baseband-devel

baseband-devel@lists.osmocom.org

1982 discussions

Suggestions required to implement Calypso BTS with GPRS (minimal)

by Altaf

I have been successful in running the calypso BTS and registering phones to it. I have also examined the source code implemented. I am currently doing an Internship in Berlin and the company wants to demonstrate to it customers that 2G services are not secure. Basically we are designing a securtiy demonstrator. We want to do man-in-the-middle attacks with the existing open source s/w. So we thought a B100 USrp would be the need of the hour. But I am really interested working with the calypso phones because I am comfortable with the source code and have already worked on it. I want to try (do) implementing the GPRS functionality to this calypso BTS. Since the work is mostly involved at Layer1 or lets say transceiver. I tried running OpenBTS-gprs version and resulted with some info. The mframe_sched in the trx doesnt contain info about the how to handle packet channels or the multiframes do not have the Packet channels. So when the BTS assigns (on CCCH) a dedicated channel and the calypso phone fails to receive uplink or doesnt provide a way for the phone to access the BTS. I understand the working of trx and want to add this GPRS functionality to trx. I am aiming to implement minimal GPRS functionality. I have also seen how OpenBTS-gprs has triggers this packet channel or the way multiframes handle PDCH, PTCH.. By observing them I can get some idea. In this regard I request from you few suggestions such as where I have to work more and what are the challenges I will face. your suggestions are valuable to me. -- View this message in context: http://baseband-devel.722152.n3.nabble.com/Suggestions-required-to-implemen… Sent from the baseband-devel mailing list archive at Nabble.com.

12 years, 3 months

Re: flashing problem fixed

by Bhaskar11

The two patches I have posted (separately) relating to "msgb_pull" use in Osmocom and firmware are required to fix the flashing problem! With these patches, I am able to use all the flash functions now. I still need to load the file "loader.e88loader.bin" which does not appear in my compile, as mentioned in a separate email. I bricked a phone by aborting the flashing at that stage! :-( Any advice on this will be appreciated. B. On Thu, May 23, 2013 at 5:51 PM, Akib Sayyed <akibsayyed(a)gmail.com> wrote: > bhaskar > > Have you solved issue with flashing. > > > On Thu, May 23, 2013 at 4:44 PM, Bhaskar11 <niceguy108(a)gmail.com> wrote: > >> Patched in format according to guidelines. >> >> B. >> >> > > > -- > Akib Sayyed > Matrix-Shell > akibsayyed(a)gmail.com > akibsayyed(a)matrixshell.com > Mob:- +91-966-514-2243 > >

12 years, 3 months

Patch by email

by Bhaskar11

I have some problem sending patches by "git send-email" since I am working in a Windows system. My next email is an experimental workaround. Please let me know if it works ok. B.

12 years, 3 months

PATCH: Bugfix in Firmware loader main.c: Assigning correct value to data pointer

by Bhaskar11

Patched in format according to guidelines. B.

12 years, 3 months

[PATCH] Bugfix in Firmware primfbsb.c "return" with a value in function returning void

by Bhaskar11

12 years, 3 months

[PATCH] * Bugfix in firmware trf5151.c: Setting correct mask for ARFCN value

by Bhaskar11

12 years, 3 months

Some Patch files

by Bhaskar11

Here are some bug fix and corrections patches. This is my first attempt, so please forgive errors and let me know if there is any problem. B.

12 years, 3 months

Re: bad crc in osmoload [SOLVED!] (updated patch)

by Bhaskar11

Here is a better Patch more consistent with rest of OsmocomBB coding style and more elegant. Please ignore previous patch offered (which works also but is relatively kludgy). B. On Wed, May 22, 2013 at 10:57 PM, Bhaskar11 <niceguy108(a)gmail.com> wrote: > Solved the "bad crc" problem in Osmoload. > > The bug was inadvertently introduced in osmoload.c in update SHA > ID 6ce46e7a86f4de0b1eef9c641ef6cfb49f1255cd on 9.9..2012 when msgb_get() > was replaced by msgb_pull() as part of a large scale change. Looks like no > one else had tried a "osmoload memdump" since then. > > Am enclosing patch to fix this bug. > > B. > > > > On Tue, May 14, 2013 at 5:26 PM, Bhaskar11 <niceguy108(a)gmail.com> wrote: > >> Hi all, >> >> I'm trying to flash RSSI app to my C118 following instructions on >> http://bb.osmocom.org/trac/wiki/flashing. >> >> First step Osmocon with loader works fine. >> >> Second step with "osmoload memdump 0x000000 0x2000 compal_loader.bin" >> gives the following output: >> >> Dumping 8192 bytes of memory at 0x0 to file compal_loader.bin >> >> bad crc 4190 (not 0000) at offset 0x00000000 >> bad crc f041 (not b209) at offset 0x000000f0 >> bad crc f041 (not 79d3) at offset 0x000001e0 >> ... >> bad crc f041 (not fe61) at offset 0x00001e00 >> bad crc 8257 (not 4cd6) at offset 0x00001ef0 >> bad crc a401 (not 0000) at offset 0x00001fe0done. >> >> Would appreciate any guidance on what I can do to set this right. >> >> A general question: >> If I flash RSSI app succesfully, can I later restore the original C118 >> code and use the cell as before? (assuming I have saved the full memory >> dump to disk!) Or is that gone for good? >> >> Thanks for your guidance. >> >> B. >> >> >> >

