The iPhone Wiki - User contributions [en]

BCM4325

2010-07-12T03:45:54Z

Schmave: formatting... sheesh!

This chip is in the iPod2,1 (iPod touch 2G) and iPhone2,1 (iPhone 3GS) and combines Bluetooth/Wifi and a secret FM radio, presumably connected and ready to go on a future firmware release by Apple.

== FM Radio ==

The most peculiar thing is the inclusion of an FM radio. There is a product brief available from broadcom on this chip: {put link here} but it serves little purpose apart from the block diagram and interface hardware/software.

Interfacing the FM radio is done in two stages: Control via the bluetooth modules's UART or I2C and digital audio streaming over the module's I2S/PCM hardware.

most notably: the FM radio never physically leaves the sillicon die, except for the antenna (which may be connected directly to the BT/UMTS/everything else [:P lol] antenna) this means that the control/streaming will be an extension to the BT protocols currently implemented.

For control, the HCI over UART (/dev/uart.bluetooth) seems the most logical solution to turn the radio on/tune/search etc. but the vendor specific HCI commands will need to be *obtained* (or reversed, which could prove hard). A broadcom datasheet would have this information, but unfortunately you have to sign an NDA to obtain one.

For streaming, the i2s bus sounds good... interfacing this could be hard but playing on the stereo bluetooth profile of iphone OS 3 we could piggy back, at least to start with. however we do need the radio ON first...

In terms of sound streaming /etc/bluetool/iPhone2,1.boot.script from iOS3 contains these lines of interest:

<code>
<nowiki>##</nowiki> Set the sleep mode params

bcm -s 0x01,0x00,0x00,0x01,0x01,0x00,0x01,0x00,0x00,0x00,0x00,0x01

msleep 200

<nowiki>#</nowiki> Configure I2S GPIO lines <---- here

bcm -g

msleep 50

<nowiki>#</nowiki> route audio to pcm <---- here

bcm -p

<nowiki>##</nowiki> That was easy!

quit</code>

this means that there is more than likely some sound streaming code just waiting to receive data (or send it, in which case it could easily be hacked??)

lets find it!

This code interfaces *a* PCM device... the mic (i havent upgraded to the ios4 sdk so this comment assumes no secondary mic as present in iphone 4)

http://developer.apple.com/iphone/library/samplecode/aurioTouch/Introduction/Intro.html

with reference to pcm devices as 'audio unit' s or 'audio component' s :

<code>
// Open the output unit

AudioComponentDescription desc;

desc.componentType = kAudioUnitType_Output;

desc.componentSubType = kAudioUnitSubType_RemoteIO;

desc.componentManufacturer = kAudioUnitManufacturer_Apple;

desc.componentFlags = 0;

desc.componentFlagsMask = 0;

AudioComponent comp = AudioComponentFindNext(NULL, &desc);
</code>

technically all we have to do is turn the radio on, find the correct audio component and then stream the data to the UI, dont we??? ... this app even does all of the streaming and such for us!!!

however; there is no way to verify the radio is on from just the HCI side (its all rx and no output) or just the PCM side... we need to have both parts working simultaneously --remember to route the audio through pcm in the chip initialisation script!!! (which means a tonne of reverse engineering/ fiddling around with undocumented parts of the iphone... lol)

good luck!

== Datasheet ==

The 'datasheet' provided is rubbish and we need the actual datasheet before any real development can be done...

BCM4325

2010-07-12T03:44:30Z

Schmave: always forget code tags..... lol!

This chip is in the iPod2,1 (iPod touch 2G) and iPhone2,1 (iPhone 3GS) and combines Bluetooth/Wifi and a secret FM radio, presumably connected and ready to go on a future firmware release by Apple.

== FM Radio ==

The most peculiar thing is the inclusion of an FM radio. There is a product brief available from broadcom on this chip: {put link here} but it serves little purpose apart from the block diagram and interface hardware/software.

Interfacing the FM radio is done in two stages: Control via the bluetooth modules's UART or I2C and digital audio streaming over the module's I2S/PCM hardware.

most notably: the FM radio never physically leaves the sillicon die, except for the antenna (which may be connected directly to the BT/UMTS/everything else [:P lol] antenna) this means that the control/streaming will be an extension to the BT protocols currently implemented.

For control, the HCI over UART (/dev/uart.bluetooth) seems the most logical solution to turn the radio on/tune/search etc. but the vendor specific HCI commands will need to be *obtained* (or reversed, which could prove hard). A broadcom datasheet would have this information, but unfortunately you have to sign an NDA to obtain one.

