subbrute_worker.c 15 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496
  1. #include "subbrute_worker_private.h"
  2. #include <string.h>
  3. #include <toolbox/stream/stream.h>
  4. #include <flipper_format.h>
  5. #include <flipper_format_i.h>
  6. #include <lib/subghz/protocols/protocol_items.h>
  7. #define TAG "SubBruteWorker"
  8. #define SUBBRUTE_TX_TIMEOUT 6
  9. #define SUBBRUTE_MANUAL_TRANSMIT_INTERVAL 250
  10. SubBruteWorker* subbrute_worker_alloc(const SubGhzDevice* radio_device) {
  11. SubBruteWorker* instance = malloc(sizeof(SubBruteWorker));
  12. instance->state = SubBruteWorkerStateIDLE;
  13. instance->step = 0;
  14. instance->worker_running = false;
  15. instance->initiated = false;
  16. instance->last_time_tx_data = 0;
  17. instance->load_index = 0;
  18. instance->thread = furi_thread_alloc();
  19. furi_thread_set_name(instance->thread, "SubBruteAttackWorker");
  20. furi_thread_set_stack_size(instance->thread, 2048);
  21. furi_thread_set_context(instance->thread, instance);
  22. furi_thread_set_callback(instance->thread, subbrute_worker_thread);
  23. instance->context = NULL;
  24. instance->callback = NULL;
  25. instance->tx_timeout_ms = SUBBRUTE_TX_TIMEOUT;
  26. instance->decoder_result = NULL;
  27. instance->transmitter = NULL;
  28. instance->environment = subghz_environment_alloc();
  29. subghz_environment_set_protocol_registry(
  30. instance->environment, (void*)&subghz_protocol_registry);
  31. instance->transmit_mode = false;
  32. instance->radio_device = radio_device;
  33. return instance;
  34. }
  35. void subbrute_worker_free(SubBruteWorker* instance) {
  36. furi_assert(instance);
  37. // I don't know how to free this
  38. instance->decoder_result = NULL;
  39. if(instance->transmitter != NULL) {
  40. subghz_transmitter_free(instance->transmitter);
  41. instance->transmitter = NULL;
  42. }
  43. subghz_environment_free(instance->environment);
  44. instance->environment = NULL;
  45. furi_thread_free(instance->thread);
  46. subghz_devices_sleep(instance->radio_device);
  47. radio_device_loader_end(instance->radio_device);
  48. free(instance);
  49. }
  50. uint64_t subbrute_worker_get_step(SubBruteWorker* instance) {
  51. return instance->step;
  52. }
  53. bool subbrute_worker_set_step(SubBruteWorker* instance, uint64_t step) {
  54. furi_assert(instance);
  55. if(!subbrute_worker_can_manual_transmit(instance)) {
  56. FURI_LOG_W(TAG, "Cannot set step during running mode");
  57. return false;
  58. }
  59. instance->step = step;
  60. return true;
  61. }
  62. bool subbrute_worker_init_default_attack(
  63. SubBruteWorker* instance,
  64. SubBruteAttacks attack_type,
  65. uint64_t step,
  66. const SubBruteProtocol* protocol,
  67. uint8_t extra_repeats) {
  68. furi_assert(instance);
  69. if(instance->worker_running) {
  70. FURI_LOG_W(TAG, "Init Worker when it's running");
  71. subbrute_worker_stop(instance);
  72. }
  73. instance->attack = attack_type;
  74. instance->frequency = protocol->frequency;
  75. instance->preset = protocol->preset;
  76. instance->file = protocol->file;
  77. instance->step = step;
  78. instance->bits = protocol->bits;
  79. instance->te = protocol->te;
  80. instance->repeat = protocol->repeat + extra_repeats;
  81. instance->load_index = 0;
  82. instance->file_key = 0;
  83. instance->two_bytes = false;
  84. instance->max_value =
  85. subbrute_protocol_calc_max_value(instance->attack, instance->bits, instance->two_bytes);
  86. instance->initiated = true;
  87. instance->state = SubBruteWorkerStateReady;
  88. subbrute_worker_send_callback(instance);
  89. #ifdef FURI_DEBUG
  90. FURI_LOG_I(
  91. TAG,
  92. "subbrute_worker_init_default_attack: %s, bits: %d, preset: %s, file: %s, te: %ld, repeat: %d, max_value: %lld",
  93. subbrute_protocol_name(instance->attack),
  94. instance->bits,
  95. subbrute_protocol_preset(instance->preset),
  96. subbrute_protocol_file(instance->file),
