MattJackson
f07f8210c3
Fix variant B firmware upload: MODE SELECT not WRITE_BUFFER
B firmware upload () byte-level verification reveals:
- Step 1: MODE SELECT (0x55), NOT WRITE_BUFFER — sends 2496 bytes (0x9C0)
- Step 2: Check result == 2
- Step 3: READ_BUFFER mode=6 offset=0x3000 (16B firmware metadata)
- Step 4: WRITE_BUFFER mode=6 (16B from fw_write_data)
- Step 5: Vendor verify CDB (0xF1 opcode from blob)
- Step 6: do_unlock × 5 retries + 1 confirmation
Key differences from A:
- A uses WRITE_BUFFER (0x3B), B uses MODE SELECT (0x55)
- A sends 1888 bytes, B sends 2496 bytes
- B has extra READ metadata + WRITE 16B + vendor verify steps
- B retries unlock 5 times (A does 2)
Added profile fields: fw_write_data (16B), verify_cdb (10B) for B-only.
2026-04-08 20:40:37 -07:00
..
2026-04-08 08:27:13 -07:00
2026-04-07 20:36:26 -07:00
2026-04-08 20:40:37 -07:00
2026-04-07 20:29:44 -07:00
2026-04-07 15:49:53 -07:00
2026-04-08 20:15:25 -07:00
2026-04-08 20:15:25 -07:00
2026-04-07 21:21:18 -07:00
2026-04-07 16:14:55 -07:00
2026-04-07 16:54:30 -07:00
2026-04-07 21:21:18 -07:00
2026-04-08 15:46:42 -07:00
2026-04-07 15:36:05 -07:00
2026-04-08 20:40:37 -07:00
2026-04-07 12:12:24 -07:00
2026-04-08 15:46:42 -07:00