subbrute_worker.c 14 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478
  1. #include "subbrute_worker_private.h"
  2. #include <furi.h>
  3. #include <string.h>
  4. #include <toolbox/stream/stream.h>
  5. #include <flipper_format.h>
  6. #include <flipper_format_i.h>
  7. #include <lib/subghz/subghz_protocol_registry.h>
  8. #define TAG "SubBruteWorker"
  9. #define SUBBRUTE_TX_TIMEOUT 6
  10. #define SUBBRUTE_MANUAL_TRANSMIT_INTERVAL 250
  11. SubBruteWorker* subbrute_worker_alloc(const SubGhzDevice* radio_device) {
  12. SubBruteWorker* instance = malloc(sizeof(SubBruteWorker));
  13. instance->state = SubBruteWorkerStateIDLE;
  14. instance->step = 0;
  15. instance->worker_running = false;
  16. instance->initiated = false;
  17. instance->last_time_tx_data = 0;
  18. instance->load_index = 0;
  19. instance->thread = furi_thread_alloc();
  20. furi_thread_set_name(instance->thread, "SubBruteAttackWorker");
  21. furi_thread_set_stack_size(instance->thread, 2048);
  22. furi_thread_set_context(instance->thread, instance);
  23. furi_thread_set_callback(instance->thread, subbrute_worker_thread);
  24. instance->context = NULL;
  25. instance->callback = NULL;
  26. instance->tx_timeout_ms = SUBBRUTE_TX_TIMEOUT;
  27. instance->decoder_result = NULL;
  28. instance->transmitter = NULL;
  29. instance->environment = subghz_environment_alloc();
  30. subghz_environment_set_protocol_registry(
  31. instance->environment, (void*)&subghz_protocol_registry);
  32. instance->transmit_mode = false;
  33. instance->radio_device = radio_device;
  34. return instance;
  35. }
  36. void subbrute_worker_free(SubBruteWorker* instance) {
  37. furi_assert(instance);
  38. // I don't know how to free this
  39. instance->decoder_result = NULL;
  40. if(instance->transmitter != NULL) {
  41. subghz_transmitter_free(instance->transmitter);
  42. instance->transmitter = NULL;
  43. }
  44. subghz_environment_free(instance->environment);
  45. instance->environment = NULL;
  46. furi_thread_free(instance->thread);
  47. subghz_devices_sleep(instance->radio_device);
  48. subbrute_radio_device_loader_end(instance->radio_device);
  49. free(instance);
  50. }
  51. uint64_t subbrute_worker_get_step(SubBruteWorker* instance) {
  52. return instance->step;
  53. }
  54. bool subbrute_worker_set_step(SubBruteWorker* instance, uint64_t step) {
  55. furi_assert(instance);
  56. if(!subbrute_worker_can_manual_transmit(instance)) {
  57. FURI_LOG_W(TAG, "Cannot set step during running mode");
  58. return false;
  59. }
  60. instance->step = step;
  61. return true;
  62. }
  63. bool subbrute_worker_init_default_attack(
  64. SubBruteWorker* instance,
  65. SubBruteAttacks attack_type,
  66. uint64_t step,
  67. const SubBruteProtocol* protocol,
  68. uint8_t repeats) {
  69. furi_assert(instance);
  70. if(instance->worker_running) {
  71. FURI_LOG_W(TAG, "Init Worker when it's running");
  72. subbrute_worker_stop(instance);
  73. }
  74. instance->attack = attack_type;
  75. instance->frequency = protocol->frequency;
  76. instance->preset = protocol->preset;
  77. instance->file = protocol->file;
  78. instance->step = step;
  79. instance->bits = protocol->bits;
  80. instance->te = protocol->te;
  81. instance->repeat = repeats;
  82. instance->load_index = 0;
  83. instance->file_key = 0;
  84. instance->two_bytes = false;
  85. instance->max_value =
  86. subbrute_protocol_calc_max_value(instance->attack, instance->bits, instance->two_bytes);
  87. instance->initiated = true;
  88. instance->state = SubBruteWorkerStateReady;
  89. subbrute_worker_send_callback(instance);
  90. #ifdef FURI_DEBUG
  91. FURI_LOG_I(
  92. TAG,
