3 Copyright (C) Dean Camera, 2009.
5 dean [at] fourwalledcubicle [dot] com
6 www.fourwalledcubicle.com
10 Copyright 2009 Dean Camera (dean [at] fourwalledcubicle [dot] com)
12 Permission to use, copy, modify, and distribute this software
13 and its documentation for any purpose and without fee is hereby
14 granted, provided that the above copyright notice appear in all
15 copies and that both that the copyright notice and this
16 permission notice and warranty disclaimer appear in supporting
17 documentation, and that the name of the author not be used in
18 advertising or publicity pertaining to distribution of the
19 software without specific, written prior permission.
21 The author disclaim all warranties with regard to this
22 software, including all implied warranties of merchantability
23 and fitness. In no event shall the author be liable for any
24 special, indirect or consequential damages or any damages
25 whatsoever resulting from loss of use, data or profits, whether
26 in an action of contract, negligence or other tortious action,
27 arising out of or in connection with the use or performance of
33 * Main source file for the DFU class bootloader. This file contains the complete bootloader logic.
36 /** Configuration define. Define this token to true to case the bootloader to reject all memory commands
37 * until a memory erase has been performed. When used in conjunction with the lockbits of the AVR, this
38 * can protect the AVR's firmware from being dumped from a secured AVR. When false, memory operations are
39 * allowed at any time.
41 #define SECURE_MODE false
43 #define INCLUDE_FROM_BOOTLOADER_C
44 #include "BootloaderDFU.h"
46 /** Flag to indicate if the bootloader is currently running in secure mode, disallowing memory operations
47 * other than erase. This is initially set to the value set by SECURE_MODE, and cleared by the bootloader
48 * once a memory erase has completed.
50 bool IsSecure
= SECURE_MODE
;
52 /** Flag to indicate if the bootloader should be running, or should exit and allow the application code to run
53 * via a soft reset. When cleared, the bootloader will abort, the USB interface will shut down and the application
54 * jumped to via an indirect jump to location 0x0000 (or other location specified by the host).
56 bool RunBootloader
= true;
58 /** Flag to indicate if the bootloader is waiting to exit. When the host requests the bootloader to exit and
59 * jump to the application address it specifies, it sends two sequential commands which must be properly
60 * acknowledged. Upon reception of the first the RunBootloader flag is cleared and the WaitForExit flag is set,
61 * causing the bootloader to wait for the final exit command before shutting down.
63 bool WaitForExit
= false;
65 /** Current DFU state machine state, one of the values in the DFU_State_t enum. */
66 uint8_t DFU_State
= dfuIDLE
;
68 /** Status code of the last executed DFU command. This is set to one of the values in the DFU_Status_t enum after
69 * each operation, and returned to the host when a Get Status DFU request is issued.
71 uint8_t DFU_Status
= OK
;
73 /** Data containing the DFU command sent from the host. */
74 DFU_Command_t SentCommand
;
76 /** Response to the last issued Read Data DFU command. Unlike other DFU commands, the read command
77 * requires a single byte response from the bootloader containing the read data when the next DFU_UPLOAD command
78 * is issued by the host.
82 /** Pointer to the start of the user application. By default this is 0x0000 (the reset vector), however the host
83 * may specify an alternate address when issuing the application soft-start command.
85 AppPtr_t AppStartPtr
= (AppPtr_t
)0x0000;
87 /** 64-bit flash page number. This is concatenated with the current 16-bit address on USB AVRs containing more than
88 * 64KB of flash memory.
90 uint8_t Flash64KBPage
= 0;
92 /** Memory start address, indicating the current address in the memory being addressed (either FLASH or EEPROM
93 * depending on the issued command from the host).
95 uint16_t StartAddr
= 0x0000;
97 /** Memory end address, indicating the end address to read to/write from in the memory being addressed (either FLASH
98 * of EEPROM depending on the issued command from the host).
100 uint16_t EndAddr
= 0x0000;
102 /** Main program entry point. This routine configures the hardware required by the bootloader, then continuously
103 * runs the bootloader processing routine until instructed to soft-exit, or hard-reset via the watchdog to start
104 * the loaded application code.
