mediatek-lte-baseband-re - GitLite

KO | EN

gitlite — search

#javascript #golang #go #android #machine-learning #deep-learning #macos #java #awesome #vue #awesome-list #pytorch #openai #open-source

mediatek-lte-baseband-re

(★ 220)

Notes and utilities for reverse engineering the MediaTek LTE baseband and its Coresonic DSP.

파일 탐색기

최종 버전 다운로드 (.zip)

- mediatek_dbginfo.ksy
- Notes.md
- - find_16bit_instructions.py
  - find_instructions.py
  - instruction_info.py
  - md32_dis.py
  - Notes.md
  - README.md
  - swap_endian.py
- .gitignore
- disasm.py
- extract_fw.py
- hd_be.sh
- hd_be_decimal.py
- hd_le.sh
- hd_le_decimal.sh
- Makefile
- mediatek_dbginfo_dsp.ksy
- mediatek_lte_dsp_firmware.ksy
- mediatek_lte_dsp_firmware_v2.ksy
- Notes.md
- README.md
- - bmo.py
  - gcpu.py
  - init.py
  - make_image.py
  - md32.py
  - openocd.py
  - parse_brom_log.py
  - parse_efuses.py
  - pcm.py
  - README.md
  - socemu.py
  - usbdl.py
- - boot.sh
  - dump-to-bin.py
  - dump.sh
  - dump_md_debug_registers.sh
  - dump_md_smem.sh
  - md_dump.sh
  - md_poke.sh
  - mt6735.cfg
  - Notes.md
  - openocd.cfg
  - poke.sh
  - README.md
  - sd-jtag.sh
  - start-android-test-settings.sh
  - start-engineer-mode.sh
- - dump
  - dump.sh
  - poke
  - poke.sh
  - README.md
- - mt8183_pcm_allinone.ksy
- mediatek_download_agent.ksy
- mediatek_preloader.ksy
- MT8183
COPYING.txt
Documents.md
General-Notes.adoc
README.md
Tasks.md

# 설치 가이드

1. 코드 내려받기

git clone https://github.com/cyrozap/mediatek-lte-baseband-re

깃허브에서 프로젝트 코드 전체를 내 컴퓨터로 내려받습니다.

cd mediatek-lte-baseband-re

방금 내려받은 프로젝트 폴더 안으로 이동합니다.

2. Make

보통 추천

사전 준비물

Git GitHub에서 프로젝트 코드를 내려받으려면 필요합니다.
Make Linux/macOS는 보통 기본 설치되어 있습니다. Windows는 별도 설치(예: MSYS2, WSL)가 필요합니다.

cd DSP

이 프로젝트의 관련 파일이 하위 폴더 안에 있어서, 먼저 그 폴더로 이동합니다.

make

생성된 빌드 설정을 바탕으로 실제 컴파일을 진행해 실행 파일을 만듭니다.

✅ 에러 없이 끝나면 성공입니다. 생성된 실행 파일을 직접 실행해보세요.

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# MediaTek LTE Baseband RE

## Introduction

MediaTek is a fabless semiconductor company that makes, among other
things, smartphone SoCs with built-in LTE modems. These SoCs interest me
for the following reasons:

- They're cheap.
- They're extremely popular.
- They're used in many inexpensive LTE smartphones.
- They primarily use off-the-shelf IP cores, which for the ARM cores means
  documentation is publicly available.
- Their Linux kernel sources are generally available, though not always
  buildable.
- While the BSPs for these SoCs usually support code signing/image
  verification/etc., most phones based on them either don't enable it or
  implement it incorrectly, enabling us to run our own code and build our
  own firmware.
- You can usually find their datasheets, TRMs, register manuals,
  functional specifications, and reference designs leaked online.
- Everyone else is interested in Qualcomm SoCs, so MediaTek SoCs are
  currently low-hanging fruit. :)

The LTE modem in these SoCs consists of two main components:

- A Cortex-R4 to handle the LTE protocol.
- A Coresonic DSP to hande the data-to-RF conversion.

The initial goals of this project are to reverse engineer the Coresonic
DSP, its "SIMT" instruction set, the interface between the Cortex-R4 and
the Coresonic DSP, and the interface between the Cortex-R4 and the SoC's
applications processor. Doing this will empower users to build custom
modems using inexpensive, off-the-shelf Android smartphones. Some examples
of what would be possible:

- Over-engineered walkie-talkie.
- Smartphone DECT handset.
- Cognitive radio in TV whitespace.
- Dongle-free smartphone digital TV receiver.
- Dongle-free smartphone SDR/spectrum analyzer.
- Free Software LTE modem.

This repository will track the notes I write and the tools I build to
do all of this.

## Current Progress

The DSP firmware can be decoded. See the [DSP](DSP) directory for some
scripts to do this and to read the notes on my findings.

My current task list is in [Tasks.md](Tasks.md).

## Additional Information

See the [General-Notes.adoc](General-Notes.adoc) file in this directory
for general information about MediaTek's LTE modems and SoCs.
Information on each subsystem can be found in the "Notes.md" file in the
directory for that subsystem.

The [Documents.md](Documents.md) file contains a list of research papers,
presentations, patents, and other documents that are or might be relevant
to this project.

## Chat

Join us in the `#postmarketos-lowlevel` channel on
[Matrix](https://matrix.to/#/#lowlevel:postmarketos.org) or
[OFTC IRC](https://webchat.oftc.net/?channels=postmarketos-lowlevel)
to discuss this and other low-level smartphone firmware projects.

## License

Except where otherwise stated:

* All software in this repository (e.g., the serial monitor and the scripts
  and tools to build it, tools for unpacking and generating firmware, tools
  for building documentation, etc.) is made available under the
  [GNU General Public License, version 3 or later][gpl].
* All copyrightable content that is not software (e.g., chip register and
  programming manuals, reverse engineering notes, this README file, etc.) is
  licensed under the
  [Creative Commons Attribution-ShareAlike 4.0 International License][cc-by-sa].

[gpl]: COPYING.txt
[cc-by-sa]: https://creativecommons.org/licenses/by-sa/4.0/