bad_usb_script.c 24 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684
  1. #include <furi.h>
  2. #include <furi_hal.h>
  3. #include <gui/gui.h>
  4. #include <input/input.h>
  5. #include <lib/toolbox/args.h>
  6. #include <furi_hal_usb_hid.h>
  7. #include <storage/storage.h>
  8. #include "bad_usb_script.h"
  9. #include <dolphin/dolphin.h>
  10. #define TAG "BadUSB"
  11. #define WORKER_TAG TAG "Worker"
  12. #define FILE_BUFFER_LEN 16
  13. #define SCRIPT_STATE_ERROR (-1)
  14. #define SCRIPT_STATE_END (-2)
  15. #define SCRIPT_STATE_NEXT_LINE (-3)
  16. typedef enum {
  17. WorkerEvtToggle = (1 << 0),
  18. WorkerEvtEnd = (1 << 1),
  19. WorkerEvtConnect = (1 << 2),
  20. WorkerEvtDisconnect = (1 << 3),
  21. } WorkerEvtFlags;
  22. struct BadUsbScript {
  23. FuriHalUsbHidConfig hid_cfg;
  24. BadUsbState st;
  25. FuriString* file_path;
  26. uint32_t defdelay;
  27. FuriThread* thread;
  28. uint8_t file_buf[FILE_BUFFER_LEN + 1];
  29. uint8_t buf_start;
  30. uint8_t buf_len;
  31. bool file_end;
  32. FuriString* line;
  33. FuriString* line_prev;
  34. uint32_t repeat_cnt;
  35. };
  36. typedef struct {
  37. char* name;
  38. uint16_t keycode;
  39. } DuckyKey;
  40. static const DuckyKey ducky_keys[] = {
  41. {"CTRL-ALT", KEY_MOD_LEFT_CTRL | KEY_MOD_LEFT_ALT},
  42. {"CTRL-SHIFT", KEY_MOD_LEFT_CTRL | KEY_MOD_LEFT_SHIFT},
  43. {"ALT-SHIFT", KEY_MOD_LEFT_ALT | KEY_MOD_LEFT_SHIFT},
  44. {"ALT-GUI", KEY_MOD_LEFT_ALT | KEY_MOD_LEFT_GUI},
  45. {"GUI-SHIFT", KEY_MOD_LEFT_GUI | KEY_MOD_LEFT_SHIFT},
  46. {"CTRL", KEY_MOD_LEFT_CTRL},
  47. {"CONTROL", KEY_MOD_LEFT_CTRL},
  48. {"SHIFT", KEY_MOD_LEFT_SHIFT},
  49. {"ALT", KEY_MOD_LEFT_ALT},
  50. {"GUI", KEY_MOD_LEFT_GUI},
  51. {"WINDOWS", KEY_MOD_LEFT_GUI},
  52. {"DOWNARROW", HID_KEYBOARD_DOWN_ARROW},
  53. {"DOWN", HID_KEYBOARD_DOWN_ARROW},
  54. {"LEFTARROW", HID_KEYBOARD_LEFT_ARROW},
  55. {"LEFT", HID_KEYBOARD_LEFT_ARROW},
  56. {"RIGHTARROW", HID_KEYBOARD_RIGHT_ARROW},
  57. {"RIGHT", HID_KEYBOARD_RIGHT_ARROW},
  58. {"UPARROW", HID_KEYBOARD_UP_ARROW},
  59. {"UP", HID_KEYBOARD_UP_ARROW},
  60. {"ENTER", HID_KEYBOARD_RETURN},
  61. {"BREAK", HID_KEYBOARD_PAUSE},
  62. {"PAUSE", HID_KEYBOARD_PAUSE},
  63. {"CAPSLOCK", HID_KEYBOARD_CAPS_LOCK},
  64. {"DELETE", HID_KEYBOARD_DELETE},
  65. {"BACKSPACE", HID_KEYPAD_BACKSPACE},
  66. {"END", HID_KEYBOARD_END},
  67. {"ESC", HID_KEYBOARD_ESCAPE},
  68. {"ESCAPE", HID_KEYBOARD_ESCAPE},
  69. {"HOME", HID_KEYBOARD_HOME},
  70. {"INSERT", HID_KEYBOARD_INSERT},
  71. {"NUMLOCK", HID_KEYPAD_NUMLOCK},
  72. {"PAGEUP", HID_KEYBOARD_PAGE_UP},
  73. {"PAGEDOWN", HID_KEYBOARD_PAGE_DOWN},
  74. {"PRINTSCREEN", HID_KEYBOARD_PRINT_SCREEN},
  75. {"SCROLLLOCK", HID_KEYBOARD_SCROLL_LOCK},
  76. {"SPACE", HID_KEYBOARD_SPACEBAR},
  77. {"TAB", HID_KEYBOARD_TAB},
  78. {"MENU", HID_KEYBOARD_APPLICATION},
  79. {"APP", HID_KEYBOARD_APPLICATION},
  80. {"F1", HID_KEYBOARD_F1},
  81. {"F2", HID_KEYBOARD_F2},
