xref: /OK3568_Linux_fs/u-boot/common/image-fit.c (revision 4882a59341e53eb6f0b4789bf948001014eff981)
1 /*
2  * Copyright (c) 2013, Google Inc.
3  *
4  * (C) Copyright 2008 Semihalf
5  *
6  * (C) Copyright 2000-2006
7  * Wolfgang Denk, DENX Software Engineering, wd@denx.de.
8  *
9  * SPDX-License-Identifier:	GPL-2.0+
10  */
11 
12 #ifdef USE_HOSTCC
13 #include "mkimage.h"
14 #include <time.h>
15 #else
16 #include <linux/compiler.h>
17 #include <linux/kconfig.h>
18 #include <common.h>
19 #include <errno.h>
20 #include <mapmem.h>
21 #include <asm/io.h>
22 #include <malloc.h>
23 #include <crypto.h>
24 
25 DECLARE_GLOBAL_DATA_PTR;
26 #endif /* !USE_HOSTCC*/
27 
28 #include <image.h>
29 #include <bootstage.h>
30 #include <u-boot/crc.h>
31 #include <u-boot/md5.h>
32 #include <u-boot/sha1.h>
33 #include <u-boot/sha256.h>
34 
35 #define __round_mask(x, y) ((__typeof__(x))((y)-1))
36 #define round_up(x, y) ((((x)-1) | __round_mask(x, y))+1)
37 
38 /*****************************************************************************/
39 /* New uImage format routines */
40 /*****************************************************************************/
41 #ifndef USE_HOSTCC
fit_parse_spec(const char * spec,char sepc,ulong addr_curr,ulong * addr,const char ** name)42 static int fit_parse_spec(const char *spec, char sepc, ulong addr_curr,
43 		ulong *addr, const char **name)
44 {
45 	const char *sep;
46 
47 	*addr = addr_curr;
48 	*name = NULL;
49 
50 	sep = strchr(spec, sepc);
51 	if (sep) {
52 		if (sep - spec > 0)
53 			*addr = simple_strtoul(spec, NULL, 16);
54 
55 		*name = sep + 1;
56 		return 1;
57 	}
58 
59 	return 0;
60 }
61 
62 /**
63  * fit_parse_conf - parse FIT configuration spec
64  * @spec: input string, containing configuration spec
65  * @add_curr: current image address (to be used as a possible default)
66  * @addr: pointer to a ulong variable, will hold FIT image address of a given
67  * configuration
68  * @conf_name double pointer to a char, will hold pointer to a configuration
69  * unit name
70  *
71  * fit_parse_conf() expects configuration spec in the form of [<addr>]#<conf>,
72  * where <addr> is a FIT image address that contains configuration
73  * with a <conf> unit name.
74  *
75  * Address part is optional, and if omitted default add_curr will
76  * be used instead.
77  *
78  * returns:
79  *     1 if spec is a valid configuration string,
80  *     addr and conf_name are set accordingly
81  *     0 otherwise
82  */
fit_parse_conf(const char * spec,ulong addr_curr,ulong * addr,const char ** conf_name)83 int fit_parse_conf(const char *spec, ulong addr_curr,
84 		ulong *addr, const char **conf_name)
85 {
86 	return fit_parse_spec(spec, '#', addr_curr, addr, conf_name);
87 }
88 
89 /**
90  * fit_parse_subimage - parse FIT subimage spec
91  * @spec: input string, containing subimage spec
92  * @add_curr: current image address (to be used as a possible default)
93  * @addr: pointer to a ulong variable, will hold FIT image address of a given
94  * subimage
95  * @image_name: double pointer to a char, will hold pointer to a subimage name
96  *
97  * fit_parse_subimage() expects subimage spec in the form of
98  * [<addr>]:<subimage>, where <addr> is a FIT image address that contains
99  * subimage with a <subimg> unit name.
100  *
101  * Address part is optional, and if omitted default add_curr will
102  * be used instead.
103  *
104  * returns:
105  *     1 if spec is a valid subimage string,
106  *     addr and image_name are set accordingly
107  *     0 otherwise
108  */
fit_parse_subimage(const char * spec,ulong addr_curr,ulong * addr,const char ** image_name)109 int fit_parse_subimage(const char *spec, ulong addr_curr,
110 		ulong *addr, const char **image_name)
111 {
112 	return fit_parse_spec(spec, ':', addr_curr, addr, image_name);
113 }
114 #endif /* !USE_HOSTCC */
115 
fit_get_debug(const void * fit,int noffset,char * prop_name,int err)116 static void fit_get_debug(const void *fit, int noffset,
117 		char *prop_name, int err)
118 {
119 	debug("Can't get '%s' property from FIT 0x%08lx, node: offset %d, name %s (%s)\n",
120 	      prop_name, (ulong)fit, noffset, fit_get_name(fit, noffset, NULL),
121 	      fdt_strerror(err));
122 }
123 
124 /**
125  * fit_get_subimage_count - get component (sub-image) count
126  * @fit: pointer to the FIT format image header
127  * @images_noffset: offset of images node
128  *
129  * returns:
130  *     number of image components
131  */
fit_get_subimage_count(const void * fit,int images_noffset)132 int fit_get_subimage_count(const void *fit, int images_noffset)
133 {
134 	int noffset;
135 	int ndepth;
136 	int count = 0;
137 
138 	/* Process its subnodes, print out component images details */
139 	for (ndepth = 0, count = 0,
140 		noffset = fdt_next_node(fit, images_noffset, &ndepth);
141 	     (noffset >= 0) && (ndepth > 0);
142 	     noffset = fdt_next_node(fit, noffset, &ndepth)) {
143 		if (ndepth == 1) {
144 			count++;
145 		}
146 	}
147 
148 	return count;
149 }
150 
151 #if !defined(CONFIG_SPL_BUILD) || defined(CONFIG_FIT_SPL_PRINT)
152 /**
153  * fit_print_contents - prints out the contents of the FIT format image
154  * @fit: pointer to the FIT format image header
155  * @p: pointer to prefix string
156  *
157  * fit_print_contents() formats a multi line FIT image contents description.
158  * The routine prints out FIT image properties (root node level) followed by
159  * the details of each component image.
160  *
161  * returns:
162  *     no returned results
163  */
fit_print_contents(const void * fit)164 void fit_print_contents(const void *fit)
165 {
166 	char *desc;
167 	char *uname;
168 	int images_noffset;
169 	int confs_noffset;
170 	int noffset;
171 	int ndepth;
172 	int count = 0;
173 	int ret;
174 	const char *p;
175 	time_t timestamp;
176 
177 	/* Indent string is defined in header image.h */
178 	p = IMAGE_INDENT_STRING;
179 
180 	/* Root node properties */
181 	ret = fit_get_desc(fit, 0, &desc);
182 	printf("%sFIT description: ", p);
183 	if (ret)
184 		printf("unavailable\n");
185 	else
186 		printf("%s\n", desc);
187 
188 	if (IMAGE_ENABLE_TIMESTAMP) {
189 		ret = fit_get_timestamp(fit, 0, &timestamp);
190 		printf("%sCreated:         ", p);
191 		if (ret)
192 			printf("unavailable\n");
193 		else
194 			genimg_print_time(timestamp);
195 	}
196 
197 	/* Find images parent node offset */
198 	images_noffset = fdt_path_offset(fit, FIT_IMAGES_PATH);
199 	if (images_noffset < 0) {
200 		printf("Can't find images parent node '%s' (%s)\n",
201 		       FIT_IMAGES_PATH, fdt_strerror(images_noffset));
202 		return;
203 	}
204 
205 	/* Process its subnodes, print out component images details */
206 	for (ndepth = 0, count = 0,
207 		noffset = fdt_next_node(fit, images_noffset, &ndepth);
208 	     (noffset >= 0) && (ndepth > 0);
209 	     noffset = fdt_next_node(fit, noffset, &ndepth)) {
210 		if (ndepth == 1) {
211 			/*
212 			 * Direct child node of the images parent node,
213 			 * i.e. component image node.
214 			 */
215 			printf("%s Image %u (%s)\n", p, count++,
216 			       fit_get_name(fit, noffset, NULL));
217 
218 			fit_image_print(fit, noffset, p);
219 		}
220 	}
221 
222 	/* Find configurations parent node offset */
223 	confs_noffset = fdt_path_offset(fit, FIT_CONFS_PATH);
224 	if (confs_noffset < 0) {
225 		debug("Can't get configurations parent node '%s' (%s)\n",
226 		      FIT_CONFS_PATH, fdt_strerror(confs_noffset));
227 		return;
228 	}
229 
230 	/* get default configuration unit name from default property */
231 	uname = (char *)fdt_getprop(fit, noffset, FIT_DEFAULT_PROP, NULL);
232 	if (uname)
233 		printf("%s Default Configuration: '%s'\n", p, uname);
234 
235 	/* Process its subnodes, print out configurations details */
236 	for (ndepth = 0, count = 0,
237 		noffset = fdt_next_node(fit, confs_noffset, &ndepth);
238 	     (noffset >= 0) && (ndepth > 0);
239 	     noffset = fdt_next_node(fit, noffset, &ndepth)) {
240 		if (ndepth == 1) {
241 			/*
242 			 * Direct child node of the configurations parent node,
243 			 * i.e. configuration node.
244 			 */
245 			printf("%s Configuration %u (%s)\n", p, count++,
246 			       fit_get_name(fit, noffset, NULL));
247 
248 			fit_conf_print(fit, noffset, p);
249 		}
250 	}
251 }
252 
253 /**
254  * fit_image_print_data() - prints out the hash node details
255  * @fit: pointer to the FIT format image header
256  * @noffset: offset of the hash node
257  * @p: pointer to prefix string
258  * @type: Type of information to print ("hash" or "sign")
259  *
260  * fit_image_print_data() lists properties for the processed hash node
261  *
262  * This function avoid using puts() since it prints a newline on the host
263  * but does not in U-Boot.
264  *
265  * returns:
266  *     no returned results
267  */
fit_image_print_data(const void * fit,int noffset,const char * p,const char * type)268 static void fit_image_print_data(const void *fit, int noffset, const char *p,
269 				 const char *type)
270 {
271 	const char *keyname;
272 	uint8_t *value;
273 	int value_len;
274 	char *algo;
275 	int required;
276 	int ret, i;
277 
278 	debug("%s  %s node:    '%s'\n", p, type,
279 	      fit_get_name(fit, noffset, NULL));
280 	printf("%s  %s algo:    ", p, type);
281 	if (fit_image_hash_get_algo(fit, noffset, &algo)) {
282 		printf("invalid/unsupported\n");
283 		return;
284 	}
285 	printf("%s", algo);
286 	keyname = fdt_getprop(fit, noffset, "key-name-hint", NULL);
287 	required = fdt_getprop(fit, noffset, "required", NULL) != NULL;
288 	if (keyname)
289 		printf(":%s", keyname);
290 	if (required)
291 		printf(" (required)");
292 	printf("\n");
293 
294 	ret = fit_image_hash_get_value(fit, noffset, &value,
295 					&value_len);
296 	printf("%s  %s value:   ", p, type);
297 	if (ret) {
298 		printf("unavailable\n");
299 	} else {
300 		for (i = 0; i < value_len; i++)
301 			printf("%02x", value[i]);
302 		printf("\n");
303 	}
304 
305 	debug("%s  %s len:     %d\n", p, type, value_len);
306 
307 	/* Signatures have a time stamp */
308 	if (IMAGE_ENABLE_TIMESTAMP && keyname) {
309 		time_t timestamp;
310 
311 		printf("%s  Timestamp:    ", p);
312 		if (fit_get_timestamp(fit, noffset, &timestamp))
313 			printf("unavailable\n");
314 		else
315 			genimg_print_time(timestamp);
316 	}
317 }
318 
319 /**
320  * fit_image_print_verification_data() - prints out the hash/signature details
321  * @fit: pointer to the FIT format image header
322  * @noffset: offset of the hash or signature node
323  * @p: pointer to prefix string
324  *
325  * This lists properties for the processed hash node
326  *
327  * returns:
328  *     no returned results
329  */
fit_image_print_verification_data(const void * fit,int noffset,const char * p)330 static void fit_image_print_verification_data(const void *fit, int noffset,
331 				       const char *p)
332 {
333 	const char *name;
334 
335 	/*
336 	 * Check subnode name, must be equal to "hash" or "signature".