  97. instance->te,
  98. instance->repeat,
  99. instance->max_value);
  100. #endif
  101. return true;
  102. }
  103. bool subbrute_worker_init_file_attack(
  104. SubBruteWorker* instance,
  105. uint64_t step,
  106. uint8_t load_index,
  107. uint64_t file_key,
  108. SubBruteProtocol* protocol,
  109. uint8_t extra_repeats,
  110. bool two_bytes) {
  111. furi_assert(instance);
  112. if(instance->worker_running) {
  113. FURI_LOG_W(TAG, "Init Worker when it's running");
  114. subbrute_worker_stop(instance);
  115. }
  116. instance->attack = SubBruteAttackLoadFile;
  117. instance->frequency = protocol->frequency;
  118. instance->preset = protocol->preset;
  119. instance->file = protocol->file;
  120. instance->step = step;
  121. instance->bits = protocol->bits;
  122. instance->te = protocol->te;
  123. instance->load_index = load_index;
  124. instance->repeat = protocol->repeat + extra_repeats;
  125. instance->file_key = file_key;
  126. instance->two_bytes = two_bytes;
  127. instance->max_value =
  128. subbrute_protocol_calc_max_value(instance->attack, instance->bits, instance->two_bytes);
  129. instance->initiated = true;
  130. instance->state = SubBruteWorkerStateReady;
  131. subbrute_worker_send_callback(instance);
  132. #ifdef FURI_DEBUG
  133. FURI_LOG_I(
  134. TAG,
  135. "subbrute_worker_init_file_attack: %s, bits: %d, preset: %s, file: %s, te: %ld, repeat: %d, max_value: %lld, key: %llX",
  136. subbrute_protocol_name(instance->attack),
  137. instance->bits,
  138. subbrute_protocol_preset(instance->preset),
  139. subbrute_protocol_file(instance->file),
  140. instance->te,
  141. instance->repeat,
  142. instance->max_value,
  143. instance->file_key);
  144. #endif
  145. return true;
  146. }
  147. bool subbrute_worker_start(SubBruteWorker* instance) {
  148. furi_assert(instance);
  149. if(!instance->initiated) {
  150. FURI_LOG_W(TAG, "Worker not init!");
  151. return false;
  152. }
  153. if(instance->worker_running) {
  154. FURI_LOG_W(TAG, "Worker is already running!");
  155. return false;
  156. }
  157. if(instance->state != SubBruteWorkerStateReady &&
  158. instance->state != SubBruteWorkerStateFinished) {
  159. FURI_LOG_W(TAG, "Worker cannot start, invalid device state: %d", instance->state);
  160. return false;
  161. }
  162. instance->worker_running = true;
  163. furi_thread_start(instance->thread);
  164. return true;
  165. }
  166. void subbrute_worker_stop(SubBruteWorker* instance) {
  167. furi_assert(instance);
  168. if(!instance->worker_running) {
  169. return;
  170. }
  171. instance->worker_running = false;
  172. furi_thread_join(instance->thread);
  173. // furi_hal_subghz_set_path(FuriHalSubGhzPathIsolate);
  174. // furi_hal_subghz_idle();
  175. // furi_hal_subghz_sleep();
  176. subghz_devices_idle(instance->radio_device);
  177. }
  178. bool subbrute_worker_transmit_current_key(SubBruteWorker* instance, uint64_t step) {
  179. furi_assert(instance);
  180. if(!instance->initiated) {
  181. FURI_LOG_W(TAG, "Worker not init!");
  182. return false;
  183. }
  184. if(instance->worker_running) {
  185. FURI_LOG_W(TAG, "Worker in running state!");
  186. return false;
  187. }
  188. if(instance->state != SubBruteWorkerStateReady &&
  189. instance->state != SubBruteWorkerStateFinished) {
  190. FURI_LOG_W(TAG, "Invalid state for running worker! State: %d", instance->state);
  191. return false;
  192. }
  193. uint32_t ticks = furi_get_tick();
  194. if((ticks - instance->last_time_tx_data) < SUBBRUTE_MANUAL_TRANSMIT_INTERVAL) {
  195. #if FURI_DEBUG
  196. FURI_LOG_D(TAG, "Need to wait, current: %ld", ticks - instance->last_time_tx_data);
  197. #endif
  198. return false;
  199. }
  200. instance->last_time_tx_data = ticks;
  201. instance->step = step;
  202. bool result;
  203. instance->protocol_name = subbrute_protocol_file(instance->file);
  204. FlipperFormat* flipper_format = flipper_format_string_alloc();
