mikecarper
9816e21834
Bind Companion replies to request transports, make dual-CDC USB sessions nonblocking and reconnect-safe, and harden nRF52 watchdog/OTA storage paths. Fix T096 button debounce, display wake, sleep races, and the compact message layout; add exact WisBlock OTA profiles plus expanded native/static/HIL documentation.
92 lines
2.8 KiB
C++
92 lines
2.8 KiB
C++
#pragma once
|
|
|
|
#include <stddef.h>
|
|
#include <stdint.h>
|
|
#include "UsbAsciiBinarySwitch.h"
|
|
|
|
namespace mesh {
|
|
namespace companion {
|
|
|
|
static constexpr uint8_t CMD_EXEC_LOCAL_OTA_CONTROL = 0x4A;
|
|
static constexpr uint8_t CMD_BLE_MOTA_SOURCE = 0x4B;
|
|
|
|
enum class MotaSourceAction : uint8_t {
|
|
Status = 0,
|
|
Start = 1,
|
|
Stop = 2,
|
|
};
|
|
|
|
static constexpr uint8_t MOTA_SOURCE_FLAG_CHANNEL_READY = 0x01;
|
|
static constexpr uint8_t MOTA_SOURCE_FLAG_ATTACHED = 0x02;
|
|
static constexpr uint8_t MOTA_SOURCE_FLAG_ANOTHER_LINK_ACTIVE = 0x04;
|
|
|
|
struct MotaSourceStatus {
|
|
bool channel_ready = false;
|
|
bool attached = false;
|
|
bool another_link_active = false;
|
|
uint16_t offered = 0;
|
|
uint16_t advertised = 0;
|
|
uint32_t packets_sent = 0;
|
|
};
|
|
|
|
class MotaSourceControl {
|
|
public:
|
|
virtual ~MotaSourceControl() = default;
|
|
virtual bool start(char* reply, size_t reply_size) = 0;
|
|
virtual bool stop(char* reply, size_t reply_size) = 0;
|
|
virtual MotaSourceStatus status() const = 0;
|
|
};
|
|
|
|
// Bluetooth may expose only the local commands needed to coordinate a LoRa
|
|
// mOTA session. The command arrives as one length-delimited Companion frame,
|
|
// so reject embedded NUL/control bytes and USB folder ownership commands.
|
|
inline bool isBleOtaControlCommandAllowed(const uint8_t* command,
|
|
size_t length) {
|
|
if (command == nullptr || length == 0 || length > 174) return false;
|
|
for (size_t i = 0; i < length; ++i) {
|
|
if (command[i] < 0x20 || command[i] > 0x7E) return false;
|
|
switch (command[i]) {
|
|
case ';':
|
|
case '&':
|
|
case '|':
|
|
case '`':
|
|
case '$':
|
|
case '\\':
|
|
case '\'':
|
|
case '"':
|
|
return false;
|
|
default:
|
|
break;
|
|
}
|
|
}
|
|
|
|
const auto exact = [command, length](const char* text, size_t text_length) {
|
|
if (length != text_length) return false;
|
|
for (size_t i = 0; i < length; ++i) {
|
|
if (command[i] != static_cast<uint8_t>(text[i])) return false;
|
|
}
|
|
return true;
|
|
};
|
|
const auto token = [command, length](const char* text, size_t text_length) {
|
|
if (length < text_length) return false;
|
|
for (size_t i = 0; i < text_length; ++i) {
|
|
if (command[i] != static_cast<uint8_t>(text[i])) return false;
|
|
}
|
|
return length == text_length || command[text_length] == ' ';
|
|
};
|
|
|
|
if (exact("normalradio", 11)) return true;
|
|
// Bare `tempradio` is a read-only status query. Keep the parameterized
|
|
// form strict, but let a BLE controller prove that cleanup completed.
|
|
if (exact("tempradio", 9)) return true;
|
|
if (token("tempradio", 9)) return length > 10;
|
|
if (!token("ota", 3)) return false;
|
|
if (mesh::isUsbMotaOwnerTransitionCommand(
|
|
reinterpret_cast<const char*>(command), length)) return false;
|
|
if (token("ota folder", 10)) return false;
|
|
return true;
|
|
}
|
|
|
|
} // namespace companion
|
|
} // namespace mesh
|