Hacking Fusee Gelee with Raspberry Pi 3

[ShroomKing]

Can you explain how to apply / install the patch?

you just recompile your usb driver with the changes needed and use that as your current driver.

 

[kombos]

Would it be possible to get a Teensy++ to 2.0 work?

Well... probably. If you bitbang usb communication protocol ?
however it might not be fast enough

--------------------- MERGED ---------------------------

Aren't those sodimm though? I wouldn't know how to use one.

Thats a regular RPI, just small one. Doesn't have any ports but everything is broken on pin connector ;-) so a a little bit of soldering would be required ;-)

 

[d4mation]

If there's a working solution made for the Pi Zero that'd be amazing. I've had one for a year or so and have never found a good project for it. Would recompiling the USB Driver with the patch be all that it takes? I can't find anything that says it supports USB 3.

 

[ShroomKing]

because it doesn't.

yeah, you just need the right drivers. usb 2 is enough to run f-g, it just won't work with stock drivers.

 

[kombos]

because it doesn't.

yeah, you just need the right drivers. usb 2 is enough to run f-g, it just won't work with stock drivers.

AFAIK not every controller supports xhci, however one in RPI0 should support it.

 

[ShroomKing]

I mean, there are several pi0 models out there, the ones with an xhci usb controller(haven't seen one of those yet) don't need custom drivers.

The ones that just have ehci(most pi0's i know of) need them.

 

[DarkMelman]

There is a PI3 in the same form factor as PI0, its called CM3 or Raspberry PI Computing Module 3

But out of the box only with so-dimm contacts...

Hi,

i have successfully used a Raspberry Pi 3 with Ubuntu Mate for Fusee Gelee!!!

Setup like Ubuntu

Tadaaa!!!

(Now i will setup a button (for example Pimoroni button-shim) to run fusee gelee on raspberry.)
Then, its no pc / Mac / vm or monitor neccessary to run the exploit :-))))

Here is my first try to run the exploit when the switch in RCM is connected to the Pi 3:

https://github.com/Darkmelman/udev_rule_fusee_gelee_pi3

 

[smf]

what the hell?! a pi 3 clearly has xhci. And a pi zero works just fine, too, just gotta use a ehci kernel with having certain restrictions removed.(look at f0f's example ehci patch to see what needs to be removed)

Have you actually got it running on a pi zero? Is there a bootimage uploaded anywhere to try?

 

[ShroomKing]

A friend of mine has, i set up his pi with it yesterday.

Is there a bootimage uploaded anywhere to try?

uuuh, not that i know of. I don't know why you would need that, though, just use a distro you like, look up the usb2/ehci driver source and recompile the ehci driver with f0f's changes.

Ask on the Reswitched discord if you need help, someone should be able help you.

 

[DarkMelman]

Hi,

i have successfully used a Raspberry Pi 3 with Ubuntu Mate for Fusee Gelee!!!

Setup like Ubuntu

Tadaaa!!!

(Now i will setup a button (for example Pimoroni button-shim) to run fusee gelee on raspberry.)
Then, its no pc / Mac / vm or monitor neccessary to run the exploit :-))))

UPDATE:

Here is my first try to run the exploit when the switch in RCM is connected to the Pi 3:

https://github.com/Darkmelman/udev_rule_fusee_gelee_pi3

Note:

to get idVendor and idProduct, run lsusb after connect the switch in RCM mode

UPDATE 2:

Errors corrected on GitHub and idVendor and idProduct added!

Its working fine! ;-))

Enter RCM mode and 3 seconds later fusee runs!

UPDATE 3:

Patched the kernel and now everything is ru running on a pi zero w, and thanks udev, automated ;-))

 

[Deleted User]

UPDATE 3:

Patched the kernel and now everything is ru running on a pi zero w, and thanks udev, automated ;-))

how did you patch the kernel got issues with ehci

 

[smf]

uuuh, not that i know of. I don't know why you would need that, though, just use a distro you like, look up the usb2/ehci driver source and recompile the ehci driver with f0f's changes.

I don't have a distro I like, I have hated all *ix systems for 20 years. It seems like a whole lot of duplication for everyone to go through the hassle of customising and building. It would be cool if someone shared a minimal distro that just boots up and automates the exploit.

 

[DarkMelman]

how did you patch the kernel got issues with ehci

Hi,

https://www.raspberrypi.org/documentation/linux/kernel/patching.md


you need the .patch file from fail0verflows GitHub...(linux-ehci-enable-large-ctl-xfers.patch)

Then this command:

cat ./shofel2/linux-ehci-enable-large-ctl-xfers.patch | patch -p1

and after that, you need to build the kernel.
( https://www.raspberrypi.org/documentation/linux/kernel/building.md )

I cross-compiled it under ubuntu.

 

[subcon959]

I see an opportunity here for some to redesign the Switch back cover to include a Pi Zero case

 

[shadowofdarkness]

The patch works on a OSMC kernel. I just successfully launched a payload from a Raspberry Pi 3 model B+ running OSMC.
All it took was

git clone https://github.com/osmc/osmc.git
cd osmc/packages/kernel-osmc
wget https://raw.githubusercontent.com/f...aster/linux-ehci-enable-large-ctl-xfers.patch -O patches/rbp-040-linux-ehci-enable-large-ctl-xfers.patch
make rbp2
sudo dpkg -i *.deb
reboot

 

[Deleted User]

The patch works on a OSMC kernel. I just successfully launched a payload from a Raspberry Pi 3 model B+ running OSMC.
All it took was

git clone https://github.com/osmc/osmc.git
cd osmc/packages/kernel-osmc
wget https://raw.githubusercontent.com/f...aster/linux-ehci-enable-large-ctl-xfers.patch -O patches/rbp-040-linux-ehci-enable-large-ctl-xfers.patch
make rbp2
sudo dpkg -i *.deb
reboot

I dont have an raspberry does any one know the right commands on ubuntu

 

[shadowofdarkness]

I dont have an raspberry does any one know the right commands on ubuntu

I actually tried on Ubuntu first (I only single boot Linux on all my systems) but failed and gave up when it failed to find a header file.
Here is the instructions I was following just make sure to patch the right file before compiling.
https://wiki.ubuntu.com/Kernel/BuildYourOwnKernel

 

[hippy dave]

The patch works on a OSMC kernel. I just successfully launched a payload from a Raspberry Pi 3 model B+ running OSMC.
All it took was

git clone https://github.com/osmc/osmc.git
cd osmc/packages/kernel-osmc
wget https://raw.githubusercontent.com/f...aster/linux-ehci-enable-large-ctl-xfers.patch -O patches/rbp-040-linux-ehci-enable-large-ctl-xfers.patch
make rbp2
sudo dpkg -i *.deb
reboot

Please could you share the patched OSMC kernel? Cheers!

 

[shadowofdarkness]

Please could you share the patched OSMC kernel? Cheers!

https://nofile.io/f/7dqzDPJkFd9/rbp2-image-4.14.34-1-osmc.deb
https://nofile.io/f/hKgPQXYAZ8W/rbp2-kernel-4.14.34-1-osmc.deb
https://nofile.io/f/pN5Sm52x4Sg/rbp2-headers-4.14.34-1-osmc.deb

 

[-----a]

The patch works on a OSMC kernel. I just successfully launched a payload from a Raspberry Pi 3 model B+ running OSMC.

URLs removed.

Thanks for sharing.