Opened 5 years ago

Last modified 5 months ago

#4601 new defect

CW 000000 on 0963 / 0960 from card in card reader

Reported by: johnjoes58 Owned by:
Priority: Please fill in Component: Protocol - CCCam
Severity: high Keywords:
Cc: Sensitive: no

Description

Revision

<Please fill in>

Issue Description

<Please fill in>

When the issue occurs

<on certain transponders screen is there black>

How the issue is reproducible

<Please fill in>

<Don't forget to ATTACH (NOT post here as text) a log file of oscam in debug mode (start oscam with -d255) and to remove the brackets around the fields! Otherwise, your ticket will be closed as you seem to be unable to read.>

Change History (5)

comment:1 by johnjoes58, 5 years ago


Last edited 5 years ago by johnjoes58 (previous) (diff)

comment:2 by johnjoes58, 5 years ago

2017/03/31 17:09:11 30EC798F r (reader) Homecard2 [videoguard2] classD3 ins54: no cw --> Card appears in error
2017/03/31 17:09:11 30EC798F r (reader) Homecard2 [videoguard2] classD3 ins54: no cw --> Tier expired

comment:3 by johnjoes58, 5 years ago

needs to insert this patch , but where in NDs file?

if(er->ecm[5] == 0xB0 && er->ecm[6] == 0x01 )
{
memcpy(tbuff, tbuff, sizeof(tbuff - 4 ));
}

and code:

1:
2:
3:
4:
5:
6:
7:
8:
9:
10:
11:
12:
13:
14:


just an example!
uint8_t icam_pos;
uint8_t icam_command[5];
uint8_t *icam_reaply;
memcpy(&icam_pos, ecm[4], 1);
memcpy(icam_command, '\x48', 1);
memcpy(icam_command+1, ecm+icam_pos, 4);
...
function_send_icam_command(icam_command);
...
uint8_t *icam_hex_dump = function_read_reaply_from_card_after_icam_command(icam_reaply);
...

In short, you need to extract (memcpy) icam 4 bytes from the end of the ecm, append one byte first to the icam_command (0x4cool so it looks like 48xxXXxxXX (total 5 bytes), and send it to the card till after you receive ecm, than you need to read reaply from the card (I think reaply from the card will be excatly 0xe4 bytes len as we seen it in our tread from few ecms), than post it here hope somebody figure out what is need further. I think its maybe an pickup table or maybe an extra pairing instructions, nobody know without getting that reaply from card smile

comment:4 by aadouz, 17 months ago

Component: ReaderProtocol - CCCam
Priority: criticalPlease fill in

in reply to:  3 comment:5 by thiagodp, 5 months ago

Replying to johnjoes58:

needs to insert this patch , but where in NDs file?

if(er->ecm[5] == 0xB0 && er->ecm[6] == 0x01 )
{
memcpy(tbuff, tbuff, sizeof(tbuff - 4 ));
}

and code:

1:
2:
3:
4:
5:
6:
7:
8:
9:
10:
11:
12:
13:
14:


just an example!
uint8_t icam_pos;
uint8_t icam_command[5];
uint8_t *icam_reaply;
memcpy(&icam_pos, ecm[4], 1);
memcpy(icam_command, '\x48', 1);
memcpy(icam_command+1, ecm+icam_pos, 4);
...
function_send_icam_command(icam_command);
...
uint8_t *icam_hex_dump = function_read_reaply_from_card_after_icam_command(icam_reaply);
...

In short, you need to extract (memcpy) icam 4 bytes from the end of the ecm, append one byte first to the icam_command (0x4cool so it looks like 48xxXXxxXX (total 5 bytes), and send it to the card till after you receive ecm, than you need to read reaply from the card (I think reaply from the card will be excatly 0xe4 bytes len as we seen it in our tread from few ecms), than post it here hope somebody figure out what is need further. I think its maybe an pickup table or maybe an extra pairing instructions, nobody know without getting that reaply from card smile

Hi best regards!
You have a new idea to how know decode ICAM ?

Note: See TracTickets for help on using tickets.