X-Git-Url: http://git.rot13.org/?p=goodfet;a=blobdiff_plain;f=client%2Fgoodfet.avr;h=5eee753882fa5cbc4c0b1a695acf0e7ce512dc6d;hp=b9eefcb93e015728d2d972f6e921b25e0750ae55;hb=4e119f07426373a75db57b798e65a485bfc39322;hpb=43d125b5bca16f0941450bee6ba7bd94ab41dc72 diff --git a/client/goodfet.avr b/client/goodfet.avr index b9eefcb..5eee753 100755 --- a/client/goodfet.avr +++ b/client/goodfet.avr @@ -10,8 +10,8 @@ if(len(sys.argv)==1): print "Usage: %s verb [objects]\n" % sys.argv[0]; print "%s test" % sys.argv[0]; print "%s info" % sys.argv[0]; - print "%s lockbits" % sys.argv[0]; - #print "%s dump $foo.hex [0x$start 0x$stop]" % sys.argv[0]; + print "%s lockbits [value]" % sys.argv[0]; + print "%s dumpflash $foo.hex [0x$start 0x$stop]" % sys.argv[0]; print "%s erase" % sys.argv[0]; #print "%s flash $foo.hex [0x$start 0x$stop]" % sys.argv[0]; #print "%s verify $foo.hex [0x$start 0x$stop]" % sys.argv[0]; @@ -25,15 +25,61 @@ client.serInit() #Connect to target client.start(); -if(sys.argv[1]=="info"): +if(sys.argv[1]=="glitch"): + print "Identifies as %s" % client.identstr(); + client.glitchVoltages(0x880, 0xfff); + for i in range(1,2000): + client.start(); + print "Identifies as %s, fused 0x%02x; eeprom(0)=%02x" % ( + client.identstr(), + client.lockbits(), + client.eeprompeek(0)); +if(sys.argv[1]=="glitchgraph"): print "Identifies as %s" % client.identstr(); + for voltage in range(0x860,0x890,5): + str=""; + count=0; + #five minutes for 1,80 + #thirty minutes for 1,500 + + for i in range(1,40): + client.glitchVoltages(voltage, voltage); + client.start(); + if(client.lockbits()==0xFF): + str="%s." % str; + count+=1; + print "%04x %s" % (voltage,str); + #print "%f, %i" % (voltage*(3.3/4096.0),count); +if(sys.argv[1]=="info"): + print "Identifies as %s, lock=%02x" % (client.identstr(),client.lockbits()); if(sys.argv[1]=="erase"): print "Erasing %s" % client.identstr(); client.erase(); if(sys.argv[1]=="lockbits"): print "Lockbits are 0x%02x" % client.lockbits(); + if(len(sys.argv)>2): + print "Lockbits set 0x%02x" % client.setlockbits(int(sys.argv[2],16)); +if(sys.argv[1]=="lock"): + client.setlockbits(0xFC); -if(sys.argv[1]=="dump"): +if(sys.argv[1]=="unlock"): + print "Identifies as %s" % client.identstr(); + client.glitchVoltages(0x880, 0xfff); + for i in range(1,20): + client.start(); + print "Identifies as %s, fused 0x%02x; eeprom(0)=%02x" % ( + client.identstr(), + client.lockbits(), + client.eeprompeek(0)); + if(client.lockbits()==0xFF): + client.setlockbits(0xFF); + print "Chip unlocked!" + exit(); +#if(sys.argv[1]=="unlock"): + + + +if(sys.argv[1]=="dumpflash"): f = sys.argv[2]; start=0x0000; stop=0xFFFF; @@ -66,6 +112,7 @@ if(sys.argv[1]=="peekeeprom"): while start<=stop: print "%06x: %02x" % (start,client.eeprompeek(start)); start=start+1; + if(sys.argv[1]=="peekflash"): start=0x0000; if(len(sys.argv)>2):