18c2ecf20Sopenharmony_ci// SPDX-License-Identifier: GPL-2.0-or-later 28c2ecf20Sopenharmony_ci/* 38c2ecf20Sopenharmony_ci * Parse RedBoot-style Flash Image System (FIS) tables and 48c2ecf20Sopenharmony_ci * produce a Linux partition array to match. 58c2ecf20Sopenharmony_ci * 68c2ecf20Sopenharmony_ci * Copyright © 2001 Red Hat UK Limited 78c2ecf20Sopenharmony_ci * Copyright © 2001-2010 David Woodhouse <dwmw2@infradead.org> 88c2ecf20Sopenharmony_ci */ 98c2ecf20Sopenharmony_ci 108c2ecf20Sopenharmony_ci#include <linux/kernel.h> 118c2ecf20Sopenharmony_ci#include <linux/slab.h> 128c2ecf20Sopenharmony_ci#include <linux/init.h> 138c2ecf20Sopenharmony_ci#include <linux/vmalloc.h> 148c2ecf20Sopenharmony_ci#include <linux/of.h> 158c2ecf20Sopenharmony_ci#include <linux/mtd/mtd.h> 168c2ecf20Sopenharmony_ci#include <linux/mtd/partitions.h> 178c2ecf20Sopenharmony_ci#include <linux/module.h> 188c2ecf20Sopenharmony_ci 198c2ecf20Sopenharmony_cistruct fis_image_desc { 208c2ecf20Sopenharmony_ci unsigned char name[16]; // Null terminated name 218c2ecf20Sopenharmony_ci uint32_t flash_base; // Address within FLASH of image 228c2ecf20Sopenharmony_ci uint32_t mem_base; // Address in memory where it executes 238c2ecf20Sopenharmony_ci uint32_t size; // Length of image 248c2ecf20Sopenharmony_ci uint32_t entry_point; // Execution entry point 258c2ecf20Sopenharmony_ci uint32_t data_length; // Length of actual data 268c2ecf20Sopenharmony_ci unsigned char _pad[256-(16+7*sizeof(uint32_t))]; 278c2ecf20Sopenharmony_ci uint32_t desc_cksum; // Checksum over image descriptor 288c2ecf20Sopenharmony_ci uint32_t file_cksum; // Checksum over image data 298c2ecf20Sopenharmony_ci}; 308c2ecf20Sopenharmony_ci 318c2ecf20Sopenharmony_cistruct fis_list { 328c2ecf20Sopenharmony_ci struct fis_image_desc *img; 338c2ecf20Sopenharmony_ci struct fis_list *next; 348c2ecf20Sopenharmony_ci}; 358c2ecf20Sopenharmony_ci 368c2ecf20Sopenharmony_cistatic int directory = CONFIG_MTD_REDBOOT_DIRECTORY_BLOCK; 378c2ecf20Sopenharmony_cimodule_param(directory, int, 0); 388c2ecf20Sopenharmony_ci 398c2ecf20Sopenharmony_cistatic inline int redboot_checksum(struct fis_image_desc *img) 408c2ecf20Sopenharmony_ci{ 418c2ecf20Sopenharmony_ci /* RedBoot doesn't actually write the desc_cksum field yet AFAICT */ 428c2ecf20Sopenharmony_ci return 1; 438c2ecf20Sopenharmony_ci} 448c2ecf20Sopenharmony_ci 458c2ecf20Sopenharmony_cistatic void parse_redboot_of(struct mtd_info *master) 468c2ecf20Sopenharmony_ci{ 478c2ecf20Sopenharmony_ci struct device_node *np; 488c2ecf20Sopenharmony_ci struct device_node *npart; 498c2ecf20Sopenharmony_ci u32 dirblock; 508c2ecf20Sopenharmony_ci int ret; 518c2ecf20Sopenharmony_ci 528c2ecf20Sopenharmony_ci np = mtd_get_of_node(master); 