AIC8800M40低功耗wifi在ARM-LINUX开发板上做OTA的调试经验

ARM-LINUX开发板通过SDIO 接口和AIC8800M40低功耗WIFI/BT芯片连接，然后整个WIFI协议栈都是跑在AIC8800M40芯片上面，所以就不需要LINUX的WIFI驱动和CFG80211协议栈，当然AIC8800M40的固件就需要能够OTA升级了，看了下SDK提供的文档，OTA升级可以通过HOST_OTA和HTTP_OTA，这里我记录一下HOST OTA方式的调试经验：

FLASH分区

首先看一下整个FLASH的分区，bootloader有20KB，当前工作区（包含image_info和cur_image），备份分区（可以删除），OTA升级分区（image_header + upg_image）

从上图可以看到升级分区的烧写地址是0x08156000,当前工作区代码运行的地址为0x08006000。升级分区LZMA压缩代码段地址为0x08157000；

1：制作包含bootloader的基础固件：

powershell 复制代码

/**********************LZMA OTA BUILD********************/
./build_fhostif_wifi_case.sh -j8
cd ../target_test/
./build_lzma_bootloader.sh -j8
cd ../../../docs/Tool/OTA-Tool/bootloader_lzma
cp ../../../../build/basic-aic8800m40/bootloader.bin source/bootloader.bin
cp ../../../../build/host-wifi-aic8800m40/host_wb_aic8800m40.bin source/host_wb.bin
python ota_bin_generator.py

2：制作升级的OTA固件：

powershell 复制代码

cp ../../../../build/host-wifi-aic8800m40/host_wb_aic8800m40.bin source/host_wb_upg.bin
python image_pack_ota.py 0x8157000 v0.1.3 //注意这里的0x8157000是LZMA升级固件的地址，v0.1.3是版本号

下面列举一下在调试过程中碰到的问题：

问题1：

通过在linux host上发送升级命令：custom_msg vnet0 13 /app/host_wb_upg_lzma.bin，然后通过串口查看wifi芯片的打印，发现wifi芯片直接栈溢出死机了：

解决方案：加大Hostif task线程栈的深度，从原来的384字节翻一倍到768字节：

c 复制代码

index e3711b6..cc4497c 100644
--- a/aic8800-sdk/applications/fhostifwifi/src/fhostif_example.c
+++ b/aic8800-sdk/applications/fhostifwifi/src/fhostif_example.c
@@ -834,7 +834,7 @@ int fhost_application_init(void)
     }

     if (rtos_task_create(hostif_task, "Hostif task", APP_HOSTIF_TASK,
-                         384, NULL, TASK_PRIORITY_HOSTIF, NULL)) {
+                         768, NULL, TASK_PRIORITY_HOSTIF, NULL)) {
         return 3;
     }
     if (rtos_task_create(hostif_rxdata_task, "Hostif rxdata", APP_HOSTIF_RX_TASK,

问题2：

在Linux主机上第一次发送custom_msg vnet0 13 /app/host_wb_upg_lzma.bin命令升级不成功，需要发送第二次才能成功，查看了一下linux主机dmesg log：

clike 复制代码

[  163.003209] rwnx_do_ioctl cmd 35314
[  163.003216] IOCTL PRIVATE+2
[  163.003219] AICWFDBG(LOGTRACE)       >>> mcu_cust_msg()
[  163.003223] mcu_cust_msg: Devipc custom msg "13 /app/host_wb_upg_lzma.bin" on vnet0
[  163.003230] APP_CMD_HOST_OTA
[  163.003234] load_file: /app/host_wb_upg_lzma.bin
[  163.003248] bin-file size: 521727 Byte
[  163.003256] aicwf_sdio_bus_txmsg 1056
[  165.057479] error: aicwf mcu-ota confirm timeout
[  166.171683] MCU-OTA: flash erase OK.

这里发现错误打印：aicwf mcu-ota confirm timeout，通过查看代码发现是主机等待wifi芯片擦除flash 2秒超时了，估计擦除时间比较长，需要3秒多，干脆把超时时间调整为8秒，改动如下：

c 复制代码

index f270e77..97b62c7 100644
--- a/aic8800-sdk/wifi/LinuxDriver/aic8800_netdrv/aicwf_custom_utils.h
+++ b/aic8800-sdk/wifi/LinuxDriver/aic8800_netdrv/aicwf_custom_utils.h
@@ -13,7 +13,7 @@
 #include "rwnx_main.h"


-#define MCU_OTA_TIMEOUT         2000
+#define MCU_OTA_TIMEOUT         8000
 #define IMAGE_INFO_SIZE         0x1000

 enum OTA_STEP

改动之后，OTA成功升级，Log打印如下：

clike 复制代码

/app # dmesg -c
[  515.323602] rwnx_do_ioctl cmd 35314
[  515.323608] IOCTL PRIVATE+2
[  515.323611] AICWFDBG(LOGTRACE)       >>> mcu_cust_msg()
[  515.323615] mcu_cust_msg: Devipc custom msg "13 /app/host_wb_upg_lzma.bin" on vnet0
[  515.323622] APP_CMD_HOST_OTA
[  515.323626] load_file: /app/host_wb_upg_lzma.bin
[  515.323639] bin-file size: 521727 Byte
[  515.323647] aicwf_sdio_bus_txmsg 1056
[  518.523923] MCU-OTA: flash erase OK.
[  518.523958] aicwf_sdio_bus_txmsg 1056
[  518.526858] aicwf_sdio_bus_txmsg 1056
[  518.529762] aicwf_sdio_bus_txmsg 1056
[  520.033543] MCU-OTA: finish LZMA-OTA...

