Opened 7 years ago
Closed 18 months ago
#4601 closed defect (fixed)
CW 000000 on 0963 / 0960 from card in card reader
Reported by: | johnjoes58 | Owned by: | |
---|---|---|---|
Priority: | Please fill in | Component: | Protocol - CCCam |
Severity: | high | Keywords: | |
Cc: | Sensitive: | no |
Description
Revision
<Please fill in>
Issue Description
<Please fill in>
When the issue occurs
<on certain transponders screen is there black>
How the issue is reproducible
<Please fill in>
<Don't forget to ATTACH (NOT post here as text) a log file of oscam in debug mode (start oscam with -d255) and to remove the brackets around the fields! Otherwise, your ticket will be closed as you seem to be unable to read.>
Change History (6)
comment:2 by , 7 years ago
2017/03/31 17:09:11 30EC798F r (reader) Homecard2 [videoguard2] classD3 ins54: no cw --> Card appears in error
2017/03/31 17:09:11 30EC798F r (reader) Homecard2 [videoguard2] classD3 ins54: no cw --> Tier expired
follow-up: 5 comment:3 by , 7 years ago
needs to insert this patch , but where in NDs file?
if(er->ecm[5] == 0xB0 && er->ecm[6] == 0x01 )
{
memcpy(tbuff, tbuff, sizeof(tbuff - 4 ));
}
and code:
1:
2:
3:
4:
5:
6:
7:
8:
9:
10:
11:
12:
13:
14:
just an example!
uint8_t icam_pos;
uint8_t icam_command[5];
uint8_t *icam_reaply;
memcpy(&icam_pos, ecm[4], 1);
memcpy(icam_command, '\x48', 1);
memcpy(icam_command+1, ecm+icam_pos, 4);
...
function_send_icam_command(icam_command);
...
uint8_t *icam_hex_dump = function_read_reaply_from_card_after_icam_command(icam_reaply);
...
In short, you need to extract (memcpy) icam 4 bytes from the end of the ecm, append one byte first to the icam_command (0x4cool so it looks like 48xxXXxxXX (total 5 bytes), and send it to the card till after you receive ecm, than you need to read reaply from the card (I think reaply from the card will be excatly 0xe4 bytes len as we seen it in our tread from few ecms), than post it here hope somebody figure out what is need further. I think its maybe an pickup table or maybe an extra pairing instructions, nobody know without getting that reaply from card smile
comment:4 by , 4 years ago
Component: | Reader → Protocol - CCCam |
---|---|
Priority: | critical → Please fill in |
comment:5 by , 3 years ago
Replying to johnjoes58:
needs to insert this patch , but where in NDs file?
if(er->ecm[5] == 0xB0 && er->ecm[6] == 0x01 )
{
memcpy(tbuff, tbuff, sizeof(tbuff - 4 ));
}
and code:
1:
2:
3:
4:
5:
6:
7:
8:
9:
10:
11:
12:
13:
14:
just an example!
uint8_t icam_pos;
uint8_t icam_command[5];
uint8_t *icam_reaply;
memcpy(&icam_pos, ecm[4], 1);
memcpy(icam_command, '\x48', 1);
memcpy(icam_command+1, ecm+icam_pos, 4);
...
function_send_icam_command(icam_command);
...
uint8_t *icam_hex_dump = function_read_reaply_from_card_after_icam_command(icam_reaply);
...
In short, you need to extract (memcpy) icam 4 bytes from the end of the ecm, append one byte first to the icam_command (0x4cool so it looks like 48xxXXxxXX (total 5 bytes), and send it to the card till after you receive ecm, than you need to read reaply from the card (I think reaply from the card will be excatly 0xe4 bytes len as we seen it in our tread from few ecms), than post it here hope somebody figure out what is need further. I think its maybe an pickup table or maybe an extra pairing instructions, nobody know without getting that reaply from card smile
Hi best regards!
You have a new idea to how know decode ICAM ?
comment:6 by , 18 months ago
Resolution: | → fixed |
---|---|
Status: | new → closed |