms); int gsm_subscr_exit(struct osmocom_ms *ms); int gsm_subscr_testcard(struct osmocom_ms *ms, uint16_t mcc, uint16_t mnc, uint16_t lac, uint32_t tmsi, uint8_t imsi_attached); +int gsm_subscr_sapcard(struct osmocom_ms *ms); +int gsm_subscr_remove_sapcard(struct osmocom_ms *ms); int gsm_subscr_simcard(struct osmocom_ms *ms); void gsm_subscr_sim_pin(struct osmocom_ms *ms, char *pin1, char *pin2, int8_t mode); diff --git a/src/host/layer23/src/common/sap_interface.c b/src/host/layer23/src/common/sap_interface.c index a56f4f2..052646a 100644 --- a/src/host/layer23/src/common/sap_interface.c +++ b/src/host/layer23/src/common/sap_interface.c @@ -515,7 +515,7 @@ int sap_open(struct osmocom_ms *ms, const char *socket_path) rc = connect(ms->sap_wq.bfd.fd, (struct sockaddr *) &local, sizeof(local)); if (rc < 0) { fprintf(stderr, "Failed to connect to '%s'\n", local.sun_path); - set->sap_socket_path[0] = 0; + ms->sap_entity.sap_state = SAP_SOCKET_ERROR; close(ms->sap_wq.bfd.fd); return rc; } @@ -582,22 +582,11 @@ int osmosap_sapsocket(struct osmocom_ms *ms, const char *path) int osmosap_init(struct osmocom_ms *ms) { struct osmosap_entity *sap = &ms->sap_entity; - int rc; + LOGP(DSAP, LOGL_INFO, "init SAP client\n"); sap->sap_state = SAP_NOT_CONNECTED; sap->max_msg_size = GSM_SAP_LENGTH; - LOGP(DSAP, LOGL_INFO, "init SAP client\n"); - - if(ms->settings.sap_socket_path){ - rc = sap_open(ms, ms->settings.sap_socket_path); - if (rc < 0) { - fprintf(stderr, "Failed during sap_open(), no SAP based SIM reader\n"); - ms->sap_wq.bfd.fd = -1; - return rc; - } - } - return 0; } diff --git a/src/host/layer23/src/common/sim.c b/src/host/layer23/src/common/sim.c index 8e8d7bf..9aad966 100644 --- a/src/host/layer23/src/common/sim.c +++ b/src/host/layer23/src/common/sim.c @@ -188,12 +188,12 @@ static int sim_apdu_send(struct osmocom_ms *ms, uint8_t *data, uint16_t length) /* adding SAP client support * it makes more sense to do it here then in L1CTL */ - if(ms->settings.sap_socket_path[0] == 0) { - LOGP(DSIM, LOGL_INFO, "Using built-in SIM reader\n"); - l1ctl_tx_sim_req(ms, data, length); - } else { + if (ms->subscr.sim_type == GSM_SIM_TYPE_SAP) { LOGP(DSIM, LOGL_INFO, "Using SAP backend\n"); osmosap_send_apdu(ms, data, length); + } else { + LOGP(DSIM, LOGL_INFO, "Using built-in SIM reader\n"); + l1ctl_tx_sim_req(ms, data, length); } return 0; diff --git a/src/host/layer23/src/mobile/app_mobile.c b/src/host/layer23/src/mobile/app_mobile.c index 3895ad6..e076741 100644 --- a/src/host/layer23/src/mobile/app_mobile.c +++ b/src/host/layer23/src/mobile/app_mobile.c @@ -115,6 +115,9 @@ int mobile_signal_cb(unsigned int subsys, unsigned int signal, set->test_rplmn_mnc, set->test_lac, set->test_tmsi, set->test_imsi_attached); break; + case GSM_SIM_TYPE_SAP: + gsm_subscr_sapcard(ms); + break; default: /* no SIM, trigger PLMN selection process */ nmsg = gsm322_msgb_alloc(GSM322_EVENT_SWITCH_ON); diff --git a/src/host/layer23/src/mobile/subscriber.c b/src/host/layer23/src/mobile/subscriber.c index ba3c328..455db50 100644 --- a/src/host/layer23/src/mobile/subscriber.c +++ b/src/host/layer23/src/mobile/subscriber.c @@ -28,6 +28,7 @@ #include <osmocom/bb/common/logging.h> #include <osmocom/bb/common/osmocom_data.h> +#include <osmocom/bb/common/sap_interface.h> #include <osmocom/bb/common/networks.h> #include <osmocom/bb/mobile/vty.h> @@ -1256,3 +1257,55 @@ void gsm_subscr_dump(struct gsm_subscriber *subscr, } } +/* + * SAP interface integration + */ + +/* Attach SIM card over SAP */ +int gsm_subscr_sapcard(struct osmocom_ms *ms) +{ + struct gsm_subscriber *subscr = &ms->subscr; + struct msgb *nmsg; + int rc; + + if (subscr->sim_valid) { + LOGP(DMM, LOGL_ERROR, "Cannot insert card, until current card " + "is detached.\n"); + return -EBUSY; + } + + /* reset subscriber */ + gsm_subscr_exit(ms); + gsm_subscr_init(ms); + + subscr->sim_type = GSM_SIM_TYPE_SAP; + sprintf(subscr->sim_name, "sap"); + subscr->sim_valid = 1; + + /* Try to connect to the SAP interface */ + vty_notify(ms, NULL); + vty_notify(ms, "Connecting to the SAP interface...\n"); + rc = sap_open(ms, ms->settings.sap_socket_path); + if (rc < 0) { + LOGP(DSAP, LOGL_ERROR, "Failed during sap_open(), no SAP based SIM reader\n"); + vty_notify(ms, "SAP connection error!\n"); + ms->sap_wq.bfd.fd = -1; + + /* Detach SIM */ + subscr->sim_valid = 0; + nmsg = gsm48_mmr_msgb_alloc(GSM48_MMR_NREG_REQ); + if (!nmsg) + return -ENOMEM; + gsm48_mmr_downmsg(ms, nmsg); + + return rc; + } + + return 0; +} + +/* Deattach sapcard */ +int gsm_subscr_remove_sapcard(struct osmocom_ms *ms) +{ + return sap_close(ms); +} diff --git a/src/host/layer23/src/mobile/vty_interface.c b/src/host/layer23/src/mobile/vty_interface.c index 5782a17..5a1414d 100644 --- a/src/host/layer23/src/mobile/vty_interface.c +++ b/src/host/layer23/src/mobile/vty_interface.c @@ -534,6 +534,29 @@ DEFUN(sim_test_att, sim_test_att_cmd, return _sim_test_cmd(vty, argc, argv, 1); } +DEFUN(sim_sap, sim_sap_cmd, "sim sap MS_NAME", + "SIM actions\nAttach SIM over SAP interface\n" + "Name of MS (see \"show ms\")\n") +{ + struct osmocom_ms *ms; + + ms = get_ms(argv[0], vty); + if (!ms) + return CMD_WARNING; + + if (ms->subscr.sim_valid) { + vty_out(vty, "SIM already attached, remove first!%s", + VTY_NEWLINE); + return CMD_WARNING; + } + + if (gsm_subscr_sapcard(ms) != 0) { + return CMD_WARNING; + } + + return CMD_SUCCESS; +} + DEFUN(sim_reader, sim_reader_cmd, "sim reader MS_NAME", "SIM actions\nAttach SIM from reader\nName of MS (see \"show ms\")") { @@ -568,8 +591,11 @@ DEFUN(sim_remove, sim_remove_cmd, "sim remove MS_NAME", return CMD_WARNING; } - gsm_subscr_remove(ms); + if (ms->subscr.sim_type == GSM_SIM_TYPE_SAP) { + gsm_subscr_remove_sapcard(ms); + } + gsm_subscr_remove(ms); return CMD_SUCCESS; } @@ -1067,7 +1093,7 @@ DEFUN(cfg_no_gps_enable, cfg_no_gps_enable_cmd, "no gps enable", } #ifdef _HAVE_GPSD -DEFUN(cfg_gps_host, cfg_gps_host_cmd, "gps host HOST:PORT", +DEFUN(cfg_gpsd_host, cfg_gpsd_host_cmd, "gpsd host HOST:PORT", "GPS receiver\nSelect gpsd host and port\n" "IP and port (optional) of the host running gpsd") { @@ -1075,7 +1101,7 @@ DEFUN(cfg_gps_host, cfg_gps_host_cmd, "gps host HOST:PORT", if (colon != NULL) { memcpy(g.gpsd_host, argv[0], colon - argv[0] - 1); g.gpsd_host[colon - argv[0]] = '\0'; - memcpy(g.gpsd_port, colon, strlen(colon)); + memcpy(g.gpsd_port, colon + 1, strlen(colon)); g.gpsd_port[strlen(colon)] = '\0'; } else { snprintf(g.gpsd_host, ARRAY_SIZE(g.gpsd_host), "%s", argv[0]); @@ -1295,6 +1321,9 @@ static void config_write_ms(struct vty *vty, struct osmocom_ms *ms) case GSM_SIM_TYPE_TEST: vty_out(vty, " sim test%s", VTY_NEWLINE); break; + case GSM_SIM_TYPE_SAP: + vty_out(vty, " sim sap%s", VTY_NEWLINE); + break; } vty_out(vty, " network-selection-mode %s%s", (set->plmn_mode == PLMN_MODE_AUTO) ? "auto" : "manual", VTY_NEWLINE); @@ -1499,8 +1528,7 @@ static int config_write(struct vty *vty) struct osmocom_ms *ms; #ifdef _HAVE_GPSD - vty_out(vty, "gpsd host %s%s", g.gpsd_host, VTY_NEWLINE); - vty_out(vty, "gpsd port %s%s", g.gpsd_port, VTY_NEWLINE); + vty_out(vty, "gpsd host %s:%s%s", g.gpsd_host, g.gpsd_port, VTY_NEWLINE); #endif vty_out(vty, "gps device %s%s", g.device, VTY_NEWLINE); if (g.baud) @@ -1558,9 +1586,10 @@ DEFUN(cfg_ms_sap, cfg_ms_sap_cmd, "sap-socket PATH", return CMD_SUCCESS; } -DEFUN(cfg_ms_sim, cfg_ms_sim_cmd, "sim (none|reader|test)", +DEFUN(cfg_ms_sim, cfg_ms_sim_cmd, "sim (none|reader|test|sap)", "Set SIM card to attach when powering on\nAttach no SIM\n" - "Attach SIM from reader\nAttach bulit in test SIM") + "Attach SIM from reader\nAttach bulit in test SIM\n" + "Attach SIM over SAP interface") { struct osmocom_ms *ms = vty->index; struct gsm_settings *set = &ms->settings; @@ -1575,6 +1604,9 @@ DEFUN(cfg_ms_sim, cfg_ms_sim_cmd, "sim (none|reader|test)", case 't': set->sim_type = GSM_SIM_TYPE_TEST; break; + case 's': + set->sim_type = GSM_SIM_TYPE_SAP; + break; default: vty_out(vty, "unknown SIM type%s", VTY_NEWLINE); return CMD_WARNING; @@ -2802,6 +2834,7 @@ int ms_vty_init(void) install_element(ENABLE_NODE, &sim_test_cmd); install_element(ENABLE_NODE, &sim_test_att_cmd); + install_element(ENABLE_NODE, &sim_sap_cmd); install_element(ENABLE_NODE, &sim_reader_cmd); install_element(ENABLE_NODE, &sim_remove_cmd); install_element(ENABLE_NODE, &sim_pin_cmd); @@ -2822,7 +2855,7 @@ int ms_vty_init(void) install_element(ENABLE_NODE, &delete_forbidden_plmn_cmd); #ifdef _HAVE_GPSD - install_element(CONFIG_NODE, &cfg_gps_host_cmd); + install_element(CONFIG_NODE, &cfg_gpsd_host_cmd); #endif install_element(CONFIG_NODE, &cfg_gps_device_cmd); install_element(CONFIG_NODE, &cfg_gps_baud_cmd);

1 0

Re: [PATCH] mobile_app: fix some configuration r/w bugs
by Вадим Яницкий 02 Jan '16

02 Jan '16

Sorry, it was a Copy/Paste style mistake. Fixed. diff --git a/src/host/layer23/include/osmocom/bb/common/sap_interface.h b/src/host/layer23/include/osmocom/bb/common/sap_interface.h index bf19356..e4e64ce 100644 --- a/src/host/layer23/include/osmocom/bb/common/sap_interface.h +++ b/src/host/layer23/include/osmocom/bb/common/sap_interface.h @@ -11,6 +11,7 @@ int osmosap_sapsocket(struct osmocom_ms *ms, const char *path); int osmosap_init(struct osmocom_ms *ms); enum osmosap_state { + SAP_SOCKET_ERROR, SAP_NOT_CONNECTED, SAP_IDLE, SAP_CONNECTION_UNDER_NEGOTIATION, diff --git a/src/host/layer23/src/common/sap_interface.c b/src/host/layer23/src/common/sap_interface.c index a56f4f2..d5e8d1d 100644 --- a/src/host/layer23/src/common/sap_interface.c +++ b/src/host/layer23/src/common/sap_interface.c @@ -515,7 +515,7 @@ int sap_open(struct osmocom_ms *ms, const char *socket_path) rc = connect(ms->sap_wq.bfd.fd, (struct sockaddr *) &local, sizeof(local)); if (rc < 0) { fprintf(stderr, "Failed to connect to '%s'\n", local.sun_path); - set->sap_socket_path[0] = 0; + ms->sap_entity.sap_state = SAP_SOCKET_ERROR; close(ms->sap_wq.bfd.fd); return rc; } diff --git a/src/host/layer23/src/common/sim.c b/src/host/layer23/src/common/sim.c index 8e8d7bf..df9fbd2 100644 --- a/src/host/layer23/src/common/sim.c +++ b/src/host/layer23/src/common/sim.c @@ -188,7 +188,7 @@ static int sim_apdu_send(struct osmocom_ms *ms, uint8_t *data, uint16_t length) /* adding SAP client support * it makes more sense to do it here then in L1CTL */ - if(ms->settings.sap_socket_path[0] == 0) { + if(ms->sap_entity.sap_state == SAP_SOCKET_ERROR) { LOGP(DSIM, LOGL_INFO, "Using built-in SIM reader\n"); l1ctl_tx_sim_req(ms, data, length); } else { diff --git a/src/host/layer23/src/mobile/vty_interface.c b/src/host/layer23/src/mobile/vty_interface.c index 5782a17..fd0fd0c 100644 --- a/src/host/layer23/src/mobile/vty_interface.c +++ b/src/host/layer23/src/mobile/vty_interface.c @@ -1067,7 +1067,7 @@ DEFUN(cfg_no_gps_enable, cfg_no_gps_enable_cmd, "no gps enable", } #ifdef _HAVE_GPSD -DEFUN(cfg_gps_host, cfg_gps_host_cmd, "gps host HOST:PORT", +DEFUN(cfg_gpsd_host, cfg_gpsd_host_cmd, "gpsd host HOST:PORT", "GPS receiver\nSelect gpsd host and port\n" "IP and port (optional) of the host running gpsd") { @@ -1075,7 +1075,7 @@ DEFUN(cfg_gps_host, cfg_gps_host_cmd, "gps host HOST:PORT", if (colon != NULL) { memcpy(g.gpsd_host, argv[0], colon - argv[0] - 1); g.gpsd_host[colon - argv[0]] = '\0'; - memcpy(g.gpsd_port, colon, strlen(colon)); + memcpy(g.gpsd_port, colon + 1, strlen(colon)); g.gpsd_port[strlen(colon)] = '\0'; } else { snprintf(g.gpsd_host, ARRAY_SIZE(g.gpsd_host), "%s", argv[0]); @@ -1499,8 +1499,7 @@ static int config_write(struct vty *vty) struct osmocom_ms *ms; #ifdef _HAVE_GPSD - vty_out(vty, "gpsd host %s%s", g.gpsd_host, VTY_NEWLINE); - vty_out(vty, "gpsd port %s%s", g.gpsd_port, VTY_NEWLINE); + vty_out(vty, "gpsd host %s:%s%s", g.gpsd_host, g.gpsd_port, VTY_NEWLINE); #endif vty_out(vty, "gps device %s%s", g.device, VTY_NEWLINE); if (g.baud) @@ -2822,7 +2821,7 @@ int ms_vty_init(void) install_element(ENABLE_NODE, &delete_forbidden_plmn_cmd); #ifdef _HAVE_GPSD - install_element(CONFIG_NODE, &cfg_gps_host_cmd); + install_element(CONFIG_NODE, &cfg_gpsd_host_cmd); #endif install_element(CONFIG_NODE, &cfg_gps_device_cmd); install_element(CONFIG_NODE, &cfg_gps_baud_cmd); 2016-01-03 1:38 GMT+06:00 Вадим Яницкий <axilirator(a)gmail.com>: > Sorry, was a Copy/Paste mistake. Fixed. > > diff --git a/src/host/layer23/include/osmocom/bb/common/sap_interface.h > b/src/host/layer23/include/osmocom/bb/common/sap_interface.h > index bf19356..e4e64ce 100644 > --- a/src/host/layer23/include/osmocom/bb/common/sap_interface.h > +++ b/src/host/layer23/include/osmocom/bb/common/sap_interface.h > @@ -11,6 +11,7 @@ int osmosap_sapsocket(struct osmocom_ms *ms, const char > *path); > int osmosap_init(struct osmocom_ms *ms); > > enum osmosap_state { > + SAP_SOCKET_ERROR, > SAP_NOT_CONNECTED, > SAP_IDLE, > SAP_CONNECTION_UNDER_NEGOTIATION, > diff --git a/src/host/layer23/src/common/sap_interface.c > b/src/host/layer23/src/common/sap_interface.c > index a56f4f2..d5e8d1d 100644 > --- a/src/host/layer23/src/common/sap_interface.c > +++ b/src/host/layer23/src/common/sap_interface.c > @@ -515,7 +515,7 @@ int sap_open(struct osmocom_ms *ms, const char > *socket_path) > rc = connect(ms->sap_wq.bfd.fd, (struct sockaddr *) &local, > sizeof(local)); > if (rc < 0) { > fprintf(stderr, "Failed to connect to '%s'\n", local.sun_path); > - set->sap_socket_path[0] = 0; > + ms->sap_entity.sap_state = SAP_SOCKET_ERROR; > > close(ms->sap_wq.bfd.fd); > return rc; > } > diff --git a/src/host/layer23/src/common/sim.c > b/src/host/layer23/src/common/sim.c > index 8e8d7bf..df9fbd2 100644 > --- a/src/host/layer23/src/common/sim.c > +++ b/src/host/layer23/src/common/sim.c > @@ -188,7 +188,7 @@ static int sim_apdu_send(struct osmocom_ms *ms, > uint8_t *data, uint16_t length) > > /* adding SAP client support > * it makes more sense to do it here then in L1CTL */ > - if(ms->settings.sap_socket_path[0] == 0) { > + if(ms->sap_entity.sap_state == SAP_SOCKET_ERROR) { > LOGP(DSIM, LOGL_INFO, "Using built-in SIM reader\n"); > l1ctl_tx_sim_req(ms, data, length); > } else { > diff --git a/src/host/layer23/src/mobile/vty_interface.c > b/src/host/layer23/src/mobile/vty_interface.c > index 5782a17..fd0fd0c 100644 > --- a/src/host/layer23/src/mobile/vty_interface.c > +++ b/src/host/layer23/src/mobile/vty_interface.c > @@ -1067,7 +1067,7 @@ DEFUN(cfg_no_gps_enable, cfg_no_gps_enable_cmd, "no > gps enable", > } > > #ifdef _HAVE_GPSD > -DEFUN(cfg_gps_host, cfg_gps_host_cmd, "gps host HOST:PORT", > +DEFUN(cfg_gpsd_host, cfg_gpsd_host_cmd, "gpsd host HOST:PORT", > "GPS receiver\nSelect gpsd host and port\n" > "IP and port (optional) of the host running gpsd") > { > @@ -1075,7 +1075,7 @@ DEFUN(cfg_gps_host, cfg_gps_host_cmd, "gps host > HOST:PORT", > if (colon != NULL) { > memcpy(g.gpsd_host, argv[0], colon - argv[0] - 1); > g.gpsd_host[colon - argv[0]] = '\0'; > - memcpy(g.gpsd_port, colon, strlen(colon)); > + memcpy(g.gpsd_port, colon + 1, strlen(colon)); > g.gpsd_port[strlen(colon)] = '\0'; > } else { > snprintf(g.gpsd_host, ARRAY_SIZE(g.gpsd_host), "%s", argv[0]); > @@ -1499,8 +1499,7 @@ static int config_write(struct vty *vty) > struct osmocom_ms *ms; > > #ifdef _HAVE_GPSD > - vty_out(vty, "gpsd host %s%s", g.gpsd_host, VTY_NEWLINE); > - vty_out(vty, "gpsd port %s%s", g.gpsd_port, VTY_NEWLINE); > + vty_out(vty, "gpsd host %s:%s%s", g.gpsd_host, g.gpsd_port, > VTY_NEWLINE); > #endif > vty_out(vty, "gps device %s%s", g.device, VTY_NEWLINE); > if (g.baud) > @@ -2822,7 +2821,7 @@ int ms_vty_init(void) > install_element(ENABLE_NODE, &delete_forbidden_plmn_cmd); > > #ifdef _HAVE_GPSD > - install_element(CONFIG_NODE, &cfg_gps_host_cmd); > + install_element(CONFIG_NODE, &cfg_gpsd_host_cmd); > #endif > install_element(CONFIG_NODE, &cfg_gps_device_cmd); > install_element(CONFIG_NODE, &cfg_gps_baud_cmd); > > > 2016-01-03 1:19 GMT+06:00 Harald Welte <laforge(a)gnumonks.org>: > >> Hi Vadim, >> >> thanks for your patch, but.. >> >> On Sun, Jan 03, 2016 at 01:14:23AM +0600, Вадим Яницкий wrote: >> > - set->sap_socket_path[0] = 0; >> > + // set->sap_socket_path[0] = 0; >> > + ms->sap_entity.sap_state == SAP_SOCKET_ERROR; >> >> a) if you remove code, remove it for good, not just comment it out >> >> b) the double-equals will not cause an assignment. I don't think you >> tested this code... >> >> Regards, >> Harald >> -- >> - Harald Welte <laforge(a)gnumonks.org> >> http://laforge.gnumonks.org/ >> >> ============================================================================ >> "Privacy in residential applications is a desirable marketing option." >> (ETSI EN 300 175-7 Ch. >> A6) >> > >

1 0

[PATCH] mobile_app: fix some configuration r/w bugs
by Вадим Яницкий 02 Jan '16

02 Jan '16

Happy New Year to all lists members! This patch fixes two bugs in mobile app: 1) If SAP connection fails mobile app does not save the sap-socket param in mobile.cfg. 2) The write command saves two unreadable strings: gpsd host HOST gpsd port PORT instead of: gpsd host HOST:PORT Patch source: diff --git a/src/host/layer23/include/osmocom/bb/common/sap_interface.h b/src/host/layer23/include/osmocom/bb/common/sap_interface.h index bf19356..e4e64ce 100644 --- a/src/host/layer23/include/osmocom/bb/common/sap_interface.h +++ b/src/host/layer23/include/osmocom/bb/common/sap_interface.h @@ -11,6 +11,7 @@ int osmosap_sapsocket(struct osmocom_ms *ms, const char *path); int osmosap_init(struct osmocom_ms *ms); enum osmosap_state { + SAP_SOCKET_ERROR, SAP_NOT_CONNECTED, SAP_IDLE, SAP_CONNECTION_UNDER_NEGOTIATION, diff --git a/src/host/layer23/src/common/sap_interface.c b/src/host/layer23/src/common/sap_interface.c index a56f4f2..33bfa6c 100644 --- a/src/host/layer23/src/common/sap_interface.c +++ b/src/host/layer23/src/common/sap_interface.c @@ -515,7 +515,8 @@ int sap_open(struct osmocom_ms *ms, const char *socket_path) rc = connect(ms->sap_wq.bfd.fd, (struct sockaddr *) &local, sizeof(local)); if (rc < 0) { fprintf(stderr, "Failed to connect to '%s'\n", local.sun_path); - set->sap_socket_path[0] = 0; + // set->sap_socket_path[0] = 0; + ms->sap_entity.sap_state == SAP_SOCKET_ERROR; close(ms->sap_wq.bfd.fd); return rc; } diff --git a/src/host/layer23/src/common/sim.c b/src/host/layer23/src/common/sim.c index 8e8d7bf..df9fbd2 100644 --- a/src/host/layer23/src/common/sim.c +++ b/src/host/layer23/src/common/sim.c @@ -188,7 +188,7 @@ static int sim_apdu_send(struct osmocom_ms *ms, uint8_t *data, uint16_t length) /* adding SAP client support * it makes more sense to do it here then in L1CTL */ - if(ms->settings.sap_socket_path[0] == 0) { + if(ms->sap_entity.sap_state == SAP_SOCKET_ERROR) { LOGP(DSIM, LOGL_INFO, "Using built-in SIM reader\n"); l1ctl_tx_sim_req(ms, data, length); } else { diff --git a/src/host/layer23/src/mobile/vty_interface.c b/src/host/layer23/src/mobile/vty_interface.c index 5782a17..9ac2221 100644 --- a/src/host/layer23/src/mobile/vty_interface.c +++ b/src/host/layer23/src/mobile/vty_interface.c @@ -1067,7 +1067,7 @@ DEFUN(cfg_no_gps_enable, cfg_no_gps_enable_cmd, "no gps enable", } #ifdef _HAVE_GPSD -DEFUN(cfg_gps_host, cfg_gps_host_cmd, "gps host HOST:PORT", +DEFUN(cfg_gps_host, cfg_gps_host_cmd, "gpsd host HOST:PORT", "GPS receiver\nSelect gpsd host and port\n" "IP and port (optional) of the host running gpsd") { @@ -1499,8 +1499,7 @@ static int config_write(struct vty *vty) struct osmocom_ms *ms; #ifdef _HAVE_GPSD - vty_out(vty, "gpsd host %s%s", g.gpsd_host, VTY_NEWLINE); - vty_out(vty, "gpsd port %s%s", g.gpsd_port, VTY_NEWLINE); + vty_out(vty, "gpsd host %s:%s%s", g.gpsd_host, g.gpsd_port, VTY_NEWLINE); #endif vty_out(vty, "gps device %s%s", g.device, VTY_NEWLINE); if (g.baud)

2 2

Why isn't there an airprobe for other protocols ? (3G, CDMA, LTE)
by John Case 13 Dec '15

13 Dec '15

I have successfully used airprobe (and gr-gsm, derived from airprobe) to see broadcast, unencrypted status messages from GSM base stations. It is my understanding that other protocols (like CDMA, UMTS, HSPA, LTE) have similar unencrypted, broadcast or "beacon" traffic that could be viewed the same way ... But there are no tools like airprobe for CDMA or 3G or LTE ... why is that ? Is there a technical reason that they are much more difficult, or has it just not been done yet out of lack of interest ? Thank you.

