291 lines
8.4 KiB
C
291 lines
8.4 KiB
C
#include <stdio.h>
|
|
#include <stdlib.h>
|
|
#include <stdarg.h>
|
|
#include <unistd.h>
|
|
#include <fcntl.h>
|
|
#include <errno.h>
|
|
#include <string.h>
|
|
#include <libusb-1.0/libusb.h>
|
|
|
|
#include "config.h"
|
|
|
|
// Section 5.1: Command Block Wrapper (CBW)
|
|
struct command_block_wrapper {
|
|
uint8_t dCBWSignature[4];
|
|
uint32_t dCBWTag;
|
|
uint32_t dCBWDataTransferLength;
|
|
uint8_t bmCBWFlags;
|
|
uint8_t bCBWLUN;
|
|
uint8_t bCBWCBLength;
|
|
uint8_t CBWCB[16];
|
|
};
|
|
|
|
// Section 5.2: Command Status Wrapper (CSW)
|
|
struct command_status_wrapper {
|
|
uint8_t dCSWSignature[4];
|
|
uint32_t dCSWTag;
|
|
uint32_t dCSWDataResidue;
|
|
uint8_t bCSWStatus;
|
|
};
|
|
|
|
static const uint8_t cdb_length[256] = {
|
|
// 0 1 2 3 4 5 6 7 8 9 A B C D E F
|
|
06,06,06,06,06,06,06,06,06,06,06,06,06,06,06,06, // 0
|
|
06,06,06,06,06,06,06,06,06,06,06,06,06,06,06,06, // 1
|
|
10,10,10,10,10,10,10,10,10,10,10,10,10,10,10,10, // 2
|
|
10,10,10,10,10,10,10,10,10,10,10,10,10,10,10,10, // 3
|
|
10,10,10,10,10,10,10,10,10,10,10,10,10,10,10,10, // 4
|
|
10,10,10,10,10,10,10,10,10,10,10,10,10,10,10,10, // 5
|
|
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00, // 6
|
|
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00, // 7
|
|
16,16,16,16,16,16,16,16,16,16,16,16,16,16,16,16, // 8
|
|
16,16,16,16,16,16,16,16,16,16,16,16,16,16,16,16, // 9
|
|
12,12,12,12,12,12,12,12,12,12,12,12,12,12,12,12, // A
|
|
12,12,12,12,12,12,12,12,12,12,12,12,12,12,12,12, // B
|
|
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00, // C
|
|
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00, // D
|
|
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00, // E
|
|
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00, // F
|
|
};
|
|
|
|
|
|
#define REQUEST_SENSE_LENGTH 0x12
|
|
|
|
|
|
static struct libusb_device_handle *devh = NULL;
|
|
|
|
static void perr(char const *format, ...)
|
|
{
|
|
va_list args;
|
|
|
|
va_start (args, format);
|
|
vfprintf(stderr, format, args);
|
|
va_end(args);
|
|
}
|
|
|
|
static int send_mass_storage_command(libusb_device_handle *handle, uint8_t endpoint, uint8_t lun,
|
|
uint8_t *cdb, uint8_t direction, int data_length, uint32_t *ret_tag)
|
|
{
|
|
static uint32_t tag = 1;
|
|
uint8_t cdb_len;
|
|
int i, r, size;
|
|
struct command_block_wrapper cbw;
|
|
|
|
if (cdb == NULL) {
|
|
return -1;
|
|
}
|
|
|
|
if (endpoint & LIBUSB_ENDPOINT_IN) {
|
|
perr("send_mass_storage_command: cannot send command on IN endpoint\n");
|
|
return -1;
|
|
}
|
|
|
|
cdb_len = cdb_length[cdb[0]];
|
|
if ((cdb_len == 0) || (cdb_len > sizeof(cbw.CBWCB))) {
|
|
perr("send_mass_storage_command: don't know how to handle this command (%02X, length %d)\n",
|
|
cdb[0], cdb_len);
|
|
return -1;
|
|
}
|
|
|
|
memset(&cbw, 0, sizeof(cbw));
|
|
cbw.dCBWSignature[0] = 'U';
|
|
cbw.dCBWSignature[1] = 'S';
|
|
cbw.dCBWSignature[2] = 'B';
|
|
cbw.dCBWSignature[3] = 'C';
|
|
*ret_tag = tag;
|
|
cbw.dCBWTag = tag++;
|
|
cbw.dCBWDataTransferLength = data_length;
|
|
cbw.bmCBWFlags = direction;
|
|
cbw.bCBWLUN = lun;
|
|
// Subclass is 1 or 6 => cdb_len
|
|
cbw.bCBWCBLength = cdb_len;
|
|
memcpy(cbw.CBWCB, cdb, cdb_len);
|
|
|
|
i = 0;
|
|
do {
|
|
// The transfer length must always be exactly 31 bytes.
