18c2ecf20Sopenharmony_ci// SPDX-License-Identifier: GPL-2.0-or-later
28c2ecf20Sopenharmony_ci/*
38c2ecf20Sopenharmony_ci * Parse RedBoot-style Flash Image System (FIS) tables and
48c2ecf20Sopenharmony_ci * produce a Linux partition array to match.
58c2ecf20Sopenharmony_ci *
68c2ecf20Sopenharmony_ci * Copyright © 2001      Red Hat UK Limited
78c2ecf20Sopenharmony_ci * Copyright © 2001-2010 David Woodhouse <dwmw2@infradead.org>
88c2ecf20Sopenharmony_ci */
98c2ecf20Sopenharmony_ci
108c2ecf20Sopenharmony_ci#include <linux/kernel.h>
118c2ecf20Sopenharmony_ci#include <linux/slab.h>
128c2ecf20Sopenharmony_ci#include <linux/init.h>
138c2ecf20Sopenharmony_ci#include <linux/vmalloc.h>
148c2ecf20Sopenharmony_ci#include <linux/of.h>
158c2ecf20Sopenharmony_ci#include <linux/mtd/mtd.h>
168c2ecf20Sopenharmony_ci#include <linux/mtd/partitions.h>
178c2ecf20Sopenharmony_ci#include <linux/module.h>
188c2ecf20Sopenharmony_ci
198c2ecf20Sopenharmony_cistruct fis_image_desc {
208c2ecf20Sopenharmony_ci    unsigned char name[16];      // Null terminated name
218c2ecf20Sopenharmony_ci    uint32_t	  flash_base;    // Address within FLASH of image
228c2ecf20Sopenharmony_ci    uint32_t	  mem_base;      // Address in memory where it executes
238c2ecf20Sopenharmony_ci    uint32_t	  size;          // Length of image
248c2ecf20Sopenharmony_ci    uint32_t	  entry_point;   // Execution entry point
258c2ecf20Sopenharmony_ci    uint32_t	  data_length;   // Length of actual data
268c2ecf20Sopenharmony_ci    unsigned char _pad[256-(16+7*sizeof(uint32_t))];
278c2ecf20Sopenharmony_ci    uint32_t	  desc_cksum;    // Checksum over image descriptor
288c2ecf20Sopenharmony_ci    uint32_t	  file_cksum;    // Checksum over image data
298c2ecf20Sopenharmony_ci};
308c2ecf20Sopenharmony_ci
318c2ecf20Sopenharmony_cistruct fis_list {
328c2ecf20Sopenharmony_ci	struct fis_image_desc *img;
338c2ecf20Sopenharmony_ci	struct fis_list *next;
348c2ecf20Sopenharmony_ci};
358c2ecf20Sopenharmony_ci
368c2ecf20Sopenharmony_cistatic int directory = CONFIG_MTD_REDBOOT_DIRECTORY_BLOCK;
378c2ecf20Sopenharmony_cimodule_param(directory, int, 0);
388c2ecf20Sopenharmony_ci
398c2ecf20Sopenharmony_cistatic inline int redboot_checksum(struct fis_image_desc *img)
408c2ecf20Sopenharmony_ci{
418c2ecf20Sopenharmony_ci	/* RedBoot doesn't actually write the desc_cksum field yet AFAICT */
428c2ecf20Sopenharmony_ci	return 1;
438c2ecf20Sopenharmony_ci}
448c2ecf20Sopenharmony_ci
458c2ecf20Sopenharmony_cistatic void parse_redboot_of(struct mtd_info *master)
468c2ecf20Sopenharmony_ci{
478c2ecf20Sopenharmony_ci	struct device_node *np;
488c2ecf20Sopenharmony_ci	struct device_node *npart;
498c2ecf20Sopenharmony_ci	u32 dirblock;
508c2ecf20Sopenharmony_ci	int ret;
518c2ecf20Sopenharmony_ci
528c2ecf20Sopenharmony_ci	np = mtd_get_of_node(master);
538c2ecf20Sopenharmony_ci	if (!np)
548c2ecf20Sopenharmony_ci		return;
558c2ecf20Sopenharmony_ci
568c2ecf20Sopenharmony_ci	npart = of_get_child_by_name(np, "partitions");
578c2ecf20Sopenharmony_ci	if (!npart)
588c2ecf20Sopenharmony_ci		return;
598c2ecf20Sopenharmony_ci
608c2ecf20Sopenharmony_ci	ret = of_property_read_u32(npart, "fis-index-block", &dirblock);
618c2ecf20Sopenharmony_ci	of_node_put(npart);
628c2ecf20Sopenharmony_ci	if (ret)
638c2ecf20Sopenharmony_ci		return;
648c2ecf20Sopenharmony_ci
658c2ecf20Sopenharmony_ci	/*
668c2ecf20Sopenharmony_ci	 * Assign the block found in the device tree to the local
678c2ecf20Sopenharmony_ci	 * directory block pointer.