108 /* Disable watchdog if enabled by bootloader/fuses */
109 MCUSR
&= ~(1 << WDRF
);
112 /* Disable clock division */
113 clock_prescale_set(clock_div_1
);
115 /* Relocate the interrupt vector table to the bootloader section */
117 MCUCR
= (1 << IVSEL
);
119 /* Initialize the USB subsystem */
122 /* Run the USB management task while the bootloader is supposed to be running */
123 while (RunBootloader
|| WaitForExit
)
126 /* Shut down the USB subsystem */
129 /* Relocate the interrupt vector table back to the application section */
133 /* Reset any used hardware ports back to their defaults */
142 /* Start the user application */
146 /** Event handler for the USB_Disconnect event. This indicates that the bootloader should exit and the user
147 * application started.
149 EVENT_HANDLER(USB_Disconnect
)
151 /* Upon disconnection, run user application */
152 RunBootloader
= false;
155 /** Event handler for the USB_UnhandledControlPacket event. This is used to catch standard and class specific
156 * control requests that are not handled internally by the USB library (including the DFU commands, which are
157 * all issued via the control endpoint), so that they can be handled appropriately for the application.
159 EVENT_HANDLER(USB_UnhandledControlPacket
)
161 /* Discard unused wIndex value */
162 Endpoint_Discard_Word();
164 /* Discard unused wValue value */
165 Endpoint_Discard_Word();
167 /* Get the size of the command and data from the wLength value */
168 SentCommand
.DataSize
= Endpoint_Read_Word_LE();
173 Endpoint_ClearSetupReceived();
175 /* Check if bootloader is waiting to terminate */
178 /* Bootloader is terminating - process last received command */
179 ProcessBootloaderCommand();
181 /* Indicate that the last command has now been processed - free to exit bootloader */
185 /* If the request has a data stage, load it into the command struct */
186 if (SentCommand
.DataSize
)
188 while (!(Endpoint_IsSetupOUTReceived()));
190 /* First byte of the data stage is the DNLOAD request's command */
191 SentCommand
.Command
= Endpoint_Read_Byte();
193 /* One byte of the data stage is the command, so subtract it from the total data bytes */
194 SentCommand
.DataSize
--;
196 /* Load in the rest of the data stage as command parameters */
197 for (uint8_t DataByte
= 0; (DataByte
< sizeof(SentCommand
.Data
)) &&
198 Endpoint_BytesInEndpoint(); DataByte
++)
200 SentCommand
.Data
[DataByte
] = Endpoint_Read_Byte();
201 SentCommand
.DataSize
--;
204 /* Process the command */
205 ProcessBootloaderCommand();
208 /* Check if currently downloading firmware */
209 if (DFU_State
== dfuDNLOAD_IDLE
)
211 if (!(SentCommand
.DataSize
))
217 /* Throw away the filler bytes before the start of the firmware */
218 DiscardFillerBytes(DFU_FILLER_BYTES_SIZE
);
220 /* Throw away the page alignment filler bytes before the start of the firmware */
221 DiscardFillerBytes(StartAddr
% SPM_PAGESIZE
);
223 /* Calculate the number of bytes remaining to be written */
224 uint16_t BytesRemaining
= ((EndAddr
- StartAddr
) + 1);
226 if (IS_ONEBYTE_COMMAND(SentCommand
.Data
, 0x00)) // Write flash
228 /* Calculate the number of words to be written from the number of bytes to be written */
229 uint16_t WordsRemaining
= (BytesRemaining
>> 1);
235 } CurrFlashAddress
= {Words
: {StartAddr
, Flash64KBPage
}};
237 uint32_t CurrFlashPageStartAddress
= CurrFlashAddress
.Long
;
238 uint8_t WordsInFlashPage
= 0;
240 while (WordsRemaining
--)
242 /* Check if endpoint is empty - if so clear it and wait until ready for next packet */
243 if (!(Endpoint_BytesInEndpoint()))
245 Endpoint_ClearSetupOUT();
246 while (!(Endpoint_IsSetupOUTReceived()));
249 /* Write the next word into the current flash page */
250 boot_page_fill(CurrFlashAddress
.Long
, Endpoint_Read_Word_LE());
252 /* Adjust counters */
253 WordsInFlashPage
+= 1;
254 CurrFlashAddress
.Long
+= 2;
256 /* See if an entire page has been written to the flash page buffer */
257 if ((WordsInFlashPage
== (SPM_PAGESIZE
>> 1)) || !(WordsRemaining
))
259 /* Commit the flash page to memory */
260 boot_page_write(CurrFlashPageStartAddress
);
261 boot_spm_busy_wait();
263 /* Check if programming incomplete */
266 CurrFlashPageStartAddress
= CurrFlashAddress
.Long
;
267 WordsInFlashPage
= 0;
269 /* Erase next page's temp buffer */
270 boot_page_erase(CurrFlashAddress
.Long
);
271 boot_spm_busy_wait();
