git.rot13.org Git - goodfet/blob - client/GoodFETCC.py

   1 #!/usr/bin/env python
   2 # GoodFET Client Library
   3 #
   4 # (C) 2009 Travis Goodspeed <travis at radiantmachines.com>
   5 #
   6 # This code is being rewritten and refactored.  You've been warned!
   7
   8 import sys;
   9 import binascii;
  10
  11 from GoodFET import GoodFET;
  12 from intelhex import IntelHex;
  13
  14 import xml.dom.minidom;
  15
  16 class GoodFETCC(GoodFET):
  17     """A GoodFET variant for use with Chipcon 8051 Zigbee SoC."""
  18     APP=0x30;
  19     smartrfpath="/opt/smartrf7";
  20     def SRF_chipdom(self,chip="cc1110", doc="register_definition.xml"):
  21         fn="%s/config/xml/%s/%s" % (self.smartrfpath,chip,doc);
  22         print "Opening %s" % fn;
  23         return xml.dom.minidom.parse(fn)
  24     def CMDrs(self,args=[]):
  25         """Chip command to grab the radio state."""
  26         self.SRF_radiostate();
  27     def SRF_radiostate(self):
  28         ident=self.CCident();
  29         chip=self.CCversions.get(ident&0xFF00);
  30         dom=self.SRF_chipdom(chip,"register_definition.xml");
  31         for e in dom.getElementsByTagName("registerdefinition"):
  32             for f in e.childNodes:
  33                 if f.localName=="DeviceName":
  34                     print "// %s RadioState" % (f.childNodes[0].nodeValue);
  35                 elif f.localName=="Register":
  36                     name="unknownreg";
  37                     address="0xdead";
  38                     description="";
  39                     for g in f.childNodes:
  40                         if g.localName=="Name":
  41                             name=g.childNodes[0].nodeValue;
  42                         elif g.localName=="Address":
  43                             address=g.childNodes[0].nodeValue;
  44                         elif g.localName=="Description":
  45                             if g.childNodes:
  46                                 description=g.childNodes[0].nodeValue;
  47                     #print "SFRX(%10s, %s); /* %50s */" % (name,address, description);
  48                     print "%-10s=0x%02x; /* %-50s */" % (
  49                         name,self.CCpeekdatabyte(eval(address)), description);
  50     def CChaltcpu(self):
  51         """Halt the CPU."""
  52         self.writecmd(self.APP,0x86,0,self.data);
  53     def CCreleasecpu(self):
  54         """Resume the CPU."""
  55         self.writecmd(self.APP,0x87,0,self.data);
  56     def test(self):
  57         self.CCreleasecpu();
  58         self.CChaltcpu();
  59         #print "Status: %s" % self.CCstatusstr();
  60
  61         #Grab ident three times, should be equal.
  62         ident1=self.CCident();
  63         ident2=self.CCident();
  64         ident3=self.CCident();
  65         if(ident1!=ident2 or ident2!=ident3):
  66             print "Error, repeated ident attempts unequal."
  67             print "%04x, %04x, %04x" % (ident1, ident2, ident3);
  68
  69         #Single step, printing PC.
  70         print "Tracing execution at startup."
  71         for i in range(1,15):
  72             pc=self.CCgetPC();
  73             byte=self.CCpeekcodebyte(i);
  74             #print "PC=%04x, %02x" % (pc, byte);
  75             self.CCstep_instr();
  76
  77         print "Verifying that debugging a NOP doesn't affect the PC."
  78         for i in range(1,15):
  79             pc=self.CCgetPC();
  80             self.CCdebuginstr([0x00]);
  81             if(pc!=self.CCgetPC()):
  82                 print "ERROR: PC changed during CCdebuginstr([NOP])!";
  83
  84         print "Checking pokes to XRAM."
  85         for i in range(0xf000,0xf020):
  86             self.CCpokedatabyte(i,0xde);
  87             if(self.CCpeekdatabyte(i)!=0xde):
  88                 print "Error in XDATA at 0x%04x" % i;
  89
  90         #print "Status: %s." % self.CCstatusstr();
  91         #Exit debugger
  92         self.stop();
  93         print "Done.";
  94
  95     def setup(self):
  96         """Move the FET into the CC2430/CC2530 application."""
  97         #print "Initializing Chipcon.";
  98         self.writecmd(self.APP,0x10,0,self.data);
  99     def CCrd_config(self):
 100         """Read the config register of a Chipcon."""