  93. "subbrute_worker_init_default_attack: %s, bits: %d, preset: %s, file: %s, te: %ld, repeat: %d, max_value: %lld",
  94. subbrute_protocol_name(instance->attack),
  95. instance->bits,
  96. subbrute_protocol_preset(instance->preset),
  97. subbrute_protocol_file(instance->file),
  98. instance->te,
  99. instance->repeat,
  100. instance->max_value);
  101. #endif
  102. return true;
  103. }
  104. bool subbrute_worker_init_file_attack(
  105. SubBruteWorker* instance,
  106. uint64_t step,
  107. uint8_t load_index,
  108. uint64_t file_key,
  109. SubBruteProtocol* protocol,
  110. uint8_t repeats,
  111. bool two_bytes) {
  112. furi_assert(instance);
  113. if(instance->worker_running) {
  114. FURI_LOG_W(TAG, "Init Worker when it's running");
  115. subbrute_worker_stop(instance);
  116. }
  117. instance->attack = SubBruteAttackLoadFile;
  118. instance->frequency = protocol->frequency;
  119. instance->preset = protocol->preset;
  120. instance->file = protocol->file;
  121. instance->step = step;
  122. instance->bits = protocol->bits;
  123. instance->te = protocol->te;
  124. instance->load_index = load_index;
  125. instance->repeat = repeats;
  126. instance->file_key = file_key;
  127. instance->two_bytes = two_bytes;
  128. instance->max_value =
  129. subbrute_protocol_calc_max_value(instance->attack, instance->bits, instance->two_bytes);
  130. instance->initiated = true;
  131. instance->state = SubBruteWorkerStateReady;
  132. subbrute_worker_send_callback(instance);
  133. #ifdef FURI_DEBUG
  134. FURI_LOG_I(
  135. TAG,
  136. "subbrute_worker_init_file_attack: %s, bits: %d, preset: %s, file: %s, te: %ld, repeat: %d, max_value: %lld, key: %llX",
  137. subbrute_protocol_name(instance->attack),
  138. instance->bits,
  139. subbrute_protocol_preset(instance->preset),
  140. subbrute_protocol_file(instance->file),
  141. instance->te,
  142. instance->repeat,
  143. instance->max_value,
  144. instance->file_key);
  145. #endif
  146. return true;
  147. }
  148. bool subbrute_worker_start(SubBruteWorker* instance) {
  149. furi_assert(instance);
  150. if(!instance->initiated) {
  151. FURI_LOG_W(TAG, "Worker not init!");
  152. return false;
  153. }
  154. if(instance->worker_running) {
  155. FURI_LOG_W(TAG, "Worker is already running!");
  156. return false;
  157. }
  158. if(instance->state != SubBruteWorkerStateReady &&
  159. instance->state != SubBruteWorkerStateFinished) {
  160. FURI_LOG_W(TAG, "Worker cannot start, invalid device state: %d", instance->state);
  161. return false;
  162. }
  163. instance->worker_running = true;
  164. furi_thread_start(instance->thread);
  165. return true;
  166. }
  167. void subbrute_worker_stop(SubBruteWorker* instance) {
  168. furi_assert(instance);
  169. if(!instance->worker_running) {
  170. return;
  171. }
  172. instance->worker_running = false;
  173. furi_thread_join(instance->thread);
  174. subghz_devices_idle(instance->radio_device);
  175. }
  176. bool subbrute_worker_transmit_current_key(SubBruteWorker* instance, uint64_t step) {
  177. furi_assert(instance);
  178. if(!instance->initiated) {
  179. FURI_LOG_W(TAG, "Worker not init!");
  180. return false;
  181. }
  182. if(instance->worker_running) {
  183. FURI_LOG_W(TAG, "Worker in running state!");
  184. return false;
  185. }
  186. if(instance->state != SubBruteWorkerStateReady &&
  187. instance->state != SubBruteWorkerStateFinished) {
  188. FURI_LOG_W(TAG, "Invalid state for running worker! State: %d", instance->state);
  189. return false;
  190. }
  191. uint32_t ticks = furi_get_tick();
  192. if((ticks - instance->last_time_tx_data) < SUBBRUTE_MANUAL_TRANSMIT_INTERVAL) {
  193. #if FURI_DEBUG