  82. {"F3", HID_KEYBOARD_F3},
  83. {"F4", HID_KEYBOARD_F4},
  84. {"F5", HID_KEYBOARD_F5},
  85. {"F6", HID_KEYBOARD_F6},
  86. {"F7", HID_KEYBOARD_F7},
  87. {"F8", HID_KEYBOARD_F8},
  88. {"F9", HID_KEYBOARD_F9},
  89. {"F10", HID_KEYBOARD_F10},
  90. {"F11", HID_KEYBOARD_F11},
  91. {"F12", HID_KEYBOARD_F12},
  92. };
  93. static const char ducky_cmd_comment[] = {"REM"};
  94. static const char ducky_cmd_id[] = {"ID"};
  95. static const char ducky_cmd_delay[] = {"DELAY "};
  96. static const char ducky_cmd_string[] = {"STRING "};
  97. static const char ducky_cmd_defdelay_1[] = {"DEFAULT_DELAY "};
  98. static const char ducky_cmd_defdelay_2[] = {"DEFAULTDELAY "};
  99. static const char ducky_cmd_repeat[] = {"REPEAT "};
  100. static const char ducky_cmd_sysrq[] = {"SYSRQ "};
  101. static const char ducky_cmd_altchar[] = {"ALTCHAR "};
  102. static const char ducky_cmd_altstr_1[] = {"ALTSTRING "};
  103. static const char ducky_cmd_altstr_2[] = {"ALTCODE "};
  104. static const uint8_t numpad_keys[10] = {
  105. HID_KEYPAD_0,
  106. HID_KEYPAD_1,
  107. HID_KEYPAD_2,
  108. HID_KEYPAD_3,
  109. HID_KEYPAD_4,
  110. HID_KEYPAD_5,
  111. HID_KEYPAD_6,
  112. HID_KEYPAD_7,
  113. HID_KEYPAD_8,
  114. HID_KEYPAD_9,
  115. };
  116. static bool ducky_get_number(const char* param, uint32_t* val) {
  117. uint32_t value = 0;
  118. if(sscanf(param, "%lu", &value) == 1) {
  119. *val = value;
  120. return true;
  121. }
  122. return false;
  123. }
  124. static uint32_t ducky_get_command_len(const char* line) {
  125. uint32_t len = strlen(line);
  126. for(uint32_t i = 0; i < len; i++) {
  127. if(line[i] == ' ') return i;
  128. }
  129. return 0;
  130. }
  131. static bool ducky_is_line_end(const char chr) {
  132. return ((chr == ' ') || (chr == '\0') || (chr == '\r') || (chr == '\n'));
  133. }
  134. static void ducky_numlock_on() {
  135. if((furi_hal_hid_get_led_state() & HID_KB_LED_NUM) == 0) {
  136. furi_hal_hid_kb_press(HID_KEYBOARD_LOCK_NUM_LOCK);
  137. furi_hal_hid_kb_release(HID_KEYBOARD_LOCK_NUM_LOCK);
  138. }
  139. }
  140. static bool ducky_numpad_press(const char num) {
  141. if((num < '0') || (num > '9')) return false;
  142. uint16_t key = numpad_keys[num - '0'];
  143. furi_hal_hid_kb_press(key);
  144. furi_hal_hid_kb_release(key);
  145. return true;
  146. }
  147. static bool ducky_altchar(const char* charcode) {
  148. uint8_t i = 0;
  149. bool state = false;
  150. FURI_LOG_I(WORKER_TAG, "char %s", charcode);
  151. furi_hal_hid_kb_press(KEY_MOD_LEFT_ALT);
  152. while(!ducky_is_line_end(charcode[i])) {
  153. state = ducky_numpad_press(charcode[i]);
  154. if(state == false) break;
  155. i++;
  156. }
  157. furi_hal_hid_kb_release(KEY_MOD_LEFT_ALT);
  158. return state;
  159. }
  160. static bool ducky_altstring(const char* param) {
  161. uint32_t i = 0;
  162. bool state = false;
  163. while(param[i] != '\0') {
  164. if((param[i] < ' ') || (param[i] > '~')) {
