target/linux/generic/files/drivers/mtd/mtdsplit/mtdsplit_uimage.c

   1 /*
   2  *  Copyright (C) 2013 Gabor Juhos <juhosg@openwrt.org>
   3  *
   4  *  This program is free software; you can redistribute it and/or modify it
   5  *  under the terms of the GNU General Public License version 2 as published
   6  *  by the Free Software Foundation.
   7  *
   8  */
   9
  10 #define pr_fmt(fmt)     KBUILD_MODNAME ": " fmt
  11
  12 #include <linux/module.h>
  13 #include <linux/init.h>
  14 #include <linux/kernel.h>
  15 #include <linux/slab.h>
  16 #include <linux/vmalloc.h>
  17 #include <linux/mtd/mtd.h>
  18 #include <linux/mtd/partitions.h>
  19 #include <linux/version.h>
  20 #include <linux/byteorder/generic.h>
  21 #include <linux/of.h>
  22
  23 #include "mtdsplit.h"
  24
  25 /*
  26  * uimage_header itself is only 64B, but it may be prepended with another data.
  27  * Currently the biggest size is for Fon(Foxconn) devices: 64B + 32B
  28  */
  29 #define MAX_HEADER_LEN          96
  30
  31 #define IH_MAGIC        0x27051956      /* Image Magic Number           */
  32 #define IH_NMLEN                32      /* Image Name Length            */
  33
  34 #define IH_OS_LINUX             5       /* Linux        */
  35
  36 #define IH_TYPE_KERNEL          2       /* OS Kernel Image              */
  37 #define IH_TYPE_FILESYSTEM      7       /* Filesystem Image             */
  38
  39 /*
  40  * Legacy format image header,
  41  * all data in network byte order (aka natural aka bigendian).
  42  */
  43 struct uimage_header {
  44         uint32_t        ih_magic;       /* Image Header Magic Number    */
  45         uint32_t        ih_hcrc;        /* Image Header CRC Checksum    */
  46         uint32_t        ih_time;        /* Image Creation Timestamp     */
  47         uint32_t        ih_size;        /* Image Data Size              */
  48         uint32_t        ih_load;        /* Data  Load  Address          */
  49         uint32_t        ih_ep;          /* Entry Point Address          */
  50         uint32_t        ih_dcrc;        /* Image Data CRC Checksum      */
  51         uint8_t         ih_os;          /* Operating System             */
  52         uint8_t         ih_arch;        /* CPU architecture             */
  53         uint8_t         ih_type;        /* Image Type                   */
  54         uint8_t         ih_comp;        /* Compression Type             */
  55         uint8_t         ih_name[IH_NMLEN];      /* Image Name           */
  56 };
  57
  58 static int
  59 read_uimage_header(struct mtd_info *mtd, size_t offset, u_char *buf,
  60                    size_t header_len)
  61 {
  62         size_t retlen;
  63         int ret;
  64
  65         ret = mtd_read(mtd, offset, header_len, &retlen, buf);
  66         if (ret) {
  67                 pr_debug("read error in \"%s\"\n", mtd->name);
  68                 return ret;
  69         }
  70
  71         if (retlen != header_len) {
  72                 pr_debug("short read in \"%s\"\n", mtd->name);
  73                 return -EIO;
  74         }
  75
  76         return 0;
  77 }
  78
  79 /**
  80  * __mtdsplit_parse_uimage - scan partition and create kernel + rootfs parts
  81  *
  82  * @find_header: function to call for a block of data that will return offset
  83  *      and tail padding length of a valid uImage header if found
  84  */
  85 static int __mtdsplit_parse_uimage(struct mtd_info *master,
  86                    const struct mtd_partition **pparts,
  87                    struct mtd_part_parser_data *data,
  88                    ssize_t (*find_header)(u_char *buf, size_t len, int *extralen))
  89 {
  90         struct mtd_partition *parts;
  91         u_char *buf;
  92         int nr_parts;
  93         size_t offset;
  94         size_t uimage_offset;
  95         size_t uimage_size = 0;
  96         size_t rootfs_offset;
  97         size_t rootfs_size = 0;
  98         int uimage_part, rf_part;
  99         int ret;
 100         int extralen;
 101         enum mtdsplit_part_type type;
 102
 103         nr_parts = 2;
 104         parts = kzalloc(nr_parts * sizeof(*parts), GFP_KERNEL);