  194. FURI_LOG_D(TAG, "Need to wait, current: %ld", ticks - instance->last_time_tx_data);
  195. #endif
  196. return false;
  197. }
  198. instance->last_time_tx_data = ticks;
  199. instance->step = step;
  200. bool result;
  201. instance->protocol_name = subbrute_protocol_file(instance->file);
  202. FlipperFormat* flipper_format = flipper_format_string_alloc();
  203. Stream* stream = flipper_format_get_raw_stream(flipper_format);
  204. stream_clean(stream);
  205. if(instance->attack == SubBruteAttackLoadFile) {
  206. subbrute_protocol_file_payload(
  207. stream,
  208. step,
  209. instance->bits,
  210. instance->te,
  211. instance->repeat,
  212. instance->load_index,
  213. instance->file_key,
  214. instance->two_bytes);
  215. } else {
  216. subbrute_protocol_default_payload(
  217. stream, instance->file, step, instance->bits, instance->te, instance->repeat);
  218. }
  219. subbrute_worker_subghz_transmit(instance, flipper_format);
  220. result = true;
  221. #if FURI_DEBUG
  222. FURI_LOG_D(TAG, "Manual transmit done");
  223. #endif
  224. flipper_format_free(flipper_format);
  225. return result;
  226. }
  227. bool subbrute_worker_is_running(SubBruteWorker* instance) {
  228. return instance->worker_running;
  229. }
  230. bool subbrute_worker_can_manual_transmit(SubBruteWorker* instance) {
  231. furi_assert(instance);
  232. if(!instance->initiated) {
  233. FURI_LOG_W(TAG, "Worker not init!");
  234. return false;
  235. }
  236. return !instance->worker_running && instance->state != SubBruteWorkerStateIDLE &&
  237. instance->state != SubBruteWorkerStateTx &&
  238. ((furi_get_tick() - instance->last_time_tx_data) > SUBBRUTE_MANUAL_TRANSMIT_INTERVAL);
  239. }
  240. void subbrute_worker_set_callback(
  241. SubBruteWorker* instance,
  242. SubBruteWorkerCallback callback,
  243. void* context) {
  244. furi_assert(instance);
  245. instance->callback = callback;
  246. instance->context = context;
  247. }
  248. void subbrute_worker_subghz_transmit(SubBruteWorker* instance, FlipperFormat* flipper_format) {
  249. const uint8_t timeout = instance->tx_timeout_ms;
  250. while(instance->transmit_mode) {
  251. furi_delay_ms(timeout);
  252. }
  253. instance->transmit_mode = true;
  254. if(instance->transmitter != NULL) {
  255. subghz_transmitter_free(instance->transmitter);
  256. instance->transmitter = NULL;
  257. }
  258. instance->transmitter =
  259. subghz_transmitter_alloc_init(instance->environment, instance->protocol_name);
  260. subghz_transmitter_deserialize(instance->transmitter, flipper_format);
  261. subghz_devices_reset(instance->radio_device);
  262. subghz_devices_idle(instance->radio_device);
  263. subghz_devices_load_preset(instance->radio_device, instance->preset, NULL);
  264. subghz_devices_set_frequency(
  265. instance->radio_device, instance->frequency); // TODO is freq valid check
  266. if(subghz_devices_set_tx(instance->radio_device)) {
  267. subghz_devices_start_async_tx(
  268. instance->radio_device, subghz_transmitter_yield, instance->transmitter);
  269. while(!subghz_devices_is_async_complete_tx(instance->radio_device)) {
  270. furi_delay_ms(timeout);
  271. }
  272. subghz_devices_stop_async_tx(instance->radio_device);
  273. }
  274. subghz_devices_idle(instance->radio_device);
  275. subghz_transmitter_stop(instance->transmitter);
  276. subghz_transmitter_free(instance->transmitter);
  277. instance->transmitter = NULL;
  278. instance->transmit_mode = false;
  279. }
  280. void subbrute_worker_send_callback(SubBruteWorker* instance) {
  281. if(instance->callback != NULL) {
  282. instance->callback(instance->context, instance->state);
  283. }
  284. }