2 1

Re: Motorola C139 V1.9.24 Won't Load from osmocom-bb
by falcon＠ivan.Harhan.ORG 12 Dec '15

12 Dec '15

Hello fellow phone hackers, Back in March-April of 2014 there was a user on this list (Rusty Dekema, Cc'ed) who wanted to use OsmocomBB tools with a Mot C139 phone, but was stopped by a locked-down bootloader; the phone had Cingular firmware version 1.9.24 which none of us knew how to unlock back then. Fast-forwarding to the present, I recently got yet another batch of Mot C139 phones from ebay, and one of them came with that same fw version with a locked-down bootloader. This encounter prompted me to research the problem some more and develop a new shellcode injection- based method of breaking into these phones that should work with all existing Mot C1xx fw versions, gaining code execution on the phone's Calypso and allowing one to reflash the bootloader with an unlocked version, among arbitrary other reflashing and hacking operations. The new "universal" Mot C1xx unlocking tool is released as part of fc-host-tools-r4; the link to the tarball appears at the bottom of this web page: https://www.freecalypso.org/c139.html Happy hacking, Mychaela

1 0

DEc 9, 8pm / Osmocom Berlin Meeting
by Harald Welte 09 Dec '15

09 Dec '15

Hi all! This is the announcement for the re-incarnation of our bi-weekly Osmocom Berlin Meeting. Dec 09, 8pm @ CCC Berlin, Marienstr. 11, 10117 Berlin There is no formal presentation this time, but * there will be SIMtrace equipment in case somebody wants to play with it there will be a sysmoBTS with OsmoBTS, OsmoPCU, OsmoNITB, OsmoSGSN and OpenGGSN if somebody wants to play with it * there will be Huawei Femtocells to play with The meeting is open to anyone interested in mobile communications. You do not have to be involved with the Osmocom projects in order to attend. Anyone interested in mobile communications protocols is welcome. If you are interested to show up, feel free to do so. The meeting is "free as in free beer", despite no actual free beer being around ;) More information can be found at http://openbsc.osmocom.org/trac/wiki/OsmocomMeeting/Berlin Regards, Harald -- - Harald Welte <laforge(a)gnumonks.org> ============================================================================ "Privacy in residential applications is a desirable marketing option." (ETSI EN 300 175-7 Ch. A6)

1 0

Nov 11, 8pm / Osmocom Berlin Meeting
by Harald Welte 09 Nov '15

09 Nov '15

Hi all! This is the announcement for the re-incarnation of our bi-weekly Osmocom Berlin Meeting. Nov 11, 8pm @ CCC Berlin, Marienstr. 11, 10117 Berlin There is no formal presentation this time, but * there will be SDR equipment, antenna and a working/tested setup of a gnuradio based MPT1327 decoder * there will be SIMtrace equipment in case somebody wants to play with it there will be a sysmoBTS with OsmoBTS, OsmoPCU, OsmoNITB, OsmoSGSN and OpenGGSN if somebody wants to play with it * there will be Huawei Femtocells to play with * Harald would like to discuss OpenBSC website / documentation improvements The meeting is open to anyone interested in mobile communications. You do not have to be involved with the Osmocom projects in order to attend. Anyone interested in mobile communications protocols is welcome. If you are interested to show up, feel free to do so. The meeting is "free as in free beer", despite no actual free beer being around ;) More information can be found at http://openbsc.osmocom.org/trac/wiki/OsmocomMeeting/Berlin Regards, Harald -- - Harald Welte <laforge(a)gnumonks.org> ============================================================================ "Privacy in residential applications is a desirable marketing option." (ETSI EN 300 175-7 Ch. A6)

1 0

Oct 21, 8pm / Osmocom Berlin Meeting
by Harald Welte 19 Oct '15

19 Oct '15

Hi all! This is the announcement for the re-incarnation of our bi-weekly Osmocom Berlin Meeting. Oct 21, 8pm @ CCC Berlin, Marienstr. 11, 10117 Berlin There is no formal presentation this time, but * there will be SDR equipment in case more people are interested to have a look at MPT1327 and/or Tetrapol signals that can be received in Berlin * Harald would like to discuss OpenBSC website / documentation improvements The meeting is open to anyone interested in mobile communications. You do not have to be involved with the Osmocom projects in order to attend. Anyone interested in mobile communications protocols is welcome. If you are interested to show up, feel free to do so. The meeting is "free as in free beer", despite no actual free beer being around ;) More information can be found at http://openbsc.osmocom.org/trac/wiki/OsmocomMeeting/Berlin Regards, Harald -- - Harald Welte <laforge(a)gnumonks.org> ============================================================================ "Privacy in residential applications is a desirable marketing option." (ETSI EN 300 175-7 Ch. A6)

1 0

What can I learn about a GSM base station without doing any decryption ?
by Mm Bsd 13 Oct '15

13 Oct '15

Hello, I am using a SDR device (a BladeRF) and there is a nice tool called 'kal' that will show me all of my nearby GSM base stations. In addition to listing base stations and their frequencies, I could also use that frequency info to monitor the beacon channel with gr-scan/airprobe. So at this point I know: - base station exists - I know its frequency - based on beacon channel assignments, etc., I *sort of* know how busy it is. But what else can be learned about a particular base station with simply passive observation and no decryption (and no sim card) ? If all I have is a passive monitor with a SDR, what else can I learn frmo the beacon channel or from the station itself ? Is it possible to learn things like software version, protocols supported, connectivity to network, or to other base stations ? My goal is to learn about the GSM networks around me and I wonder how deeply I can understand them with just passive observation of the beacon channel (or other sources of info that can be seen with SDR). Thank you.

2 2

Oct 15, 8pm / OSMUG: "Running OpenAirInterface"
by Harald Welte 09 Oct '15

09 Oct '15

Hi all! This is an announcement for an "irregular" Berlin Osmocom User Group event. David Rupprecht of Ruhr-Uni Bochum has offered to give us a presentation sharing his experience in Running OpenAirInterface. OpenAirInterface (http://openairinterface.eurecom.fr/) is a project of the Eurecom research institute in Sofia Antipoils / France. For many years they have been working towards an open source SDR LTE implementation. The presentation will be held on Oct 15, 8pm @ IN-Berlin, Lehrter Str. 53, 10557 Berlin (yes, this is _NOT_ CCC Berlin where regular OSMUG meetings are held!) The meeting is open to anyone interested in mobile communications. You do not have to be involved with the Osmocom projects in order to attend. Anyone interested in mobile communications protocols is welcome. If you are interested to show up, feel free to do so. The meeting is "free as in free beer", despite no actual free beer being around ;) More information about the venue can be found at http://www.in-berlin.de/space/ The official event announcement website is http://openbsc.osmocom.org/trac/blog/david-rub-openair-20151015 Regards, Harald -- - Harald Welte <laforge(a)gnumonks.org> ============================================================================ "Privacy in residential applications is a desirable marketing option." (ETSI EN 300 175-7 Ch. A6)

1 1

OsmoTRX on Pirelli DP-L10 restarts phone
by Tobias Mädel 05 Oct '15

05 Oct '15

Hello, I'm currently trying to use a Pirelli DP-L10 calypso phone as a rudimentary BTS. I have followed the instructions on http://openbsc.osmocom.org/trac/wiki/network_from_scratch, I'm using the jolly/testing branch of osmocom-bb and I've enabled TX support in the Makefile. The software runs on an xubuntu 14.04 x64 machine. After uploading the firmware to the phones RAM via osmocon, it shows that it's running osmocom-bb on the display, when I then try to run transceiver with the following parameters: -e 5 -r 99 (or alternativly -e 5 -a 958 to sync with german provider O2) the phone just reboots and goes into a state where the keyboard backlight is blinking with 0.5 hertz. The last thing "transceiver" says is: <0012> l1ctl.c:383 Reset received: Starting sync. <000c> l1ctl.c:95 Sync Req <000c> l1ctl_link.c:171 Sending: '01 00 00 00 83 be 00 64 27 10 03 20 03 07 00 00 00 ' and the last log messages from osmocon are: DSP API Version: 0x3606 0x0000 LOST 7200! L1CTL_RESET_REQ: FULL!L1CTL_FBSB_REQ (arfcn=33726, flags=0x7) Dropping sample ':' I'm not sure if I have configured the correct bands for synchronization. I think it might have to do something with that. I copy'd the default configuration from the osmocom-page stating DCS1800. The only base station I'm seeing here is 958, which is in the GSM900R range. Could this be the problem? Have I overseen something simple? Have I provided all necessary information about my setup? Any ideas? It's probably not a power issue, I have tested it with a lab power supply for providing the USB 5V and battery 4.2V, which resulted in the same behavior. Thanks, Tobias -- This email is encrypted with 2ROT-13. Tobias Mädel t.maedel(a)alfeld.de PGP: 3A69 E9AF 3FA9 3BCF FE50 9694 494E 2F56 C304 60E1 http://tbspace.de

1 1

Oct 07, 8pm / Osmocom Berlin User Group meeting
by Harald Welte 04 Oct '15

04 Oct '15

Hi all! This is the announcement for the re-incarnated Osmocom Berlin meeting: Oct 7, 8pm @ CCC Berlin, Marienstr. 11, 10117 Berlin Harald will be presenting about the Iuh protocol stack of UMTS small cells / femtocells and his work towards implementing it as part of Osmocom. Agenda: 20:00h Welcome 20:15h Presentation about Iuh / osmo-iuh 21:00h Informal meeting / chatting The meeting is open to anyone interested in mobile communications. You do not have to be involved with the Osmocom projects in order to attend. Anyone interested in mobile communications protocols is welcome. If you are interested to show up, feel free to do so. There is no registration required. The meeting is free as in "free beer", despite no actual free beer being around. Regards, Harald -- - Harald Welte <laforge(a)gnumonks.org> ============================================================================ "Privacy in residential applications is a desirable marketing option." (ETSI EN 300 175-7 Ch. A6)

2 1

Re: Oct 07, 8pm / Osmocom Berlin User Group meeting
by Mychaela Falconia 03 Oct '15

03 Oct '15

Harald Welte <laforge(a)gnumonks.org> wrote: > This is the announcement for the re-incarnated Osmocom Berlin meeting: > > Oct 7, 8pm @ CCC Berlin, Marienstr. 11, 10117 Berlin And for those who happen to be on the other side of the world (Southern California instead of Germany, San Diego instead of Berlin), there is this other meeting/presentation on a related topic happening about a day and a half later in Universal Time: http://www.meetup.com/kernel-panic/events/225595627/ > If you are interested to show up, feel free to do so. There is no > registration required. The meeting is free as in "free beer", Same for ours. > despite no actual free beer being around. While we don't serve beer either (for one thing, the venue who graciously provide us with free meeting space would have a problem with alcohol on the premises), we do usually have free refreshments as in soft drinks and cookies. M~

1 0

CalypsoBTS timeslots allocation
by Вадим Яницкий 17 Sep '15

17 Sep '15

Hello, list! I am trying to make working two and more TCH channels in OpenBSC (NiTB mode) with calypso based phones. How to understand timeslots allocation in this strings of transceiver app? as->l1l[0].tx_mask = 0xe3; /* TS 5,6,7,0,1 */ as->l1l[0].rx_mask = 0x01; /* TS 0 */ Why 2, 3, 4 timeslots is not used? And how to connect more than two phones to the transceiver? Should I add a new TRX in OpenBSC config and/or modify source code of the transceiver app? With best regards, fixeria.

2 3

Osmocom Berlin User Group revival?
by Harald Welte 09 Sep '15

09 Sep '15

Dear all, After two years of intermission, I'm currently pondering to revive the Osmocom Berlin User Group and would like to understand a) who would be interested in attending? b) which day(s) of the week would be preferred / not preferred? Instad of "just" hanging out, chatting about Osmocom related topics etc. I am interested in having actual topics for each of the meetings. There is no need for a formal presentation or anything like that, but at least let's try to stay focussed on the topic for the first hour or so, and then conclude with a more general chat towards the end. Some of the topics that I would like to start with ASAP: * sharing of knowledge regarding 3G and 4G protocol stacks (I'm looking a lot at this recently, and it is a good time to talk about what I've learned) * completing the work towards splitting osmo-nitb into osmo-bsc and osmo-mss - as a first stept towards adding RANAP/Iu to osmo-mss * attempting to decode/analyze BVG bus/tram radio (TETRAPOL) using tetrapol-kit from http://brmlab.cz/git/tetrapol-kit.git * are berlin S-Bahn trains actually still broadcasting their GPS position in MPT1327? * moving ahead with AT91SAM3S based SIMtrace2 with MITM support Let me know who is interested in joining. In terms of venue I would suggest to again use the CCCB, unless somebody objects. We could of course also ask our friends at IN-Berlin or C-Base. In terms of schedule, I would actually want to go for bi-weekly again. Happy hacking, Harald -- - Harald Welte <laforge(a)gnumonks.org> http://laforge.gnumonks.org/ ============================================================================ "Privacy in residential applications is a desirable marketing option." (ETSI EN 300 175-7 Ch. A6)

1 1

network-from-scratch(calypso-setup)-several phones and gprs
by Erich Dachleger 08 Sep '15

08 Sep '15

I was also wondering about if is is possible to use network-frm-scratch setup (calypso-transceiver) with more phones to get more TCH channels as well as gprs? Regards erich Hello, list! I am trying to make working two and more TCH channels in OpenBSC (NiTB mode) with calypso based phones. How to understand timeslots allocation in this strings of transceiver app? as->l1l[0].tx_mask = 0xe3; /* TS 5,6,7,0,1 */ as->l1l[0].rx_mask = 0x01; /* TS 0 */ Why 2, 3, 4 timeslots is not used? And how to connect more than two phones to the transceiver? Should I add a new TRX in OpenBSC config and/or modify source code of the transceiver app? With best regards, fixeria.

1 0

AMR support and B_PLAY_UL
by Anton Guryanov 23 Aug '15

23 Aug '15

Hi, I tried to add simple AMR support in osmocombb project. I tested it with C123 (DSP API v 36). I set AMR config from assigment command, set AMR detection thresholds, make sync, etc. It looks like downlink works fine, but I have problem with uplink: it send data directly from microphone and ignore data in dsp_api.ndb->a_du_1 even if I set dsp_api.ndb->d_tch_mode|=B_PLAY_UL. Also, I can see uplink data on dsp_api.ndb->a_du_0 like B_PLAY_UL is fully ignored. Did anyone have that issue before? I know that AMR codec is more complex that TCH, but did someone know a way to send custom data from host using AMR codec? Best regards, Anton

2 1

Adding features from osmocom-bb to libosmocore
by Piotr Krysik 01 Aug '15

01 Aug '15

Hi all, I'm developing gr-gsm project which uses GNU Radio framework in order to build infrastructure for receiving GSM data. Recently we've added libosmocore as a dependency in order to use it's implementation of ciphering algorithms. I would like to use more of the code that was already implemented thanks to your work, but I've found some parts that I would expect to be in libosmocore are not in there but in osmocom-bb. One of the examples is interpretation of system information messages that is in src/host/layer23/src/common/sysinfo.c. Is it possible to move parts that are usable for projects outside of osmocom into libsomocore? If yes - how can I proceed with that? I'm aware that it is not simple process as it involves also removing these parts from osmocom-bb and maybe also editing them in order to make them independent of osmocom-bb. -- Best Regards, Piotr Krysik

2 1

c113a works
by Craig Comstock 01 Aug '15

01 Aug '15

FWIW, someone asked me whether c113 worked. I found a cheap 113a and hello_world loaded pretty well. The screen on my phone is shot but the backlight did come on.it works fine with the following command: craig@craig:~/c115-osmocom-bb/src$ host/osmocon/osmocon -p /dev/ttyUSB0 -m c123xor target/firmware/board/compal_e88/hello_world.compalram.bin OsmocomBB Hello World (revision osmocon_v0.0.0-1754-gfc20a37) ====================================================================== Device ID code: 0xb4fb Device Version code: 0x0000 ARM ID code: 0xfff3 cDSP ID code: 0x0128 Die ID code: c5c63637a5039778 ====================================================================== REG_DPLL=0x2413 CNTL_ARM_CLK=0xf0a1 CNTL_CLK=0xff91 CNTL_RST=0xfff3 CNTL_ARM_DIV=0xfff9 ====================================================================== REG_DPLL=0x2413 CNTL_ARM_CLK=0xf0a1 CNTL_CLK=0xff91 CNTL_RST=0xfff3 CNTL_ARM_DIV=0xfff9 ====================================================================== entering interrupt loop

4 3

[patch] sim.c waiting char issue
by etienne 28 Jul '15

28 Jul '15

Hello, The sim driver was not working with my sim card. After some successful apdu requests, it was ceasing to work. It turned out that the sim is sending waiting chars before some rx acks. The following patch solved the problem. diff --git a/src/target/firmware/calypso/sim.c b/src/target/firmware/calypso/sim.c index 752628f..b35909f 100644 --- a/src/target/firmware/calypso/sim.c +++ b/src/target/firmware/calypso/sim.c @@ -536,6 +536,8 @@ void sim_handler(void) /* Case 2: No input / Output of known length */ if (mode == SIM_APDU_PUT) { sim_state = SIM_STATE_RX_ACK; + /* ignore waiting char here*/ + sim_ignore_waiting_char = 1; calypso_sim_receive(response, 1); break; /* Case 4: Input / No output */ @@ -563,6 +565,8 @@ void sim_handler(void) break; /* wait until data is received */ /* Disable all interrupt driven functions */ writew(0xFF, REG_SIM_MASKIT); + /*stop ignoring waiting char*/ + sim_ignore_waiting_char = 0; /* error received */ if (sim_rx_character_count == 2) { puts("SIM: command failed\n"); Regards, Etienne -- View this message in context: http://baseband-devel.722152.n3.nabble.com/patch-sim-c-waiting-char-issue-t… Sent from the baseband-devel mailing list archive at Nabble.com.

1 0

Re: osmocommBB and USRP2
by Tomcsányi Domonkos 19 Jul '15

19 Jul '15

OsmocomBB could be used for many things, one example is demonstrating GSM’s insecurity, but the research and work to do that was done by people who were interested in the topic and did this on their own. Of course the creators of the project are not trying to limit anyone to do anything with OsmocomBB, that’s the main idea behind free and open source, however the project’s main aim is still to provide a framework, which one can use to do different things with GSM easily (not necessarily security related stuff!). So that’s why I told you not to expect much help (especially specific help or instructions) about sniffing with osmocomBB. > 2015. júl. 19. dátummal, 13:16 időpontban g0tcha <g0tcha(a)3gp.za.net> írta: > > Hi > > Thanks for the info, although I find it strange that you say I won’t get far with sniffing questions here. When most of the talk and information presented on using osmocombb were only about interception , locating to demonstrate the insecurities about GSM. > > But thanks for clarifying > > From: Tomcsányi Domonkos <domi(a)tomcsanyi.net <mailto:domi@tomcsanyi.net>> > Date: Sunday 19 July 2015 at 13:09 > To: "." <g0tcha(a)3gp.za.net <mailto:g0tcha@3gp.za.net>> > Subject: Re: osmocommBB and USRP2 > > USRP is not capable of hopping for example. > OsmocomBB’s main goal is not to do sniffing, so I don’t think you will get far with these questions here. > Also you can easily find out about the neighbor cells with a USRP. > > Regards, > Domi > >> 2015. júl. 19. dátummal, 12:26 időpontban g0tcha <g0tcha(a)3gp.za.net <mailto:g0tcha@3gp.za.net>> írta: >> >> Thanks of rthe response >> >> But can you clarify what is the difference between the 2 ? My impression was that the USRP2 can do all the osmocomBB can do and more. >> >> Are you saying that the osmocomBB firmware can do a lot more ? >> >> I am reffering to the sniffing capabilities, I know that detecting neighbouring cells etc can’t be done with USRP2 I usually use a nokia 3310 with netmonitor. >> >> Any clarity appreciated >> >> From: Tomcsányi, Domonkos <domi(a)tomcsanyi.net <mailto:domi@tomcsanyi.net>> >> Date: Sunday 19 July 2015 at 12:11 >> To: "baseband-devel(a)lists.osmocom.org <mailto:baseband-devel@lists.osmocom.org>" <baseband-devel(a)lists.osmocom.org <mailto:baseband-devel@lists.osmocom.org>> >> Subject: Re: osmocommBB and USRP2 >> >> No. >> >> >> 2015. júl. 19. dátummal, 12:02 időpontban g0tcha írta: >> >> > Hi >> > >> > Just to clarify and understand the osmocomBB is only a cheaper alternative to the USRP2 , currently the USRP2 can do all the osmocomBB with all its DSP patches etc etc can do? >> > >> > regards >

1 0

osmocommBB and USRP2
by g0tcha 19 Jul '15

19 Jul '15

Hi Just to clarify and understand the osmocomBB is only a cheaper alternative to the USRP2 , currently the USRP2 can do all the osmocomBB with all its DSP patches etc etc can do? regards

2 2

Starting up.
by playmobilehiho＠aol.fr 13 Jul '15

13 Jul '15

Hi everyone, First of all congratulations for the community's work, i've seen Talks about gsm/osmocom/Core network (Karsten, Harald, Sylvain, Tobias). It's impressive. I'm pretty new in the GSM world. I would like to practice tests concerning the obtention of LAC,CID (1/ of the phone using osmocombb, 2/on regular phone in same area of the osmo-bb phone 3/on a phone somewhere) According to the talks this can be achieved using MAP/SCCP and core network access, but i dont really want to mess with this. Can O-bb helps me to retrieve this LAC,CID informations in these three situations? (for the first case, i'm sure it can.) According to gsm protocol stack ( http://www.rfwireless-world.com/images/gsm-protocol-stack.jpg ) we can see that the BSC is able to talk with MSC using BSS MAP/SCCP does that mean that i actually need to use openbsc on a phone and osmoBB on another phone to achieve my tests? For all of this, will i find a good starting code in sylvain/burst_ind branch? will i need non standard baud-rates serial cable? (You guessed it right, i still not have ordered my serial cables). What i've done so far is getting E88 device and compiled the core libs and bb.(i really start) I know my questions are pretty noob compared to all other messages in this list, please accept my apologies if i'm posting in the wrong list. Thank you in advance. Jean. --- (Playmobile, en avant les histoires)

1 0

C139 Nutt-X running from Flash - need to unlock flash?
by Craig Comstock 07 Jul '15

07 Jul '15

I am making progress getting nuttx running from flash on the C139 but I suspect I might be running into an issue where when code is trying to store a value into flash memory where nuttx code and data are that nuttx seems to stall/halt, maybe an exception vector is being jumped to by the CPU but nuttx isn't quite setup to handle it just yet. Am I right that I would need to unlock flash in order to write even just one byte/word? I tried doing the same sequence of writes that are in cfi_flash.c flash_block_unlock() but that seemed to stall as well... maybe I need to do some initialization of some sort? I may try to port over cfi_flash.c|h into nuttx. nuttx is loaded into two pages: 0x10000 and 0x20000 I copied the macros for writew and __arch_putw and didwritew(0x60,0x0); // CFI_CMD_PROTECTwritew(0xD0,0x10000); // CFI_PROT_UNLOCKwritew(0xff,0x0); // CFI_CMD_RESETwritew(0x60,0x0); // CFI_CMD_PROTECTwritew(0xD0,0x20000); // CFI_PROT_UNLOCKwritew(0xff,0x0); // CFI_CMD_RESET Seemed to halt at the first write. Thanks for any hints, at this point I'm just hacking to try and get things working. -Craig

1 0

segfault on bssgp test
by ☎ 06 Jul '15

06 Jul '15

Hi. Anyone else experienced this with latest libosmocore from git? ./testsuite.at:124: $abs_top_builddir/tests/gb/gprs_bssgp_test stderr: MESSAGE to 0x7f0000ff, msg length 12 02 00 81 01 01 82 0b 56 04 82 0b 55 All NS-VCs for NSEI 2901 are either dead or blocked! All NS-VCs for NSEI 2901 are either dead or blocked! BSSGP BVCI=0 Rx BVC STATUS, cause=Protocol error - unspecified BSSGP BVCI=1234 Rx BVC STATUS, cause=Unknown BVCI NSEI=2901/BVCI=2989 Cannot handle PDU type 34 for unknown BVCI, NS BVCI 2989 Unable to resolve NSEI 4660 to NS-VC! Assert failed rc >= 0 gb/gprs_bssgp_test.c:229 /home/user/source/libosmocore/tests/testsuite.dir/at-groups/19/test-source: line 25: 8497 Aborted (core dumped) $abs_top_builddir/tests/gb/gprs_ bssgp_test -- best regards, Max, http://fairwaves.co

2 7

Beginning with a Motorola C121 or C139
by Tobias XY 24 Jun '15

24 Jun '15

Hello list, i´m new here and i want to begin with the project osmocom on the Motorola C121 or C139. I have both mobile phones here and the USB to TTL Plug with the cable. How can i start now. Is there a tutorial? Greetings, Tobi

3 3

[PATCH] Fix automake warnings
by Max 05 Jun '15

05 Jun '15

Signed-off-by: Max <max.suraev(a)fairwaves.co> --- configure.ac | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/configure.ac b/configure.ac index acd153d..11c82a9 100644 --- a/configure.ac +++ b/configure.ac @@ -2,7 +2,7 @@ AC_INIT([libosmocore], m4_esyscmd([./git-version-gen .tarball-version]), [openbsc(a)lists.osmocom.org]) -AM_INIT_AUTOMAKE([foreign dist-bzip2 no-dist-gzip 1.6]) +AM_INIT_AUTOMAKE([foreign subdir-objects dist-bzip2 no-dist-gzip 1.6]) AC_CONFIG_TESTDIR(tests) dnl kernel style compile messages -- 2.1.4

1 0

Master thesis feedback
by François Pönsgen 03 Jun '15

03 Jun '15

Hello list, I'm writing a master thesis on: "GSM and GPRS security using OsmocomBB". The goal of this thesis is to describe the various attacks made possible by the project, and to analyze their impact on Norwegian networks. I finally have an almost complete draft for all the chapters: the chapters 2 and 3 introduce the necessary background, chapter 4 describes the eavesdropping attack, chapter 5 describes various DoS attacks, and finally chapter 6 analyzes their impact on Norwegian networks. I'm looking for feedback on this thesis, and I thought that the topic might interest subscribers of this mailing list! I would really appreciate any constructive criticism on this report, so if you have any please do not hesitate to contact me. The deadline is on the 8th of June, in one week, so there is not much time left. The thesis is available here: https://gitlab.com/francoip/thesis/blob/public/thesis.pdf Thanks a lot, François Pönsgen

2 2

Python Code
by Dast 01 Jun '15

01 Jun '15

I would really realize the project by Sylvain Minaut but my problem is that i can't find a script python consist to switch with another phone . ispy = identityspy(number, imsi); and ispy._apisms ?? Could someone help me please? -- View this message in context: http://baseband-devel.722152.n3.nabble.com/Python-Code-tp4026716.html Sent from the baseband-devel mailing list archive at Nabble.com.

1 0

bad crc 9bf1
by Alexander 01 Jun '15

01 Jun '15

Hello Biggest thanks for the osmocombb project! I am trying to follow this wikki http://bb.osmocom.org/trac/wiki/flashing_new to flash rssi app And facing this error host/osmocon/osmoload fprogram 0 0x010000 compal_loader.bin Loading 8192 bytes of memory at 0x10000 in chip 0 from file compal_loader.bin bad crc 9bf1 (not 4190) at offset 0x00000000 status 69206016, aborting How to solve it? I use latest jolly/menu git branch HW: C115 and c113 ( e88) both providing same error -- Sincerely, Alexander.