  165. i++;
  166. continue; // Skip non-printable chars
  167. }
  168. char temp_str[4];
  169. snprintf(temp_str, 4, "%u", param[i]);
  170. state = ducky_altchar(temp_str);
  171. if(state == false) break;
  172. i++;
  173. }
  174. return state;
  175. }
  176. static bool ducky_string(const char* param) {
  177. uint32_t i = 0;
  178. while(param[i] != '\0') {
  179. uint16_t keycode = HID_ASCII_TO_KEY(param[i]);
  180. if(keycode != HID_KEYBOARD_NONE) {
  181. furi_hal_hid_kb_press(keycode);
  182. furi_hal_hid_kb_release(keycode);
  183. }
  184. i++;
  185. }
  186. return true;
  187. }
  188. static uint16_t ducky_get_keycode(const char* param, bool accept_chars) {
  189. for(size_t i = 0; i < (sizeof(ducky_keys) / sizeof(ducky_keys[0])); i++) {
  190. size_t key_cmd_len = strlen(ducky_keys[i].name);
  191. if((strncmp(param, ducky_keys[i].name, key_cmd_len) == 0) &&
  192. (ducky_is_line_end(param[key_cmd_len]))) {
  193. return ducky_keys[i].keycode;
  194. }
  195. }
  196. if((accept_chars) && (strlen(param) > 0)) {
  197. return (HID_ASCII_TO_KEY(param[0]) & 0xFF);
  198. }
  199. return 0;
  200. }
  201. static int32_t
  202. ducky_parse_line(BadUsbScript* bad_usb, FuriString* line, char* error, size_t error_len) {
  203. uint32_t line_len = furi_string_size(line);
  204. const char* line_tmp = furi_string_get_cstr(line);
  205. bool state = false;
  206. if(line_len == 0) {
  207. return SCRIPT_STATE_NEXT_LINE; // Skip empty lines
  208. }
  209. FURI_LOG_D(WORKER_TAG, "line:%s", line_tmp);
  210. // General commands
  211. if(strncmp(line_tmp, ducky_cmd_comment, strlen(ducky_cmd_comment)) == 0) {
  212. // REM - comment line
  213. return (0);
  214. } else if(strncmp(line_tmp, ducky_cmd_id, strlen(ducky_cmd_id)) == 0) {
  215. // ID - executed in ducky_script_preload
  216. return (0);
  217. } else if(strncmp(line_tmp, ducky_cmd_delay, strlen(ducky_cmd_delay)) == 0) {
  218. // DELAY
  219. line_tmp = &line_tmp[ducky_get_command_len(line_tmp) + 1];
  220. uint32_t delay_val = 0;
  221. state = ducky_get_number(line_tmp, &delay_val);
  222. if((state) && (delay_val > 0)) {
  223. return (int32_t)delay_val;
  224. }
  225. if(error != NULL) {
  226. snprintf(error, error_len, "Invalid number %s", line_tmp);
  227. }
  228. return SCRIPT_STATE_ERROR;
  229. } else if(
  230. (strncmp(line_tmp, ducky_cmd_defdelay_1, strlen(ducky_cmd_defdelay_1)) == 0) ||
  231. (strncmp(line_tmp, ducky_cmd_defdelay_2, strlen(ducky_cmd_defdelay_2)) == 0)) {
  232. // DEFAULT_DELAY
  233. line_tmp = &line_tmp[ducky_get_command_len(line_tmp) + 1];
  234. state = ducky_get_number(line_tmp, &bad_usb->defdelay);
  235. if(!state && error != NULL) {
  236. snprintf(error, error_len, "Invalid number %s", line_tmp);
  237. }
  238. return (state) ? (0) : SCRIPT_STATE_ERROR;
  239. } else if(strncmp(line_tmp, ducky_cmd_string, strlen(ducky_cmd_string)) == 0) {
  240. // STRING
  241. line_tmp = &line_tmp[ducky_get_command_len(line_tmp) + 1];
