|
|
|
|
@@ -306,7 +306,7 @@ static int smart_wait(uint8_t *data) {
|
|
|
|
|
return len;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
static int smart_response(uint8_t apduINS, uint8_t *data) {
|
|
|
|
|
static int smart_response(uint8_t *data) {
|
|
|
|
|
|
|
|
|
|
int datalen = smart_wait(data);
|
|
|
|
|
bool needGetData = false;
|
|
|
|
|
@@ -315,12 +315,6 @@ static int smart_response(uint8_t apduINS, uint8_t *data) {
|
|
|
|
|
goto out;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
if (datalen > 2 && data[0] != apduINS) {
|
|
|
|
|
PrintAndLogEx(ERR, "Card ACK error. len=0x%x data[0]=%02x", datalen, data[0]);
|
|
|
|
|
datalen = 0;
|
|
|
|
|
goto out;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
if ( data[datalen - 2] == 0x61 || data[datalen - 2] == 0x9F ) {
|
|
|
|
|
needGetData = true;
|
|
|
|
|
}
|
|
|
|
|
@@ -339,22 +333,26 @@ static int smart_response(uint8_t apduINS, uint8_t *data) {
|
|
|
|
|
if (datalen < 2 ) {
|
|
|
|
|
goto out;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
if (datalen > 2 && data[0] != ISO7816_GETSTATUS) {
|
|
|
|
|
PrintAndLogEx(ERR, "GetResponse ACK error. len=0x%x data[0]=%02x", len, data[0]);
|
|
|
|
|
datalen = 0;
|
|
|
|
|
goto out;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
if (datalen != len + 2 + 1) { // 2 - response, 1 - ACK
|
|
|
|
|
PrintAndLogEx(WARNING, "GetResponse wrong length. Must be: 0x%02x but: 0x%02x", len, datalen - 3);
|
|
|
|
|
// data wo ACK
|
|
|
|
|
if (datalen != len + 2) {
|
|
|
|
|
// data with ACK
|
|
|
|
|
if (datalen == len + 2 + 1) { // 2 - response, 1 - ACK
|
|
|
|
|
if (data[0] != ISO7816_GETSTATUS) {
|
|
|
|
|
PrintAndLogEx(ERR, "GetResponse ACK error. len=0x%x data[0]=%02x", len, data[0]);
|
|
|
|
|
datalen = 0;
|
|
|
|
|
goto out;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
datalen--;
|
|
|
|
|
memmove(data, &data[1], datalen);
|
|
|
|
|
} else {
|
|
|
|
|
// wrong length
|
|
|
|
|
PrintAndLogEx(WARNING, "GetResponse wrong length. Must be: 0x%02x but: 0x%02x", len, datalen - 3);
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
if (datalen > 2) {
|
|
|
|
|
datalen--;
|
|
|
|
|
memmove(data, &data[1], datalen);
|
|
|
|
|
}
|
|
|
|
|
out:
|
|
|
|
|
return datalen;
|
|
|
|
|
}
|
|
|
|
|
@@ -441,7 +439,7 @@ int CmdSmartRaw(const char *Cmd) {
|
|
|
|
|
if ( !buf )
|
|
|
|
|
return 1;
|
|
|
|
|
|
|
|
|
|
int len = smart_response(data[1], buf);
|
|
|
|
|
int len = smart_response(buf);
|
|
|
|
|
if ( len < 0 ) {
|
|
|
|
|
free(buf);
|
|
|
|
|
return 2;
|
|
|
|
|
@@ -453,7 +451,7 @@ int CmdSmartRaw(const char *Cmd) {