538c2ecf20Sopenharmony_ci if (!np) 548c2ecf20Sopenharmony_ci return; 558c2ecf20Sopenharmony_ci 568c2ecf20Sopenharmony_ci npart = of_get_child_by_name(np, "partitions"); 578c2ecf20Sopenharmony_ci if (!npart) 588c2ecf20Sopenharmony_ci return; 598c2ecf20Sopenharmony_ci 608c2ecf20Sopenharmony_ci ret = of_property_read_u32(npart, "fis-index-block", &dirblock); 618c2ecf20Sopenharmony_ci of_node_put(npart); 628c2ecf20Sopenharmony_ci if (ret) 638c2ecf20Sopenharmony_ci return; 648c2ecf20Sopenharmony_ci 658c2ecf20Sopenharmony_ci /* 668c2ecf20Sopenharmony_ci * Assign the block found in the device tree to the local 678c2ecf20Sopenharmony_ci * directory block pointer. 688c2ecf20Sopenharmony_ci */ 698c2ecf20Sopenharmony_ci directory = dirblock; 708c2ecf20Sopenharmony_ci} 718c2ecf20Sopenharmony_ci 728c2ecf20Sopenharmony_cistatic int parse_redboot_partitions(struct mtd_info *master, 738c2ecf20Sopenharmony_ci const struct mtd_partition **pparts, 748c2ecf20Sopenharmony_ci struct mtd_part_parser_data *data) 758c2ecf20Sopenharmony_ci{ 768c2ecf20Sopenharmony_ci int nrparts = 0; 778c2ecf20Sopenharmony_ci struct fis_image_desc *buf; 788c2ecf20Sopenharmony_ci struct mtd_partition *parts; 798c2ecf20Sopenharmony_ci struct fis_list *fl = NULL, *tmp_fl; 808c2ecf20Sopenharmony_ci int ret, i; 818c2ecf20Sopenharmony_ci size_t retlen; 828c2ecf20Sopenharmony_ci char *names; 838c2ecf20Sopenharmony_ci char *nullname; 848c2ecf20Sopenharmony_ci int namelen = 0; 858c2ecf20Sopenharmony_ci int nulllen = 0; 868c2ecf20Sopenharmony_ci int numslots; 878c2ecf20Sopenharmony_ci unsigned long offset; 888c2ecf20Sopenharmony_ci#ifdef CONFIG_MTD_REDBOOT_PARTS_UNALLOCATED 898c2ecf20Sopenharmony_ci static char nullstring[] = "unallocated"; 908c2ecf20Sopenharmony_ci#endif 918c2ecf20Sopenharmony_ci 928c2ecf20Sopenharmony_ci parse_redboot_of(master); 938c2ecf20Sopenharmony_ci 948c2ecf20Sopenharmony_ci if ( directory < 0 ) { 958c2ecf20Sopenharmony_ci offset = master->size + directory * master->erasesize; 968c2ecf20Sopenharmony_ci while (mtd_block_isbad(master, offset)) { 978c2ecf20Sopenharmony_ci if (!offset) { 988c2ecf20Sopenharmony_ci nogood: 998c2ecf20Sopenharmony_ci printk(KERN_NOTICE "Failed to find a non-bad block to check for RedBoot partition table\n"); 1008c2ecf20Sopenharmony_ci return -EIO; 1018c2ecf20Sopenharmony_ci } 1028c2ecf20Sopenharmony_ci offset -= master->erasesize; 1038c2ecf20Sopenharmony_ci } 1048c2ecf20Sopenharmony_ci } else { 1058c2ecf20Sopenharmony_ci offset = directory * master->erasesize; 1068c2ecf20Sopenharmony_ci while (mtd_block_isbad(master, offset)) { 1078c2ecf20Sopenharmony_ci offset += master->erasesize; 1088c2ecf20Sopenharmony_ci if (offset == master->size) 1098c2ecf20Sopenharmony_ci goto nogood; 