|
|
r = libusb_bulk_transfer(handle, endpoint, (unsigned char*)&cbw, 31, &size, 1000);
|
|
if (r == LIBUSB_ERROR_PIPE) {
|
|
libusb_clear_halt(handle, endpoint);
|
|
}
|
|
i++;
|
|
} while ((r == LIBUSB_ERROR_PIPE) && (i<RETRY_MAX));
|
|
if (r != LIBUSB_SUCCESS) {
|
|
perr(" send_mass_storage_command: %s\n", libusb_strerror((enum libusb_error)r));
|
|
return -1;
|
|
}
|
|
|
|
printf(" sent %d CDB bytes\n", cdb_len);
|
|
return 0;
|
|
}
|
|
|
|
static libusb_device_handle *open_actionpro()
|
|
{
|
|
ssize_t devc;
|
|
libusb_device **dev_list;
|
|
static libusb_device *dev = NULL;
|
|
struct libusb_device_descriptor dev_desc;
|
|
struct libusb_config_descriptor *dev_conf = NULL;
|
|
const struct libusb_interface *iface = NULL;
|
|
const struct libusb_interface_descriptor *iface_desc = NULL;
|
|
|
|
int res = 0;
|
|
|
|
devc = libusb_get_device_list(NULL, &dev_list);
|
|
if (devc < 1) {
|
|
return NULL;
|
|
}
|
|
|
|
for (int i = 0; i < devc; i++) {
|
|
dev = dev_list[i];
|
|
if (libusb_get_device_descriptor(dev, &dev_desc)) {
|
|
continue;
|
|
}
|
|
|
|
if ((dev_desc.idVendor != VENDOR_ID || dev_desc.idProduct != PRODUCT_ID)) {
|
|
continue;
|
|
}
|
|
|
|
res = libusb_open(dev, &devh);
|
|
if (res < 0) {
|
|
perror("libusb_open");
|
|
return(NULL);
|
|
}
|
|
|
|
for (int j = 0; j < dev_desc.bNumConfigurations; j++) {
|
|
if (libusb_get_config_descriptor(dev, j, &dev_conf)) {
|
|
continue;
|
|
}
|
|
|
|
for (int k = 0; k < dev_conf->bNumInterfaces; k++) {
|
|
iface = &dev_conf->interface[k];
|
|
for (int l = 0; l < iface->num_altsetting; l++) {
|
|
iface_desc = &iface->altsetting[l];
|
|
if (libusb_kernel_driver_active(devh, iface_desc->bInterfaceNumber)) {
|
|
libusb_detach_kernel_driver(devh, iface_desc->bInterfaceNumber);
|
|
}
|
|
|
|
libusb_set_configuration(devh, dev_conf->bConfigurationValue);
|
|
libusb_claim_interface(devh, iface_desc->bInterfaceNumber);
|
|
|
|
int e = 0;
|
|
while (libusb_claim_interface(devh, iface_desc->bInterfaceNumber) && (e < 10)) {
|
|
sleep(1);
|
|
e++;
|
|
}
|
|
}
|
|
}
|
|
|
|
libusb_free_config_descriptor(dev_conf);
|
|
}
|
|
|
|
return devh;
|
|
}
|
|
|
|
devh = NULL;
|
|
return NULL;
|
|
}
|
|
|
|
static int get_mass_storage_status(libusb_device_handle *handle, uint8_t endpoint, uint32_t expected_tag)
|
|
{
|
|
int i, r, size;
|
|
struct command_status_wrapper csw;
|
|
|
|
// The device is allowed to STALL this transfer. If it does, you have to
|
|
// clear the stall and try again.
