view doc/Host-tools-overview @ 989:0b7abc72e49e

doc/Host-tools-overview: new tfc139 and fc-olddump descriptions
author Mychaela Falconia <falcon@ivan.Harhan.ORG>
date Sat, 12 Dec 2015 19:39:02 +0000
parents 6475a935e593
children
line wrap: on
line source

FreeCalypso host tools suite features the following tools that are potentially
useful to end users:

fc-loadtool	This is the tool used to read and write the non-volatile flash
		memory of supported GSM devices.  It can be used to reflash
		these devices with new firmware (whether pre-existing or new
		firmwares developed within our project), and to save and restore
		flash backups.  This tool operates on the target device (phone
		or modem) while its regular firmware is shut down.

fc-fsio		This tool connects to GSM devices running one of the supported
		firmware versions while the fw is running (unlike fc-loadtool
		which operates on a device while its regular fw is shut down)
		and allows you to manipulate (read and write) the device's
		flash file system.  It is thus a higher-level tool than
		fc-loadtool.  It is intended primarily for working with our own
		firmwares, but it also works with Pirelli's original fw.

fc-shell	FreeCalypso firmwares have a feature of our own invention (not
		present in any pre-existing ones) to accept AT commands over
		the RVTMUX interface.  It is useful when no second UART is
		available for a dedicated standard AT command interface.
		fc-shell is the tool that allows you to send AT commands to the
		firmware in this manner; it also allows a few other kinds of
		asynchronous commands to be sent.

tfc139		This tool breaks into Mot C1xx phones via shellcode injection,
		a method that works despite any bootloader locks, allowing you
		to reflash locked phones with new firmware with fc-loadtool.
		The name of the utility is historical: previously it was
		specific to TFC139 phones (C139s sold with TracFone branding),
		but the current version is expected to work with all Mot C1xx
		firmware versions.

imei-luhn	A simple utility for computing or verifying the Luhn check
		digit of an IMEI number.

The following host tools are primarily for developers, but may be useful to
end users as well:

rvtdump		This tool produces a human-readable dump of all output emitted
		by a TI-based GSM fw on the RVTMUX binary packet interface.  It
		can also log this dump to a file.

rvinterf	This tool is a superset of rvtdump: it not only dumps and/or
		logs all output from the GSM fw, but also provides a mechanism
		for sending command packets to it.  Rvinterf is the engine
		behind fc-fsio, fc-shell and fc-tmsh.

tiffs,		These tools perform "in vitro" analysis of flash file system
mokoffs,	(FFS) images read out of GSM devices with TI-based firmwares.
pirffs		You can list and extract the FFS content captured as a raw
		flash image, and even perform a few "forensic" operations along
		the lines of reading deleted files and seeing the history of
		FFS modifications.  tiffs is the main program, whereas mokoffs
		and pirffs are convenience wrappers for the common FFS
		configurations from Openmoko and Pirelli.

fc-getpirimei	This utility retrieves the factory-programmed IMEI of a Pirelli
		DP-L10 phone by quering its running firmware over the RVTMUX
		interface.

fc-serterm	This tool is a trivial serial terminal program.  Its special
		feature is that any output coming the serial port that isn't
		printable ASCII is displayed as by cat -v.  It is useful for
		talking to serially-interfaced devices that mix ASCII with
		binary in their serial talk.

The following tools are really just for developers:

ctracedec	GSM firmwares built in TI's Windows environment (official ones
		as well as our own hacks based on the TCS211 semi-src) have a
		"compressed trace" misfeature whereby many of the ASCII strings
		in debug trace messages get replaced with numeric indices at
		build time, and these numeric indices are all that gets emitted
		on the RVTMUX serial channel.  This numeric trace output can be
		turned back into ASCII strings if you have the str2ind.tab file
		corresponding to the fw version that emitted the output in
		question; this ctracedec utility performs that decoding.

fc-iram,	Reprogramming the non-volatile flash memory is not the only way
fc-xram,	to run your own code on a Calypso GSM device.  If your code is
fc-compalram	small enough to fit entirely into the available RAM on the
		device, and you would like to just run it without flashing it
		permanently, these tools do the job of loading code images into
		different kinds of RAM through different download protocols.

fc-tmsh		TI had a tool called TMSH that stood for "test mode shell".  We
		don't know exactly how it worked, hence we make no claim of our
		own test mode shell being anything like TI's original, but we
		do have a test mode shell of our own.  It sends command packets
		to the ETM (Enhanced Test Mode) component in the GSM firmware
		and displays its responses in a purely asynchronous manner,
		i.e., our tool has no knowledge of any correspondence between
		the commands it sends and the responses they elicit.  (In
		contrast, fc-fsio described above also talks to ETM, but it
		does so synchronously.)

fc-olddump	This tool captures a memory dump from a GSM device whose
		firmware implements the old non-enhanced Test Mode memory read
		command.  It works with Mot C1xx original firmwares.

fc-rgbconv	A simple aid for phone UI development that converts RGB color
		values between human-intuitive 8:8:8 format and the 5:6:5 format
		used by the color LCDs in the phones targeted by FreeCalypso.

The following tools are really just special-purpose hacks:

fc-dspapidump	This utility uses ETM in synchronous mode to read and dump the
		contents of the DSP API RAM in a target Calypso GSM device
		while the firmware is running.

fc-lcdemu	We have TI's TCS211 firmware semi-src that includes TI's
		demo/prototype phone UI targeting the 176x220 pixel LCD on TI's
		D-Sample development kit, but no suitable hardware on which we
		could run this fw with this UI and see it in action.  We built
		a hacked-up version of the fw that emits all raster blits
		intended for the big LCD on the RVTMUX serial interface, and
		this fc-lcdemu utility is a plug-in for rvinterf that actually
		displays these LCD blits in an X11 window.

fc-pirhackinit	This fc-pirhackinit utility is highly specific to the
		TCS211-on-Pirelli exercise.  DO NOT run it against Pirelli's
		stock firmware, nor is it needed when using our full-source
		FreeCalypso firmware.