Project

General

Profile

Flashing » History » Version 10

fixeria, 07/11/2018 11:10 AM

1 10 fixeria
h1. Flashing application(s) into a Motorola C123 phone
2 8 jolly
3 9 fixeria
{{>toc}}
4 8 jolly
5 10 fixeria
This tutorial explains how to flash one or multiple application(s) into C123 phone. Read carefully, otherwise you might brick your phone. Even if you follow this tutorial, you may brick your phone if you run into cable problem, weak battery or software fault.
6 1 jolly
7 10 fixeria
h2. DISCLAIMER
8
9
Please note that *flashing is optional*, i.e. it is not required for normal OsmocomBB operation! Moreover, it is strongly recommended to avoid flashing, since the *code is experimental*, and many lucky *users reported that a phone was bricked* during / after the flashing process. You were warned, don't expect to get help at #osmocom or in the "mailing list":https://lists.osmocom.org/mailman/listinfo/baseband-devel.
10
11
Also be sure to have another phone for unattended charging. The charger is supported, but if firmware crashes, *battery might get overloaded*. Never charge unattended! After flashing, the original firmware is gone, so be sure to save complete flash memory, if you want to restore original firmware in the future.
12
13
h2. Flashing details
14
15 1 jolly
There will be three parts to be flashed:
16 8 jolly
17 1 jolly
* the original Compal loader
18
* the OSMOCOM menu (loads applications from flash into ram)
19
* the application
20
21
Without the Compal loader, the phone is bricked.
22
23
The OSMOCOM menu will allow to start the application from any flash page other than page 0. It displays all applications it finds in flash (using a header, as described below). The cursor keys will select the application, the green button will start the application, the menu button (black button) will display flash location.
24 8 jolly
25 10 fixeria
h2. Memory layout
26 8 jolly
27 1 jolly
The memory is mapped as follows:
28
29 8 jolly
* 0x000000-0x00ffff: Flash page 0
30
* 0x010000-0x01ffff: Flash page 1
31
* ... more Flash pages ...
32 1 jolly
* 0x800000-0x83ffff: Ram
33 8 jolly
34
Our flash layout is:
35 1 jolly
36
* 0x000000-0x001fff: Compal loader
37
* 0x002000-0x00ffff: OSMOCOM menu
38
* 0x010000-........: OSMOCOM application and storage
39 8 jolly
40 1 jolly
Note: The Compal loader and the OSMOCOM menu will be located in the same flash page!
41 8 jolly
42
h2. preparations
43
44
h3. Unlocking flash write of Osmocom loader
45
46
<pre>
47 1 jolly
$ cd src/target/firmware/
48
$ edit Makefile
49 8 jolly
</pre>
50 1 jolly
51
Enable the following compiler flags: (They are located at the bottom of the file.)
52
53 8 jolly
<pre>
54 1 jolly
CFLAGS += -DCONFIG_FLASH_WRITE
55
CFLAGS += -DCONFIG_FLASH_WRITE_LOADER
56 8 jolly
</pre>
57 1 jolly
58
Also you may want to allow the application to transmit, so enable TX supprt:
59
60 8 jolly
<pre>
61 3 jolly
CFLAGS += -DCONFIG_TX_ENABLE
62 8 jolly
</pre>
63 3 jolly
64
65 8 jolly
h3. rebuilding the firmware
66
67
68 1 jolly
Now rebuild the firmware with write support enabled:
69
70 8 jolly
<pre>
71 1 jolly
$ make clean
72
$ make
73 8 jolly
</pre>
74 1 jolly
75
76 8 jolly
h2. actual installation
77 1 jolly
78 8 jolly
79
80
h3. Booting the phone / downloading loader to ram
81
82
83
<pre>
84 1 jolly
$ cd src
85
$ host/osmocon/osmocon -p /dev/ttyUSB0 -m c123xor target/firmware/board/compal_e88/loader.compalram.bin
86 8 jolly
</pre>
87 1 jolly
88
Briefly press the power-on button of your phone (short push, not like a regular phone boot!).
89 8 jolly
See [[osmocon]] for more informations.
90 1 jolly
91
You will get the following output:
92
93 8 jolly
<pre>
94 1 jolly
Received PROMPT1 from phone, responding with CMD
95
read_file(target/firmware/board/compal_e88/loader.compalram.bin): file_size=18436, hdr_len=4, dnload_len=18443
96
Received PROMPT2 from phone, starting download
97
handle_write(): 4096 bytes (4096/18443)
98
handle_write(): 4096 bytes (8192/18443)
99
handle_write(): 4096 bytes (12288/18443)
100
handle_write(): 4096 bytes (16384/18443)
101
handle_write(): 2059 bytes (18443/18443)
102
handle_write(): finished
103
Received DOWNLOAD ACK from phone, your code is running now!
104
Received DOWNLOAD ACK from phone, your code is running now!
105
106
107
OSMOCOM Loader (revision osmocon_v0.0.0-1322-g43c588b-modified)
108
