src/spw303v.c

   1 /*
   2  * spw303v.c - partially based on OpenWrt's imagetag.c and addpattern.c
   3  *
   4  * Copyright (C) 2011  Jonas Gorski <jonas.gorski@gmail.com>
   5  *
   6  * This program is free software; you can redistribute it and/or modify
   7  * it under the terms of the GNU General Public License as published by
   8  * the Free Software Foundation; either version 2 of the License, or
   9  * (at your option) any later version.
  10  *
  11  * This program is distributed in the hope that it will be useful,
  12  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  13  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
  14  * General Public License for more details.
  15  *
  16  * You should have received a copy of the GNU General Public License
  17  * along with this program; if not, write to the Free Software
  18  * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
  19  */
  20
  21 #include <arpa/inet.h>
  22 #include <stdio.h>
  23 #include <stdlib.h>
  24 #include <string.h>
  25 #include <stdint.h>
  26 #include <unistd.h>
  27 #include <sys/stat.h>
  28
  29 #define IMAGE_LEN 10                   /* Length of Length Field */
  30 #define ADDRESS_LEN 12                 /* Length of Address field */
  31 #define TAGID_LEN  6                   /* Length of tag ID */
  32 #define TAGINFO_LEN 20                 /* Length of vendor information field in tag */
  33 #define TAGVER_LEN 4                   /* Length of Tag Version */
  34 #define TAGLAYOUT_LEN 4                /* Length of FlashLayoutVer */
  35
  36
  37 struct spw303v_tag
  38 {
  39     unsigned char tagVersion[4];       // tag version.  Will be 2 here.
  40     unsigned char signiture_1[20];                       // text line for company info
  41     unsigned char signiture_2[14];                      // additional info (can be version number)
  42     unsigned char chipId[6];                                    // chip id
  43     unsigned char boardId[16];                          // board id
  44     unsigned char bigEndian[2];                         // if = 1 - big, = 0 - little endia of the host
  45     unsigned char totalImageLen[IMAGE_LEN];      // the sum of all the following length
  46     unsigned char cfeAddress[ADDRESS_LEN];       // if non zero, cfe starting address
  47     unsigned char cfeLen[IMAGE_LEN];             // if non zero, cfe size in clear ASCII text.
  48     unsigned char rootfsAddress[ADDRESS_LEN];    // if non zero, filesystem starting address
  49     unsigned char rootfsLen[IMAGE_LEN];          // if non zero, filesystem size in clear ASCII text.
  50     unsigned char kernelAddress[ADDRESS_LEN];    // if non zero, kernel starting address
  51     unsigned char kernelLen[IMAGE_LEN];          // if non zero, kernel size in clear ASCII text.
  52
  53         unsigned char certf1Address[ADDRESS_LEN];
  54         unsigned char certf1Len[6];
  55         unsigned char certf2Address[ADDRESS_LEN];
