void memory_protect(void) { #if MEMORY_PROTECT // Reference STM32F205 Flash programming manual revision 5 // http://www.st.com/resource/en/programming_manual/cd00233952.pdf Section 2.6 // Option bytes // set RDP level 2 WRP for sectors 0 and // 1 flash option control register matches if (((FLASH_OPTION_BYTES_1 & 0xFFEC) == 0xCCEC) && ((FLASH_OPTION_BYTES_2 & 0xFFF) == 0xFFC) && (FLASH_OPTCR == 0x0FFCCCED)) { return; // already set up correctly - bail out } for (int i = FLASH_STORAGE_SECTOR_FIRST; i <= FLASH_STORAGE_SECTOR_LAST; i++) { flash_erase_sector(i, FLASH_CR_PROGRAM_X32); } flash_unlock_option_bytes(); // Section 2.8.6 Flash option control register (FLASH_OPTCR) // Bits 31:28 Reserved, must be kept cleared. // Bits 27:16 nWRP: Not write protect: write protect bootloader code in // flash main memory sectors 0 and 1 (Section 2.3; table 2) Bits 15:8 RDP: // Read protect: level 2 chip read protection active Bits 7:5 USER: User // option bytes: no reset on standby, no reset on stop, software watchdog // Bit 4 Reserved, must be kept cleared. // Bits 3:2 BOR_LEV: BOR reset Level: BOR off // Bit 1 OPTSTRT: Option start: ignored by flash_program_option_bytes // Bit 0 OPTLOCK: Option lock: ignored by flash_program_option_bytes flash_program_option_bytes(0x0FFCCCEC); flash_lock_option_bytes(); #endif }
void flash_program_option_bytes(u32 data) { flash_wait_for_last_operation(); if (FLASH_OPTCR & FLASH_OPTLOCK) flash_unlock_option_bytes(); FLASH_OPTCR = data & ~0x3; FLASH_OPTCR |= FLASH_OPTSTRT; /* Enable option byte programming. */ flash_wait_for_last_operation(); }
void flash_program_option_bytes(u32 address, u16 data) { flash_wait_for_last_operation(); if ((FLASH_CR & FLASH_CR_OPTWRE) == 0) flash_unlock_option_bytes(); FLASH_CR |= FLASH_CR_OPTPG; /* Enable option byte programming. */ (*(volatile u16 *)address) = data; flash_wait_for_last_operation(); FLASH_CR &= ~FLASH_CR_OPTPG; /* Disable option byte programming. */ }
void flash_erase_option_bytes(void) { flash_wait_for_last_operation(); if ((FLASH_CR & FLASH_CR_OPTWRE) == 0) flash_unlock_option_bytes(); FLASH_CR |= FLASH_CR_OPTER; /* Enable option byte erase. */ FLASH_CR |= FLASH_CR_STRT; flash_wait_for_last_operation(); FLASH_CR &= ~FLASH_CR_OPTER; /* Disable option byte erase. */ }
void flash_program_option_bytes(uint32_t address, uint16_t data) { flash_wait_for_last_operation(); if ((FLASH_CR & FLASH_CR_OPTWRE) == 0) { flash_unlock_option_bytes(); } FLASH_CR |= FLASH_CR_OPTPG; /* Enable option byte programming. */ MMIO16(address) = data; flash_wait_for_last_operation(); FLASH_CR &= ~FLASH_CR_OPTPG; /* Disable option byte programming. */ }
/** Unlock a sector of the STM flash memory. * Locked sectors can not be erased or programmed. * * \param sector Number of the sector to unlock. * \return Error code */ u8 stm_flash_unlock_sector(u8 sector) { /* Check that sector argument is valid. */ if (sector >= STM_FLASH_N_SECTORS) return FLASH_INVALID_SECTOR; flash_unlock_option_bytes(); while (FLASH_SR & FLASH_SR_BSY) ; FLASH_OPTCR |= (1 << (16+sector)); FLASH_OPTCR |= FLASH_OPTCR_OPTSTRT; while (FLASH_SR & FLASH_SR_BSY) ; return FLASH_OK; }
void memory_unlock(void) { #ifndef EMULATOR // This exercises a bug in the STM32F2 that allows writing to read-only // sectors of flash. flash_unlock_option_bytes(); #ifdef DEBUG_ON // 0xFFFAAEC: remove wp from all sectors, no RDP (unless previously set to level 2 which is irreversible), // disable configurable resets. Low order two bits are don't care. flash_program_option_bytes(0x0FFFAAEC); #else // Even though level 2 is described as sticky, this chip has a proven bug related to this register so // to be sure rewrite the level two value for RDP for non-debug builds. flash_program_option_bytes(0x0FFFCCEC); #endif flash_lock_option_bytes(); #endif }
/* * memory_protect() - Set option bytes for memory protection * * INPUT * none * OUTPUT * none */ void memory_protect(void) { #ifndef EMULATOR /* set RDP level 2 WRP for sectors 0,5,6 */ if((((*OPTION_BYTES_1) & 0xFFFF) == OPTION_RDP) && (((*OPTION_BYTES_2) & 0xFFFF) == OPTION_WRP)) { return; // already set up correctly - bail out } flash_unlock_option_bytes(); /* WRP + RDP */ #if !defined(DEBUG_ON) // safety check to make sure mem protect disabled in debug builds flash_program_option_bytes((uint32_t)OPTION_WRP << 16 | OPTION_RDP); //RDP BLevel 2 (Irreversible) #endif flash_lock_option_bytes(); #else printf("memory protect ON\n"); #endif }
// Remove write-protection on all flash sectors. // // This is an undocumented feature/bug of STM32F205/F405 microcontrollers, // where flash controller reads its write protection bits from FLASH_OPTCR // register not from OPTION_BYTES, rendering write protection useless. // This behaviour is fixed in future designs of flash controller used for // example in STM32F427, where the protection bits are read correctly // from OPTION_BYTES and not form FLASH_OPCTR register. // // Read protection is unaffected and always stays locked to the desired value. void memory_write_unlock(void) { flash_unlock_option_bytes(); flash_program_option_bytes(0x0FFFCCEC); flash_lock_option_bytes(); }