688c2ecf20Sopenharmony_ci	 */
698c2ecf20Sopenharmony_ci	directory = dirblock;
708c2ecf20Sopenharmony_ci}
718c2ecf20Sopenharmony_ci
728c2ecf20Sopenharmony_cistatic int parse_redboot_partitions(struct mtd_info *master,
738c2ecf20Sopenharmony_ci				    const struct mtd_partition **pparts,
748c2ecf20Sopenharmony_ci				    struct mtd_part_parser_data *data)
758c2ecf20Sopenharmony_ci{
768c2ecf20Sopenharmony_ci	int nrparts = 0;
778c2ecf20Sopenharmony_ci	struct fis_image_desc *buf;
788c2ecf20Sopenharmony_ci	struct mtd_partition *parts;
798c2ecf20Sopenharmony_ci	struct fis_list *fl = NULL, *tmp_fl;
808c2ecf20Sopenharmony_ci	int ret, i;
818c2ecf20Sopenharmony_ci	size_t retlen;
828c2ecf20Sopenharmony_ci	char *names;
838c2ecf20Sopenharmony_ci	char *nullname;
848c2ecf20Sopenharmony_ci	int namelen = 0;
858c2ecf20Sopenharmony_ci	int nulllen = 0;
868c2ecf20Sopenharmony_ci	int numslots;
878c2ecf20Sopenharmony_ci	unsigned long offset;
888c2ecf20Sopenharmony_ci#ifdef CONFIG_MTD_REDBOOT_PARTS_UNALLOCATED
898c2ecf20Sopenharmony_ci	static char nullstring[] = "unallocated";
908c2ecf20Sopenharmony_ci#endif
918c2ecf20Sopenharmony_ci
928c2ecf20Sopenharmony_ci	parse_redboot_of(master);
938c2ecf20Sopenharmony_ci
948c2ecf20Sopenharmony_ci	if ( directory < 0 ) {
958c2ecf20Sopenharmony_ci		offset = master->size + directory * master->erasesize;
968c2ecf20Sopenharmony_ci		while (mtd_block_isbad(master, offset)) {
978c2ecf20Sopenharmony_ci			if (!offset) {
988c2ecf20Sopenharmony_ci			nogood:
998c2ecf20Sopenharmony_ci				printk(KERN_NOTICE "Failed to find a non-bad block to check for RedBoot partition table\n");
1008c2ecf20Sopenharmony_ci				return -EIO;
1018c2ecf20Sopenharmony_ci			}
1028c2ecf20Sopenharmony_ci			offset -= master->erasesize;
1038c2ecf20Sopenharmony_ci		}
1048c2ecf20Sopenharmony_ci	} else {
1058c2ecf20Sopenharmony_ci		offset = directory * master->erasesize;
1068c2ecf20Sopenharmony_ci		while (mtd_block_isbad(master, offset)) {
1078c2ecf20Sopenharmony_ci			offset += master->erasesize;
1088c2ecf20Sopenharmony_ci			if (offset == master->size)
1098c2ecf20Sopenharmony_ci				goto nogood;
1108c2ecf20Sopenharmony_ci		}
1118c2ecf20Sopenharmony_ci	}
1128c2ecf20Sopenharmony_ci	buf = vmalloc(master->erasesize);
1138c2ecf20Sopenharmony_ci
1148c2ecf20Sopenharmony_ci	if (!buf)
1158c2ecf20Sopenharmony_ci		return -ENOMEM;
1168c2ecf20Sopenharmony_ci
1178c2ecf20Sopenharmony_ci	printk(KERN_NOTICE "Searching for RedBoot partition table in %s at offset 0x%lx\n",
1188c2ecf20Sopenharmony_ci	       master->name, offset);
1198c2ecf20Sopenharmony_ci
1208c2ecf20Sopenharmony_ci	ret = mtd_read(master, offset, master->erasesize, &retlen,
1218c2ecf20Sopenharmony_ci		       (void *)buf);
1228c2ecf20Sopenharmony_ci
1238c2ecf20Sopenharmony_ci	if (ret)