276 /* Once programming complete, start address equals the end address */
279 /* Re-enable the RWW section of flash */
284 while (BytesRemaining
--)
286 /* Check if endpoint is empty - if so clear it and wait until ready for next packet */
287 if (!(Endpoint_BytesInEndpoint()))
289 Endpoint_ClearSetupOUT();
290 while (!(Endpoint_IsSetupOUTReceived()));
293 /* Read the byte from the USB interface and write to to the EEPROM */
294 eeprom_write_byte((uint8_t*)StartAddr
, Endpoint_Read_Byte());
296 /* Adjust counters */
301 /* Throw away the currently unused DFU file suffix */
302 DiscardFillerBytes(DFU_FILE_SUFFIX_SIZE
);
306 Endpoint_ClearSetupOUT();
308 /* Acknowledge status stage */
309 while (!(Endpoint_IsSetupINReady()));
310 Endpoint_ClearSetupIN();
314 Endpoint_ClearSetupReceived();
316 while (!(Endpoint_IsSetupINReady()));
318 if (DFU_State
!= dfuUPLOAD_IDLE
)
320 if ((DFU_State
== dfuERROR
) && IS_ONEBYTE_COMMAND(SentCommand
.Data
, 0x01)) // Blank Check
322 /* Blank checking is performed in the DFU_DNLOAD request - if we get here we've told the host
323 that the memory isn't blank, and the host is requesting the first non-blank address */
324 Endpoint_Write_Word_LE(StartAddr
);
328 /* Idle state upload - send response to last issued command */
329 Endpoint_Write_Byte(ResponseByte
);
334 /* Determine the number of bytes remaining in the current block */
335 uint16_t BytesRemaining
= ((EndAddr
- StartAddr
) + 1);
337 if (IS_ONEBYTE_COMMAND(SentCommand
.Data
, 0x00)) // Read FLASH
339 /* Calculate the number of words to be written from the number of bytes to be written */
340 uint16_t WordsRemaining
= (BytesRemaining
>> 1);
346 } CurrFlashAddress
= {Words
: {StartAddr
, Flash64KBPage
}};
348 while (WordsRemaining
--)
350 /* Check if endpoint is full - if so clear it and wait until ready for next packet */
351 if (Endpoint_BytesInEndpoint() == FIXED_CONTROL_ENDPOINT_SIZE
)
353 Endpoint_ClearSetupIN();
354 while (!(Endpoint_IsSetupINReady()));
357 /* Read the flash word and send it via USB to the host */
359 Endpoint_Write_Word_LE(pgm_read_word_far(CurrFlashAddress
.Long
));
361 Endpoint_Write_Word_LE(pgm_read_word(CurrFlashAddress
.Long
));
364 /* Adjust counters */
365 CurrFlashAddress
.Long
+= 2;
368 /* Once reading is complete, start address equals the end address */
371 else if (IS_ONEBYTE_COMMAND(SentCommand
.Data
, 0x02)) // Read EEPROM
373 while (BytesRemaining
--)
375 /* Check if endpoint is full - if so clear it and wait until ready for next packet */
376 if (Endpoint_BytesInEndpoint() == FIXED_CONTROL_ENDPOINT_SIZE
)
378 Endpoint_ClearSetupIN();
379 while (!(Endpoint_IsSetupINReady()));
382 /* Read the EEPROM byte and send it via USB to the host */
383 Endpoint_Write_Byte(eeprom_read_byte((uint8_t*)StartAddr
));
385 /* Adjust counters */
390 /* Return to idle state */
394 Endpoint_ClearSetupIN();
396 /* Acknowledge status stage */
397 while (!(Endpoint_IsSetupOUTReceived()));
398 Endpoint_ClearSetupOUT();
402 Endpoint_ClearSetupReceived();
404 /* Write 8-bit status value */
405 Endpoint_Write_Byte(DFU_Status
);
407 /* Write 24-bit poll timeout value */
408 Endpoint_Write_Byte(0);
409 Endpoint_Write_Word_LE(0);
411 /* Write 8-bit state value */
412 Endpoint_Write_Byte(DFU_State
);
414 /* Write 8-bit state string ID number */
415 Endpoint_Write_Byte(0);
417 Endpoint_ClearSetupIN();
419 /* Acknowledge status stage */
420 while (!(Endpoint_IsSetupOUTReceived()));
421 Endpoint_ClearSetupOUT();
425 Endpoint_ClearSetupReceived();
427 /* Reset the status value variable to the default OK status */
430 /* Acknowledge status stage */
431 while (!(Endpoint_IsSetupINReady()));
432 Endpoint_ClearSetupIN();
436 Endpoint_ClearSetupReceived();
438 /* Write the current device state to the endpoint */
439 Endpoint_Write_Byte(DFU_State
);
441 Endpoint_ClearSetupIN();
443 /* Acknowledge status stage */
444 while (!(Endpoint_IsSetupOUTReceived()));
445 Endpoint_ClearSetupOUT();
449 Endpoint_ClearSetupReceived();
451 /* Reset the current state variable to the default idle state */
454 /* Acknowledge status stage */
455 while (!(Endpoint_IsSetupINReady()));
456 Endpoint_ClearSetupIN();
462 /** Routine to discard the specified number of bytes from the control endpoint stream. This is used to
463 * discard unused bytes in the stream from the host, including the memory program block suffix.