2 2

[PATCH] Remove comp128 from public API - use osmocom/crypt/auth.h instead
by Max 01 Jun '15

01 Jun '15

Signed-off-by: Max <max.suraev(a)fairwaves.co> --- TODO-RELEASE | 1 + include/Makefile.am | 6 +++--- include/osmocom/gsm/comp128.h | 4 ++-- src/gsm/auth_comp128v1.c | 2 +- src/gsm/comp128.c | 2 +- src/gsm/libosmogsm.map | 1 - tests/comp128/comp128_test.c | 1 - 7 files changed, 8 insertions(+), 9 deletions(-) diff --git a/TODO-RELEASE b/TODO-RELEASE index d03aa49..956b4be 100644 --- a/TODO-RELEASE +++ b/TODO-RELEASE @@ -1,2 +1,3 @@ #library what description / commit summary line +libosmogsm api-change remove comp128 from public API libosmogb abi-change bssgp: Fix bssgp_tx_fc_bvc parameter type diff --git a/include/Makefile.am b/include/Makefile.am index 52c6a38..b4da54e 100644 --- a/include/Makefile.am +++ b/include/Makefile.am @@ -51,8 +51,6 @@ nobase_include_HEADERS = \ osmocom/gsm/a5.h \ osmocom/gsm/abis_nm.h \ osmocom/gsm/apn.h \ - osmocom/gsm/comp128.h \ - osmocom/gsm/comp128v23.h \ osmocom/gsm/gan.h \ osmocom/gsm/gsm0341.h \ osmocom/gsm/gsm0411_smc.h \ @@ -121,7 +119,9 @@ endif noinst_HEADERS = \ osmocom/core/timer_compat.h \ - osmocom/gsm/kasumi.h + osmocom/gsm/kasumi.h \ + osmocom/gsm/comp128.h \ + osmocom/gsm/comp128v23.h osmocom/core/bit%gen.h: osmocom/core/bitXXgen.h.tpl $(AM_V_GEN)$(MKDIR_P) $(dir $@) diff --git a/include/osmocom/gsm/comp128.h b/include/osmocom/gsm/comp128.h index 33b997a..c45da37 100644 --- a/include/osmocom/gsm/comp128.h +++ b/include/osmocom/gsm/comp128.h @@ -9,10 +9,10 @@ #include <stdint.h> /* - * Performs the COMP128 algorithm (used as A3/A8) + * Performs the COMP128v1 algorithm (used as A3/A8) * ki : uint8_t [16] * srand : uint8_t [16] * sres : uint8_t [4] * kc : uint8_t [8] */ -void comp128(const uint8_t *ki, const uint8_t *srand, uint8_t *sres, uint8_t *kc); +void comp128v1(const uint8_t *ki, const uint8_t *srand, uint8_t *sres, uint8_t *kc); diff --git a/src/gsm/auth_comp128v1.c b/src/gsm/auth_comp128v1.c index 41aef71..c40027e 100644 --- a/src/gsm/auth_comp128v1.c +++ b/src/gsm/auth_comp128v1.c @@ -28,7 +28,7 @@ static int c128v1_gen_vec(struct osmo_auth_vector *vec, struct osmo_sub_auth_data *aud, const uint8_t *_rand) { - comp128(aud->u.gsm.ki, _rand, vec->sres, vec->kc); + comp128v1(aud->u.gsm.ki, _rand, vec->sres, vec->kc); vec->auth_types = OSMO_AUTH_TYPE_GSM; return 0; diff --git a/src/gsm/comp128.c b/src/gsm/comp128.c index b7a2382..e36c20d 100644 --- a/src/gsm/comp128.c +++ b/src/gsm/comp128.c @@ -185,7 +185,7 @@ _comp128_permutation(uint8_t *x, uint8_t *bits) } void -comp128(const uint8_t *ki, const uint8_t *rand, uint8_t *sres, uint8_t *kc) +comp128v1(const uint8_t *ki, const uint8_t *rand, uint8_t *sres, uint8_t *kc) { int i; uint8_t x[32], bits[128]; diff --git a/src/gsm/libosmogsm.map b/src/gsm/libosmogsm.map index 22428a2..c80c15f 100644 --- a/src/gsm/libosmogsm.map +++ b/src/gsm/libosmogsm.map @@ -26,7 +26,6 @@ abis_nm_ipa_magic; osmo_sitype_strs; -comp128; dbm2rxlev; gprs_cipher_gen_input_i; diff --git a/tests/comp128/comp128_test.c b/tests/comp128/comp128_test.c index eb6fb12..d6a6401 100644 --- a/tests/comp128/comp128_test.c +++ b/tests/comp128/comp128_test.c @@ -6,7 +6,6 @@ #include <osmocom/core/bits.h> #include <osmocom/core/utils.h> -#include <osmocom/gsm/comp128v23.h> #include <osmocom/crypt/auth.h> static struct osmo_sub_auth_data test_aux2 = { -- 2.1.4

1 0

[PATCH] Remove osmo_a5_1 and osmo_a5_2 from public API - use generic osmo_a5() instead
by Max 01 Jun '15

01 Jun '15

Signed-off-by: Max <max.suraev(a)fairwaves.co> --- TODO-RELEASE | 1 + include/osmocom/gsm/a5.h | 2 - src/gsm/a5.c | 98 ++++++++++++++++++++++++------------------------ src/gsm/libosmogsm.map | 2 - 4 files changed, 49 insertions(+), 54 deletions(-) diff --git a/TODO-RELEASE b/TODO-RELEASE index d03aa49..ddae4c9 100644 --- a/TODO-RELEASE +++ b/TODO-RELEASE @@ -1,2 +1,3 @@ #library what description / commit summary line +libosmogsm api-change remove osmo_a5_1 and osmo_a5_2 - generic osmo_a5 should suffice for all use cases libosmogb abi-change bssgp: Fix bssgp_tx_fc_bvc parameter type diff --git a/include/osmocom/gsm/a5.h b/include/osmocom/gsm/a5.h index d22cdbb..9d12b03 100644 --- a/include/osmocom/gsm/a5.h +++ b/include/osmocom/gsm/a5.h @@ -54,7 +54,5 @@ osmo_a5_fn_count(uint32_t fn) * (converted internally to fn_count) */ int osmo_a5(int n, const uint8_t *key, uint32_t fn, ubit_t *dl, ubit_t *ul); -void osmo_a5_1(const uint8_t *key, uint32_t fn, ubit_t *dl, ubit_t *ul); -void osmo_a5_2(const uint8_t *key, uint32_t fn, ubit_t *dl, ubit_t *ul); /*! @} */ diff --git a/src/gsm/a5.c b/src/gsm/a5.c index d0c7c5f..225ff87 100644 --- a/src/gsm/a5.c +++ b/src/gsm/a5.c @@ -101,54 +101,6 @@ _a5_3(const uint8_t *key, uint32_t fn, ubit_t *dl, ubit_t *ul, bool fn_correct) _a5_4(ck, fn, dl, ul, fn_correct); } -/*! \brief Main method to generate a A5/x cipher stream - * \param[in] n Which A5/x method to use - * \param[in] key 8 or 16 (for a5/4) byte array for the key (as received from the SIM) - * \param[in] fn Frame number - * \param[out] dl Pointer to array of ubits to return Downlink cipher stream - * \param[out] ul Pointer to array of ubits to return Uplink cipher stream - * \returns 0 for success, -ENOTSUP for invalid cipher selection. - * - * Currently A5/[0-4] are supported. - * Either (or both) of dl/ul can be NULL if not needed. - */ -int -osmo_a5(int n, const uint8_t *key, uint32_t fn, ubit_t *dl, ubit_t *ul) -{ - switch (n) - { - case 0: - if (dl) - memset(dl, 0x00, 114); - if (ul) - memset(ul, 0x00, 114); - break; - - case 1: - osmo_a5_1(key, fn, dl, ul); - break; - - case 2: - osmo_a5_2(key, fn, dl, ul); - break; - - case 3: - _a5_3(key, fn, dl, ul, true); - break; - - case 4: - _a5_4(key, fn, dl, ul, true); - break; - - default: - /* a5/[5..7] not supported here/yet */ - return -ENOTSUP; - } - - return 0; -} - - /* ------------------------------------------------------------------------ */ /* A5/1&2 common stuff */ /* ------------------------------------------------------------------------ */ @@ -261,7 +213,7 @@ _a5_1_get_output(uint32_t r[]) * Either (or both) of dl/ul can be NULL if not needed. */ void -osmo_a5_1(const uint8_t *key, uint32_t fn, ubit_t *dl, ubit_t *ul) +_a5_1(const uint8_t *key, uint32_t fn, ubit_t *dl, ubit_t *ul) { uint32_t r[3] = {0, 0, 0}; uint32_t fn_count; @@ -378,7 +330,7 @@ _a5_2_get_output(uint32_t r[]) * Either (or both) of dl/ul can be NULL if not needed. */ void -osmo_a5_2(const uint8_t *key, uint32_t fn, ubit_t *dl, ubit_t *ul) +_a5_2(const uint8_t *key, uint32_t fn, ubit_t *dl, ubit_t *ul) { uint32_t r[4] = {0, 0, 0, 0}; uint32_t fn_count; @@ -437,5 +389,51 @@ osmo_a5_2(const uint8_t *key, uint32_t fn, ubit_t *dl, ubit_t *ul) ul[i] = _a5_2_get_output(r); } } +/*! \brief Main method to generate a A5/x cipher stream + * \param[in] n Which A5/x method to use + * \param[in] key 8 or 16 (for a5/4) byte array for the key (as received from the SIM) + * \param[in] fn Frame number + * \param[out] dl Pointer to array of ubits to return Downlink cipher stream + * \param[out] ul Pointer to array of ubits to return Uplink cipher stream + * \returns 0 for success, -ENOTSUP for invalid cipher selection. + * + * Currently A5/[0-4] are supported. + * Either (or both) of dl/ul can be NULL if not needed. + */ +int +osmo_a5(int n, const uint8_t *key, uint32_t fn, ubit_t *dl, ubit_t *ul) +{ + switch (n) + { + case 0: + if (dl) + memset(dl, 0x00, 114); + if (ul) + memset(ul, 0x00, 114); + break; + + case 1: + _a5_1(key, fn, dl, ul); + break; + + case 2: + _a5_2(key, fn, dl, ul); + break; + + case 3: + _a5_3(key, fn, dl, ul, true); + break; + + case 4: + _a5_4(key, fn, dl, ul, true); + break; + + default: + /* a5/[5..7] not supported here/yet */ + return -ENOTSUP; + } + + return 0; +} /*! @} */ diff --git a/src/gsm/libosmogsm.map b/src/gsm/libosmogsm.map index 22428a2..56f33d9 100644 --- a/src/gsm/libosmogsm.map +++ b/src/gsm/libosmogsm.map @@ -201,8 +201,6 @@ ms_pwr_ctl_lvl; ms_pwr_dbm; osmo_a5; -osmo_a5_1; -osmo_a5_2; osmo_auth_alg_name; osmo_auth_alg_parse; -- 2.1.4

1 0

[PATCH] ignore .deb build logs
by Max 01 Jun '15

01 Jun '15

Signed-off-by: Max <max.suraev(a)fairwaves.co> --- .gitignore | 1 + 1 file changed, 1 insertion(+) diff --git a/.gitignore b/.gitignore index 24c3af7..56133da 100644 --- a/.gitignore +++ b/.gitignore @@ -41,6 +41,7 @@ debian/tmp/ debian/libosmocore*.substvars debian/libosmocore/ debian/libosmocore.post*.debhelper +debian/*.log .tarball-version .version -- 2.1.4

1 0

Baseband: MS '1' is up, service is limited
by Hoàng Mạnh Hùng 22 May '15

22 May '15

Hi all, *I connected, sent and made call successful with osmocombb (with real IMSI and IMEI). But, now, I get error, always be rejected:* OsmocomBB# show ms MS '1' is up, service is limited IMEI: 357337016773249 IMEISV: 3573370167732490 IMEI generation: fixed automatic network selection state: A0 null cell selection state: PLMN search radio ressource layer state: idle mobility management layer state: MM idle, PLMN search OsmocomBB# % (MS 1) % Trying to registering with network... *in my config file (/root/.osmocom/bb/mobile.cfg)**:* ! ! OsmocomBB () configuration saved from vty !! ! line vty no login ! gps device /dev/ttyACM0 gps baudrate default no gps enable ! no hide-default ! ms 1 layer2-socket /tmp/osmocom_l2 sap-socket /tmp/osmocom_sap sim reader network-selection-mode auto imei 357337016773249 0 imei-fixed emergency-imsi 452040399998391 sms-service-center +84980200030 no call-waiting no auto-answer no force-rekey no clip no clir tx-power auto no simulated-delay no stick location-updating neighbour-measurement codec full-speed prefer codec half-speed no abbrev support sms a5/1 a5/2 p-gsm e-gsm r-gsm gsm-850 dcs pcs class-900 4 class-850 4 class-dcs 1 class-pcs 1 channel-capability sdcch+tchf+tchh full-speech-v1 full-speech-v2 half-speech-v1 min-rxlev -106 dsc-max 90 no skip-max-per-band exit test-sim imsi 001010000000000 ki xor 00 00 00 00 00 00 00 00 00 00 00 00 no barred-access no rplmn hplmn-search foreign-country exit no shutdown exit ! Anyone help me???, thanks a lot! -- Thanks and Best Regards -- From: Hoàng Mạnh Hùng

5 10

c139 nuttx bringup - irq problem?
by Craig Comstock 12 May '15

12 May '15

Hi, I'm working on bringing up nuttx on the c139. I am running this as I described previously by jumping from 0x2000 to 0x10000 with a small firmware image there and then nuttx is configured to run from flash at 0x10000. I configured nuttx RAM to live at 0x800100 to skip the exception vectors area that the compal loader sets up. NuttX is coming up somewhat but getting stuck on an unregistered interrupt #21 which seems strange since there are 21 interrupts and I thought they might be 0-based so not sure what's going on here. Was wondering if there was some state that the compal loader setup that is giving me problems or if there is some other issue going on. If anyone has an idea off-hand let me know. If I take a DEBUGASSERT() out is when I get the info about irq 21. With the DEBUGASSERT() in it seems I'm trying to do initialization during interrupt handling somehow? "This API should not be called from interrupt handlers" is the comment near the assert in sem_wait(). Attached is a serial log from the phone booting up. I've added a lot of debug logging beyond what is normally in NuttX. I included first a log with DEBUGASSERT() included and then one without. Thanks,Craig

1 0

patch on jolly/menu for jumper app
by Craig Comstock 08 May '15

08 May '15

Here is a patch for a simple "jumper" app which loads at 0x2000 and which disables the irqs (thought it might help with the nuttx startup error I have) and jumps to 0x10000 (where I have flashed nuttx). I'm submitting a patch to nuttx as well for building nuttx.bin for running in compal_e86 flash. I may have fouled up the patch due to being on jolly/menu. Wasn't sure if you wanted to pull in those changes as well? I've certainly used the menu app with the flashing_new instructions and it seems to work great on my c139. -Craig

1 0

nuttx, menu, loader, running from flash
by Craig Comstock 07 May '15

07 May '15

Hi, I'm trying to get nuttx running on my C139 compal_e86(88?) phone. I have been reading some emails and loader scripts but am a bit unexperienced with this area of software. I've managed to use the "menu" app with flashing successfully but so far am unable to get nuttx to run either due to the compal loader not letting me load more than 128k into highram or the flash setup not being quite right in terms of loader scripts. I think what I would like is this (based loosely on LINKAGE.txt in osmocom-bb/.../compal_e88) - keep compal loader at 0x0- put something custom at 0x2000, either the menu app or a simple 2nd stage loader- put nuttx at 0x10000 The "menu" app option (http://bb.osmocom.org/trac/wiki/flashing_new) would require me to modify that code a bit so that I wasn't copying nuttx into highram but instead just running it "in-place" in flash. So maybe two header options: "highram:APPNAME" and "flash:APPNAME"? I suppose I could try running nuttx in highram as menu currently intends, by copying it from flash to ram but that seems sort of "wrong" if nuttx is my main goal. The "other" option would be to write some simple loader for 0x2000 which did whatever setup might be required (none?) and simply jump to 0x10000. That way the ideas in LINKAGE.txt about safety and what-not are preserved. If I need to flash a new nuttx image I don't have to worry about ruining page 0 and compal loader and bricking the phone. Another option would be to replace the compal loader but I'd rather get to nuttx sooner than later and don't see much immediate advantage to an entirely custom bootloader. If I preserve the compal loader then all the normal osmocom-bb functionality is preserved in terms of being able to load layer1, rssi if you want to in highram while nuttx could be living in flash for booting into "normally" to use as a consumer-style device. I think I prefer the "other" option I mention above to keep things fairly simple. Do you think I can just use the flash.lds from compal_e88, modify slightly for e86 (bigger IRAM I think is the only change) and simply put a jump at 0x2000 to 0x10000? Would that take care of exception vectors, setup and all the other stuff I don't currently understand about bringing things "up"? Just FYI, I am working off the latest nuttx code and not nuttx-bb since nuttx-bb seems pretty out of date. Not sure what folks want to do with that. Thanks,Craig

1 1

Osmocom-bb cell sync problem in my version without HW
by Miroslav Babjak 28 Apr '15

28 Apr '15

Hi everyone, I am working on modification the osmocom-bb project. I try modified the osmocom-bb which could communicate with BTS via UDP sockets. Here you can find the project: https://github.com/clovnrian/osmocom-bb-gprs-no-hw I have problem with cell syncing. This is output from mobile: <0003> gsm322.c:2947 Channel synched. (ARFCN=17, snr=0, BSIC=0) <0003> gsm322.c:698 Starting CS timer with 4 seconds. <0001> gsm322.c:2968 using DSC of 90 The CS timer always timeout. On github you can see what messages BTS sends to mobile. Does anybody know what I have to do to or what message I have to send to mobile? I will be grateful for any help With regards Miroslav Babják

1 0

[PATCH] SAP client - revisited
by Tomcsányi, Domonkos 28 Apr '15

28 Apr '15

Hi everyone, I'm following up on this conversation: http://comments.gmane.org/gmane.comp.mobile.osmocom.baseband.devel/1796 It seems like there was no movement in this topic in the last couple of years, so I decided to go ahead and integrate Nico's SAP client into the current master branch and created a patch from it. I tested it (with Kevin's softSIM and a pcsc reader), it worked for me, however it is currently quite ugly: it kind of hand crafts the msgb structure (in l1ctl.c, patch line 121), sorry for that, but I kept getting extra bytes stuffed into the msg that was passed to the sap_interface so I decided to manually go around the problem. I'm of course open to any suggestions to get it cleaner, and then if you think and decide so it could be merged into the master (as far as I see. One thing however that I think is strange, and worth mentioning: I'm not sure why Nico decided to implement the switch between phone and SAP-client inside of l1ctl.c, for me it would feel better to do it in sim.c (since sim.c deals with SIM activities, l1ctl should deal only with L1 stuff...also the current SAP client calls back to sim.c, but receives data from l1ctl - little bit confusing), but I left it as is because of not knowing exactly the thoughts behind it. Regards, Domi

3 3

nuttx-bb?
by Craig Comstock 17 Apr '15

17 Apr '15

Hi all, Was starting to work on making a usable phone again and wondered about the status of nuttx-bb git on osmocom.org versus nuttx source. It seems nuttx source is more up-to-date and has configs for my device: compal_e86/c139. Wondering if there is something in nuttx-bb that is unique that I should pay attention to? Should nuttx-bb be rebased from nuttx upstream? I was able to cobble together a nuttx.bin but on loading it always stops at 88% with the chainloader. The nuttx.bin is 148K which would seem plenty of room since the C139 has 4000K flash (32MBit) (am I doing that calculation correctly)? I had to fiddle with the MEMORY section of the ld.script in order to make space for nuttx, I'm not too familiar with this sort of thing so may have done something wrong... /* E86 stacked flash 32mbit flash, 4mbit sram, DBB internal 256kb SRAM */ /* 0x800000-0x87ffff */ /* bump up because we have 32mbit instead of 16mbit */ /* compal-loaded binary: our text, initialized data */ LRAM (rw) : ORIGIN = 0x00800000, LENGTH = 0x00020000 TRAM (rw) : ORIGIN = 0x00820000, LENGTH = 0x00040000 /* compal-loaded binary: our unitialized data, stacks, heap */ IRAM (rw) : ORIGIN = 0x00860000, LENGTH = 0x00020000 Originally TRAM was 20000 long and gave me an error on building. Not sure if I can fiddle with these values or not. Thanks,Craig

1 2

[PATCH] Fix lintian-reported errors
by Max 08 Apr '15

08 Apr '15

Signed-off-by: Max <max.suraev(a)fairwaves.co> --- debian/README.source | 1 + debian/control | 17 ++++++++++++++--- debian/copyright | 15 ++------------- 3 files changed, 17 insertions(+), 16 deletions(-) create mode 100644 debian/README.source diff --git a/debian/README.source b/debian/README.source new file mode 100644 index 0000000..982a696 --- /dev/null +++ b/debian/README.source @@ -0,0 +1 @@ +We do some Debian-specific source patching magic. See debian/patches for clarification. diff --git a/debian/control b/debian/control index 7de6358..1470e73 100644 --- a/debian/control +++ b/debian/control @@ -2,7 +2,7 @@ Source: libosmocore Section: libs Priority: optional Maintainer: Harald Welte <laforge(a)gnumonks.org> -Build-Depends: debhelper (>= 9), autotools-dev, autoconf, automake, libtool, dh-autoreconf, libdpkg-perl, git, doxygen, libpcsclite-dev, pkg-config +Build-Depends: debhelper (>= 9), autotools-dev, autoconf, automake, libtool, dh-autoreconf, libdpkg-perl, git, doxygen, libpcsclite-dev, pkg-config, quilt Standards-Version: 3.9.6 Homepage: http://bb.osmocom.org/trac/wiki/libosmocore Vcs-Git: git://git.osmocom.org/libosmocore.git @@ -14,6 +14,7 @@ Architecture: any Depends: libosmocodec0, libosmocore6, libosmogb3, libosmogsm5, libosmovty1, ${misc:Depends} Multi-Arch: foreign Description: Open Source MObile COMmunications CORE library + Metapackage for Open Source MObile COMmunications CORE library. Package: libosmocodec0 Section: libs @@ -21,6 +22,7 @@ Architecture: any Depends: ${shlibs:Depends}, ${misc:Depends} Multi-Arch: same Description: Osmo codec library + Open Source MObile COMmunications codec library. Package: libosmocore6 Section: libs @@ -28,6 +30,7 @@ Architecture: any Depends: ${shlibs:Depends}, ${misc:Depends} Multi-Arch: same Description: Osmo Core library + Open Source MObile COMmunications CORE library. Package: libosmogb3 Section: libs @@ -35,6 +38,7 @@ Architecture: any Depends: ${shlibs:Depends}, ${misc:Depends} Multi-Arch: same Description: Osmo GPRS GB library + Open Source MObile COMmunications library containing GPRS support functions. Package: libosmogsm5 Section: libs @@ -42,6 +46,7 @@ Architecture: any Depends: ${shlibs:Depends}, ${misc:Depends} Multi-Arch: same Description: Osmo GSM utility library + Open Source MObile COMmunications library implementing various GSM routines. Package: libosmovty1 Section: libs @@ -49,6 +54,7 @@ Architecture: any Depends: ${shlibs:Depends}, ${misc:Depends} Multi-Arch: same Description: Osmo VTY library + Open Source MObile COMmunications library implementing VTY interface. Package: libosmoctrl0 Section: libs @@ -56,6 +62,7 @@ Architecture: any Depends: ${shlibs:Depends}, ${misc:Depends} Multi-Arch: same Description: Osmo control library + Open Source MObile COMmunications control library. Package: libosmosim0 Section: libs @@ -63,19 +70,22 @@ Architecture: any Depends: ${shlibs:Depends}, ${misc:Depends} Multi-Arch: same Description: Osmo SIM library - + Open Source MObile COMmunications SIM library. + Package: libosmocore-dev Section: libdevel Architecture: any -Depends: ${misc:Depends}, libosmocore +Depends: ${misc:Depends}, libosmocore, libjs-jquery Multi-Arch: same Description: Development headers for Open Source MObile COMmunications CORE library + Open Source MObile COMmunications library development files. Package: libosmocore-utils Architecture: any Depends: ${shlibs:Depends}, ${misc:Depends}, libosmocore Multi-Arch: same Description: Utilities for gsm + Open Source MObile COMmunications library utilities. Package: libosmocore-dbg Architecture: any @@ -84,3 +94,4 @@ Priority: extra Depends: libosmocore (= ${binary:Version}), ${misc:Depends} Multi-Arch: same Description: Debug symbols for Open Source MObile COMmunications CORE library + Debug version of Open Source MObile COMmunications CORE library. diff --git a/debian/copyright b/debian/copyright index c450be5..c2bfe66 100644 --- a/debian/copyright +++ b/debian/copyright @@ -6,7 +6,7 @@ It was downloaded from: git://git.osmocom.org/libosmocore.git -Upstream Author(s): +Upstream Authors: Harald Welte <laforge(a)gnumonks.org> Holger Hans Peter Freyther <zecke(a)selfish.org> @@ -36,19 +36,8 @@ Copyright: License: GNU General Public License, Version 2 or later + see "/usr/share/common-licenses/GPL-2" The Debian packaging is: Copyright (C) 2010 Harald Welte <laforge(a)gnumonks.org> - -# Please chose a license for your packaging work. If the program you package -# uses a mainstream license, using the same license is the safest choice. -# Please avoid to pick license terms that are more restrictive than the -# packaged work, as it may make Debian's contributions unacceptable upstream. -# If you just want it to be GPL version 3, leave the following lines in. - -and is licensed under the GPL version 3, -see "/usr/share/common-licenses/GPL-3". - -# Please also look if there are files or directories which have a -# different copyright/license attached and list them here. -- 2.1.0

