1 /*
2 * Copyright (c) 2013, Google Inc.
3 *
4 * (C) Copyright 2008 Semihalf
5 *
6 * (C) Copyright 2000-2006
7 * Wolfgang Denk, DENX Software Engineering, wd@denx.de.
8 *
9 * SPDX-License-Identifier: GPL-2.0+
10 */
11
12 #ifdef USE_HOSTCC
13 #include "mkimage.h"
14 #include <time.h>
15 #else
16 #include <linux/compiler.h>
17 #include <linux/kconfig.h>
18 #include <common.h>
19 #include <errno.h>
20 #include <mapmem.h>
21 #include <asm/io.h>
22 #include <malloc.h>
23 #include <crypto.h>
24
25 DECLARE_GLOBAL_DATA_PTR;
26 #endif /* !USE_HOSTCC*/
27
28 #include <image.h>
29 #include <bootstage.h>
30 #include <u-boot/crc.h>
31 #include <u-boot/md5.h>
32 #include <u-boot/sha1.h>
33 #include <u-boot/sha256.h>
34
35 #define __round_mask(x, y) ((__typeof__(x))((y)-1))
36 #define round_up(x, y) ((((x)-1) | __round_mask(x, y))+1)
37
38 /*****************************************************************************/
39 /* New uImage format routines */
40 /*****************************************************************************/
41 #ifndef USE_HOSTCC
fit_parse_spec(const char * spec,char sepc,ulong addr_curr,ulong * addr,const char ** name)42 static int fit_parse_spec(const char *spec, char sepc, ulong addr_curr,
43 ulong *addr, const char **name)
44 {
45 const char *sep;
46
47 *addr = addr_curr;
48 *name = NULL;
49
50 sep = strchr(spec, sepc);
51 if (sep) {
52 if (sep - spec > 0)
53 *addr = simple_strtoul(spec, NULL, 16);
54
55 *name = sep + 1;
56 return 1;
57 }
58
59 return 0;
60 }
61
62 /**
63 * fit_parse_conf - parse FIT configuration spec
64 * @spec: input string, containing configuration spec
65 * @add_curr: current image address (to be used as a possible default)
66 * @addr: pointer to a ulong variable, will hold FIT image address of a given
67 * configuration
68 * @conf_name double pointer to a char, will hold pointer to a configuration
69 * unit name
70 *
71 * fit_parse_conf() expects configuration spec in the form of [<addr>]#<conf>,
72 * where <addr> is a FIT image address that contains configuration
73 * with a <conf> unit name.
74 *
75 * Address part is optional, and if omitted default add_curr will
76 * be used instead.
77 *
78 * returns:
79 * 1 if spec is a valid configuration string,
80 * addr and conf_name are set accordingly
81 * 0 otherwise
82 */
fit_parse_conf(const char * spec,ulong addr_curr,ulong * addr,const char ** conf_name)83 int fit_parse_conf(const char *spec, ulong addr_curr,
84 ulong *addr, const char **conf_name)
85 {
86 return fit_parse_spec(spec, '#', addr_curr, addr, conf_name);
87 }
88
89 /**
90 * fit_parse_subimage - parse FIT subimage spec
91 * @spec: input string, containing subimage spec
92 * @add_curr: current image address (to be used as a possible default)
93 * @addr: pointer to a ulong variable, will hold FIT image address of a given
94 * subimage
95 * @image_name: double pointer to a char, will hold pointer to a subimage name
96 *
97 * fit_parse_subimage() expects subimage spec in the form of
98 * [<addr>]:<subimage>, where <addr> is a FIT image address that contains
99 * subimage with a <subimg> unit name.
100 *
101 * Address part is optional, and if omitted default add_curr will
102 * be used instead.
103 *
104 * returns:
105 * 1 if spec is a valid subimage string,
106 * addr and image_name are set accordingly
107 * 0 otherwise
108 */
fit_parse_subimage(const char * spec,ulong addr_curr,ulong * addr,const char ** image_name)109 int fit_parse_subimage(const char *spec, ulong addr_curr,
110 ulong *addr, const char **image_name)
111 {
112 return fit_parse_spec(spec, ':', addr_curr, addr, image_name);
113 }
114 #endif /* !USE_HOSTCC */
115
fit_get_debug(const void * fit,int noffset,char * prop_name,int err)116 static void fit_get_debug(const void *fit, int noffset,
117 char *prop_name, int err)
118 {
119 debug("Can't get '%s' property from FIT 0x%08lx, node: offset %d, name %s (%s)\n",
120 prop_name, (ulong)fit, noffset, fit_get_name(fit, noffset, NULL),
121 fdt_strerror(err));
122 }
123
124 /**
125 * fit_get_subimage_count - get component (sub-image) count
126 * @fit: pointer to the FIT format image header
127 * @images_noffset: offset of images node
128 *
129 * returns:
130 * number of image components
131 */
fit_get_subimage_count(const void * fit,int images_noffset)132 int fit_get_subimage_count(const void *fit, int images_noffset)
133 {
134 int noffset;
135 int ndepth;
136 int count = 0;
137
138 /* Process its subnodes, print out component images details */
139 for (ndepth = 0, count = 0,
140 noffset = fdt_next_node(fit, images_noffset, &ndepth);
141 (noffset >= 0) && (ndepth > 0);
142 noffset = fdt_next_node(fit, noffset, &ndepth)) {
143 if (ndepth == 1) {
144 count++;
145 }
146 }
147
148 return count;
149 }
150
151 #if !defined(CONFIG_SPL_BUILD) || defined(CONFIG_FIT_SPL_PRINT)
152 /**
153 * fit_print_contents - prints out the contents of the FIT format image
154 * @fit: pointer to the FIT format image header
155 * @p: pointer to prefix string
156 *
157 * fit_print_contents() formats a multi line FIT image contents description.