337 	 * Multiple hash/signature nodes require unique unit node
338 	 * names, e.g. hash@1, hash@2, signature@1, signature@2, etc.
339 	 */
340 	name = fit_get_name(fit, noffset, NULL);
341 	if (!strncmp(name, FIT_HASH_NODENAME, strlen(FIT_HASH_NODENAME))) {
342 		fit_image_print_data(fit, noffset, p, "Hash");
343 	} else if (!strncmp(name, FIT_SIG_NODENAME,
344 				strlen(FIT_SIG_NODENAME))) {
345 		fit_image_print_data(fit, noffset, p, "Sign");
346 	}
347 }
348 
349 /**
350  * fit_image_print - prints out the FIT component image details
351  * @fit: pointer to the FIT format image header
352  * @image_noffset: offset of the component image node
353  * @p: pointer to prefix string
354  *
355  * fit_image_print() lists all mandatory properties for the processed component
356  * image. If present, hash nodes are printed out as well. Load
357  * address for images of type firmware is also printed out. Since the load
358  * address is not mandatory for firmware images, it will be output as
359  * "unavailable" when not present.
360  *
361  * returns:
362  *     no returned results
363  */
fit_image_print(const void * fit,int image_noffset,const char * p)364 void fit_image_print(const void *fit, int image_noffset, const char *p)
365 {
366 	char *desc;
367 	uint8_t type, arch, os, comp;
368 	size_t size;
369 	ulong load, entry;
370 	const void *data;
371 	int noffset;
372 	int ndepth;
373 	int ret;
374 
375 	/* Mandatory properties */
376 	ret = fit_get_desc(fit, image_noffset, &desc);
377 	printf("%s  Description:  ", p);
378 	if (ret)
379 		printf("unavailable\n");
380 	else
381 		printf("%s\n", desc);
382 
383 	if (IMAGE_ENABLE_TIMESTAMP) {
384 		time_t timestamp;
385 
386 		ret = fit_get_timestamp(fit, 0, &timestamp);
387 		printf("%s  Created:      ", p);
388 		if (ret)
389 			printf("unavailable\n");
390 		else
391 			genimg_print_time(timestamp);
392 	}
393 
394 	fit_image_get_type(fit, image_noffset, &type);
395 	printf("%s  Type:         %s\n", p, genimg_get_type_name(type));
396 
397 	fit_image_get_comp(fit, image_noffset, &comp);
398 	printf("%s  Compression:  %s\n", p, genimg_get_comp_name(comp));
399 
400 	ret = fit_image_get_data(fit, image_noffset, &data, &size);
401 
402 #ifndef USE_HOSTCC
403 	printf("%s  Data Start:   ", p);
404 	if (ret) {
405 		printf("unavailable\n");
406 	} else {
407 		void *vdata = (void *)data;
408 
409 		printf("0x%08lx\n", (ulong)map_to_sysmem(vdata));
410 	}
411 #endif
412 
413 	printf("%s  Data Size:    ", p);
414 	if (ret)
415 		printf("unavailable\n");
416 	else
417 		genimg_print_size(size);
418 
419 	/* Remaining, type dependent properties */
420 	if ((type == IH_TYPE_KERNEL) || (type == IH_TYPE_STANDALONE) ||
421 	    (type == IH_TYPE_RAMDISK) || (type == IH_TYPE_FIRMWARE) ||
422 	    (type == IH_TYPE_FLATDT)) {
423 		fit_image_get_arch(fit, image_noffset, &arch);
424 		printf("%s  Architecture: %s\n", p, genimg_get_arch_name(arch));
425 	}
426 
427 	if ((type == IH_TYPE_KERNEL) || (type == IH_TYPE_RAMDISK)) {
428 		fit_image_get_os(fit, image_noffset, &os);
429 		printf("%s  OS:           %s\n", p, genimg_get_os_name(os));
430 	}
431 
432 	if ((type == IH_TYPE_KERNEL) || (type == IH_TYPE_STANDALONE) ||
433 	    (type == IH_TYPE_FIRMWARE) || (type == IH_TYPE_RAMDISK) ||
434 	    (type == IH_TYPE_FPGA)) {
435 		ret = fit_image_get_load(fit, image_noffset, &load);
436 		printf("%s  Load Address: ", p);
437 		if (ret)
438 			printf("unavailable\n");
439 		else
440 			printf("0x%08lx\n", load);
441 	}
442 
443 	/* optional load address for FDT */
444 	if (type == IH_TYPE_FLATDT && !fit_image_get_load(fit, image_noffset, &load))
445 		printf("%s  Load Address: 0x%08lx\n", p, load);
446 
447 	if ((type == IH_TYPE_KERNEL) || (type == IH_TYPE_STANDALONE) ||
448 	    (type == IH_TYPE_RAMDISK)) {
449 		ret = fit_image_get_entry(fit, image_noffset, &entry);
450 		printf("%s  Entry Point:  ", p);
451 		if (ret)
452 			printf("unavailable\n");
453 		else
454 			printf("0x%08lx\n", entry);
455 	}
456 
457 	/* Process all hash subnodes of the component image node */
458 	for (ndepth = 0, noffset = fdt_next_node(fit, image_noffset, &ndepth);
459 	     (noffset >= 0) && (ndepth > 0);
460 	     noffset = fdt_next_node(fit, noffset, &ndepth)) {
461 		if (ndepth == 1) {
462 			/* Direct child node of the component image node */
463 			fit_image_print_verification_data(fit, noffset, p);
464 		}
465 	}
466 }
467 
468 #endif /* !defined(CONFIG_SPL_BUILD) || defined(CONFIG_FIT_SPL_PRINT) */
469 
470 /**
471  * fit_get_desc - get node description property
472  * @fit: pointer to the FIT format image header
473  * @noffset: node offset
474  * @desc: double pointer to the char, will hold pointer to the description
475  *
476  * fit_get_desc() reads description property from a given node, if
477  * description is found pointer to it is returned in third call argument.
478  *
479  * returns:
480  *     0, on success
481  *     -1, on failure
482  */
fit_get_desc(const void * fit,int noffset,char ** desc)483 int fit_get_desc(const void *fit, int noffset, char **desc)
484 {
485 	int len;
486 
487 	*desc = (char *)fdt_getprop(fit, noffset, FIT_DESC_PROP, &len);
488 	if (*desc == NULL) {
489 		fit_get_debug(fit, noffset, FIT_DESC_PROP, len);
490 		return -1;
491 	}
492 
493 	return 0;
494 }
495 
496 /**
497  * fit_get_timestamp - get node timestamp property
498  * @fit: pointer to the FIT format image header
499  * @noffset: node offset
500  * @timestamp: pointer to the time_t, will hold read timestamp
501  *
502  * fit_get_timestamp() reads timestamp property from given node, if timestamp
503  * is found and has a correct size its value is returned in third call
504  * argument.
505  *
506  * returns:
507  *     0, on success
508  *     -1, on property read failure
509  *     -2, on wrong timestamp size
510  */
fit_get_timestamp(const void * fit,int noffset,time_t * timestamp)511 int fit_get_timestamp(const void *fit, int noffset, time_t *timestamp)
512 {
513 	int len;
514 	const void *data;
515 
516 	data = fdt_getprop(fit, noffset, FIT_TIMESTAMP_PROP, &len);
517 	if (data == NULL) {
518 		fit_get_debug(fit, noffset, FIT_TIMESTAMP_PROP, len);
519 		return -1;
520 	}
521 	if (len != sizeof(uint32_t)) {
522 		debug("FIT timestamp with incorrect size of (%u)\n", len);
523 		return -2;
524 	}
525 
526 	*timestamp = uimage_to_cpu(*((uint32_t *)data));
527 	return 0;
528 }
529 
530 /**
531  * fit_get_totalsize - get node totalsize property.
532  *
533  * @fit: pointer to the FIT image header
534  * @totalsize: holds the /totalsize property
535  *
536  * returns:
537  *     0, on success
538  *     -ENOENT if the property could not be found
539  */
fit_get_totalsize(const void * fit,int * totalsize)540 int fit_get_totalsize(const void *fit, int *totalsize)
541 {
542 	const fdt32_t *val;
543 
544 	val = fdt_getprop(fit, 0, FIT_TOTALSIZE_PROP, NULL);
545 	if (!val)
546 		return -ENOENT;
547 
548 	*totalsize = fdt32_to_cpu(*val);
549 
550 	return 0;
551 }
552 
553 /**
554  * fit_image_get_node - get node offset for component image of a given unit name
555  * @fit: pointer to the FIT format image header
556  * @image_uname: component image node unit name
557  *
558  * fit_image_get_node() finds a component image (within the '/images'
559  * node) of a provided unit name. If image is found its node offset is
560  * returned to the caller.
561  *
562  * returns:
563  *     image node offset when found (>=0)
564  *     negative number on failure (FDT_ERR_* code)
565  */
fit_image_get_node(const void * fit,const char * image_uname)566 int fit_image_get_node(const void *fit, const char *image_uname)
567 {
568 	int noffset, images_noffset;
569 
570 	images_noffset = fdt_path_offset(fit, FIT_IMAGES_PATH);
571 	if (images_noffset < 0) {
572 		debug("Can't find images parent node '%s' (%s)\n",
573 		      FIT_IMAGES_PATH, fdt_strerror(images_noffset));
574 		return images_noffset;
575 	}
576 
577 	noffset = fdt_subnode_offset(fit, images_noffset, image_uname);
578 	if (noffset < 0) {
579 		debug("Can't get node offset for image unit name: '%s' (%s)\n",
580 		      image_uname, fdt_strerror(noffset));
581 	}
582 
583 	return noffset;
584 }
585 
586 /**
587  * fit_image_get_os - get os id for a given component image node
588  * @fit: pointer to the FIT format image header
589  * @noffset: component image node offset
590  * @os: pointer to the uint8_t, will hold os numeric id
591  *
592  * fit_image_get_os() finds os property in a given component image node.
593  * If the property is found, its (string) value is translated to the numeric
594  * id which is returned to the caller.
595  *
596  * returns:
597  *     0, on success
598  *     -1, on failure
599  */
fit_image_get_os(const void * fit,int noffset,uint8_t * os)600 int fit_image_get_os(const void *fit, int noffset, uint8_t *os)
601 {
602 	int len;
603 	const void *data;
604 
605 	/* Get OS name from property data */
606 	data = fdt_getprop(fit, noffset, FIT_OS_PROP, &len);
607 	if (data == NULL) {
608 		fit_get_debug(fit, noffset, FIT_OS_PROP, len);
609 		*os = -1;
610 		return -1;
611 	}
612 
613 	/* Translate OS name to id */
614 	*os = genimg_get_os_id(data);
615 	return 0;
616 }
617 
618 /**
619  * fit_image_get_arch - get arch id for a given component image node
620  * @fit: pointer to the FIT format image header
621  * @noffset: component image node offset
622  * @arch: pointer to the uint8_t, will hold arch numeric id
623  *
624  * fit_image_get_arch() finds arch property in a given component image node.
625  * If the property is found, its (string) value is translated to the numeric
626  * id which is returned to the caller.
627  *
628  * returns:
629  *     0, on success
630  *     -1, on failure
631  */
fit_image_get_arch(const void * fit,int noffset,uint8_t * arch)632 int fit_image_get_arch(const void *fit, int noffset, uint8_t *arch)
633 {
634 	int len;
635 	const void *data;
636 
637 	/* Get architecture name from property data */
638 	data = fdt_getprop(fit, noffset, FIT_ARCH_PROP, &len);
639 	if (data == NULL) {
640 		fit_get_debug(fit, noffset, FIT_ARCH_PROP, len);
641 		*arch = -1;
642 		return -1;
643 	}
644 
645 	/* Translate architecture name to id */
646 	*arch = genimg_get_arch_id(data);
647 	return 0;
648 }
649 
650 /**
651  * fit_image_get_type - get type id for a given component image node
652  * @fit: pointer to the FIT format image header
653  * @noffset: component image node offset
654  * @type: pointer to the uint8_t, will hold type numeric id
655  *
656  * fit_image_get_type() finds type property in a given component image node.
