src/spw303v.c

   1 /*
   2  * spw303v.c - partially based on OpenWrt's imagetag.c and addpattern.c
   3  *
   4  * Copyright (C) 2011  Jonas Gorski <jonas.gorski@gmail.com>
   5  *
   6  * This program is free software; you can redistribute it and/or modify
   7  * it under the terms of the GNU General Public License as published by
   8  * the Free Software Foundation; either version 2 of the License, or
   9  * (at your option) any later version.
  10  *
  11  * This program is distributed in the hope that it will be useful,
  12  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  13  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
  14  * General Public License for more details.
  15  *
  16  * You should have received a copy of the GNU General Public License
  17  * along with this program; if not, write to the Free Software
  18  * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
  19  */
  20
  21 #include <arpa/inet.h>
  22 #include <stdio.h>
  23 #include <stdlib.h>
  24 #include <string.h>
  25 #include <stdint.h>
  26 #include <unistd.h>
  27 #include <sys/stat.h>
  28
  29 #define IMAGE_LEN 10                   /* Length of Length Field */
  30 #define ADDRESS_LEN 12                 /* Length of Address field */
  31 #define TAGID_LEN  6                   /* Length of tag ID */
  32 #define TAGINFO_LEN 20                 /* Length of vendor information field in tag */
  33 #define TAGVER_LEN 4                   /* Length of Tag Version */
  34 #define TAGLAYOUT_LEN 4                /* Length of FlashLayoutVer */
  35
  36
  37 struct spw303v_tag
  38 {
  39     unsigned char tagVersion[4];       // tag version.  Will be 2 here.
  40     unsigned char signiture_1[20];                       // text line for company info
  41     unsigned char signiture_2[14];                      // additional info (can be version number)
  42     unsigned char chipId[6];                                    // chip id
  43     unsigned char boardId[16];                          // board id
  44     unsigned char bigEndian[2];                         // if = 1 - big, = 0 - little endia of the host
  45     unsigned char totalImageLen[IMAGE_LEN];      // the sum of all the following length
  46     unsigned char cfeAddress[ADDRESS_LEN];       // if non zero, cfe starting address
  47     unsigned char cfeLen[IMAGE_LEN];             // if non zero, cfe size in clear ASCII text.
  48     unsigned char rootfsAddress[ADDRESS_LEN];    // if non zero, filesystem starting address
  49     unsigned char rootfsLen[IMAGE_LEN];          // if non zero, filesystem size in clear ASCII text.
  50     unsigned char kernelAddress[ADDRESS_LEN];    // if non zero, kernel starting address
  51     unsigned char kernelLen[IMAGE_LEN];          // if non zero, kernel size in clear ASCII text.
  52
  53         unsigned char certf1Address[ADDRESS_LEN];
  54         unsigned char certf1Len[6];
  55         unsigned char certf2Address[ADDRESS_LEN];