158 * The routine prints out FIT image properties (root node level) followed by
159 * the details of each component image.
160 *
161 * returns:
162 * no returned results
163 */
fit_print_contents(const void * fit)164 void fit_print_contents(const void *fit)
165 {
166 char *desc;
167 char *uname;
168 int images_noffset;
169 int confs_noffset;
170 int noffset;
171 int ndepth;
172 int count = 0;
173 int ret;
174 const char *p;
175 time_t timestamp;
176
177 /* Indent string is defined in header image.h */
178 p = IMAGE_INDENT_STRING;
179
180 /* Root node properties */
181 ret = fit_get_desc(fit, 0, &desc);
182 printf("%sFIT description: ", p);
183 if (ret)
184 printf("unavailable\n");
185 else
186 printf("%s\n", desc);
187
188 if (IMAGE_ENABLE_TIMESTAMP) {
189 ret = fit_get_timestamp(fit, 0, ×tamp);
190 printf("%sCreated: ", p);
191 if (ret)
192 printf("unavailable\n");
193 else
194 genimg_print_time(timestamp);
195 }
196
197 /* Find images parent node offset */
198 images_noffset = fdt_path_offset(fit, FIT_IMAGES_PATH);
199 if (images_noffset < 0) {
200 printf("Can't find images parent node '%s' (%s)\n",
201 FIT_IMAGES_PATH, fdt_strerror(images_noffset));
202 return;
203 }
204
205 /* Process its subnodes, print out component images details */
206 for (ndepth = 0, count = 0,
207 noffset = fdt_next_node(fit, images_noffset, &ndepth);
208 (noffset >= 0) && (ndepth > 0);
209 noffset = fdt_next_node(fit, noffset, &ndepth)) {
210 if (ndepth == 1) {
211 /*
212 * Direct child node of the images parent node,
213 * i.e. component image node.
214 */
215 printf("%s Image %u (%s)\n", p, count++,
216 fit_get_name(fit, noffset, NULL));
217
218 fit_image_print(fit, noffset, p);
219 }
220 }
221
222 /* Find configurations parent node offset */
223 confs_noffset = fdt_path_offset(fit, FIT_CONFS_PATH);
224 if (confs_noffset < 0) {
225 debug("Can't get configurations parent node '%s' (%s)\n",
226 FIT_CONFS_PATH, fdt_strerror(confs_noffset));
227 return;
228 }
229
230 /* get default configuration unit name from default property */
231 uname = (char *)fdt_getprop(fit, noffset, FIT_DEFAULT_PROP, NULL);
232 if (uname)
233 printf("%s Default Configuration: '%s'\n", p, uname);
234
235 /* Process its subnodes, print out configurations details */
236 for (ndepth = 0, count = 0,
237 noffset = fdt_next_node(fit, confs_noffset, &ndepth);
238 (noffset >= 0) && (ndepth > 0);
239 noffset = fdt_next_node(fit, noffset, &ndepth)) {
240 if (ndepth == 1) {
241 /*
242 * Direct child node of the configurations parent node,
243 * i.e. configuration node.
244 */
245 printf("%s Configuration %u (%s)\n", p, count++,
246 fit_get_name(fit, noffset, NULL));
247
248 fit_conf_print(fit, noffset, p);
249 }
250 }
251 }
252
253 /**
254 * fit_image_print_data() - prints out the hash node details
255 * @fit: pointer to the FIT format image header
256 * @noffset: offset of the hash node
257 * @p: pointer to prefix string
258 * @type: Type of information to print ("hash" or "sign")
259 *
260 * fit_image_print_data() lists properties for the processed hash node
261 *
262 * This function avoid using puts() since it prints a newline on the host
263 * but does not in U-Boot.
264 *
265 * returns:
266 * no returned results
267 */
fit_image_print_data(const void * fit,int noffset,const char * p,const char * type)268 static void fit_image_print_data(const void *fit, int noffset, const char *p,
269 const char *type)
270 {
271 const char *keyname;
272 uint8_t *value;
273 int value_len;
274 char *algo;
275 int required;
276 int ret, i;
277
278 debug("%s %s node: '%s'\n", p, type,
279 fit_get_name(fit, noffset, NULL));
280 printf("%s %s algo: ", p, type);
281 if (fit_image_hash_get_algo(fit, noffset, &algo)) {
282 printf("invalid/unsupported\n");
283 return;
284 }
285 printf("%s", algo);
286 keyname = fdt_getprop(fit, noffset, "key-name-hint", NULL);
287 required = fdt_getprop(fit, noffset, "required", NULL) != NULL;
288 if (keyname)
289 printf(":%s", keyname);
290 if (required)
291 printf(" (required)");
292 printf("\n");
293
294 ret = fit_image_hash_get_value(fit, noffset, &value,
295 &value_len);
296 printf("%s %s value: ", p, type);
297 if (ret) {
298 printf("unavailable\n");
299 } else {
300 for (i = 0; i < value_len; i++)
301 printf("%02x", value[i]);
302 printf("\n");
303 }
304
305 debug("%s %s len: %d\n", p, type, value_len);
306
307 /* Signatures have a time stamp */
308 if (IMAGE_ENABLE_TIMESTAMP && keyname) {
309 time_t timestamp;
310
311 printf("%s Timestamp: ", p);
312 if (fit_get_timestamp(fit, noffset, ×tamp))
313 printf("unavailable\n");
314 else
315 genimg_print_time(timestamp);
316 }
317 }
318
319 /**
320 * fit_image_print_verification_data() - prints out the hash/signature details
321 * @fit: pointer to the FIT format image header
322 * @noffset: offset of the hash or signature node
323 * @p: pointer to prefix string
324 *
325 * This lists properties for the processed hash node
326 *
327 * returns:
328 * no returned results
329 */
fit_image_print_verification_data(const void * fit,int noffset,const char * p)330 static void fit_image_print_verification_data(const void *fit, int noffset,
331 const char *p)
332 {
333 const char *name;
334
335 /*
336 * Check subnode name, must be equal to "hash" or "signature".