1108c2ecf20Sopenharmony_ci } 1118c2ecf20Sopenharmony_ci } 1128c2ecf20Sopenharmony_ci buf = vmalloc(master->erasesize); 1138c2ecf20Sopenharmony_ci 1148c2ecf20Sopenharmony_ci if (!buf) 1158c2ecf20Sopenharmony_ci return -ENOMEM; 1168c2ecf20Sopenharmony_ci 1178c2ecf20Sopenharmony_ci printk(KERN_NOTICE "Searching for RedBoot partition table in %s at offset 0x%lx\n", 1188c2ecf20Sopenharmony_ci master->name, offset); 1198c2ecf20Sopenharmony_ci 1208c2ecf20Sopenharmony_ci ret = mtd_read(master, offset, master->erasesize, &retlen, 1218c2ecf20Sopenharmony_ci (void *)buf); 1228c2ecf20Sopenharmony_ci 1238c2ecf20Sopenharmony_ci if (ret) 1248c2ecf20Sopenharmony_ci goto out; 1258c2ecf20Sopenharmony_ci 1268c2ecf20Sopenharmony_ci if (retlen != master->erasesize) { 1278c2ecf20Sopenharmony_ci ret = -EIO; 1288c2ecf20Sopenharmony_ci goto out; 1298c2ecf20Sopenharmony_ci } 1308c2ecf20Sopenharmony_ci 1318c2ecf20Sopenharmony_ci numslots = (master->erasesize / sizeof(struct fis_image_desc)); 1328c2ecf20Sopenharmony_ci for (i = 0; i < numslots; i++) { 1338c2ecf20Sopenharmony_ci if (!memcmp(buf[i].name, "FIS directory", 14)) { 1348c2ecf20Sopenharmony_ci /* This is apparently the FIS directory entry for the 1358c2ecf20Sopenharmony_ci * FIS directory itself. The FIS directory size is 1368c2ecf20Sopenharmony_ci * one erase block; if the buf[i].size field is 1378c2ecf20Sopenharmony_ci * swab32(erasesize) then we know we are looking at 1388c2ecf20Sopenharmony_ci * a byte swapped FIS directory - swap all the entries! 1398c2ecf20Sopenharmony_ci * (NOTE: this is 'size' not 'data_length'; size is 1408c2ecf20Sopenharmony_ci * the full size of the entry.) 1418c2ecf20Sopenharmony_ci */ 1428c2ecf20Sopenharmony_ci 1438c2ecf20Sopenharmony_ci /* RedBoot can combine the FIS directory and 1448c2ecf20Sopenharmony_ci config partitions into a single eraseblock; 1458c2ecf20Sopenharmony_ci we assume wrong-endian if either the swapped 1468c2ecf20Sopenharmony_ci 'size' matches the eraseblock size precisely, 1478c2ecf20Sopenharmony_ci or if the swapped size actually fits in an 1488c2ecf20Sopenharmony_ci eraseblock while the unswapped size doesn't. */ 1498c2ecf20Sopenharmony_ci if (swab32(buf[i].size) == master->erasesize || 1508c2ecf20Sopenharmony_ci (buf[i].size > master->erasesize 1518c2ecf20Sopenharmony_ci && swab32(buf[i].size) < master->erasesize)) { 1528c2ecf20Sopenharmony_ci int j; 1538c2ecf20Sopenharmony_ci /* Update numslots based on actual FIS directory size */ 1548c2ecf20Sopenharmony_ci numslots = swab32(buf[i].size) / sizeof (struct fis_image_desc); 1558c2ecf20Sopenharmony_ci for (j = 0; j < numslots; ++j) { 1568c2ecf20Sopenharmony_ci 1578c2ecf20Sopenharmony_ci /* A single 0xff denotes a deleted entry. 