diff --git a/common/i2c.c b/common/i2c.c
index c0394200c..0004c5d9f 100644
--- a/common/i2c.c
+++ b/common/i2c.c
@@ -409,10 +409,6 @@ uint8_t I2C_ReadFW(uint8_t *data, uint8_t msb, uint8_t lsb, uint8_t device_addre
 	while (len) {
 		len--;
 		*data = I2C_ReadByte();
-		// 读取的第一个字节为后续长度	
-		// The first byte read is the message length
-		if (!readcount && (len > *data))
-			len = *data;
 
 		if (len == 0)
 			I2C_NoAck();
diff --git a/include/usb_cmd.h b/include/usb_cmd.h
index 95854ecc2..b69358bd8 100644
--- a/include/usb_cmd.h
+++ b/include/usb_cmd.h
@@ -77,6 +77,7 @@ typedef struct{
 
 // RDV40,  Smart card operations
 #define CMD_SMART_SEND													  0x0140
+#define CMD_SMART_UPGRADE												  0x0141
 
 // For low-frequency tags
 #define CMD_READ_TI_TYPE                                                  0x0202