3 4

[PATCH] Add A5/3-4 cipher support
by Max 08 Apr '15

08 Apr '15

Signed-off-by: Max <max.suraev(a)fairwaves.co> --- include/osmocom/gsm/a5.h | 2 +- src/gsm/a5.c | 71 ++++++++++++++++++++++++++++++++++++++++++++++-- tests/Makefile.am | 3 +- tests/a5/a5_test.c | 67 +++++++++++++++++++++++++++++++++++---------- tests/a5/a5_test.ok | 24 ++++++++++++++++ 5 files changed, 148 insertions(+), 19 deletions(-) diff --git a/include/osmocom/gsm/a5.h b/include/osmocom/gsm/a5.h index c076734..d22cdbb 100644 --- a/include/osmocom/gsm/a5.h +++ b/include/osmocom/gsm/a5.h @@ -48,7 +48,7 @@ osmo_a5_fn_count(uint32_t fn) } /* Notes: - * - key must be 8 bytes long (or NULL for A5/0) + * - key must be 8 or 16 (for a5/4) bytes long (or NULL for A5/0) * - the dl and ul pointer must be either NULL or 114 bits long * - fn is the _real_ GSM frame number. * (converted internally to fn_count) diff --git a/src/gsm/a5.c b/src/gsm/a5.c index 10a063e..d0c7c5f 100644 --- a/src/gsm/a5.c +++ b/src/gsm/a5.c @@ -36,23 +36,80 @@ #include <errno.h> #include <string.h> +#include <stdbool.h> #include <osmocom/gsm/a5.h> +#include <osmocom/gsm/kasumi.h> /* Somme OS (like Nuttx) don't have ENOTSUP */ #ifndef ENOTSUP #define ENOTSUP EINVAL #endif +/* ------------------------------------------------------------------------ */ +/* A5/3&4 */ +/* ------------------------------------------------------------------------ */ + +/*! \brief Generate a GSM A5/4 cipher stream + * \param[in] key 16 byte array for the key (as received from the SIM) + * \param[in] fn Frame number + * \param[out] dl Pointer to array of ubits to return Downlink cipher stream + * \param[out] ul Pointer to array of ubits to return Uplink cipher stream + * \param[in] fn_correct true if fn is a real GSM frame number and thus requires internal conversion + * + * Either (or both) of dl/ul should be NULL if not needed. + * + * Implementation based on specifications from 3GPP TS 55.216, 3GPP TR 55.919 and ETSI TS 135 202 + * with slight simplifications (CE hardcoded to 0). + */ +void +_a5_4(const uint8_t *ck, uint32_t fn, ubit_t *dl, ubit_t *ul, bool fn_correct) +{ + uint8_t i, gamma[32], uplink[15]; + uint32_t fn_count = (fn_correct) ? osmo_a5_fn_count(fn) : fn; + + if (ul) { + _kasumi_kgcore(0xF, 0, fn_count, 0, ck, gamma, 228); + for(i = 0; i < 15; i++) uplink[i] = (gamma[i + 14] << 2) + (gamma[i + 15] >> 6); + osmo_pbit2ubit(ul, uplink, 114); + } + if (dl) { + _kasumi_kgcore(0xF, 0, fn_count, 0, ck, gamma, 114); + osmo_pbit2ubit(dl, gamma, 114); + } +} + +/*! \brief Generate a GSM A5/3 cipher stream + * \param[in] key 8 byte array for the key (as received from the SIM) + * \param[in] fn Frame number + * \param[out] dl Pointer to array of ubits to return Downlink cipher stream + * \param[out] ul Pointer to array of ubits to return Uplink cipher stream + * \param[in] fn_correct true if fn is a real GSM frame number and thus requires internal conversion + * + * Either (or both) of dl/ul should be NULL if not needed. + * + * Implementation based on specifications from 3GPP TS 55.216, 3GPP TR 55.919 and ETSI TS 135 202 + * with slight simplifications (CE hardcoded to 0). + */ +void +_a5_3(const uint8_t *key, uint32_t fn, ubit_t *dl, ubit_t *ul, bool fn_correct) +{ + uint8_t ck[16]; + memcpy(ck, key, 8); + memcpy(ck + 8, key, 8); + /* internal function require 128 bit key so we expand by concatenating supplied 64 bit key */ + _a5_4(ck, fn, dl, ul, fn_correct); +} + /*! \brief Main method to generate a A5/x cipher stream * \param[in] n Which A5/x method to use - * \param[in] key 8 byte array for the key (as received from the SIM) + * \param[in] key 8 or 16 (for a5/4) byte array for the key (as received from the SIM) * \param[in] fn Frame number * \param[out] dl Pointer to array of ubits to return Downlink cipher stream * \param[out] ul Pointer to array of ubits to return Uplink cipher stream * \returns 0 for success, -ENOTSUP for invalid cipher selection. * - * Currently A5/[0-2] are supported. + * Currently A5/[0-4] are supported. * Either (or both) of dl/ul can be NULL if not needed. */ int @@ -75,8 +132,16 @@ osmo_a5(int n, const uint8_t *key, uint32_t fn, ubit_t *dl, ubit_t *ul) osmo_a5_2(key, fn, dl, ul); break; + case 3: + _a5_3(key, fn, dl, ul, true); + break; + + case 4: + _a5_4(key, fn, dl, ul, true); + break; + default: - /* a5/[3..7] not supported here/yet */ + /* a5/[5..7] not supported here/yet */ return -ENOTSUP; } diff --git a/tests/Makefile.am b/tests/Makefile.am index 2c80063..809bf64 100644 --- a/tests/Makefile.am +++ b/tests/Makefile.am @@ -18,8 +18,9 @@ endif utils_utils_test_SOURCES = utils/utils_test.c utils_utils_test_LDADD = $(top_builddir)/src/libosmocore.la -a5_a5_test_SOURCES = a5/a5_test.c +a5_a5_test_SOURCES = a5/a5_test.c ../src/gsm/a5.c a5_a5_test_LDADD = $(top_builddir)/src/libosmocore.la $(top_builddir)/src/gsm/libosmogsm.la +a5_a5_test_LDFLAGS = -static kasumi_kasumi_test_SOURCES = kasumi/kasumi_test.c ../src/gsm/kasumi.c kasumi_kasumi_test_LDADD = $(top_builddir)/src/libosmocore.la $(top_builddir)/src/gsm/libosmogsm.la diff --git a/tests/a5/a5_test.c b/tests/a5/a5_test.c index 14436f1..0dbc6fb 100644 --- a/tests/a5/a5_test.c +++ b/tests/a5/a5_test.c @@ -2,6 +2,7 @@ #include <stdlib.h> #include <stdint.h> #include <string.h> +#include <stdbool.h> #include <osmocom/core/bits.h> #include <osmocom/core/utils.h> @@ -36,24 +37,48 @@ static const uint8_t ul[] = { 0x80, 0xba, 0xab, 0xc0, 0x59, 0x26, 0x40, }; -static const char * -binstr(ubit_t *d, int n) +static inline bool print_a5(int n, int k, const char * dir, const ubit_t * out, const char * block) { - static char str[256]; - int i; + uint8_t len = 114 / 8 + 1, buf[len], res[len]; + printf("A5/%d - %s: %s => ", n, dir, osmo_ubit_dump(out, 114)); + osmo_hexparse(block, res, len); + osmo_ubit2pbit(buf, out, 114); + if (0 != memcmp(buf, res, len)) { + printf("FAIL\nGOT: [%d] %s\nEXP: [%d] %s\n", k, osmo_hexdump_nospc(buf, len), k, osmo_hexdump_nospc(res, len)); + return false; + } + printf("OK\n"); + return true; +} + +static inline bool test_a53(const char * kc, uint32_t count, const char * block1, const char * block2) +{ + ubit_t dlout[114], ulout[114]; + uint8_t key[8]; + + osmo_hexparse(kc, key, 8); + _a5_3(key, count, dlout, NULL, false); + _a5_3(key, count, NULL, ulout, false); - for (i=0; i<n; i++) - str[i] = d[i] ? '1' : '0'; + return print_a5(3, 8, "DL", dlout, block1) & print_a5(3, 8, "UL", ulout, block2); +} + +static inline bool test_a54(const char * kc, uint32_t count, const char * block1, const char * block2) +{ + ubit_t dlout[114], ulout[114]; + uint8_t key[16]; - str[i] = '\0'; + osmo_hexparse(kc, key, 16); + _a5_4(key, count, dlout, NULL, false); + _a5_4(key, count, NULL, ulout, false); - return str; + return print_a5(4, 8, "DL", dlout, block1) & print_a5(4, 8, "UL", ulout, block2); } + int main(int argc, char **argv) { - ubit_t exp[114]; - ubit_t out[114]; + ubit_t exp[114], out[114]; int n, i; for (n=0; n<3; n++) { @@ -66,13 +91,13 @@ int main(int argc, char **argv) osmo_a5(n, key, fn, out, NULL); - printf("A5/%d - DL: %s", n, binstr(out, 114)); + printf("A5/%d - DL: %s", n, osmo_ubit_dump(out, 114)); if (!memcmp(exp, out, 114)) printf(" => OK\n"); else { printf(" => BAD\n"); - printf(" Expected: %s", binstr(out, 114)); + printf(" Expected: %s", osmo_ubit_dump(out, 114)); fprintf(stderr, "[!] A5/%d DL failed", n); exit(1); } @@ -82,17 +107,31 @@ int main(int argc, char **argv) osmo_a5(n, key, fn, NULL, out); - printf("A5/%d - UL: %s", n, binstr(out, 114)); + printf("A5/%d - UL: %s", n, osmo_ubit_dump(out, 114)); if (!memcmp(exp, out, 114)) printf(" => OK\n"); else { printf(" => BAD\n"); - printf(" Expected: %s", binstr(out, 114)); + printf(" Expected: %s", osmo_ubit_dump(out, 114)); fprintf(stderr, "[!] A5/%d UL failed", n); exit(1); } } +// test vectors from 3GPP TS 55.217 and TS 55.218 + test_a53("2BD6459F82C5BC00", 0x24F20F, "889EEAAF9ED1BA1ABBD8436232E440", "5CA3406AA244CF69CF047AADA2DF40"); + test_a53("952C49104881FF48", 0x061272, "FB4D5FBCEE13A33389285686E9A5C0", "25090378E0540457C57E367662E440"); + test_a53("EFA8B2229E720C2A", 0x33FD3F, "0E4015755A336469C3DD8680E30340", "6F10669E2B4E18B042431A28E47F80"); + test_a53("952C49104881FF48", 0x061527, "AB7DB38A573A325DAA76E4CB800A40", "4C4B594FEA9D00FE8978B7B7BC1080"); + test_a53("3451F23A43BD2C87", 0x0E418C, "75F7C4C51560905DFBA05E46FB54C0", "192C95353CDF979E054186DF15BF00"); + test_a53("CAA2639BE82435CF", 0x2FF229, "301437E4D4D6565D4904C631606EC0", "F0A3B8795E264D3E1A82F684353DC0"); + test_a53("7AE67E87400B9FA6", 0x2F24E5, "F794290FEF643D2EA348A7796A2100", "CB6FA6C6B8A705AF9FEFE975818500"); + test_a53("58AF69935540698B", 0x05446B, "749CA4E6B691E5A598C461D5FE4740", "31C9E444CD04677ADAA8A082ADBC40"); + test_a53("017F81E5F236FE62", 0x156B26, "2A6976761E60CC4E8F9F52160276C0", "A544D8475F2C78C35614128F1179C0"); + test_a53("1ACA8B448B767B39", 0x0BC3B5, "A4F70DC5A2C9707F5FA1C60EB10640", "7780B597B328C1400B5C74823E8500"); + test_a54("3D43C388C9581E337FF1F97EB5C1F85E", 0x35D2CF, "A2FE3034B6B22CC4E33C7090BEC340", "170D7497432FF897B91BE8AECBA880"); + test_a54("A4496A64DF4F399F3B4506814A3E07A1", 0x212777, "89CDEE360DF9110281BCF57755A040", "33822C0C779598C9CBFC49183AF7C0"); + return 0; } diff --git a/tests/a5/a5_test.ok b/tests/a5/a5_test.ok index 4497e14..cefcdb6 100644 --- a/tests/a5/a5_test.ok +++ b/tests/a5/a5_test.ok @@ -4,3 +4,27 @@ A5/1 - DL: 110010111010001001010101011101100001011101011101001110110001110001111 A5/1 - UL: 110110010000001101011110000011110010101011101100000100111001101000000101110101001010100001111011101100010110010010 => OK A5/2 - DL: 010001011001110010001000110000111000001010110111111111111011001110011000110100101111100101101110000011110001010010 => OK A5/2 - UL: 111100000011101010101100110111101110001101011011010111100110010110000000101110101010101111000000010110010010011001 => OK +A5/3 - DL: 100010001001111011101010101011111001111011010001101110100001101010111011110110000100001101100010001100101110010001 => OK +A5/3 - UL: 010111001010001101000000011010101010001001000100110011110110100111001111000001000111101010101101101000101101111101 => OK +A5/3 - DL: 111110110100110101011111101111001110111000010011101000110011001110001001001010000101011010000110111010011010010111 => OK +A5/3 - UL: 001001010000100100000011011110001110000001010100000001000101011111000101011111100011011001110110011000101110010001 => OK +A5/3 - DL: 000011100100000000010101011101010101101000110011011001000110100111000011110111011000011010000000111000110000001101 => OK +A5/3 - UL: 011011110001000001100110100111100010101101001110000110001011000001000010010000110001101000101000111001000111111110 => OK +A5/3 - DL: 101010110111110110110011100010100101011100111010001100100101110110101010011101101110010011001011100000000000101001 => OK +A5/3 - UL: 010011000100101101011001010011111110101010011101000000001111111010001001011110001011011110110111101111000001000010 => OK +A5/3 - DL: 011101011111011111000100110001010001010101100000100100000101110111111011101000000101111001000110111110110101010011 => OK +A5/3 - UL: 000110010010110010010101001101010011110011011111100101111001111000000101010000011000011011011111000101011011111100 => OK +A5/3 - DL: 001100000001010000110111111001001101010011010110010101100101110101001001000001001100011000110001011000000110111011 => OK +A5/3 - UL: 111100001010001110111000011110010101111000100110010011010011111000011010100000101111011010000100001101010011110111 => OK +A5/3 - DL: 111101111001010000101001000011111110111101100100001111010010111010100011010010001010011101111001011010100010000100 => OK +A5/3 - UL: 110010110110111110100110110001101011100010100111000001011010111110011111111011111110100101110101100000011000010100 => OK +A5/3 - DL: 011101001001110010100100111001101011011010010001111001011010010110011000110001000110000111010101111111100100011101 => OK +A5/3 - UL: 001100011100100111100100010001001100110100000100011001110111101011011010101010001010000010000010101011011011110001 => OK +A5/3 - DL: 001010100110100101110110011101100001111001100000110011000100111010001111100111110101001000010110000000100111011011 => OK +A5/3 - UL: 101001010100010011011000010001110101111100101100011110001100001101010110000101000001001010001111000100010111100111 => OK +A5/3 - DL: 101001001111011100001101110001011010001011001001011100000111111101011111101000011100011000001110101100010000011001 => OK +A5/3 - UL: 011101111000000010110101100101111011001100101000110000010100000000001011010111000111010010000010001111101000010100 => OK +A5/4 - DL: 101000101111111000110000001101001011011010110010001011001100010011100011001111000111000010010000101111101100001101 => OK +A5/4 - UL: 000101110000110101110100100101110100001100101111111110001001011110111001000110111110100010101110110010111010100010 => OK +A5/4 - DL: 100010011100110111101110001101100000110111111001000100010000001010000001101111001111010101110111010101011010000001 => OK +A5/4 - UL: 001100111000001000101100000011000111011110010101100110001100100111001011111111000100100100011000001110101111011111 => OK -- 2.1.0

3 3

[PATCH] fix compiler warnings for a5 tests
by Max 06 Apr '15

06 Apr '15

Signed-off-by: Max <max.suraev(a)fairwaves.co> --- tests/a5/a5_test.c | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/tests/a5/a5_test.c b/tests/a5/a5_test.c index 0dbc6fb..6d7cc3c 100644 --- a/tests/a5/a5_test.c +++ b/tests/a5/a5_test.c @@ -8,6 +8,10 @@ #include <osmocom/core/utils.h> #include <osmocom/gsm/a5.h> +// make compiler happy +void _a5_3(const uint8_t *key, uint32_t fn, ubit_t *dl, ubit_t *ul, bool fn_correct); +void _a5_4(const uint8_t *key, uint32_t fn, ubit_t *dl, ubit_t *ul, bool fn_correct); + static const uint8_t key[] = { 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef }; static const uint32_t fn = 123456; static const uint8_t dl[] = { -- 2.1.0

1 0

patches4review
by ☎ 29 Mar '15

29 Mar '15

Hi. As a follow-up on today's discussion here are the links to patches I'd like to get reviewed and merged: gprs-related: http://patchwork.ozlabs.org/patch/360414/ http://patchwork.ozlabs.org/patch/360435/ http://patchwork.ozlabs.org/patch/368252/ api cleanup: http://patchwork.ozlabs.org/patch/360430/ http://patchwork.ozlabs.org/patch/360431/ Also, would be nice to get patchwork subscribed back to ML. -- best regards, Max, http://fairwaves.co

1 0

Missing packet when sniffing by luca/gsmmap
by Swift 16 Mar '15

16 Mar '15

Hi there, I am sorry to bother you but I am really confused by recent experiment. When I was doing the GSM sniffing I found that some of sms messages that were sent continuesly were missing, I can only capture 50-60% of all test messages. By analyzing wireshark data I found that osmocom program keeps tracking packets(lapdm) once an Immediate Assignment captured and if at the same time there comes another Immediate Assignment the program will miss it.I think this is the reason why i lost some messages.So is there any suggestions I can fix this up? Like using a backup phone to capture the second Immediate Assignment during one period? Thanks, Swift -- View this message in context: http://baseband-devel.722152.n3.nabble.com/Missing-packet-when-sniffing-by-… Sent from the baseband-devel mailing list archive at Nabble.com.

2 1

Osmocom Project
by Radiarisainana Sitraka 11 Mar '15

11 Mar '15

What is the best OS to install Osmocom?The Modem 3g Huawei E3131A can be used by OsmocomBB ?

1 0

OS-Hardward Osmocom
by Radiarisainana Sitraka 11 Mar '15

11 Mar '15

what the best os to us osmocom?Can we run Osmocom with 3G modem Huawei E3131A

1 0

Re: baseband-devel Digest, Vol 3, Issue 7
by Ravi Sharan 09 Mar '15

09 Mar '15

Sanchit, You might want to consider applying this patch. Ravi Sharan. On Sun, Jan 25, 2015 at 2:43 PM, <baseband-devel-request(a)lists.osmocom.org> wrote: > Send baseband-devel mailing list submissions to > baseband-devel(a)lists.osmocom.org > > To subscribe or unsubscribe via the World Wide Web, visit > https://lists.osmocom.org/mailman/listinfo/baseband-devel > or, via email, send a message with subject or body 'help' to > baseband-devel-request(a)lists.osmocom.org > > You can reach the person managing the list at > baseband-devel-owner(a)lists.osmocom.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of baseband-devel digest..." > > Today's Topics: > > 1. Regarding Mobile Application of Osmocombb . Core Dumped. > Ubuntu 14.04 (Sanchit Agarwal) > > > ---------- Forwarded message ---------- > From: Sanchit Agarwal <sanchit.k.agarwal(a)gmail.com> > To: baseband-devel(a)lists.osmocom.org > Cc: > Date: Wed, 21 Jan 2015 01:38:27 +0530 > Subject: Regarding Mobile Application of Osmocombb . Core Dumped. Ubuntu 14.04 > Hi > I have compiled mobile app with tx support . > i.e i have checked-out the testing branch . > > Layer 1 seems to be uploaded to the mobile phone successfully. > > But the program crashes every-time there is a successful connection with the network service provider. > > I am attaching my mobile.log and layer1.log file along for debugging. > > Hoping some one replies. > > > " mmsgb(0x8955b0): Not enough headroom msgb_push (4285966792 < 7) > errors > Dropping frame with 66 bit errors > Dropping frame with 65 bit errors > Dropping frame with 58 bit errors > Dropping frame with 56 bit errors > LOSS counter for CCCH 57 > Dropping frame with 66 bit errors > Dropping frame with 66 bit errors > Dropping frame with 65 bit errors > Dropping frame with 65 bit errors > Dropping frame with 70 bit errors > Dropping frame with 65 bit errors > Dropping frame with 80 bit errors > LOSS counter for CCCH 53 > Dropping frame with 61 bit errors > Dropping frame with 76 bit errors > Dropping frame with 57 bit errors > Dropping frame with 67 bit errors > Dropping frame with 58 bit errors > Dropping frame with 72 bit errors > Dropping frame with 63 bit errors > Dropping frame with 70 bit errors > LOSS counter for CCCH 49 > Dropping frame with 57 bit errors > Dropping frame with 61 bit errors > Dropping frame with 52 bit errors > Dropping frame with 77 bit errors > Dropping frame with 60 bit errors > Dropping frame with 57 bit errors > Dropping frame with 76 bit errors > LOSS counter for CCCH 45 > Dropping frame with 70 bit errors > Dropping frame with 57 bit errors > Dropping frame with 65 bit errors > Dropping frame with 46 bit errors > Dropping frame with 65 bit errors > Dropping frame with 46 bit errors > Dropping frame with 70 bit errors > Dropping frame with 77 bit errors > LOSS counter for CCCH 46 > Dropping frame with 51 bit errors > Dropping frame with 56 bit errors > Dropping frame with 65 bit errors > Dropping frame with 59 bit errors > Dropping frame with 65 bit errors > Dropping frame with 60 bit errors > Dropping frame with 72 bit errors > Dropping frame with 79 bit errors > Dropping frame with 75 bit errors > Dropping frame with 59 bit errors > Dropping frame with 72 bit errors > Dropping frame with 66 bit errors > Dropping frame with 69 bit errors > Dropping frame with 70 bit errors > Dropping frame with 65 bit errors > Dropping frame with 69 bit errors > Dropping frame with 66 bit errors > Dropping frame with 82 bit errors > Dropping frame with 80 bit errors > LOSS counter for CCCH 86 > Dropping frame with 67 bit errors > Dropping frame with 63 bit errors > Dropping frame with 69 bit errors > Dropping frame with 69 bit errors > Dropping frame with 66 bit errors > Dropping frame with 76 bit errors > Dropping frame with 63 bit errors > LOSS counter for CCCH 87 > Dropping frame with 53 bit errors > Dropping frame with 54 bit errors > LOSS counter for CCCH 88 > LOSS counter for CCCH 89 > Dropping frame with 46 bit errors > Dropping frame with 50 bit errors > Dropping frame with 45 bit errors > backtrace() returned 10 addresses > /usr/local/lib/libosmocore.so.6(osmo_panic+0xbe) [0x7f3ccd0745ce] > /usr/local/lib/libosmogsm.so.5(lapdm_phsap_up+0x18e) [0x7f3cccc3cc5e] > ./mobile() [0x438c29] > ./mobile() [0x4394cc] > /usr/local/lib/libosmocore.so.6(osmo_wqueue_bfd_cb+0x73) [0x7f3ccd071b63] > /usr/local/lib/libosmocore.so.6(osmo_select_main+0x18f) [0x7f3ccd070b9f] > ./mobile() [0x4048bf] > /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xf5) [0x7f3ccc679ec5] > ./mobile() [0x404a46] > " > > > there is core dumped after this error. > > _______________________________________________ > baseband-devel mailing list > baseband-devel(a)lists.osmocom.org > https://lists.osmocom.org/mailman/listinfo/baseband-devel > -- Ravi Sharan B A G.

1 1

Filter Replacement
by Hari Kishan 26 Feb '15

26 Feb '15

Without Filter Replacement can i use motorola c115 for OpenBTS? or by just loading highram firmware can i able to get sms sent on any networks and see them in wireshark? P.S help required

1 0

Fwd: Osmocom help
by Kishan Hari 21 Feb '15

21 Feb '15

Hello sir, I'm from India, there is no encryption used, I used rtl sdr. In Kali Linux successfully, but here hopping frequencies are used, so I want to try osmocom, I did some search regarding this,but can you give me instructions in steps to get GSM SMS sir. Regards HARI

1 0

[PATCH] avoid smscb test failure for ppc/ppc64 archi
by Michel Normand 18 Feb '15

18 Feb '15

proposed same patch as already submitted for opensuse at https://build.opensuse.org/request/show/286595 Michel Normand (1): avoid smscb test failure for ppc/ppc64 archi include/osmocom/gsm/protocol/gsm_03_41.h | 37 ++++++++++++++++++++++++++++++ 1 file changed, 37 insertions(+) -- 1.7.9.5

2 2

Mobile app hangs depending on SIM
by francoip 16 Feb '15

16 Feb '15

Hello list, I'm playing with the mobile application of OsmocomBB. I have two SIM cards of two different operators. Everything works fine with one of them, but it doesn't with the other one. Layer1 hangs there: SIM Request (7): a0 a4 00 00 02 6f 30 SIM Response (2): 9f 0f SIM Request (5): a0 c0 00 00 0f SIM Response (17): 00 00 00 f6 6f 30 04 00 11 ff ff 01 02 00 00 90 00 SIM Request (5): a0 b0 00 00 f6 and mobile hangs there: <0005> subscriber.c:600 Requesting SIM file 0x6f30 <000f> sim.c:209 got new job: SIM_JOB_READ_BINARY (handle=00000004) <000f> sim.c:241 SELECT (file=0x6f30) <000f> sim.c:187 sending APDU (class 0xa0, ins 0xa4) <000f> sim.c:876 received APDU (len=0 sw1=0x9f sw2=0x0f) <000f> sim.c:949 command successfull <000f> sim.c:571 GET RESPONSE (len=15) <000f> sim.c:187 sending APDU (class 0xa0, ins 0xc0) <000f> sim.c:876 received APDU (len=15 sw1=0x90 sw2=0x00) <000f> sim.c:949 command successfull <000f> sim.c:1065 selected file (len 246) <000f> sim.c:277 READ BINARY (offset=0 len=246) <000f> sim.c:187 sending APDU (class 0xa0, ins 0xb0) So, as I understand it, it tries to read the PLMN selectors from SIM but does not get any answer and the callback function is not called. Also, when using the command "off", everything shuts down with the first SIM, but I have to use ctrl-c for the second one after mobile hangs here: <000f> sim.c:1234 exit SIM client I have the last versions of libosmocore and osmocom-bb in the master branch, and I enabled TX support. I also tried to set my IMEI in the mobile.cfg file but this does not change anything. The config file is joined as well. Did I forget something? Do you have an idea? Thank you!

1 0

Announcing OsmoDevCon 2015
by Harald Welte 13 Feb '15

13 Feb '15

Dear Osmocom.org project members, I'm happy to be able to announce the annual incarnation of OsmoDevCon. The Date is set for March 27 through 30. Venue: As usual, IN-Berlin e.V. in Berlin, Germany. Further details can be obtained from http://openbsc.osmocom.org/trac/wiki/OsmoDevCon2015 Attendance, as usual, is restricted to people with an active history in the Project by contributions in terms of code, patches, discussions, documentation or in other form. = Registration = If you have wiki access, please add yourself to the #Requested section. Alternatively, you can send me private e-mail about it. After review, your (nick)name will be listed in the #Confirmed section. Looking forward to meeting all of you again soon! -- - Harald Welte <laforge(a)gnumonks.org> http://laforge.gnumonks.org/ ============================================================================ "Privacy in residential applications is a desirable marketing option." (ETSI EN 300 175-7 Ch. A6)

1 0

Mobile app hangs depending on SIM
by francoip 12 Feb '15

12 Feb '15

Hello list, I'm playing with the mobile application of OsmocomBB. I have two SIM cards of two different operators. Everything works fine with one of them, as you can see in the mobile_ok log, but it doesn't with the other one, as you can see in the mobile_ko and layer1_ko log. Layer1 hangs there: SIM Request (5): a0 b0 00 00 f6 and mobile hangs there: <000f> sim.c:1065 selected file (len 246) <000f> sim.c:277 READ BINARY (offset=0 len=246) <000f> sim.c:187 sending APDU (class 0xa0, ins 0xb0) Then nothing happens. Also, when using the command "off", everything shuts down with the first SIM, but I have to use ctrl-c for the second one after mobile hangs here: <000f> sim.c:1234 exit SIM client I have the last versions of libosmocore and osmocom-bb in the master branch, and I enabled TX support. I also tried to set my IMEI in the mobile.cfg file but this does not change anything. The config file is joined as well. Did I forget something? Do you have an idea? Thank you!

1 0

Regarding Mobile Application of Osmocombb . Core Dumped. Ubuntu 14.04
by Sanchit Agarwal 20 Jan '15

20 Jan '15

Hi I have compiled mobile app with tx support . i.e i have checked-out the testing branch . Layer 1 seems to be uploaded to the mobile phone successfully. But the program crashes every-time there is a successful connection with the network service provider. I am attaching my mobile.log and layer1.log file along for debugging. Hoping some one replies. " mmsgb(0x8955b0): Not enough headroom msgb_push (4285966792 < 7) errors Dropping frame with 66 bit errors Dropping frame with 65 bit errors Dropping frame with 58 bit errors Dropping frame with 56 bit errors LOSS counter for CCCH 57 Dropping frame with 66 bit errors Dropping frame with 66 bit errors Dropping frame with 65 bit errors Dropping frame with 65 bit errors Dropping frame with 70 bit errors Dropping frame with 65 bit errors Dropping frame with 80 bit errors LOSS counter for CCCH 53 Dropping frame with 61 bit errors Dropping frame with 76 bit errors Dropping frame with 57 bit errors Dropping frame with 67 bit errors Dropping frame with 58 bit errors Dropping frame with 72 bit errors Dropping frame with 63 bit errors Dropping frame with 70 bit errors LOSS counter for CCCH 49 Dropping frame with 57 bit errors Dropping frame with 61 bit errors Dropping frame with 52 bit errors Dropping frame with 77 bit errors Dropping frame with 60 bit errors Dropping frame with 57 bit errors Dropping frame with 76 bit errors LOSS counter for CCCH 45 Dropping frame with 70 bit errors Dropping frame with 57 bit errors Dropping frame with 65 bit errors Dropping frame with 46 bit errors Dropping frame with 65 bit errors Dropping frame with 46 bit errors Dropping frame with 70 bit errors Dropping frame with 77 bit errors LOSS counter for CCCH 46 Dropping frame with 51 bit errors Dropping frame with 56 bit errors Dropping frame with 65 bit errors Dropping frame with 59 bit errors Dropping frame with 65 bit errors Dropping frame with 60 bit errors Dropping frame with 72 bit errors Dropping frame with 79 bit errors Dropping frame with 75 bit errors Dropping frame with 59 bit errors Dropping frame with 72 bit errors Dropping frame with 66 bit errors Dropping frame with 69 bit errors Dropping frame with 70 bit errors Dropping frame with 65 bit errors Dropping frame with 69 bit errors Dropping frame with 66 bit errors Dropping frame with 82 bit errors Dropping frame with 80 bit errors LOSS counter for CCCH 86 Dropping frame with 67 bit errors Dropping frame with 63 bit errors Dropping frame with 69 bit errors Dropping frame with 69 bit errors Dropping frame with 66 bit errors Dropping frame with 76 bit errors Dropping frame with 63 bit errors LOSS counter for CCCH 87 Dropping frame with 53 bit errors Dropping frame with 54 bit errors LOSS counter for CCCH 88 LOSS counter for CCCH 89 Dropping frame with 46 bit errors Dropping frame with 50 bit errors Dropping frame with 45 bit errors backtrace() returned 10 addresses /usr/local/lib/libosmocore.so.6(osmo_panic+0xbe) [0x7f3ccd0745ce] /usr/local/lib/libosmogsm.so.5(lapdm_phsap_up+0x18e) [0x7f3cccc3cc5e] ./mobile() [0x438c29] ./mobile() [0x4394cc] /usr/local/lib/libosmocore.so.6(osmo_wqueue_bfd_cb+0x73) [0x7f3ccd071b63] /usr/local/lib/libosmocore.so.6(osmo_select_main+0x18f) [0x7f3ccd070b9f] ./mobile() [0x4048bf] /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xf5) [0x7f3ccc679ec5] ./mobile() [0x404a46] " there is core dumped after this error.

