1 // SPDX-License-Identifier: GPL-2.0-or-later
3 * spw303v.c - partially based on OpenWrt's imagetag.c and addpattern.c
5 * Copyright (C) 2011 Jonas Gorski <jonas.gorski@gmail.com>
16 #define IMAGE_LEN 10 /* Length of Length Field */
17 #define ADDRESS_LEN 12 /* Length of Address field */
18 #define TAGID_LEN 6 /* Length of tag ID */
19 #define TAGINFO_LEN 20 /* Length of vendor information field in tag */
20 #define TAGVER_LEN 4 /* Length of Tag Version */
21 #define TAGLAYOUT_LEN 4 /* Length of FlashLayoutVer */
26 unsigned char tagVersion
[4]; // tag version. Will be 2 here.
27 unsigned char signiture_1
[20]; // text line for company info
28 unsigned char signiture_2
[14]; // additional info (can be version number)
29 unsigned char chipId
[6]; // chip id
30 unsigned char boardId
[16]; // board id
31 unsigned char bigEndian
[2]; // if = 1 - big, = 0 - little endia of the host
32 unsigned char totalImageLen
[IMAGE_LEN
]; // the sum of all the following length
33 unsigned char cfeAddress
[ADDRESS_LEN
]; // if non zero, cfe starting address
34 unsigned char cfeLen
[IMAGE_LEN
]; // if non zero, cfe size in clear ASCII text.
35 unsigned char rootfsAddress
[ADDRESS_LEN
]; // if non zero, filesystem starting address
36 unsigned char rootfsLen
[IMAGE_LEN
]; // if non zero, filesystem size in clear ASCII text.
37 unsigned char kernelAddress
[ADDRESS_LEN
]; // if non zero, kernel starting address
38 unsigned char kernelLen
[IMAGE_LEN
]; // if non zero, kernel size in clear ASCII text.
40 unsigned char certf1Address
[ADDRESS_LEN
];
41 unsigned char certf1Len
[6];
42 unsigned char certf2Address
[ADDRESS_LEN
];
43 unsigned char certf2Len
[6];
44 unsigned char certf3Address
[ADDRESS_LEN
];
45 unsigned char certf3Len
[6];
46 unsigned char httpsFileSize
[4];
47 unsigned char tr64FileSize
[4];
48 unsigned char tr69FileSize
[4];
49 unsigned char filesmap
[4];
51 unsigned char imageSequence
[4]; // incrments everytime an image is flashed
52 unsigned char reserved
[4]; // reserved for later use
53 unsigned char imageCRC
[4]; // 216-219: CRC32 of images
54 unsigned char reserved2
[16]; // 220-235: Unused at present
55 unsigned char headerCRC
[4]; // 236-239: CRC32 of header excluding tagVersion
56 unsigned char reserved3
[16]; // 240-255: Unused at present
59 static uint32_t crc32tab
[256] = {
60 0x00000000, 0x77073096, 0xEE0E612C, 0x990951BA, 0x076DC419, 0x706AF48F, 0xE963A535, 0x9E6495A3,
61 0x0EDB8832, 0x79DCB8A4, 0xE0D5E91E, 0x97D2D988, 0x09B64C2B, 0x7EB17CBD, 0xE7B82D07, 0x90BF1D91,
62 0x1DB71064, 0x6AB020F2, 0xF3B97148, 0x84BE41DE, 0x1ADAD47D, 0x6DDDE4EB, 0xF4D4B551, 0x83D385C7,