1248c2ecf20Sopenharmony_ci		goto out;
1258c2ecf20Sopenharmony_ci
1268c2ecf20Sopenharmony_ci	if (retlen != master->erasesize) {
1278c2ecf20Sopenharmony_ci		ret = -EIO;
1288c2ecf20Sopenharmony_ci		goto out;
1298c2ecf20Sopenharmony_ci	}
1308c2ecf20Sopenharmony_ci
1318c2ecf20Sopenharmony_ci	numslots = (master->erasesize / sizeof(struct fis_image_desc));
1328c2ecf20Sopenharmony_ci	for (i = 0; i < numslots; i++) {
1338c2ecf20Sopenharmony_ci		if (!memcmp(buf[i].name, "FIS directory", 14)) {
1348c2ecf20Sopenharmony_ci			/* This is apparently the FIS directory entry for the
1358c2ecf20Sopenharmony_ci			 * FIS directory itself.  The FIS directory size is
1368c2ecf20Sopenharmony_ci			 * one erase block; if the buf[i].size field is
1378c2ecf20Sopenharmony_ci			 * swab32(erasesize) then we know we are looking at
1388c2ecf20Sopenharmony_ci			 * a byte swapped FIS directory - swap all the entries!
1398c2ecf20Sopenharmony_ci			 * (NOTE: this is 'size' not 'data_length'; size is
1408c2ecf20Sopenharmony_ci			 * the full size of the entry.)
1418c2ecf20Sopenharmony_ci			 */
1428c2ecf20Sopenharmony_ci
1438c2ecf20Sopenharmony_ci			/* RedBoot can combine the FIS directory and
1448c2ecf20Sopenharmony_ci			   config partitions into a single eraseblock;
1458c2ecf20Sopenharmony_ci			   we assume wrong-endian if either the swapped
1468c2ecf20Sopenharmony_ci			   'size' matches the eraseblock size precisely,
1478c2ecf20Sopenharmony_ci			   or if the swapped size actually fits in an
1488c2ecf20Sopenharmony_ci			   eraseblock while the unswapped size doesn't. */
1498c2ecf20Sopenharmony_ci			if (swab32(buf[i].size) == master->erasesize ||
1508c2ecf20Sopenharmony_ci			    (buf[i].size > master->erasesize
1518c2ecf20Sopenharmony_ci			     && swab32(buf[i].size) < master->erasesize)) {
1528c2ecf20Sopenharmony_ci				int j;
1538c2ecf20Sopenharmony_ci				/* Update numslots based on actual FIS directory size */
1548c2ecf20Sopenharmony_ci				numslots = swab32(buf[i].size) / sizeof (struct fis_image_desc);
1558c2ecf20Sopenharmony_ci				for (j = 0; j < numslots; ++j) {
1568c2ecf20Sopenharmony_ci
1578c2ecf20Sopenharmony_ci					/* A single 0xff denotes a deleted entry.
1588c2ecf20Sopenharmony_ci					 * Two of them in a row is the end of the table.
1598c2ecf20Sopenharmony_ci					 */
1608c2ecf20Sopenharmony_ci					if (buf[j].name[0] == 0xff) {
1618c2ecf20Sopenharmony_ci				  		if (buf[j].name[1] == 0xff) {
1628c2ecf20Sopenharmony_ci							break;
1638c2ecf20Sopenharmony_ci						} else {
1648c2ecf20Sopenharmony_ci							continue;
1658c2ecf20Sopenharmony_ci						}
1668c2ecf20Sopenharmony_ci					}
1678c2ecf20Sopenharmony_ci
1688c2ecf20Sopenharmony_ci					/* The unsigned long fields were written with the
1698c2ecf20Sopenharmony_ci					 * wrong byte sex, name and pad have no byte sex.