657  * If the property is found, its (string) value is translated to the numeric
658  * id which is returned to the caller.
659  *
660  * returns:
661  *     0, on success
662  *     -1, on failure
663  */
fit_image_get_type(const void * fit,int noffset,uint8_t * type)664 int fit_image_get_type(const void *fit, int noffset, uint8_t *type)
665 {
666 	int len;
667 	const void *data;
668 
669 	/* Get image type name from property data */
670 	data = fdt_getprop(fit, noffset, FIT_TYPE_PROP, &len);
671 	if (data == NULL) {
672 		fit_get_debug(fit, noffset, FIT_TYPE_PROP, len);
673 		*type = -1;
674 		return -1;
675 	}
676 
677 	/* Translate image type name to id */
678 	*type = genimg_get_type_id(data);
679 	return 0;
680 }
681 
682 /**
683  * fit_image_get_comp - get comp id for a given component image node
684  * @fit: pointer to the FIT format image header
685  * @noffset: component image node offset
686  * @comp: pointer to the uint8_t, will hold comp numeric id
687  *
688  * fit_image_get_comp() finds comp property in a given component image node.
689  * If the property is found, its (string) value is translated to the numeric
690  * id which is returned to the caller.
691  *
692  * returns:
693  *     0, on success
694  *     -1, on failure
695  */
fit_image_get_comp(const void * fit,int noffset,uint8_t * comp)696 int fit_image_get_comp(const void *fit, int noffset, uint8_t *comp)
697 {
698 	int len;
699 	const void *data;
700 
701 	/* Get compression name from property data */
702 	data = fdt_getprop(fit, noffset, FIT_COMP_PROP, &len);
703 	if (data == NULL) {
704 		fit_get_debug(fit, noffset, FIT_COMP_PROP, len);
705 		*comp = -1;
706 		return -1;
707 	}
708 
709 	/* Translate compression name to id */
710 	*comp = genimg_get_comp_id(data);
711 	return 0;
712 }
713 
fit_image_is_preload(const void * fit,int noffset)714 bool fit_image_is_preload(const void *fit, int noffset)
715 {
716 	int len;
717 	int *data;
718 
719 	data = (int *)fdt_getprop(fit, noffset, FIT_PRE_LOAD_PROP, &len);
720 	if (data == NULL || len != sizeof(int)) {
721 		fit_get_debug(fit, noffset, FIT_PRE_LOAD_PROP, len);
722 		return false;
723 	}
724 
725 	if (fdt32_to_cpu(*data) != 1)
726 		return false;
727 
728 	return true;
729 }
730 
fit_image_get_address(const void * fit,int noffset,char * name,ulong * load)731 static int fit_image_get_address(const void *fit, int noffset, char *name,
732 			  ulong *load)
733 {
734 	int len, cell_len;
735 	const fdt32_t *cell;
736 	uint64_t load64 = 0;
737 
738 	cell = fdt_getprop(fit, noffset, name, &len);
739 	if (cell == NULL) {
740 		fit_get_debug(fit, noffset, name, len);
741 		return -1;
742 	}
743 
744 	if (len > sizeof(ulong)) {
745 		printf("Unsupported %s address size\n", name);
746 		return -1;
747 	}
748 
749 	cell_len = len >> 2;
750 	/* Use load64 to avoid compiling warning for 32-bit target */
751 	while (cell_len--) {
752 		load64 = (load64 << 32) | uimage_to_cpu(*cell);
753 		cell++;
754 	}
755 	*load = (ulong)load64;
756 
757 	return 0;
758 }
759 
fit_image_set_address(const void * fit,int noffset,char * name,ulong addr)760 static int fit_image_set_address(const void *fit, int noffset, char *name,
761 				 ulong addr)
762 {
763 	int len, cell_len;
764 	const fdt32_t *cell;
765 
766 	cell = fdt_getprop(fit, noffset, name, &len);
767 	if (cell == NULL) {
768 		fit_get_debug(fit, noffset, name, len);
769 		return -1;
770 	}
771 
772 	if (len > sizeof(ulong)) {
773 		printf("Unsupported %s address size\n", name);
774 		return -1;
775 	}
776 
777 	cell_len = len >> 2;
778 	/* Use load64 to avoid compiling warning for 32-bit target */
779 	while (cell_len--) {
780 		*(fdt32_t *)cell = cpu_to_uimage(addr >> (32 * cell_len));
781 		cell++;
782 	}
783 
784 	return 0;
785 }
786 
787 /**
788  * fit_image_get_load() - get load addr property for given component image node
789  * @fit: pointer to the FIT format image header
790  * @noffset: component image node offset
791  * @load: pointer to the uint32_t, will hold load address
792  *
793  * fit_image_get_load() finds load address property in a given component
794  * image node. If the property is found, its value is returned to the caller.
795  *
796  * returns:
797  *     0, on success
798  *     -1, on failure
799  */
fit_image_get_load(const void * fit,int noffset,ulong * load)800 int fit_image_get_load(const void *fit, int noffset, ulong *load)
801 {
802 	return fit_image_get_address(fit, noffset, FIT_LOAD_PROP, load);
803 }
804 
805 /**
806  * fit_image_get_comp_addr() - get compress addr property for given component image node
807  * @fit: pointer to the FIT format image header
808  * @noffset: component image node offset
809  * @comp: pointer to the uint32_t, will hold load address
810  *
811  * fit_image_get_comp_addr() finds compress address property in a given component
812  * image node. If the property is found, its value is returned to the caller.
813  *
814  * returns:
815  *     0, on success
816  *     -1, on failure
817  */
fit_image_get_comp_addr(const void * fit,int noffset,ulong * comp)818 int fit_image_get_comp_addr(const void *fit, int noffset, ulong *comp)
819 {
820 	return fit_image_get_address(fit, noffset, FIT_COMP_ADDR_PROP, comp);
821 }
822 
823 /**
824  * fit_image_set_load() - set load addr property for given component image node
825  * @fit: pointer to the FIT format image header
826  * @noffset: component image node offset
827  * @load: uint32_t value, will hold load address
828  *
829  * fit_image_set_load() finds and set load address property in a given component
830  * image node. If the property is found, its value is returned to the caller.
831  *
832  * returns:
833  *     0, on success
834  *     -1, on failure
835  */
fit_image_set_load(const void * fit,int noffset,ulong load)836 int fit_image_set_load(const void *fit, int noffset, ulong load)
837 {
838 	return fit_image_set_address(fit, noffset, FIT_LOAD_PROP, load);
839 }
840 
841 /**
842  * fit_image_get_entry() - get entry point address property
843  * @fit: pointer to the FIT format image header
844  * @noffset: component image node offset
845  * @entry: pointer to the uint32_t, will hold entry point address
846  *
847  * This gets the entry point address property for a given component image
848  * node.
849  *
850  * fit_image_get_entry() finds entry point address property in a given
851  * component image node.  If the property is found, its value is returned
852  * to the caller.
853  *
854  * returns:
855  *     0, on success
856  *     -1, on failure
857  */
fit_image_get_entry(const void * fit,int noffset,ulong * entry)858 int fit_image_get_entry(const void *fit, int noffset, ulong *entry)
859 {
860 	return fit_image_get_address(fit, noffset, FIT_ENTRY_PROP, entry);
861 }
862 
863 /**
864  * fit_image_set_entry() - set entry point address property
865  * @fit: pointer to the FIT format image header
866  * @noffset: component image node offset
867  * @entry: uint32_t value, will hold entry point address
868  *
869  * This sets the entry point address property for a given component image
870  * node.
871  *
872  * fit_image_set_entry() finds and set entry point address property in a given
873  * component image node.  If the property is found, its value is returned
874  * to the caller.
875  *
876  * returns:
877  *     0, on success
878  *     -1, on failure
879  */
fit_image_set_entry(const void * fit,int noffset,ulong entry)880 int fit_image_set_entry(const void *fit, int noffset, ulong entry)
881 {
882 	return fit_image_set_address(fit, noffset, FIT_ENTRY_PROP, entry);
883 }
884 
885 /**
886  * fit_image_get_data - get data property and its size for a given component image node
887  * @fit: pointer to the FIT format image header
888  * @noffset: component image node offset
889  * @data: double pointer to void, will hold data property's data address
890  * @size: pointer to size_t, will hold data property's data size
891  *
892  * fit_image_get_data() finds data property in a given component image node.
893  * If the property is found its data start address and size are returned to
894  * the caller.
895  *
896  * returns:
897  *     0, on success
898  *     -1, on failure
899  */
fit_image_get_data(const void * fit,int noffset,const void ** data,size_t * size)900 int fit_image_get_data(const void *fit, int noffset,
901 		const void **data, size_t *size)
902 {
903 	ulong data_off = 0;
904 	ulong data_pos = 0;
905 	int len;
906 
907 	/* data */
908 	*data = fdt_getprop(fit, noffset, FIT_DATA_PROP, &len);
909 	if (*data) {
910 		*size = len;
911 		return 0;
912 	}
913 
914 	/* data-size */
915 	if (fit_image_get_data_size(fit, noffset, &len))
916 		return -ENOENT;
917 
918 	/* data-offset */
919 	if (!fit_image_get_data_offset(fit, noffset, (int *)&data_off)) {
920 		data_off += (ulong)fit + FIT_ALIGN(fdt_totalsize(fit));
921 		*data = (void *)data_off;
922 		*size = len;
923 		return 0;
924 	}
925 
926 	/* data-position */
927 	if (!fit_image_get_data_position(fit, noffset, (int *)&data_pos)) {
928 		*data = (void *)(data_pos + (ulong)fit);
929 		*size = len;
930 		return 0;
931 	}
932 
933 	*size = 0;
934 	return -1;
935 }
936 
937 /**
938  * Get 'data-offset' property from a given image node.
939  *
940  * @fit: pointer to the FIT image header
941  * @noffset: component image node offset
942  * @data_offset: holds the data-offset property
943  *
944  * returns:
945  *     0, on success
946  *     -ENOENT if the property could not be found
947  */
fit_image_get_data_offset(const void * fit,int noffset,int * data_offset)948 int fit_image_get_data_offset(const void *fit, int noffset, int *data_offset)
949 {
950 	const fdt32_t *val;
951 
952 	val = fdt_getprop(fit, noffset, FIT_DATA_OFFSET_PROP, NULL);
953 	if (!val)
954 		return -ENOENT;
955 
956 	*data_offset = fdt32_to_cpu(*val);
957 
958 	return 0;
959 }
960 
961 /**
962  * Get 'data-position' property from a given image node.
963  *
964  * @fit: pointer to the FIT image header
965  * @noffset: component image node offset
966  * @data_position: holds the data-position property
967  *
968  * returns:
969  *     0, on success
970  *     -ENOENT if the property could not be found
971  */
fit_image_get_data_position(const void * fit,int noffset,int * data_position)972 int fit_image_get_data_position(const void *fit, int noffset,
973 				int *data_position)
974 {
975 	const fdt32_t *val;
976 
977 	val = fdt_getprop(fit, noffset, FIT_DATA_POSITION_PROP, NULL);
978 	if (!val)
979 		return -ENOENT;
980 
981 	*data_position = fdt32_to_cpu(*val);
982 
983 	return 0;
984 }
985 
986 /**
987  * Get 'data-size' property from a given image node.
988  *
989  * @fit: pointer to the FIT image header
990  * @noffset: component image node offset
991  * @data_size: holds the data-size property
992  *
993  * returns:
994  *     0, on success
995  *     -ENOENT if the property could not be found
996  */
fit_image_get_data_size(const void * fit,int noffset,int * data_size)997 int fit_image_get_data_size(const void *fit, int noffset, int *data_size)
998 {
999 	const fdt32_t *val;
1000 
1001 	val = fdt_getprop(fit, noffset, FIT_DATA_SIZE_PROP, NULL);
1002 	if (!val)
1003 		return -ENOENT;
1004 
1005 	*data_size = fdt32_to_cpu(*val);
1006 
1007 	return 0;
1008 }
1009 
1010 /**
1011  * Get 'rollback-index' property from a given image node.