  242. state = ducky_string(line_tmp);
  243. if(!state && error != NULL) {
  244. snprintf(error, error_len, "Invalid string %s", line_tmp);
  245. }
  246. return (state) ? (0) : SCRIPT_STATE_ERROR;
  247. } else if(strncmp(line_tmp, ducky_cmd_altchar, strlen(ducky_cmd_altchar)) == 0) {
  248. // ALTCHAR
  249. line_tmp = &line_tmp[ducky_get_command_len(line_tmp) + 1];
  250. ducky_numlock_on();
  251. state = ducky_altchar(line_tmp);
  252. if(!state && error != NULL) {
  253. snprintf(error, error_len, "Invalid altchar %s", line_tmp);
  254. }
  255. return (state) ? (0) : SCRIPT_STATE_ERROR;
  256. } else if(
  257. (strncmp(line_tmp, ducky_cmd_altstr_1, strlen(ducky_cmd_altstr_1)) == 0) ||
  258. (strncmp(line_tmp, ducky_cmd_altstr_2, strlen(ducky_cmd_altstr_2)) == 0)) {
  259. // ALTSTRING
  260. line_tmp = &line_tmp[ducky_get_command_len(line_tmp) + 1];
  261. ducky_numlock_on();
  262. state = ducky_altstring(line_tmp);
  263. if(!state && error != NULL) {
  264. snprintf(error, error_len, "Invalid altstring %s", line_tmp);
  265. }
  266. return (state) ? (0) : SCRIPT_STATE_ERROR;
  267. } else if(strncmp(line_tmp, ducky_cmd_repeat, strlen(ducky_cmd_repeat)) == 0) {
  268. // REPEAT
  269. line_tmp = &line_tmp[ducky_get_command_len(line_tmp) + 1];
  270. state = ducky_get_number(line_tmp, &bad_usb->repeat_cnt);
  271. if(!state && error != NULL) {
  272. snprintf(error, error_len, "Invalid number %s", line_tmp);
  273. }
  274. return (state) ? (0) : SCRIPT_STATE_ERROR;
  275. } else if(strncmp(line_tmp, ducky_cmd_sysrq, strlen(ducky_cmd_sysrq)) == 0) {
  276. // SYSRQ
  277. line_tmp = &line_tmp[ducky_get_command_len(line_tmp) + 1];
  278. uint16_t key = ducky_get_keycode(line_tmp, true);
  279. furi_hal_hid_kb_press(KEY_MOD_LEFT_ALT | HID_KEYBOARD_PRINT_SCREEN);
  280. furi_hal_hid_kb_press(key);
  281. furi_hal_hid_kb_release_all();
  282. return (0);
  283. } else {
  284. // Special keys + modifiers
  285. uint16_t key = ducky_get_keycode(line_tmp, false);
  286. if(key == HID_KEYBOARD_NONE) {
  287. if(error != NULL) {
  288. snprintf(error, error_len, "No keycode defined for %s", line_tmp);
  289. }
  290. return SCRIPT_STATE_ERROR;
  291. }
  292. if((key & 0xFF00) != 0) {
  293. // It's a modifier key
  294. line_tmp = &line_tmp[ducky_get_command_len(line_tmp) + 1];
  295. key |= ducky_get_keycode(line_tmp, true);
  296. }
  297. furi_hal_hid_kb_press(key);
  298. furi_hal_hid_kb_release(key);
  299. return (0);
  300. }
  301. }
  302. static bool ducky_set_usb_id(BadUsbScript* bad_usb, const char* line) {
  303. if(sscanf(line, "%lX:%lX", &bad_usb->hid_cfg.vid, &bad_usb->hid_cfg.pid) == 2) {
  304. bad_usb->hid_cfg.manuf[0] = '\0';
  305. bad_usb->hid_cfg.product[0] = '\0';
  306. uint8_t id_len = ducky_get_command_len(line);
  307. if(!ducky_is_line_end(line[id_len + 1])) {
  308. sscanf(
  309. &line[id_len + 1],
  310. "%31[^\r\n:]:%31[^\r\n]",
  311. bad_usb->hid_cfg.manuf,