1708c2ecf20Sopenharmony_ci					 */
1718c2ecf20Sopenharmony_ci					swab32s(&buf[j].flash_base);
1728c2ecf20Sopenharmony_ci					swab32s(&buf[j].mem_base);
1738c2ecf20Sopenharmony_ci					swab32s(&buf[j].size);
1748c2ecf20Sopenharmony_ci					swab32s(&buf[j].entry_point);
1758c2ecf20Sopenharmony_ci					swab32s(&buf[j].data_length);
1768c2ecf20Sopenharmony_ci					swab32s(&buf[j].desc_cksum);
1778c2ecf20Sopenharmony_ci					swab32s(&buf[j].file_cksum);
1788c2ecf20Sopenharmony_ci				}
1798c2ecf20Sopenharmony_ci			} else if (buf[i].size < master->erasesize) {
1808c2ecf20Sopenharmony_ci				/* Update numslots based on actual FIS directory size */
1818c2ecf20Sopenharmony_ci				numslots = buf[i].size / sizeof(struct fis_image_desc);
1828c2ecf20Sopenharmony_ci			}
1838c2ecf20Sopenharmony_ci			break;
1848c2ecf20Sopenharmony_ci		}
1858c2ecf20Sopenharmony_ci	}
1868c2ecf20Sopenharmony_ci	if (i == numslots) {
1878c2ecf20Sopenharmony_ci		/* Didn't find it */
1888c2ecf20Sopenharmony_ci		printk(KERN_NOTICE "No RedBoot partition table detected in %s\n",
1898c2ecf20Sopenharmony_ci		       master->name);
1908c2ecf20Sopenharmony_ci		ret = 0;
1918c2ecf20Sopenharmony_ci		goto out;
1928c2ecf20Sopenharmony_ci	}
1938c2ecf20Sopenharmony_ci
1948c2ecf20Sopenharmony_ci	for (i = 0; i < numslots; i++) {
1958c2ecf20Sopenharmony_ci		struct fis_list *new_fl, **prev;
1968c2ecf20Sopenharmony_ci
1978c2ecf20Sopenharmony_ci		if (buf[i].name[0] == 0xff) {
1988c2ecf20Sopenharmony_ci			if (buf[i].name[1] == 0xff) {
1998c2ecf20Sopenharmony_ci				break;
2008c2ecf20Sopenharmony_ci			} else {
2018c2ecf20Sopenharmony_ci				continue;
2028c2ecf20Sopenharmony_ci			}
2038c2ecf20Sopenharmony_ci		}
2048c2ecf20Sopenharmony_ci		if (!redboot_checksum(&buf[i]))
2058c2ecf20Sopenharmony_ci			break;
2068c2ecf20Sopenharmony_ci
2078c2ecf20Sopenharmony_ci		new_fl = kmalloc(sizeof(struct fis_list), GFP_KERNEL);
2088c2ecf20Sopenharmony_ci		namelen += strlen(buf[i].name)+1;
2098c2ecf20Sopenharmony_ci		if (!new_fl) {
2108c2ecf20Sopenharmony_ci			ret = -ENOMEM;
2118c2ecf20Sopenharmony_ci			goto out;
2128c2ecf20Sopenharmony_ci		}
2138c2ecf20Sopenharmony_ci		new_fl->img = &buf[i];
2148c2ecf20Sopenharmony_ci		if (data && data->origin)
2158c2ecf20Sopenharmony_ci			buf[i].flash_base -= data->origin;
2168c2ecf20Sopenharmony_ci		else
2178c2ecf20Sopenharmony_ci			buf[i].flash_base &= master->size-1;
2188c2ecf20Sopenharmony_ci
2198c2ecf20Sopenharmony_ci		/* I'm sure the JFFS2 code has done me permanent damage.