1012  *
1013  * @fit: pointer to the FIT image header
1014  * @noffset: component image node offset
1015  * @index: holds the rollback-index property
1016  *
1017  * returns:
1018  *     0, on success
1019  *     -ENOENT if the property could not be found
1020  */
fit_image_get_rollback_index(const void * fit,int noffset,uint32_t * index)1021 int fit_image_get_rollback_index(const void *fit, int noffset, uint32_t *index)
1022 {
1023 	const fdt32_t *val;
1024 
1025 	val = fdt_getprop(fit, noffset, FIT_ROLLBACK_PROP, NULL);
1026 	if (!val)
1027 		return -ENOENT;
1028 
1029 	*index = fdt32_to_cpu(*val);
1030 
1031 	return 0;
1032 }
1033 
1034 /**
1035  * fit_image_hash_get_algo - get hash algorithm name
1036  * @fit: pointer to the FIT format image header
1037  * @noffset: hash node offset
1038  * @algo: double pointer to char, will hold pointer to the algorithm name
1039  *
1040  * fit_image_hash_get_algo() finds hash algorithm property in a given hash node.
1041  * If the property is found its data start address is returned to the caller.
1042  *
1043  * returns:
1044  *     0, on success
1045  *     -1, on failure
1046  */
fit_image_hash_get_algo(const void * fit,int noffset,char ** algo)1047 int fit_image_hash_get_algo(const void *fit, int noffset, char **algo)
1048 {
1049 	int len;
1050 
1051 	*algo = (char *)fdt_getprop(fit, noffset, FIT_ALGO_PROP, &len);
1052 	if (*algo == NULL) {
1053 		fit_get_debug(fit, noffset, FIT_ALGO_PROP, len);
1054 		return -1;
1055 	}
1056 
1057 	return 0;
1058 }
1059 
1060 /**
1061  * fit_image_hash_get_value - get hash value and length
1062  * @fit: pointer to the FIT format image header
1063  * @noffset: hash node offset
1064  * @value: double pointer to uint8_t, will hold address of a hash value data
1065  * @value_len: pointer to an int, will hold hash data length
1066  *
1067  * fit_image_hash_get_value() finds hash value property in a given hash node.
1068  * If the property is found its data start address and size are returned to
1069  * the caller.
1070  *
1071  * returns:
1072  *     0, on success
1073  *     -1, on failure
1074  */
fit_image_hash_get_value(const void * fit,int noffset,uint8_t ** value,int * value_len)1075 int fit_image_hash_get_value(const void *fit, int noffset, uint8_t **value,
1076 				int *value_len)
1077 {
1078 	int len;
1079 
1080 	*value = (uint8_t *)fdt_getprop(fit, noffset, FIT_VALUE_PROP, &len);
1081 	if (*value == NULL) {
1082 		fit_get_debug(fit, noffset, FIT_VALUE_PROP, len);
1083 		*value_len = 0;
1084 		return -1;
1085 	}
1086 
1087 	*value_len = len;
1088 	return 0;
1089 }
1090 
1091 /**
1092  * fit_image_hash_get_ignore - get hash ignore flag
1093  * @fit: pointer to the FIT format image header
1094  * @noffset: hash node offset
1095  * @ignore: pointer to an int, will hold hash ignore flag
1096  *
1097  * fit_image_hash_get_ignore() finds hash ignore property in a given hash node.
1098  * If the property is found and non-zero, the hash algorithm is not verified by
1099  * u-boot automatically.
1100  *
1101  * returns:
1102  *     0, on ignore not found
1103  *     value, on ignore found
1104  */
fit_image_hash_get_ignore(const void * fit,int noffset,int * ignore)1105 static int fit_image_hash_get_ignore(const void *fit, int noffset, int *ignore)
1106 {
1107 	int len;
1108 	int *value;
1109 
1110 	value = (int *)fdt_getprop(fit, noffset, FIT_IGNORE_PROP, &len);
1111 	if (value == NULL || len != sizeof(int))
1112 		*ignore = 0;
1113 	else
1114 		*ignore = *value;
1115 
1116 	return 0;
1117 }
1118 
fit_get_end(const void * fit)1119 ulong fit_get_end(const void *fit)
1120 {
1121 	return map_to_sysmem((void *)(fit + fdt_totalsize(fit)));
1122 }
1123 
1124 /**
1125  * fit_set_timestamp - set node timestamp property
1126  * @fit: pointer to the FIT format image header
1127  * @noffset: node offset
1128  * @timestamp: timestamp value to be set
1129  *
1130  * fit_set_timestamp() attempts to set timestamp property in the requested
1131  * node and returns operation status to the caller.
1132  *
1133  * returns:
1134  *     0, on success
1135  *     -ENOSPC if no space in device tree, -1 for other error
1136  */
fit_set_timestamp(void * fit,int noffset,time_t timestamp)1137 int fit_set_timestamp(void *fit, int noffset, time_t timestamp)
1138 {
1139 	uint32_t t;
1140 	int ret;
1141 
1142 	t = cpu_to_uimage(timestamp);
1143 	ret = fdt_setprop(fit, noffset, FIT_TIMESTAMP_PROP, &t,
1144 				sizeof(uint32_t));
1145 	if (ret) {
1146 		debug("Can't set '%s' property for '%s' node (%s)\n",
1147 		      FIT_TIMESTAMP_PROP, fit_get_name(fit, noffset, NULL),
1148 		      fdt_strerror(ret));
1149 		return ret == -FDT_ERR_NOSPACE ? -ENOSPC : -1;
1150 	}
1151 
1152 	return 0;
1153 }
1154 
fit_set_totalsize(void * fit,int noffset,int totalsize)1155 int fit_set_totalsize(void *fit, int noffset, int totalsize)
1156 {
1157 	uint32_t t;
1158 	int ret;
1159 
1160 	t = cpu_to_uimage(totalsize);
1161 	ret = fdt_setprop(fit, noffset, FIT_TOTALSIZE_PROP, &t,
1162 				sizeof(uint32_t));
1163 	if (ret)
1164 		return ret == -FDT_ERR_NOSPACE ? -ENOSPC : -1;
1165 
1166 	return 0;
1167 }
1168 
fit_set_version(void * fit,int noffset,int version)1169 int fit_set_version(void *fit, int noffset, int version)
1170 {
1171 	uint32_t v;
1172 	int ret;
1173 
1174 	v = cpu_to_uimage(version);
1175 	ret = fdt_setprop(fit, noffset, FIT_VERSION_PROP, &v, sizeof(uint32_t));
1176 	if (ret)
1177 		return ret == -FDT_ERR_NOSPACE ? -ENOSPC : -1;
1178 
1179 	return 0;
1180 }
1181 
fit_calculate_hash(const void * data,int data_len,const char * algo,uint8_t * value,int * value_len)1182 int fit_calculate_hash(const void *data, int data_len,
1183 		       const char *algo, uint8_t *value,
1184 		       int *value_len)
1185 {
1186 	if (IMAGE_ENABLE_CRC32 && strcmp(algo, "crc32") == 0) {
1187 		*((uint32_t *)value) = crc32_wd(0, data, data_len,
1188 							CHUNKSZ_CRC32);
1189 		*((uint32_t *)value) = cpu_to_uimage(*((uint32_t *)value));
1190 		*value_len = 4;
1191 #ifdef CONFIG_SHA1
1192 	} else if (IMAGE_ENABLE_SHA1 && strcmp(algo, "sha1") == 0) {
1193 		sha1_csum_wd((unsigned char *)data, data_len,
1194 			     (unsigned char *)value, CHUNKSZ_SHA1);
1195 		*value_len = 20;
1196 #endif
1197 #ifdef CONFIG_SHA256
1198 	} else if (IMAGE_ENABLE_SHA256 && strcmp(algo, "sha256") == 0) {
1199 		sha256_csum_wd((unsigned char *)data, data_len,
1200 			       (unsigned char *)value, CHUNKSZ_SHA256);
1201 		*value_len = SHA256_SUM_LEN;
1202 #endif
1203 #ifdef CONFIG_MD5
1204 	} else if (IMAGE_ENABLE_MD5 && strcmp(algo, "md5") == 0) {
1205 		md5_wd((unsigned char *)data, data_len, value, CHUNKSZ_MD5);
1206 		*value_len = 16;
1207 #endif
1208 	} else {
1209 		debug("Unsupported hash alogrithm\n");
1210 		return -1;
1211 	}
1212 	return 0;
1213 }
1214 
1215 #ifndef USE_HOSTCC
1216 #if CONFIG_IS_ENABLED(FIT_HW_CRYPTO)
crypto_csum(u32 cap,const char * data,int len,u8 * output)1217 static int crypto_csum(u32 cap, const char *data, int len, u8 *output)
1218 {
1219 	struct udevice *dev;
1220 	sha_context csha_ctx;
1221 
1222 	dev = crypto_get_device(cap);
1223 	if (!dev) {
1224 		printf("Can't find expected crypto device\n");
1225 		return -ENODEV;
1226 	}
1227 
1228 	csha_ctx.algo = cap;
1229 	csha_ctx.length = len;
1230 
1231 	return crypto_sha_csum(dev, &csha_ctx, (char *)data, len, output);
1232 }
1233 
hw_fit_calculate_hash(const void * data,int data_len,const char * algo,uint8_t * value,int * value_len)1234 static int hw_fit_calculate_hash(const void *data, int data_len,
1235 				 const char *algo, uint8_t *value,
1236 				 int *value_len)
1237 {
1238 	int ret = 0;
1239 
1240 	if (IMAGE_ENABLE_CRC32 && strcmp(algo, "crc32") == 0) {
1241 		*((uint32_t *)value) = crc32_wd(0, data, data_len,
1242 							CHUNKSZ_CRC32);
1243 		*((uint32_t *)value) = cpu_to_uimage(*((uint32_t *)value));
1244 		*value_len = 4;
1245 	} else if (IMAGE_ENABLE_SHA1 && strcmp(algo, "sha1") == 0) {
1246 		ret = crypto_csum(CRYPTO_SHA1, data, data_len, value);
1247 		*value_len = 20;
1248 	} else if (IMAGE_ENABLE_SHA256 && strcmp(algo, "sha256") == 0) {
1249 		ret = crypto_csum(CRYPTO_SHA256, data, data_len, value);
1250 		*value_len = SHA256_SUM_LEN;
1251 	} else if (IMAGE_ENABLE_MD5 && strcmp(algo, "md5") == 0) {
1252 		ret = crypto_csum(CRYPTO_MD5, data, data_len, value);
1253 		*value_len = 16;
1254 	} else {
1255 		debug("Unsupported hash alogrithm\n");
1256 		return -1;
1257 	}
1258 
1259 	if (ret)
1260 		printf("%s: algo %s failed, ret=%d\n", __func__, algo, ret);
1261 
1262 	return ret;
1263 }
1264 #endif
1265 #endif
1266 
1267 /**
1268  * calculate_hash - calculate and return hash for provided input data
1269  * @data: pointer to the input data
1270  * @data_len: data length
1271  * @algo: requested hash algorithm
1272  * @value: pointer to the char, will hold hash value data (caller must
1273  * allocate enough free space)
1274  * value_len: length of the calculated hash
1275  *
1276  * calculate_hash() computes input data hash according to the requested
1277  * algorithm.
1278  * Resulting hash value is placed in caller provided 'value' buffer, length
1279  * of the calculated hash is returned via value_len pointer argument.