  285. /**
  286. * Entrypoint for worker
  287. *
  288. * @param context SubBruteWorker*
  289. * @return 0 if ok
  290. */
  291. int32_t subbrute_worker_thread(void* context) {
  292. furi_assert(context);
  293. SubBruteWorker* instance = (SubBruteWorker*)context;
  294. if(!instance->worker_running) {
  295. FURI_LOG_W(TAG, "Worker is not set to running state!");
  296. return -1;
  297. }
  298. if(instance->state != SubBruteWorkerStateReady &&
  299. instance->state != SubBruteWorkerStateFinished) {
  300. FURI_LOG_W(TAG, "Invalid state for running worker! State: %d", instance->state);
  301. return -2;
  302. }
  303. #ifdef FURI_DEBUG
  304. FURI_LOG_I(TAG, "Worker start");
  305. #endif
  306. SubBruteWorkerState local_state = instance->state = SubBruteWorkerStateTx;
  307. subbrute_worker_send_callback(instance);
  308. instance->protocol_name = subbrute_protocol_file(instance->file);
  309. FlipperFormat* flipper_format = flipper_format_string_alloc();
  310. Stream* stream = flipper_format_get_raw_stream(flipper_format);
  311. while(instance->worker_running) {
  312. stream_clean(stream);
  313. if(instance->attack == SubBruteAttackLoadFile) {
  314. subbrute_protocol_file_payload(
  315. stream,
  316. instance->step,
  317. instance->bits,
  318. instance->te,
  319. instance->repeat,
  320. instance->load_index,
  321. instance->file_key,
  322. instance->two_bytes);
  323. } else {
  324. subbrute_protocol_default_payload(
  325. stream,
  326. instance->file,
  327. instance->step,
  328. instance->bits,
  329. instance->te,
  330. instance->repeat);
  331. }
  332. #ifdef FURI_DEBUG
  333. //FURI_LOG_I(TAG, "Payload: %s", furi_string_get_cstr(payload));
  334. //furi_delay_ms(SUBBRUTE_MANUAL_TRANSMIT_INTERVAL / 4);
  335. #endif
  336. subbrute_worker_subghz_transmit(instance, flipper_format);
  337. if(instance->step + 1 > instance->max_value) {
  338. #ifdef FURI_DEBUG
  339. FURI_LOG_I(TAG, "Worker finished to end");
  340. #endif
  341. local_state = SubBruteWorkerStateFinished;
  342. break;
  343. }
  344. instance->step++;
  345. furi_delay_ms(instance->tx_timeout_ms);
  346. }
  347. flipper_format_free(flipper_format);
  348. instance->worker_running = false; // Because we have error states
  349. instance->state = local_state == SubBruteWorkerStateTx ? SubBruteWorkerStateReady :
  350. local_state;
  351. subbrute_worker_send_callback(instance);
  352. #ifdef FURI_DEBUG
  353. FURI_LOG_I(TAG, "Worker stop");
  354. #endif
  355. return 0;
  356. }
  357. uint8_t subbrute_worker_get_timeout(SubBruteWorker* instance) {
  358. return instance->tx_timeout_ms;
  359. }
  360. void subbrute_worker_set_timeout(SubBruteWorker* instance, uint8_t timeout) {
  361. instance->tx_timeout_ms = timeout;
  362. }
  363. uint8_t subbrute_worker_get_repeats(SubBruteWorker* instance) {
  364. return instance->repeat;
  365. }
  366. void subbrute_worker_set_repeats(SubBruteWorker* instance, uint8_t repeats) {
  367. instance->repeat = repeats;
  368. }
  369. uint32_t subbrute_worker_get_te(SubBruteWorker* instance) {
  370. return instance->te;
  371. }
  372. void subbrute_worker_set_te(SubBruteWorker* instance, uint32_t te) {
  373. instance->te = te;
  374. }
  375. bool subbrute_worker_is_tx_allowed(SubBruteWorker* instance, uint32_t value) {
  376. furi_assert(instance);
  377. bool res = false;
  378. if(!subghz_devices_is_frequency_valid(instance->radio_device, value)) {
  379. return false;
  380. } else {
  381. subghz_devices_set_frequency(instance->radio_device, value);
  382. res = subghz_devices_set_tx(instance->radio_device);
  383. subghz_devices_idle(instance->radio_device);
  384. }
  385. return res;
  386. }