  205. Stream* stream = flipper_format_get_raw_stream(flipper_format);
  206. stream_clean(stream);
  207. if(instance->attack == SubBruteAttackLoadFile) {
  208. subbrute_protocol_file_payload(
  209. stream,
  210. step,
  211. instance->bits,
  212. instance->te,
  213. instance->repeat,
  214. instance->load_index,
  215. instance->file_key,
  216. instance->two_bytes);
  217. } else {
  218. subbrute_protocol_default_payload(
  219. stream, instance->file, step, instance->bits, instance->te, instance->repeat);
  220. }
  221. // size_t written = stream_write_string(stream, payload);
  222. // if(written <= 0) {
  223. // FURI_LOG_W(TAG, "Error creating packet! EXIT");
  224. // result = false;
  225. // } else {
  226. subbrute_worker_subghz_transmit(instance, flipper_format);
  227. result = true;
  228. #if FURI_DEBUG
  229. FURI_LOG_D(TAG, "Manual transmit done");
  230. #endif
  231. // }
  232. flipper_format_free(flipper_format);
  233. // furi_string_free(payload);
  234. return result;
  235. }
  236. bool subbrute_worker_is_running(SubBruteWorker* instance) {
  237. return instance->worker_running;
  238. }
  239. bool subbrute_worker_can_manual_transmit(SubBruteWorker* instance) {
  240. furi_assert(instance);
  241. if(!instance->initiated) {
  242. FURI_LOG_W(TAG, "Worker not init!");
  243. return false;
  244. }
  245. return !instance->worker_running && instance->state != SubBruteWorkerStateIDLE &&
  246. instance->state != SubBruteWorkerStateTx &&
  247. ((furi_get_tick() - instance->last_time_tx_data) > SUBBRUTE_MANUAL_TRANSMIT_INTERVAL);
  248. }
  249. void subbrute_worker_set_callback(
  250. SubBruteWorker* instance,
  251. SubBruteWorkerCallback callback,
  252. void* context) {
  253. furi_assert(instance);
  254. instance->callback = callback;
  255. instance->context = context;
  256. }
  257. void subbrute_worker_subghz_transmit(SubBruteWorker* instance, FlipperFormat* flipper_format) {
  258. const uint8_t timeout = instance->tx_timeout_ms;
  259. while(instance->transmit_mode) {
  260. furi_delay_ms(timeout);
  261. }
  262. instance->transmit_mode = true;
  263. if(instance->transmitter != NULL) {
  264. subghz_transmitter_free(instance->transmitter);
  265. instance->transmitter = NULL;
  266. }
  267. instance->transmitter =
  268. subghz_transmitter_alloc_init(instance->environment, instance->protocol_name);
  269. subghz_transmitter_deserialize(instance->transmitter, flipper_format);
  270. // furi_hal_subghz_reset();
  271. // furi_hal_subghz_idle();
  272. // furi_hal_subghz_load_preset(instance->preset);
  273. // furi_hal_subghz_set_frequency_and_path(instance->frequency);
  274. // furi_hal_subghz_start_async_tx(subghz_transmitter_yield, instance->transmitter);
  275. subghz_devices_reset(instance->radio_device);
  276. subghz_devices_idle(instance->radio_device);
  277. subghz_devices_load_preset(instance->radio_device, instance->preset, NULL);
  278. subghz_devices_set_frequency(
  279. instance->radio_device, instance->frequency); // TODO is freq valid check
  280. if(subghz_devices_set_tx(instance->radio_device)) {
  281. subghz_devices_start_async_tx(
  282. instance->radio_device, subghz_transmitter_yield, instance->transmitter);
  283. while(!subghz_devices_is_async_complete_tx(instance->radio_device)) {
  284. furi_delay_ms(timeout);
  285. }
  286. subghz_devices_stop_async_tx(instance->radio_device);
  287. }
  288. // while(!furi_hal_subghz_is_async_tx_complete()) {
  289. // furi_delay_ms(timeout);
  290. // }
  291. // furi_hal_subghz_stop_async_tx();
  292. // //furi_hal_subghz_set_path(FuriHalSubGhzPathIsolate);
  293. // furi_hal_subghz_idle();
  294. // //furi_hal_subghz_sleep();
  295. subghz_devices_idle(instance->radio_device);
  296. subghz_transmitter_stop(instance->transmitter);
  297. subghz_transmitter_free(instance->transmitter);
  298. instance->transmitter = NULL;
  299. instance->transmit_mode = false;
  300. }