  312. bad_usb->hid_cfg.product);
  313. }
  314. FURI_LOG_D(
  315. WORKER_TAG,
  316. "set id: %04lX:%04lX mfr:%s product:%s",
  317. bad_usb->hid_cfg.vid,
  318. bad_usb->hid_cfg.pid,
  319. bad_usb->hid_cfg.manuf,
  320. bad_usb->hid_cfg.product);
  321. return true;
  322. }
  323. return false;
  324. }
  325. static bool ducky_script_preload(BadUsbScript* bad_usb, File* script_file) {
  326. uint8_t ret = 0;
  327. uint32_t line_len = 0;
  328. furi_string_reset(bad_usb->line);
  329. do {
  330. ret = storage_file_read(script_file, bad_usb->file_buf, FILE_BUFFER_LEN);
  331. for(uint16_t i = 0; i < ret; i++) {
  332. if(bad_usb->file_buf[i] == '\n' && line_len > 0) {
  333. bad_usb->st.line_nb++;
  334. line_len = 0;
  335. } else {
  336. if(bad_usb->st.line_nb == 0) { // Save first line
  337. furi_string_push_back(bad_usb->line, bad_usb->file_buf[i]);
  338. }
  339. line_len++;
  340. }
  341. }
  342. if(storage_file_eof(script_file)) {
  343. if(line_len > 0) {
  344. bad_usb->st.line_nb++;
  345. break;
  346. }
  347. }
  348. } while(ret > 0);
  349. const char* line_tmp = furi_string_get_cstr(bad_usb->line);
  350. bool id_set = false; // Looking for ID command at first line
  351. if(strncmp(line_tmp, ducky_cmd_id, strlen(ducky_cmd_id)) == 0) {
  352. id_set = ducky_set_usb_id(bad_usb, &line_tmp[strlen(ducky_cmd_id) + 1]);
  353. }
  354. if(id_set) {
  355. furi_check(furi_hal_usb_set_config(&usb_hid, &bad_usb->hid_cfg));
  356. } else {
  357. furi_check(furi_hal_usb_set_config(&usb_hid, NULL));
  358. }
  359. storage_file_seek(script_file, 0, true);
  360. furi_string_reset(bad_usb->line);
  361. return true;
  362. }
  363. static int32_t ducky_script_execute_next(BadUsbScript* bad_usb, File* script_file) {
  364. int32_t delay_val = 0;
  365. if(bad_usb->repeat_cnt > 0) {
  366. bad_usb->repeat_cnt--;
  367. delay_val = ducky_parse_line(
  368. bad_usb, bad_usb->line_prev, bad_usb->st.error, sizeof(bad_usb->st.error));
  369. if(delay_val == SCRIPT_STATE_NEXT_LINE) { // Empty line
  370. return 0;
  371. } else if(delay_val < 0) { // Script error
  372. bad_usb->st.error_line = bad_usb->st.line_cur - 1;
  373. FURI_LOG_E(WORKER_TAG, "Unknown command at line %u", bad_usb->st.line_cur - 1U);
  374. return SCRIPT_STATE_ERROR;
  375. } else {
  376. return (delay_val + bad_usb->defdelay);
  377. }
  378. }
  379. furi_string_set(bad_usb->line_prev, bad_usb->line);
  380. furi_string_reset(bad_usb->line);
  381. while(1) {
  382. if(bad_usb->buf_len == 0) {
  383. bad_usb->buf_len = storage_file_read(script_file, bad_usb->file_buf, FILE_BUFFER_LEN);
  384. if(storage_file_eof(script_file)) {
  385. if((bad_usb->buf_len < FILE_BUFFER_LEN) && (bad_usb->file_end == false)) {
  386. bad_usb->file_buf[bad_usb->buf_len] = '\n';
  387. bad_usb->buf_len++;
  388. bad_usb->file_end = true;
  389. }
  390. }
  391. bad_usb->buf_start = 0;
  392. if(bad_usb->buf_len == 0) return SCRIPT_STATE_END;