337 * Multiple hash/signature nodes require unique unit node
338 * names, e.g. hash@1, hash@2, signature@1, signature@2, etc.
339 */
340 name = fit_get_name(fit, noffset, NULL);
341 if (!strncmp(name, FIT_HASH_NODENAME, strlen(FIT_HASH_NODENAME))) {
342 fit_image_print_data(fit, noffset, p, "Hash");
343 } else if (!strncmp(name, FIT_SIG_NODENAME,
344 strlen(FIT_SIG_NODENAME))) {
345 fit_image_print_data(fit, noffset, p, "Sign");
346 }
347 }
348
349 /**
350 * fit_image_print - prints out the FIT component image details
351 * @fit: pointer to the FIT format image header
352 * @image_noffset: offset of the component image node
353 * @p: pointer to prefix string
354 *
355 * fit_image_print() lists all mandatory properties for the processed component
356 * image. If present, hash nodes are printed out as well. Load
357 * address for images of type firmware is also printed out. Since the load
358 * address is not mandatory for firmware images, it will be output as
359 * "unavailable" when not present.
360 *
361 * returns:
362 * no returned results
363 */
fit_image_print(const void * fit,int image_noffset,const char * p)364 void fit_image_print(const void *fit, int image_noffset, const char *p)
365 {
366 char *desc;
367 uint8_t type, arch, os, comp;
368 size_t size;
369 ulong load, entry;
370 const void *data;
371 int noffset;
372 int ndepth;
373 int ret;
374
375 /* Mandatory properties */
376 ret = fit_get_desc(fit, image_noffset, &desc);
377 printf("%s Description: ", p);
378 if (ret)
379 printf("unavailable\n");
380 else
381 printf("%s\n", desc);
382
383 if (IMAGE_ENABLE_TIMESTAMP) {
384 time_t timestamp;
385
386 ret = fit_get_timestamp(fit, 0, ×tamp);
387 printf("%s Created: ", p);
388 if (ret)
389 printf("unavailable\n");
390 else
391 genimg_print_time(timestamp);
392 }
393
394 fit_image_get_type(fit, image_noffset, &type);
395 printf("%s Type: %s\n", p, genimg_get_type_name(type));
396
397 fit_image_get_comp(fit, image_noffset, &comp);
398 printf("%s Compression: %s\n", p, genimg_get_comp_name(comp));
399
400 ret = fit_image_get_data(fit, image_noffset, &data, &size);
401
402 #ifndef USE_HOSTCC
403 printf("%s Data Start: ", p);
404 if (ret) {
405 printf("unavailable\n");
406 } else {
407 void *vdata = (void *)data;
408
409 printf("0x%08lx\n", (ulong)map_to_sysmem(vdata));
410 }
411 #endif
412
413 printf("%s Data Size: ", p);
414 if (ret)
415 printf("unavailable\n");
416 else
417 genimg_print_size(size);
418
419 /* Remaining, type dependent properties */
420 if ((type == IH_TYPE_KERNEL) || (type == IH_TYPE_STANDALONE) ||
421 (type == IH_TYPE_RAMDISK) || (type == IH_TYPE_FIRMWARE) ||
422 (type == IH_TYPE_FLATDT)) {
423 fit_image_get_arch(fit, image_noffset, &arch);
424 printf("%s Architecture: %s\n", p, genimg_get_arch_name(arch));
425 }
426
427 if ((type == IH_TYPE_KERNEL) || (type == IH_TYPE_RAMDISK)) {
428 fit_image_get_os(fit, image_noffset, &os);
429 printf("%s OS: %s\n", p, genimg_get_os_name(os));
430 }
431
432 if ((type == IH_TYPE_KERNEL) || (type == IH_TYPE_STANDALONE) ||
433 (type == IH_TYPE_FIRMWARE) || (type == IH_TYPE_RAMDISK) ||
434 (type == IH_TYPE_FPGA)) {
435 ret = fit_image_get_load(fit, image_noffset, &load);
436 printf("%s Load Address: ", p);
437 if (ret)
438 printf("unavailable\n");
439 else
440 printf("0x%08lx\n", load);
441 }
442
443 /* optional load address for FDT */
444 if (type == IH_TYPE_FLATDT && !fit_image_get_load(fit, image_noffset, &load))
445 printf("%s Load Address: 0x%08lx\n", p, load);
446
447 if ((type == IH_TYPE_KERNEL) || (type == IH_TYPE_STANDALONE) ||
448 (type == IH_TYPE_RAMDISK)) {
449 ret = fit_image_get_entry(fit, image_noffset, &entry);
450 printf("%s Entry Point: ", p);
451 if (ret)
452 printf("unavailable\n");
453 else
454 printf("0x%08lx\n", entry);
455 }
456
457 /* Process all hash subnodes of the component image node */
458 for (ndepth = 0, noffset = fdt_next_node(fit, image_noffset, &ndepth);
459 (noffset >= 0) && (ndepth > 0);
460 noffset = fdt_next_node(fit, noffset, &ndepth)) {
461 if (ndepth == 1) {
462 /* Direct child node of the component image node */
463 fit_image_print_verification_data(fit, noffset, p);
464 }
465 }
466 }
467
468 #endif /* !defined(CONFIG_SPL_BUILD) || defined(CONFIG_FIT_SPL_PRINT) */
469
470 /**
471 * fit_get_desc - get node description property
472 * @fit: pointer to the FIT format image header
473 * @noffset: node offset
474 * @desc: double pointer to the char, will hold pointer to the description
475 *
476 * fit_get_desc() reads description property from a given node, if
477 * description is found pointer to it is returned in third call argument.