 105         if (!parts)
 106                 return -ENOMEM;
 107
 108         buf = vmalloc(MAX_HEADER_LEN);
 109         if (!buf) {
 110                 ret = -ENOMEM;
 111                 goto err_free_parts;
 112         }
 113
 114         /* find uImage on erase block boundaries */
 115         for (offset = 0; offset < master->size; offset += master->erasesize) {
 116                 struct uimage_header *header;
 117
 118                 uimage_size = 0;
 119
 120                 ret = read_uimage_header(master, offset, buf, MAX_HEADER_LEN);
 121                 if (ret)
 122                         continue;
 123
 124                 extralen = 0;
 125                 ret = find_header(buf, MAX_HEADER_LEN, &extralen);
 126                 if (ret < 0) {
 127                         pr_debug("no valid uImage found in \"%s\" at offset %llx\n",
 128                                  master->name, (unsigned long long) offset);
 129                         continue;
 130                 }
 131                 header = (struct uimage_header *)(buf + ret);
 132
 133                 uimage_size = sizeof(*header) +
 134                                 be32_to_cpu(header->ih_size) + ret + extralen;
 135
 136                 if ((offset + uimage_size) > master->size) {
 137                         pr_debug("uImage exceeds MTD device \"%s\"\n",
 138                                  master->name);
 139                         continue;
 140                 }
 141                 break;
 142         }
 143
 144         if (uimage_size == 0) {
 145                 pr_debug("no uImage found in \"%s\"\n", master->name);
 146                 ret = -ENODEV;
 147                 goto err_free_buf;
 148         }
 149
 150         uimage_offset = offset;
 151
 152         if (uimage_offset == 0) {
 153                 uimage_part = 0;
 154                 rf_part = 1;
 155
 156                 /* find the roots after the uImage */
 157                 ret = mtd_find_rootfs_from(master, uimage_offset + uimage_size,
 158                                            master->size, &rootfs_offset, &type);
 159                 if (ret) {
 160                         pr_debug("no rootfs after uImage in \"%s\"\n",
 161                                  master->name);
 162                         goto err_free_buf;
 163                 }
 164
 165                 rootfs_size = master->size - rootfs_offset;
 166                 uimage_size = rootfs_offset - uimage_offset;
 167         } else {
 168                 rf_part = 0;
 169                 uimage_part = 1;
 170
 171                 /* check rootfs presence at offset 0 */
 172                 ret = mtd_check_rootfs_magic(master, 0, &type);
 173                 if (ret) {
 174                         pr_debug("no rootfs before uImage in \"%s\"\n",
 175                                  master->name);
 176                         goto err_free_buf;
 177                 }
 178
 179                 rootfs_offset = 0;
 180                 rootfs_size = uimage_offset;
 181         }
 182
 183         if (rootfs_size == 0) {
 184                 pr_debug("no rootfs found in \"%s\"\n", master->name);
 185                 ret = -ENODEV;
 186                 goto err_free_buf;
 187         }
 188
 189         parts[uimage_part].name = KERNEL_PART_NAME;
 190         parts[uimage_part].offset = uimage_offset;
 191         parts[uimage_part].size = uimage_size;
 192
 193         if (type == MTDSPLIT_PART_TYPE_UBI)
 194                 parts[rf_part].name = UBI_PART_NAME;
 195         else
 196                 parts[rf_part].name = ROOTFS_PART_NAME;
 197         parts[rf_part].offset = rootfs_offset;
 198         parts[rf_part].size = rootfs_size;
 199
 200         vfree(buf);
 201
 202         *pparts = parts;
 203         return nr_parts;
 204
 205 err_free_buf:
 206         vfree(buf);
 207
 208 err_free_parts:
 209         kfree(parts);
 210         return ret;
 211 }
 212
 213 static ssize_t uimage_verify_default(u_char *buf, size_t len, int *extralen)
 214 {
 215         struct uimage_header *header = (struct uimage_header *)buf;