  56         unsigned char certf2Len[6];
  57         unsigned char certf3Address[ADDRESS_LEN];
  58         unsigned char certf3Len[6];
  59         unsigned char httpsFileSize[4];
  60         unsigned char tr64FileSize[4];
  61         unsigned char tr69FileSize[4];
  62         unsigned char filesmap[4];
  63
  64     unsigned char imageSequence[4];                             // incrments everytime an image is flashed
  65     unsigned char reserved[4];                                      // reserved for later use
  66     unsigned char imageCRC[4];                      // 216-219: CRC32 of images
  67     unsigned char reserved2[16];                    // 220-235: Unused at present
  68     unsigned char headerCRC[4];                     // 236-239: CRC32 of header excluding tagVersion
  69     unsigned char reserved3[16];                    // 240-255: Unused at present
  70 };
  71
  72 static uint32_t crc32tab[256] = {
  73         0x00000000, 0x77073096, 0xEE0E612C, 0x990951BA, 0x076DC419, 0x706AF48F, 0xE963A535, 0x9E6495A3,
  74         0x0EDB8832, 0x79DCB8A4, 0xE0D5E91E, 0x97D2D988, 0x09B64C2B, 0x7EB17CBD, 0xE7B82D07, 0x90BF1D91,
  75         0x1DB71064, 0x6AB020F2, 0xF3B97148, 0x84BE41DE, 0x1ADAD47D, 0x6DDDE4EB, 0xF4D4B551, 0x83D385C7,
  76         0x136C9856, 0x646BA8C0, 0xFD62F97A, 0x8A65C9EC, 0x14015C4F, 0x63066CD9, 0xFA0F3D63, 0x8D080DF5,
  77         0x3B6E20C8, 0x4C69105E, 0xD56041E4, 0xA2677172, 0x3C03E4D1, 0x4B04D447, 0xD20D85FD, 0xA50AB56B,
  78         0x35B5A8FA, 0x42B2986C, 0xDBBBC9D6, 0xACBCF940, 0x32D86CE3, 0x45DF5C75, 0xDCD60DCF, 0xABD13D59,
  79         0x26D930AC, 0x51DE003A, 0xC8D75180, 0xBFD06116, 0x21B4F4B5, 0x56B3C423, 0xCFBA9599, 0xB8BDA50F,
  80         0x2802B89E, 0x5F058808, 0xC60CD9B2, 0xB10BE924, 0x2F6F7C87, 0x58684C11, 0xC1611DAB, 0xB6662D3D,
  81         0x76DC4190, 0x01DB7106, 0x98D220BC, 0xEFD5102A, 0x71B18589, 0x06B6B51F, 0x9FBFE4A5, 0xE8B8D433,
  82         0x7807C9A2, 0x0F00F934, 0x9609A88E, 0xE10E9818, 0x7F6A0DBB, 0x086D3D2D, 0x91646C97, 0xE6635C01,
  83         0x6B6B51F4, 0x1C6C6162, 0x856530D8, 0xF262004E, 0x6C0695ED, 0x1B01A57B, 0x8208F4C1, 0xF50FC457,
  84         0x65B0D9C6, 0x12B7E950, 0x8BBEB8EA, 0xFCB9887C, 0x62DD1DDF, 0x15DA2D49, 0x8CD37CF3, 0xFBD44C65,
  85         0x4DB26158, 0x3AB551CE, 0xA3BC0074, 0xD4BB30E2, 0x4ADFA541, 0x3DD895D7, 0xA4D1C46D, 0xD3D6F4FB,
  86         0x4369E96A, 0x346ED9FC, 0xAD678846, 0xDA60B8D0, 0x44042D73, 0x33031DE5, 0xAA0A4C5F, 0xDD0D7CC9,
  87         0x5005713C, 0x270241AA, 0xBE0B1010, 0xC90C2086, 0x5768B525, 0x206F85B3, 0xB966D409, 0xCE61E49F,
  88         0x5EDEF90E, 0x29D9C998, 0xB0D09822, 0xC7D7A8B4, 0x59B33D17, 0x2EB40D81, 0xB7BD5C3B, 0xC0BA6CAD,
  89         0xEDB88320, 0x9ABFB3B6, 0x03B6E20C, 0x74B1D29A, 0xEAD54739, 0x9DD277AF, 0x04DB2615, 0x73DC1683,
  90         0xE3630B12, 0x94643B84, 0x0D6D6A3E, 0x7A6A5AA8, 0xE40ECF0B, 0x9309FF9D, 0x0A00AE27, 0x7D079EB1,
  91         0xF00F9344, 0x8708A3D2, 0x1E01F268, 0x6906C2FE, 0xF762575D, 0x806567CB, 0x196C3671, 0x6E6B06E7,
