Broadcom HCI vendor commands

[ndeadly]

I'm interested in sending some undocumented Broadcom HCI commands for Triggered Broadcom Fast Connect (TBFC) to the CYW43439
chip on a raspberry pi pico w. The datasheet for the CYW43439 states that it supports TBFC, so I assumed I should be able send these commands in order to utilise TBFC features. However, sending the commands with the pico sdk results in an UNKNOWN_HCI_COMMAND (0x01) status, so I assume they must be disabled by default.

Any idea if it would be possible to create patches to enable such commands, and how straightforward (or not) it might be?

[jlinktu]

nexmon is focused on the Wi-Fi part of the BCM43/CYW43 chip series.
You might wan't to check out InternalBlue regarding the Bluetooth side of those chips.

[ndeadly]

Oh my bad, I assumed it was all part of the same thing.