-
-
Notifications
You must be signed in to change notification settings - Fork 1.2k
Description
Describe the bug
when searching for a em4305 tag the program sometimes crashes.
The same tag works sometimes and crashes others.
To Reproduce
Steps to reproduce the behavior:
- 2.12x12mm em4305 tag placed on coil
- Run lf search
Actual behavior
terminal output this and the program crashes
error when searching for a LF tag pm3: line 249: 2109 Segmentation fault
Expected behavior
not to crash and to provide the following data
[usb] pm3 --> lf search
[=] Note: False Positives ARE possible
[=]
[=] Checking for known tags...
[=]
[+] EM 410x ID 1111000C01
[+] EM410x ( RF/64 )
[=] -------- Possible de-scramble patterns ---------
[+] Unique TAG ID : 8888003080
[=] HoneyWell IdentKey
[+] DEZ 8 : 00003073
[+] DEZ 10 : 0285215745
[+] DEZ 5.5 : 04352.03073
[+] DEZ 3.5A : 017.03073
[+] DEZ 3.5B : 017.03073
[+] DEZ 3.5C : 000.03073
[+] DEZ 14/IK2 : 00073299659777
[+] DEZ 15/IK3 : 000586397266048
[+] DEZ 20/ZK : 08080808000003000800
[=]
[+] Other : 03073_000_00003073
[+] Pattern Paxton : 286542337 [0x11144A01]
[+] Pattern 1 : 580 [0x244]
[+] Pattern Sebury : 3073 0 3073 [0xC01 0x0 0xC01]
[+] VD / ID : 017 / 0285215745
[+] Pattern ELECTRA : 4369 3073
[=] ------------------------------------------------
[+] Valid EM410x ID found!
[+] Chipset detection: EM4x05 / EM4x69
[?] Hint: try lf em 4x05
commands
[usb] pm3 --> lf tune
[=] Measuring LF antenna at 125.00 kHz
[=] Press pm3 button or to exit
[=] Done!
Remedy
Move tag around and try again.
Desktop (please complete the following information):
- OS: windows 11
[usb] pm3 --> hw version
[ Proxmark3 RFID instrument ]
[ Client ]
Iceman/master/v4.19552-427-gaa35a8a1a-suspect 2025-03-12 13:45:59 2ce1378ca
compiled with............. MinGW-w64 14.2.0
platform.................. Windows (64b) / x86_64
Readline support.......... present
QT GUI support............ present
native BT support......... absent
Python script support..... present ( 3.12.9 )
Python SWIG support....... present
Lua script support........ present ( 5.4.7 )
Lua SWIG support.......... present
[ Proxmark3 ]
firmware.................. PM3 GENERIC
[ ARM ]
bootrom: Iceman/master/v4.19552-427-gaa35a8a1a-suspect 2025-03-12 13:45:25 2ce1378ca
os: Iceman/master/v4.19552-427-gaa35a8a1a-suspect 2025-03-12 13:45:32 2ce1378ca
compiled with GCC 13.3.0
[ FPGA ]
fpga_pm3_hf.ncd image 2s30vq100 12-03-2025 13:38:58
fpga_pm3_lf.ncd image 2s30vq100 12-03-2025 13:38:58
fpga_pm3_felica.ncd image 2s30vq100 12-03-2025 13:38:58
fpga_pm3_hf_15.ncd image 2s30vq100 12-03-2025 13:38:58
[ Hardware ]
--= uC: AT91SAM7S512 Rev A
--= Embedded Processor: ARM7TDMI
--= Internal SRAM size: 64K bytes
--= Architecture identifier: AT91SAM7Sxx Series
--= Embedded flash memory 512K bytes ( 65% used )
[usb] pm3 --> hw status
[#] Memory
[#] BigBuf_size............. 41588
[#] Available memory........ 41324
[#] Tracing
[#] tracing ................ 1
[#] traceLen ............... 0
[#] Current FPGA image
[#] mode.................... fpga_pm3_lf.ncd image 2s30vq100 12-03-2025 13:38:58
[#] LF Sampling config
[#] [q] divisor............. 95 ( 125.00 kHz )
[#] [b] bits per sample..... 8
[#] [d] decimation.......... 1
[#] [a] averaging........... no
[#] [t] trigger threshold... 0
[#] [s] samples to skip..... 0
[#]
[#] LF T55XX config
[#] [r] [a] [b] [c] [d] [e] [f] [g]
