mirror of
https://github.com/RfidResearchGroup/proxmark3.git
synced 2026-10-06 07:47:32 +00:00
iceman1001andClaude Opus 5
89305b2f8b
AT91F_USB_SendStall spun on STALLSENT with no exit. That bit only arrives once the host polls the endpoint and takes the handshake, so a host that vanishes in between wedges the device. It was the last unbounded wait in the file without an escape. Exit on RXSETUP (host abandoned the request and sent a new SETUP), on ENDBUSRES, or on a spin count, reusing the 0x1FFF that usb_read already uses. usb_check() is not usable here: it calls back into AT91F_CDC_Enumerate, which is what calls this. Do not test RXSUSP. Nothing writes it back to UDP_ICR, so it latches on the first bus idle and stays set, which makes the guard fire on every stall and stops the STALL from ever being delivered. The second wait is bounded too, since leaving the first one early can let the host set STALLSENT after the clear. Also ISOERROR -> STALLSENT. Same bit 3, but only one of those names is true on a control endpoint. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>