63 0x136C9856, 0x646BA8C0, 0xFD62F97A, 0x8A65C9EC, 0x14015C4F, 0x63066CD9, 0xFA0F3D63, 0x8D080DF5,
64 0x3B6E20C8, 0x4C69105E, 0xD56041E4, 0xA2677172, 0x3C03E4D1, 0x4B04D447, 0xD20D85FD, 0xA50AB56B,
65 0x35B5A8FA, 0x42B2986C, 0xDBBBC9D6, 0xACBCF940, 0x32D86CE3, 0x45DF5C75, 0xDCD60DCF, 0xABD13D59,
66 0x26D930AC, 0x51DE003A, 0xC8D75180, 0xBFD06116, 0x21B4F4B5, 0x56B3C423, 0xCFBA9599, 0xB8BDA50F,
67 0x2802B89E, 0x5F058808, 0xC60CD9B2, 0xB10BE924, 0x2F6F7C87, 0x58684C11, 0xC1611DAB, 0xB6662D3D,
68 0x76DC4190, 0x01DB7106, 0x98D220BC, 0xEFD5102A, 0x71B18589, 0x06B6B51F, 0x9FBFE4A5, 0xE8B8D433,
69 0x7807C9A2, 0x0F00F934, 0x9609A88E, 0xE10E9818, 0x7F6A0DBB, 0x086D3D2D, 0x91646C97, 0xE6635C01,
70 0x6B6B51F4, 0x1C6C6162, 0x856530D8, 0xF262004E, 0x6C0695ED, 0x1B01A57B, 0x8208F4C1, 0xF50FC457,
71 0x65B0D9C6, 0x12B7E950, 0x8BBEB8EA, 0xFCB9887C, 0x62DD1DDF, 0x15DA2D49, 0x8CD37CF3, 0xFBD44C65,
72 0x4DB26158, 0x3AB551CE, 0xA3BC0074, 0xD4BB30E2, 0x4ADFA541, 0x3DD895D7, 0xA4D1C46D, 0xD3D6F4FB,
73 0x4369E96A, 0x346ED9FC, 0xAD678846, 0xDA60B8D0, 0x44042D73, 0x33031DE5, 0xAA0A4C5F, 0xDD0D7CC9,
74 0x5005713C, 0x270241AA, 0xBE0B1010, 0xC90C2086, 0x5768B525, 0x206F85B3, 0xB966D409, 0xCE61E49F,
75 0x5EDEF90E, 0x29D9C998, 0xB0D09822, 0xC7D7A8B4, 0x59B33D17, 0x2EB40D81, 0xB7BD5C3B, 0xC0BA6CAD,
76 0xEDB88320, 0x9ABFB3B6, 0x03B6E20C, 0x74B1D29A, 0xEAD54739, 0x9DD277AF, 0x04DB2615, 0x73DC1683,
77 0xE3630B12, 0x94643B84, 0x0D6D6A3E, 0x7A6A5AA8, 0xE40ECF0B, 0x9309FF9D, 0x0A00AE27, 0x7D079EB1,
78 0xF00F9344, 0x8708A3D2, 0x1E01F268, 0x6906C2FE, 0xF762575D, 0x806567CB, 0x196C3671, 0x6E6B06E7,
79 0xFED41B76, 0x89D32BE0, 0x10DA7A5A, 0x67DD4ACC, 0xF9B9DF6F, 0x8EBEEFF9, 0x17B7BE43, 0x60B08ED5,
80 0xD6D6A3E8, 0xA1D1937E, 0x38D8C2C4, 0x4FDFF252, 0xD1BB67F1, 0xA6BC5767, 0x3FB506DD, 0x48B2364B,
81 0xD80D2BDA, 0xAF0A1B4C, 0x36034AF6, 0x41047A60, 0xDF60EFC3, 0xA867DF55, 0x316E8EEF, 0x4669BE79,
82 0xCB61B38C, 0xBC66831A, 0x256FD2A0, 0x5268E236, 0xCC0C7795, 0xBB0B4703, 0x220216B9, 0x5505262F,
83 0xC5BA3BBE, 0xB2BD0B28, 0x2BB45A92, 0x5CB36A04, 0xC2D7FFA7, 0xB5D0CF31, 0x2CD99E8B, 0x5BDEAE1D,
84 0x9B64C2B0, 0xEC63F226, 0x756AA39C, 0x026D930A, 0x9C0906A9, 0xEB0E363F, 0x72076785, 0x05005713,
85 0x95BF4A82, 0xE2B87A14, 0x7BB12BAE, 0x0CB61B38, 0x92D28E9B, 0xE5D5BE0D, 0x7CDCEFB7, 0x0BDBDF21,
86 0x86D3D2D4, 0xF1D4E242, 0x68DDB3F8, 0x1FDA836E, 0x81BE16CD, 0xF6B9265B, 0x6FB077E1, 0x18B74777,
87 0x88085AE6, 0xFF0F6A70, 0x66063BCA, 0x11010B5C, 0x8F659EFF, 0xF862AE69, 0x616BFFD3, 0x166CCF45,
88 0xA00AE278, 0xD70DD2EE, 0x4E048354, 0x3903B3C2, 0xA7672661, 0xD06016F7, 0x4969474D, 0x3E6E77DB,