For streaming, the i2s bus sounds good... interfacing this could be hard but playing on the stereo bluetooth profile of iphone OS 3 we could piggy back, at least to start with. however we do need the radio ON first...

In terms of sound streaming /etc/bluetool/iPhone2,1.boot.script from iOS3 contains these lines of interest:

<code>
<nowiki>##</nowiki> Set the sleep mode params

bcm -s 0x01,0x00,0x00,0x01,0x01,0x00,0x01,0x00,0x00,0x00,0x00,0x01

msleep 200

<nowiki>#</nowiki> Configure I2S GPIO lines <---- here

bcm -g

msleep 50

<nowiki>#</nowiki> route audio to pcm <---- here

bcm -p

<nowiki>##</nowiki> That was easy!

quit</code>

this means that there is more than likely some sound streaming code just waiting to receive data (or send it, in which case it could easily be hacked??)

lets find it!

This code interfaces *a* PCM device... the mic (i havent upgraded to the ios4 sdk so this comment assumes no secondary mic as present in iphone 4)

http://developer.apple.com/iphone/library/samplecode/aurioTouch/Introduction/Intro.html

with reference to pcm devices as 'audio unit' s or 'audio component' s :
<code>
// Open the output unit
AudioComponentDescription desc;
desc.componentType = kAudioUnitType_Output;
desc.componentSubType = kAudioUnitSubType_RemoteIO;
desc.componentManufacturer = kAudioUnitManufacturer_Apple;
desc.componentFlags = 0;
desc.componentFlagsMask = 0;

AudioComponent comp = AudioComponentFindNext(NULL, &desc);
</code>
technically all we have to do is turn the radio on, find the correct audio component and then stream the data to the UI, dont we??? ... this app even does all of the streaming and such for us!!!

however; there is no way to verify the radio is on from just the HCI side (its all rx and no output) or just the PCM side... we need to have both parts working simultaneously --remember to route the audio through pcm in the chip initialisation script!!! (which means a tonne of reverse engineering/ fiddling around with undocumented parts of the iphone... lol)

good luck!

== Datasheet ==

The 'datasheet' provided is rubbish and we need the actual datasheet before any real development can be done...

BCM4325

2010-07-12T03:43:41Z

Schmave: added a bit on audio streaming

This chip is in the iPod2,1 (iPod touch 2G) and iPhone2,1 (iPhone 3GS) and combines Bluetooth/Wifi and a secret FM radio, presumably connected and ready to go on a future firmware release by Apple.

== FM Radio ==

The most peculiar thing is the inclusion of an FM radio. There is a product brief available from broadcom on this chip: {put link here} but it serves little purpose apart from the block diagram and interface hardware/software.

Interfacing the FM radio is done in two stages: Control via the bluetooth modules's UART or I2C and digital audio streaming over the module's I2S/PCM hardware.

most notably: the FM radio never physically leaves the sillicon die, except for the antenna (which may be connected directly to the BT/UMTS/everything else [:P lol] antenna) this means that the control/streaming will be an extension to the BT protocols currently implemented.

For control, the HCI over UART (/dev/uart.bluetooth) seems the most logical solution to turn the radio on/tune/search etc. but the vendor specific HCI commands will need to be *obtained* (or reversed, which could prove hard). A broadcom datasheet would have this information, but unfortunately you have to sign an NDA to obtain one.

For streaming, the i2s bus sounds good... interfacing this could be hard but playing on the stereo bluetooth profile of iphone OS 3 we could piggy back, at least to start with. however we do need the radio ON first...

In terms of sound streaming /etc/bluetool/iPhone2,1.boot.script from iOS3 contains these lines of interest:

<code>
<nowiki>##</nowiki> Set the sleep mode params

bcm -s 0x01,0x00,0x00,0x01,0x01,0x00,0x01,0x00,0x00,0x00,0x00,0x01

msleep 200

<nowiki>#</nowiki> Configure I2S GPIO lines <---- here

bcm -g

msleep 50

<nowiki>#</nowiki> route audio to pcm <---- here

bcm -p

<nowiki>##</nowiki> That was easy!

quit</code>

this means that there is more than likely some sound streaming code just waiting to receive data (or send it, in which case it could easily be hacked??)

lets find it!

