add BCM43340B0 ROM

[zjlywjh001]

Can you add support to bcm43340 chip?

[matthiasseemoo]

How did you extract this ROM file? Does it contain flashpatches? Am 14.01.2018 09:29 schrieb "Jarvis" <[email protected]>:

…

Can you add support to bcm43340 chip? ------------------------------ You can view, comment on, or merge this pull request online at: #2 Commit Summary - add BCM43340B0 ROM File Changes - *A* bcm43340b0/rom.bin <https://github.com/seemoo-lab/bcm_misc/pull/2/files#diff-0> (0) Patch Links: - https://github.com/seemoo-lab/bcm_misc/pull/2.patch - https://github.com/seemoo-lab/bcm_misc/pull/2.diff — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub <#2>, or mute the thread <https://github.com/notifications/unsubscribe-auth/ALP_7sdPWoxcAoty6i5B6rPeF2st0B4Dks5tKbrXgaJpZM4RdhJh> .

[zjlywjh001]

I extract it by using WICED SDK which can access the backplane directly. The rom can be read at address 0x1e000000 on backplane, but it seemed the firmware in ram can access the rom at 0x800000, and the address 0x800000 on backplane can't be read. I'm not sure it contains flashpatches or not.
Here's my code:

for (i=0;i<10240;i++)
 {
        wwd_bus_transfer_backplane_bytes(BUS_READ,ARMCM3_ROM_BASE+i*64,64,rom_data);
        wiced_uart_transmit_bytes(WICED_UART_2,rom_data,64);
}

[matthiasseemoo]

Did you load a wifi firmware before? Then you will have flashpatches, which we dont want in the rom dumps as this makes them ram firmware dependent. Am 15.01.2018 01:17 schrieb "Jarvis" <[email protected]>:

…

I extract it by using WICED SDK which can access the backplane directly. The rom can be read at address 0x1e000000 on backplane, but it seemed the firmware in ram can access the rom at 0x800000, and the address 0x800000 on backplane can't be read. I'm not sure it contains flashpatches or not. Here's my code: for (i=0;i<10240;i++) { wwd_bus_transfer_backplane_bytes(BUS_READ,ARMCM3_ROM_BASE+i*64,64,rom_data); wiced_uart_transmit_bytes(WICED_UART_2,rom_data,64); } — You are receiving this because you commented. Reply to this email directly, view it on GitHub <#2 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/ALP_7vqxsEQEZV8HLi6dJHRCw2cVupWFks5tKpj8gaJpZM4RdhJh> .

[zjlywjh001]

I checked my rom file, the flashpatches seemed did not affected the real data in rom. I dump the data from the real rom ,not from the addresses mapped to the system address space. The function which will be patched is started with two "NOPs" exactly.