478 *
479 * returns:
480 * 0, on success
481 * -1, on failure
482 */
fit_get_desc(const void * fit,int noffset,char ** desc)483 int fit_get_desc(const void *fit, int noffset, char **desc)
484 {
485 int len;
486
487 *desc = (char *)fdt_getprop(fit, noffset, FIT_DESC_PROP, &len);
488 if (*desc == NULL) {
489 fit_get_debug(fit, noffset, FIT_DESC_PROP, len);
490 return -1;
491 }
492
493 return 0;
494 }
495
496 /**
497 * fit_get_timestamp - get node timestamp property
498 * @fit: pointer to the FIT format image header
499 * @noffset: node offset
500 * @timestamp: pointer to the time_t, will hold read timestamp
501 *
502 * fit_get_timestamp() reads timestamp property from given node, if timestamp
503 * is found and has a correct size its value is returned in third call
504 * argument.
505 *
506 * returns:
507 * 0, on success
508 * -1, on property read failure
509 * -2, on wrong timestamp size
510 */
fit_get_timestamp(const void * fit,int noffset,time_t * timestamp)511 int fit_get_timestamp(const void *fit, int noffset, time_t *timestamp)
512 {
513 int len;
514 const void *data;
515
516 data = fdt_getprop(fit, noffset, FIT_TIMESTAMP_PROP, &len);
517 if (data == NULL) {
518 fit_get_debug(fit, noffset, FIT_TIMESTAMP_PROP, len);
519 return -1;
520 }
521 if (len != sizeof(uint32_t)) {
522 debug("FIT timestamp with incorrect size of (%u)\n", len);
523 return -2;
524 }
525
526 *timestamp = uimage_to_cpu(*((uint32_t *)data));
527 return 0;
528 }
529
530 /**
531 * fit_get_totalsize - get node totalsize property.
532 *
533 * @fit: pointer to the FIT image header
534 * @totalsize: holds the /totalsize property
535 *
536 * returns:
537 * 0, on success
538 * -ENOENT if the property could not be found
539 */
fit_get_totalsize(const void * fit,int * totalsize)540 int fit_get_totalsize(const void *fit, int *totalsize)
541 {
542 const fdt32_t *val;
543
544 val = fdt_getprop(fit, 0, FIT_TOTALSIZE_PROP, NULL);
545 if (!val)
546 return -ENOENT;
547
548 *totalsize = fdt32_to_cpu(*val);
549
550 return 0;
551 }
552
553 /**
554 * fit_image_get_node - get node offset for component image of a given unit name
555 * @fit: pointer to the FIT format image header
556 * @image_uname: component image node unit name
557 *
558 * fit_image_get_node() finds a component image (within the '/images'
559 * node) of a provided unit name. If image is found its node offset is
560 * returned to the caller.
561 *
562 * returns:
563 * image node offset when found (>=0)
564 * negative number on failure (FDT_ERR_* code)
565 */
fit_image_get_node(const void * fit,const char * image_uname)566 int fit_image_get_node(const void *fit, const char *image_uname)
567 {
568 int noffset, images_noffset;
569
570 images_noffset = fdt_path_offset(fit, FIT_IMAGES_PATH);
571 if (images_noffset < 0) {
572 debug("Can't find images parent node '%s' (%s)\n",
573 FIT_IMAGES_PATH, fdt_strerror(images_noffset));
574 return images_noffset;
575 }
576
577 noffset = fdt_subnode_offset(fit, images_noffset, image_uname);
578 if (noffset < 0) {
579 debug("Can't get node offset for image unit name: '%s' (%s)\n",
580 image_uname, fdt_strerror(noffset));
581 }
582
583 return noffset;
584 }
585
586 /**
587 * fit_image_get_os - get os id for a given component image node
588 * @fit: pointer to the FIT format image header
589 * @noffset: component image node offset
590 * @os: pointer to the uint8_t, will hold os numeric id
591 *
592 * fit_image_get_os() finds os property in a given component image node.