======================================================================
109
Running on compal_e88 in environment compalram
110
Found flash of 2097152 bytes at 0x0 with 2 regions
111 8 jolly
</pre>
112 1 jolly
113
Now open another console and talk to the loader as described below:
114
115
116
117 8 jolly
h3. Flashing the loader + menu
118
119
120 1 jolly
The OSMOCOM loader is located in ram. (see above) It will be used to write to flash. Because it runs in ram, it will allow accessing the flash.
121
122
The OSMOCOM menu cannot be flashed without erasing the original Compal loader, because both are located in the same flash page. We can only erase the complete page, not parts of it. The first thing we must do is save the original loader:
123
124 8 jolly
<pre>
125 1 jolly
$ cd src
126
$ host/osmocon/osmoload memdump 0x000000 0x2000 compal_loader.bin
127 8 jolly
</pre>
128 1 jolly
129
To test if flashing works, we will first flash the Compal and OSMOCOM menu to a wrong location. If flashing fails, we still have the Compal loader working on it's original location, and the phone is not bricked.
130
131
First erase page at 0x010000 and program the just saved compal_loader.bin and the OSMOCOM menu:
132
133 8 jolly
<pre>
134 1 jolly
$ host/osmocon/osmoload funlock 0x010000 0x10000
135
$ host/osmocon/osmoload ferase 0x010000 0x10000
136
$ host/osmocon/osmoload fprogram 0 0x010000 compal_loader.bin
137
$ host/osmocon/osmoload fprogram 0 0x012000 target/firmware/board/compal_e88/menu.e88loader.bin
138 8 jolly
</pre>
139 1 jolly
140
If all these steps will not produce any error output, you can start flashing the Osmocom loader to it's right place at page 0x000000:
141
142 8 jolly
<pre>
143 1 jolly
$ host/osmocon/osmoload funlock 0x000000 0x10000
144
$ host/osmocon/osmoload ferase 0x000000 0x10000
145
$ host/osmocon/osmoload fprogram 0 0x000000 compal_loader.bin
146
$ host/osmocon/osmoload fprogram 0 0x002000 target/firmware/board/compal_e88/menu.e88loader.bin
147 8 jolly
</pre>
148 1 jolly
149
150 8 jolly
h3. Preparing an application
151
152
153 1 jolly
The OSMOCOM menu will search for applications starting at any flash page. In order to detect an application, a header is used. create the header as follows:
154
155 8 jolly
<pre>
156 1 jolly
$ echo "highram:RSSI" >temp
157 8 jolly
</pre>
158 1 jolly
159
In this case we created a header for the RSSI application and call that "RSSI". Now we append the highram image to be loaded by the OSMOCOM menu:
160
161 8 jolly
<pre>
162 1 jolly
$ cat target/firmware/board/compal_e88/rssi.highram.bin >>temp
163 8 jolly
</pre>
164 1 jolly
165
Flashing the "temp" file is only possible, if the number of byte are even. In case they are odd, add one byte:
166
167 8 jolly
<pre>
168 1 jolly
$ ls -la temp
169
-rw-r--r-- 1 root root 83761 Sep 27 10:08 temp
170 2 jolly
$ echo >>temp
171
$ ls -la temp
172
-rw-r--r-- 1 root root 83762 Sep 27 10:08 temp
173 8 jolly
</pre>
174 2 jolly
175 1 jolly
Now the application is ready to be flashed to any flash page. In case of RSSI application, it requires two pages of flash memory. 
176 2 jolly
177 1 jolly
178 2 jolly
179 8 jolly
h3. Flasing an application
180
181
182 1 jolly
In order to flash an application, you must check how large it is. You need to erase the amount of pages the firmware requires. You need to round it up to a multiple of 64k (one flash page).
183 2 jolly
184 1 jolly
In this example we will flash the RSSI firmware. It is between 64k and 128k, so we need at least two pages to erase:
185
186 8 jolly
<pre>
187 1 jolly
$ host/osmocon/osmoload funlock 0x010000 0x20000
188 2 jolly
$ host/osmocon/osmoload ferase 0x010000 0x20000
189 1 jolly
$ host/osmocon/osmoload fprogram 0 0x010000 temp
190 8 jolly
</pre>
191 2 jolly
192 1 jolly
Now we have flashed page 1 and page 2. In order to flash another application, you need to erase and flash page 3 or higher. 
193 2 jolly
194 1 jolly
195
196 8 jolly
h2. Testing
197
198
199
* Power off your phone.
200
* Disconnect the serial cable.
201
* Turn it on (push power button), the OSMOCOM menu will appear and show available applications.
202
* Use up/down keys or digits to select the application.
203
* Press the green off-hook button, the application will be loaded to ram and is started.
204
** Alternatively press the digit as shown in front of the application's name.
Add picture from clipboard (Maximum size: 48.8 MB)