  393. }
  394. for(uint8_t i = bad_usb->buf_start; i < (bad_usb->buf_start + bad_usb->buf_len); i++) {
  395. if(bad_usb->file_buf[i] == '\n' && furi_string_size(bad_usb->line) > 0) {
  396. bad_usb->st.line_cur++;
  397. bad_usb->buf_len = bad_usb->buf_len + bad_usb->buf_start - (i + 1);
  398. bad_usb->buf_start = i + 1;
  399. furi_string_trim(bad_usb->line);
  400. delay_val = ducky_parse_line(
  401. bad_usb, bad_usb->line, bad_usb->st.error, sizeof(bad_usb->st.error));
  402. if(delay_val == SCRIPT_STATE_NEXT_LINE) { // Empty line
  403. return 0;
  404. } else if(delay_val < 0) {
  405. bad_usb->st.error_line = bad_usb->st.line_cur;
  406. FURI_LOG_E(WORKER_TAG, "Unknown command at line %u", bad_usb->st.line_cur);
  407. return SCRIPT_STATE_ERROR;
  408. } else {
  409. return (delay_val + bad_usb->defdelay);
  410. }
  411. } else {
  412. furi_string_push_back(bad_usb->line, bad_usb->file_buf[i]);
  413. }
  414. }
  415. bad_usb->buf_len = 0;
  416. if(bad_usb->file_end) return SCRIPT_STATE_END;
  417. }
  418. return 0;
  419. }
  420. static void bad_usb_hid_state_callback(bool state, void* context) {
  421. furi_assert(context);
  422. BadUsbScript* bad_usb = context;
  423. if(state == true)
  424. furi_thread_flags_set(furi_thread_get_id(bad_usb->thread), WorkerEvtConnect);
  425. else
  426. furi_thread_flags_set(furi_thread_get_id(bad_usb->thread), WorkerEvtDisconnect);
  427. }
  428. static int32_t bad_usb_worker(void* context) {
  429. BadUsbScript* bad_usb = context;
  430. BadUsbWorkerState worker_state = BadUsbStateInit;
  431. int32_t delay_val = 0;
  432. FuriHalUsbInterface* usb_mode_prev = furi_hal_usb_get_config();
  433. FURI_LOG_I(WORKER_TAG, "Init");
  434. File* script_file = storage_file_alloc(furi_record_open(RECORD_STORAGE));
  435. bad_usb->line = furi_string_alloc();
  436. bad_usb->line_prev = furi_string_alloc();
  437. furi_hal_hid_set_state_callback(bad_usb_hid_state_callback, bad_usb);
  438. while(1) {
  439. if(worker_state == BadUsbStateInit) { // State: initialization
  440. if(storage_file_open(
  441. script_file,
  442. furi_string_get_cstr(bad_usb->file_path),
  443. FSAM_READ,
  444. FSOM_OPEN_EXISTING)) {
  445. if((ducky_script_preload(bad_usb, script_file)) && (bad_usb->st.line_nb > 0)) {
  446. if(furi_hal_hid_is_connected()) {
  447. worker_state = BadUsbStateIdle; // Ready to run
  448. } else {
  449. worker_state = BadUsbStateNotConnected; // USB not connected
  450. }
  451. } else {
  452. worker_state = BadUsbStateScriptError; // Script preload error
  453. }
  454. } else {
  455. FURI_LOG_E(WORKER_TAG, "File open error");
  456. worker_state = BadUsbStateFileError; // File open error
  457. }
  458. bad_usb->st.state = worker_state;
  459. } else if(worker_state == BadUsbStateNotConnected) { // State: USB not connected
  460. uint32_t flags = furi_thread_flags_wait(
  461. WorkerEvtEnd | WorkerEvtConnect | WorkerEvtToggle,