1588c2ecf20Sopenharmony_ci * Two of them in a row is the end of the table. 1598c2ecf20Sopenharmony_ci */ 1608c2ecf20Sopenharmony_ci if (buf[j].name[0] == 0xff) { 1618c2ecf20Sopenharmony_ci if (buf[j].name[1] == 0xff) { 1628c2ecf20Sopenharmony_ci break; 1638c2ecf20Sopenharmony_ci } else { 1648c2ecf20Sopenharmony_ci continue; 1658c2ecf20Sopenharmony_ci } 1668c2ecf20Sopenharmony_ci } 1678c2ecf20Sopenharmony_ci 1688c2ecf20Sopenharmony_ci /* The unsigned long fields were written with the 1698c2ecf20Sopenharmony_ci * wrong byte sex, name and pad have no byte sex. 1708c2ecf20Sopenharmony_ci */ 1718c2ecf20Sopenharmony_ci swab32s(&buf[j].flash_base); 1728c2ecf20Sopenharmony_ci swab32s(&buf[j].mem_base); 1738c2ecf20Sopenharmony_ci swab32s(&buf[j].size); 1748c2ecf20Sopenharmony_ci swab32s(&buf[j].entry_point); 1758c2ecf20Sopenharmony_ci swab32s(&buf[j].data_length); 1768c2ecf20Sopenharmony_ci swab32s(&buf[j].desc_cksum); 1778c2ecf20Sopenharmony_ci swab32s(&buf[j].file_cksum); 1788c2ecf20Sopenharmony_ci } 1798c2ecf20Sopenharmony_ci } else if (buf[i].size < master->erasesize) { 1808c2ecf20Sopenharmony_ci /* Update numslots based on actual FIS directory size */ 1818c2ecf20Sopenharmony_ci numslots = buf[i].size / sizeof(struct fis_image_desc); 1828c2ecf20Sopenharmony_ci } 1838c2ecf20Sopenharmony_ci break; 1848c2ecf20Sopenharmony_ci } 1858c2ecf20Sopenharmony_ci } 1868c2ecf20Sopenharmony_ci if (i == numslots) { 1878c2ecf20Sopenharmony_ci /* Didn't find it */ 1888c2ecf20Sopenharmony_ci printk(KERN_NOTICE "No RedBoot partition table detected in %s\n", 1898c2ecf20Sopenharmony_ci master->name); 1908c2ecf20Sopenharmony_ci ret = 0; 1918c2ecf20Sopenharmony_ci goto out; 1928c2ecf20Sopenharmony_ci } 1938c2ecf20Sopenharmony_ci 1948c2ecf20Sopenharmony_ci for (i = 0; i < numslots; i++) { 1958c2ecf20Sopenharmony_ci struct fis_list *new_fl, **prev; 1968c2ecf20Sopenharmony_ci 1978c2ecf20Sopenharmony_ci if (buf[i].name[0] == 0xff) { 1988c2ecf20Sopenharmony_ci if (buf[i].name[1] == 0xff) { 1998c2ecf20Sopenharmony_ci break; 2008c2ecf20Sopenharmony_ci } else { 2018c2ecf20Sopenharmony_ci continue; 2028c2ecf20Sopenharmony_ci } 2038c2ecf20Sopenharmony_ci } 2048c2ecf20Sopenharmony_ci if (!redboot_checksum(&buf[i])) 2058c2ecf20Sopenharmony_ci break; 2068c2ecf20Sopenharmony_ci 2078c2ecf20Sopenharmony_ci new_fl = kmalloc(sizeof(struct fis_list), GFP_KERNEL); 2088c2ecf20Sopenharmony_ci namelen += strlen(buf[i].name)+1; 2098c2ecf20Sopenharmony_ci if (!new_fl) { 2108c2ecf20Sopenharmony_ci ret = -ENOMEM; 2118c2ecf20Sopenharmony_ci goto out; 2128c2ecf20Sopenharmony_ci } 2138c2ecf20Sopenharmony_ci new_fl->img = &buf[i]; 2148c2ecf20Sopenharmony_ci if (data && data->origin) 2158c2ecf20Sopenharmony_ci buf[i].flash_base -= data->origin; 2168c2ecf20Sopenharmony_ci else 2178c2ecf20Sopenharmony_ci buf[i].flash_base &= master->size-1; 2188c2ecf20Sopenharmony_ci 2198c2ecf20Sopenharmony_ci /* I'm sure the JFFS2 code has done me permanent damage. 