465 * \param NumberOfBytes Number of bytes to discard from the host from the control endpoint
467 static void DiscardFillerBytes(uint8_t NumberOfBytes
)
469 while (NumberOfBytes
--)
471 if (!(Endpoint_BytesInEndpoint()))
473 Endpoint_ClearSetupOUT();
475 /* Wait until next data packet received */
476 while (!(Endpoint_IsSetupOUTReceived()));
479 Endpoint_Discard_Byte();
483 /** Routine to process an issued command from the host, via a DFU_DNLOAD request wrapper. This routine ensures
484 * that the command is allowed based on the current secure mode flag value, and passes the command off to the
485 * appropriate handler function.
487 static void ProcessBootloaderCommand(void)
489 /* Check if device is in secure mode */
492 /* Don't process command unless it is a READ or chip erase command */
493 if (!(((SentCommand
.Command
== COMMAND_WRITE
) &&
494 IS_TWOBYTE_COMMAND(SentCommand
.Data
, 0x00, 0xFF)) ||
495 (SentCommand
.Command
== COMMAND_READ
)))
497 /* Set the state and status variables to indicate the error */
498 DFU_State
= dfuERROR
;
499 DFU_Status
= errWRITE
;
502 Endpoint_StallTransaction();
504 /* Don't process the command */
509 /* Dispatch the required command processing routine based on the command type */
510 switch (SentCommand
.Command
)
512 case COMMAND_PROG_START
:
513 ProcessMemProgCommand();
515 case COMMAND_DISP_DATA
:
516 ProcessMemReadCommand();
519 ProcessWriteCommand();
522 ProcessReadCommand();
524 case COMMAND_CHANGE_BASE_ADDR
:
525 if (IS_TWOBYTE_COMMAND(SentCommand
.Data
, 0x03, 0x00)) // Set 64KB flash page command
526 Flash64KBPage
= SentCommand
.Data
[2];
532 /** Routine to concatenate the given pair of 16-bit memory start and end addresses from the host, and store them
533 * in the StartAddr and EndAddr global variables.
535 static void LoadStartEndAddresses(void)
541 } Address
[2] = {{Bytes
: {SentCommand
.Data
[2], SentCommand
.Data
[1]}},
542 {Bytes
: {SentCommand
.Data
[4], SentCommand
.Data
[3]}}};
544 /* Load in the start and ending read addresses from the sent data packet */
545 StartAddr
= Address
[0].Word
;
546 EndAddr
= Address
[1].Word
;
549 /** Handler for a Memory Program command issued by the host. This routine handles the preperations needed
550 * to write subsequent data from the host into the specified memory.
552 static void ProcessMemProgCommand(void)
554 if (IS_ONEBYTE_COMMAND(SentCommand
.Data
, 0x00) || // Write FLASH command
555 IS_ONEBYTE_COMMAND(SentCommand
.Data
, 0x01)) // Write EEPROM command
557 /* Load in the start and ending read addresses */
558 LoadStartEndAddresses();
560 /* If FLASH is being written to, we need to pre-erase the first page to write to */
561 if (IS_ONEBYTE_COMMAND(SentCommand
.Data
, 0x00))
567 } CurrFlashAddress
= {Words
: {StartAddr
, Flash64KBPage
}};
569 /* Erase the current page's temp buffer */
570 boot_page_erase(CurrFlashAddress
.Long
);
571 boot_spm_busy_wait();
574 /* Set the state so that the next DNLOAD requests reads in the firmware */
575 DFU_State
= dfuDNLOAD_IDLE
;
579 /** Handler for a Memory Read command issued by the host. This routine handles the preperations needed
580 * to read subsequent data from the specified memory out to the host, as well as implementing the memory
581 * blank check command.
