seemoo-lab / frankenstein

Broadcom and Cypress firmware emulation for fuzzing and further full-stack debugging
Apache License 2.0
428 stars 65 forks source link

some questions about the project #9

Open 3em0 opened 2 years ago

3em0 commented 2 years ago

Hi, you are doing a good job! However, I have some questions. what's the relationship between the Ble Data header and the wib_rx_status/wib_rx_log in the code?

jiska2342 commented 2 years ago

wib_rx_status and wib_rx_log are MMIO to registers of the BLE modem. Since this project is based on reverse engineering, most of it relies on using registers similarly to the original firmware or analyzing register contents during runtime.

According to documentation Malte, who spent some time on reversing this firmware, the register meanings are as follows:

image

Hope that helps in whatever you're trying to do with the modem :)

Wi1L-Y commented 2 years ago

Sorry to bother you, what's the relationship between the ACL Data header and the pkt_hdr_status/pkt_hdr_log in the code ? Is it the same as BLE data hdr? thank you !