  56         unsigned char certf2Len[6];
  57         unsigned char certf3Address[ADDRESS_LEN];
  58         unsigned char certf3Len[6];
  59         unsigned char httpsFileSize[4];
  60         unsigned char tr64FileSize[4];
  61         unsigned char tr69FileSize[4];
  62         unsigned char filesmap[4];
  63
  64     unsigned char imageSequence[4];                             // incrments everytime an image is flashed
  65     unsigned char reserved[4];                                      // reserved for later use
  66     unsigned char imageCRC[4];                      // 216-219: CRC32 of images
  67     unsigned char reserved2[16];                    // 220-235: Unused at present
  68     unsigned char headerCRC[4];                     // 236-239: CRC32 of header excluding tagVersion
  69     unsigned char reserved3[16];                    // 240-255: Unused at present
  70 };
  71
  72 static uint32_t crc32tab[256] = {
  73         0x00000000, 0x77073096, 0xEE0E612C, 0x990951BA, 0x076DC419, 0x706AF48F, 0xE963A535, 0x9E6495A3,
  74         0x0EDB8832, 0x79DCB8A4, 0xE0D5E91E, 0x97D2D988, 0x09B64C2B, 0x7EB17CBD, 0xE7B82D07, 0x90BF1D91,
  75         0x1DB71064, 0x6AB020F2, 0xF3B97148, 0x84BE41DE, 0x1ADAD47D, 0x6DDDE4EB, 0xF4D4B551, 0x83D385C7,
  76         0x136C9856, 0x646BA8C0, 0xFD62F97A, 0x8A65C9EC, 0x14015C4F, 0x63066CD9, 0xFA0F3D63, 0x8D080DF5,
  77         0x3B6E20C8, 0x4C69105E, 0xD56041E4, 0xA2677172, 0x3C03E4D1, 0x4B04D447, 0xD20D85FD, 0xA50AB56B,
  78         0x35B5A8FA, 0x42B2986C, 0xDBBBC9D6, 0xACBCF940, 0x32D86CE3, 0x45DF5C75, 0xDCD60DCF, 0xABD13D59,
  79         0x26D930AC, 0x51DE003A, 0xC8D75180, 0xBFD06116, 0x21B4F4B5, 0x56B3C423, 0xCFBA9599, 0xB8BDA50F,
  80         0x2802B89E, 0x5F058808, 0xC60CD9B2, 0xB10BE924, 0x2F6F7C87, 0x58684C11, 0xC1611DAB, 0xB6662D3D,
  81         0x76DC4190, 0x01DB7106, 0x98D220BC, 0xEFD5102A, 0x71B18589, 0x06B6B51F, 0x9FBFE4A5, 0xE8B8D433,
  82         0x7807C9A2, 0x0F00F934, 0x9609A88E, 0xE10E9818, 0x7F6A0DBB, 0x086D3D2D, 0x91646C97, 0xE6635C01,
  83         0x6B6B51F4, 0x1C6C6162, 0x856530D8, 0xF262004E, 0x6C0695ED, 0x1B01A57B, 0x8208F4C1, 0xF50FC457,
  84         0x65B0D9C6, 0x12B7E950, 0x8BBEB8EA, 0xFCB9887C, 0x62DD1DDF, 0x15DA2D49, 0x8CD37CF3, 0xFBD44C65,
  85         0x4DB26158, 0x3AB551CE, 0xA3BC0074, 0xD4BB30E2, 0x4ADFA541, 0x3DD895D7, 0xA4D1C46D, 0xD3D6F4FB,
  86         0x4369E96A, 0x346ED9FC, 0xAD678846, 0xDA60B8D0, 0x44042D73, 0x33031DE5, 0xAA0A4C5F, 0xDD0D7CC9,
  87         0x5005713C, 0x270241AA, 0xBE0B1010, 0xC90C2086, 0x5768B525, 0x206F85B3, 0xB966D409, 0xCE61E49F,
  88         0x5EDEF90E, 0x29D9C998, 0xB0D09822, 0xC7D7A8B4, 0x59B33D17, 0x2EB40D81, 0xB7BD5C3B, 0xC0BA6CAD,
  89         0xEDB88320, 0x9ABFB3B6, 0x03B6E20C, 0x74B1D29A, 0xEAD54739, 0x9DD277AF, 0x04DB2615, 0x73DC1683,
  90         0xE3630B12, 0x94643B84, 0x0D6D6A3E, 0x7A6A5AA8, 0xE40ECF0B, 0x9309FF9D, 0x0A00AE27, 0x7D079EB1,
  91         0xF00F9344, 0x8708A3D2, 0x1E01F268, 0x6906C2FE, 0xF762575D, 0x806567CB, 0x196C3671, 0x6E6B06E7,