12 years, 3 months

Re: bad crc in osmoload [SOLVED!]

by Bhaskar11

Solved the "bad crc" problem in Osmoload. The bug was inadvertently introduced in osmoload.c in update SHA ID 6ce46e7a86f4de0b1eef9c641ef6cfb49f1255cd on 9.9..2012 when msgb_get() was replaced by msgb_pull() as part of a large scale change. Looks like no one else had tried a "osmoload memdump" since then. Am enclosing patch to fix this bug. B. On Tue, May 14, 2013 at 5:26 PM, Bhaskar11 <niceguy108(a)gmail.com> wrote: > Hi all, > > I'm trying to flash RSSI app to my C118 following instructions on > http://bb.osmocom.org/trac/wiki/flashing. > > First step Osmocon with loader works fine. > > Second step with "osmoload memdump 0x000000 0x2000 compal_loader.bin" > gives the following output: > > Dumping 8192 bytes of memory at 0x0 to file compal_loader.bin > > bad crc 4190 (not 0000) at offset 0x00000000 > bad crc f041 (not b209) at offset 0x000000f0 > bad crc f041 (not 79d3) at offset 0x000001e0 > ... > bad crc f041 (not fe61) at offset 0x00001e00 > bad crc 8257 (not 4cd6) at offset 0x00001ef0 > bad crc a401 (not 0000) at offset 0x00001fe0done. > > Would appreciate any guidance on what I can do to set this right. > > A general question: > If I flash RSSI app succesfully, can I later restore the original C118 > code and use the cell as before? (assuming I have saved the full memory > dump to disk!) Or is that gone for good? > > Thanks for your guidance. > > B. > > >