1280  *
1281  * returns:
1282  *     0, on success
1283  *    -1, when algo is unsupported
1284  */
calculate_hash(const void * data,int data_len,const char * algo,uint8_t * value,int * value_len)1285 int calculate_hash(const void *data, int data_len, const char *algo,
1286 		   uint8_t *value, int *value_len)
1287 {
1288 #if defined(USE_HOSTCC)
1289 	return fit_calculate_hash(data, data_len, algo, value, value_len);
1290 #else
1291 #if !CONFIG_IS_ENABLED(FIT_HW_CRYPTO)
1292 	return fit_calculate_hash(data, data_len, algo, value, value_len);
1293 #else
1294 	return hw_fit_calculate_hash(data, data_len, algo, value, value_len);
1295 #endif
1296 #endif
1297 }
1298 
fit_image_check_hash(const void * fit,int noffset,const void * data,size_t size,char ** err_msgp)1299 int fit_image_check_hash(const void *fit, int noffset, const void *data,
1300 			 size_t size, char **err_msgp)
1301 {
1302 	uint8_t value[FIT_MAX_HASH_LEN];
1303 	int value_len;
1304 	char *algo;
1305 	uint8_t *fit_value;
1306 	int fit_value_len;
1307 	int ignore;
1308 	int i;
1309 
1310 	*err_msgp = NULL;
1311 
1312 	if (fit_image_hash_get_algo(fit, noffset, &algo)) {
1313 		*err_msgp = "Can't get hash algo property";
1314 		return -1;
1315 	}
1316 	printf("%s", algo);
1317 
1318 	if (IMAGE_ENABLE_IGNORE) {
1319 		fit_image_hash_get_ignore(fit, noffset, &ignore);
1320 		if (ignore) {
1321 			printf("-skipped ");
1322 			return 0;
1323 		}
1324 	}
1325 
1326 	if (fit_image_hash_get_value(fit, noffset, &fit_value,
1327 				     &fit_value_len)) {
1328 		*err_msgp = "Can't get hash value property";
1329 		return -1;
1330 	}
1331 
1332 	if (calculate_hash(data, size, algo, value, &value_len)) {
1333 		*err_msgp = "Unsupported hash algorithm";
1334 		return -1;
1335 	}
1336 
1337 	if (value_len != fit_value_len) {
1338 		*err_msgp = "Bad hash value len";
1339 		return -1;
1340 	} else if (memcmp(value, fit_value, value_len) != 0) {
1341 		printf(" Bad hash: ");
1342 		for (i = 0; i < value_len; i++)
1343 			printf("%02x", value[i]);
1344 		printf("\n");
1345 
1346 		*err_msgp = "Bad hash value";
1347 		return -1;
1348 	}
1349 
1350 #ifdef CONFIG_SPL_BUILD
1351 	printf("(");
1352 	for (i = 0; i < 5; i++)
1353 		printf("%02x", value[i]);
1354 	printf("...) ");
1355 #endif
1356 
1357 	return 0;
1358 }
1359 
fit_image_verify_with_data(const void * fit,int image_noffset,const void * data,size_t size)1360 int fit_image_verify_with_data(const void *fit, int image_noffset,
1361 			       const void *data, size_t size)
1362 {
1363 	int		noffset = 0;
1364 	char		*err_msg = "";
1365 	int verify_all = 1;
1366 	int ret;
1367 
1368 	/* Verify all required signatures */
1369 	if (IMAGE_ENABLE_VERIFY &&
1370 	    fit_image_verify_required_sigs(fit, image_noffset, data, size,
1371 					   gd_fdt_blob(), &verify_all)) {
1372 		err_msg = "Unable to verify required signature";
1373 		goto error;
1374 	}
1375 
1376 	/* Process all hash subnodes of the component image node */
1377 	fdt_for_each_subnode(noffset, fit, image_noffset) {
1378 		const char *name = fit_get_name(fit, noffset, NULL);
1379 
1380 		/*
1381 		 * Check subnode name, must be equal to "hash".
1382 		 * Multiple hash nodes require unique unit node
1383 		 * names, e.g. hash@1, hash@2, etc.
1384 		 */
1385 		if (!strncmp(name, FIT_HASH_NODENAME,
1386 			     strlen(FIT_HASH_NODENAME))) {
1387 			if (fit_image_check_hash(fit, noffset, data, size,
1388 						 &err_msg))
1389 				goto error;
1390 			puts("+ ");
1391 		} else if (IMAGE_ENABLE_VERIFY && verify_all &&
1392 				!strncmp(name, FIT_SIG_NODENAME,
1393 					strlen(FIT_SIG_NODENAME))) {
1394 			ret = fit_image_check_sig(fit, noffset, data,
1395 							size, -1, &err_msg);
1396 
1397 			/*
1398 			 * Show an indication on failure, but do not return
1399 			 * an error. Only keys marked 'required' can cause
1400 			 * an image validation failure. See the call to
1401 			 * fit_image_verify_required_sigs() above.
1402 			 */
1403 			if (ret)
1404 				puts("- ");
1405 			else
1406 				puts("+ ");
1407 		}
1408 	}
1409 
1410 	if (noffset == -FDT_ERR_TRUNCATED || noffset == -FDT_ERR_BADSTRUCTURE) {
1411 		err_msg = "Corrupted or truncated tree";
1412 		goto error;
1413 	}
1414 
1415 	return 1; /* success */
1416 
1417 error:
1418 	printf(" error!\n%s for '%s' hash node in '%s' image node\n",
1419 	       err_msg, fit_get_name(fit, noffset, NULL),
1420 	       fit_get_name(fit, image_noffset, NULL));
1421 	return 0;
1422 }
1423 
1424 /**
1425  * fit_image_verify - verify data integrity
1426  * @fit: pointer to the FIT format image header
1427  * @image_noffset: component image node offset
1428  *
1429  * fit_image_verify() goes over component image hash nodes,
1430  * re-calculates each data hash and compares with the value stored in hash
1431  * node.
1432  *
1433  * returns:
1434  *     1, if all hashes are valid
1435  *     0, otherwise (or on error)
1436  */
fit_image_verify(const void * fit,int image_noffset)1437 int fit_image_verify(const void *fit, int image_noffset)
1438 {
1439 	const void	*data;
1440 	size_t		size;
1441 	int		noffset = 0;
1442 	char		*err_msg = "";
1443 
1444 	/* Get image data and data length */
1445 	if (fit_image_get_data(fit, image_noffset, &data, &size)) {
1446 		err_msg = "Can't get image data/size";
1447 		printf("error!\n%s for '%s' hash node in '%s' image node\n",
1448 		       err_msg, fit_get_name(fit, noffset, NULL),
1449 		       fit_get_name(fit, image_noffset, NULL));
1450 		return 0;
1451 	}
1452 
1453 	return fit_image_verify_with_data(fit, image_noffset, data, size);
1454 }
1455 
1456 /**
1457  * fit_all_image_verify - verify data integrity for all images
1458  * @fit: pointer to the FIT format image header
1459  *
1460  * fit_all_image_verify() goes over all images in the FIT and
1461  * for every images checks if all it's hashes are valid.
1462  *
1463  * returns:
1464  *     1, if all hashes of all images are valid
1465  *     0, otherwise (or on error)
1466  */
fit_all_image_verify(const void * fit)1467 int fit_all_image_verify(const void *fit)
1468 {
1469 	int images_noffset;
1470 	int noffset;
1471 	int ndepth;
1472 	int count;
1473 
1474 	/* Find images parent node offset */
1475 	images_noffset = fdt_path_offset(fit, FIT_IMAGES_PATH);
1476 	if (images_noffset < 0) {
1477 		printf("Can't find images parent node '%s' (%s)\n",
1478 		       FIT_IMAGES_PATH, fdt_strerror(images_noffset));
1479 		return 0;
1480 	}
1481 
1482 	/* Process all image subnodes, check hashes for each */
1483 	printf("## Checking hash(es) for FIT Image at %08lx ...\n",
1484 	       (ulong)fit);
1485 	for (ndepth = 0, count = 0,
1486 	     noffset = fdt_next_node(fit, images_noffset, &ndepth);
1487 			(noffset >= 0) && (ndepth > 0);
1488 			noffset = fdt_next_node(fit, noffset, &ndepth)) {
1489 		if (ndepth == 1) {
1490 			/*
1491 			 * Direct child node of the images parent node,
1492 			 * i.e. component image node.
1493 			 */
1494 			printf("   Hash(es) for Image %u (%s): ", count,
1495 			       fit_get_name(fit, noffset, NULL));
1496 			count++;
1497 
1498 			if (!fit_image_verify(fit, noffset))
1499 				return 0;
1500 			printf("\n");
1501 		}
1502 	}
1503 	return 1;
1504 }
1505 
1506 /**
1507  * fit_image_check_os - check whether image node is of a given os type
1508  * @fit: pointer to the FIT format image header
1509  * @noffset: component image node offset
1510  * @os: requested image os
1511  *
1512  * fit_image_check_os() reads image os property and compares its numeric
1513  * id with the requested os. Comparison result is returned to the caller.
1514  *
1515  * returns:
1516  *     1 if image is of given os type
1517  *     0 otherwise (or on error)
1518  */
fit_image_check_os(const void * fit,int noffset,uint8_t os)1519 int fit_image_check_os(const void *fit, int noffset, uint8_t os)
1520 {
1521 	uint8_t image_os;
1522 
1523 	if (fit_image_get_os(fit, noffset, &image_os))
1524 		return 0;
1525 	return (os == image_os);
1526 }
1527 
1528 /**
1529  * fit_image_check_arch - check whether image node is of a given arch
1530  * @fit: pointer to the FIT format image header
1531  * @noffset: component image node offset
1532  * @arch: requested imagearch
1533  *
1534  * fit_image_check_arch() reads image arch property and compares its numeric
1535  * id with the requested arch. Comparison result is returned to the caller.
1536  *
1537  * returns:
1538  *     1 if image is of given arch
1539  *     0 otherwise (or on error)
1540  */
fit_image_check_arch(const void * fit,int noffset,uint8_t arch)1541 int fit_image_check_arch(const void *fit, int noffset, uint8_t arch)
1542 {
1543 	uint8_t image_arch;
1544 	int aarch32_support = 0;
1545 
1546 #ifdef CONFIG_ARM64_SUPPORT_AARCH32
1547 	aarch32_support = 1;
1548 #endif
1549 
1550 	if (fit_image_get_arch(fit, noffset, &image_arch))
1551 		return 0;
1552 	return (arch == image_arch) ||
1553 		(arch == IH_ARCH_I386 && image_arch == IH_ARCH_X86_64) ||
1554 		(arch == IH_ARCH_ARM64 && image_arch == IH_ARCH_ARM &&
1555 		 aarch32_support);
1556 }
1557 
1558 /**
1559  * fit_image_check_type - check whether image node is of a given type
1560  * @fit: pointer to the FIT format image header
1561  * @noffset: component image node offset
1562  * @type: requested image type
1563  *
1564  * fit_image_check_type() reads image type property and compares its numeric
1565  * id with the requested type. Comparison result is returned to the caller.
1566  *
1567  * returns:
1568  *     1 if image is of given type
1569  *     0 otherwise (or on error)
1570  */
fit_image_check_type(const void * fit,int noffset,uint8_t type)1571 int fit_image_check_type(const void *fit, int noffset, uint8_t type)
1572 {
1573 	uint8_t image_type;
1574 
1575 	if (fit_image_get_type(fit, noffset, &image_type))
1576 		return 0;
1577 	return (type == image_type);
1578 }
1579 
1580 /**
1581  * fit_image_check_comp - check whether image node uses given compression
1582  * @fit: pointer to the FIT format image header
1583  * @noffset: component image node offset
1584  * @comp: requested image compression type
1585  *
1586  * fit_image_check_comp() reads image compression property and compares its
1587  * numeric id with the requested compression type. Comparison result is
1588  * returned to the caller.
1589  *
1590  * returns:
1591  *     1 if image uses requested compression
1592  *     0 otherwise (or on error)
1593  */
fit_image_check_comp(const void * fit,int noffset,uint8_t comp)1594 int fit_image_check_comp(const void *fit, int noffset, uint8_t comp)
1595 {
1596 	uint8_t image_comp;
1597 
1598 	if (fit_image_get_comp(fit, noffset, &image_comp))
1599 		return 0;
1600 	return (comp == image_comp);
1601 }
1602 
1603 /**
1604  * fit_check_format - sanity check FIT image format
1605  * @fit: pointer to the FIT format image header
1606  *
1607  * fit_check_format() runs a basic sanity FIT image verification.