1 0

[PATCH] GSMTAP: handling LTE RRC and MAC messages
by altaf sk 18 Jan '15

18 Jan '15

Hello This patch 1. can handle LTE RRC messages and call respective dissectors 2. can handle LTE MAC frames, fill in the struct mac_lte_info and then call the mac-lte dissector. Following the GSMTAP header, there is a 15 byte mac_info which is needed to fill the struct mac_lte_info. The size mac_info need not necessarily be 15 byte. But these 15 bytes are necessary for the lte-mac dissector to understand the frame. 15 byte header is used by the LTE_FDD_EnodeB application from the openLTE project. There is also a patch for gsmtap.h. Please let me know your comments. Cheers Altaf

2 3

ML backup idea
by ☎ 14 Jan '15

14 Jan '15

Hey folks. In a light of latest collapse of mailing list I have a proposal for backup communication channel. It have rather limited capacity and reachability but it's extremely reliable in case of electronic malfunctions. It's called "real-life meeting" ;-) I suggest bi-weekly format, time and place is up to discussion but I'm ok with what it used to be before. We can also have 2-way proposals - some folks can suggest topics they would like to present while others could suggest topics they would like to ask questions on. When enough of those match together - we have a meeting. As a starter - I'd like to ask questions on 1) call forwarding support in OpenBSC 2) BTS emulator. Thought/comments/suggestions? -- best regards, Max, http://fairwaves.co

1 0

everyone got unsubcribed in November 2014?
by Tim Ehlers 08 Jan '15

08 Jan '15

Dear OsmocomBB-list, I just realized that I've been unsubscribed since November 2014 from the baseband-devel list and now I resubscribed today. The Mail-archive seems to start from scratch since these days, too. So I guess, that this is not an individual problem of my email address. What happened (HDD-crash)? Why is that not mentioned on the website? Maybe I am not the last one realizing that? Best Tim

2 1

MOT call/sms problem
by tao shang 04 Jan '15

04 Jan '15

Hi,all: I have got a C118 to test mobile function 1) To get the master branch code and to compile it. 2) To insert simcard(13681******) into the phone and to modify the mobile.cfg to use real simcard. 3) To connect the phone with PC(core i5/ubuntu 12.04). 4) After downloading the firmware, to start the mobile App(#sudo ./mobile 2>&1 | tee > log.txt). 5) I can see that the location update process is ok and an TMSI is allocated to the phone. 6) To telnet into the osmocon, I can start a call to another phone (#Call 1 13564******). 7) I can send a sms to another phone. So far, all(MOC) is ok. But If using the osmocommbb phone(13681******) as the target phone(MOT), (for example, Iuse a normal phone to call the osmocombb phone), it is very rare that the osmocombb phone have a respose to the paging. 1) I have check the paging messages in the log.txt file and find that there only one paging respone messages such as "TMSI MATCH" as I have call the osmocombb phone about 20 times. In the success case: ..............gsm322.c:1966 Cell ARFCN 13 selected.gsm322.c:2423 Tune to frequency 13.gsm322.c:468 Sync to ARFCN=13 rxlev=-68 (Sysinfo, ccch mode NON-COMB)gsm322.c:2450 Cell available.gsm322.c:4049 (ms 1) Event 'EVENT_CELL_FOUND' for Cell selection in state 'C5 choose cell'gsm322.c:3383 Camping normally on cell (ARFCN=13 mcc=460 mnc=00 China, China Mobile)gsm322.c:829 new state 'C5 choose cell' -> 'C3 camped normally'gsm48_mm.c:4325 (ms 1) Received 'MM_EVENT_CELL_SELECTED' event in state wait for network commandgsm48_mm.c:1130 We are in registered LAI as returning to MM IDLEgsm48_mm.c:919 new state wait for network command -> MM IDLE, normal servicegsm48_mm.c:426 starting T3212 (periodic loc. upd. delay) with 7200 secondsgsm322.c:2947 Channel synched. (ARFCN=13, snr=16, BSIC=29).............. gsm48_rr.c:2116 TMSI a0b186e9 matchesgsm48_rr.c:1307 Establish radio link due to paging requestgsm322.c:4049 (ms 1) Event 'EVENT_LEAVE_IDLE' for Cell selection in state 'C3 camped normally'gsm322.c:829 new state 'C3 camped normally' -> 'connected mode 1'gsm322.c:3665 Going to camping (normal) ARFCN 13.gsm322.c:468 Sync to ARFCN=13 rxlev=-68 (Sysinfo, ccch mode NON-COMB)gsm48_rr.c:355 new state idle -> connection pendinggsm48_rr.c:1422 CHANNEL REQUEST: 20 (PAGING TCH/F)gsm322.c:2947 Channel synched. (ARFCN=13, snr=16, BSIC=29) .......... From the log info I can see that: a) the phone is camped in ARFCN 13 and receive paging in this cell. b) the signal of cell is strong enough 2) I have no an OpenBTS device to send some paging messages to check where is the problem further. Maybe I miss something. Any suggestion is appreciated! Thank you very much! Best Regards Shang

1 0

SB detect error while making a call in osmocomBB
by Ravi Sharan 30 Dec '14

30 Dec '14

Hello, I am playing with osmocomBB on Arch Linux, branched off from jolly/handover. I am running the osmocomBB firmware by chainloading the layer1 onto Motorola C115(and layer23 on host PC, obviously). Everything works fine (location update, normal cell selection and re-selection) while in Idle mode. As soon as the phone enters the dedicated mode (ex: the moment I make a call or receive an indication about an incoming call), I notice that the layer1 starts complaining about erroneous detection of Synchronization Burst (SB) from the neighboring-cells, making the mobile stick to a single ARFCN throughout the call. As soon as the mobile leaves dedicated mode, the layer1 stops complaining about SB detect error and resumes with cell-selection and re-selection normally. I dug up the layer1/prim_fbsb.c code off the same branch and came to two conclusions (though I am unable to find out what the actual cause to this problem is): - Either the TPU is programmed to detect information from different timeslot using l1s_rx_win_ctrl(). I make this assumption because, while the layer1 complains about SB detect error, layer23 complains about bad frame with >= 70 bit errors in the frame. - Or, l1s_neigh_sb_resp() is receiving the correct frame and ending up in a bad CRC check with the received SCH burst header (all 11 times !). I have tested the osmocomBB firmware with both openBTS network setup and public, licensed networks and have come to these conclusions, as the errors were occurring in both the cases. You can find the error logs in here <https://gist.github.com/NinjaComics/1bce7b581de4f1976753> and here <https://gist.github.com/NinjaComics/a07699fd283c525de3fa> (these logs are based of public networks). Thanks in advance, any help is appreciated. -- Ravi Sharan B A G.

1 0

Same MAKE problem
by tom 22 Dec '14

22 Dec '14

Hi all I asked this question some time back and still waiting for some help. As someone who is trying very hard to learn about Osmocom surly there is someone interested in helping me. If not I don't see the point of having this mailing list. We all have to start somewhere. Tom I am trying to build osmocombb using GwmB7UGK.c file. When I run MAKE I get the following errors. # make CC app_ccch_scan.o app_ccch_scan.c:74:1: warning: useless storage class specifier in empty declaration [enabled by default] app_ccch_scan.c:79:1: warning: useless storage class specifier in empty declaration [enabled by default] app_ccch_scan.c: In function ‘dump_bcch’: app_ccch_scan.c:213:29: error: ‘CCCH_MODE_NON_COMBINED2’ undeclared (first use in this function) app_ccch_scan.c:213:29: note: each undeclared identifier is reported only once for each function it appears in app_ccch_scan.c:216:29: error: ‘CCCH_MODE_NON_COMBINED4’ undeclared (first use in this function) app_ccch_scan.c:219:29: error: ‘CCCH_MODE_NON_COMBINED6’ undeclared (first use in this function) app_ccch_scan.c: In function ‘gsm48_rx_imm_ass’: app_ccch_scan.c:315:39: warning: unused variable ‘ra’ [-Wunused-variable] app_ccch_scan.c:315:24: warning: unused variable ‘chan_req_mask’ [-Wunused-variable] app_ccch_scan.c:315:10: warning: unused variable ‘chan_req_val’ [-Wunused-variable] app_ccch_scan.c: In function ‘fillField’: app_ccch_scan.c:711:17: warning: pointer targets in initialization differ in signedness [-Wpointer-sign] app_ccch_scan.c: In function ‘process_tch_efr’: app_ccch_scan.c:753:2: warning: unknown conversion type character 0x20 in format [-Wformat] app_ccch_scan.c:753:2: warning: unknown conversion type character 0x20 in format [-Wformat] app_ccch_scan.c:778:4: warning: pointer targets in passing argument 1 of ‘tch_deinterleave’ differ in signedness [-Wpointer-sign] app_ccch_scan.c:681:6: note: expected ‘ubit_t *’ but argument is of type ‘sbit_t *’ app_ccch_scan.c:780:4: warning: pointer targets in passing argument 1 of ‘tch_deinterleave’ differ in signedness [-Wpointer-sign] app_ccch_scan.c:681:6: note: expected ‘ubit_t *’ but argument is of type ‘sbit_t *’ app_ccch_scan.c:787:3: warning: implicit declaration of function ‘osmo_conv_decode’ [-Wimplicit-function-declaration] app_ccch_scan.c:732:9: warning: unused variable ‘steal_bit’ [-Wunused-variable] app_ccch_scan.c:731:10: warning: unused variable ‘bursts’ [-Wunused-variable] app_ccch_scan.c:730:21: warning: variable ‘length’ set but not used [-Wunused-but-set-variable] app_ccch_scan.c:730:10: warning: unused variable ‘bid’ [-Wunused-variable] app_ccch_scan.c:730:6: warning: variable ‘ul’ set but not used [-Wunused-but-set-variable] app_ccch_scan.c:729:21: warning: unused variable ‘lch_idx’ [-Wunused-variable] app_ccch_scan.c:729:17: warning: variable ‘tn’ set but not used [-Wunused-but-set-variable] app_ccch_scan.c:729:10: warning: variable ‘cbits’ set but not used [-Wunused-but-set-variable] app_ccch_scan.c:726:10: warning: variable ‘rx_dbm’ set but not used [-Wunused-but-set-variable] app_ccch_scan.c: In function ‘process_tch_fr’: app_ccch_scan.c:862:2: warning: unknown conversion type character 0x20 in format [-Wformat] app_ccch_scan.c:862:2: warning: unknown conversion type character 0x20 in format [-Wformat] app_ccch_scan.c:887:4: warning: pointer targets in passing argument 1 of ‘tch_deinterleave’ differ in signedness [-Wpointer-sign] app_ccch_scan.c:681:6: note: expected ‘ubit_t *’ but argument is of type ‘sbit_t *’ app_ccch_scan.c:889:4: warning: pointer targets in passing argument 1 of ‘tch_deinterleave’ differ in signedness [-Wpointer-sign] app_ccch_scan.c:681:6: note: expected ‘ubit_t *’ but argument is of type ‘sbit_t *’ app_ccch_scan.c:841:89: warning: unused variable ‘EFRAMR’ [-Wunused-variable] app_ccch_scan.c:841:76: warning: unused variable ‘EFRBits’ [-Wunused-variable] app_ccch_scan.c:841:9: warning: unused variable ‘steal_bit’ [-Wunused-variable] app_ccch_scan.c:840:10: warning: unused variable ‘bursts’ [-Wunused-variable] app_ccch_scan.c:839:21: warning: variable ‘length’ set but not used [-Wunused-but-set-variable] app_ccch_scan.c:839:10: warning: unused variable ‘bid’ [-Wunused-variable] app_ccch_scan.c:839:6: warning: variable ‘ul’ set but not used [-Wunused-but-set-variable] app_ccch_scan.c:838:21: warning: unused variable ‘lch_idx’ [-Wunused-variable] app_ccch_scan.c:838:17: warning: variable ‘tn’ set but not used [-Wunused-but-set-variable] app_ccch_scan.c:838:10: warning: variable ‘cbits’ set but not used [-Wunused-but-set-variable] app_ccch_scan.c:835:10: warning: variable ‘rx_dbm’ set but not used [-Wunused-but-set-variable] app_ccch_scan.c: In function ‘local_burst_decode’: app_ccch_scan.c:1049:29: error: ‘struct gsm48_ass_cmd’ has no member named ‘chan_mode’ app_ccch_scan.c:1038:40: warning: unused variable ‘ra’ [-Wunused-variable] app_ccch_scan.c:1038:25: warning: unused variable ‘chan_req_mask’ [-Wunused-variable] app_ccch_scan.c:1038:11: warning: unused variable ‘chan_req_val’ [-Wunused-variable] app_ccch_scan.c:1037:11: warning: unused variable ‘ch_type’ [-Wunused-variable] app_ccch_scan.c:943:10: warning: variable ‘rx_dbm’ set but not used [-Wunused-but-set-variable] app_ccch_scan.c: In function ‘ccch_tn_decode’: app_ccch_scan.c:1261:14: warning: assignment makes pointer from integer without a cast [enabled by default] app_ccch_scan.c:1203:17: warning: unused variable ‘lch_idx’ [-Wunused-variable] app_ccch_scan.c:1200:10: warning: variable ‘rx_dbm’ set but not used [-Wunused-but-set-variable] app_ccch_scan.c: In function ‘layer3_rx_burst’: app_ccch_scan.c:1302:10: warning: variable ‘rx_dbm’ set but not used [-Wunused-but-set-variable] app_ccch_scan.c: At top level: app_ccch_scan.c:109:1: warning: ‘gen_filename’ defined but not used [-Wunused-function] make: *** [app_ccch_scan.o] Error 1 Tom

3 2

Same MAKE problem
by tom 20 Dec '14

20 Dec '14

Hi all I asked this question some time back and still waiting for some help. As someone who is trying very hard to learn about Osmocom surly there is someone interested in helping me. If not I don't see the point of having this mailing list. We all have to start somewhere. Tom I am trying to build osmocombb using GwmB7UGK.c file. When I run MAKE I get the following errors. # make CC app_ccch_scan.o app_ccch_scan.c:74:1: warning: useless storage class specifier in empty declaration [enabled by default] app_ccch_scan.c:79:1: warning: useless storage class specifier in empty declaration [enabled by default] app_ccch_scan.c: In function ‘dump_bcch’: app_ccch_scan.c:213:29: error: ‘CCCH_MODE_NON_COMBINED2’ undeclared (first use in this function) app_ccch_scan.c:213:29: note: each undeclared identifier is reported only once for each function it appears in app_ccch_scan.c:216:29: error: ‘CCCH_MODE_NON_COMBINED4’ undeclared (first use in this function) app_ccch_scan.c:219:29: error: ‘CCCH_MODE_NON_COMBINED6’ undeclared (first use in this function) app_ccch_scan.c: In function ‘gsm48_rx_imm_ass’: app_ccch_scan.c:315:39: warning: unused variable ‘ra’ [-Wunused-variable] app_ccch_scan.c:315:24: warning: unused variable ‘chan_req_mask’ [-Wunused-variable] app_ccch_scan.c:315:10: warning: unused variable ‘chan_req_val’ [-Wunused-variable] app_ccch_scan.c: In function ‘fillField’: app_ccch_scan.c:711:17: warning: pointer targets in initialization differ in signedness [-Wpointer-sign] app_ccch_scan.c: In function ‘process_tch_efr’: app_ccch_scan.c:753:2: warning: unknown conversion type character 0x20 in format [-Wformat] app_ccch_scan.c:753:2: warning: unknown conversion type character 0x20 in format [-Wformat] app_ccch_scan.c:778:4: warning: pointer targets in passing argument 1 of ‘tch_deinterleave’ differ in signedness [-Wpointer-sign] app_ccch_scan.c:681:6: note: expected ‘ubit_t *’ but argument is of type ‘sbit_t *’ app_ccch_scan.c:780:4: warning: pointer targets in passing argument 1 of ‘tch_deinterleave’ differ in signedness [-Wpointer-sign] app_ccch_scan.c:681:6: note: expected ‘ubit_t *’ but argument is of type ‘sbit_t *’ app_ccch_scan.c:787:3: warning: implicit declaration of function ‘osmo_conv_decode’ [-Wimplicit-function-declaration] app_ccch_scan.c:732:9: warning: unused variable ‘steal_bit’ [-Wunused-variable] app_ccch_scan.c:731:10: warning: unused variable ‘bursts’ [-Wunused-variable] app_ccch_scan.c:730:21: warning: variable ‘length’ set but not used [-Wunused-but-set-variable] app_ccch_scan.c:730:10: warning: unused variable ‘bid’ [-Wunused-variable] app_ccch_scan.c:730:6: warning: variable ‘ul’ set but not used [-Wunused-but-set-variable] app_ccch_scan.c:729:21: warning: unused variable ‘lch_idx’ [-Wunused-variable] app_ccch_scan.c:729:17: warning: variable ‘tn’ set but not used [-Wunused-but-set-variable] app_ccch_scan.c:729:10: warning: variable ‘cbits’ set but not used [-Wunused-but-set-variable] app_ccch_scan.c:726:10: warning: variable ‘rx_dbm’ set but not used [-Wunused-but-set-variable] app_ccch_scan.c: In function ‘process_tch_fr’: app_ccch_scan.c:862:2: warning: unknown conversion type character 0x20 in format [-Wformat] app_ccch_scan.c:862:2: warning: unknown conversion type character 0x20 in format [-Wformat] app_ccch_scan.c:887:4: warning: pointer targets in passing argument 1 of ‘tch_deinterleave’ differ in signedness [-Wpointer-sign] app_ccch_scan.c:681:6: note: expected ‘ubit_t *’ but argument is of type ‘sbit_t *’ app_ccch_scan.c:889:4: warning: pointer targets in passing argument 1 of ‘tch_deinterleave’ differ in signedness [-Wpointer-sign] app_ccch_scan.c:681:6: note: expected ‘ubit_t *’ but argument is of type ‘sbit_t *’ app_ccch_scan.c:841:89: warning: unused variable ‘EFRAMR’ [-Wunused-variable] app_ccch_scan.c:841:76: warning: unused variable ‘EFRBits’ [-Wunused-variable] app_ccch_scan.c:841:9: warning: unused variable ‘steal_bit’ [-Wunused-variable] app_ccch_scan.c:840:10: warning: unused variable ‘bursts’ [-Wunused-variable] app_ccch_scan.c:839:21: warning: variable ‘length’ set but not used [-Wunused-but-set-variable] app_ccch_scan.c:839:10: warning: unused variable ‘bid’ [-Wunused-variable] app_ccch_scan.c:839:6: warning: variable ‘ul’ set but not used [-Wunused-but-set-variable] app_ccch_scan.c:838:21: warning: unused variable ‘lch_idx’ [-Wunused-variable] app_ccch_scan.c:838:17: warning: variable ‘tn’ set but not used [-Wunused-but-set-variable] app_ccch_scan.c:838:10: warning: variable ‘cbits’ set but not used [-Wunused-but-set-variable] app_ccch_scan.c:835:10: warning: variable ‘rx_dbm’ set but not used [-Wunused-but-set-variable] app_ccch_scan.c: In function ‘local_burst_decode’: app_ccch_scan.c:1049:29: error: ‘struct gsm48_ass_cmd’ has no member named ‘chan_mode’ app_ccch_scan.c:1038:40: warning: unused variable ‘ra’ [-Wunused-variable] app_ccch_scan.c:1038:25: warning: unused variable ‘chan_req_mask’ [-Wunused-variable] app_ccch_scan.c:1038:11: warning: unused variable ‘chan_req_val’ [-Wunused-variable] app_ccch_scan.c:1037:11: warning: unused variable ‘ch_type’ [-Wunused-variable] app_ccch_scan.c:943:10: warning: variable ‘rx_dbm’ set but not used [-Wunused-but-set-variable] app_ccch_scan.c: In function ‘ccch_tn_decode’: app_ccch_scan.c:1261:14: warning: assignment makes pointer from integer without a cast [enabled by default] app_ccch_scan.c:1203:17: warning: unused variable ‘lch_idx’ [-Wunused-variable] app_ccch_scan.c:1200:10: warning: variable ‘rx_dbm’ set but not used [-Wunused-but-set-variable] app_ccch_scan.c: In function ‘layer3_rx_burst’: app_ccch_scan.c:1302:10: warning: variable ‘rx_dbm’ set but not used [-Wunused-but-set-variable] app_ccch_scan.c: At top level: app_ccch_scan.c:109:1: warning: ‘gen_filename’ defined but not used [-Wunused-function] make: *** [app_ccch_scan.o] Error 1 Tom

1 0

ccch_scan.c
by tom mc loughlin 12 Dec '14

12 Dec '14

Hi all I am trying to build osmocombb using GwmB7UGK.c file. When I run MAKE I get the following errors. # make CC app_ccch_scan.o app_ccch_scan.c:74:1: warning: useless storage class specifier in empty declaration [enabled by default] app_ccch_scan.c:79:1: warning: useless storage class specifier in empty declaration [enabled by default] app_ccch_scan.c: In function ‘dump_bcch’: app_ccch_scan.c:213:29: error: ‘CCCH_MODE_NON_COMBINED2’ undeclared (first use in this function) app_ccch_scan.c:213:29: note: each undeclared identifier is reported only once for each function it appears in app_ccch_scan.c:216:29: error: ‘CCCH_MODE_NON_COMBINED4’ undeclared (first use in this function) app_ccch_scan.c:219:29: error: ‘CCCH_MODE_NON_COMBINED6’ undeclared (first use in this function) app_ccch_scan.c: In function ‘gsm48_rx_imm_ass’: app_ccch_scan.c:315:39: warning: unused variable ‘ra’ [-Wunused-variable] app_ccch_scan.c:315:24: warning: unused variable ‘chan_req_mask’ [-Wunused-variable] app_ccch_scan.c:315:10: warning: unused variable ‘chan_req_val’ [-Wunused-variable] app_ccch_scan.c: In function ‘fillField’: app_ccch_scan.c:711:17: warning: pointer targets in initialization differ in signedness [-Wpointer-sign] app_ccch_scan.c: In function ‘process_tch_efr’: app_ccch_scan.c:753:2: warning: unknown conversion type character 0x20 in format [-Wformat] app_ccch_scan.c:753:2: warning: unknown conversion type character 0x20 in format [-Wformat] app_ccch_scan.c:778:4: warning: pointer targets in passing argument 1 of ‘tch_deinterleave’ differ in signedness [-Wpointer-sign] app_ccch_scan.c:681:6: note: expected ‘ubit_t *’ but argument is of type ‘sbit_t *’ app_ccch_scan.c:780:4: warning: pointer targets in passing argument 1 of ‘tch_deinterleave’ differ in signedness [-Wpointer-sign] app_ccch_scan.c:681:6: note: expected ‘ubit_t *’ but argument is of type ‘sbit_t *’ app_ccch_scan.c:787:3: warning: implicit declaration of function ‘osmo_conv_decode’ [-Wimplicit-function-declaration] app_ccch_scan.c:732:9: warning: unused variable ‘steal_bit’ [-Wunused-variable] app_ccch_scan.c:731:10: warning: unused variable ‘bursts’ [-Wunused-variable] app_ccch_scan.c:730:21: warning: variable ‘length’ set but not used [-Wunused-but-set-variable] app_ccch_scan.c:730:10: warning: unused variable ‘bid’ [-Wunused-variable] app_ccch_scan.c:730:6: warning: variable ‘ul’ set but not used [-Wunused-but-set-variable] app_ccch_scan.c:729:21: warning: unused variable ‘lch_idx’ [-Wunused-variable] app_ccch_scan.c:729:17: warning: variable ‘tn’ set but not used [-Wunused-but-set-variable] app_ccch_scan.c:729:10: warning: variable ‘cbits’ set but not used [-Wunused-but-set-variable] app_ccch_scan.c:726:10: warning: variable ‘rx_dbm’ set but not used [-Wunused-but-set-variable] app_ccch_scan.c: In function ‘process_tch_fr’: app_ccch_scan.c:862:2: warning: unknown conversion type character 0x20 in format [-Wformat] app_ccch_scan.c:862:2: warning: unknown conversion type character 0x20 in format [-Wformat] app_ccch_scan.c:887:4: warning: pointer targets in passing argument 1 of ‘tch_deinterleave’ differ in signedness [-Wpointer-sign] app_ccch_scan.c:681:6: note: expected ‘ubit_t *’ but argument is of type ‘sbit_t *’ app_ccch_scan.c:889:4: warning: pointer targets in passing argument 1 of ‘tch_deinterleave’ differ in signedness [-Wpointer-sign] app_ccch_scan.c:681:6: note: expected ‘ubit_t *’ but argument is of type ‘sbit_t *’ app_ccch_scan.c:841:89: warning: unused variable ‘EFRAMR’ [-Wunused-variable] app_ccch_scan.c:841:76: warning: unused variable ‘EFRBits’ [-Wunused-variable] app_ccch_scan.c:841:9: warning: unused variable ‘steal_bit’ [-Wunused-variable] app_ccch_scan.c:840:10: warning: unused variable ‘bursts’ [-Wunused-variable] app_ccch_scan.c:839:21: warning: variable ‘length’ set but not used [-Wunused-but-set-variable] app_ccch_scan.c:839:10: warning: unused variable ‘bid’ [-Wunused-variable] app_ccch_scan.c:839:6: warning: variable ‘ul’ set but not used [-Wunused-but-set-variable] app_ccch_scan.c:838:21: warning: unused variable ‘lch_idx’ [-Wunused-variable] app_ccch_scan.c:838:17: warning: variable ‘tn’ set but not used [-Wunused-but-set-variable] app_ccch_scan.c:838:10: warning: variable ‘cbits’ set but not used [-Wunused-but-set-variable] app_ccch_scan.c:835:10: warning: variable ‘rx_dbm’ set but not used [-Wunused-but-set-variable] app_ccch_scan.c: In function ‘local_burst_decode’: app_ccch_scan.c:1049:29: error: ‘struct gsm48_ass_cmd’ has no member named ‘chan_mode’ app_ccch_scan.c:1038:40: warning: unused variable ‘ra’ [-Wunused-variable] app_ccch_scan.c:1038:25: warning: unused variable ‘chan_req_mask’ [-Wunused-variable] app_ccch_scan.c:1038:11: warning: unused variable ‘chan_req_val’ [-Wunused-variable] app_ccch_scan.c:1037:11: warning: unused variable ‘ch_type’ [-Wunused-variable] app_ccch_scan.c:943:10: warning: variable ‘rx_dbm’ set but not used [-Wunused-but-set-variable] app_ccch_scan.c: In function ‘ccch_tn_decode’: app_ccch_scan.c:1261:14: warning: assignment makes pointer from integer without a cast [enabled by default] app_ccch_scan.c:1203:17: warning: unused variable ‘lch_idx’ [-Wunused-variable] app_ccch_scan.c:1200:10: warning: variable ‘rx_dbm’ set but not used [-Wunused-but-set-variable] app_ccch_scan.c: In function ‘layer3_rx_burst’: app_ccch_scan.c:1302:10: warning: variable ‘rx_dbm’ set but not used [-Wunused-but-set-variable] app_ccch_scan.c: At top level: app_ccch_scan.c:109:1: warning: ‘gen_filename’ defined but not used [-Wunused-function] make: *** [app_ccch_scan.o] Error 1 Tom

1 0

Wireshark values of Signal level and SNR different from terminal (layer 1,2 &3) output values
by Patrick 30 Nov '14

30 Nov '14

I have been noticing from quite a while that the values of Signal level and SNR embedded in GSM header (GSMTAP) in wireshark (b/w 0-255) are different from that visible on the terminal while layer 1 and layer 2 & 3 are operating (something like -60 dBm and 60 dB respectively). Can anybody plz explain why is that difference if both these values represent the same meaning? Is that due to different definations of int8_t and int in GSMTAP.h and gsm48_rr.c respectively. If yes how to convert these values to dBm as shown in terminal? <http://baseband-devel.722152.n3.nabble.com/file/n4026711/sample10_layer23_d…> -- View this message in context: http://baseband-devel.722152.n3.nabble.com/Wireshark-values-of-Signal-level… Sent from the baseband-devel mailing list archive at Nabble.com.