593 * If the property is found, its (string) value is translated to the numeric
594 * id which is returned to the caller.
595 *
596 * returns:
597 * 0, on success
598 * -1, on failure
599 */
fit_image_get_os(const void * fit,int noffset,uint8_t * os)600 int fit_image_get_os(const void *fit, int noffset, uint8_t *os)
601 {
602 int len;
603 const void *data;
604
605 /* Get OS name from property data */
606 data = fdt_getprop(fit, noffset, FIT_OS_PROP, &len);
607 if (data == NULL) {
608 fit_get_debug(fit, noffset, FIT_OS_PROP, len);
609 *os = -1;
610 return -1;
611 }
612
613 /* Translate OS name to id */
614 *os = genimg_get_os_id(data);
615 return 0;
616 }
617
618 /**
619 * fit_image_get_arch - get arch id for a given component image node
620 * @fit: pointer to the FIT format image header
621 * @noffset: component image node offset
622 * @arch: pointer to the uint8_t, will hold arch numeric id
623 *
624 * fit_image_get_arch() finds arch property in a given component image node.
625 * If the property is found, its (string) value is translated to the numeric
626 * id which is returned to the caller.
627 *
628 * returns:
629 * 0, on success
630 * -1, on failure
631 */
fit_image_get_arch(const void * fit,int noffset,uint8_t * arch)632 int fit_image_get_arch(const void *fit, int noffset, uint8_t *arch)
633 {
634 int len;
635 const void *data;
636
637 /* Get architecture name from property data */
638 data = fdt_getprop(fit, noffset, FIT_ARCH_PROP, &len);
639 if (data == NULL) {
640 fit_get_debug(fit, noffset, FIT_ARCH_PROP, len);
641 *arch = -1;
642 return -1;
643 }
644
645 /* Translate architecture name to id */
646 *arch = genimg_get_arch_id(data);
647 return 0;
648 }
649
650 /**
651 * fit_image_get_type - get type id for a given component image node
652 * @fit: pointer to the FIT format image header
653 * @noffset: component image node offset
654 * @type: pointer to the uint8_t, will hold type numeric id
655 *
656 * fit_image_get_type() finds type property in a given component image node.
657 * If the property is found, its (string) value is translated to the numeric
658 * id which is returned to the caller.
659 *
660 * returns:
661 * 0, on success
662 * -1, on failure
663 */
fit_image_get_type(const void * fit,int noffset,uint8_t * type)664 int fit_image_get_type(const void *fit, int noffset, uint8_t *type)
665 {
666 int len;
667 const void *data;
668
669 /* Get image type name from property data */
670 data = fdt_getprop(fit, noffset, FIT_TYPE_PROP, &len);
671 if (data == NULL) {
672 fit_get_debug(fit, noffset, FIT_TYPE_PROP, len);
673 *type = -1;
674 return -1;
675 }
676
677 /* Translate image type name to id */
678 *type = genimg_get_type_id(data);
679 return 0;
680 }
681
682 /**
683 * fit_image_get_comp - get comp id for a given component image node
684 * @fit: pointer to the FIT format image header
685 * @noffset: component image node offset
686 * @comp: pointer to the uint8_t, will hold comp numeric id
687 *
688 * fit_image_get_comp() finds comp property in a given component image node.
689 * If the property is found, its (string) value is translated to the numeric
690 * id which is returned to the caller.
691 *
692 * returns:
693 * 0, on success
694 * -1, on failure
695 */
fit_image_get_comp(const void * fit,int noffset,uint8_t * comp)696 int fit_image_get_comp(const void *fit, int noffset, uint8_t *comp)
697 {
698 int len;
699 const void *data;
700
701 /* Get compression name from property data */
702 data = fdt_getprop(fit, noffset, FIT_COMP_PROP, &len);
703 if (data == NULL) {
704 fit_get_debug(fit, noffset, FIT_COMP_PROP, len);
705 *comp = -1;
706 return -1;
707 }
708
709 /* Translate compression name to id */
710 *comp = genimg_get_comp_id(data);
711 return 0;
712 }
713
fit_image_is_preload(const void * fit,int noffset)714 bool fit_image_is_preload(const void *fit, int noffset)
715 {
716 int len;
717 int *data;
718
719 data = (int *)fdt_getprop(fit, noffset, FIT_PRE_LOAD_PROP, &len);
720 if (data == NULL || len != sizeof(int)) {
721 fit_get_debug(fit, noffset, FIT_PRE_LOAD_PROP, len);
722 return false;
723 }
724
725 if (fdt32_to_cpu(*data) != 1)
726 return false;
727
728 return true;
729 }
730
fit_image_get_address(const void * fit,int noffset,char * name,ulong * load)731 static int fit_image_get_address(const void *fit, int noffset, char *name,
732 ulong *load)
733 {
734 int len, cell_len;
735 const fdt32_t *cell;
736 uint64_t load64 = 0;
737
738 cell = fdt_getprop(fit, noffset, name, &len);
739 if (cell == NULL) {
740 fit_get_debug(fit, noffset, name, len);
741 return -1;
742 }
743
744 if (len > sizeof(ulong)) {
745 printf("Unsupported %s address size\n", name);
746 return -1;
747 }
748
749 cell_len = len >> 2;
750 /* Use load64 to avoid compiling warning for 32-bit target */
751 while (cell_len--) {
752 load64 = (load64 << 32) | uimage_to_cpu(*cell);
753 cell++;
754 }
755 *load = (ulong)load64;
756
757 return 0;
758 }
759
fit_image_set_address(const void * fit,int noffset,char * name,ulong addr)760 static int fit_image_set_address(const void *fit, int noffset, char *name,
761 ulong addr)
762 {
763 int len, cell_len;
764 const fdt32_t *cell;
765
766 cell = fdt_getprop(fit, noffset, name, &len);
767 if (cell == NULL) {
768 fit_get_debug(fit, noffset, name, len);
769 return -1;
770 }
771
772 if (len > sizeof(ulong)) {
773 printf("Unsupported %s address size\n", name);
774 return -1;
775 }
776
777 cell_len = len >> 2;
778 /* Use load64 to avoid compiling warning for 32-bit target */
779 while (cell_len--) {
780 *(fdt32_t *)cell = cpu_to_uimage(addr >> (32 * cell_len));
781 cell++;
782 }
783
784 return 0;
785 }
786
787 /**
788 * fit_image_get_load() - get load addr property for given component image node
789 * @fit: pointer to the FIT format image header
790 * @noffset: component image node offset
791 * @load: pointer to the uint32_t, will hold load address
792 *
793 * fit_image_get_load() finds load address property in a given component
794 * image node. If the property is found, its value is returned to the caller.