 101         self.writecmd(self.APP,0x82,0,self.data);
 102         return ord(self.data[0]);
 103     def CCwr_config(self,config):
 104         """Write the config register of a Chipcon."""
 105         self.writecmd(self.APP,0x81,1,[config&0xFF]);
 106     def CClockchip(self):
 107         """Set the flash lock bit in info mem."""
 108         self.writecmd(self.APP, 0x9A, 0, None);
 109     def lock(self):
 110         """Set the flash lock bit in info mem."""
 111         self.CClockchip();
 112
 113
 114     CCversions={0x0100:"cc1110",
 115                 0x8500:"cc2430",
 116                 0x8900:"cc2431",
 117                 0x8100:"cc2510",
 118                 0x9100:"cc2511",
 119                 0xA500:"cc2530", #page 52 of SWRU191
 120                 0xB500:"cc2531",
 121                 0xFF00:"CCmissing"};
 122     CCpagesizes={0x01: 1024, #"CC1110",
 123                  0x85: 2048, #"CC2430",
 124                  0x89: 2048, #"CC2431",
 125                  0x81: 1024, #"CC2510",
 126                  0x91: 1024, #"CC2511",
 127                  0xA5: 2048, #"CC2530", #page 52 of SWRU191
 128                  0xB5: 2048, #"CC2531",
 129                  0xFF: 0    } #"CCmissing"};
 130     def infostring(self):
 131         return self.CCidentstr();
 132     def CCidentstr(self):
 133         ident=self.CCident();
 134         chip=self.CCversions.get(ident&0xFF00);
 135         return "%s/r%02x" % (chip, ident&0xFF);
 136     def CCident(self):
 137         """Get a chipcon's ID."""
 138         self.writecmd(self.APP,0x8B,0,None);
 139         chip=ord(self.data[0]);
 140         rev=ord(self.data[1]);
 141         return (chip<<8)+rev;
 142     def CCpagesize(self):
 143         """Get a chipcon's ID."""
 144         self.writecmd(self.APP,0x8B,0,None);
 145         chip=ord(self.data[0]);
 146         size=self.CCpagesizes.get(chip);
 147         if(size<10):
 148             print "ERROR: Pagesize undefined.";
 149             print "chip=%02x" %chip;
 150             sys.exit(1);
 151             #return 2048;
 152         return size;
 153     def CCgetPC(self):
 154         """Get a chipcon's PC."""
 155         self.writecmd(self.APP,0x83,0,None);
 156         hi=ord(self.data[0]);
 157         lo=ord(self.data[1]);
 158         return (hi<<8)+lo;
 159     def CCcmd(self,phrase):
 160         self.writecmd(self.APP,0x00,len(phrase),phrase);
 161         val=ord(self.data[0]);
 162         print "Got %02x" % val;
 163         return val;
 164     def CCdebuginstr(self,instr):
 165         self.writecmd(self.APP,0x88,len(instr),instr);
 166         return ord(self.data[0]);
 167     def peek8(self,address, memory="code"):
 168         if(memory=="code" or memory=="flash" or memory=="vn"):
 169             return self.CCpeekcodebyte(address);
 170         elif(memory=="data" or memory=="xdata" or memory=="ram"):
 171             return self.CCpeekdatabyte(address);
 172         elif(memory=="idata" or memory=="iram"):
 173             return self.CCpeekirambyte(address);
 174         print "%s is an unknown memory." % memory;
 175         return 0xdead;
 176     def CCpeekcodebyte(self,adr):
 177         """Read the contents of code memory at an address."""
 178         self.data=[adr&0xff, (adr&0xff00)>>8];
 179         self.writecmd(self.APP,0x90,2,self.data);
 180         return ord(self.data[0]);
 181     def CCpeekdatabyte(self,adr):
 182         """Read the contents of data memory at an address."""
 183         self.data=[adr&0xff, (adr&0xff00)>>8];
 184         self.writecmd(self.APP,0x91, 2, self.data);
 185         return ord(self.data[0]);
 186     def CCpeekirambyte(self,adr):
 187         """Read the contents of IRAM at an address."""
 188         self.data=[adr&0xff];
 189         self.writecmd(self.APP,0x02, 1, self.data);
 190         return ord(self.data[0]);
 191     def CCpeekiramword(self,adr):
 192         """Read the little-endian contents of IRAM at an address."""
