RPi 3B problem with Broadcom firmware for running KNOB_PoC.py

[zabbidou]

Hello, I hope this is the right place to ask.

I have some questions about how to make the PoC run on my RPi. I have seen a related issue. I have followed the advice in downgrading the Broadcom driver, but I fear I have missed a step or found the wrong firmware.

The output from running the Python script says my firmware is BCM43430A1. I have seen in other places the advice to run this command to see if the firmware loads properly dmesg | grep -i bluetooth but mine doesn't output any information about the firmware

The full output of running the script is this:

[*] Connected to hci0
[*] Chip identifier: 0x2209 (001.002.009)
[*] Using fw_0x2209.py
[*] Loaded firmware information for BCM43430A1.
[*] Try to enable debugging on H4 (warning if not supported)...
[*] Installing patch which ensures that send_LMP_encryption_key_size_req is always len=1!
[!] _sendThreadFunc: No response from the firmware.
[!] sendHciCommand: waiting for response timed out!
[!] readMem: No response to readRAM HCI command! (read_addr=310204, len=20)

How can I solve this issue? I can provide any additional info as needed, including the link where I found the firmware. Thanks!