[mc1322x] Access to LQI

[Mariano Alvira]

On Thu, Jun 10, 2010 at 10:37:29PM +0100, Clive Stubbings wrote:
> Hi Mar,
>
> That didn't work. I'm guessing that the rom call isn't compatible with 
> your wireless code - or the address is wrong, or the call in the s/w 
> build I have is different from the one into ROm... or whatever..

Some of these rom calls need values in the ROM_vars area to be
initialized... 

> Not done any RE for a long time... Is there a dis listing that people are 
> working on somewhere? I'm presuming the ws-dis and mc..img are ram only.

No, not for the ROM. I have a file somewhere for reversing the
inject_seq call. Reversing the ROM is a world of pain. The libraries
are much easier.

Can you build a Freescale example that uses this call? If so, then I
would start by tracing through the ROM call in the debugger. That will
tell you the correct entry point and what (if any) parameters it has. 

I've been hoping that LQI, ED, and CCA would be pretty easy... but
that may have been too optimistic.

-Mar.