1608  * Routine checks for mandatory properties, nodes, etc.
1609  *
1610  * returns:
1611  *     1, on success
1612  *     0, on failure
1613  */
fit_check_format(const void * fit)1614 int fit_check_format(const void *fit)
1615 {
1616 	/* mandatory / node 'description' property */
1617 	if (fdt_getprop(fit, 0, FIT_DESC_PROP, NULL) == NULL) {
1618 		debug("Wrong FIT format: no description\n");
1619 		return 0;
1620 	}
1621 
1622 	if (IMAGE_ENABLE_TIMESTAMP) {
1623 		/* mandatory / node 'timestamp' property */
1624 		if (fdt_getprop(fit, 0, FIT_TIMESTAMP_PROP, NULL) == NULL) {
1625 			debug("Wrong FIT format: no timestamp\n");
1626 			return 0;
1627 		}
1628 	}
1629 
1630 	/* mandatory subimages parent '/images' node */
1631 	if (fdt_path_offset(fit, FIT_IMAGES_PATH) < 0) {
1632 		debug("Wrong FIT format: no images parent node\n");
1633 		return 0;
1634 	}
1635 
1636 	return 1;
1637 }
1638 
1639 
1640 /**
1641  * fit_conf_find_compat
1642  * @fit: pointer to the FIT format image header
1643  * @fdt: pointer to the device tree to compare against
1644  *
1645  * fit_conf_find_compat() attempts to find the configuration whose fdt is the
1646  * most compatible with the passed in device tree.
1647  *
1648  * Example:
1649  *
1650  * / o image-tree
1651  *   |-o images
1652  *   | |-o fdt@1
1653  *   | |-o fdt@2
1654  *   |
1655  *   |-o configurations
1656  *     |-o config@1
1657  *     | |-fdt = fdt@1
1658  *     |
1659  *     |-o config@2
1660  *       |-fdt = fdt@2
1661  *
1662  * / o U-Boot fdt
1663  *   |-compatible = "foo,bar", "bim,bam"
1664  *
1665  * / o kernel fdt1
1666  *   |-compatible = "foo,bar",
1667  *
1668  * / o kernel fdt2
1669  *   |-compatible = "bim,bam", "baz,biz"
1670  *
1671  * Configuration 1 would be picked because the first string in U-Boot's
1672  * compatible list, "foo,bar", matches a compatible string in the root of fdt1.
1673  * "bim,bam" in fdt2 matches the second string which isn't as good as fdt1.
1674  *
1675  * returns:
1676  *     offset to the configuration to use if one was found
1677  *     -1 otherwise
1678  */
fit_conf_find_compat(const void * fit,const void * fdt)1679 int fit_conf_find_compat(const void *fit, const void *fdt)
1680 {
1681 	int ndepth = 0;
1682 	int noffset, confs_noffset, images_noffset;
1683 	const void *fdt_compat;
1684 	int fdt_compat_len;
1685 	int best_match_offset = 0;
1686 	int best_match_pos = 0;
1687 
1688 	confs_noffset = fdt_path_offset(fit, FIT_CONFS_PATH);
1689 	images_noffset = fdt_path_offset(fit, FIT_IMAGES_PATH);
1690 	if (confs_noffset < 0 || images_noffset < 0) {
1691 		debug("Can't find configurations or images nodes.\n");
1692 		return -1;
1693 	}
1694 
1695 	fdt_compat = fdt_getprop(fdt, 0, "compatible", &fdt_compat_len);
1696 	if (!fdt_compat) {
1697 		debug("Fdt for comparison has no \"compatible\" property.\n");
1698 		return -1;
1699 	}
1700 
1701 	/*
1702 	 * Loop over the configurations in the FIT image.
1703 	 */
1704 	for (noffset = fdt_next_node(fit, confs_noffset, &ndepth);
1705 			(noffset >= 0) && (ndepth > 0);
1706 			noffset = fdt_next_node(fit, noffset, &ndepth)) {
1707 		const void *kfdt;
1708 		const char *kfdt_name;
1709 		int kfdt_noffset;
1710 		const char *cur_fdt_compat;
1711 		int len;
1712 		size_t size;
1713 		int i;
1714 
1715 		if (ndepth > 1)
1716 			continue;
1717 
1718 		kfdt_name = fdt_getprop(fit, noffset, "fdt", &len);
1719 		if (!kfdt_name) {
1720 			debug("No fdt property found.\n");
1721 			continue;
1722 		}
1723 		kfdt_noffset = fdt_subnode_offset(fit, images_noffset,
1724 						  kfdt_name);
1725 		if (kfdt_noffset < 0) {
1726 			debug("No image node named \"%s\" found.\n",
1727 			      kfdt_name);
1728 			continue;
1729 		}
1730 		/*
1731 		 * Get a pointer to this configuration's fdt.
1732 		 */
1733 		if (fit_image_get_data(fit, kfdt_noffset, &kfdt, &size)) {
1734 			debug("Failed to get fdt \"%s\".\n", kfdt_name);
1735 			continue;
1736 		}
1737 
1738 		len = fdt_compat_len;
1739 		cur_fdt_compat = fdt_compat;
1740 		/*
1741 		 * Look for a match for each U-Boot compatibility string in
1742 		 * turn in this configuration's fdt.
1743 		 */
1744 		for (i = 0; len > 0 &&
1745 		     (!best_match_offset || best_match_pos > i); i++) {
1746 			int cur_len = strlen(cur_fdt_compat) + 1;
1747 
1748 			if (!fdt_node_check_compatible(kfdt, 0,
1749 						       cur_fdt_compat)) {
1750 				best_match_offset = noffset;
1751 				best_match_pos = i;
1752 				break;
1753 			}
1754 			len -= cur_len;
1755 			cur_fdt_compat += cur_len;
1756 		}
1757 	}
1758 	if (!best_match_offset) {
1759 		debug("No match found.\n");
1760 		return -1;
1761 	}
1762 
1763 	return best_match_offset;
1764 }
1765 
1766 /**
1767  * fit_conf_get_node - get node offset for configuration of a given unit name
1768  * @fit: pointer to the FIT format image header
1769  * @conf_uname: configuration node unit name
1770  *
1771  * fit_conf_get_node() finds a configuration (within the '/configurations'
1772  * parent node) of a provided unit name. If configuration is found its node
1773  * offset is returned to the caller.
1774  *
1775  * When NULL is provided in second argument fit_conf_get_node() will search
1776  * for a default configuration node instead. Default configuration node unit
1777  * name is retrieved from FIT_DEFAULT_PROP property of the '/configurations'
1778  * node.
1779  *
1780  * returns:
1781  *     configuration node offset when found (>=0)
1782  *     negative number on failure (FDT_ERR_* code)
1783  */
fit_conf_get_node(const void * fit,const char * conf_uname)1784 int fit_conf_get_node(const void *fit, const char *conf_uname)
1785 {
1786 	int noffset, confs_noffset;
1787 	int len;
1788 	const char *s;
1789 	char *conf_uname_copy = NULL;
1790 
1791 	confs_noffset = fdt_path_offset(fit, FIT_CONFS_PATH);
1792 	if (confs_noffset < 0) {
1793 		debug("Can't find configurations parent node '%s' (%s)\n",
1794 		      FIT_CONFS_PATH, fdt_strerror(confs_noffset));
1795 		return confs_noffset;
1796 	}
1797 
1798 	if (conf_uname == NULL) {
1799 		/* get configuration unit name from the default property */
1800 		debug("No configuration specified, trying default...\n");
1801 		conf_uname = (char *)fdt_getprop(fit, confs_noffset,
1802 						 FIT_DEFAULT_PROP, &len);
1803 		if (conf_uname == NULL) {
1804 			fit_get_debug(fit, confs_noffset, FIT_DEFAULT_PROP,
1805 				      len);
1806 			return len;
1807 		}
1808 		debug("Found default configuration: '%s'\n", conf_uname);
1809 	}
1810 
1811 	s = strchr(conf_uname, '#');
1812 	if (s) {
1813 		len = s - conf_uname;
1814 		conf_uname_copy = malloc(len + 1);
1815 		if (!conf_uname_copy) {
1816 			debug("Can't allocate uname copy: '%s'\n",
1817 					conf_uname);
1818 			return -ENOMEM;
1819 		}
1820 		memcpy(conf_uname_copy, conf_uname, len);
1821 		conf_uname_copy[len] = '\0';
1822 		conf_uname = conf_uname_copy;
1823 	}
1824 
1825 	noffset = fdt_subnode_offset(fit, confs_noffset, conf_uname);
1826 	if (noffset < 0) {
1827 		debug("Can't get node offset for configuration unit name: '%s' (%s)\n",
1828 		      conf_uname, fdt_strerror(noffset));
1829 	}
1830 
1831 	if (conf_uname_copy)
1832 		free(conf_uname_copy);
1833 
1834 	return noffset;
1835 }
1836 
fit_conf_get_prop_node_count(const void * fit,int noffset,const char * prop_name)1837 int fit_conf_get_prop_node_count(const void *fit, int noffset,
1838 		const char *prop_name)
1839 {
1840 	return fdt_stringlist_count(fit, noffset, prop_name);
1841 }
1842 
fit_conf_get_prop_node_index(const void * fit,int noffset,const char * prop_name,int index)1843 int fit_conf_get_prop_node_index(const void *fit, int noffset,
1844 		const char *prop_name, int index)
1845 {
1846 	const char *uname;
1847 	int len;
1848 
1849 	/* get kernel image unit name from configuration kernel property */
1850 	uname = fdt_stringlist_get(fit, noffset, prop_name, index, &len);
1851 	if (uname == NULL)
1852 		return len;
1853 
1854 	return fit_image_get_node(fit, uname);
1855 }
1856 
fit_conf_get_prop_node(const void * fit,int noffset,const char * prop_name)1857 int fit_conf_get_prop_node(const void *fit, int noffset,
1858 		const char *prop_name)
1859 {
1860 	return fit_conf_get_prop_node_index(fit, noffset, prop_name, 0);
1861 }
1862 
1863 /**
1864  * fit_conf_print - prints out the FIT configuration details
1865  * @fit: pointer to the FIT format image header
1866  * @noffset: offset of the configuration node
1867  * @p: pointer to prefix string
1868  *
1869  * fit_conf_print() lists all mandatory properties for the processed
1870  * configuration node.