  462. FuriFlagWaitAny,
  463. FuriWaitForever);
  464. furi_check((flags & FuriFlagError) == 0);
  465. if(flags & WorkerEvtEnd) {
  466. break;
  467. } else if(flags & WorkerEvtConnect) {
  468. worker_state = BadUsbStateIdle; // Ready to run
  469. } else if(flags & WorkerEvtToggle) {
  470. worker_state = BadUsbStateWillRun; // Will run when USB is connected
  471. }
  472. bad_usb->st.state = worker_state;
  473. } else if(worker_state == BadUsbStateIdle) { // State: ready to start
  474. uint32_t flags = furi_thread_flags_wait(
  475. WorkerEvtEnd | WorkerEvtToggle | WorkerEvtDisconnect,
  476. FuriFlagWaitAny,
  477. FuriWaitForever);
  478. furi_check((flags & FuriFlagError) == 0);
  479. if(flags & WorkerEvtEnd) {
  480. break;
  481. } else if(flags & WorkerEvtToggle) { // Start executing script
  482. DOLPHIN_DEED(DolphinDeedBadUsbPlayScript);
  483. delay_val = 0;
  484. bad_usb->buf_len = 0;
  485. bad_usb->st.line_cur = 0;
  486. bad_usb->defdelay = 0;
  487. bad_usb->repeat_cnt = 0;
  488. bad_usb->file_end = false;
  489. storage_file_seek(script_file, 0, true);
  490. worker_state = BadUsbStateRunning;
  491. } else if(flags & WorkerEvtDisconnect) {
  492. worker_state = BadUsbStateNotConnected; // USB disconnected
  493. }
  494. bad_usb->st.state = worker_state;
  495. } else if(worker_state == BadUsbStateWillRun) { // State: start on connection
  496. uint32_t flags = furi_thread_flags_wait(
  497. WorkerEvtEnd | WorkerEvtConnect | WorkerEvtToggle,
  498. FuriFlagWaitAny,
  499. FuriWaitForever);
  500. furi_check((flags & FuriFlagError) == 0);
  501. if(flags & WorkerEvtEnd) {
  502. break;
  503. } else if(flags & WorkerEvtConnect) { // Start executing script
  504. DOLPHIN_DEED(DolphinDeedBadUsbPlayScript);
  505. delay_val = 0;
  506. bad_usb->buf_len = 0;
  507. bad_usb->st.line_cur = 0;
  508. bad_usb->defdelay = 0;
  509. bad_usb->repeat_cnt = 0;
  510. bad_usb->file_end = false;
  511. storage_file_seek(script_file, 0, true);
  512. // extra time for PC to recognize Flipper as keyboard
  513. furi_thread_flags_wait(0, FuriFlagWaitAny, 1500);
  514. worker_state = BadUsbStateRunning;
  515. } else if(flags & WorkerEvtToggle) { // Cancel scheduled execution
  516. worker_state = BadUsbStateNotConnected;
  517. }
  518. bad_usb->st.state = worker_state;
  519. } else if(worker_state == BadUsbStateRunning) { // State: running
  520. uint16_t delay_cur = (delay_val > 1000) ? (1000) : (delay_val);
  521. uint32_t flags = furi_thread_flags_wait(
  522. WorkerEvtEnd | WorkerEvtToggle | WorkerEvtDisconnect, FuriFlagWaitAny, delay_cur);
  523. delay_val -= delay_cur;
  524. if(!(flags & FuriFlagError)) {
  525. if(flags & WorkerEvtEnd) {
  526. break;
  527. } else if(flags & WorkerEvtToggle) {
  528. worker_state = BadUsbStateIdle; // Stop executing script
  529. furi_hal_hid_kb_release_all();
  530. } else if(flags & WorkerEvtDisconnect) {
  531. worker_state = BadUsbStateNotConnected; // USB disconnected