 216
 217         /* default sanity checks */
 218         if (be32_to_cpu(header->ih_magic) != IH_MAGIC) {
 219                 pr_debug("invalid uImage magic: %08x\n",
 220                          be32_to_cpu(header->ih_magic));
 221                 return -EINVAL;
 222         }
 223
 224         if (header->ih_os != IH_OS_LINUX) {
 225                 pr_debug("invalid uImage OS: %08x\n",
 226                          be32_to_cpu(header->ih_os));
 227                 return -EINVAL;
 228         }
 229
 230         if (header->ih_type != IH_TYPE_KERNEL) {
 231                 pr_debug("invalid uImage type: %08x\n",
 232                          be32_to_cpu(header->ih_type));
 233                 return -EINVAL;
 234         }
 235
 236         return 0;
 237 }
 238
 239 static int
 240 mtdsplit_uimage_parse_generic(struct mtd_info *master,
 241                               const struct mtd_partition **pparts,
 242                               struct mtd_part_parser_data *data)
 243 {
 244         return __mtdsplit_parse_uimage(master, pparts, data,
 245                                       uimage_verify_default);
 246 }
 247
 248 static const struct of_device_id mtdsplit_uimage_of_match_table[] = {
 249         { .compatible = "denx,uimage" },
 250         {},
 251 };
 252
 253 static struct mtd_part_parser uimage_generic_parser = {
 254         .owner = THIS_MODULE,
 255         .name = "uimage-fw",
 256         .of_match_table = mtdsplit_uimage_of_match_table,
 257         .parse_fn = mtdsplit_uimage_parse_generic,
 258         .type = MTD_PARSER_TYPE_FIRMWARE,
 259 };
 260
 261 #define FW_MAGIC_GS110TPPV1     0x4e474520
 262 #define FW_MAGIC_WNR2000V1      0x32303031
 263 #define FW_MAGIC_WNR2000V3      0x32303033
 264 #define FW_MAGIC_WNR2000V4      0x32303034
 265 #define FW_MAGIC_WNR2200        0x32323030
 266 #define FW_MAGIC_WNR612V2       0x32303631
 267 #define FW_MAGIC_WNR1000V2      0x31303031
 268 #define FW_MAGIC_WNR1000V2_VC   0x31303030
 269 #define FW_MAGIC_WNDR3700       0x33373030
 270 #define FW_MAGIC_WNDR3700V2     0x33373031
 271 #define FW_MAGIC_WPN824N        0x31313030
 272
 273 static ssize_t uimage_verify_wndr3700(u_char *buf, size_t len, int *extralen)
 274 {
 275         struct uimage_header *header = (struct uimage_header *)buf;
 276         uint8_t expected_type = IH_TYPE_FILESYSTEM;
 277
 278         switch (be32_to_cpu(header->ih_magic)) {
 279         case FW_MAGIC_GS110TPPV1:
 280         case FW_MAGIC_WNR2000V4:
 281                 expected_type = IH_TYPE_KERNEL;
 282                 break;
 283         case FW_MAGIC_WNR612V2:
 284         case FW_MAGIC_WNR1000V2:
 285         case FW_MAGIC_WNR1000V2_VC:
 286         case FW_MAGIC_WNR2000V1:
 287         case FW_MAGIC_WNR2000V3:
 288         case FW_MAGIC_WNR2200:
 289         case FW_MAGIC_WNDR3700:
 290         case FW_MAGIC_WNDR3700V2:
 291         case FW_MAGIC_WPN824N:
 292                 break;
 293         default:
 294                 return -EINVAL;
 295         }
 296
 297         if (header->ih_os != IH_OS_LINUX ||
 298             header->ih_type != expected_type)
 299                 return -EINVAL;
 300
 301         return 0;
 302 }
 303
 304 static int
 305 mtdsplit_uimage_parse_netgear(struct mtd_info *master,
 306                               const struct mtd_partition **pparts,
 307                               struct mtd_part_parser_data *data)
 308 {
 309         return __mtdsplit_parse_uimage(master, pparts, data,
 310                                       uimage_verify_wndr3700);
 311 }
 312
 313 static const struct of_device_id mtdsplit_uimage_netgear_of_match_table[] = {
 314         { .compatible = "netgear,uimage" },
 315         {},
 316 };
 317
 318 static struct mtd_part_parser uimage_netgear_parser = {
 319         .owner = THIS_MODULE,
 320         .name = "netgear-fw",
 321         .of_match_table = mtdsplit_uimage_netgear_of_match_table,
 322         .parse_fn = mtdsplit_uimage_parse_netgear,
 323         .type = MTD_PARSER_TYPE_FIRMWARE,
 324
 325 };
 326
 327
 328 /**************************************************
 329  * ALLNET