1871  *
1872  * returns:
1873  *     no returned results
1874  */
fit_conf_print(const void * fit,int noffset,const char * p)1875 void fit_conf_print(const void *fit, int noffset, const char *p)
1876 {
1877 	char *desc;
1878 	const char *uname;
1879 	int ret;
1880 	int fdt_index, loadables_index;
1881 
1882 	/* Mandatory properties */
1883 	ret = fit_get_desc(fit, noffset, &desc);
1884 	printf("%s  Description:  ", p);
1885 	if (ret)
1886 		printf("unavailable\n");
1887 	else
1888 		printf("%s\n", desc);
1889 
1890 	uname = fdt_getprop(fit, noffset, FIT_KERNEL_PROP, NULL);
1891 	printf("%s  Kernel:       ", p);
1892 	if (uname == NULL)
1893 		printf("unavailable\n");
1894 	else
1895 		printf("%s\n", uname);
1896 
1897 	/* Optional properties */
1898 	uname = fdt_getprop(fit, noffset, FIT_RAMDISK_PROP, NULL);
1899 	if (uname)
1900 		printf("%s  Init Ramdisk: %s\n", p, uname);
1901 
1902 	uname = fdt_getprop(fit, noffset, FIT_FIRMWARE_PROP, NULL);
1903 	if (uname)
1904 		printf("%s  Firmware:     %s\n", p, uname);
1905 
1906 	for (fdt_index = 0;
1907 	     uname = fdt_stringlist_get(fit, noffset, FIT_FDT_PROP,
1908 					fdt_index, NULL), uname;
1909 	     fdt_index++) {
1910 
1911 		if (fdt_index == 0)
1912 			printf("%s  FDT:          ", p);
1913 		else
1914 			printf("%s                ", p);
1915 		printf("%s\n", uname);
1916 	}
1917 
1918 	uname = fdt_getprop(fit, noffset, FIT_FPGA_PROP, NULL);
1919 	if (uname)
1920 		printf("%s  FPGA:         %s\n", p, uname);
1921 
1922 	/* Print out all of the specified loadables */
1923 	for (loadables_index = 0;
1924 	     uname = fdt_stringlist_get(fit, noffset, FIT_LOADABLE_PROP,
1925 					loadables_index, NULL), uname;
1926 	     loadables_index++) {
1927 		if (loadables_index == 0) {
1928 			printf("%s  Loadables:    ", p);
1929 		} else {
1930 			printf("%s                ", p);
1931 		}
1932 		printf("%s\n", uname);
1933 	}
1934 }
1935 
fit_image_select(const void * fit,int rd_noffset,int verify)1936 static int fit_image_select(const void *fit, int rd_noffset, int verify)
1937 {
1938 #ifdef USE_HOSTCC
1939 	fit_image_print(fit, rd_noffset, "   ");
1940 #else
1941 #if CONFIG_IS_ENABLED(FIT_PRINT)
1942 	fit_image_print(fit, rd_noffset, "   ");
1943 #endif
1944 #endif
1945 	if (verify) {
1946 		puts("   Verifying Hash Integrity ... ");
1947 		if (!fit_image_verify(fit, rd_noffset)) {
1948 			puts("Bad Data Hash\n");
1949 			return -EACCES;
1950 		}
1951 		puts("OK\n");
1952 	}
1953 
1954 	return 0;
1955 }
1956 
fit_get_node_from_config(bootm_headers_t * images,const char * prop_name,ulong addr)1957 int fit_get_node_from_config(bootm_headers_t *images, const char *prop_name,
1958 			ulong addr)
1959 {
1960 	int cfg_noffset;
1961 	void *fit_hdr;
1962 	int noffset;
1963 
1964 	debug("*  %s: using config '%s' from image at 0x%08lx\n",
1965 	      prop_name, images->fit_uname_cfg, addr);
1966 
1967 	/* Check whether configuration has this property defined */
1968 	fit_hdr = map_sysmem(addr, 0);
1969 	cfg_noffset = fit_conf_get_node(fit_hdr, images->fit_uname_cfg);
1970 	if (cfg_noffset < 0) {
1971 		debug("*  %s: no such config\n", prop_name);
1972 		return -EINVAL;
1973 	}
1974 
1975 	noffset = fit_conf_get_prop_node(fit_hdr, cfg_noffset, prop_name);
1976 	if (noffset < 0) {
1977 		debug("*  %s: no '%s' in config\n", prop_name, prop_name);
1978 		return -ENOENT;
1979 	}
1980 
1981 	return noffset;
1982 }
1983 
1984 /**
1985  * fit_get_image_type_property() - get property name for IH_TYPE_...
1986  *
1987  * @return the properly name where we expect to find the image in the
1988  * config node
1989  */
fit_get_image_type_property(int type)1990 static const char *fit_get_image_type_property(int type)
1991 {
1992 	/*
1993 	 * This is sort-of available in the uimage_type[] table in image.c
1994 	 * but we don't have access to the short name, and "fdt" is different
1995 	 * anyway. So let's just keep it here.
1996 	 */
1997 	switch (type) {
1998 	case IH_TYPE_FLATDT:
1999 		return FIT_FDT_PROP;
2000 	case IH_TYPE_KERNEL:
2001 		return FIT_KERNEL_PROP;
2002 	case IH_TYPE_RAMDISK:
2003 		return FIT_RAMDISK_PROP;
2004 	case IH_TYPE_FIRMWARE:
2005 		return FIT_FIRMWARE_PROP;
2006 	case IH_TYPE_X86_SETUP:
2007 		return FIT_SETUP_PROP;
2008 	case IH_TYPE_LOADABLE:
2009 		return FIT_LOADABLE_PROP;
2010 	case IH_TYPE_FPGA:
2011 		return FIT_FPGA_PROP;
2012 	case IH_TYPE_STANDALONE:
2013 		return FIT_STANDALONE_PROP;
2014 	}
2015 
2016 	return "unknown";
2017 }
2018 
2019 #ifndef USE_HOSTCC
fit_board_verify_required_sigs(void)2020 __weak int fit_board_verify_required_sigs(void)
2021 {
2022 	return 0;
2023 }
2024 #endif
2025 
fit_image_load_index(bootm_headers_t * images,ulong addr,const char ** fit_unamep,const char ** fit_uname_configp,int arch,int image_type,int image_index,int bootstage_id,enum fit_load_op load_op,ulong * datap,ulong * lenp)2026 int fit_image_load_index(bootm_headers_t *images, ulong addr,
2027 			 const char **fit_unamep, const char **fit_uname_configp,
2028 			 int arch, int image_type, int image_index, int bootstage_id,
2029 			 enum fit_load_op load_op, ulong *datap, ulong *lenp)
2030 {
2031 	int cfg_noffset, noffset;
2032 	const char *fit_uname;
2033 	const char *fit_uname_config;
2034 	const char *fit_base_uname_config;
2035 	const void *fit;
2036 	const void *buf;
2037 	size_t size;
2038 	int type_ok, os_ok;
2039 	ulong load, data, len;
2040 	uint8_t os;
2041 #ifndef USE_HOSTCC
2042 	uint8_t os_arch;
2043 #endif
2044 	const char *prop_name;
2045 	int ret;
2046 
2047 	fit = map_sysmem(addr, 0);
2048 	fit_uname = fit_unamep ? *fit_unamep : NULL;
2049 	fit_uname_config = fit_uname_configp ? *fit_uname_configp : NULL;
2050 	fit_base_uname_config = NULL;
2051 	prop_name = fit_get_image_type_property(image_type);
2052 	printf("## Loading %s from FIT Image at %08lx ...\n", prop_name, addr);
2053 
2054 	bootstage_mark(bootstage_id + BOOTSTAGE_SUB_FORMAT);
2055 	if (!fit_check_format(fit)) {
2056 		printf("Bad FIT %s image format!\n", prop_name);
2057 		bootstage_error(bootstage_id + BOOTSTAGE_SUB_FORMAT);
2058 		return -ENOEXEC;
2059 	}
2060 	bootstage_mark(bootstage_id + BOOTSTAGE_SUB_FORMAT_OK);
2061 	if (fit_uname) {
2062 		/* get FIT component image node offset */
2063 		bootstage_mark(bootstage_id + BOOTSTAGE_SUB_UNIT_NAME);
2064 		noffset = fit_image_get_node(fit, fit_uname);
2065 	} else {
2066 		/*
2067 		 * no image node unit name, try to get config
2068 		 * node first. If config unit node name is NULL
2069 		 * fit_conf_get_node() will try to find default config node
2070 		 */
2071 		bootstage_mark(bootstage_id + BOOTSTAGE_SUB_NO_UNIT_NAME);
2072 		if (IMAGE_ENABLE_BEST_MATCH && !fit_uname_config) {
2073 			cfg_noffset = fit_conf_find_compat(fit, gd_fdt_blob());
2074 		} else {
2075 			cfg_noffset = fit_conf_get_node(fit,
2076 							fit_uname_config);
2077 		}
2078 		if (cfg_noffset < 0) {
2079 			puts("Could not find configuration node\n");
2080 			bootstage_error(bootstage_id +
2081 					BOOTSTAGE_SUB_NO_UNIT_NAME);
2082 			return -ENOENT;
2083 		}
2084 		fit_base_uname_config = fdt_get_name(fit, cfg_noffset, NULL);
2085 		printf("   Using '%s' configuration\n", fit_base_uname_config);
2086 		if (image_type == IH_TYPE_KERNEL) {
2087 #ifndef USE_HOSTCC
2088 			/* If board required sigs, check self */
2089 			if (fit_board_verify_required_sigs() &&
2090 			    !IS_ENABLED(CONFIG_FIT_SIGNATURE)) {
2091 				printf("Verified-boot requires CONFIG_FIT_SIGNATURE enabled\n");
2092 				hang();
2093 			}
2094 #endif
2095 			/* Remember (and possibly verify) this config */
2096 			images->fit_uname_cfg = fit_base_uname_config;
2097 			if (IMAGE_ENABLE_VERIFY) {
2098 				puts("   Verifying Hash Integrity ... ");
2099 				if (fit_config_verify(fit, cfg_noffset)) {
2100 					puts("Bad Data Hash\n");
2101 					bootstage_error(bootstage_id +
2102 						BOOTSTAGE_SUB_HASH);
2103 					return -EACCES;
2104 				}
2105 				puts("OK\n");
2106 
2107 #ifdef CONFIG_FIT_ROLLBACK_PROTECT
2108 				uint32_t this_index, min_index;
2109 
2110 				puts("   Verifying Rollback-index ... ");
2111 				if (fit_rollback_index_verify(fit,
2112 						FIT_ROLLBACK_INDEX,
2113 						&this_index, &min_index)) {
2114 					puts("Failed to get index\n");
2115 					return ret;
2116 				} else if (this_index < min_index) {
2117 					printf("Reject index %d < %d(min)\n",
2118 					       this_index, min_index);
2119 					return -EINVAL;
2120 				}
2121 
2122 				printf("%d >= %d(min), OK\n", this_index, min_index);
2123 #endif
2124 			}
2125 			bootstage_mark(BOOTSTAGE_ID_FIT_CONFIG);
2126 		}
2127 
2128 		noffset = fit_conf_get_prop_node_index(fit, cfg_noffset,
2129 						       prop_name, image_index);
2130 		fit_uname = fit_get_name(fit, noffset, NULL);
2131 	}
2132 	if (noffset < 0) {
2133 		puts("Could not find subimage node\n");
2134 		bootstage_error(bootstage_id + BOOTSTAGE_SUB_SUBNODE);
2135 		return -ENOENT;
2136 	}
2137 
2138 	printf("   Trying '%s' %s subimage\n", fit_uname, prop_name);
2139 
2140 	ret = fit_image_select(fit, noffset, images->verify);
2141 	if (ret) {
2142 		bootstage_error(bootstage_id + BOOTSTAGE_SUB_HASH);
2143 		return ret;
2144 	}
2145 
2146 	bootstage_mark(bootstage_id + BOOTSTAGE_SUB_CHECK_ARCH);
2147 #if !defined(USE_HOSTCC) && !defined(CONFIG_SANDBOX)
2148 	if (!fit_image_check_target_arch(fit, noffset)) {
2149 		puts("Unsupported Architecture\n");
2150 		bootstage_error(bootstage_id + BOOTSTAGE_SUB_CHECK_ARCH);
2151 		return -ENOEXEC;
2152 	}
2153 #endif
2154 
2155 #ifndef USE_HOSTCC
2156 	fit_image_get_arch(fit, noffset, &os_arch);
2157 	images->os.arch = os_arch;
2158 #endif
2159 
2160 	if (image_type == IH_TYPE_FLATDT &&
2161 	    !fit_image_check_comp(fit, noffset, IH_COMP_NONE)) {
2162 		puts("FDT image is compressed");
2163 		return -EPROTONOSUPPORT;
2164 	}
2165 