|
|
i = 0;
|
|
do {
|
|
r = libusb_bulk_transfer(handle, endpoint, (unsigned char*)&csw, 13, &size, 1000);
|
|
if (r == LIBUSB_ERROR_PIPE) {
|
|
libusb_clear_halt(handle, endpoint);
|
|
}
|
|
i++;
|
|
} while ((r == LIBUSB_ERROR_PIPE) && (i<RETRY_MAX));
|
|
if (r != LIBUSB_SUCCESS) {
|
|
perr(" get_mass_storage_status: %s\n", libusb_strerror((enum libusb_error)r));
|
|
return -1;
|
|
}
|
|
if (size != 13) {
|
|
perr(" get_mass_storage_status: received %d bytes (expected 13)\n", size);
|
|
return -1;
|
|
}
|
|
if (csw.dCSWTag != expected_tag) {
|
|
perr(" get_mass_storage_status: mismatched tags (expected %08X, received %08X)\n",
|
|
expected_tag, csw.dCSWTag);
|
|
return -1;
|
|
}
|
|
// For this test, we ignore the dCSWSignature check for validity...
|
|
printf(" Mass Storage Status: %02X (%s)\n", csw.bCSWStatus, csw.bCSWStatus?"FAILED":"Success");
|
|
if (csw.dCSWTag != expected_tag)
|
|
return -1;
|
|
if (csw.bCSWStatus) {
|
|
// REQUEST SENSE is appropriate only if bCSWStatus is 1, meaning that the
|
|
// command failed somehow. Larger values (2 in particular) mean that
|
|
// the command couldn't be understood.
|
|
if (csw.bCSWStatus == 1)
|
|
return -2; // request Get Sense
|
|
else
|
|
return -1;
|
|
}
|
|
|
|
// In theory we also should check dCSWDataResidue. But lots of devices
|
|
// set it wrongly.
|
|
return 0;
|
|
}
|
|
|
|
|
|
int main(int argc, char *argv[])
|
|
{
|
|
int res = 0;
|
|
uint8_t cdb[16];
|
|
uint8_t sense[18];
|
|
int transferred = 0;
|
|
|
|
uint32_t expected_tag = 0;
|
|
|
|
res = libusb_init(NULL);
|
|
if (res < 0) {
|
|
perror("libusb_init");
|
|
fprintf(stderr, "Error: %s\n", libusb_strerror(res));
|
|
exit(EXIT_FAILURE);
|
|
}
|
|
|
|
if (!open_actionpro()) {
|
|
fprintf(stderr, "Error opening device, no ACTIONPRO X7 found!\n");
|
|
libusb_exit(NULL);
|
|
exit(EXIT_FAILURE);
|
|
}
|
|
|
|
unsigned char cmd[] = "\xfe\x00\x58\x37\x41\x50\x50\x41\x53\x00\x00\x00\x00\x00\x00\x00";
|
|
|
|
memset(sense, 0, sizeof(sense));
|
|
memset(cdb, 0, sizeof(cdb));
|
|
cdb[0] = 0x03;
|
|
cdb[4] = REQUEST_SENSE_LENGTH;
|
|
|
|
send_mass_storage_command(devh, 0x01, 0, cdb, LIBUSB_ENDPOINT_IN, REQUEST_SENSE_LENGTH, &expected_tag);
|
|
res = libusb_bulk_transfer(devh, 0x81, (unsigned char *)&sense, REQUEST_SENSE_LENGTH, &transferred, 1000);
|
|
if (res < 0) {
|
|
perror("libusb_bulk_transfer");
|
|
fprintf(stderr, "Error: %s\n", libusb_strerror(res));
|
|
|
|
libusb_release_interface(devh, 0);
|
|
libusb_reset_device(devh);
|
|
libusb_close(devh);
|
|
|
|
libusb_exit(NULL);
|
|
|
|
exit(EXIT_FAILURE);
|
|
}
|
|
|
|
get_mass_storage_status(devh, 0x1, expected_tag);
|
|
|
|
libusb_release_interface(devh, 0);
|
|
libusb_reset_device(devh);
|
|
libusb_close(devh);
|
|
|
|
libusb_exit(NULL);
|
|
|
|
exit(EXIT_SUCCESS);
|
|
}
|