 330  **************************************************/
 331
 332 #define FW_MAGIC_SG8208M        0x00000006
 333 #define FW_MAGIC_SG8310PM       0x83000006
 334
 335 static ssize_t uimage_verify_allnet(u_char *buf, size_t len, int *extralen)
 336 {
 337         struct uimage_header *header = (struct uimage_header *)buf;
 338
 339         switch (be32_to_cpu(header->ih_magic)) {
 340         case FW_MAGIC_SG8208M:
 341         case FW_MAGIC_SG8310PM:
 342                 break;
 343         default:
 344                 return -EINVAL;
 345         }
 346
 347         if (header->ih_os != IH_OS_LINUX)
 348                 return -EINVAL;
 349
 350         return 0;
 351 }
 352
 353 static int
 354 mtdsplit_uimage_parse_allnet(struct mtd_info *master,
 355                               const struct mtd_partition **pparts,
 356                               struct mtd_part_parser_data *data)
 357 {
 358         return __mtdsplit_parse_uimage(master, pparts, data,
 359                                       uimage_verify_allnet);
 360 }
 361
 362 static const struct of_device_id mtdsplit_uimage_allnet_of_match_table[] = {
 363         { .compatible = "allnet,uimage" },
 364         {},
 365 };
 366
 367 static struct mtd_part_parser uimage_allnet_parser = {
 368         .owner = THIS_MODULE,
 369         .name = "allnet-fw",
 370         .of_match_table = mtdsplit_uimage_allnet_of_match_table,
 371         .parse_fn = mtdsplit_uimage_parse_allnet,
 372 };
 373
 374
 375 /**************************************************
 376  * Edimax
 377  **************************************************/
 378
 379 #define FW_EDIMAX_OFFSET        20
 380 #define FW_MAGIC_EDIMAX         0x43535953
 381
 382 static ssize_t uimage_find_edimax(u_char *buf, size_t len, int *extralen)
 383 {
 384         u32 *magic;
 385
 386         if (len < FW_EDIMAX_OFFSET + sizeof(struct uimage_header)) {
 387                 pr_err("Buffer too small for checking Edimax header\n");
 388                 return -ENOSPC;
 389         }
 390
 391         magic = (u32 *)buf;
 392         if (be32_to_cpu(*magic) != FW_MAGIC_EDIMAX)
 393                 return -EINVAL;
 394
 395         if (!uimage_verify_default(buf + FW_EDIMAX_OFFSET, len, extralen))
 396                 return FW_EDIMAX_OFFSET;
 397
 398         return -EINVAL;
 399 }
 400
 401 static int
 402 mtdsplit_uimage_parse_edimax(struct mtd_info *master,
 403                               const struct mtd_partition **pparts,
 404                               struct mtd_part_parser_data *data)
 405 {
 406         return __mtdsplit_parse_uimage(master, pparts, data,
 407                                        uimage_find_edimax);
 408 }
 409
 410 static const struct of_device_id mtdsplit_uimage_edimax_of_match_table[] = {
 411         { .compatible = "edimax,uimage" },
 412         {},
 413 };
 414
 415 static struct mtd_part_parser uimage_edimax_parser = {
 416         .owner = THIS_MODULE,
 417         .name = "edimax-fw",
 418         .of_match_table = mtdsplit_uimage_edimax_of_match_table,
 419         .parse_fn = mtdsplit_uimage_parse_edimax,
 420         .type = MTD_PARSER_TYPE_FIRMWARE,
 421 };
 422
 423
 424 /**************************************************
 425  * Fon(Foxconn)
 426  **************************************************/
 427
 428 #define FONFXC_PAD_LEN          32
 429
 430 static ssize_t uimage_find_fonfxc(u_char *buf, size_t len, int *extralen)
 431 {
 432         if (uimage_verify_default(buf, len, extralen) < 0)
 433                 return -EINVAL;
 434
 435         *extralen = FONFXC_PAD_LEN;
 436
 437         return 0;
 438 }
 439
 440 static int
 441 mtdsplit_uimage_parse_fonfxc(struct mtd_info *master,
 442                               const struct mtd_partition **pparts,
 443                               struct mtd_part_parser_data *data)
 444 {
 445         return __mtdsplit_parse_uimage(master, pparts, data,
 446                                        uimage_find_fonfxc);
 447 }
 448
 449 static const struct of_device_id mtdsplit_uimage_fonfxc_of_match_table[] = {
 450         { .compatible = "fonfxc,uimage" },