  532. furi_hal_hid_kb_release_all();
  533. }
  534. bad_usb->st.state = worker_state;
  535. continue;
  536. } else if(
  537. (flags == (unsigned)FuriFlagErrorTimeout) ||
  538. (flags == (unsigned)FuriFlagErrorResource)) {
  539. if(delay_val > 0) {
  540. bad_usb->st.delay_remain--;
  541. continue;
  542. }
  543. bad_usb->st.state = BadUsbStateRunning;
  544. delay_val = ducky_script_execute_next(bad_usb, script_file);
  545. if(delay_val == SCRIPT_STATE_ERROR) { // Script error
  546. delay_val = 0;
  547. worker_state = BadUsbStateScriptError;
  548. bad_usb->st.state = worker_state;
  549. } else if(delay_val == SCRIPT_STATE_END) { // End of script
  550. delay_val = 0;
  551. worker_state = BadUsbStateIdle;
  552. bad_usb->st.state = BadUsbStateDone;
  553. furi_hal_hid_kb_release_all();
  554. continue;
  555. } else if(delay_val > 1000) {
  556. bad_usb->st.state = BadUsbStateDelay; // Show long delays
  557. bad_usb->st.delay_remain = delay_val / 1000;
  558. }
  559. } else {
  560. furi_check((flags & FuriFlagError) == 0);
  561. }
  562. } else if(
  563. (worker_state == BadUsbStateFileError) ||
  564. (worker_state == BadUsbStateScriptError)) { // State: error
  565. uint32_t flags = furi_thread_flags_wait(
  566. WorkerEvtEnd, FuriFlagWaitAny, FuriWaitForever); // Waiting for exit command
  567. furi_check((flags & FuriFlagError) == 0);
  568. if(flags & WorkerEvtEnd) {
  569. break;
  570. }
  571. }
  572. }
  573. furi_hal_hid_set_state_callback(NULL, NULL);
  574. furi_hal_usb_set_config(usb_mode_prev, NULL);
  575. storage_file_close(script_file);
  576. storage_file_free(script_file);
  577. furi_string_free(bad_usb->line);
  578. furi_string_free(bad_usb->line_prev);
  579. FURI_LOG_I(WORKER_TAG, "End");
  580. return 0;
  581. }
  582. BadUsbScript* bad_usb_script_open(FuriString* file_path) {
  583. furi_assert(file_path);
  584. BadUsbScript* bad_usb = malloc(sizeof(BadUsbScript));
  585. bad_usb->file_path = furi_string_alloc();
  586. furi_string_set(bad_usb->file_path, file_path);
  587. bad_usb->st.state = BadUsbStateInit;
  588. bad_usb->st.error[0] = '\0';
  589. bad_usb->thread = furi_thread_alloc_ex("BadUsbWorker", 2048, bad_usb_worker, bad_usb);
  590. furi_thread_start(bad_usb->thread);
  591. return bad_usb;
  592. } //-V773
  593. void bad_usb_script_close(BadUsbScript* bad_usb) {
  594. furi_assert(bad_usb);
  595. furi_thread_flags_set(furi_thread_get_id(bad_usb->thread), WorkerEvtEnd);
  596. furi_thread_join(bad_usb->thread);
  597. furi_thread_free(bad_usb->thread);
  598. furi_string_free(bad_usb->file_path);
  599. free(bad_usb);
  600. }
  601. void bad_usb_script_toggle(BadUsbScript* bad_usb) {
  602. furi_assert(bad_usb);
  603. furi_thread_flags_set(furi_thread_get_id(bad_usb->thread), WorkerEvtToggle);
  604. }
  605. BadUsbState* bad_usb_script_get_state(BadUsbScript* bad_usb) {
  606. furi_assert(bad_usb);
  607. return &(bad_usb->st);
  608. }