-
Notifications
You must be signed in to change notification settings - Fork 53
Firmware Releases Nordic
Djamil Elaidi edited this page Jul 27, 2021
·
32 revisions
Note: It may happen that we ship new PandwaRF with more recent FW versions than what is already deployed in the field. In the Android app, if you notice you have a "Current Nordic FW Version" higher than "Last Nordic FW Version", don't panic, there is no issue and no need to downgrade manually your PandwaRF. If needed your PandwaRF will be automatically upgraded during next FW OTA campaign.
Nordic BLE FW can be downloaded here.
Note: Nordic release 0.10.0 is the last release with public binaries available for manual download. Starting from 0.10.1, all Nordic FW update will be made only using the Android Application. Note that FW update using Android App was already the regular way of updating your PandwaRF, but because of Nordic FW update issue, we added the manual Nordic BLE FW update method. This issue is now fixed.
If you still can't update Nordic BLE FW, please pay attention to bonding warning messages displayed when updating. Please also have a look at Nordic FW update issue, it may solve a FW update issue. Please fill a defect or send us a log if anything fails.
- Bug Fix: Ensure that the CC1111 is not shutdown after sector TX when bluetooth is still connected
- Bug Fix: Remove sending redundant commands for Marauder
- Bug Fix: Ensure numPages is initialised to the proper value at the start of each capture
- Increase the duration of Advertising Fast to ensure better connectivity during short periods
- Fix of UART HW flow control after FW update
- Store/Load the USB settings in memory after power off/reset
- Update message version to V6 for MarauderReadStatusInfo
- Increase the duration of Advertising Fast to ensure better connectivity during short periods
- Fix of UART HW flow control after FW update
- Increase the duration of Advertising Fast to ensure better connectivity during short periods
- Fix of UART HW flow control after FW update
- Store/Load the USB settings in memory after power off/reset
- Advertising name not updated to default when reset using android app (Reset using empty name)
- Advertising name reset to default mapped to PB 4 on RogueGov variant. Removed from PB 3
- Bug Fix: Erasing default configuration before performing the initial configuration
- Bug fix: Using correct parameters to configure button long press in default mode
- Advertising name not updated to default when reset using android app (Reset using empty name)
- Bug Fix: Erasing default configuration before performing the initial configuration
- Bug fix: Using correct parameters to configure button long press in default mode
- Proper handling of numPagesIn variable
- Add new field 'Number of pages in sector' in android message for each sector info
- Handle last sector page number correctly to prevent overwrite of data
- Prevent unnecessary sector allocation, overwrite to store last page of previous capture, inc number of captures only when valid sector found
- Decrement number of captures each time a sector is erased else the number of captures increases beyond valid value
- Fix bug with Marauder Read Status Info
- Reconfiguring button 4 for Exit Stealth. Removing any other functionality with button 4
- fix autonomous Brute Force not restarting after reset
- Allow BLE advertizing disable only for Marauder Ultimate
- FW update issue fix: correct Nordic image safety-check
- TX: adjust inter-frame delay with duration of RLE compressed frame when it will be un-compressed by CC111
- reduce packet data size from 250 to 240 bytes
- SWA: add a delay before CMD_NIC_ENCODING_MODE to allow CC1111 process previous CMD_RF_SET_RXFILTERBW
- SPI memory: do not save more than 250 bytes from NIC recv message
- reduce default RF frame capture length from 250 to 240 to comply with max RfCat frame
- fix delay too short after CC1111 reset for CC1111 to be ready: wait 100ms instead of 10ms
- update ble_gollum_autonomous_rx_s to version 4 (addition of scanType)
- TX: fix delay between each UART transmission using incorrect datarate
- send RfCat RX Filter BW message after after CMD_RF_SEND_CONFIG
- fix Undefined behavior in byteArrayToHexString() due to p_output used as parameter and destination in sprintf()
- Set channel filter BW on Start Capture
- Add MARAUDER_CMD_SET_FREQ_FINDER_SCAN_MODE command to receive FreqFinder scan type parameter from Android
- Configure FreqFinder before RX
- Ignore enable and disable USB functions on Marauder builds (GOLLUM_USE_USB not defined on CC1111)
- Update payload for CMD_FREQFINDER_SET_FREQS to send scan type byte
- Create version TAG 3 with new byte indicating the scan type for FreqFinder before RX
- SPI memory: fix security register address mask
- Add support for DeBruijn byte encoding
- Fuel Gauge: adapt fuel gauge to support Rev F2 boards (500mAh battery)