|
|
|
|
|
memcpy(c.d.asBytes, data, sizeof(data) );
|
|
|
|
|
clearCommandBuffer();
|
|
|
|
|
SendCommand(&c);
|
|
|
|
|
len = smart_response(data[1], buf);
|
|
|
|
|
len = smart_response(buf);
|
|
|
|
|
|
|
|
|
|
data[4] = 0;
|
|
|
|
|
}
|
|
|
|
|
@@ -473,15 +471,15 @@ int ExchangeAPDUSC(uint8_t *datain, int datainlen, bool activateCard, bool leave
|
|
|
|
|
smart_select(false);
|
|
|
|
|
printf("* APDU SC\n");
|
|
|
|
|
|
|
|
|
|
UsbCommand c = {CMD_SMART_RAW, {SC_RAW | SC_CONNECT, datainlen, 0}};
|
|
|
|
|
UsbCommand c = {CMD_SMART_RAW, {SC_RAW_T0, datainlen, 0}};
|
|
|
|
|
if (activateCard) {
|
|
|
|
|
c.arg[0] |= SC_SELECT;
|
|
|
|
|
c.arg[0] |= SC_SELECT | SC_CONNECT;
|
|
|
|
|
}
|
|
|
|
|
memcpy(c.d.asBytes, datain, datainlen);
|
|
|
|
|
clearCommandBuffer();
|
|
|
|
|
SendCommand(&c);
|
|
|
|
|
|
|
|
|
|
int len = smart_response(datain[1], dataout);
|
|
|
|
|
int len = smart_response(dataout);
|
|
|
|
|
|
|
|
|
|
if ( len < 0 ) {
|
|
|
|
|
return 2;
|
|
|
|
|
@@ -489,19 +487,16 @@ int ExchangeAPDUSC(uint8_t *datain, int datainlen, bool activateCard, bool leave
|
|
|
|
|
|
|
|
|
|
// retry
|
|
|
|
|
if (len > 1 && dataout[len - 2] == 0x6c && datainlen > 4) {
|
|
|
|
|
UsbCommand c2 = {CMD_SMART_RAW, {SC_RAW, datainlen, 0}};
|
|
|
|
|
memcpy(c2.d.asBytes, datain, datainlen);
|
|
|
|
|
UsbCommand c2 = {CMD_SMART_RAW, {SC_RAW_T0, datainlen, 0}};
|
|
|
|
|
memcpy(c2.d.asBytes, datain, 5);
|
|
|
|
|
|
|
|
|
|
int vlen = 5 + datain[4];
|
|
|
|
|
if (datainlen == vlen)
|
|
|
|
|
datainlen++;
|
|
|
|
|
|
|
|
|
|
c2.d.asBytes[vlen] = dataout[len - 1];
|
|
|
|
|
// transfer length via T=0
|
|
|
|
|
c2.d.asBytes[4] = dataout[len - 1];
|
|
|
|
|
|
|
|
|
|
clearCommandBuffer();
|
|
|
|
|
SendCommand(&c2);
|
|
|
|
|
|
|
|
|
|
len = smart_response(datain[1], dataout);
|
|
|
|
|
len = smart_response(dataout);
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
*dataoutlen = len;
|
|
|
|
|
@@ -822,7 +817,7 @@ int CmdSmartBruteforceSFI(const char *Cmd) {
|
|
|
|
|
clearCommandBuffer();
|
|
|
|
|
SendCommand(&c);
|
|
|
|
|
|
|
|
|
|
smart_response(data[1], buf);
|
|
|
|
|
smart_response(buf);
|
|
|
|
|
|
|
|
|
|
// if 0x6C
|
|
|
|
|
if ( buf[0] == 0x6C ) {
|
|
|
|
|
@@ -831,7 +826,7 @@ int CmdSmartBruteforceSFI(const char *Cmd) {
|
|
|
|
|
memcpy(c.d.asBytes, data, sizeof(data) );
|
|
|
|
|
clearCommandBuffer();
|
|
|
|
|
SendCommand(&c);
|
|
|
|
|
uint8_t len = smart_response(data[1], buf);
|
|
|
|
|
uint8_t len = smart_response(buf);
|
|
|
|
|
|
|
|
|
|
// TLV decoder
|
|
|
|
|
if (len > 4)
|
|
|
|
|
|