  92         0xFED41B76, 0x89D32BE0, 0x10DA7A5A, 0x67DD4ACC, 0xF9B9DF6F, 0x8EBEEFF9, 0x17B7BE43, 0x60B08ED5,
  93         0xD6D6A3E8, 0xA1D1937E, 0x38D8C2C4, 0x4FDFF252, 0xD1BB67F1, 0xA6BC5767, 0x3FB506DD, 0x48B2364B,
  94         0xD80D2BDA, 0xAF0A1B4C, 0x36034AF6, 0x41047A60, 0xDF60EFC3, 0xA867DF55, 0x316E8EEF, 0x4669BE79,
  95         0xCB61B38C, 0xBC66831A, 0x256FD2A0, 0x5268E236, 0xCC0C7795, 0xBB0B4703, 0x220216B9, 0x5505262F,
  96         0xC5BA3BBE, 0xB2BD0B28, 0x2BB45A92, 0x5CB36A04, 0xC2D7FFA7, 0xB5D0CF31, 0x2CD99E8B, 0x5BDEAE1D,
  97         0x9B64C2B0, 0xEC63F226, 0x756AA39C, 0x026D930A, 0x9C0906A9, 0xEB0E363F, 0x72076785, 0x05005713,
  98         0x95BF4A82, 0xE2B87A14, 0x7BB12BAE, 0x0CB61B38, 0x92D28E9B, 0xE5D5BE0D, 0x7CDCEFB7, 0x0BDBDF21,
  99         0x86D3D2D4, 0xF1D4E242, 0x68DDB3F8, 0x1FDA836E, 0x81BE16CD, 0xF6B9265B, 0x6FB077E1, 0x18B74777,
 100         0x88085AE6, 0xFF0F6A70, 0x66063BCA, 0x11010B5C, 0x8F659EFF, 0xF862AE69, 0x616BFFD3, 0x166CCF45,
 101         0xA00AE278, 0xD70DD2EE, 0x4E048354, 0x3903B3C2, 0xA7672661, 0xD06016F7, 0x4969474D, 0x3E6E77DB,
 102         0xAED16A4A, 0xD9D65ADC, 0x40DF0B66, 0x37D83BF0, 0xA9BCAE53, 0xDEBB9EC5, 0x47B2CF7F, 0x30B5FFE9,
 103         0xBDBDF21C, 0xCABAC28A, 0x53B39330, 0x24B4A3A6, 0xBAD03605, 0xCDD70693, 0x54DE5729, 0x23D967BF,
 104         0xB3667A2E, 0xC4614AB8, 0x5D681B02, 0x2A6F2B94, 0xB40BBE37, 0xC30C8EA1, 0x5A05DF1B, 0x2D02EF8D
 105 };
 106 #define IMAGETAG_CRC_START                      0xFFFFFFFF
 107
 108 #define IMAGETAG_MAGIC1_TCOM            "AAAAAAAA Corporatio"
 109
 110 static char fake_data[] = {
 111         0x18, 0x21, 0x21, 0x18, 0x21, 0x21, 0x21, 0x21, 0x21, 0x21, 0x21 ,0x18,
 112         0x21, 0x24, 0x21, 0x1b, 0x18, 0x18, 0x24, 0x24, 0x18, 0x21, 0x21, 0x21,
 113         0x21, 0x21, 0x21, 0x21, 0x1b, 0x18, 0x18, 0x24, 0x24, 0x21, 0x21, 0x21,
 114         0x21, 0x21, 0x21, 0x21, 0x18, 0x21, 0x21, 0x21, 0x21, 0x21, 0x21, 0x18,
 115         0x21, 0x21, 0x21, 0x21, 0x21, 0x21, 0x21, 0x21, 0x21, 0x18, 0x21, 0x21,
 116         0x21, 0x21, 0x21, 0x21,
 117 };
 118
 119
 120 uint32_t crc32(uint32_t crc, const void *data, size_t len)
 121 {
 122         const uint8_t *in = data;
 123
 124         while (len--)
 125                 crc = (crc >> 8) ^ crc32tab[(crc ^ *in++) & 0xFF];
 126
 127         return crc;
 128 }
 129
 130 void fix_header(void *buf)
 131 {
 132         struct spw303v_tag *tag = buf;
 133         uint32_t crc;
 134         /* Replace signature with custom t-com one */
 135         memset(tag->signiture_1, 0, 20);
 136         memcpy(tag->signiture_1, IMAGETAG_MAGIC1_TCOM, strlen(IMAGETAG_MAGIC1_TCOM));
 137
 138         /* Clear cert fields to remove information_* data */
 139         memset(tag->certf1Address, 0, 74);
 140
 141         /* replace image crc with modified one */
 142         crc = ntohl(*((uint32_t *)&tag->imageCRC));
 143
 144         crc = htonl(crc32(crc, fake_data, 64));
 145
 146         memcpy(tag->imageCRC, &crc, 4);
 147