 193         return self.CCpeekirambyte(adr)+(
 194             self.CCpeekirambyte(adr+1)<<8);
 195     def CCpokeiramword(self,adr,val):
 196         self.CCpokeirambyte(adr,val&0xff);
 197         self.CCpokeirambyte(adr+1,(val>>8)&0xff);
 198     def CCpokeirambyte(self,adr,val):
 199         """Write the contents of IRAM at an address."""
 200         self.data=[adr&0xff, val&0xff];
 201         self.writecmd(self.APP,0x02, 2, self.data);
 202         return ord(self.data[0]);
 203
 204     def CCpokedatabyte(self,adr,val):
 205         """Write a byte to data memory."""
 206         self.data=[adr&0xff, (adr&0xff00)>>8, val];
 207         self.writecmd(self.APP, 0x92, 3, self.data);
 208         return ord(self.data[0]);
 209     def CCchiperase(self):
 210         """Erase all of the target's memory."""
 211         self.writecmd(self.APP,0x80,0,None);
 212     def erase(self):
 213         """Erase all of the target's memory."""
 214         self.CCchiperase();
 215
 216     def CCstatus(self):
 217         """Check the status."""
 218         self.writecmd(self.APP,0x84,0,None);
 219         return ord(self.data[0])
 220     #Same as CC2530
 221     CCstatusbits={0x80 : "erase_busy",
 222                   0x40 : "pcon_idle",
 223                   0x20 : "cpu_halted",
 224                   0x10 : "pm0",
 225                   0x08 : "halt_status",
 226                   0x04 : "locked",
 227                   0x02 : "oscstable",
 228                   0x01 : "overflow"
 229                   };
 230     CCconfigbits={0x20 : "soft_power_mode",   #new for CC2530
 231                   0x08 : "timers_off",
 232                   0x04 : "dma_pause",
 233                   0x02 : "timer_suspend",
 234                   0x01 : "sel_flash_info_page" #stricken from CC2530
 235                   };
 236
 237     def status(self):
 238         """Check the status as a string."""
 239         status=self.CCstatus();
 240         str="";
 241         i=1;
 242         while i<0x100:
 243             if(status&i):
 244                 str="%s %s" %(self.CCstatusbits[i],str);
 245             i*=2;
 246         return str;
 247     def start(self):
 248         """Start debugging."""
 249         self.setup();
 250         self.writecmd(self.APP,0x20,0,self.data);
 251         ident=self.CCidentstr();
 252         #print "Target identifies as %s." % ident;
 253         #print "Status: %s." % self.status();
 254         self.CCreleasecpu();
 255         self.CChaltcpu();
 256         #print "Status: %s." % self.status();
 257
 258     def stop(self):
 259         """Stop debugging."""
 260         self.writecmd(self.APP,0x21,0,self.data);
 261     def CCstep_instr(self):
 262         """Step one instruction."""
 263         self.writecmd(self.APP,0x89,0,self.data);
 264     def CCeraseflashbuffer(self):
 265         """Erase the 2kB flash buffer"""
 266         self.writecmd(self.APP,0x99);
 267     def CCflashpage(self,adr):
 268         """Flash 2kB a page of flash from 0xF000 in XDATA"""
 269         data=[adr&0xFF,
 270               (adr>>8)&0xFF,
 271               (adr>>16)&0xFF,
 272               (adr>>24)&0xFF];
 273         print "Flashing buffer to 0x%06x" % adr;
 274         self.writecmd(self.APP,0x95,4,data);
 275
 276     def flash(self,file):
 277         """Flash an intel hex file to code memory."""
 278         print "Flashing %s" % file;
 279
 280         h = IntelHex(file);
 281         page = 0x0000;
 282         pagelen = self.CCpagesize(); #Varies by chip.
 283
 284         #print "page=%04x, pagelen=%04x" % (page,pagelen);
 285
 286         bcount = 0;
 287
 288         #Wipe the RAM buffer for the next flash page.
 289         self.CCeraseflashbuffer();
 290         for i in h._buf.keys():
 291             while(i>=page+pagelen):
 292                 if bcount>0:
 293                     self.CCflashpage(page);
 294                     #client.CCeraseflashbuffer();
 295                     bcount=0;
 296                     print "Flashed page at %06x" % page
 297                 page+=pagelen;
 298
 299             #Place byte into buffer.
 300             self.CCpokedatabyte(0xF000+i-page,
 301                                 h[i]);
 302             bcount+=1;
 303             if(i%0x100==0):
 304                 print "Buffering %04x toward %06x" % (i,page);
 305         #last page
 306         self.CCflashpage(page);
 307         print "Flashed final page at %06x" % page;
 308