 451         {},
 452 };
 453
 454 static struct mtd_part_parser uimage_fonfxc_parser = {
 455         .owner = THIS_MODULE,
 456         .name = "fonfxc-fw",
 457         .of_match_table = mtdsplit_uimage_fonfxc_of_match_table,
 458         .parse_fn = mtdsplit_uimage_parse_fonfxc,
 459 };
 460
 461 /**************************************************
 462  * SGE (T&W) Shenzhen Gongjin Electronics
 463  **************************************************/
 464
 465 #define SGE_PAD_LEN             96
 466
 467 static ssize_t uimage_find_sge(u_char *buf, size_t len, int *extralen)
 468 {
 469         if (uimage_verify_default(buf, len, extralen) < 0)
 470                 return -EINVAL;
 471
 472         *extralen = SGE_PAD_LEN;
 473
 474         return 0;
 475 }
 476
 477 static int
 478 mtdsplit_uimage_parse_sge(struct mtd_info *master,
 479                               const struct mtd_partition **pparts,
 480                               struct mtd_part_parser_data *data)
 481 {
 482         return __mtdsplit_parse_uimage(master, pparts, data,
 483                                        uimage_find_sge);
 484 }
 485
 486 static const struct of_device_id mtdsplit_uimage_sge_of_match_table[] = {
 487         { .compatible = "sge,uimage" },
 488         {},
 489 };
 490
 491 static struct mtd_part_parser uimage_sge_parser = {
 492         .owner = THIS_MODULE,
 493         .name = "sge-fw",
 494         .of_match_table = mtdsplit_uimage_sge_of_match_table,
 495         .parse_fn = mtdsplit_uimage_parse_sge,
 496 };
 497
 498 /**************************************************
 499  * OKLI (OpenWrt Kernel Loader Image)
 500  **************************************************/
 501
 502 #define IH_MAGIC_OKLI   0x4f4b4c49
 503
 504 static ssize_t uimage_verify_okli(u_char *buf, size_t len, int *extralen)
 505 {
 506         struct uimage_header *header = (struct uimage_header *)buf;
 507
 508         /* default sanity checks */
 509         if (be32_to_cpu(header->ih_magic) != IH_MAGIC_OKLI) {
 510                 pr_debug("invalid uImage magic: %08x\n",
 511                          be32_to_cpu(header->ih_magic));
 512                 return -EINVAL;
 513         }
 514
 515         if (header->ih_os != IH_OS_LINUX) {
 516                 pr_debug("invalid uImage OS: %08x\n",
 517                          be32_to_cpu(header->ih_os));
 518                 return -EINVAL;
 519         }
 520
 521         if (header->ih_type != IH_TYPE_KERNEL) {
 522                 pr_debug("invalid uImage type: %08x\n",
 523                          be32_to_cpu(header->ih_type));
 524                 return -EINVAL;
 525         }
 526
 527         return 0;
 528 }
 529
 530 static int
 531 mtdsplit_uimage_parse_okli(struct mtd_info *master,
 532                               const struct mtd_partition **pparts,
 533                               struct mtd_part_parser_data *data)
 534 {
 535         return __mtdsplit_parse_uimage(master, pparts, data,
 536                                       uimage_verify_okli);
 537 }
 538
 539 static const struct of_device_id mtdsplit_uimage_okli_of_match_table[] = {
 540         { .compatible = "openwrt,okli" },
 541         {},
 542 };
 543
 544 static struct mtd_part_parser uimage_okli_parser = {
 545         .owner = THIS_MODULE,
 546         .name = "okli-fw",
 547         .of_match_table = mtdsplit_uimage_okli_of_match_table,
 548         .parse_fn = mtdsplit_uimage_parse_okli,
 549 };
 550
 551 /**************************************************
 552  * Init
 553  **************************************************/
 554
 555 static int __init mtdsplit_uimage_init(void)
 556 {
 557         register_mtd_parser(&uimage_generic_parser);
 558         register_mtd_parser(&uimage_netgear_parser);
 559         register_mtd_parser(&uimage_allnet_parser);
 560         register_mtd_parser(&uimage_edimax_parser);
 561         register_mtd_parser(&uimage_fonfxc_parser);
 562         register_mtd_parser(&uimage_sge_parser);
 563         register_mtd_parser(&uimage_okli_parser);
 564
 565         return 0;
 566 }
 567
 568 module_init(mtdsplit_uimage_init);