问题三

升级成功后，重启linux系统，发现SDIO WIFI识别不成功，查看一下WIFI芯片的串口打印：

发现wifi芯片重启后，bootloader首先会检测升级分区的版本号，如果有新的版本，则会把升级分区的image搬运到当前的image工作区，这个过程比较耗时；虽然我们linux kernel的SDIO设备检测扫描会延迟3秒，但bootloader搬运的时间加上WIFI系统启动时间远远大于3秒，就会造成SDIO扫描检测不成功。

解决方案：WIFI固件升级后，直接让WIFI芯片重启，而不是等到主控芯片的WIFI ENABLE GPIO来拉低电平重启，修改代码如下：

c 复制代码

--- a/aic8800-sdk/wifi/hostif/fhostif_cmd.c
+++ b/aic8800-sdk/wifi/hostif/fhostif_cmd.c
@@ -51,7 +51,7 @@

 #define HOSTIF_KEEP_ALIVE 0
 #define HOST_CNTRL_DHCP   0
-#define HOST_OTA_REBOOT   0
+#define HOST_OTA_REBOOT   1

 #if HOSTIF_KEEP_ALIVE
 struct custom_msg_keep_alive
@@ -1135,17 +1135,17 @@ static int custom_msg_start_ap_handler(uint16_t const host_type,

     set_hostif_wlan_status(HOSTIF_ST_IDLE);
     dbg("HOSTIF_ST: IDLE\n");
-
+#if 1
     // If sta is CONN or ap is START, close it first.
     if (WLAN_CONNECTED == wlan_get_connect_status()) {
         msg.id = WIFI_STA_DISCONNECT;
         wifi_msg_write(&msg);
     }
+#endif
     if (wlan_get_softap_status()) {
         msg.id = WIFI_AP_STOP;
         wifi_msg_write(&msg);
     }
-
     uint8_t *pssid = rtos_malloc(SSID_LEN);
     if (pssid == NULL) {
         dbg("alloc buff fail.\n");
@@ -1470,6 +1470,7 @@ static int custom_msg_host_ota_handler(uint16_t const host_type,
         } else {
             flash_cache_invalid_range((void *)UPGRADE_START_ADDR, 0x1000 + a4k);
             cfm->status = OTA_STEP_FLASH_ERASE_OK;
+            dbg("OTA-Step0: flash erase addr=0x%x, len=0x%x\n", UPGRADE_START_ADDR ,0x1000 + a4k);
         }

     } else if(OTA_STEP_FR_PKG_WRITE == req->ota_step) {
@@ -1478,6 +1479,7 @@ static int custom_msg_host_ota_handler(uint16_t const host_type,
             dbg("OTA_Step1: write pkg at 0x%x fail. Please restart OTA.\r\n", req->ota_msg.ota_pkg_info.flash_addr);
             cfm->status = OTA_STEP_FR_PKG_WRITE_ERR;
         } else {
+            dbg("OTA_Step1: write pkg at 0x%x ,size 0x%x \r\n", req->ota_msg.ota_pkg_info.flash_addr, req->ota_msg.ota_pkg_info.flash_size);
             cfm->status = OTA_STEP_FR_PKG_WRITE_OK;
         }

@@ -1493,6 +1495,7 @@ static int custom_msg_host_ota_handler(uint16_t const host_type,
             flash_cache_invalid_range((void *)UPGRADE_IMAGE_ADDR,
                             (req->ota_msg.ota_pkg_info.flash_addr - UPGRADE_IMAGE_ADDR) + req->ota_msg.ota_pkg_info.flash_size);
             cfm->status = OTA_STEP_LT_PKG_WRITE_OK;
+            dbg("OTA_Step2: recv last pkg and write OK, UPGRADE_IMAGE_ADDR = 0x%x.\r\n", UPGRADE_IMAGE_ADDR);
         }

     }
@@ -1516,7 +1519,7 @@ static int custom_msg_host_ota_handler(uint16_t const host_type,

             // Use OTA-Tool to build OTA.bin, its version is "v0.1.0".
             // Updated version is necessary and newer (than "v0.1.0") when build newer bin!
-            char *version = "v0.1.1";  // strlen(version) <= VER_BYTE_CNT
+            char *version = "v0.1.2";  // strlen(version) <= VER_BYTE_CNT
             struct image_info *curr_info = (void *)CURRENT_INFO_ADDR;
             dbg("OTA_Step3: new-version is %s, curr-version is %s\n", version, curr_info->version);
             if (strcmp((const char *)curr_info->version, version) >= 0) {
@@ -1561,8 +1564,17 @@ static int custom_msg_host_ota_handler(uint16_t const host_type,
                     dbg("OTA_Step3: erease upg_image header fail.\n");
                 }
             } else {
-                dbg("OTA_Step3: LZMA OTA finish...\n");
+                dbg("OTA_Step3: LZMA OTA finish....\n");
                 cfm->status = OTA_STEP_LZMA_CRC_CHECK_OK;
+                e2a_msg_send(host_type, cfm);
+   #if HOST_OTA_REBOOT
+                int ret = rtos_timer_start(reboot_timer, 1000, false);
+                if (ret)
+                    dbg("start reboot_timer failed: %d\n", ret);
+    #endif
+                return KE_MSG_CONSUMED;
+
+
             }
         }
     }
@@ -1574,12 +1586,6 @@ static int custom_msg_host_ota_handler(uint16_t const host_type,
     e2a_msg_send(host_type, cfm);
     #endif /* PLF_OTA */

-    #if HOST_OTA_REBOOT
-    int ret = rtos_timer_start(reboot_timer, 1000, false);
-    if (ret)
-        dbg("start reboot_timer failed: %d\n", ret);
-    #endif
-
     return KE_MSG_CONSUMED;
 }