12 years, 3 months

[PATCH] * Bugfix in Firmware: initialising variables

by Bhaskar

Under specific circumstances, these variables would have been used without initialisation. --- src/target/firmware/apps/loader/main.c | 2 +- src/target/firmware/layer1/mframe_sched.c | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/src/target/firmware/apps/loader/main.c b/src/target/firmware/apps/loader/main.c index 8bdbc74..c74c045 100644 --- a/src/target/firmware/apps/loader/main.c +++ b/src/target/firmware/apps/loader/main.c @@ -213,7 +213,7 @@ static void cmd_handler(uint8_t dlci, struct msgb *msg) uint8_t command = msgb_pull_u8(msg); - int res; + int res = 0; flash_lock_t lock; diff --git a/src/target/firmware/layer1/mframe_sched.c b/src/target/firmware/layer1/mframe_sched.c index f3a6b43..047d709 100644 --- a/src/target/firmware/layer1/mframe_sched.c +++ b/src/target/firmware/layer1/mframe_sched.c @@ -343,7 +343,7 @@ static const struct mframe_sched_item *sched_set_for_task[32] = { /* encodes a channel number according to 08.58 Chapter 9.3.1 */ uint8_t mframe_task2chan_nr(enum mframe_task mft, uint8_t ts) { - uint8_t cbits; + uint8_t cbits = 0; switch (mft) { case MF_TASK_BCCH_NORM: -- 1.7.9 --047d7bdc15d456c2b204dd61e109 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable <div dir=3D"ltr"><div><font face=3D"courier new, monospace">From d1ad22fa60= e9d52bac246391b2fb6de57fb067b7 Mon Sep 17 00:00:00 2001</font></div><div><f= ont face=3D"courier new, monospace">From: Bhaskar <<a href=3D"mailto:nic= eguy108(a)gmail.com">niceguy108(a)gmail.com</a>></font></div> <div><font face=3D"courier new, monospace">Date: Wed, 22 May 2013 13:08:02 = +0530</font></div><div><font face=3D"courier new, monospace">Subject: [PATC= H] * Bugfix in Firmware: initialising variables</font></div><div><font face= =3D"courier new, monospace"><br> </font></div><div><font face=3D"courier new, monospace">Under specific circ= umstances, these variables would have been used without initialisation.</fo= nt></div><div><font face=3D"courier new, monospace"><br></font></div><div><= font face=3D"courier new, monospace">---</font></div> <div><font face=3D"courier new, monospace">=A0src/target/firmware/apps/load= er/main.c =A0 =A0| =A0 =A02 +-</font></div><div><font face=3D"courier new, = monospace">=A0src/target/firmware/layer1/mframe_sched.c | =A0 =A02 +-</font= ></div><div><font face=3D"courier new, monospace">=A02 files changed, 2 ins= ertions(+), 2 deletions(-)</font></div> <div><font face=3D"courier new, monospace"><br></font></div><div><font face= =3D"courier new, monospace">diff --git a/src/target/firmware/apps/loader/ma= in.c b/src/target/firmware/apps/loader/main.c</font></div><div><font face= =3D"courier new, monospace">index 8bdbc74..c74c045 100644</font></div> <div><font face=3D"courier new, monospace">--- a/src/target/firmware/apps/l= oader/main.c</font></div><div><font face=3D"courier new, monospace">+++ b/s= rc/target/firmware/apps/loader/main.c</font></div><div><font face=3D"courie= r new, monospace">@@ -213,7 +213,7 @@ static void cmd_handler(uint8_t dlci,= struct msgb *msg)</font></div> <div><font face=3D"courier new, monospace">=A0</font></div><div><font face= =3D"courier new, monospace">=A0<span class=3D"" style=3D"white-space:pre"> = </span>uint8_t command =3D msgb_pull_u8(msg);</font></div><div><font face= =3D"courier new, monospace">=A0</font></div> <div><font face=3D"courier new, monospace">-<span class=3D"" style=3D"white= -space:pre"> </span>int res;</font></div><div><font face=3D"courier new, mo= nospace">+<span class=3D"" style=3D"white-space:pre"> </span>int res =3D 0;= </font></div> <div><font face=3D"courier new, monospace">=A0</font></div><div><font face= =3D"courier new, monospace">=A0<span class=3D"" style=3D"white-space:pre"> = </span>flash_lock_t lock;</font></div><div><font face=3D"courier new, monos= pace">=A0</font></div> <div><font face=3D"courier new, monospace">diff --git a/src/target/firmware= /layer1/mframe_sched.c b/src/target/firmware/layer1/mframe_sched.c</font></= div><div><font face=3D"courier new, monospace">index f3a6b43..047d709 10064= 4</font></div> <div><font face=3D"courier new, monospace">--- a/src/target/firmware/layer1= /mframe_sched.c</font></div><div><font face=3D"courier new, monospace">+++ = b/src/target/firmware/layer1/mframe_sched.c</font></div><div><font face=3D"= courier new, monospace">@@ -343,7 +343,7 @@ static const struct mframe_sche= d_item *sched_set_for_task[32] =3D {</font></div> <div><font face=3D"courier new, monospace">=A0/* encodes a channel number a= ccording to 08.58 Chapter 9.3.1 */</font></div><div><font face=3D"courier n= ew, monospace">=A0uint8_t mframe_task2chan_nr(enum mframe_task mft, uint8_t= ts)</font></div> <div><font face=3D"courier new, monospace">=A0{</font></div><div><font face= =3D"courier new, monospace">-<span class=3D"" style=3D"white-space:pre"> </= span>uint8_t cbits;</font></div><div><font face=3D"courier new, monospace">= +<span class=3D"" style=3D"white-space:pre"> </span>uint8_t cbits =3D 0;</f= ont></div> <div><font face=3D"courier new, monospace">=A0</font></div><div><font face= =3D"courier new, monospace">=A0<span class=3D"" style=3D"white-space:pre"> = </span>switch (mft) {</font></div><div><font face=3D"courier new, monospace= ">=A0<span class=3D"" style=3D"white-space:pre"> </span>case MF_TASK_BCCH_N= ORM:</font></div> <div><font face=3D"courier new, monospace">--=A0</font></div><div><font fac= e=3D"courier new, monospace">1.7.9</font></div><div><br></div></div> --047d7bdc15d456c2b204dd61e109--

12 years, 3 months

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

baseband-devel