Fastboot
The fastboot protocol is a mechanism for communicating with bootloaders
over USB or ethernet. It is designed to be very straightforward to implement,
to allow it to be used across a wide range of devices and from hosts running
Linux, macOS, or Windows.
Basic Requirements
USB
- Two bulk endpoints (in, out) are required
- Max packet size must be 64 bytes for full-speed, 512 bytes for
high-speed and 1024 bytes for Super Speed USB. - The protocol is entirely host-driven and synchronous (unlike the
multi-channel, bi-directional, asynchronous ADB protocol)
TCP or UDP
- Device must be reachable via IP.
- Device will act as the server, fastboot will be the client.
- Fastboot data is wrapped in a simple protocol; see below for details.
Transport and Framing
Host sends a command, which is an ascii string in a single
packet no greater than 64 bytes.Client response with a single packet no greater than 64 bytes.
The first four bytes of the response are “OKAY”, “FAIL”, “DATA”,
or “INFO”. Additional bytes may contain an (ascii) informative
message.a. INFO -> the remaining 60 bytes are an informative message
(providing progress or diagnostic messages). They should
be displayed and then step #2 repeatsb. FAIL -> the requested command failed. The remaining 60 bytes
of the response (if present) provide a textual failure message
to present to the user. Stop.c. OKAY -> the requested command completed successfully. Go to #5
d. DATA -> the requested command is ready for the data phase.
A DATA response packet will be 12 bytes long, in the form of
DATA00000000 where the 8 digit hexadecimal number represents
the total data size to transfer.Data phase. Depending on the command, the host or client will
send the indicated amount of data. Short packets are always
acceptable and zero-length packets are ignored. This phase continues
until the client has sent or received the number of bytes indicated
in the “DATA” response above.Client responds with a single packet no greater than 64 bytes.
The first four bytes of the response are “OKAY”, “FAIL”, or “INFO”.
Similar to #2:a. INFO -> display the remaining 60 bytes and return to #4
b. FAIL -> display the remaining 60 bytes (if present) as a failure
reason and consider the command failed. Stop.c. OKAY -> success. Go to #5
Success. Stop.
Example Session
Host: "getvar:version" request version variable
Client: "OKAY0.4" return version "0.4"
Host: "getvar:nonexistant" request some undefined variable
Client: "FAILUnknown variable" getvar failure; see getvar details below
Host: "download:00001234" request to send 0x1234 bytes of data
Client: "DATA00001234" ready to accept data
Host: < 0x1234 bytes > send data
Client: "OKAY" success
Host: "flash:bootloader" request to flash the data to the bootloader
Client: "INFOerasing flash" indicate status / progress
"INFOwriting flash"
"OKAY" indicate success
Host: "powerdown" send a command
Client: "FAILunknown command" indicate failure
Command Reference
Command parameters are indicated by printf-style escape sequences.
Commands are ascii strings and sent without the quotes (which are
for illustration only here) and without a trailing 0 byte.Commands that begin with a lowercase letter are reserved for this
specification. OEM-specific commands should not begin with a
lowercase letter, to