583 static void ProcessMemReadCommand(void)
585 if (IS_ONEBYTE_COMMAND(SentCommand
.Data
, 0x00) || // Read FLASH command
586 IS_ONEBYTE_COMMAND(SentCommand
.Data
, 0x02)) // Read EEPROM command
588 /* Load in the start and ending read addresses */
589 LoadStartEndAddresses();
591 /* Set the state so that the next UPLOAD requests read out the firmware */
592 DFU_State
= dfuUPLOAD_IDLE
;
594 else if (IS_ONEBYTE_COMMAND(SentCommand
.Data
, 0x01)) // Blank check FLASH command
596 uint32_t CurrFlashAddress
= 0;
598 while (CurrFlashAddress
< BOOT_START_ADDR
)
600 /* Check if the current byte is not blank */
602 if (pgm_read_byte_far(CurrFlashAddress
) != 0xFF)
604 if (pgm_read_byte(CurrFlashAddress
) != 0xFF)
607 /* Save the location of the first non-blank byte for response back to the host */
608 Flash64KBPage
= (CurrFlashAddress
>> 16);
609 StartAddr
= CurrFlashAddress
;
611 /* Set state and status variables to the appropriate error values */
612 DFU_State
= dfuERROR
;
613 DFU_Status
= errCHECK_ERASED
;
623 /** Handler for a Data Write command issued by the host. This routine handles non-programming commands such as
624 * bootloader exit (both via software jumps and hardware watchdog resets) and flash memory erasure.
626 static void ProcessWriteCommand(void)
628 if (IS_ONEBYTE_COMMAND(SentCommand
.Data
, 0x03)) // Start application
630 /* Indicate that the bootloader is terminating */
633 /* Check if empty request data array - an empty request after a filled request retains the
634 previous valid request data, but initializes the reset */
635 if (!(SentCommand
.DataSize
))
637 if (SentCommand
.Data
[1] == 0x00) // Start via watchdog
639 /* Start the watchdog to reset the AVR once the communications are finalized */
640 wdt_enable(WDTO_250MS
);
642 else // Start via jump
644 /* Load in the jump address into the application start address pointer */
649 } Address
= {Bytes
: {SentCommand
.Data
[4], SentCommand
.Data
[3]}};
651 AppStartPtr
= Address
.FuncPtr
;
653 /* Set the flag to terminate the bootloader at next opportunity */
654 RunBootloader
= false;
658 else if (IS_TWOBYTE_COMMAND(SentCommand
.Data
, 0x00, 0xFF)) // Erase flash
660 uint32_t CurrFlashAddress
= 0;
662 /* Clear the application section of flash */
663 while (CurrFlashAddress
< BOOT_START_ADDR
)
665 boot_page_erase(CurrFlashAddress
);
666 boot_spm_busy_wait();
667 boot_page_write(CurrFlashAddress
);
668 boot_spm_busy_wait();
670 CurrFlashAddress
+= SPM_PAGESIZE
;
673 /* Re-enable the RWW section of flash as writing to the flash locks it out */
676 /* Memory has been erased, reset the security bit so that programming/reading is allowed */
681 /** Handler for a Data Read command issued by the host. This routine handles bootloader information retrieval
682 * commands such as device signature and bootloader version retrieval.
684 static void ProcessReadCommand(void)
686 const uint8_t BootloaderInfo
[3] = {BOOTLOADER_VERSION
, BOOTLOADER_ID_BYTE1
, BOOTLOADER_ID_BYTE2
};
687 const uint8_t SignatureInfo
[3] = {SIGNATURE_0
, SIGNATURE_1
, SIGNATURE_2
};
689 uint8_t DataIndexToRead
= SentCommand
.Data
[1];
691 if (IS_ONEBYTE_COMMAND(SentCommand
.Data
, 0x00)) // Read bootloader info
693 ResponseByte
= BootloaderInfo
[DataIndexToRead
];
695 else if (IS_ONEBYTE_COMMAND(SentCommand
.Data
, 0x01)) // Read signature byte
697 ResponseByte
= SignatureInfo
[DataIndexToRead
- 0x30];