89 0xAED16A4A, 0xD9D65ADC, 0x40DF0B66, 0x37D83BF0, 0xA9BCAE53, 0xDEBB9EC5, 0x47B2CF7F, 0x30B5FFE9,
90 0xBDBDF21C, 0xCABAC28A, 0x53B39330, 0x24B4A3A6, 0xBAD03605, 0xCDD70693, 0x54DE5729, 0x23D967BF,
91 0xB3667A2E, 0xC4614AB8, 0x5D681B02, 0x2A6F2B94, 0xB40BBE37, 0xC30C8EA1, 0x5A05DF1B, 0x2D02EF8D
93 #define IMAGETAG_CRC_START 0xFFFFFFFF
95 #define IMAGETAG_MAGIC1_TCOM "AAAAAAAA Corporatio"
97 static char fake_data
[] = {
98 0x18, 0x21, 0x21, 0x18, 0x21, 0x21, 0x21, 0x21, 0x21, 0x21, 0x21 ,0x18,
99 0x21, 0x24, 0x21, 0x1b, 0x18, 0x18, 0x24, 0x24, 0x18, 0x21, 0x21, 0x21,
100 0x21, 0x21, 0x21, 0x21, 0x1b, 0x18, 0x18, 0x24, 0x24, 0x21, 0x21, 0x21,
101 0x21, 0x21, 0x21, 0x21, 0x18, 0x21, 0x21, 0x21, 0x21, 0x21, 0x21, 0x18,
102 0x21, 0x21, 0x21, 0x21, 0x21, 0x21, 0x21, 0x21, 0x21, 0x18, 0x21, 0x21,
103 0x21, 0x21, 0x21, 0x21,
107 uint32_t crc32(uint32_t crc
, const void *data
, size_t len
)
109 const uint8_t *in
= data
;
112 crc
= (crc
>> 8) ^ crc32tab
[(crc
^ *in
++) & 0xFF];
117 void fix_header(void *buf
)
119 struct spw303v_tag
*tag
= buf
;
121 /* Replace signature with custom t-com one */
122 memset(tag
->signiture_1
, 0, 20);
123 memcpy(tag
->signiture_1
, IMAGETAG_MAGIC1_TCOM
, strlen(IMAGETAG_MAGIC1_TCOM
));
125 /* Clear cert fields to remove information_* data */
126 memset(tag
->certf1Address
, 0, 74);
128 /* replace image crc with modified one */
129 crc
= ntohl(*((uint32_t *)&tag
->imageCRC
));
131 crc
= htonl(crc32(crc
, fake_data
, 64));
133 memcpy(tag
->imageCRC
, &crc
, 4);
136 crc
= htonl(crc32(IMAGETAG_CRC_START
, buf
, 236));
137 memcpy(tag
->headerCRC
, &crc
, 4);
142 void usage(void) __attribute__ (( __noreturn__
));
146 fprintf(stderr
, "Usage: spw303v [-i <inputfile>] [-o <outputfile>]\n");
151 int main(int argc
, char **argv
)
153 char buf
[1024]; /* keep this at 1k or adjust garbage calc below */
162 uint32_t image_crc
= IMAGETAG_CRC_START
;
164 while ((c
= getopt(argc
, argv
, "i:o:h")) != -1) {
178 if (optind
!= argc
|| optind
== 1) {
179 fprintf(stderr
, "illegal arg \"%s\"\n", argv
[optind
]);
183 if (ifn
&& !(in
= fopen(ifn
, "r"))) {
184 fprintf(stderr
, "can not open \"%s\" for reading\n", ifn
);
188 if (ofn
&& !(out
= fopen(ofn
, "w"))) {
189 fprintf(stderr
, "can not open \"%s\" for writing\n", ofn
);
195 while ((n
= fread(buf
, 1, sizeof(buf
), in
)) > 0) {
196 if (n
< sizeof(buf
)) {
199 fprintf(stderr
, "fread error\n");
204 if (first_block
&& n
>= 256) {
209 image_crc
= crc32(image_crc
, buf
, n
);
211 if (!fwrite(buf
, n
, 1, out
)) {
213 fprintf(stderr
, "fwrite error\n");