pyMBoot is an Open Source python based library for configuring and upgrading the firmware in NXP Microcontrolers via
embedded MCUBOOT
(MCU Bootloader). Detailed description of MCUBOOT / KBOOT
key features and functionality is located here.
This project is still in developing phase. Please, test it and report founded issues.
- Python >3.6 - The interpreter for Python programing language
- Click - Python package for creating beautiful command line interface.
- bincopy - Python package for parsing S-Record, Intel HEX and TI-TXT files.
- easy_enum - User friendly implementation of documented Enum type for Python language.
- PyUSB - Python package to access USB devices in Linux OS.
- PyWinUSB - Python package that simplifies USB-HID communications on Windows OS.
- pyserial - Python package for communication over Serial port in Linux and Windows OS.
$ pip install mboot
To install the latest version from master branch execute in shell following command:
$ pip install -U https://github.com/molejar/pyMBoot/archive/master.zip
In case of development, install it from cloned sources:
$ git clone https://github.com/molejar/pyMBoot.git
$ cd pyMBoot
$ pip install -U -e .
NOTE: You may run into a permissions issues running these commands. Here are a few options how to fix it:
- Run with
sudo
to install pyMBoot and dependencies globally - Specify the
--user
option to install locally into your home directory (export "~/.local/bin" into PATH variable if haven't). - Run the command in a virtualenv local to a specific project working set.
For running
mboot
module or CLI without root privileges in Linux OS copy following udev rules 90-imx-sdp.rules into/etc/udev/rules.d
directory and reload it with command:sudo udevadm control --reload-rules
.
The API of mboot
module is intuitive and fully reflecting the functionality described in reference manual of any
supported device. It's basic usage is presented in following example.
import mboot
devices = mboot.scan_usb()
if devices:
mb = mboot.McuBoot(devices[0])
mb.open()
# read 100 bytes from address 0
data = mb.read_memory(0, 100)
if data is None:
print(mb.status_info)
mb.close()
exit()
# other commands ...
mb.close()
McuBoot
class is supporting with
statement what is eliminating the explicit calls of open
and close
methods. The
code then looks more cleaner as you can see in following example.
from mboot import scan_usb, McuBoot
devices = scan_usb()
if devices:
with McuBoot(devices[0]) as mb:
# read 100 bytes from address 0
data = mb.read_memory(0, 100)
if data is None:
print(mb.status_info)
exit()
# other commands ...
If you call
reset()
command insidewith
block, the device is automatically reopened. You can skip this with explicit argumentreset(reopen=False)
By default is command error propagated by return value and must be processed individually for every command. In many use-cases is code execution interrupted if any command finish with error. Therefore you have the option to enable the exception also for command error. The code is then much more readable as you can see in flowing example.
from mboot import scan_usb, McuBoot, McuBootError
devices = scan_usb()
if devices:
try:
with McuBoot(devices[0], True) as mb:
# read 100 bytes from address 0
data = mb.read_memory(0, 100)
# other commands ...
except McuBootError as e:
print(str(e))
mboot
module is implementing also logging functionality for easy debugging all communication interfaces. To get it
working you need only import logging
module and set the logging level (DEBUG
or INFO
) with following line of code:
logging.basicConfig(level=logging.DEBUG)
import logging
logging.basicConfig(level=logging.DEBUG)
The example of terminal output with enabled logging functionality:
DEBUG:MBOOT:USB: Open Interface
INFO:MBOOT:CMD: ReadMemory(address=0x00000000, length=100, mem_id=0)
DEBUG:MBOOT:TX-PACKET: Tag=ReadMemory, Flags=0x00, p0=0x00000000, p1=0x00000064, p2=0x00000000
DEBUG:MBOOT:USB:OUT[64]: 01 00 20 00 03 00 00 03 00 00 00 00 64 00 00 00 00 00 00 00 00 00 00 00 00 ...
DEBUG:MBOOT:USB:IN [36]: 03 00 0C 00 A3 01 00 02 00 00 00 00 64 00 00 00 00 00 00 00 00 00 00 00 00 ...
INFO:MBOOT:RX-PACKET: Tag=ReadMemoryResponse, Status=Success, Length=100
DEBUG:MBOOT:USB:IN [36]: 04 00 20 00 00 60 00 20 C1 00 00 00 0D 85 00 00 09 01 00 00 00 00 00 00 00 ...
DEBUG:MBOOT:USB:IN [36]: 04 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 09 01 00 00 00 00 00 00 00 ...
DEBUG:MBOOT:USB:IN [36]: 04 00 20 00 09 01 00 00 09 01 00 00 09 01 00 00 09 01 00 00 09 01 00 00 09 ...
DEBUG:MBOOT:USB:IN [36]: 04 00 04 00 09 01 00 00 09 01 00 00 09 01 00 00 09 01 00 00 09 01 00 00 09 ...
DEBUG:MBOOT:USB:IN [36]: 03 00 0C 00 A0 00 00 02 00 00 00 00 03 00 00 00 09 01 00 00 09 01 00 00 09 ...
DEBUG:MBOOT:RX-PACKET: Tag=GenericResponse, Status=Success, Cmd=ReadMemory
INFO:MBOOT:CMD: Successfully Received 100 from 100 Bytes
DEBUG:MBOOT:USB: Close Interface
The mboot
module is distributed with command-line utility, which demonstrate the complete functionality of this library
and can be used as replacement of blhos
tool. If you write mboot
into shell and click enter, then you get the description
of its usage. For getting the help of individual commands just use mboot <command name> -?
.
$ mboot --help
Usage: mboot [OPTIONS] COMMAND [ARGS]...
NXP MCU Bootloader Command Line Interface, version: 0.3.0
NOTE: Development version, be carefully with it usage !