[#] mode |start|write|write|write| read|write|write
[#] | gap | gap | 0 | 1 | gap | 2 | 3
[#] ---------------------------+-----+-----+-----+-----+-----+-----+------
[#] fixed bit length (default) | 31 | 20 | 18 | 50 | 15 | n/a | n/a |
[#] long leading reference | 31 | 20 | 18 | 50 | 15 | n/a | n/a |
[#] leading zero | 31 | 20 | 18 | 40 | 15 | n/a | n/a |
[#] 1 of 4 coding reference | 31 | 20 | 18 | 34 | 15 | 50 | 66 |
[#]
[#] HF 14a config
[#] [a] Anticol override.... std ( follow standard )
[#] [b] BCC override........ std ( follow standard )
[#] [2] CL2 override........ std ( follow standard )
[#] [3] CL3 override........ std ( follow standard )
[#] [r] RATS override....... std ( follow standard )
[#] Transfer Speed
[#] Sending packets to client...
[#] Time elapsed................... 500ms
[#] Bytes transferred.............. 310784
[#] Transfer Speed PM3 -> Client... 621568 bytes/s
[#] Various
[#] Max stack usage......... 5216 / 8480 bytes
[#] Debug log level......... 1 ( error )
[#] ToSendMax............... 6
[#] ToSend BUFFERSIZE....... 2308
[#] Slow clock.............. 31888 Hz
[#] Installed StandAlone Mode
[#] LF HID26 standalone - aka SamyRun (Samy Kamkar)
[#]
[usb] pm3 --> data tune
help This help
----------- ------------------------- General-------------------------
clear Clears various buffers used by the graph window
hide Hide the graph window
load Load contents of file into graph window
num Converts dec/hex/bin
plot Show the graph window
print Print the data in the DemodBuffer
save Save signal trace data
setdebugmode Set Debugging Level on client side
xor Xor a input string
----------- ------------------------- Modulation-------------------------
biphaserawdecode Biphase decode bin stream in DemodBuffer
detectclock Detect ASK, FSK, NRZ, PSK clock rate of wave in GraphBuffer
fsktonrz Convert fsk2 to nrz wave for alternate fsk demodulating (for weak fsk)
manrawdecode Manchester decode binary stream in DemodBuffer
modulation Identify LF signal for clock and modulation
rawdemod Demodulate the data in the GraphBuffer and output binary
----------- ------------------------- Graph-------------------------
askedgedetect Adjust Graph for manual ASK demod
autocorr Autocorrelation over window
convertbitstream Convert GraphBuffer's 0/1 values to 127 / -127
cthreshold Average out all values between
dirthreshold Max rising higher up-thres/ Min falling lower down-thres
decimate Decimate samples
envelope Generate square envelope of samples
grid overlay grid on graph window
getbitstream Convert GraphBuffer's >=1 values to 1 and <1 to 0
hpf Remove DC offset from trace
iir Apply IIR buttersworth filter on plot data
ltrim Trim samples from left of trace
mtrim Trim out samples from the specified start to the specified stop
norm Normalize max/min to +/-128
rtrim Trim samples from right of trace
setgraphmarkers Set the markers in the graph window
shiftgraphzero Shift 0 for Graphed wave + or - shift value
timescale Set cursor display timescale
undecimate Un-decimate samples
zerocrossings Count time between zero-crossings
----------- ------------------------- Operations-------------------------
asn1 ASN1 decoder
atr ATR lookup
bitsamples Get raw samples as bitstring
bmap Convert hex value according a binary template
crypto Encrypt and decrypt data
diff Diff of input files
hexsamples Dump big buffer as hex bytes
samples Get raw samples for graph window ( GraphBuffer )