- Fix sleep_mode_enter() function [Power OFF by App and Timer OK]
- fix RF amplifiers mode not saved into SPI memory
- SPI memory: fix wrong address used depending on memory IC used
- SPI: fix wrong address mask used for security registers
- increase UART RX buffer size to 4096, RAM usage: 21344 (debug), 20092 (release)
- disconnect BATT_STAT after detection of no battery present
- set default deviation to 41016 at init
- when erasing memory, write the Free sector bitmap Length according to FW flavor
- Mem: fix inverted logic in sector bitmap set status function
- update sector bitmap when sector is used/cleared
- handle new message MARAUDER_CMD_READ_SECTOR_BITMAP to read all sectors status in a bitmap
- Mem: add API to read sector bitmap from security registers
- Mem: add API to R/W/Clear sector bitmap area in Security registers
- SPI: add 8/16/32/64 bits functions to update Security registers
- optim: remove un-needed write of numCapture to SPI memory
- Save NIC_RECV frames even if received outside a 1s capture slot
- save data even if received outside 1s timer
- fix RfCat SYSTEM/SYSTEM_GOLLUM frame not sent on BLE link if RX is ongoing
- fix: on connect, do not reset CC1111 if autonomous is ongoing (BF/TX/RX)
- use stop all message to fix RX capture not stopping
- SPI: fix wrong address mask used for security registers
- increase UART RX buffer size to 4096, RAM usage: 21344 (debug), 20092 (release)
- disconnect BATT_STAT after detection of no battery present
- SPI: fix wrong address mask used for security registers
- increase UART RX buffer size to 4096, RAM usage: 21344 (debug), 20092 (release)
- disconnect BATT_STAT after detection of no battery present
- BLE connection: increase BLE throughput
- BLE connection: increase BLE throughput
- use empty sector finder to find next sector
- use structure tag versions when filling read_result
- add version tag to status info & sector info/data
- Send 1 MarauderMemoryCleared notification every 2x Block erase
- enable TX/RX RLE encoding for all data frames
- do not save RX data in SPI if 1s timer has elapsed
- start 1s timer on NIC_RECV_CAPTURE_STARTED and request remaining data on timeout
- create new CMD_RF_STOP_ALL to stop all RF by entering directly in MAC state IDLE
- update TX API to send RLE encoded data to CC1111
- UART: allow sending RF frames with null payload
- Rogue: create a new command message to setup the RX infinite mode
- Marauder: do not save RX captured data into SPI if data is all-0
- Bug fixes
- Rogue: SW3 button push: reset auto power off timer, alt. adv. name, auto status when clearing bonding info
- Rogue: Memory: fix possible buffer overflow when writing Alt. Adv. name to SPI memory
- Marauder: Put Blue LED back in the correct state after memory erase
- Rogue: Auto RX: do not send CMD_RF_SET_RXFILTERBW when starting Auto RX mode
- Rogue: removes useless specan stop cmd when rx autonomous stopped
- Rogue: TX infinite: make function independant of DeBruijn sequence length
- increase heap size from 2048 to 4096 bytes (Total RAM used: 17608)
- UART: Send data, but do not reset if failure to transmit data
- UART: force reset if failed to send RfCat control message
- UART: Do not transmit if UART TX FIFO cannot contain data
- UART: increase UART FIFOs to 4096 (TX) and 1024 (RX)
- Timers: fix NRF_ERROR_NO_MEM when starting timer by allowing up to 2 more timers than expected
- save CC1111 RF power amplifiers to SPI memory when receiving CMD_RF_SET_TXRX_POWER_AMP_MODE
- memory: add functions to R/W CC1111 RF power amplifiers to SPI memory
- RLE encoding: create function to set RX RLE mode
- Auto RX: Disable RLE Decoding when starting autonomous RX
- Auto RX: RLE Decoding: allow RLE encoded RfCat frames to be saved to SPI memory
- fix position of DATA_SIZE field in CMD_RF_SEND_CONFIG message
- Auto RX/TX: factorize AutoCapture structure init
- RX/TX autonomous: align autonomous structure on 32-bits to save memory
- DFU: Fix DFU update error when bonded
- UART: Fix possible deadloop caused by index on 8 bits while length on 16 bits
- fix: centralize and export all extern variables into corresponding module headers
- fix CC1111 FW version string overflow
- centralize non-static timers into ble_gollum_bsp module and header
- fix un-initialized frame length variable when processing response frame
- DIS: fix possible memcpy overflow if FW revision string is longer than allocated buffer
- Auto power off: disable auto power off timer if value is outside range [3..1440] mn
- Bus Config: add auto power off timer value in Bus config read
- change LED interval to 1s when advertising slow
- do not clear POST verdict when BUS config cmd RUN_SELF_TEST (0x02) is sent
- DIS: not send CMD_GET_FW_VERSION after CMD_GET_SERIAL_NUMBER response
- Rev.F: use LTC2941 accumulated charge at power-on