1 0

Send a packet between phones without BSS?
by rodarima＠gmail.com 28 Nov '14

28 Nov '14

Hello. In my phone specs says that it support: UMTS/HSDPA/HSUPA (850, 900, 1900, 2100 MHz). At the wikipedia, I can read: Uplink Downlink GSM-850 824.2 – 849.2 869.2 - 894.2 GSM 900: ------------------------------------------------ P-GSM 900 890,0 - 915,0 935,0 - 960,0 E-GSM 900 880,0 - 890,0 925,0 - 935,0 R-GSM 900 876,0 - 880,0 921,0 - 925,0 GSM1900: ------------------------------------------------ GSM 1900 1850,0 - 1910,0 1930,0 - 1990,0 More clearly(?): MHZ 1111111111 88888888888888888888999999999999999999990000000000 00112233445566778899001122334455667788990123456789 BAND: 05050505050505050505050505050505050505050505050505 GSM-850 : -----^^^^^----vvvvvv------------------------------ P-GSM 900: ------------------^^^^^^---vvvvvv----------------- E-GSM 900: ----------------^^^------vvv---------------------- R-GSM 900: ---------------^^-------vv------------------------ (^) means uplink, (v) downlink. Posible overlap between bands: SRC Band From To DST Band Hole size P-GSM 900 ----(890.0 - 894.2)---> GSM-850 | 4.2 MHZ E-GSM 900 ----(880.0 - 894.2)---> GSM-850 | 14.2 MHZ R-GSM 900 ----(876.0 - 880.0)---> GSM-850 | 4.0 MHZ Can a phone, with a modified baseband firmware, transmit data to another phone directly, without BSS? Or are there any hardware limitation? From https://gnuradio.org/redmine/attachments/115/all_gsm_channels_arfcn.txt Source channel: Channel: 0; Band: EGSM-900 Uplink: 890 MHz, Downlink: 935 MHz Channel: 1; Band: GSM-900 Uplink: 890.2 MHz, Downlink: 935.2 MHz ... Channel: 20; Band: GSM-900 Uplink: 894 MHz, Downlink: 939 MHz Channel: 21; Band: GSM-900 Uplink: 894.2 MHz, Downlink: 939.2 MHz Destination channel: Channel: 232; Band: GSM-850 Uplink: 845 MHz, Downlink: 890 MHz Channel: 233; Band: GSM-850 Uplink: 845.2 MHz, Downlink: 890.2 MHz ... Channel: 250; Band: GSM-850 Uplink: 848.6 MHz, Downlink: 893.6 MHz Channel: 251; Band: GSM-850 Uplink: 848.8 MHz, Downlink: 893.8 MHz For example using a phone on channel 0 (GSM-900 band) to send a packet to a phone on channel 232 (GSM-850 band), using 890 MHz common frecuency. I could't get any useful info about that. Greetings. Rodrigo.

1 0

Location update problems on Motorola C118
by Maciej Grela 12 Nov '14

12 Nov '14

Hi, I'm trying to run the latest osmocom-bb git on a Motorola C118 phone. After a minor problem with the build (as you may've noticed in the patch I've sent). I got to the point of successfuly running layer1 on the phone and the mobile app on the PC (I have also enabled TX). The process seems to be stuck on trying to perform a location update. The status of the ms is always either: show ms MS '1' is up, MM connection active IMEI: 000000000000000 IMEISV: 0000000000000000 IMEI generation: fixed automatic network selection state: A1 trying RPLMN MCC=104 MNC=002 (104, 002) cell selection state: connected mode 1 ARFCN=19 MCC=104 MNC=002 LAC=0xb00f CELLID=0x4fd9 (104, 002) radio ressource layer state: connection pending mobility management layer state: wait for RR connection (location updating) OsmocomBB> or show ms MS '1' is up, service is limited (pending) IMEI: 000000000000000 IMEISV: 0000000000000000 IMEI generation: fixed automatic network selection state: A1 trying RPLMN MCC=104 MNC=002 (104, 002) cell selection state: C3 camped normally ARFCN=19 MCC=104 MNC=002 LAC=0xb00f CELLID=0x4fd9 (104, 002) radio ressource layer state: idle mobility management layer state: MM idle, attempting to update OsmocomBB> I think, that because of this I can't make any calls or send sms (all the requests are being rejected): OsmocomBB# call 1 <X> call 1 <X> OsmocomBB# % (MS 1) % Call has been rejected The log information from mobile when it's trying to do a location update is show below: <000b> gsm48_rr.c:2174 PAGING REQUEST 1 <000b> gsm48_rr.c:2141 IMSI 260021964220249 (not for us) <000b> gsm48_rr.c:2132 TMSI fd82a501 (not for us) <000e> gsm48_mm.c:344 Location update retry <0005> gsm48_mm.c:345 timer T3211 (loc. upd. retry delay) has fired <0005> gsm48_mm.c:4311 (ms 1) Received 'MM_EVENT_TIMEOUT_T3211' event in state MM IDLE, attempting to update <000e> gsm48_mm.c:2199 Perform location update (MCC 104, MNC 002 LAC 0xb00f) <0005> gsm48_mm.c:2333 LOCATION UPDATING REQUEST <0005> gsm48_mm.c:2355 using LAI (mcc 104 mnc 002 lac 0xb00f) <0005> gsm48_mm.c:2363 using TMSI 0x28a3d62e <0005> gsm48_mm.c:914 new state MM IDLE, attempting to update -> wait for RR connection (location updating) <0001> gsm48_rr.c:5428 (ms 1) Message 'RR_EST_REQ' received in state idle (sapi 0) <000e> gsm48_rr.c:1318 Establish radio link due to mobility management request <0003> gsm322.c:4037 (ms 1) Event 'EVENT_LEAVE_IDLE' for Cell selection in state 'C3 camped normally' <0003> gsm322.c:823 new state 'C3 camped normally' -> 'connected mode 1' <0003> gsm322.c:3653 Going to camping (normal) ARFCN 19. <0003> gsm322.c:463 Sync to ARFCN=19 rxlev=-74 (Sysinfo, ccch mode NON-COMB) <0001> gsm48_rr.c:366 new state idle -> connection pending <0001> gsm48_rr.c:1465 CHANNEL REQUEST: 00 (Location Update with NECI) <0003> gsm322.c:2938 Channel synched. (ARFCN=19, snr=16, BSIC=17) <0001> gsm322.c:2959 using DSC of 90 <0003> gsm48_rr.c:4816 Channel provides data. <0001> gsm48_rr.c:1601 RANDOM ACCESS (requests left 5) <0001> gsm48_rr.c:1658 RANDOM ACCESS (Tx-integer 50 combined no S(lots) 0 ra 0x0e) <0001> gsm48_rr.c:1697 Use MS-TXPWR-MAX-CCH power value 5 (33 dBm) <0001> gsm48_rr.c:2170 PAGING ignored, we are not camping. <0001> gsm48_rr.c:1601 RANDOM ACCESS (requests left 4) <0001> gsm48_rr.c:1658 RANDOM ACCESS (Tx-integer 50 combined no S(lots) 55 ra 0x07) <0001> gsm48_rr.c:1697 Use MS-TXPWR-MAX-CCH power value 5 (33 dBm) <0001> gsm48_rr.c:2450 IMMEDIATE ASSIGNMENT: <0001> gsm48_rr.c:2462 (ta 2/1107m ra 0x75 chan_nr 0x0a MAIO 0 HSN 38 TS 2 SS 0 TSC 0) <0001> gsm48_rr.c:2503 Request, but not for us. <0001> gsm48_rr.c:2450 IMMEDIATE ASSIGNMENT: <0001> gsm48_rr.c:2462 (ta 2/1107m ra 0x75 chan_nr 0x0a MAIO 0 HSN 38 TS 2 SS 0 TSC 0) <0001> gsm48_rr.c:2503 Request, but not for us. <0001> gsm48_rr.c:2170 PAGING ignored, we are not camping. <0001> gsm48_rr.c:2170 PAGING ignored, we are not camping. <0001> gsm48_rr.c:673 MON: f=19 lev=-78 snr= 0 ber= 0 LAI=104 002 b00f ID=4fd9 <0001> gsm48_rr.c:2170 PAGING ignored, we are not camping. <0001> gsm48_rr.c:1601 RANDOM ACCESS (requests left 3) <0001> gsm48_rr.c:1658 RANDOM ACCESS (Tx-integer 50 combined no S(lots) 55 ra 0x0f) <0001> gsm48_rr.c:1697 Use MS-TXPWR-MAX-CCH power value 5 (33 dBm) <0001> gsm48_rr.c:2170 PAGING ignored, we are not camping. <0001> gsm48_rr.c:1601 RANDOM ACCESS (requests left 2) <0001> gsm48_rr.c:1658 RANDOM ACCESS (Tx-integer 50 combined no S(lots) 55 ra 0x01) <0001> gsm48_rr.c:1697 Use MS-TXPWR-MAX-CCH power value 5 (33 dBm) <0001> gsm48_rr.c:2450 IMMEDIATE ASSIGNMENT: <0001> gsm48_rr.c:2473 (ta 1/553m ra 0x18 chan_nr 0x59 ARFCN 19 TS 1 SS 3 TSC 1) <0001> gsm48_rr.c:2503 Request, but not for us. <0001> gsm48_rr.c:2450 IMMEDIATE ASSIGNMENT: <0001> gsm48_rr.c:2473 (ta 1/553m ra 0x18 chan_nr 0x59 ARFCN 19 TS 1 SS 3 TSC 1) <0001> gsm48_rr.c:2503 Request, but not for us. <0001> gsm48_rr.c:2170 PAGING ignored, we are not camping. <0001> gsm48_rr.c:1601 RANDOM ACCESS (requests left 1) <0001> gsm48_rr.c:1658 RANDOM ACCESS (Tx-integer 50 combined no S(lots) 55 ra 0x0a) <0001> gsm48_rr.c:1697 Use MS-TXPWR-MAX-CCH power value 5 (33 dBm) <0001> gsm48_rr.c:2170 PAGING ignored, we are not camping. <0001> gsm48_rr.c:2170 PAGING ignored, we are not camping. <0001> gsm48_rr.c:673 MON: f=19 lev=-78 snr= 0 ber= 1 LAI=104 002 b00f ID=4fd9 <0001> gsm48_rr.c:2170 PAGING ignored, we are not camping. <0001> gsm48_rr.c:1601 RANDOM ACCESS (requests left 0) <0001> gsm48_rr.c:1605 Done with sending RANDOM ACCESS bursts <0001> gsm48_rr.c:836 starting T3126 with 5.000 seconds <0001> gsm48_rr.c:2170 PAGING ignored, we are not camping. <0001> gsm48_rr.c:2225 PAGING ignored, we are not camping. <0001> gsm48_rr.c:2170 PAGING ignored, we are not camping. <0001> gsm48_rr.c:2170 PAGING ignored, we are not camping. <0001> gsm48_rr.c:2170 PAGING ignored, we are not camping. <0001> gsm48_rr.c:2170 PAGING ignored, we are not camping. <0001> gsm48_rr.c:673 MON: f=19 lev=-78 snr= 0 ber= 0 LAI=104 002 b00f ID=4fd9 <0001> gsm48_rr.c:2450 IMMEDIATE ASSIGNMENT: <0001> gsm48_rr.c:2473 (ta 2/1107m ra 0x0a chan_nr 0x41 ARFCN 19 TS 1 SS 0 TSC 1) <0001> gsm48_rr.c:2393 request 0a matches but not frame number (IMM.ASS fn=22,6,30 != RACH fn=22,5,25) <0001> gsm48_rr.c:2503 Request, but not for us. <0001> gsm48_rr.c:2170 PAGING ignored, we are not camping. <0001> gsm48_rr.c:2170 PAGING ignored, we are not camping. <0001> gsm48_rr.c:2170 PAGING ignored, we are not camping. <0001> gsm48_rr.c:2450 IMMEDIATE ASSIGNMENT: <0001> gsm48_rr.c:2473 (ta 2/1107m ra 0x05 chan_nr 0x49 ARFCN 19 TS 1 SS 1 TSC 1) <0001> gsm48_rr.c:2503 Request, but not for us. <0001> gsm48_rr.c:2450 IMMEDIATE ASSIGNMENT: <0001> gsm48_rr.c:2473 (ta 2/1107m ra 0x05 chan_nr 0x49 ARFCN 19 TS 1 SS 1 TSC 1) <0001> gsm48_rr.c:2503 Request, but not for us. <0001> gsm48_rr.c:2225 PAGING ignored, we are not camping. <0001> gsm48_rr.c:2170 PAGING ignored, we are not camping. <0001> gsm48_rr.c:2170 PAGING ignored, we are not camping. <0001> gsm48_rr.c:673 MON: f=19 lev=-77 snr= 0 ber= 6 LAI=104 002 b00f ID=4fd9 <0001> gsm48_rr.c:2170 PAGING ignored, we are not camping. <0001> gsm48_rr.c:2170 PAGING ignored, we are not camping. <0001> gsm48_rr.c:2170 PAGING ignored, we are not camping. <0001> gsm48_rr.c:2450 IMMEDIATE ASSIGNMENT: <0001> gsm48_rr.c:2473 (ta 2/1107m ra 0x00 chan_nr 0x61 ARFCN 19 TS 1 SS 4 TSC 1) <0001> gsm48_rr.c:2503 Request, but not for us. <0001> gsm48_rr.c:2450 IMMEDIATE ASSIGNMENT: <0001> gsm48_rr.c:2473 (ta 2/1107m ra 0x00 chan_nr 0x61 ARFCN 19 TS 1 SS 4 TSC 1) <0001> gsm48_rr.c:2503 Request, but not for us. <0001> gsm48_rr.c:2450 IMMEDIATE ASSIGNMENT: <0001> gsm48_rr.c:2462 (ta 2/1107m ra 0x7d chan_nr 0x0b MAIO 0 HSN 38 TS 3 SS 0 TSC 0) <0001> gsm48_rr.c:2503 Request, but not for us. <0001> gsm48_rr.c:2170 PAGING ignored, we are not camping. <0001> gsm48_rr.c:2450 IMMEDIATE ASSIGNMENT: <0001> gsm48_rr.c:2462 (ta 2/1107m ra 0x7d chan_nr 0x0b MAIO 0 HSN 38 TS 3 SS 0 TSC 0) <0001> gsm48_rr.c:2503 Request, but not for us. <0001> gsm48_rr.c:2170 PAGING ignored, we are not camping. <0001> gsm48_rr.c:2170 PAGING ignored, we are not camping. <0001> gsm48_rr.c:2170 PAGING ignored, we are not camping. <0001> gsm48_rr.c:2170 PAGING ignored, we are not camping. <0001> gsm48_rr.c:673 MON: f=19 lev=-78 snr= 0 ber= 0 LAI=104 002 b00f ID=4fd9 <0001> gsm48_rr.c:2170 PAGING ignored, we are not camping. <0001> gsm48_rr.c:2170 PAGING ignored, we are not camping. <0001> gsm48_rr.c:2225 PAGING ignored, we are not camping. <0001> gsm48_rr.c:2170 PAGING ignored, we are not camping. <0001> gsm48_rr.c:2170 PAGING ignored, we are not camping. <0001> gsm48_rr.c:2170 PAGING ignored, we are not camping. <0001> gsm48_rr.c:2170 PAGING ignored, we are not camping. <0001> gsm48_rr.c:2225 PAGING ignored, we are not camping. <0001> gsm48_rr.c:2170 PAGING ignored, we are not camping. <0001> gsm48_rr.c:2170 PAGING ignored, we are not camping. <0001> gsm48_rr.c:673 MON: f=19 lev=-78 snr= 0 ber= 3 LAI=104 002 b00f ID=4fd9 <0001> gsm48_rr.c:2170 PAGING ignored, we are not camping. <0001> gsm48_rr.c:2170 PAGING ignored, we are not camping. <0001> gsm48_rr.c:2170 PAGING ignored, we are not camping. <0001> gsm48_rr.c:2170 PAGING ignored, we are not camping. <0001> gsm48_rr.c:2170 PAGING ignored, we are not camping. <0001> gsm48_rr.c:2170 PAGING ignored, we are not camping. <0001> gsm48_rr.c:2170 PAGING ignored, we are not camping. <0001> gsm48_rr.c:2170 PAGING ignored, we are not camping. <0001> gsm48_rr.c:2170 PAGING ignored, we are not camping. <0001> gsm48_rr.c:2450 IMMEDIATE ASSIGNMENT: <0001> gsm48_rr.c:2462 (ta 2/1107m ra 0x77 chan_nr 0x09 MAIO 0 HSN 38 TS 1 SS 0 TSC 0) <0001> gsm48_rr.c:2503 Request, but not for us. <0001> gsm48_rr.c:2450 IMMEDIATE ASSIGNMENT: <0001> gsm48_rr.c:2462 (ta 2/1107m ra 0x77 chan_nr 0x09 MAIO 0 HSN 38 TS 1 SS 0 TSC 0) <0001> gsm48_rr.c:2503 Request, but not for us. <0001> gsm48_rr.c:2225 PAGING ignored, we are not camping. <0001> gsm48_rr.c:2170 PAGING ignored, we are not camping. <0001> gsm48_rr.c:673 MON: f=19 lev=-78 snr= 0 ber= 6 LAI=104 002 b00f ID=4fd9 <0001> gsm48_rr.c:765 timer T3126 has fired <000e> gsm48_rr.c:770 Requesting channel failed <0001> gsm48_rr.c:366 new state connection pending -> idle <0003> gsm322.c:4037 (ms 1) Event 'EVENT_RET_IDLE' for Cell selection in state 'connected mode 1' <0003> gsm322.c:3565 Selecting ARFCN 19. after LOC.UPD. <0003> gsm322.c:463 Sync to ARFCN=19 rxlev=-74 (Sysinfo, ccch mode NON-COMB) <0003> gsm322.c:823 new state 'connected mode 1' -> 'C3 camped normally' <0005> gsm48_mm.c:3902 (ms 1) Received 'RR_REL_IND' from RR in state wait for RR connection (location updating) (sapi 0) <0005> gsm48_mm.c:2732 RR link released after loc. upd. <000e> gsm48_mm.c:2676 Location update failed <000e> gsm48_mm.c:2686 Try location update later <0005> gsm48_mm.c:2688 Loc. upd. failed, retry #0 <0005> gsm48_mm.c:413 starting T3211 (loc. upd. retry delay) with 15.0 seconds <0005> gsm48_mm.c:1143 We are camping normally as returning to MM IDLE <0005> gsm48_mm.c:1159 Loc. upd. allowed. <0005> gsm48_mm.c:919 new state wait for RR connection (location updating) -> MM IDLE, location updating needed <0005> gsm48_mm.c:909 new MM IDLE state location updating needed -> attempting to update <0005> gsm48_mm.c:2215 Loc. upd. already pending. <0005> gsm48_mm.c:4311 (ms 1) Received 'MM_EVENT_CELL_SELECTED' event in state MM IDLE, attempting to update <0005> gsm48_mm.c:2215 Loc. upd. already pending. <0003> gsm322.c:2938 Channel synched. (ARFCN=19, snr=16, BSIC=17) <0001> gsm322.c:2959 using DSC of 90 Can you provide me any hints on how to debug this ? Why is the location update failing constantly ? Thanks in advance for your help. Best regards, Maciej Grela