2208c2ecf20Sopenharmony_ci		 * I now think the following is _normal_
2218c2ecf20Sopenharmony_ci		 */
2228c2ecf20Sopenharmony_ci		prev = &fl;
2238c2ecf20Sopenharmony_ci		while(*prev && (*prev)->img->flash_base < new_fl->img->flash_base)
2248c2ecf20Sopenharmony_ci			prev = &(*prev)->next;
2258c2ecf20Sopenharmony_ci		new_fl->next = *prev;
2268c2ecf20Sopenharmony_ci		*prev = new_fl;
2278c2ecf20Sopenharmony_ci
2288c2ecf20Sopenharmony_ci		nrparts++;
2298c2ecf20Sopenharmony_ci	}
2308c2ecf20Sopenharmony_ci#ifdef CONFIG_MTD_REDBOOT_PARTS_UNALLOCATED
2318c2ecf20Sopenharmony_ci	if (fl->img->flash_base) {
2328c2ecf20Sopenharmony_ci		nrparts++;
2338c2ecf20Sopenharmony_ci		nulllen = sizeof(nullstring);
2348c2ecf20Sopenharmony_ci	}
2358c2ecf20Sopenharmony_ci
2368c2ecf20Sopenharmony_ci	for (tmp_fl = fl; tmp_fl->next; tmp_fl = tmp_fl->next) {
2378c2ecf20Sopenharmony_ci		if (tmp_fl->img->flash_base + tmp_fl->img->size + master->erasesize <= tmp_fl->next->img->flash_base) {
2388c2ecf20Sopenharmony_ci			nrparts++;
2398c2ecf20Sopenharmony_ci			nulllen = sizeof(nullstring);
2408c2ecf20Sopenharmony_ci		}
2418c2ecf20Sopenharmony_ci	}
2428c2ecf20Sopenharmony_ci#endif
2438c2ecf20Sopenharmony_ci	parts = kzalloc(sizeof(*parts)*nrparts + nulllen + namelen, GFP_KERNEL);
2448c2ecf20Sopenharmony_ci
2458c2ecf20Sopenharmony_ci	if (!parts) {
2468c2ecf20Sopenharmony_ci		ret = -ENOMEM;
2478c2ecf20Sopenharmony_ci		goto out;
2488c2ecf20Sopenharmony_ci	}
2498c2ecf20Sopenharmony_ci
2508c2ecf20Sopenharmony_ci	nullname = (char *)&parts[nrparts];
2518c2ecf20Sopenharmony_ci#ifdef CONFIG_MTD_REDBOOT_PARTS_UNALLOCATED
2528c2ecf20Sopenharmony_ci	if (nulllen > 0) {
2538c2ecf20Sopenharmony_ci		strcpy(nullname, nullstring);
2548c2ecf20Sopenharmony_ci	}
2558c2ecf20Sopenharmony_ci#endif
2568c2ecf20Sopenharmony_ci	names = nullname + nulllen;
2578c2ecf20Sopenharmony_ci
2588c2ecf20Sopenharmony_ci	i=0;
2598c2ecf20Sopenharmony_ci
2608c2ecf20Sopenharmony_ci#ifdef CONFIG_MTD_REDBOOT_PARTS_UNALLOCATED
2618c2ecf20Sopenharmony_ci	if (fl->img->flash_base) {
2628c2ecf20Sopenharmony_ci	       parts[0].name = nullname;
2638c2ecf20Sopenharmony_ci	       parts[0].size = fl->img->flash_base;
2648c2ecf20Sopenharmony_ci	       parts[0].offset = 0;
2658c2ecf20Sopenharmony_ci		i++;
2668c2ecf20Sopenharmony_ci	}
2678c2ecf20Sopenharmony_ci#endif
2688c2ecf20Sopenharmony_ci	for ( ; i<nrparts; i++) {
2698c2ecf20Sopenharmony_ci		parts[i].size = fl->img->size;
2708c2ecf20Sopenharmony_ci		parts[i].offset = fl->img->flash_base;
2718c2ecf20Sopenharmony_ci		parts[i].name = names;
2728c2ecf20Sopenharmony_ci
2738c2ecf20Sopenharmony_ci		strcpy(names, fl->img->name);
2748c2ecf20Sopenharmony_ci#ifdef CONFIG_MTD_REDBOOT_PARTS_READONLY
