Project

General

Profile

DangerousBatteryChargerExperiments » History » Version 1

Denis 'GNUtoo' Carikli, 12/20/2019 02:23 AM

1 1 Denis 'GNUtoo' Carikli
h1. DangerousBatteryChargerExperiments
2
3
h2. Messing with batteries is dangerous
4
5
Messing with battery charging is very dangerous:
6
* Batteries regularly explode in laptops and smartphones. The press often talks about that.
7
* Exploding batteries can cause dangerous fires.
8
* Messing with charging values can really cause batteries to explode or take fire.
9
10
So really make sure you know what you're doing if you mess with that.
11
12
This is not the usual warning that is there just because of legal requirements, in order to prevent potential lawsuits, and that tells you that the documentation may eat your cat.
13
14
Batteries issues are real.
15
16
See The "Wikipedia page on the Galaxy Note 6":https://en.wikipedia.org/wiki/Galaxy_Note_6#Battery_faults for a famous examples of a battery issue.
17
18
Here the cause was due to the fact that the battery was non-removable and that the case didn't have enough extra space for the battery.
19
20
h2. Other warnings
21
22
You could also break your phone or have other issues if you mess up with battery charging values, but given that battery can explode or take fire the other issues are probably usually very minor compared to that.
23
24
h2. Disabling the charge
25
26
The max77693 driver in the Replicant 6 kernel has a "function to enable and disable charge": https://git.replicant.us/replicant/kernel_samsung_smdk4412/tree/drivers/battery/max77693_charger.c#n403
27
28
As this driver is used on a Galaxy SIII we tried to disable the charge by setting the last bit of the MAX77693_CHG_REG_CHG_CNFG_00 to 0.
29
30
<pre>
31
 i2cget -f 17 0x66 0xB7                                                                                                  
32
i2cget: WARNING! This program can confuse your I2C bus
33
Continue? [y/N] y
34
0x05
35
</pre>
36
37
<pre>
38
# i2cset -f 17 0x66 0xB7 0x4                                                                                                                    
39
i2cset: WARNING! This program can confuse your I2C bus
40
Continue? [y/N] y
41
</pre>
42
43
This stopped the charge:
44
<pre>
45
# grep POWER_SUPPLY_STATUS /sys/class/power_supply/battery/uevent                                                       
46
POWER_SUPPLY_STATUS=Discharging
47
</pre>
48
49
We did that while the driver as it already disables the charger register protection.
50
51
However we didn't check if the driver could also be accessing that register while we were trying the i2cset command.
52
53
If the driver also access and changes that register, we could have a race condition where we read a value (0x05) and then the kernel does some stuff and changes it to 0xf5 for instance and then userspace would change it back to 0x04 messing up things.
54
55
So really use with caution.
56
57
We also didn't get any review of what we were doing here.
58
59
h2. How to properly disable charging
60
61
In order to minimize the risk it would be best to have the upstream kernel review process involved.
62
63
To do that, first you need your device to be ported to Replicant 9. The Galaxy SIII already boots under Replicant 9 and uses a kernel that is very closely based on upstream.
64
65
You can then take advantage of the Linux review process to be extra sure that you didn't mess up. You can send a patch that disable charging in the max77693_charger driver, enabling to disable charging through a sysfs node.
66
67
This way userspace could easily stop the charging process.
68
69
Note that upstream still requires you to test (and probably understand) the code you are writing, so you still need to know what you are doing.
70
71
If you don't know what you are doing, try instead to find someone who does and who is willing to do it for you.