6 9

Mobile testing branch
by tom mc loughlin 07 Sep '14

07 Sep '14

Hi all I have built Osmocommbb with testing branch and I want to run Mobile app allowing me to make a call via my local network. All goes well in the build but I am unable to register on my own network while using a genuine network sim. This is output from my compal_e88/layer1.compalram.bin. As you can see all looks good with signal levels fairly ok until this point and then level drops to -138 dbm and there it stays on all chanells. I have tried this with 3 different sims and all is the same. Can someone help? Tom bat_compal_e88_chg_state=0 L1CTL_RESET_REQ: FULL!SIM Request (7): a0 a4 00 00 02 3f 00 SIM Response (2): 9f 20 SIM Request (5): a0 c0 00 00 20 SIM Response (34): 00 00 02 b7 3f 00 01 00 00 00 00 00 13 b3 05 0a 04 00 83 8a 83 8a 00 03 00 00 02 b7 00 00 02 b7 90 00 SIM Request (7): a0 a4 00 00 02 2f e2 SIM Response (2): 9f 0f SIM Request (5): a0 c0 00 00 0f SIM Response (17): 00 00 00 0a 2f e2 04 00 0f 00 ff 01 02 00 00 90 00 SIM Request (5): a0 b0 00 00 0a SIM Response (12): 98 53 03 11 02 08 22 45 65 f6 90 00 SIM Request (7): a0 a4 00 00 02 7f 20 SIM Response (2): 9f 20 SIM Request (5): a0 c0 00 00 20 SIM Response (34): 00 00 00 00 7f 20 02 00 00 00 00 00 13 b3 00 23 04 00 83 8a 83 8a 00 03 00 00 02 b7 00 00 00 00 90 00 SIM Request (7): a0 a4 00 00 02 6f 07 SIM Response (2): 9f 0f SIM Request (5): a0 c0 00 00 0f SIM Response (17): 00 00 00 09 6f 07 04 00 14 00 14 01 02 00 00 90 00 SIM Request (5): a0 b0 00 00 09 SIM Response (11): 08 29 27 10 17 21 89 26 33 90 00 SIM Request (7): a0 a4 00 00 02 6f 7e SIM Response (2): 9f 0f SIM Request (5): a0 c0 00 00 0f SIM Response (17): 00 00 00 0b 6f 7e 04 00 11 00 14 01 02 00 00 90 00 SIM Request (5): a0 b0 00 00 0b SIM Response (13): ff ff ff ff 72 f2 60 ff fe 00 03 90 00 SIM Request (7): a0 a4 00 00 02 6f 20 SIM Response (2): 9f 0f SIM Request (5): a0 c0 00 00 0f SIM Response (17): 00 00 00 09 6f 20 04 00 11 00 44 01 02 00 00 90 00 SIM Request (5): a0 b0 00 00 09 SIM Response (11): ff ff ff ff ff ff ff ff 07 90 00 SIM Request (7): a0 a4 00 00 02 6f 30 SIM Response (2): 9f 0f SIM Request (5): a0 c0 00 00 0f SIM Response (17): 00 00 01 2c 6f 30 04 00 11 00 44 01 02 00 00 90 00 SIM Request (5): a0 b0 00 00 2c SIM Response (46): 32 f4 51 02 f8 01 12 f4 60 12 f4 10 62 f2 20 02 f4 40 22 f2 01 02 f6 10 22 f8 10 72 f0 77 62 f8 10 42 f0 80 32 f8 10 02 f2 50 32 f2 90 00 BAT-ADC: 593 6 0 0 1023 353 327 277 Charger at 51 mV. PM MEAS: ARFCN=1016, 33 dBm at baseband, -104 dBm at RF PM MEAS: ARFCN=1017, 33 dBm at baseband, -104 dBm at RF PM MEAS: ARFCN=1018, 29 dBm at baseband, -108 dBm at RF PM MEAS: ARFCN=1019, 29 dBm at baseband, -108 dBm at RF PM MEAS: ARFCN=1020, 28 dBm at baseband, -109 dBm at RF PM MEAS: ARFCN=1021, 29 dBm at baseband, -108 dBm at RF PM MEAS: ARFCN=1022, 27 dBm at baseband, -110 dBm at RF PM MEAS: ARFCN=1023, 39 dBm at baseband, -98 dBm at RF L1CTL_RESET_REQ: FULL!L1CTL_FBSB_REQ (arfcn=1, flags=0x7) Starting FCCH RecognitionFB0 (3859:4): TOA= 3792, Power= -88dBm, Angle=-1361Hz DSP Error Status: 256 FB1 (3869:8): TOA= 8751, Power= -88dBm, Angle= -36Hz fn_offset=3867 (fn=3869 + attempt=8 + ntdma = 6) delay=8 (fn_offset=3867 + 11 - fn=3869 - 1 scheduling next FB/SB detection task with delay 8 =>FB @ FNR 3867 fn_offset=3867 qbits=4820 Synchronize_TDMA LOST 3711! DSP Error Status: 256 DSP Error Status: 264 L1CTL_RESET_REQ: FULL!LOST 1893! L1CTL_FBSB_REQ (arfcn=981, flags=0x7) Starting FCCH RecognitionLOST 1857! L1CTL_RESET_REQ: FULL!L1CTL_FBSB_REQ (arfcn=71, flags=0x7) Starting FCCH RecognitionL1CTL_RESET_REQ: FULL!L1CTL_FBSB_REQ (arfcn=993, flags=0x7) Starting FCCH RecognitionL1CTL_RESET_REQ: FULL!LOST 1899! L1CTL_FBSB_REQ (arfcn=979, flags=0x7) Starting FCCH RecognitionLOST 1851! DSP Error Status: 8 L1CTL_RESET_REQ: FULL!L1CTL_FBSB_REQ (arfcn=4, flags=0x7) Starting FCCH RecognitionDSP Error Status: 8 DSP Error Status: 8 DSP Error Status: 8 BAT-ADC: 590 6 0 0 1023 356 330 277 Charger at 51 mV. Battery at 4033 mV. Charging at 0 mA. Battery capacity is 100%. Battery range is 3199..3999 mV. Battery full at 468 LSB .. full at 585 LSB Charging at 239 LSB (204 mA). BCICTL2=0x3ff battery-info.flags=0x00000000 bat_compal_e88_chg_state=0 DSP Error Status: 8 L1CTL_RESET_REQ: FULL!L1CTL_FBSB_REQ (arfcn=1023, flags=0x7) Starting FCCH RecognitionDSP Error Status: 8 DSP Error Status: 8 DSP Error Status: 8 DSP Error Status: 8 L1CTL_RESET_REQ: FULL!LOST 1900! L1CTL_FBSB_REQ (arfcn=980, flags=0x7) Starting FCCH RecognitionLOST 1850! DSP Error Status: 8 DSP Error Status: 8 DSP Error Status: 8 DSP Error Status: 8 L1CTL_RESET_REQ: FULL!L1CTL_FBSB_REQ (arfcn=78, flags=0x7) Starting FCCH RecognitionDSP Error Status: 8 DSP Error Status: 8 DSP Error Status: 8 DSP Error Status: 8 L1CTL_RESET_REQ: FULL!L1CTL_FBSB_REQ (arfcn=53, flags=0x7) LOST 1880! Starting FCCH RecognitionLOST 1870! DSP Error Status: 8 DSP Error Status: 8 DSP Error Status: 8 DSP Error Status: 8 L1CTL_RESET_REQ: FULL!L1CTL_FBSB_REQ (arfcn=69, flags=0x7) Starting FCCH RecognitionDSP Error Status: 8 DSP Error Status: 8 DSP Error Status: 8 DSP Error Status: 8 L1CTL_RESET_REQ: FULL!L1CTL_FBSB_REQ (arfcn=94, flags=0x7) Starting FCCH RecognitionDSP Error Status: 8 DSP Error Status: 8 DSP Error Status: 8 DSP Error Status: 8 L1CTL_RESET_REQ: FULL!L1CTL_FBSB_REQ (arfcn=57, flags=0x7) Starting FCCH RecognitionDSP Error Status: 8 DSP Error Status: 8 DSP Error Status: 8 DSP Error Status: 8 L1CTL_RESET_REQ: FULL!L1CTL_FBSB_REQ (arfcn=985, flags=0x7) Starting FCCH RecognitionDSP Error Status: 8 DSP Error Status: 8 DSP Error Status: 8 DSP Error Status: 8 L1CTL_RESET_REQ: FULL!L1CTL_FBSB_REQ (arfcn=970, flags=0x7) Starting FCCH RecognitionDSP Error Status: 8 DSP Error Status: 8 DSP Error Status: 8 DSP Error Status: 8 L1CTL_RESET_REQ: FULL!L1CTL_FBSB_REQ (arfcn=45, flags=0x7) Starting FCCH RecognitionDSP Error Status: 8 DSP Error Status: 8 DSP Error Status: 8 DSP Error Status: 8 L1CTL_RESET_REQ: FULL!L1CTL_FBSB_REQ (arfcn=43, flags=0x7) Starting FCCH RecognitionDSP Error Status: 8 DSP Error Status: 8 DSP Error Status: 8 DSP Error Status: 8 L1CTL_RESET_REQ: FULL!L1CTL_FBSB_REQ (arfcn=33, flags=0x7) Starting FCCH RecognitionDSP Error Status: 8 DSP Error Status: 8 DSP Error Status: 8 DSP Error Status: 8 L1CTL_RESET_REQ: FULL!L1CTL_FBSB_REQ (arfcn=7, flags=0x7) Starting FCCH RecognitionDSP Error Status: 8 DSP Error Status: 8 DSP Error Status: 8 DSP Error Status: 8 L1CTL_RESET_REQ: FULL!L1CTL_FBSB_REQ (arfcn=988, flags=0x7) Starting FCCH RecognitionDSP Error Status: 8 DSP Error Status: 8 DSP Error Status: 8 DSP Error Status: 8 L1CTL_RESET_REQ: FULL!L1CTL_FBSB_REQ (arfcn=971, flags=0x7) Starting FCCH RecognitionDSP Error Status: 8 DSP Error Status: 8 DSP Error Status: 8 DSP Error Status: 8 L1CTL_RESET_REQ: FULL!L1CTL_FBSB_REQ (arfcn=969, flags=0x7) Starting FCCH RecognitionDSP Error Status: 8 DSP Error Status: 8 DSP Error Status: 8 DSP Error Status: 8 L1CTL_RESET_REQ: FULL!L1CTL_FBSB_REQ (arfcn=42, flags=0x7) Starting FCCH RecognitionDSP Error Status: 8 DSP Error Status: 8 DSP Error Status: 8 DSP Error Status: 8 L1CTL_RESET_REQ: FULL!L1CTL_FBSB_REQ (arfcn=40, flags=0x7) Starting FCCH RecognitionDSP Error Status: 8 DSP Error Status: 8 DSP Error Status: 8 DSP Error Status: 8 L1CTL_RESET_REQ: FULL!L1CTL_FBSB_REQ (arfcn=32, flags=0x7) Starting FCCH RecognitionDSP Error Status: 8 DSP Error Status: 8 BAT-ADC: 592 6 0 0 1023 353 327 270 Charger at 51 mV. Battery at 4047 mV. Charging at 0 mA. Battery capacity is 100%. Battery range is 3199..3999 mV. Battery full at 468 LSB .. full at 585 LSB Charging at 239 LSB (204 mA). BCICTL2=0x3ff battery-info.flags=0x00000000 bat_compal_e88_chg_state=0 DSP Error Status: 8 DSP Error Status: 8 L1CTL_RESET_REQ: FULL!L1CTL_FBSB_REQ (arfcn=85, flags=0x7) Starting FCCH RecognitionDSP Error Status: 8 DSP Error Status: 8 DSP Error Status: 8 DSP Error Status: 8 L1CTL_RESET_REQ: FULL!L1CTL_FBSB_REQ (arfcn=55, flags=0x7) Starting FCCH RecognitionDSP Error Status: 8 DSP Error Status: 8 DSP Error Status: 8 DSP Error Status: 8 L1CTL_RESET_REQ: FULL!L1CTL_FBSB_REQ (arfcn=47, flags=0x7) Starting FCCH RecognitionDSP Error Status: 8 DSP Error Status: 8 DSP Error Status: 8 DSP Error Status: 8 L1CTL_RESET_REQ: FULL!L1CTL_FBSB_REQ (arfcn=28, flags=0x7) Starting FCCH RecognitionDSP Error Status: 8 DSP Error Status: 8 DSP Error Status: 8 DSP Error Status: 8 L1CTL_RESET_REQ: FULL!L1CTL_FBSB_REQ (arfcn=5, flags=0x7) Starting FCCH RecognitionDSP Error Status: 8 DSP Error Status: 8 DSP Error Status: 8 DSP Error Status: 8 L1CTL_RESET_REQ: FULL!L1CTL_PM_REQ start=0 end=124 DSP Error Status: 8 PM MEAS: ARFCN=0, 0 dBm at baseband, -138 dBm at RF DSP Error Status: 8 PM MEAS: ARFCN=1, 0 dBm at baseband, -138 dBm at RF DSP Error Status: 8 PM MEAS: ARFCN=2, 0 dBm at baseband, -138 dBm at RF DSP Error Status: 8 PM MEAS: ARFCN=3, 0 dBm at baseband, -138 dBm at RF DSP Error Status: 8 PM MEAS: ARFCN=4, 0 dBm at baseband, -138 dBm at RF DSP Error Status: 8 PM MEAS: ARFCN=5, 0 dBm at baseband, -138 dBm at RF DSP Error Status: 8 PM MEAS: ARFCN=6, 0 dBm at baseband, -138 dBm at RF DSP Error Status: 8 PM MEAS: ARFCN=7, 0 dBm at baseband, -138 dBm at RF DSP Error Status: 8 PM MEAS: ARFCN=8, 0 dBm at baseband, -138 dBm at RF DSP Error Status: 8 PM MEAS: ARFCN=9, 0 dBm at baseband, -138 dBm at RF DSP Error Status: 8 PM MEAS: ARFCN=10, 0 dBm at baseband, -138 dBm at RF DSP Error Status: 8 PM MEAS: ARFCN=11, 0 dBm at baseband, -138 dBm at RF DSP Error Status: 8 PM MEAS: ARFCN=12, 0 dBm at baseband, -138 dBm at RF DSP Error Status: 8 PM MEAS: ARFCN=13, 0 dBm at baseband, -138 dBm at RF DSP Error Status: 8 PM MEAS: ARFCN=14, 0 dBm at baseband, -138 dBm at RF DSP Error Status: 8 PM MEAS: ARFCN=15, 0 dBm at baseband, -138 dBm at RF DSP Error Status: 8 PM MEAS: ARFCN=16, 0 dBm at baseband, -138 dBm at RF DSP Error Status: 8 PM MEAS: ARFCN=17, 0 dBm at baseband, -138 dBm at RF DSP Error Status: 8 PM MEAS: ARFCN=18, 0 dBm at baseband, -138 dBm at RF DSP Error Status: 8 PM MEAS: ARFCN=19, 0 dBm at baseband, -138 dBm at RF DSP Error Status: 8 PM MEAS: ARFCN=20, 0 dBm at baseband, -138 dBm at RF DSP Error Status: 8 PM MEAS: ARFCN=21, 0 dBm at baseband, -138 dBm at RF DSP Error Status: 8 PM MEAS: ARFCN=22, 0 dBm at baseband, -138 dBm at RF DSP Error Status: 8 PM MEAS: ARFCN=23, 0 dBm at baseband, -138 dBm at RF DSP Error Status: 8 PM MEAS: ARFCN=24, 0 dBm at baseband, -138 dBm at RF DSP Error Status: 8 PM MEAS: ARFCN=25, 0 dBm at baseband, -138 dBm at RF DSP Error Status: 8 PM MEAS: ARFCN=26, 0 dBm at baseband, -138 dBm at RF DSP Error Status: 8 PM MEAS: ARFCN=27, 0 dBm at baseband, -138 dBm at RF DSP Error Status: 8 PM MEAS: ARFCN=28, 0 dBm at baseband, -138 dBm at RF DSP Error Status: 8 PM MEAS: ARFCN=29, 0 dBm at baseband, -138 dBm at RF DSP Error Status: 8

5 7

pirelli dp-l10 unexpectable stuck
by TSAREGORODTSEV, Yury 04 Sep '14

04 Sep '14

Hi guys, pirelli dp-l10 unexpectable stuck running osmocombb + mobile (master branch) its connected directly to DC power supply, so issue not related to battery. In osmocon, mobile debugs nothing particilular everything worked fine and just in one moment stuck even without any actions, just in idle mode. Anyone got some issues? Any suggestions? Yury

1 0

Can osmocomBB support multi phone simultaneously for a same sniff
by huang 25 Aug '14

25 Aug '14

For example, if i use three phone to catch TS0,can this three phones work at the same time -- View this message in context: http://baseband-devel.722152.n3.nabble.com/Can-osmocomBB-support-multi-phon… Sent from the baseband-devel mailing list archive at Nabble.com.

1 0

Re: Aw: pirelli dp-l10 stuck
by msokolov＠ivan.Harhan.ORG 24 Aug '14

24 Aug '14

"TSAREGORODTSEV, Yury" <yury(a)bridgecommunication.co.uk> wrote: > Damn, yeah > its not charging at all :) > even when connected to hub with external power :) Unfortunately there are no schematics available for the DP-L10 (and reconstructing them from steve-m's PCB layer scans is anything but easy), so everything that follows is ultimately pure guesswork, but it *seems* to me that the battery charging circuit in this phone is fundamentally the same as in the more traditional Calypso+Iota phones (Compal etc), aside from using USB VBUS as the charging power source instead of a dedicated round-plug type of power jack. If the charging circuit in the DP-L10 works the way I think it does, following common sense and all that, than the battery charging process ought to be controlled by Iota ABB. The ABB chip in this phone is TWL3014, but I'll use the more readable TWL3025 datasheet as a reference instead - back in 2011 both Steve M. and Sylvain M. said on this list that the two chips are functionally identical. The battery charging functionality is described on pages 46-48 of TWL3025_SWRS021.pdf; in particular, refer to Figure 4-10 on page 48. If my understanding of this datasheet description is correct, and if the phone in question (Pirelli DP-L10) indeed has its battery charging circuit implemented in the canonical way, then one of the following two conditions must be met in order for charging current to pass from VBUS into the battery: 1. The "precharge" function is enabled inside the ABB chip, such that an internal transistor in the ABB opens up to pass some current from the VCHG pin to the PCHG pin. This precharge function is intended for situation when the battery has discharged so low that it needs to be charged some before one can boot the CPU, hence this precharge phase has to be done entirely in hardware without any CPU firmware supervision. But it appears that this hardware-only precharge function is automatically disabled when the CPU is turned on, or maybe the precharge current is so feeble that the drain from the running CPU is greater than the amount of power coming from the precharge circuit. -or- 2. The "normal" way of charging the battery (with the CPU running) is for the CPU to enable the main charging circuit in the ABB via some register writes. In this case the power flows from the charging source (USB VBUS in the case of Pirelli DP-L10) into the battery through an external power transistor controlled by the ICTL output from the ABB. In TI's standard firmware the battery charging function lives in the PWR SWE (RiViera Software Entity) in the older versions and in the LCC SWE in newer ones. Pirelli's version appears to use PWR rather than LCC. We (the world public) have the source for the PWR SWE in the MV100 find, and that for LCC in the Sotovik find, but I haven't really looked at either of them yet - working on L1 integration currently. If you would like to get Pirelli battery charging working in OsmocomBB, I would recommend that you take the charging code for compal_e88, enable it for the DP-L10 build, and experiment from there. Don't be fooled by Pirelli's use of USB charging instead of a round-plug charger, my guess is that they use USB VBUS in exactly the same way as how Compal etc use their charging power source. It also seems to me that Pirelli's charging mechanism does not strictly comply with the USB spec. Per the spec, you are supposed to draw no more than 100 mA from VBUS until and unless you negotiate a higher power budget with the host, and that negotiation takes place over the D+ and D- wires. But in Pirelli's case these D+ and D- wires go to the CP2102 USB-serial chip and nowhere else, and only this CP2102 speaks the USB protocol - the Calypso only sees UART-serial on the other side of the CP2102. So they "illegally" tap VBUS (which per the spec must not go anywhere but to the device that speaks the USB protocol) to use it as the charging power source, but have no way to negotiate their current draw. When Pirelli's fw detects the presence of VBUS via the charger-insert interrupt from the ABB and decides to start charging the battery, it has no choice but to enable some hard-coded charging current value - the charging current can be adjusted by programming a register in the ABB, but the fw has no way of knowing how much current it is allowed to draw from VBUS, if any at all, because only the USB logic in the CP2102 has access to this knowledge. So whatever charging current it draws, it must do so blindly. I can only guess that this current must be somewhere around 500 mA, as charging at 100 mA would be too slow. I actually like Pirelli's design in this regard, and I currently plan on copying it in my own Pirelli-inspired Calypso dumbphone design: put a CP2102 inside the phone just like Pirelli did, and use the same USB charging arrangement, drawing 500 mA for charging unconditionally, showing "the middle finger" to the developer-unfriendly Unusable Serial Botch specs... Or can someone think of a better way? VLR, SF

2 1

pirelli dp-l10 stuck
by TSAREGORODTSEV, Yury 24 Aug '14

24 Aug '14

Hi, everybody has same trouble that pirelli stuck after some usage ?

3 6

pirelli dp10
by TSAREGORODTSEV, Yury 22 Aug '14

22 Aug '14

Hello, anyone has experience to use application mobile on pirelli ? there is no layer1.compalram.bin for this model, any ideas how to run app mobile? Sincerely Yours, Tsaregorodtsev Yury Bridge Communication Billing & Settlement Plan Limited Fernhills Business Center, Foerster Chambers, Todd Street Bury, Gtr Manchester, BL9 5BJ United Kingdom Tel: +441570200000 ICQ: 622719210 MSN: y.tsaregorodtsev(a)live.com Skype: tsarik-108 web: www.bridgecommunication.co.uk

1 2

[PATCH] layer23: initialize l2h/l3h pointers
by Igor Almeida 21 Aug '14

21 Aug '14

Signed-off-by: Igor Almeida <igor.contato(a)gmail.com> --- src/host/layer23/src/common/l1ctl.c | 1 + 1 file changed, 1 insertion(+) diff --git a/src/host/layer23/src/common/l1ctl.c b/src/host/layer23/src/common/l1ctl.c index 91bab89..c75872e 100644 --- a/src/host/layer23/src/common/l1ctl.c +++ b/src/host/layer23/src/common/l1ctl.c @@ -148,6 +148,7 @@ static int rx_l1_rach_conf(struct osmocom_ms *ms, struct msgb *msg) } dl = (struct l1ctl_info_dl *) msg->l1h; + msg->l2h = msg->l3h = dl->payload; osmo_prim_init(&pp.oph, SAP_GSM_PH, PRIM_PH_RACH, PRIM_OP_CONFIRM, msg); -- 2.0.1 --------------070704030600070907020805--

1 0

GSM DoS or conditional access project
by Abel Magaña 20 Aug '14

20 Aug '14

Hi I wonder if there is a way to develop a Denial of Service or Conditional Access system for a GSM network based on Osmocom. The idea is to develop a commercial product intended to be used to limit unlawful communication in prisons or correctional facilities. My investigation is that this is a kind of worldwide necessity as inmates use smuggled mobile phones for criminal activities (I live in Central America and constantly see news that confirm this is urgent requirement). Currently there a few options available to achieve this purpose: 1. Government authorities require telecom operators to reduce radio signal in the vicinity of confinement facilities2. The use of radio jamming systems to propagate a noise signal3. One or two commercial solutions like iNAC Managed Access from Tecore (a very clever and patented technology) I imagine a solution based on Osmocom as a base station simulating a roaming area in the correctional facility area, for authorized users, dummy network should appear as a FPLMN but for illegal users the fake network must grant access entering driving them into a dead end network with no communication. However I see there are several flaws for this aproach: one is that inmates could set their mobiles to manual network selection and connect themself to commercial mobile networks but I hope this could serve as a ground for further discussion. I will appreciate very much your comments. Regards,

1 0

Memdump gives bad crc on Motorola C118
by Richard Menedetter 17 Aug '14

17 Aug '14

Hi I thought I try to flash some osmocom tools into a C118. I have the loader loaded succesfully onto the C118. I can do a finfo (see below) So I wanted to backup the complete flash: osmoload memdump 0x000000 0x200000 c118.bin -> I get "bad crc" for every page Same when I try to backup the loader as on the flashing wiki. Dumping 8192 bytes of memory at 0x0 to file compal_loader.bin bad crc 4190 (not 5c9a) at offset 0x00000000 bad crc f041 (not d50d) at offset 0x000000f0 bad crc f041 (not 3afa) at offset 0x000001e0 Is the C118 not supported for flashing? Can somebody give me any helpful hints? CU, Ricsi chip 0 at 0x00000000 of 2097152 bytes in 2 regions region 0 with 31 blocks of 65536 bytes each block 0 with 65536 bytes at 0x00000000 on chip 0 block 1 with 65536 bytes at 0x00010000 on chip 0 block 2 with 65536 bytes at 0x00020000 on chip 0 block 3 with 65536 bytes at 0x00030000 on chip 0 block 4 with 65536 bytes at 0x00040000 on chip 0 block 5 with 65536 bytes at 0x00050000 on chip 0 block 6 with 65536 bytes at 0x00060000 on chip 0 block 7 with 65536 bytes at 0x00070000 on chip 0 block 8 with 65536 bytes at 0x00080000 on chip 0 block 9 with 65536 bytes at 0x00090000 on chip 0 block 10 with 65536 bytes at 0x000a0000 on chip 0 block 11 with 65536 bytes at 0x000b0000 on chip 0 block 12 with 65536 bytes at 0x000c0000 on chip 0 block 13 with 65536 bytes at 0x000d0000 on chip 0 block 14 with 65536 bytes at 0x000e0000 on chip 0 block 15 with 65536 bytes at 0x000f0000 on chip 0 block 16 with 65536 bytes at 0x00100000 on chip 0 block 17 with 65536 bytes at 0x00110000 on chip 0 block 18 with 65536 bytes at 0x00120000 on chip 0 block 19 with 65536 bytes at 0x00130000 on chip 0 block 20 with 65536 bytes at 0x00140000 on chip 0 block 21 with 65536 bytes at 0x00150000 on chip 0 block 22 with 65536 bytes at 0x00160000 on chip 0 block 23 with 65536 bytes at 0x00170000 on chip 0 block 24 with 65536 bytes at 0x00180000 on chip 0 block 25 with 65536 bytes at 0x00190000 on chip 0 block 26 with 65536 bytes at 0x001a0000 on chip 0 block 27 with 65536 bytes at 0x001b0000 on chip 0 block 28 with 65536 bytes at 0x001c0000 on chip 0 block 29 with 65536 bytes at 0x001d0000 on chip 0 block 30 with 65536 bytes at 0x001e0000 on chip 0 region 1 with 8 blocks of 8192 bytes each block 31 with 8192 bytes at 0x001f0000 on chip 0 block 32 with 8192 bytes at 0x001f2000 on chip 0 block 33 with 8192 bytes at 0x001f4000 on chip 0 block 34 with 8192 bytes at 0x001f6000 on chip 0 block 35 with 8192 bytes at 0x001f8000 on chip 0 block 36 with 8192 bytes at 0x001fa000 on chip 0 block 37 with 8192 bytes at 0x001fc000 on chip 0 block 38 with 8192 bytes at 0x001fe000 on chip 0

2 2

Pirelli phone charging function in osmocom-bb
by Richard Menedetter 17 Aug '14

17 Aug '14

Hi List I have just reactivated my Pirelli Osmocom phone, and recompiled osmocom-bb. (after rolling back libosmocore it works great) But can it be that charging is not implemented on the Pirelli phone with OsmocomBB? When I attach the MiniUSB cable, I can upload the code great, but when I leave it running for a longer time, it booted into the default charging pirelli screen. I assume that the battery is not that good any more, and it seems that it is running on battery power instead of on USB power. When I upload the RSSI app to the phone it shows me an empty battery icon in the right. (Pirelli SW showed completely full battery icon) Can somebody confirm that the pirelli phone is not charging in osmocom-bb? Is there a chance tha somebody is looking into this anytime? CU, Ricsi PS: Is it still correct that the jolly/test branch is the best for 2 phone transceiver (for OpenBTS/OpenBSC)? This branch should support 2 phones. But as half rate channels are not supported you can only make one call. (ie not possible to make a testcall without going over SIP) Is this information still valid?