2208c2ecf20Sopenharmony_ci * I now think the following is _normal_ 2218c2ecf20Sopenharmony_ci */ 2228c2ecf20Sopenharmony_ci prev = &fl; 2238c2ecf20Sopenharmony_ci while(*prev && (*prev)->img->flash_base < new_fl->img->flash_base) 2248c2ecf20Sopenharmony_ci prev = &(*prev)->next; 2258c2ecf20Sopenharmony_ci new_fl->next = *prev; 2268c2ecf20Sopenharmony_ci *prev = new_fl; 2278c2ecf20Sopenharmony_ci 2288c2ecf20Sopenharmony_ci nrparts++; 2298c2ecf20Sopenharmony_ci } 2308c2ecf20Sopenharmony_ci#ifdef CONFIG_MTD_REDBOOT_PARTS_UNALLOCATED 2318c2ecf20Sopenharmony_ci if (fl->img->flash_base) { 2328c2ecf20Sopenharmony_ci nrparts++; 2338c2ecf20Sopenharmony_ci nulllen = sizeof(nullstring); 2348c2ecf20Sopenharmony_ci } 2358c2ecf20Sopenharmony_ci 2368c2ecf20Sopenharmony_ci for (tmp_fl = fl; tmp_fl->next; tmp_fl = tmp_fl->next) { 2378c2ecf20Sopenharmony_ci if (tmp_fl->img->flash_base + tmp_fl->img->size + master->erasesize <= tmp_fl->next->img->flash_base) { 2388c2ecf20Sopenharmony_ci nrparts++; 2398c2ecf20Sopenharmony_ci nulllen = sizeof(nullstring); 2408c2ecf20Sopenharmony_ci } 2418c2ecf20Sopenharmony_ci } 2428c2ecf20Sopenharmony_ci#endif 2438c2ecf20Sopenharmony_ci parts = kzalloc(sizeof(*parts)*nrparts + nulllen + namelen, GFP_KERNEL); 2448c2ecf20Sopenharmony_ci 2458c2ecf20Sopenharmony_ci if (!parts) { 2468c2ecf20Sopenharmony_ci ret = -ENOMEM; 2478c2ecf20Sopenharmony_ci goto out; 2488c2ecf20Sopenharmony_ci } 2498c2ecf20Sopenharmony_ci 2508c2ecf20Sopenharmony_ci nullname = (char *)&parts[nrparts]; 2518c2ecf20Sopenharmony_ci#ifdef CONFIG_MTD_REDBOOT_PARTS_UNALLOCATED 2528c2ecf20Sopenharmony_ci if (nulllen > 0) { 2538c2ecf20Sopenharmony_ci strcpy(nullname, nullstring); 2548c2ecf20Sopenharmony_ci } 2558c2ecf20Sopenharmony_ci#endif 2568c2ecf20Sopenharmony_ci names = nullname + nulllen; 2578c2ecf20Sopenharmony_ci 2588c2ecf20Sopenharmony_ci i=0; 2598c2ecf20Sopenharmony_ci 2608c2ecf20Sopenharmony_ci#ifdef CONFIG_MTD_REDBOOT_PARTS_UNALLOCATED 2618c2ecf20Sopenharmony_ci if (fl->img->flash_base) { 2628c2ecf20Sopenharmony_ci parts[0].name = nullname; 2638c2ecf20Sopenharmony_ci parts[0].size = fl->img->flash_base; 2648c2ecf20Sopenharmony_ci parts[0].offset = 0; 2658c2ecf20Sopenharmony_ci i++; 2668c2ecf20Sopenharmony_ci } 2678c2ecf20Sopenharmony_ci#endif 2688c2ecf20Sopenharmony_ci for ( ; i<nrparts; i++) { 2698c2ecf20Sopenharmony_ci parts[i].size = fl->img->size; 2708c2ecf20Sopenharmony_ci parts[i].offset = fl->img->flash_base; 2718c2ecf20Sopenharmony_ci parts[i].name = names; 2728c2ecf20Sopenharmony_ci 2738c2ecf20Sopenharmony_ci