This code interfaces *a* PCM device... the mic (i havent upgraded to the ios4 sdk so this comment assumes no secondary mic as present in iphone 4)

http://developer.apple.com/iphone/library/samplecode/aurioTouch/Introduction/Intro.html

with reference to pcm devices as 'audio unit' s or 'audio component' s :

// Open the output unit
AudioComponentDescription desc;
desc.componentType = kAudioUnitType_Output;
desc.componentSubType = kAudioUnitSubType_RemoteIO;
desc.componentManufacturer = kAudioUnitManufacturer_Apple;
desc.componentFlags = 0;
desc.componentFlagsMask = 0;

AudioComponent comp = AudioComponentFindNext(NULL, &desc);

technically all we have to do is turn the radio on, find the correct audio component and then stream the data to the UI, dont we??? ... this app even does all of the streaming and such for us!!!

however; there is no way to verify the radio is on from just the HCI side (its all rx and no output) or just the PCM side... we need to have both parts working simultaneously --remember to route the audio through pcm in the chip initialisation script!!! (which means a tonne of reverse engineering/ fiddling around with undocumented parts of the iphone... lol)

good luck!

== Datasheet ==

The 'datasheet' provided is rubbish and we need the actual datasheet before any real development can be done...

BCM4325

2010-07-12T03:35:05Z

Schmave: changed the file path, it was previously "bot"

BCM4325

2010-07-11T07:17:55Z

Schmave: formatted properly

BCM4325

2010-07-11T07:11:42Z

Schmave: promising code lines from an iOS3 script

Talk:BCM4325

2010-07-09T13:41:47Z

Schmave:

hey everyone: what would be the best way to communicate with this thing... UART and HCI I'm guessing as the easiest -- but they would deeeefinitely not be standard HCI commands; any way of getting the know-how on vendor specific commands? can anyone get the broadcom datasheet from the company itself?

i am so keen on this app (Schmave)

I think I got my next app idea. purplerad10 --[[User:Geohot|geohot]] 16:51, 14 July 2009 (UTC)

I've thought about it, but never tried. it would be awesome if you could pull it off!! --[[User:Posixninja|posixninja]] 17:26, 14 July 2009 (UTC)

The article says the FM chip has an antenna presumably connected, but I talked with MuscleNerd and he believes the chip does not have an antenna. Can someone look into this? [[User:Iemit737|Iemit737]] 23:46, 29 July 2009 (UTC)

Just a quick heads-up; the Linux driver "b43" has recently gained support for LP-PHY devices - and apparently, the 802.11 part of BCM4325 is an LP-PHY. (Testing was done on a different chip, the BCM4312, however.) --[[User:.NetRolller 3D|.NetRolller 3D]] 16:48, 28 August 2009 (UTC)

actually I did look into this a bit awhile back. I found that this same exact chip was going to be used in one of the android phones (htc magic I think, not positive), so there's bound to be some linux drivers floating around out there by now. just not sure if the FM part of it was included or not... although I can't help but think how kickass this would be if you could pull off fm transmission over this thing. --[[User:Posixninja|posixninja]] 17:22, 28 August 2009 (UTC)

I've heard, that the FM receiver might be used to communicate with the Nike+ kit. If that's true it must be wired to an antenna. Anyone else heard of this? --[[User:Trenskow|Trenskow]] 16:44, 9 October 2009 (UTC)
:iPod Touch G2 supports Nike+ via Bluetooth and doesn't have FM radio. It's very unlikely that the communication protocol in G3 is different.--[[User:Blackbox|Blackbox]] 16:54, 9 October 2009 (UTC)

Bluetooth

2009-07-15T02:24:05Z

Schmave: added link to the bcm4325 work

Bluetooth is a short-range, wireless technology, popular for its Personal Area Networking capability. Bluetooth hardware is provided on all iPhone platforms and the second generation iPod Touch platform. Apple has severely restricted the functions of Bluetooth to the end-user, for seemingly no reason, as the hardware supplied is capable of most if not all current bluetooth 2.0/2.1 functions.

With iPhoneOS 3.0, support for 3G internet bridging (PAN) or 'tethering' and A2DP over Bluetooth has been added, however the file sharing OBEX protocol is notably still missing.