795 *
796 * returns:
797 * 0, on success
798 * -1, on failure
799 */
fit_image_get_load(const void * fit,int noffset,ulong * load)800 int fit_image_get_load(const void *fit, int noffset, ulong *load)
801 {
802 return fit_image_get_address(fit, noffset, FIT_LOAD_PROP, load);
803 }
804
805 /**
806 * fit_image_get_comp_addr() - get compress addr property for given component image node
807 * @fit: pointer to the FIT format image header
808 * @noffset: component image node offset
809 * @comp: pointer to the uint32_t, will hold load address
810 *
811 * fit_image_get_comp_addr() finds compress address property in a given component
812 * image node. If the property is found, its value is returned to the caller.
813 *
814 * returns:
815 * 0, on success
816 * -1, on failure
817 */
fit_image_get_comp_addr(const void * fit,int noffset,ulong * comp)818 int fit_image_get_comp_addr(const void *fit, int noffset, ulong *comp)
819 {
820 return fit_image_get_address(fit, noffset, FIT_COMP_ADDR_PROP, comp);
821 }
822
823 /**
824 * fit_image_set_load() - set load addr property for given component image node
825 * @fit: pointer to the FIT format image header
826 * @noffset: component image node offset
827 * @load: uint32_t value, will hold load address
828 *
829 * fit_image_set_load() finds and set load address property in a given component
830 * image node. If the property is found, its value is returned to the caller.
831 *
832 * returns:
833 * 0, on success
834 * -1, on failure
835 */
fit_image_set_load(const void * fit,int noffset,ulong load)836 int fit_image_set_load(const void *fit, int noffset, ulong load)
837 {
838 return fit_image_set_address(fit, noffset, FIT_LOAD_PROP, load);
839 }
840
841 /**
842 * fit_image_get_entry() - get entry point address property
843 * @fit: pointer to the FIT format image header
844 * @noffset: component image node offset
845 * @entry: pointer to the uint32_t, will hold entry point address
846 *
847 * This gets the entry point address property for a given component image
848 * node.
849 *
850 * fit_image_get_entry() finds entry point address property in a given
851 * component image node. If the property is found, its value is returned
852 * to the caller.
853 *
854 * returns:
855 * 0, on success
856 * -1, on failure
857 */
fit_image_get_entry(const void * fit,int noffset,ulong * entry)858 int fit_image_get_entry(const void *fit, int noffset, ulong *entry)
859 {
860 return fit_image_get_address(fit, noffset, FIT_ENTRY_PROP, entry);
861 }
862
863 /**
864 * fit_image_set_entry() - set entry point address property
865 * @fit: pointer to the FIT format image header
866 * @noffset: component image node offset
867 * @entry: uint32_t value, will hold entry point address
868 *
869 * This sets the entry point address property for a given component image
870 * node.
871 *
872 * fit_image_set_entry() finds and set entry point address property in a given
873 * component image node. If the property is found, its value is returned
874 * to the caller.
875 *
876 * returns:
877 * 0, on success
878 * -1, on failure
879 */
fit_image_set_entry(const void * fit,int noffset,ulong entry)880 int fit_image_set_entry(const void *fit, int noffset, ulong entry)
881 {
882 return fit_image_set_address(fit, noffset, FIT_ENTRY_PROP, entry);
883 }
884
885 /**
886 * fit_image_get_data - get data property and its size for a given component image node
887 * @fit: pointer to the FIT format image header
888 * @noffset: component image node offset
889 * @data: double pointer to void, will hold data property's data address
890 * @size: pointer to size_t, will hold data property's data size
891 *
892 * fit_image_get_data() finds data property in a given component image node.
893 * If the property is found its data start address and size are returned to
894 * the caller.
