520838ce65
- app_ota.c: after END ok, wait until the RSP is consumed by the host (BLE e0005 read-out / UART TX done) plus 300ms grace before resetting, 2s timeout fallback; polled from the BLE schedule task (rwip_schedule must keep running for the ATT read to be processed) - main.c: app_ota_reset_poll() in the BLE schedule task loop - docs: ble_protocol.md 6.6 note, dev log section 43, AGENTS.md sync
71 lines
2.4 KiB
C
71 lines
2.4 KiB
C
/**
|
|
* @file app_ota.h
|
|
* @brief BLE OTA receiver: writes an incoming image into the opposite flash
|
|
* bank directly (lazy per-sector erase, only a 4-byte word staging
|
|
* buffer), verifies CRC32 and updates the bootloader's bootsetting
|
|
* record, then resets.
|
|
*
|
|
* Runs in the BLE schedule task context (invoked from app_ble_proto.c).
|
|
*/
|
|
#ifndef __APP_OTA_H__
|
|
#define __APP_OTA_H__
|
|
|
|
#ifdef __cplusplus
|
|
extern "C" {
|
|
#endif
|
|
|
|
#include <stdint.h>
|
|
|
|
/**
|
|
* @brief Handle one OTA frame (BLE_FRAME_OTA_BEGIN / OTA_DATA / OTA_END /
|
|
* OTA_ABORT). Sends OTA_RSP frames through the channel sink
|
|
* (app_ota_chan_rx) or, without a sink, app_ble_proto_send_frame().
|
|
*/
|
|
void app_ota_handle_frame(uint8_t type, uint8_t seq, const uint8_t* payload, uint16_t len);
|
|
|
|
/**
|
|
* @brief Abort any on-going OTA session (on BLE disconnect or fatal error).
|
|
*/
|
|
void app_ota_abort(void);
|
|
|
|
/**
|
|
* @brief Flash base of the bank this firmware is running from
|
|
* (CAIIC_APP1_BASE / CAIIC_APP2_BASE), or 0 when unknown.
|
|
*/
|
|
uint32_t app_ota_current_bank_base(void);
|
|
|
|
/* ------------------------------------------------------------------ */
|
|
/* Transport channels (ble_protocol.md §6.6): the engine is fed via */
|
|
/* app_ota_chan_rx(); RSP frames go to the channel's sink. */
|
|
/* ------------------------------------------------------------------ */
|
|
|
|
/** Response sink: receives one complete 0xCA-framed OTA_RSP. */
|
|
typedef void (*app_ota_rsp_sink_fn)(const uint8_t* frame, uint16_t len);
|
|
|
|
/** Generic channel byte input with an explicit sink. */
|
|
void app_ota_chan_rx(const uint8_t* data, uint16_t len, app_ota_rsp_sink_fn sink);
|
|
|
|
/** BLE OTA characteristic (...e0005): write = frame in, read = RSP out. */
|
|
void app_ota_chan_rx_ble(const uint8_t* data, uint16_t len);
|
|
const uint8_t* app_ota_chan_rsp_ble(uint16_t* out_len);
|
|
|
|
/** UART binary mode (CLI "ota"): one received byte in; RSP frames on TX. */
|
|
void app_ota_chan_rx_uart(uint8_t ch);
|
|
|
|
/** Drop the reassembler state (channel idle timeout / link loss). */
|
|
void app_ota_chan_idle(void);
|
|
|
|
/**
|
|
* @brief Poll the deferred post-OTA_END reset: after a successful OTA_END
|
|
* the device resets only once the END response has been consumed by
|
|
* the host (plus a short grace), with a timeout fallback. Call from
|
|
* the BLE schedule task loop.
|
|
*/
|
|
void app_ota_reset_poll(void);
|
|
|
|
#ifdef __cplusplus
|
|
}
|
|
#endif
|
|
|
|
#endif /* __APP_OTA_H__ */
|