  301. void subbrute_worker_send_callback(SubBruteWorker* instance) {
  302. if(instance->callback != NULL) {
  303. instance->callback(instance->context, instance->state);
  304. }
  305. }
  306. /**
  307. * Entrypoint for worker
  308. *
  309. * @param context SubBruteWorker*
  310. * @return 0 if ok
  311. */
  312. int32_t subbrute_worker_thread(void* context) {
  313. furi_assert(context);
  314. SubBruteWorker* instance = (SubBruteWorker*)context;
  315. if(!instance->worker_running) {
  316. FURI_LOG_W(TAG, "Worker is not set to running state!");
  317. return -1;
  318. }
  319. if(instance->state != SubBruteWorkerStateReady &&
  320. instance->state != SubBruteWorkerStateFinished) {
  321. FURI_LOG_W(TAG, "Invalid state for running worker! State: %d", instance->state);
  322. return -2;
  323. }
  324. #ifdef FURI_DEBUG
  325. FURI_LOG_I(TAG, "Worker start");
  326. #endif
  327. SubBruteWorkerState local_state = instance->state = SubBruteWorkerStateTx;
  328. subbrute_worker_send_callback(instance);
  329. instance->protocol_name = subbrute_protocol_file(instance->file);
  330. FlipperFormat* flipper_format = flipper_format_string_alloc();
  331. Stream* stream = flipper_format_get_raw_stream(flipper_format);
  332. while(instance->worker_running) {
  333. stream_clean(stream);
  334. if(instance->attack == SubBruteAttackLoadFile) {
  335. subbrute_protocol_file_payload(
  336. stream,
  337. instance->step,
  338. instance->bits,
  339. instance->te,
  340. instance->repeat,
  341. instance->load_index,
  342. instance->file_key,
  343. instance->two_bytes);
  344. } else {
  345. subbrute_protocol_default_payload(
  346. stream,
  347. instance->file,
  348. instance->step,
  349. instance->bits,
  350. instance->te,
  351. instance->repeat);
  352. }
  353. #ifdef FURI_DEBUG
  354. //FURI_LOG_I(TAG, "Payload: %s", furi_string_get_cstr(payload));
  355. //furi_delay_ms(SUBBRUTE_MANUAL_TRANSMIT_INTERVAL / 4);
  356. #endif
  357. // size_t written = stream_write_stream_write_string(stream, payload);
  358. // if(written <= 0) {
  359. // FURI_LOG_W(TAG, "Error creating packet! BREAK");
  360. // instance->worker_running = false;
  361. // local_state = SubBruteWorkerStateIDLE;
  362. // furi_string_free(payload);
  363. // break;
  364. // }
  365. subbrute_worker_subghz_transmit(instance, flipper_format);
  366. if(instance->step + 1 > instance->max_value) {
  367. #ifdef FURI_DEBUG
  368. FURI_LOG_I(TAG, "Worker finished to end");
  369. #endif
  370. local_state = SubBruteWorkerStateFinished;
  371. // furi_string_free(payload);
  372. break;
  373. }
  374. instance->step++;
  375. // furi_string_free(payload);
  376. furi_delay_ms(instance->tx_timeout_ms);
  377. }
  378. flipper_format_free(flipper_format);
  379. instance->worker_running = false; // Because we have error states
  380. instance->state = local_state == SubBruteWorkerStateTx ? SubBruteWorkerStateReady :
  381. local_state;
  382. subbrute_worker_send_callback(instance);
  383. #ifdef FURI_DEBUG
  384. FURI_LOG_I(TAG, "Worker stop");
  385. #endif
  386. return 0;
  387. }
  388. uint8_t subbrute_worker_get_timeout(SubBruteWorker* instance) {
  389. return instance->tx_timeout_ms;
  390. }
  391. void subbrute_worker_timeout_inc(SubBruteWorker* instance) {
  392. if(instance->tx_timeout_ms < 255) {
  393. instance->tx_timeout_ms++;
  394. }
  395. }
  396. void subbrute_worker_timeout_dec(SubBruteWorker* instance) {
  397. if(instance->tx_timeout_ms > 0) {
  398. instance->tx_timeout_ms--;
  399. }
  400. }
  401. bool subbrute_worker_is_tx_allowed(SubBruteWorker* instance, uint32_t value) {
  402. furi_assert(instance);
  403. bool res = false;
  404. if(!subghz_devices_is_frequency_valid(instance->radio_device, value)) {
  405. } else {
  406. subghz_devices_set_frequency(instance->radio_device, value);
  407. res = subghz_devices_set_tx(instance->radio_device);
  408. subghz_devices_idle(instance->radio_device);
  409. }
  410. return res;
  411. }