== Access ==

Developers have been able to successfully access and interface the Bluetooth hardware to achieve an OBEX solution, however this is still quite underground. The device nodes of relevance here, are
* /dev/uart.bluetooth
* /dev/cu.bluetooth
* /dev/tty.bluetooth

== iPhone/iPods Bluetooth Hardware Summary==

* iPhone (iPhone1,1) (m68ap) - Bluetooth (r) 2.0 + EDR
* iPhone 3G (iPhone1,2) (n82ap) - Bluetooth (r) 2.0 + EDR - chip specific link [[Bluetooth iPhone2,1]]
* iPhone 3GS (iPhone2,1) (n88ap) - Bluetooth (r) 2.1 + EDR - chip specific link [[BCM4325]]

* iPod Touch (iPod1,1) (n45ap) - No Bluetooth Hardware
* iPod Touch 2G (iPod2,1) (n72ap) - Bluetooth (r) 2.1 + EDR
* iPod Touch 3G (unreleased) - Bluetooth (r) 2.1 + EDR forcasted

== Unreleased iPod3,1 ==

As of iPhoneOS 3.0 an iPod3,1 is mentioned, with a BCM4329 WiFi/Bluetooth/FM wireless solution chip... this is strong evidence for a new iPod model in the near future.

This chip can transmit FM as well as receive. It also has low-power 802.11A and 802.11N in addition to 802.11B/G.

BCM4325

2009-07-15T02:23:35Z

Schmave:

Bluetooth

2009-07-15T02:18:51Z

Schmave: changed the title to "hardware summary" it should have been this all along.. couldnt find the right words last night (re added ipod touch, it is worth noting it is the only device to not have BT)

Bluetooth is a short-range, wireless technology, popular for its Personal Area Networking capability. Bluetooth hardware is provided on all iPhone platforms and the second generation iPod Touch platform. Apple has severely restricted the functions of Bluetooth to the end-user, for seemingly no reason, as the hardware supplied is capable of most if not all current bluetooth 2.0/2.1 functions.

With iPhoneOS 3.0, support for 3G internet bridging (PAN) or 'tethering' and A2DP over Bluetooth has been added, however the file sharing OBEX protocol is notably still missing.

== Access ==

Developers have been able to successfully access and interface the Bluetooth hardware to achieve an OBEX solution, however this is still quite underground. The device nodes of relevance here, are
* /dev/uart.bluetooth
* /dev/cu.bluetooth
* /dev/tty.bluetooth

== iPhone/iPods Bluetooth Hardware Summary==

* iPhone (iPhone1,1) (m68ap) - Bluetooth (r) 2.0 + EDR
* iPhone 3G (iPhone1,2) (n82ap) - Bluetooth (r) 2.0 + EDR - chip specific link [[Bluetooth iPhone2,1]]
* iPhone 3GS (iPhone2,1) (n88ap) - Bluetooth (r) 2.1 + EDR

* iPod Touch (iPod1,1) (n45ap) - No Bluetooth Hardware
* iPod Touch 2G (iPod2,1) (n72ap) - Bluetooth (r) 2.1 + EDR
* iPod Touch 3G (unreleased) - Bluetooth (r) 2.1 + EDR forcasted

== Unreleased iPod3,1 ==

As of iPhoneOS 3.0 an iPod3,1 is mentioned, with a BCM4329 WiFi/Bluetooth/FM wireless solution chip... this is strong evidence for a new iPod model in the near future.

This chip can transmit FM as well as receive. It also has low-power 802.11A and 802.11N in addition to 802.11B/G.

Talk:Bluetooth

2009-07-14T12:41:52Z

Schmave:

This is a new page to summarize bluetooth across all iphone/ipod models. this page is by no means complete yet. please feel free to add, chop and change!

Bluetooth

2009-07-14T12:38:44Z

Schmave: typo

Bluetooth is a short-range, wireless technology, popular for its Personal Area Networking capability. Bluetooth hardware is provided on all iPhone platforms and many iPod Touch platforms. Apple has severly restricted the functions of Bluetooth to the end-user, for seemingly no reason, as the hardware supplied is capable of most if not all current bluetooth 2.0/2.1 functions.

With iPhoneOS 3.0, support for 3G internet bridging and A2DP over bluetooth has been added, however the file sharing OBEX protocol is notably still missing.