  92         0xFED41B76, 0x89D32BE0, 0x10DA7A5A, 0x67DD4ACC, 0xF9B9DF6F, 0x8EBEEFF9, 0x17B7BE43, 0x60B08ED5,
  93         0xD6D6A3E8, 0xA1D1937E, 0x38D8C2C4, 0x4FDFF252, 0xD1BB67F1, 0xA6BC5767, 0x3FB506DD, 0x48B2364B,
  94         0xD80D2BDA, 0xAF0A1B4C, 0x36034AF6, 0x41047A60, 0xDF60EFC3, 0xA867DF55, 0x316E8EEF, 0x4669BE79,
  95         0xCB61B38C, 0xBC66831A, 0x256FD2A0, 0x5268E236, 0xCC0C7795, 0xBB0B4703, 0x220216B9, 0x5505262F,
  96         0xC5BA3BBE, 0xB2BD0B28, 0x2BB45A92, 0x5CB36A04, 0xC2D7FFA7, 0xB5D0CF31, 0x2CD99E8B, 0x5BDEAE1D,
  97         0x9B64C2B0, 0xEC63F226, 0x756AA39C, 0x026D930A, 0x9C0906A9, 0xEB0E363F, 0x72076785, 0x05005713,
  98         0x95BF4A82, 0xE2B87A14, 0x7BB12BAE, 0x0CB61B38, 0x92D28E9B, 0xE5D5BE0D, 0x7CDCEFB7, 0x0BDBDF21,
  99         0x86D3D2D4, 0xF1D4E242, 0x68DDB3F8, 0x1FDA836E, 0x81BE16CD, 0xF6B9265B, 0x6FB077E1, 0x18B74777,
 100         0x88085AE6, 0xFF0F6A70, 0x66063BCA, 0x11010B5C, 0x8F659EFF, 0xF862AE69, 0x616BFFD3, 0x166CCF45,
 101         0xA00AE278, 0xD70DD2EE, 0x4E048354, 0x3903B3C2, 0xA7672661, 0xD06016F7, 0x4969474D, 0x3E6E77DB,
 102         0xAED16A4A, 0xD9D65ADC, 0x40DF0B66, 0x37D83BF0, 0xA9BCAE53, 0xDEBB9EC5, 0x47B2CF7F, 0x30B5FFE9,
 103         0xBDBDF21C, 0xCABAC28A, 0x53B39330, 0x24B4A3A6, 0xBAD03605, 0xCDD70693, 0x54DE5729, 0x23D967BF,
 104         0xB3667A2E, 0xC4614AB8, 0x5D681B02, 0x2A6F2B94, 0xB40BBE37, 0xC30C8EA1, 0x5A05DF1B, 0x2D02EF8D
 105 };
 106 #define IMAGETAG_CRC_START                      0xFFFFFFFF
 107
 108 #define IMAGETAG_MAGIC1_TCOM            "AAAAAAAA Corporatio"
 109
 110 static char fake_data[] = {
 111         0x18, 0x21, 0x21, 0x18, 0x21, 0x21, 0x21, 0x21, 0x21, 0x21, 0x21 ,0x18,
 112         0x21, 0x24, 0x21, 0x1b, 0x18, 0x18, 0x24, 0x24, 0x18, 0x21, 0x21, 0x21,
 113         0x21, 0x21, 0x21, 0x21, 0x1b, 0x18, 0x18, 0x24, 0x24, 0x21, 0x21, 0x21,
 114         0x21, 0x21, 0x21, 0x21, 0x18, 0x21, 0x21, 0x21, 0x21, 0x21, 0x21, 0x18,
 115         0x21, 0x21, 0x21, 0x21, 0x21, 0x21, 0x21, 0x21, 0x21, 0x18, 0x21, 0x21,
 116         0x21, 0x21, 0x21, 0x21,
 117 };
 118
 119
 120 uint32_t crc32(uint32_t crc, uint8_t *data, size_t len)
 121 {
 122         while (len--)
 123                 crc = (crc >> 8) ^ crc32tab[(crc ^ *data++) & 0xFF];
 124
 125         return crc;
 126 }
 127
 128 void fix_header(void *buf)
 129 {
 130         struct spw303v_tag *tag = buf;
 131         uint32_t crc;
 132         /* Replace signature with custom t-com one */
 133         memset(tag->signiture_1, 0, 20);
 134         memcpy(tag->signiture_1, IMAGETAG_MAGIC1_TCOM, strlen(IMAGETAG_MAGIC1_TCOM));
 135
 136         /* Clear cert fields to remove information_* data */
 137         memset(tag->certf1Address, 0, 74);
 138
 139         /* replace image crc with modified one */
 140         crc = ntohl(*((uint32_t *)&tag->imageCRC));
 141
 142         crc = htonl(crc32(crc, fake_data, 64));
 143
 144         memcpy(tag->imageCRC, &crc, 4);
 145
 146         /* Update tag crc */