strcpy(names, fl->img->name); 2748c2ecf20Sopenharmony_ci#ifdef CONFIG_MTD_REDBOOT_PARTS_READONLY 2758c2ecf20Sopenharmony_ci if (!memcmp(names, "RedBoot", 8) || 2768c2ecf20Sopenharmony_ci !memcmp(names, "RedBoot config", 15) || 2778c2ecf20Sopenharmony_ci !memcmp(names, "FIS directory", 14)) { 2788c2ecf20Sopenharmony_ci parts[i].mask_flags = MTD_WRITEABLE; 2798c2ecf20Sopenharmony_ci } 2808c2ecf20Sopenharmony_ci#endif 2818c2ecf20Sopenharmony_ci names += strlen(names)+1; 2828c2ecf20Sopenharmony_ci 2838c2ecf20Sopenharmony_ci#ifdef CONFIG_MTD_REDBOOT_PARTS_UNALLOCATED 2848c2ecf20Sopenharmony_ci if(fl->next && fl->img->flash_base + fl->img->size + master->erasesize <= fl->next->img->flash_base) { 2858c2ecf20Sopenharmony_ci i++; 2868c2ecf20Sopenharmony_ci parts[i].offset = parts[i-1].size + parts[i-1].offset; 2878c2ecf20Sopenharmony_ci parts[i].size = fl->next->img->flash_base - parts[i].offset; 2888c2ecf20Sopenharmony_ci parts[i].name = nullname; 2898c2ecf20Sopenharmony_ci } 2908c2ecf20Sopenharmony_ci#endif 2918c2ecf20Sopenharmony_ci tmp_fl = fl; 2928c2ecf20Sopenharmony_ci fl = fl->next; 2938c2ecf20Sopenharmony_ci kfree(tmp_fl); 2948c2ecf20Sopenharmony_ci } 2958c2ecf20Sopenharmony_ci ret = nrparts; 2968c2ecf20Sopenharmony_ci *pparts = parts; 2978c2ecf20Sopenharmony_ci out: 2988c2ecf20Sopenharmony_ci while (fl) { 2998c2ecf20Sopenharmony_ci struct fis_list *old = fl; 3008c2ecf20Sopenharmony_ci fl = fl->next; 3018c2ecf20Sopenharmony_ci kfree(old); 3028c2ecf20Sopenharmony_ci } 3038c2ecf20Sopenharmony_ci vfree(buf); 3048c2ecf20Sopenharmony_ci return ret; 3058c2ecf20Sopenharmony_ci} 3068c2ecf20Sopenharmony_ci 3078c2ecf20Sopenharmony_cistatic const struct of_device_id mtd_parser_redboot_of_match_table[] = { 3088c2ecf20Sopenharmony_ci { .compatible = "redboot-fis" }, 3098c2ecf20Sopenharmony_ci {}, 3108c2ecf20Sopenharmony_ci}; 3118c2ecf20Sopenharmony_ciMODULE_DEVICE_TABLE(of, mtd_parser_redboot_of_match_table); 3128c2ecf20Sopenharmony_ci 3138c2ecf20Sopenharmony_cistatic struct mtd_part_parser redboot_parser = { 3148c2ecf20Sopenharmony_ci .parse_fn = parse_redboot_partitions, 3158c2ecf20Sopenharmony_ci .name = "RedBoot", 3168c2ecf20Sopenharmony_ci .of_match_table = mtd_parser_redboot_of_match_table, 3178c2ecf20Sopenharmony_ci}; 3188c2ecf20Sopenharmony_cimodule_mtd_part_parser(redboot_parser); 3198c2ecf20Sopenharmony_ci 3208c2ecf20Sopenharmony_ci/* mtd parsers will request the module by parser name */ 3218c2ecf20Sopenharmony_ciMODULE_ALIAS("RedBoot"); 3228c2ecf20Sopenharmony_ciMODULE_LICENSE("GPL"); 3238c2ecf20Sopenharmony_ciMODULE_AUTHOR("David Woodhouse <dwmw2@infradead.org>"); 3248c2ecf20Sopenharmony_ciMODULE_DESCRIPTION("Parsing code for RedBoot Flash Image System (FIS) tables"); 325