2166 	bootstage_mark(bootstage_id + BOOTSTAGE_SUB_CHECK_ALL);
2167 	type_ok = fit_image_check_type(fit, noffset, image_type) ||
2168 		  fit_image_check_type(fit, noffset, IH_TYPE_FIRMWARE) ||
2169 		  (image_type == IH_TYPE_KERNEL &&
2170 		   fit_image_check_type(fit, noffset, IH_TYPE_KERNEL_NOLOAD));
2171 
2172 	os_ok = image_type == IH_TYPE_FLATDT ||
2173 		image_type == IH_TYPE_FPGA ||
2174 		fit_image_check_os(fit, noffset, IH_OS_LINUX) ||
2175 		fit_image_check_os(fit, noffset, IH_OS_ARM_TRUSTED_FIRMWARE) ||
2176 		fit_image_check_os(fit, noffset, IH_OS_OP_TEE) ||
2177 		fit_image_check_os(fit, noffset, IH_OS_U_BOOT) ||
2178 		fit_image_check_os(fit, noffset, IH_OS_QNX) ||
2179 		fit_image_check_os(fit, noffset, IH_OS_OPENRTOS);
2180 
2181 	/*
2182 	 * If either of the checks fail, we should report an error, but
2183 	 * if the image type is coming from the "loadables" field, we
2184 	 * don't care what it is
2185 	 */
2186 	if ((!type_ok || !os_ok) && image_type != IH_TYPE_LOADABLE) {
2187 		fit_image_get_os(fit, noffset, &os);
2188 		printf("No %s %s %s Image\n",
2189 		       genimg_get_os_name(os),
2190 		       genimg_get_arch_name(arch),
2191 		       genimg_get_type_name(image_type));
2192 		bootstage_error(bootstage_id + BOOTSTAGE_SUB_CHECK_ALL);
2193 		return -EIO;
2194 	}
2195 
2196 	bootstage_mark(bootstage_id + BOOTSTAGE_SUB_CHECK_ALL_OK);
2197 
2198 	/* get image data address and length */
2199 	if (fit_image_get_data(fit, noffset, &buf, &size)) {
2200 		printf("Could not find %s subimage data!\n", prop_name);
2201 		bootstage_error(bootstage_id + BOOTSTAGE_SUB_GET_DATA);
2202 		return -ENOENT;
2203 	}
2204 
2205 #if !defined(USE_HOSTCC) && defined(CONFIG_FIT_IMAGE_POST_PROCESS)
2206 	ret = fit_image_get_load(fit, noffset, &load);
2207 	if (ret < 0)
2208 		return ret;
2209 
2210 	/* perform any post-processing on the image data */
2211 	board_fit_image_post_process((void *)fit, noffset,
2212 				     &load, (ulong **)&buf, &size, NULL);
2213 #endif
2214 
2215 	len = (ulong)size;
2216 
2217 	/* verify that image data is a proper FDT blob */
2218 	if (image_type == IH_TYPE_FLATDT && fdt_check_header(buf)) {
2219 		puts("Subimage data is not a FDT");
2220 		return -ENOEXEC;
2221 	}
2222 
2223 	bootstage_mark(bootstage_id + BOOTSTAGE_SUB_GET_DATA_OK);
2224 
2225 	/*
2226 	 * Work-around for eldk-4.2 which gives this warning if we try to
2227 	 * cast in the unmap_sysmem() call:
2228 	 * warning: initialization discards qualifiers from pointer target type
2229 	 */
2230 	{
2231 		void *vbuf = (void *)buf;
2232 
2233 		data = map_to_sysmem(vbuf);
2234 	}
2235 
2236 	if (load_op == FIT_LOAD_IGNORED) {
2237 		/* Don't load */
2238 	} else if (fit_image_get_load(fit, noffset, &load)) {
2239 		if (load_op == FIT_LOAD_REQUIRED) {
2240 			printf("Can't get %s subimage load address!\n",
2241 			       prop_name);
2242 			bootstage_error(bootstage_id + BOOTSTAGE_SUB_LOAD);
2243 			return -EBADF;
2244 		}
2245 	} else if (load_op != FIT_LOAD_OPTIONAL_NON_ZERO || load) {
2246 		ulong image_start, image_end;
2247 		ulong load_end;
2248 		void *dst;
2249 
2250 		/*
2251 		 * move image data to the load address,
2252 		 * make sure we don't overwrite initial image
2253 		 */
2254 		image_start = addr;
2255 		image_end = addr + fit_get_size(fit);
2256 
2257 		load_end = load + len;
2258 		if (image_type != IH_TYPE_KERNEL &&
2259 		    load < image_end && load_end > image_start) {
2260 			printf("Error: %s overwritten\n", prop_name);
2261 			return -EXDEV;
2262 		}
2263 
2264 		printf("   Loading %s from 0x%08lx to 0x%08lx\n",
2265 		       prop_name, data, load);
2266 
2267 		dst = map_sysmem(load, len);
2268 		memmove(dst, buf, len);
2269 		data = load;
2270 	}
2271 	bootstage_mark(bootstage_id + BOOTSTAGE_SUB_LOAD);
2272 
2273 	*datap = data;
2274 	*lenp = len;
2275 	if (fit_unamep)
2276 		*fit_unamep = (char *)fit_uname;
2277 	if (fit_uname_configp)
2278 		*fit_uname_configp = (char *)(fit_uname_config ? :
2279 					      fit_base_uname_config);
2280 
2281 	return noffset;
2282 }
2283 
fit_image_load(bootm_headers_t * images,ulong addr,const char ** fit_unamep,const char ** fit_uname_configp,int arch,int image_type,int bootstage_id,enum fit_load_op load_op,ulong * datap,ulong * lenp)2284 int fit_image_load(bootm_headers_t *images, ulong addr,
2285 		   const char **fit_unamep, const char **fit_uname_configp,
2286 		   int arch, int image_type, int bootstage_id,
2287 		   enum fit_load_op load_op, ulong *datap, ulong *lenp)
2288 {
2289 	return fit_image_load_index(images, addr,fit_unamep, fit_uname_configp,
2290 				    arch, image_type, 0, bootstage_id,
2291 				    load_op, datap, lenp);
2292 }
2293 
boot_get_setup_fit(bootm_headers_t * images,uint8_t arch,ulong * setup_start,ulong * setup_len)2294 int boot_get_setup_fit(bootm_headers_t *images, uint8_t arch,
2295 			ulong *setup_start, ulong *setup_len)
2296 {
2297 	int noffset;
2298 	ulong addr;
2299 	ulong len;
2300 	int ret;
2301 
2302 	addr = map_to_sysmem(images->fit_hdr_os);
2303 	noffset = fit_get_node_from_config(images, FIT_SETUP_PROP, addr);
2304 	if (noffset < 0)
2305 		return noffset;
2306 
2307 	ret = fit_image_load(images, addr, NULL, NULL, arch,
2308 			     IH_TYPE_X86_SETUP, BOOTSTAGE_ID_FIT_SETUP_START,
2309 			     FIT_LOAD_REQUIRED, setup_start, &len);
2310 
2311 	return ret;
2312 }
2313 
2314 #ifndef USE_HOSTCC
boot_get_fdt_fit(bootm_headers_t * images,ulong addr,const char ** fit_unamep,const char ** fit_uname_configp,int arch,ulong * datap,ulong * lenp)2315 int boot_get_fdt_fit(bootm_headers_t *images, ulong addr,
2316 		   const char **fit_unamep, const char **fit_uname_configp,
2317 		   int arch, ulong *datap, ulong *lenp)
2318 {
2319 	int fdt_noffset, cfg_noffset, count;
2320 	const void *fit;
2321 	const char *fit_uname = NULL;
2322 	const char *fit_uname_config = NULL;
2323 	char *fit_uname_config_copy = NULL;
2324 	char *next_config = NULL;
2325 	ulong load, len;
2326 #ifdef CONFIG_OF_LIBFDT_OVERLAY
2327 	ulong image_start, image_end;
2328 	ulong ovload, ovlen;
2329 	const char *uconfig;
2330 	const char *uname;
2331 	void *base, *ov;
2332 	int i, err, noffset, ov_noffset;
2333 #endif
2334 
2335 	fit_uname = fit_unamep ? *fit_unamep : NULL;
2336 
2337 	if (fit_uname_configp && *fit_uname_configp) {
2338 		fit_uname_config_copy = strdup(*fit_uname_configp);
2339 		if (!fit_uname_config_copy)
2340 			return -ENOMEM;
2341 
2342 		next_config = strchr(fit_uname_config_copy, '#');
2343 		if (next_config)
2344 			*next_config++ = '\0';
2345 		if (next_config - 1 > fit_uname_config_copy)
2346 			fit_uname_config = fit_uname_config_copy;
2347 	}
2348 
2349 	fdt_noffset = fit_image_load(images,
2350 		addr, &fit_uname, &fit_uname_config,
2351 		arch, IH_TYPE_FLATDT,
2352 		BOOTSTAGE_ID_FIT_FDT_START,
2353 		FIT_LOAD_OPTIONAL, &load, &len);
2354 
2355 	if (fdt_noffset < 0)
2356 		goto out;
2357 
2358 	debug("fit_uname=%s, fit_uname_config=%s\n",
2359 			fit_uname ? fit_uname : "<NULL>",
2360 			fit_uname_config ? fit_uname_config : "<NULL>");
2361 
2362 	fit = map_sysmem(addr, 0);
2363 
2364 	cfg_noffset = fit_conf_get_node(fit, fit_uname_config);
2365 
2366 	/* single blob, or error just return as well */
2367 	count = fit_conf_get_prop_node_count(fit, cfg_noffset, FIT_FDT_PROP);
2368 	if (count <= 1 && !next_config)
2369 		goto out;
2370 
2371 	/* we need to apply overlays */
2372 
2373 #ifdef CONFIG_OF_LIBFDT_OVERLAY
2374 	image_start = addr;
2375 	image_end = addr + fit_get_size(fit);
2376 	/* verify that relocation took place by load address not being in fit */
2377 	if (load >= image_start && load < image_end) {
2378 		/* check is simplified; fit load checks for overlaps */
2379 		printf("Overlayed FDT requires relocation\n");
2380 		fdt_noffset = -EBADF;
2381 		goto out;
2382 	}
2383 
2384 	base = map_sysmem(load, len);
2385 
2386 	/* apply extra configs in FIT first, followed by args */
2387 	for (i = 1; ; i++) {
2388 		if (i < count) {
2389 			noffset = fit_conf_get_prop_node_index(fit, cfg_noffset,
2390 							       FIT_FDT_PROP, i);
2391 			uname = fit_get_name(fit, noffset, NULL);
2392 			uconfig = NULL;
2393 		} else {
2394 			if (!next_config)
2395 				break;
2396 			uconfig = next_config;
2397 			next_config = strchr(next_config, '#');
2398 			if (next_config)
2399 				*next_config++ = '\0';
2400 			uname = NULL;
2401 		}
2402 
2403 		debug("%d: using uname=%s uconfig=%s\n", i, uname, uconfig);
2404 
2405 		ov_noffset = fit_image_load(images,
2406 			addr, &uname, &uconfig,
2407 			arch, IH_TYPE_FLATDT,
2408 			BOOTSTAGE_ID_FIT_FDT_START,
2409 			FIT_LOAD_REQUIRED, &ovload, &ovlen);
2410 		if (ov_noffset < 0) {
2411 			printf("load of %s failed\n", uname);
2412 			continue;
2413 		}
2414 		debug("%s loaded at 0x%08lx len=0x%08lx\n",
2415 				uname, ovload, ovlen);
2416 		ov = map_sysmem(ovload, ovlen);
2417 
2418 		base = map_sysmem(load, len + ovlen);
2419 		err = fdt_open_into(base, base, len + ovlen);
2420 		if (err < 0) {
2421 			printf("failed on fdt_open_into\n");
2422 			fdt_noffset = err;
2423 			goto out;
2424 		}
2425 		/* the verbose method prints out messages on error */
2426 		err = fdt_overlay_apply_verbose(base, ov);
2427 		if (err < 0) {
2428 			fdt_noffset = err;
2429 			goto out;
2430 		}
2431 		fdt_pack(base);
2432 		len = fdt_totalsize(base);
2433 	}
2434 #else
2435 	printf("config with overlays but CONFIG_OF_LIBFDT_OVERLAY not set\n");
2436 	fdt_noffset = -EBADF;
2437 #endif
2438 
2439 out:
2440 	if (datap)
2441 		*datap = load;
2442 	if (lenp)
2443 		*lenp = len;
2444 	if (fit_unamep)
2445 		*fit_unamep = fit_uname;
2446 	if (fit_uname_configp)
2447 		*fit_uname_configp = fit_uname_config;
2448 
2449 	if (fit_uname_config_copy)
2450 		free(fit_uname_config_copy);
2451 	return fdt_noffset;
2452 }
2453 #endif
2454