Options:
-t, --target TEXT Select target MKL27, LPC55, ... [optional]
-d, --debug INTEGER RANGE Debug level: 0-off, 1-info, 2-debug
-v, --version Show the version and exit.
-?, --help Show this message and exit.
Commands:
call Call code from specified address
efuse Read/Write eFuse from MCU
erase Erase MCU internal or external memory
execute Execute code from specified address
fill Fill MCU memory with specified pattern
info Get MCU info (mboot properties)
keyblob Generate the Blob for given DEK Key
kp-enroll Key provisioning: Enroll
kp-gen-key Key provisioning: Generate Intrinsic Key
kp-read-kstore Key provisioning: Read the key from key store area
kp-read-nvm Key provisioning: Read the key from nonvolatile memory
kp-user-key Key provisioning: Send the user key to a bootloader
kp-write-kstore Key provisioning: Write the key into key store area
kp-write-nvm Key provisioning: Write the key into nonvolatile memory
mconf Configure external memory
mlist Get list of available memories
otp Read/Write internal OTP segment
read Read data from MCU internal or external memory
reset Reset MCU
resource Flash read resource
sbfile Receive SB file
unlock Unlock MCU
update Copy backup app from address to main app region
write Write data into MCU internal or external memory
If USB device is not in known devices list, then use
-t or --target
argument and directly specify the device VID:PID. Example: -t 0x15A2:0x0073
Read bootloader properties from connected MCU.
$ mboot info
DEVICE: Kinetis Bootloader (0x15A2, 0x0073)
CurrentVersion: K1.0.0
AvailablePeripherals:
- UART
- I2C-Slave
- SPI-Slave
- USB-HID
FlashStartAddress: 0x00000000
FlashSize: 256.0 kiB
FlashSectorSize: 1.0 kiB
FlashBlockCount: 2
AvailableCommands:
- FlashEraseAll
- FlashEraseRegion
- ReadMemory
- FillMemory
- FlashSecurityDisable
- ReceiveSBFile
- Call
- Reset
- SetProperty
VerifyWrites: ON
MaxPacketSize: 32 B
ReservedRegions:
- 0x1FFFF800 - 0x20000687, 3.6 kiB
ValidateRegions: ON
RamStartAddress: 0x1FFFE000
RamSize: 32.0 kiB
SystemDeviceIdent: 0x23160D82
FlashSecurityState: Unlocked
Get list of available memories (internal and external)
$ mboot info
DEVICE: Kinetis Bootloader (0x15A2, 0x0073)
Internal Flash:
0) 0x00000000 - 0x00040000, Size: 256.0 kiB, Sector Size: 1.0 kiB
Internal Ram:
0) 0x1FFFE000 - 0x20006000, Size: 32.0 kiB
Read data from MCU memory and store it into file in binary (.bin), intel-hex (.hex, .ihex) or s-record (.srec, *.s19) format. If output file is not specified, the data are dumped into stdout in readable format.
- -c, --compress - Compress dump output. (default: False)
- -f, --file - Output file name with extension: *.bin, *.hex, *.ihex, *.srec or *.s19
- -?, --help - Show help message and exit.
$ mboot read 0 200
Reading from MCU memory, please wait !
ADDRESS | 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F | 0123456789ABCDEF
-----------------------------------------------------------------------------
00000000 | 00 60 00 20 C1 00 00 00 D9 08 00 00 09 01 00 00 | .`. ............
00000010 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................
00000020 | 00 00 00 00 00 00 00 00 00 00 00 00 09 01 00 00 | ................
00000030 | 00 00 00 00 00 00 00 00 09 01 00 00 09 01 00 00 | ................
00000040 | 09 01 00 00 09 01 00 00 09 01 00 00 09 01 00 00 | ................
00000050 | 09 01 00 00 09 01 00 00 09 01 00 00 09 01 00 00 | ................
00000060 | 09 01 00 00 09 01 00 00 09 01 00 00 09 01 00 00 | ................
00000070 | 09 01 00 00 09 01 00 00 09 01 00 00 09 01 00 00 | ................
00000080 | 09 01 00 00 09 01 00 00 09 01 00 00 09 01 00 00 | ................
00000090 | 09 01 00 00 09 01 00 00 09 01 00 00 09 01 00 00 | ................
000000A0 | 09 01 00 00 09 01 00 00 09 01 00 00 09 01 00 00 | ................
000000B0 | 09 01 00 00 09 01 00 00 09 01 00 00 09 01 00 00 | ................
000000C0 | 0A 49 0B 4A 0B 4B 9B 1A | .I.J.K..
-----------------------------------------------------------------------------
Write data from attached FILE into MCU memory.
- -a, --address - Start Address. (default: 0)
- -o, --offset - Offset of input data. (default: 0)
- -?, --help - Show help message and exit.
$ mboot write blink.srec
Wrote Successfully.
Erase MCU memory from specified address and length or complete chip.
- -m, --mass - Erase complete MCU memory.
- -a, --address - Start Address.
- -l, --length - Count of bytes aligned to flash block size.
- -?, --help - Show help message and exit.
$ mboot erase -m
Chip Erased Successfully.
Unlock MCU memory.
- -k, --key - Use backdoor key as ASCII = S:123...8 or HEX = X:010203...08
- -?, --help - Show help message and exit.
$ mboot unlock
Chip Unlocked Successfully.
Fill MCU memory with specified pattern
- -p, --pattern - Pattern format (default: 0xFFFFFFFF).
- -?, --help - Show help message and exit.
$ mboot fill -p 0x11111111 0x1FFFE000 10
Filled Successfully.
MCU SW reset
$ mboot reset
- Implement support for UART interface