- avoid false battery 0% indication: do not set battery level to reserved value in SPI memory
- LTC2941: check if I2C is enabled before reading/writing LTC2941 registers
- Battery: shut down LTC2941 analog section before writing accumulated charge registers when battery is full
- Auto power off: only read timer value from SPI memory once at startup
- fix APP_RF RfCat messages wrongly intercepted by ble_gollum_rf_process()
- DeBruijn: fix sequence not transmitted due to infinite mode entered immediatly after last NIC_XMIT message
- DeBruijn: fix datarate not set when computing delay between UART data frames
- Add support for BLE buffer enqueuing when no TX application buffer is available
- Only recover by reset when not booting to avoid booting dead loop
- SPI Memory: Sector copy improvement
- BLE TX: Do not send data over BLE while disconnected
- RX: Do not crash when BLE enqueue buffer is full
- RX: fix wrong size check of BLE enqueue application buffer
- fix High Power consumption when power off with SW3 due to CC1111 already asleep
- fix High Power consumption: shutdown CC1111, then Nordic once CMD_PM_CC1111_WILL_SLEEP has arrived
- fix hardfault on USB unplug: increase size of queues holding timer operations
- Add support for timed Auto Power Off
- fix double declarations issues of variable m_battery_timer_id
- DeBruijn: fix infinite mode not exited after De Bruijn, preventing other RF data to be transmitted
- fix array overflow when converting byte array to hex string
- do not clear Fuel gauge accumulated charge register when Alert raised by LTC2941
- fix UART message not sent completely to CC1111
- add pass-through for messages NIC_RECV_RLE and NIC_ENCODING_MODE
- DeBruijn: remove RF parameters from DeBruin start message
- DeBruijn: add deviation parameter to DeBruijn start message
- add deviation parameter to ble_gollum_rfcat_trx_setup()
- DeBruijn: add delay between each UART TX data frame to CC1111
- DeBruijn: enter CC1111 Infinite mode before DeBruijn Brute Force
- DeBruijn: Turn on/off TX amplifiers before/after the transmission
- DeBruijn: Exit UART No-Ack mode on init
- DeBruijn: Add a delay to not saturate nRF UART when CC1111 is busy sending RF data and give time to CC1111 to output data to RF
- DeBruijn: save datarate before DeBruijn Brute Force
- DeBruijn: send num bits transmitted in DB BF status message
- DeBruijn: add UART No Ack mode where data received shall be discarded to not saturate the UART FIFO
- DeBruijn: delay DB process once setup Ack has been received
- DeBruijn: Send the status over BLE to Smartphone to inform it about progress
- DeBruijn: fix array out of bound in initialization
- do not awake or asleep CC1111 on USB enable or disable command from Nordic
- dequeue all Rfcat data on disconnect
- reset packet counter when packet reassembly failed
- set CC1111 FW version to UnknownVersion during FW update or if update fails
- free RfCat msg buffer if error in packet segmentation numbering
- CC1111 FW update: free RfCat msg if CCTL timeout
- blink green LED when a CC1111 FW update page is received
- save RX/TX amp status in SPI memory for the link to button
- fix cmd size endianness on 16 bits
- FW preparation for Rogue/Marauder and Meddler: FreqFinder/Reactive Jamming/Autonomous BF/DeBruijn
- enable UART when USB is plugged
- fix CMD_PARSE_EXEC_BUTTON command for replay
- change names of sleep command and awake information
- disable UART after command from CC1111 when it will sleep
- Only put a UART event handler in the scheduler queue if there is not already one present
- remove system off when advertising timeout occurs (fast to slow)
- add advertising fast for 30s before slow advertising
- save battery accumulated charge in flash memory to keep the value after a reset
- fix LED bug on the first long press of SW2 and SW3 buttons
- fix false short press detection during a long press on a button
- modify buttons behavior, no whitelist off neither clear bonding data in connection mode
- fix UART transmission to CC1111 on short button press to avoid high current consumption
- disable UART when USB is unplugged
- fix battery level bug at 100% on USB unplug by increasing delay to check USB_PRES
- disable UART on BLE_GAP_EVT_DISCONNECTED event
- reset CC1111 during BSP init
- fix BT_CC_RESET_CC1111 initialization when debugger is allowed
- fix enable and disable functions for I2C
- fix green LED initialization as output
- fix slow advertising interval to 1 second
- add leds test at startup
- Self test: add USB power status
- BUS config: add command to force Nordic SW sleep mode
- BUS config: add command to force Nordic SW reset
- add support for HW rev E4
- disconnect BATT_STAT if battery capacity is set to 0 in BUS Config
- add memory functions for handling battery capacity
- add SPI memory R/W/Update functions for security registers
- add battery capacity write in BUS config