 148         /* Update tag crc */
 149         crc = htonl(crc32(IMAGETAG_CRC_START, buf, 236));
 150         memcpy(tag->headerCRC, &crc, 4);
 151 }
 152
 153
 154
 155 void usage(void) __attribute__ (( __noreturn__ ));
 156
 157 void usage(void)
 158 {
 159         fprintf(stderr, "Usage: spw303v [-i <inputfile>] [-o <outputfile>]\n");
 160         exit(EXIT_FAILURE);
 161 }
 162
 163
 164 int main(int argc, char **argv)
 165 {
 166         char buf[1024]; /* keep this at 1k or adjust garbage calc below */
 167         FILE *in = stdin;
 168         FILE *out = stdout;
 169         char *ifn = NULL;
 170         char *ofn = NULL;
 171         int c;
 172         size_t n;
 173         int first_block = 1;
 174
 175         uint32_t image_crc = IMAGETAG_CRC_START;
 176
 177         while ((c = getopt(argc, argv, "i:o:h")) != -1) {
 178                 switch (c) {
 179                         case 'i':
 180                                 ifn = optarg;
 181                                 break;
 182                         case 'o':
 183                                 ofn = optarg;
 184                                 break;
 185                         case 'h':
 186                         default:
 187                                 usage();
 188                 }
 189         }
 190
 191         if (optind != argc || optind == 1) {
 192                 fprintf(stderr, "illegal arg \"%s\"\n", argv[optind]);
 193                 usage();
 194         }
 195
 196         if (ifn && !(in = fopen(ifn, "r"))) {
 197                 fprintf(stderr, "can not open \"%s\" for reading\n", ifn);
 198                 usage();
 199         }
 200
 201         if (ofn && !(out = fopen(ofn, "w"))) {
 202                 fprintf(stderr, "can not open \"%s\" for writing\n", ofn);
 203                 usage();
 204         }
 205
 206
 207
 208         while ((n = fread(buf, 1, sizeof(buf), in)) > 0) {
 209                 if (n < sizeof(buf)) {
 210                         if (ferror(in)) {
 211                         FREAD_ERROR:
 212                                 fprintf(stderr, "fread error\n");
 213                                 return EXIT_FAILURE;
 214                         }
 215                 }
 216
 217                 if (first_block && n >= 256) {
 218                         fix_header(buf);
 219                         first_block = 0;
 220                 }
 221
 222                 image_crc = crc32(image_crc, buf, n);
 223
 224                 if (!fwrite(buf, n, 1, out)) {
 225                 FWRITE_ERROR:
 226                         fprintf(stderr, "fwrite error\n");
 227                         return EXIT_FAILURE;
 228                 }
 229         }
 230
 231         if (ferror(in)) {
 232                 goto FREAD_ERROR;
 233         }
 234
 235         if (fflush(out)) {
 236                 goto FWRITE_ERROR;
 237         }
 238
 239         fclose(in);
 240         fclose(out);
 241
 242         return EXIT_SUCCESS;
 243 }