2 1

mobile app crash
by TSAREGORODTSEV, Yury 13 Aug '14

13 Aug '14

Hello, can anyone help with fix? Mobile application crashing all time: root@aero-bts:/with_sim/osmocom-bb/src/host/layer23/src/mobile# ./mobile Copyright (C) 2008-2010 ... Contributions by ... License GPLv2+: GNU GPL version 2 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. <000f> sim.c:1223 init SIM client <0006> gsm48_cc.c:63 init Call Control <0007> gsm480_ss.c:231 init SS <0019> gsm411_sms.c:63 init SMS <0001> gsm48_rr.c:5500 init Radio Ressource process <0005> gsm48_mm.c:1324 init Mobility Management process <0005> gsm48_mm.c:1037 Selecting PLMN SEARCH state, because no SIM. <0002> gsm322.c:5037 init PLMN process <0003> gsm322.c:5038 init Cell Selection process <0003> gsm322.c:5095 Read stored BA list (mcc=214 mnc=07 Spain, movistar) Mobile '1' initialized, please start phone now! VTY available on port 4247. <0005> subscriber.c:600 Requesting SIM file 0x2fe2 <000f> sim.c:209 got new job: SIM_JOB_READ_BINARY (handle=00000004) <000f> sim.c:697 go MF <000f> sim.c:241 SELECT (file=0x3f00) <000f> sim.c:187 sending APDU (class 0xa0, ins 0xa4) <000f> sim.c:876 received APDU (len=0 sw1=0x9f sw2=0x1e) <000f> sim.c:949 command successfull <000f> sim.c:571 GET RESPONSE (len=30) <000f> sim.c:187 sending APDU (class 0xa0, ins 0xc0) <000f> sim.c:876 received APDU (len=30 sw1=0x90 sw2=0x00) <000f> sim.c:949 command successfull <000f> sim.c:241 SELECT (file=0x2fe2) <000f> sim.c:187 sending APDU (class 0xa0, ins 0xa4) <000f> sim.c:876 received APDU (len=0 sw1=0x9f sw2=0x0f) <000f> sim.c:949 command successfull <000f> sim.c:571 GET RESPONSE (len=15) <000f> sim.c:187 sending APDU (class 0xa0, ins 0xc0) <000f> sim.c:876 received APDU (len=15 sw1=0x90 sw2=0x00) <000f> sim.c:949 command successfull <000f> sim.c:1065 selected file (len 10) <000f> sim.c:277 READ BINARY (offset=0 len=10) <000f> sim.c:187 sending APDU (class 0xa0, ins 0xb0) <000f> sim.c:876 received APDU (len=10 sw1=0x90 sw2=0x00) <000f> sim.c:949 command successfull <000f> sim.c:151 sending result to callback function (type=0) <0005> subscriber.c:232 received ICCID 8934076100140610329 from SIM <0005> subscriber.c:600 Requesting SIM file 0x6f07 <000f> sim.c:209 got new job: SIM_JOB_READ_BINARY (handle=00000004) <000f> sim.c:706 requested path is longer, go child DFgsm <000f> sim.c:241 SELECT (file=0x7f20) <000f> sim.c:187 sending APDU (class 0xa0, ins 0xa4) <000f> sim.c:876 received APDU (len=0 sw1=0x9f sw2=0x1e) <000f> sim.c:949 command successfull <000f> sim.c:571 GET RESPONSE (len=30) <000f> sim.c:187 sending APDU (class 0xa0, ins 0xc0) <000f> sim.c:876 received APDU (len=30 sw1=0x90 sw2=0x00) <000f> sim.c:949 command successfull <000f> sim.c:241 SELECT (file=0x6f07) <000f> sim.c:187 sending APDU (class 0xa0, ins 0xa4) <000f> sim.c:876 received APDU (len=0 sw1=0x9f sw2=0x0f) <000f> sim.c:949 command successfull <000f> sim.c:571 GET RESPONSE (len=15) <000f> sim.c:187 sending APDU (class 0xa0, ins 0xc0) <000f> sim.c:876 received APDU (len=15 sw1=0x90 sw2=0x00) <000f> sim.c:949 command successfull <000f> sim.c:1065 selected file (len 9) <000f> sim.c:277 READ BINARY (offset=0 len=9) <000f> sim.c:187 sending APDU (class 0xa0, ins 0xb0) <000f> sim.c:876 received APDU (len=9 sw1=0x90 sw2=0x00) <000f> sim.c:949 command successfull <000f> sim.c:151 sending result to callback function (type=0) <0005> subscriber.c:262 received IMSI 214075542695571 from SIM <0005> subscriber.c:600 Requesting SIM file 0x6f7e <000f> sim.c:209 got new job: SIM_JOB_READ_BINARY (handle=00000004) <000f> sim.c:241 SELECT (file=0x6f7e) <000f> sim.c:187 sending APDU (class 0xa0, ins 0xa4) <000f> sim.c:876 received APDU (len=0 sw1=0x9f sw2=0x0f) <000f> sim.c:949 command successfull <000f> sim.c:571 GET RESPONSE (len=15) <000f> sim.c:187 sending APDU (class 0xa0, ins 0xc0) <000f> sim.c:876 received APDU (len=15 sw1=0x90 sw2=0x00) <000f> sim.c:949 command successfull <000f> sim.c:1065 selected file (len 11) <000f> sim.c:277 READ BINARY (offset=0 len=11) <000f> sim.c:187 sending APDU (class 0xa0, ins 0xb0) <000f> sim.c:876 received APDU (len=11 sw1=0x90 sw2=0x00) <000f> sim.c:949 command successfull <000f> sim.c:151 sending result to callback function (type=0) <0005> subscriber.c:299 received LOCI from SIM (mcc=214 mnc=07 lac=0x0b58 U1) <0005> subscriber.c:600 Requesting SIM file 0x6f20 <000f> sim.c:209 got new job: SIM_JOB_READ_BINARY (handle=00000004) <000f> sim.c:241 SELECT (file=0x6f20) <000f> sim.c:187 sending APDU (class 0xa0, ins 0xa4) <000f> sim.c:876 received APDU (len=0 sw1=0x9f sw2=0x0f) <000f> sim.c:949 command successfull <000f> sim.c:571 GET RESPONSE (len=15) <000f> sim.c:187 sending APDU (class 0xa0, ins 0xc0) <000f> sim.c:876 received APDU (len=15 sw1=0x90 sw2=0x00) <000f> sim.c:949 command successfull <000f> sim.c:1065 selected file (len 9) <000f> sim.c:277 READ BINARY (offset=0 len=9) <000f> sim.c:187 sending APDU (class 0xa0, ins 0xb0) <000f> sim.c:876 received APDU (len=9 sw1=0x90 sw2=0x00) <000f> sim.c:949 command successfull <000f> sim.c:151 sending result to callback function (type=0) <0005> subscriber.c:376 received KEY from SIM <0005> subscriber.c:600 Requesting SIM file 0x6f30 <000f> sim.c:209 got new job: SIM_JOB_READ_BINARY (handle=00000004) <000f> sim.c:241 SELECT (file=0x6f30) <000f> sim.c:187 sending APDU (class 0xa0, ins 0xa4) <000f> sim.c:876 received APDU (len=0 sw1=0x9f sw2=0x0f) <000f> sim.c:949 command successfull <000f> sim.c:571 GET RESPONSE (len=15) <000f> sim.c:187 sending APDU (class 0xa0, ins 0xc0) <000f> sim.c:876 received APDU (len=15 sw1=0x90 sw2=0x00) <000f> sim.c:949 command successfull <000f> sim.c:1065 selected file (len 48) <000f> sim.c:277 READ BINARY (offset=0 len=48) <000f> sim.c:187 sending APDU (class 0xa0, ins 0xb0) <000f> sim.c:876 received APDU (len=48 sw1=0x90 sw2=0x00) <000f> sim.c:949 command successfull <000f> sim.c:151 sending result to callback function (type=0) <0005> subscriber.c:414 received PLMN selector (mcc=208 mnc=01) from SIM <0005> subscriber.c:414 received PLMN selector (mcc=208 mnc=20) from SIM <0005> subscriber.c:414 received PLMN selector (mcc=234 mnc=10) from SIM <0005> subscriber.c:414 received PLMN selector (mcc=268 mnc=06) from SIM <0005> subscriber.c:414 received PLMN selector (mcc=268 mnc=03) from SIM <0005> subscriber.c:414 received PLMN selector (mcc=222 mnc=01) from SIM <0005> subscriber.c:414 received PLMN selector (mcc=262 mnc=07) from SIM <0005> subscriber.c:414 received PLMN selector (mcc=204 mnc=08) from SIM <0005> subscriber.c:414 received PLMN selector (mcc=604 mnc=00) from SIM <0005> subscriber.c:414 received PLMN selector (mcc=232 mnc=03) from SIM <0005> subscriber.c:414 received PLMN selector (mcc=228 mnc=02) from SIM <0005> subscriber.c:414 received PLMN selector (mcc=272 mnc=02) from SIM <0005> subscriber.c:414 received PLMN selector (mcc=334 mnc=030) from SIM <0005> subscriber.c:414 received PLMN selector (mcc=202 mnc=10) from SIM <0005> subscriber.c:414 received PLMN selector (mcc=226 mnc=10) from SIM <0005> subscriber.c:414 received PLMN selector (mcc=226 mnc=03) from SIM <0005> subscriber.c:600 Requesting SIM file 0x6f31 <000f> sim.c:209 got new job: SIM_JOB_READ_BINARY (handle=00000004) <000f> sim.c:241 SELECT (file=0x6f31) <000f> sim.c:187 sending APDU (class 0xa0, ins 0xa4) <000f> sim.c:876 received APDU (len=0 sw1=0x9f sw2=0x0f) <000f> sim.c:949 command successfull <000f> sim.c:571 GET RESPONSE (len=15) <000f> sim.c:187 sending APDU (class 0xa0, ins 0xc0) <000f> sim.c:876 received APDU (len=15 sw1=0x90 sw2=0x00) <000f> sim.c:949 command successfull <000f> sim.c:1065 selected file (len 1) <000f> sim.c:277 READ BINARY (offset=0 len=1) <000f> sim.c:187 sending APDU (class 0xa0, ins 0xb0) <000f> sim.c:876 received APDU (len=1 sw1=0x90 sw2=0x00) <000f> sim.c:949 command successfull <000f> sim.c:151 sending result to callback function (type=0) <0005> subscriber.c:435 received HPPLMN 5 (30 mins) from SIM <0005> subscriber.c:600 Requesting SIM file 0x6f46 <000f> sim.c:209 got new job: SIM_JOB_READ_BINARY (handle=00000004) <000f> sim.c:241 SELECT (file=0x6f46) <000f> sim.c:187 sending APDU (class 0xa0, ins 0xa4) <000f> sim.c:876 received APDU (len=0 sw1=0x9f sw2=0x0f) <000f> sim.c:949 command successfull <000f> sim.c:571 GET RESPONSE (len=15) <000f> sim.c:187 sending APDU (class 0xa0, ins 0xc0) <000f> sim.c:876 received APDU (len=15 sw1=0x90 sw2=0x00) <000f> sim.c:949 command successfull <000f> sim.c:1065 selected file (len 17) <000f> sim.c:277 READ BINARY (offset=0 len=17) <000f> sim.c:187 sending APDU (class 0xa0, ins 0xb0) <000f> sim.c:876 received APDU (len=17 sw1=0x90 sw2=0x00) <000f> sim.c:949 command successfull <000f> sim.c:151 sending result to callback function (type=0) <0005> subscriber.c:687 SIM reading failed, file invalid <0005> subscriber.c:600 Requesting SIM file 0x6f78 <000f> sim.c:209 got new job: SIM_JOB_READ_BINARY (handle=00000004) <000f> sim.c:241 SELECT (file=0x6f78) <000f> sim.c:187 sending APDU (class 0xa0, ins 0xa4) <000f> sim.c:876 received APDU (len=0 sw1=0x9f sw2=0x0f) <000f> sim.c:949 command successfull <000f> sim.c:571 GET RESPONSE (len=15) <000f> sim.c:187 sending APDU (class 0xa0, ins 0xc0) <000f> sim.c:876 received APDU (len=15 sw1=0x90 sw2=0x00) <000f> sim.c:949 command successfull <000f> sim.c:1065 selected file (len 2) <000f> sim.c:277 READ BINARY (offset=0 len=2) <000f> sim.c:187 sending APDU (class 0xa0, ins 0xb0) <000f> sim.c:876 received APDU (len=2 sw1=0x90 sw2=0x00) <000f> sim.c:949 command successfull <000f> sim.c:151 sending result to callback function (type=0) <0005> subscriber.c:476 received ACC 0002 from SIM <0005> subscriber.c:600 Requesting SIM file 0x6f7b <000f> sim.c:209 got new job: SIM_JOB_READ_BINARY (handle=00000004) <000f> sim.c:241 SELECT (file=0x6f7b) <000f> sim.c:187 sending APDU (class 0xa0, ins 0xa4) <000f> sim.c:876 received APDU (len=0 sw1=0x9f sw2=0x0f) <000f> sim.c:949 command successfull <000f> sim.c:571 GET RESPONSE (len=15) <000f> sim.c:187 sending APDU (class 0xa0, ins 0xc0) <000f> sim.c:876 received APDU (len=15 sw1=0x90 sw2=0x00) <000f> sim.c:949 command successfull <000f> sim.c:1065 selected file (len 12) <000f> sim.c:277 READ BINARY (offset=0 len=12) <000f> sim.c:187 sending APDU (class 0xa0, ins 0xb0) <000f> sim.c:876 received APDU (len=12 sw1=0x90 sw2=0x00) <000f> sim.c:949 command successfull <000f> sim.c:151 sending result to callback function (type=0) <0005> subscriber.c:515 received Forbidden PLMN 214 01 from SIM <0005> subscriber.c:515 received Forbidden PLMN 214 03 from SIM <0005> subscriber.c:600 Requesting SIM file 0x6f40 <000f> sim.c:209 got new job: SIM_JOB_READ_RECORD (handle=00000004) <000f> sim.c:697 go MF <000f> sim.c:241 SELECT (file=0x3f00) <000f> sim.c:187 sending APDU (class 0xa0, ins 0xa4) <000f> sim.c:876 received APDU (len=0 sw1=0x9f sw2=0x1e) <000f> sim.c:949 command successfull <000f> sim.c:571 GET RESPONSE (len=30) <000f> sim.c:187 sending APDU (class 0xa0, ins 0xc0) <000f> sim.c:876 received APDU (len=30 sw1=0x90 sw2=0x00) <000f> sim.c:949 command successfull <000f> sim.c:706 requested path is longer, go child DFtelecom <000f> sim.c:241 SELECT (file=0x7f10) <000f> sim.c:187 sending APDU (class 0xa0, ins 0xa4) <000f> sim.c:876 received APDU (len=0 sw1=0x9f sw2=0x1e) <000f> sim.c:949 command successfull <000f> sim.c:571 GET RESPONSE (len=30) <000f> sim.c:187 sending APDU (class 0xa0, ins 0xc0) <000f> sim.c:876 received APDU (len=30 sw1=0x90 sw2=0x00) <000f> sim.c:949 command successfull <000f> sim.c:241 SELECT (file=0x6f40) <000f> sim.c:187 sending APDU (class 0xa0, ins 0xa4) <000f> sim.c:876 received APDU (len=0 sw1=0x9f sw2=0x0f) <000f> sim.c:949 command successfull <000f> sim.c:571 GET RESPONSE (len=15) <000f> sim.c:187 sending APDU (class 0xa0, ins 0xc0) <000f> sim.c:876 received APDU (len=15 sw1=0x90 sw2=0x00) <000f> sim.c:949 command successfull <000f> sim.c:1060 selected record (len 28 structure 1) <000f> sim.c:312 READ RECORD (rec_no=1 mode=4 len=28) <000f> sim.c:187 sending APDU (class 0xa0, ins 0xb2) <000f> sim.c:876 received APDU (len=28 sw1=0x90 sw2=0x00) <000f> sim.c:949 command successfull <000f> sim.c:151 sending result to callback function (type=0) <0005> subscriber.c:327 received MSISDN from SIM <0005> subscriber.c:600 Requesting SIM file 0x6f42 <000f> sim.c:209 got new job: SIM_JOB_READ_RECORD (handle=00000004) <000f> sim.c:241 SELECT (file=0x6f42) <000f> sim.c:187 sending APDU (class 0xa0, ins 0xa4) <000f> sim.c:876 received APDU (len=0 sw1=0x9f sw2=0x0f) <000f> sim.c:949 command successfull <000f> sim.c:571 GET RESPONSE (len=15) <000f> sim.c:187 sending APDU (class 0xa0, ins 0xc0) <000f> sim.c:876 received APDU (len=15 sw1=0x90 sw2=0x00) <000f> sim.c:949 command successfull <000f> sim.c:1060 selected record (len 42 structure 1) <000f> sim.c:312 READ RECORD (rec_no=1 mode=4 len=42) <000f> sim.c:187 sending APDU (class 0xa0, ins 0xb2) <000f> sim.c:876 received APDU (len=42 sw1=0x90 sw2=0x00) <000f> sim.c:949 command successfull <000f> sim.c:151 sending result to callback function (type=0) <0005> subscriber.c:357 received SMSP from SIM (sca=+34609090909) <0005> subscriber.c:560 (ms 1) Done reading SIM card (IMSI=214075542695571 Spain, movistar) <0005> subscriber.c:572 -> SIM card registered to 214 07 (Spain, movistar) <0005> gsm48_mm.c:4388 (ms 1) Received 'MMR_REG_REQ' event <0002> gsm322.c:3818 (ms 1) Event 'EVENT_SIM_INSERT' for automatic PLMN selection in state 'A0 null' <000e> gsm322.c:1378 Start search of last registered PLMN (mcc=214 mnc=07 Spain, movistar) <0002> gsm322.c:1382 Use RPLMN (mcc=214 mnc=07 Spain, movistar) <0002> gsm322.c:806 new state 'A0 null' -> 'A1 trying RPLMN' <0003> gsm322.c:4049 (ms 1) Event 'EVENT_NEW_PLMN' for Cell selection in state 'C0 null' <000e> gsm322.c:3631 Selecting PLMN (mcc=214 mnc=07 Spain, movistar) <0003> gsm322.c:3637 Start stored cell selection. <0003> gsm322.c:829 new state 'C0 null' -> 'C2 stored cell selection' <0003> gsm322.c:2793 Scanning power for stored BA list. <0003> gsm322.c:2861 Scanning frequencies. (3..3) <0003> gsm322.c:2910 Found signal (ARFCN 3 rxlev -90 (20)) <0003> gsm322.c:2922 Done with power scanning range. <0003> gsm322.c:2793 Scanning power for stored BA list. <0003> gsm322.c:2861 Scanning frequencies. (5..5) <0003> gsm322.c:2910 Found signal (ARFCN 5 rxlev -82 (28)) <0003> gsm322.c:2922 Done with power scanning range. <0003> gsm322.c:2793 Scanning power for stored BA list. <0003> gsm322.c:2861 Scanning frequencies. (7..8) <0003> gsm322.c:2910 Found signal (ARFCN 7 rxlev -101 (9)) <0003> gsm322.c:2910 Found signal (ARFCN 8 rxlev -86 (24)) <0003> gsm322.c:2922 Done with power scanning range. <0003> gsm322.c:2793 Scanning power for stored BA list. <0003> gsm322.c:2861 Scanning frequencies. (10..19) <0003> gsm322.c:2910 Found signal (ARFCN 10 rxlev -81 (29)) <0003> gsm322.c:2910 Found signal (ARFCN 11 rxlev -88 (22)) <0003> gsm322.c:2910 Found signal (ARFCN 12 rxlev -76 (34)) <0003> gsm322.c:2910 Found signal (ARFCN 13 rxlev -57 (53)) <0003> gsm322.c:2910 Found signal (ARFCN 14 rxlev -75 (35)) <0003> gsm322.c:2910 Found signal (ARFCN 15 rxlev -77 (33)) <0003> gsm322.c:2910 Found signal (ARFCN 16 rxlev -98 (12)) <0003> gsm322.c:2910 Found signal (ARFCN 17 rxlev -97 (13)) <0003> gsm322.c:2910 Found signal (ARFCN 18 rxlev -73 (37)) <0003> gsm322.c:2910 Found signal (ARFCN 19 rxlev -92 (18)) <0003> gsm322.c:2922 Done with power scanning range. <0003> gsm322.c:2793 Scanning power for stored BA list. <0003> gsm322.c:2861 Scanning frequencies. (21..22) <0003> gsm322.c:2910 Found signal (ARFCN 21 rxlev -93 (17)) <0003> gsm322.c:2910 Found signal (ARFCN 22 rxlev -87 (23)) <0003> gsm322.c:2922 Done with power scanning range. <0003> gsm322.c:2793 Scanning power for stored BA list. <0003> gsm322.c:2861 Scanning frequencies. (69..69) <0003> gsm322.c:2910 Found signal (ARFCN 69 rxlev -101 (9)) <0003> gsm322.c:2922 Done with power scanning range. <0003> gsm322.c:2793 Scanning power for stored BA list. <0003> gsm322.c:2836 Found 17 frequencies. <0003> gsm322.c:2255 Scanning frequency 13 (rxlev -57). <0003> gsm322.c:474 Sync to ARFCN=13 rxlev=-57 (No sysinfo yet, ccch mode NONE) <0003> gsm322.c:2947 Channel synched. (ARFCN=13, snr=16, BSIC=7) <0003> gsm322.c:698 Starting CS timer with 4 seconds. <0001> gsm322.c:2968 using DSC of 90 <0003> gsm48_rr.c:4820 Channel provides data. <0003> gsm322.c:698 Starting CS timer with 4 seconds. <0001> gsm48_rr.c:1882 New SYSTEM INFORMATION 2ter <0001> sysinfo.c:705 New SYSTEM INFORMATION 3 (mcc 214 mnc 07 lac 0x0b58) <0001> gsm48_rr.c:1916 Changing CCCH_MODE to 1 <0001> gsm48_rr.c:2159 PAGING ignored, we are not camping. <0001> gsm48_rr.c:2214 PAGING ignored, we are not camping. <0001> gsm48_rr.c:2159 PAGING ignored, we are not camping. <0001> gsm48_rr.c:1950 New SYSTEM INFORMATION 4 (mcc 214 mnc 07 lac 0x0b58) <0001> gsm48_rr.c:2159 PAGING ignored, we are not camping. <0001> gsm48_rr.c:2159 PAGING ignored, we are not camping. <0001> gsm48_rr.c:2159 PAGING ignored, we are not camping. <0001> gsm48_rr.c:2159 PAGING ignored, we are not camping. <0001> gsm48_rr.c:2159 PAGING ignored, we are not camping. <0001> sysinfo.c:616 Now updating previously received SYSTEM INFORMATION 4 <0001> gsm48_rr.c:1795 New SYSTEM INFORMATION 1 <0001> gsm48_rr.c:2159 PAGING ignored, we are not camping. <0001> gsm48_rr.c:2159 PAGING ignored, we are not camping. <0001> gsm48_rr.c:2159 PAGING ignored, we are not camping. <0001> gsm48_rr.c:2159 PAGING ignored, we are not camping. <0001> gsm48_rr.c:1824 New SYSTEM INFORMATION 2 <0003> gsm322.c:2714 Received relevant sysinfo. <0003> gsm322.c:708 stopping pending CS timer. <0003> gsm322.c:2325 Scan frequency 13: Cell found. (rxlev -57 mcc 214 mnc 07 lac 0b58) <0003> gsm322.c:1836 Select using access class <0003> gsm322.c:379 A (RLA_C (-57) - RXLEV_ACC_MIN (-102)) = 45 <0003> gsm322.c:381 B (MS_TXPWR_MAX_CCH (33) - p (33)) = 0 <0003> gsm322.c:382 C1 (A - MAX(B,0)) = 45 <0003> gsm322.c:1955 Cell ARFCN 13: Cell found, (rxlev=-57 mcc=214 mnc=07 lac=0b58 Spain, movistar) <0003> gsm322.c:1966 Cell ARFCN 13 selected. <0003> gsm322.c:2423 Tune to frequency 13. <0003> gsm322.c:468 Sync to ARFCN=13 rxlev=-57 (Sysinfo, ccch mode NON-COMB) <0003> gsm322.c:2450 Cell available. <0003> gsm322.c:4049 (ms 1) Event 'EVENT_CELL_FOUND' for Cell selection in state 'C2 stored cell selection' <000e> gsm322.c:3383 Camping normally on cell (ARFCN=13 mcc=214 mnc=07 Spain, movistar) <0003> gsm322.c:829 new state 'C2 stored cell selection' -> 'C3 camped normally' <0005> gsm48_mm.c:4320 (ms 1) Received 'MM_EVENT_CELL_SELECTED' event in state MM IDLE, PLMN search <0005> gsm48_mm.c:909 new MM IDLE state PLMN search -> location updating needed <0005> gsm48_mm.c:909 new MM IDLE state location updating needed -> attempting to update <0005> gsm48_mm.c:426 starting T3212 (periodic loc. upd. delay) with 14400 seconds <0005> gsm48_mm.c:2287 Do Loc. upd. for IMSI attach. <000e> gsm48_mm.c:2208 Perform location update (MCC 214, MNC 07 LAC 0x0b58) <0005> gsm48_mm.c:2342 LOCATION UPDATING REQUEST <0005> gsm48_mm.c:2364 using LAI (mcc 214 mnc 07 lac 0x0b58) <0005> gsm48_mm.c:2372 using TMSI 0x8800ea74 <0005> gsm48_mm.c:914 new state MM IDLE, attempting to update -> wait for RR connection (location updating) <0001> gsm48_rr.c:5449 (ms 1) Message 'RR_EST_REQ' received in state idle (sapi 0) <000e> gsm48_rr.c:1307 Establish radio link due to mobility management request <0003> gsm322.c:4049 (ms 1) Event 'EVENT_LEAVE_IDLE' for Cell selection in state 'C3 camped normally' <0003> gsm322.c:829 new state 'C3 camped normally' -> 'connected mode 1' <0003> gsm322.c:3665 Going to camping (normal) ARFCN 13. <0003> gsm322.c:452 Sync to ARFCN=13, but there is a sync already pending <0001> gsm48_rr.c:355 new state idle -> connection pending <0001> gsm48_rr.c:1459 CHANNEL REQUEST: 00 (Location Update no NECI) <0003> gsm322.c:2947 Channel synched. (ARFCN=13, snr=16, BSIC=7) <0001> gsm322.c:2968 using DSC of 90 <0003> gsm48_rr.c:4820 Channel provides data. <0001> gsm48_rr.c:1590 RANDOM ACCESS (requests left 5) <0001> gsm48_rr.c:1647 RANDOM ACCESS (Tx-integer 10 combined no S(lots) 0 ra 0x0f) <0001> gsm48_rr.c:1686 Use MS-TXPWR-MAX-CCH power value 5 (33 dBm) msgb(0x1ed6a40): Not enough headroom msgb_push (4262630712 < 7) backtrace() returned 11 addresses /usr/local/lib/libosmocore.so.4(osmo_panic+0xb8) [0x7fb0c623e918] /usr/local/lib/libosmogsm.so.5(+0x18986) [0x7fb0c5e0a986] /usr/local/lib/libosmogsm.so.5(lapdm_phsap_up+0x188) [0x7fb0c5e0b628] ./mobile() [0x437599] ./mobile() [0x43989e] /usr/local/lib/libosmocore.so.4(osmo_wqueue_bfd_cb+0x93) [0x7fb0c623c033] /usr/local/lib/libosmocore.so.4(osmo_select_main+0x19a) [0x7fb0c623aefa] ./mobile() [0x404917] /lib/libc.so.6(__libc_start_main+0xfd) [0x7fb0c58acc8d] ./mobile() [0x404489] Signal 6 received. full talloc report on 'layer2 context' (total 31816 bytes in 30 blocks) Layer2 contains 424 bytes in 1 blocks (ref 0) 0x1ed6a40 GSM 04.08 L3 contains 456 bytes in 1 blocks (ref 0) 0x1ed7cf0 struct gsm48_sysinfo contains 1452 bytes in 1 blocks (ref 0) 0x1ed72e0 struct gsm_sub_plmn_na contains 24 bytes in 1 blocks (ref 0) 0x1ed7270 struct gsm_sub_plmn_na contains 24 bytes in 1 blocks (ref 0) 0x1ed7200 struct gsm_sub_plmn_list contains 24 bytes in 1 blocks (ref 0) 0x1ed7190 struct gsm_sub_plmn_list contains 24 bytes in 1 blocks (ref 0) 0x1ed7120 struct gsm_sub_plmn_list contains 24 bytes in 1 blocks (ref 0) 0x1ed70b0 struct gsm_sub_plmn_list contains 24 bytes in 1 blocks (ref 0) 0x1ed7040 struct gsm_sub_plmn_list contains 24 bytes in 1 blocks (ref 0) 0x1ed6fd0 struct gsm_sub_plmn_list contains 24 bytes in 1 blocks (ref 0) 0x1ed6f60 struct gsm_sub_plmn_list contains 24 bytes in 1 blocks (ref 0) 0x1ed6ef0 struct gsm_sub_plmn_list contains 24 bytes in 1 blocks (ref 0) 0x1ed6e80 struct gsm_sub_plmn_list contains 24 bytes in 1 blocks (ref 0) 0x1ed6e10 struct gsm_sub_plmn_list contains 24 bytes in 1 blocks (ref 0) 0x1ed6da0 struct gsm_sub_plmn_list contains 24 bytes in 1 blocks (ref 0) 0x1ecf440 struct gsm_sub_plmn_list contains 24 bytes in 1 blocks (ref 0) 0x1ecf3d0 struct gsm_sub_plmn_list contains 24 bytes in 1 blocks (ref 0) 0x1ecf360 struct gsm_sub_plmn_list contains 24 bytes in 1 blocks (ref 0) 0x1ecf0c0 struct gsm_sub_plmn_list contains 24 bytes in 1 blocks (ref 0) 0x1ecf050 struct gsm_sub_plmn_list contains 24 bytes in 1 blocks (ref 0) 0x1ed6650 struct gsm_sim_handler contains 32 bytes in 1 blocks (ref 0) 0x1ed68c0 struct gsm_sim_handler contains 32 bytes in 1 blocks (ref 0) 0x1ed6940 struct gsm_sim_handler contains 32 bytes in 1 blocks (ref 0) 0x1ed69c0 telnet_connection contains 1 bytes in 1 blocks (ref 0) 0x1ecf510 struct gsm322_ba_list contains 192 bytes in 1 blocks (ref 0) 0x1ed6c80 struct osmocom_ms contains 28704 bytes in 1 blocks (ref 0) 0x1ecf5d0 /root/.osmocom/bb contains 29 bytes in 1 blocks (ref 0) 0x1e6c770 main.c:240 contains 29 bytes in 1 blocks (ref 0) 0x1e6c6f0 Aborted (core dumped) Thx a lot, Yury

6 9

support for L2/3 on chip
by mark.neuhaus＠email.de 08 Aug '14

08 Aug '14

Does the current version of OsmocomBB supports to run the layer 2 or the layer 3 on the baseband chip, now? I read through the arxiv of the mailing list but have maybe overlooked this. best, \jo

5 6

Re: Usefulness of the Calypso (was Re: seL4 is open source now)
by msokolov＠ivan.Harhan.ORG 06 Aug '14

06 Aug '14

mark.neuhaus(a)email.de wrote: > Pleae, then tell me where to get phones with a Calypso > baseband. www.ebay.com > And I'm talking about marked relevant prices. > Don't waste my time with numbers like 5000$. Several OsmocomBB-supported models are currently available on ebay for dirt cheap. > And to be relevant these phones must still be produced so > I can get many, if I want. How many? My company will be happy to produce 5000 Calypso-based phones for you if you make a non-cancelable purchase order and prepay the cost of parts and production. (5000 is the number of Calypso&co chipsets I can buy immediately from my established supplier *without doing any extensive searching*; one can probably get more with some effort.) > Beside, I think its better to work on reverse engineered > GSM stacks like the Qualcom project as started in It's easy to tell other people what they should work on. While you are busy doing that, I'll just keep working on my own solution which will actually result in a usable phone less than a year from now. VLR, SF

1 0

Usefulness of the Calypso (was Re: seL4 is open source now)
by msokolov＠ivan.Harhan.ORG 06 Aug '14

06 Aug '14

Someone (not clear who) said: > > [...] The calypso is just to outdated to be interesting > > for anything 'useable' beyond pure hacking-fun. I violently disagree with that statement. I personally carry a cellphone for one and only one purpose: so I can call my significant other (soon to be wife) and she can cell me at any time. A handset based on the Calypso chipset does this job wonderfully, and is IMO the optimal tool for the job. But the problem is that at the present time there does not exist any cellphone at all, of any kind (dumb, smart, old, new, whatever) that can make and receive cellular phone calls using only Free Software, as defined by the Free Software Foundation, i.e., providing the user with the most essential Four Freedoms: http://www.gnu.org/philosophy/free-sw.html Hence I am currently forced to use a cellphone that runs proprietary firmware, such that I lack the ability to fix any of the UI design flaws that constantly drive me nuts. This situation causes me severe distress, hence I have committed my hobby time and cash budget to a multi-year project to solve this pressing (for me) problem. OsmocomBB is not a solution: it works wonders for "hacking-fun" (the wording in the comment I'm responding to), but is utterly useless for a practical phone which one can carry around in a pocket or purse: my back just isn't strong enough to carry a supersized backpack containing a full PC for running the L23 stack plus a bank of lead-acid batteries. Hence I need a totally different Free Software GSM handset implementation, one that actually runs on the phone itself with proper power management exactly like the original proprietary firmware. And because no one else is working on such a thing, I started my own, and made quite a bit of progress: https://bitbucket.org/falconian/freecalypso-sw But I am using the same Calypso GSM chipset for my project as OsmocomBB uses, simply because it is IMO the optimal tool for the job at hand: allowing a person to communicate with his or her significant other by way of cellular phone calls. The word "outdated" does not exist in my vocabulary; I evaluate a tool based on how well it does the job, rather than some arbitrary irrelevant criteria like manufacture date stamps or whatever. Viva la Revolucion, SF

4 3

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

baseband-devel