 147         crc = htonl(crc32(IMAGETAG_CRC_START, buf, 236));
 148         memcpy(tag->headerCRC, &crc, 4);
 149 }
 150
 151
 152
 153 void usage(void) __attribute__ (( __noreturn__ ));
 154
 155 void usage(void)
 156 {
 157         fprintf(stderr, "Usage: spw303v [-i <inputfile>] [-o <outputfile>]\n");
 158         exit(EXIT_FAILURE);
 159 }
 160
 161
 162 int main(int argc, char **argv)
 163 {
 164         char buf[1024]; /* keep this at 1k or adjust garbage calc below */
 165         FILE *in = stdin;
 166         FILE *out = stdout;
 167         char *ifn = NULL;
 168         char *ofn = NULL;
 169         int c;
 170         size_t n;
 171         int first_block = 1;
 172
 173         uint32_t image_crc = IMAGETAG_CRC_START;
 174
 175         while ((c = getopt(argc, argv, "i:o:h")) != -1) {
 176                 switch (c) {
 177                         case 'i':
 178                                 ifn = optarg;
 179                                 break;
 180                         case 'o':
 181                                 ofn = optarg;
 182                                 break;
 183                         case 'h':
 184                         default:
 185                                 usage();
 186                 }
 187         }
 188
 189         if (optind != argc || optind == 1) {
 190                 fprintf(stderr, "illegal arg \"%s\"\n", argv[optind]);
 191                 usage();
 192         }
 193
 194         if (ifn && !(in = fopen(ifn, "r"))) {
 195                 fprintf(stderr, "can not open \"%s\" for reading\n", ifn);
 196                 usage();
 197         }
 198
 199         if (ofn && !(out = fopen(ofn, "w"))) {
 200                 fprintf(stderr, "can not open \"%s\" for writing\n", ofn);
 201                 usage();
 202         }
 203
 204
 205
 206         while ((n = fread(buf, 1, sizeof(buf), in)) > 0) {
 207                 if (n < sizeof(buf)) {
 208                         if (ferror(in)) {
 209                         FREAD_ERROR:
 210                                 fprintf(stderr, "fread error\n");
 211                                 return EXIT_FAILURE;
 212                         }
 213                 }
 214
 215                 if (first_block && n >= 256) {
 216                         fix_header(buf);
 217                         first_block = 0;
 218                 }
 219
 220                 image_crc = crc32(image_crc, buf, n);
 221
 222                 if (!fwrite(buf, n, 1, out)) {
 223                 FWRITE_ERROR:
 224                         fprintf(stderr, "fwrite error\n");
 225                         return EXIT_FAILURE;
 226                 }
 227         }
 228
 229         if (ferror(in)) {
 230                 goto FREAD_ERROR;
 231         }
 232
 233         if (fflush(out)) {
 234                 goto FWRITE_ERROR;
 235         }
 236
 237         fclose(in);
 238         fclose(out);
 239
 240         return EXIT_SUCCESS;
 241 }