895 *
896 * returns:
897 * 0, on success
898 * -1, on failure
899 */
fit_image_get_data(const void * fit,int noffset,const void ** data,size_t * size)900 int fit_image_get_data(const void *fit, int noffset,
901 const void **data, size_t *size)
902 {
903 ulong data_off = 0;
904 ulong data_pos = 0;
905 int len;
906
907 /* data */
908 *data = fdt_getprop(fit, noffset, FIT_DATA_PROP, &len);
909 if (*data) {
910 *size = len;
911 return 0;
912 }
913
914 /* data-size */
915 if (fit_image_get_data_size(fit, noffset, &len))
916 return -ENOENT;
917
918 /* data-offset */
919 if (!fit_image_get_data_offset(fit, noffset, (int *)&data_off)) {
920 data_off += (ulong)fit + FIT_ALIGN(fdt_totalsize(fit));
921 *data = (void *)data_off;
922 *size = len;
923 return 0;
924 }
925
926 /* data-position */
927 if (!fit_image_get_data_position(fit, noffset, (int *)&data_pos)) {
928 *data = (void *)(data_pos + (ulong)fit);
929 *size = len;
930 return 0;
931 }
932
933 *size = 0;
934 return -1;
935 }
936
937 /**
938 * Get 'data-offset' property from a given image node.
939 *
940 * @fit: pointer to the FIT image header
941 * @noffset: component image node offset
942 * @data_offset: holds the data-offset property
943 *
944 * returns:
945 * 0, on success
946 * -ENOENT if the property could not be found
947 */
fit_image_get_data_offset(const void * fit,int noffset,int * data_offset)948 int fit_image_get_data_offset(const void *fit, int noffset, int *data_offset)
949 {
950 const fdt32_t *val;
951
952 val = fdt_getprop(fit, noffset, FIT_DATA_OFFSET_PROP, NULL);
953 if (!val)
954 return -ENOENT;
955
956 *data_offset = fdt32_to_cpu(*val);
957
958 return 0;
959 }
960
961 /**
962 * Get 'data-position' property from a given image node.
963 *
964 * @fit: pointer to the FIT image header
965 * @noffset: component image node offset
966 * @data_position: holds the data-position property
967 *
968 * returns:
969 * 0, on success
970 * -ENOENT if the property could not be found
971 */
fit_image_get_data_position(const void * fit,int noffset,int * data_position)972 int fit_image_get_data_position(const void *fit, int noffset,
973 int *data_position)
974 {
975 const fdt32_t *val;
976
977 val = fdt_getprop(fit, noffset, FIT_DATA_POSITION_PROP, NULL);
978 if (!val)
979 return -ENOENT;
980
981 *data_position = fdt32_to_cpu(*val);
982
983 return 0;
984 }
985
986 /**
987 * Get 'data-size' property from a given image node.
988 *
989 * @fit: pointer to the FIT image header
990 * @noffset: component image node offset
991 * @data_size: holds the data-size property
992 *
993 * returns:
994 * 0, on success
995 * -ENOENT if the property could not be found
996 */
fit_image_get_data_size(const void * fit,int noffset,int * data_size)997 int fit_image_get_data_size(const void *fit, int noffset, int *data_size)
998 {
999 const fdt32_t *val;
1000
1001 val = fdt_getprop(fit, noffset, FIT_DATA_SIZE_PROP, NULL);
1002 if (!val)
1003 return -ENOENT;
1004
1005 *data_size = fdt32_to_cpu(*val);
1006
1007 return 0;
1008 }
1009
1010 /**
1011 * Get 'rollback-index' property from a given image node.
1012 *
1013 * @fit: pointer to the FIT image header
1014 * @noffset: component image node offset
1015 * @index: holds the rollback-index property
1016 *
1017 * returns:
1018 * 0, on success
1019 * -ENOENT if the property could not be found
1020 */
fit_image_get_rollback_index(const void * fit,int noffset,uint32_t * index)1021 int fit_image_get_rollback_index(const void *fit, int noffset, uint32_t *index)
1022 {
1023 const fdt32_t *val;
1024
1025 val = fdt_getprop(fit, noffset, FIT_ROLLBACK_PROP, NULL);
1026 if (!val)
1027 return -ENOENT;
1028
1029 *index = fdt32_to_cpu(*val);
1030
1031 return 0;
1032 }
1033
1034 /**
1035 * fit_image_hash_get_algo - get hash algorithm name
1036 * @fit: pointer to the FIT format image header
1037 * @noffset: hash node offset
1038 * @algo: double pointer to char, will hold pointer to the algorithm name
1039 *
1040 * fit_image_hash_get_algo() finds hash algorithm property in a given hash node.
1041 * If the property is found its data start address is returned to the caller.
1042 *
1043 * returns:
1044 * 0, on success
1045 * -1, on failure
1046 */
fit_image_hash_get_algo(const void * fit,int noffset,char ** algo)1047 int fit_image_hash_get_algo(const void *fit, int noffset, char **algo)
1048 {
1049 int len;
1050
1051 *algo = (char *)fdt_getprop(fit, noffset, FIT_ALGO_PROP, &len);
1052 if (*algo == NULL) {
1053 fit_get_debug(fit, noffset, FIT_ALGO_PROP, len);
1054 return -1;
1055 }
1056
1057 return 0;
1058 }
1059
1060 /**
1061 * fit_image_hash_get_value - get hash value and length
1062 * @fit: pointer to the FIT format image header
1063 * @noffset: hash node offset
1064 * @value: double pointer to uint8_t, will hold address of a hash value data
1065 * @value_len: pointer to an int, will hold hash data length
1066 *
1067 * fit_image_hash_get_value() finds hash value property in a given hash node.
1068 * If the property is found its data start address and size are returned to
1069 * the caller.