== Access ==

Developers have been able to successfully access and interface the Bluetooth hardware to achieve an OBEX solution, however this is still quite underground. The device nodes of relevance here, are
* /dev/uart.bluetooth
* /dev/cu.bluetooth
* /dev/tty.bluetooth

== iPhone/iPods with Bluetooth ==

* iPhone (iPhone1,1) (m68ap) - Bluetooth (r) 2.0 + EDR
* iPhone 3G (iPhone2,1) (n82ap) - Bluetooth (r) 2.0 + EDR - chip specific link [[Bluetooth iPhone2,1]]
* iPhone 3GS (iPhone3,1) (n88ap) - Bluetooth (r) 2.1 + EDR

* iPod Touch (iPod1,1) (n45ap) - No Bluetooth Hardware
* iPod Touch 2G (iPod2,1) (n72ap) - Bluetooth (r) 2.1 + EDR
* iPod Touch 3G (unreleased) - Bluetooth (r) 2.1 + EDR forcasted

== Unreleased iPod3,1 ==

As of iPhoneOS 3.0 an iPod3,1 is mentioned, with a BCM4329 WiFi/Bluetooth/FM wireless solution chip... this is strong evidence for a new iPod model in the near future

Bluetooth

2009-07-14T12:37:14Z

Schmave: This page still needs to summarise 'Bluetooth' on iphone more concisely ; ) Also the model information section needs redoing, i just did it quickly...

Bluetooth is a short-range, wireless technology, popular for its Personal Area Networking capability. Bluetooth harware is provided on all iPhone platforms and many iPod Touch platforms. Apple has severly restricted the functions of Bluetooth to the end-user, for seemingly no reason, as the hardware supplied is capable of most if not all current bluetooth 2.0/2.1 functions.

With iPhoneOS 3.0, support for 3G internet bridging and A2DP over bluetooth has been added, however the file sharing OBEX protocol is notably still missing.

== Access ==

Developers have been able to successfully access and interface the Bluetooth hardware to achieve an OBEX solution, however this is still quite underground. The device nodes of relevance here, are
* /dev/uart.bluetooth
* /dev/cu.bluetooth
* /dev/tty.bluetooth

== iPhone/iPods with Bluetooth ==

* iPhone (iPhone1,1) (m68ap) - Bluetooth (r) 2.0 + EDR
* iPhone 3G (iPhone2,1) (n82ap) - Bluetooth (r) 2.0 + EDR - chip specific link [[Bluetooth iPhone2,1]]
* iPhone 3GS (iPhone3,1) (n88ap) - Bluetooth (r) 2.1 + EDR

* iPod Touch (iPod1,1) (n45ap) - No Bluetooth Hardware
* iPod Touch 2G (iPod2,1) (n72ap) - Bluetooth (r) 2.1 + EDR
* iPod Touch 3G (unreleased) - Bluetooth (r) 2.1 + EDR forcasted

== Unreleased iPod3,1 ==

As of iPhoneOS 3.0 an iPod3,1 is mentioned, with a BCM4329 WiFi/Bluetooth/FM wireless solution chip... this is strong evidence for a new iPod model in the near future

Talk:Bluetooth

2009-07-14T12:16:26Z

Schmave: Talk:Bluetooth moved to Talk:Bluetooth iPhone2,1: This page cannot fully document the many facets of 'bluetooth' on all the iphone/ipod models

#REDIRECT [[Talk:Bluetooth iPhone2,1]]

Bluetooth

2009-07-14T12:16:25Z

Schmave: Bluetooth moved to Bluetooth iPhone2,1: This page cannot fully document the many facets of 'bluetooth' on all the iphone/ipod models

#REDIRECT [[Bluetooth iPhone2,1]]

/Developer

2009-07-14T12:13:02Z

Schmave: SecKeyRawVerify of what... :P

== Summary ==

A file off of the root with nothing inside of it. However, if you hook your iPhone up to Xcode, and click the 'Use For Development' button, the content of 'DeveloperDiskImage.dmg' gets decompressed by /usr/libexec/mobile_image_mounter into there.

== Patch ==

If you patch out the SecKeyRawVerify from /usr/libexec/mobile_image_mounter , you can get Xcode to upload unsigned DeveloperDiskImage.dmg 's ; )
This is becuase no signature checking is performed by Xcode, only by iPhone.

/Developer

2009-07-14T12:10:54Z

Schmave:

== Summary ==

A file off of the root with nothing inside of it. However, if you hook your iPhone up to XCode, and click the 'Use For Development' button, the content of 'DeveloperDiskImage.dmg' gets decompressed into there.

== Patch ==

If you patch out the SecKeyRawVerify, you can get Xcode to upload unsigned DeveloperDiskImage.dmg 's ; )

/Developer

2009-07-14T12:10:42Z

Schmave:

== Summary ==

A file off of the root with nothing inside of it. However, if you hook your iPhone up to XCode, and click the 'Use For Development' button, the content of 'DeveloperDiskImage.dmg' gets decompressed into there.