- pass full data (4 bytes) to BUS config write handler
- add Adesto 32 Mbit AT25SF321 in supported SPI memory for Rev.E batch 4
- keep LTC2941 fuel gauge always on except in sleep mode
- disconnect input GPIOs that shall not awaken the chip from sleep mode
- set whitelist flags in BUS config status bitmap
- add led blinking fast when clearing bond or enabling whitelist bypass mode
- allow 2s press on SW3 to delete bonds and restart advertizing without whitelist
- change LED advertising duration for whitelist/slow
- enable advertising whitelist
- add BUS command to set HW revision
- Brute Force: add support for long symbols
- allow RF Power amps get message to go through BLE
- remove un-needed LED set clearing on BLE disconnect
- do not rise immediate USB enable GPIO to CC1111 when USB is enabled in BUS config (BLE has priority over USB)
- enable CC1111 USB at boot if USB power source detected
- remove duplicate CC1111 GPIO wakeup
- add param in USB disable function to not generate rising edge on BT_CC_GPIO_ENABLE_USB
- fix wrong advertizing name used, model name instead of adv. device name
- fix self test value not cleared before set, causing wrong USB enable status
- fix wrong returned length in SPI read function of alt device name
- Rogue fixes
- remove spurious BLE_GATTS_EVT_WRITE trace
- handle device name write event and update memory in scheduler context
- Rogue fixes
- do not reset chip upon failure to put an UART byte in scheduler
- enqueue RfCat packet when there is no TX application buffer and dequeue upon BLE_EVT_TX_COMPLETE event
- when USB plugged-in, shut down CC1111 only if no RF activity is ongoing
- do not power down fuel gauge
- do not shut down CC1111 if boot is ongoing
- use UART PM sleep message to shut down CC1111 on USB unplug or BLE disconnect
- remove CC_BT_GPIO_BL_RUNNING from pin calling the GPIOTE event handler
- change BT_CC_RESET_CC1111 GPIO pin to no pull
- make NVM write while SD is disabled
- avoid making SPI self tests that will fail or block due to previous SPI error
- remove duplicate CCTL FSM init when connected event received
- Marauder specific code
- Watchdog enabled
- fix wrong BUS config read value
- add support for Rev. DE & E
- Read the UART RXD HW register only if the RX FIFO is not full
- do not try to transmit UART data if TX FIFO is full
- Marauder specific code
- add Brute Force Setup Function Mask/Value message to supported message list
- change battery capacity and Q_LSB based on HW revision
- fix wrong max size for CC1111 FW version string
- use HW revision from SPI memory for DIS service
- regroup DIS data into single structure
- update HW revision from rev. D to rev. DE
- store HW revision in SPI memory if not already present
- add SPI memory commands for Security Registers
- update memory address macro to fit 16 Mbytes SPI memory
- fix R/W rolling code data in SPI memory
- report battery level immediatly after notification enabled
- add support for Brute Force Setup/Start SyncCodeTail message
- increase UART TX buffer size to 1024 bytes
- increase max number of events in the scheduler queue (20 to 40)
- Initial release
Questions or need help? Get in touch or open an Issue!
Project Information
- PandwaRF Home
- General Overview
- Technical Overview
- Possible Applications
- Development Status
- Requirements
PandwaRF Android Application (Normal Mode)
- Quick Start
- Navigation
- Navigation on Tablet
- Android Permissions
- Activity states
- Kaiju account connection
- Kaiju delete account
- Scan
- Bus Service
- Rx/Tx
- Kaiju Analysis
- Rolling code analysis & generation
- Rx Data Rate Measurement
- Spectrum Analyzer
- RF Power Amplifiers
- RF Brute Force
- RF Brute Force Tutorial
- RF Brute Force Session Import Tutorial
- RF Brute Force De Bruijn
- Protocols
- Jamming
- JavaScript
- FW Update
- Dev Mode
- USB Connection
- Pairing/Bonding
- Keeloq Secure Decrypt
- Get PandwaRF Gov App
PandwaRF Android Application (Dev Mode)
- BLE Perf measurement
- CC1111 RF registers direct access
- BLE Errors
- Bus Service Extended
- BLE Parameters
Marauder Android Application
iOS Application
Linux
Hardware
- Architecture
- Power Management
- Buttons
- LEDs Indication States
- Schematics
- Programming
- Battery
- Antennas
- PandwaRF Bare Settings
- FW releases Nordic
- FW releases CC1111
For developers
- Scripting with JavaScript
- JavaScript Functions Mapping
- Scripting with Python
- BLE Services & Characteristics
- CC1111 RfCat Commands
- PandwaRF Android SDK
- PandwaRF Android API
- RX Data Post Rest API
- Software and available applications
Support
- User Guides
- FAQ
- Tested Devices
- Known Issues
- BLE connection issues
- How to clear secure pairing
- How to report an issue
- PandwaRF test procedure
- Recovery mode
- PandwaRF Device Bounty
- Product return information
- Discord Server
- Forum (legacy)
- Chat (legacy)
- Privacy Policy
- Terms & Conditions
Gimme moar!