2758c2ecf20Sopenharmony_ci		if (!memcmp(names, "RedBoot", 8) ||
2768c2ecf20Sopenharmony_ci				!memcmp(names, "RedBoot config", 15) ||
2778c2ecf20Sopenharmony_ci				!memcmp(names, "FIS directory", 14)) {
2788c2ecf20Sopenharmony_ci			parts[i].mask_flags = MTD_WRITEABLE;
2798c2ecf20Sopenharmony_ci		}
2808c2ecf20Sopenharmony_ci#endif
2818c2ecf20Sopenharmony_ci		names += strlen(names)+1;
2828c2ecf20Sopenharmony_ci
2838c2ecf20Sopenharmony_ci#ifdef CONFIG_MTD_REDBOOT_PARTS_UNALLOCATED
2848c2ecf20Sopenharmony_ci		if(fl->next && fl->img->flash_base + fl->img->size + master->erasesize <= fl->next->img->flash_base) {
2858c2ecf20Sopenharmony_ci			i++;
2868c2ecf20Sopenharmony_ci			parts[i].offset = parts[i-1].size + parts[i-1].offset;
2878c2ecf20Sopenharmony_ci			parts[i].size = fl->next->img->flash_base - parts[i].offset;
2888c2ecf20Sopenharmony_ci			parts[i].name = nullname;
2898c2ecf20Sopenharmony_ci		}
2908c2ecf20Sopenharmony_ci#endif
2918c2ecf20Sopenharmony_ci		tmp_fl = fl;
2928c2ecf20Sopenharmony_ci		fl = fl->next;
2938c2ecf20Sopenharmony_ci		kfree(tmp_fl);
2948c2ecf20Sopenharmony_ci	}
2958c2ecf20Sopenharmony_ci	ret = nrparts;
2968c2ecf20Sopenharmony_ci	*pparts = parts;
2978c2ecf20Sopenharmony_ci out:
2988c2ecf20Sopenharmony_ci	while (fl) {
2998c2ecf20Sopenharmony_ci		struct fis_list *old = fl;
3008c2ecf20Sopenharmony_ci		fl = fl->next;
3018c2ecf20Sopenharmony_ci		kfree(old);
3028c2ecf20Sopenharmony_ci	}
3038c2ecf20Sopenharmony_ci	vfree(buf);
3048c2ecf20Sopenharmony_ci	return ret;
3058c2ecf20Sopenharmony_ci}
3068c2ecf20Sopenharmony_ci
3078c2ecf20Sopenharmony_cistatic const struct of_device_id mtd_parser_redboot_of_match_table[] = {
3088c2ecf20Sopenharmony_ci	{ .compatible = "redboot-fis" },
3098c2ecf20Sopenharmony_ci	{},
3108c2ecf20Sopenharmony_ci};
3118c2ecf20Sopenharmony_ciMODULE_DEVICE_TABLE(of, mtd_parser_redboot_of_match_table);
3128c2ecf20Sopenharmony_ci
3138c2ecf20Sopenharmony_cistatic struct mtd_part_parser redboot_parser = {
3148c2ecf20Sopenharmony_ci	.parse_fn = parse_redboot_partitions,
3158c2ecf20Sopenharmony_ci	.name = "RedBoot",
3168c2ecf20Sopenharmony_ci	.of_match_table = mtd_parser_redboot_of_match_table,
3178c2ecf20Sopenharmony_ci};
3188c2ecf20Sopenharmony_cimodule_mtd_part_parser(redboot_parser);
3198c2ecf20Sopenharmony_ci
3208c2ecf20Sopenharmony_ci/* mtd parsers will request the module by parser name */
3218c2ecf20Sopenharmony_ciMODULE_ALIAS("RedBoot");
3228c2ecf20Sopenharmony_ciMODULE_LICENSE("GPL");
3238c2ecf20Sopenharmony_ciMODULE_AUTHOR("David Woodhouse <dwmw2@infradead.org>");
3248c2ecf20Sopenharmony_ciMODULE_DESCRIPTION("Parsing code for RedBoot Flash Image System (FIS) tables");
325