= Patch =

If you patch out the SecKeyRawVerify, you can get Xcode to upload unsigned DeveloperDiskImage.dmg 's ; )

BCM4325

2009-07-14T11:59:51Z

Schmave:

This chip is in the iPod2,1 (ipod tocuh 2G) and iPhone3,1 (iPhone 3GS) and combines Bluetooth/Wifi and a secret FM radio, presumably connected and ready to go on a future firmware release by Apple.

== FM Radio ==

The most peculiar thing is the inclusion of an FM radio. There is a product brief available from broadcom on this chip: {put link here} but it serves little purpose apart from the block diagram and interface hardware/software.

Interfacing the FM radio is done in two stages: Control via the bluetooth modules's UART or I2C and digital audio streaming over the module's I2S/PCM hardware.

most notably: the FM radio never physically leaves the sillicon die, except for the antenna (which may be connected directly to the BT/UMTS/everything else [:P lol] antenna) this means that the control/streaming will be an extension to the BT protocols currently implemented.

For control, the HCI over UART (/dev/uart.bluetooth) seems the most logical solution to turn the radio on/tune/search etc. but the vendor specific HCI commands will need to be *obtained* (or reversed, which could prove hard). A broadcom datasheet would have this information, but unfortunately you have to sign an NDA to obtain one.

For streaming, the i2s bus sounds good... interfacing this could be hard but playing on the stereo bluetooth profile of iphone OS 3 we could piggy back, at least to start with. however we do need the radio ON first...

BCM4325

2009-07-14T11:59:33Z

Schmave:

= BCM4325 =

This chip is in the iPod2,1 (ipod tocuh 2G) and iPhone3,1 (iPhone 3GS) and combines Bluetooth/Wifi and a secret FM radio, presumably connected and ready to go on a future firmware release by Apple.

== FM Radio ==

The most peculiar thing is the inclusion of an FM radio. There is a product brief available from broadcom on this chip: {put link here} but it serves little purpose apart from the block diagram and interface hardware/software.

Interfacing the FM radio is done in two stages: Control via the bluetooth modules's UART or I2C and digital audio streaming over the module's I2S/PCM hardware.

most notably: the FM radio never physically leaves the sillicon die, except for the antenna (which may be connected directly to the BT/UMTS/everything else [:P lol] antenna) this means that the control/streaming will be an extension to the BT protocols currently implemented.

For control, the HCI over UART (/dev/uart.bluetooth) seems the most logical solution to turn the radio on/tune/search etc. but the vendor specific HCI commands will need to be *obtained* (or reversed, which could prove hard). A broadcom datasheet would have this information, but unfortunately you have to sign an NDA to obtain one.

For streaming, the i2s bus sounds good... interfacing this could be hard but playing on the stereo bluetooth profile of iphone OS 3 we could piggy back, at least to start with. however we do need the radio ON first...

BCM4325

2009-07-14T11:58:57Z

Schmave: New page: == BCM4325 == This chip is in the iPod2,1 (ipod tocuh 2G) and iPhone3,1 (iPhone 3GS) and combines Bluetooth/Wifi and a secret FM radio, presumably connected and ready to go on a future f...

== BCM4325 ==

This chip is in the iPod2,1 (ipod tocuh 2G) and iPhone3,1 (iPhone 3GS) and combines Bluetooth/Wifi and a secret FM radio, presumably connected and ready to go on a future firmware release by Apple.

= FM Radio =

The most peculiar thing is the inclusion of an FM radio. There is a product brief available from broadcom on this chip: {put link here} but it serves little purpose apart from the block diagram and interface hardware/software.

Interfacing the FM radio is done in two stages: Control via the bluetooth modules's UART or I2C and digital audio streaming over the module's I2S/PCM hardware.

most notably: the FM radio never physically leaves the sillicon die, except for the antenna (which may be connected directly to the BT/UMTS/everything else [:P lol] antenna) this means that the control/streaming will be an extension to the BT protocols currently implemented.

For control, the HCI over UART (/dev/uart.bluetooth) seems the most logical solution to turn the radio on/tune/search etc. but the vendor specific HCI commands will need to be *obtained* (or reversed, which could prove hard). A broadcom datasheet would have this information, but unfortunately you have to sign an NDA to obtain one.

For streaming, the i2s bus sounds good... interfacing this could be hard but playing on the stereo bluetooth profile of iphone OS 3 we could piggy back, at least to start with. however we do need the radio ON first...