1070 *
1071 * returns:
1072 * 0, on success
1073 * -1, on failure
1074 */
fit_image_hash_get_value(const void * fit,int noffset,uint8_t ** value,int * value_len)1075 int fit_image_hash_get_value(const void *fit, int noffset, uint8_t **value,
1076 int *value_len)
1077 {
1078 int len;
1079
1080 *value = (uint8_t *)fdt_getprop(fit, noffset, FIT_VALUE_PROP, &len);
1081 if (*value == NULL) {
1082 fit_get_debug(fit, noffset, FIT_VALUE_PROP, len);
1083 *value_len = 0;
1084 return -1;
1085 }
1086
1087 *value_len = len;
1088 return 0;
1089 }
1090
1091 /**
1092 * fit_image_hash_get_ignore - get hash ignore flag
1093 * @fit: pointer to the FIT format image header
1094 * @noffset: hash node offset
1095 * @ignore: pointer to an int, will hold hash ignore flag
1096 *
1097 * fit_image_hash_get_ignore() finds hash ignore property in a given hash node.
1098 * If the property is found and non-zero, the hash algorithm is not verified by
1099 * u-boot automatically.
1100 *
1101 * returns:
1102 * 0, on ignore not found
1103 * value, on ignore found
1104 */
fit_image_hash_get_ignore(const void * fit,int noffset,int * ignore)1105 static int fit_image_hash_get_ignore(const void *fit, int noffset, int *ignore)
1106 {
1107 int len;
1108 int *value;
1109
1110 value = (int *)fdt_getprop(fit, noffset, FIT_IGNORE_PROP, &len);
1111 if (value == NULL || len != sizeof(int))
1112 *ignore = 0;
1113 else
1114 *ignore = *value;
1115
1116 return 0;
1117 }
1118
fit_get_end(const void * fit)1119 ulong fit_get_end(const void *fit)
1120 {
1121 return map_to_sysmem((void *)(fit + fdt_totalsize(fit)));
1122 }
1123
1124 /**
1125 * fit_set_timestamp - set node timestamp property
1126 * @fit: pointer to the FIT format image header
1127 * @noffset: node offset
1128 * @timestamp: timestamp value to be set
1129 *
1130 * fit_set_timestamp() attempts to set timestamp property in the requested
1131 * node and returns operation status to the caller.
1132 *
1133 * returns:
1134 * 0, on success
1135 * -ENOSPC if no space in device tree, -1 for other error
1136 */
fit_set_timestamp(void * fit,int noffset,time_t timestamp)1137 int fit_set_timestamp(void *fit, int noffset, time_t timestamp)
1138 {
1139 uint32_t t;
1140 int ret;
1141
1142 t = cpu_to_uimage(timestamp);
1143 ret = fdt_setprop(fit, noffset, FIT_TIMESTAMP_PROP, &t,
1144 sizeof(uint32_t));
1145 if (ret) {
1146 debug("Can't set '%s' property for '%s' node (%s)\n",
1147 FIT_TIMESTAMP_PROP, fit_get_name(fit, noffset, NULL),
1148 fdt_strerror(ret));
1149 return ret == -FDT_ERR_NOSPACE ? -ENOSPC : -1;
1150 }
1151
1152 return 0;
1153 }
1154
fit_set_totalsize(void * fit,int noffset,int totalsize)1155 int fit_set_totalsize(void *fit, int noffset, int totalsize)
1156 {
1157 uint32_t t;
1158 int ret;
1159
1160 t = cpu_to_uimage(totalsize);
1161 ret = fdt_setprop(fit, noffset, FIT_TOTALSIZE_PROP, &t,
1162 sizeof(uint32_t));
1163 if (ret)
1164 return ret == -FDT_ERR_NOSPACE ? -ENOSPC : -1;
1165
1166 return 0;
1167 }
1168
fit_set_version(void * fit,int noffset,int version)1169 int fit_set_version(void *fit, int noffset, int version)
1170 {
1171 uint32_t v;
1172 int ret;
1173
1174 v = cpu_to_uimage(version);
1175 ret = fdt_setprop(fit, noffset, FIT_VERSION_PROP, &v, sizeof(uint32_t));
1176 if (ret)
1177 return ret == -FDT_ERR_NOSPACE ? -ENOSPC : -1;
1178
1179 return 0;
1180 }
1181
fit_calculate_hash(const void * data,int data_len,const char * algo,uint8_t * value,int * value_len)1182 int fit_calculate_hash(const void *data, int data_len,
1183 const char *algo, uint8_t *value,
1184 int *value_len)
1185 {
1186 if (IMAGE_ENABLE_CRC32 && strcmp(algo, "crc32") == 0) {
1187 *((uint32_t *)value) = crc32_wd(0, data, data_len,
1188 CHUNKSZ_CRC32);
1189 *((uint32_t *)value) = cpu_to_uimage(*((uint32_t *)value));
1190 *value_len = 4;
1191 #ifdef CONFIG_SHA1
1192 } else if (IMAGE_ENABLE_SHA1 && strcmp(algo, "sha1") == 0) {
1193 sha1_csum_wd((unsigned char *)data, data_len,
1194 (unsigned char *)value, CHUNKSZ_SHA1);
1195 *value_len = 20;
1196 #endif
1197 #ifdef CONFIG_SHA256
1198 } else if (IMAGE_ENABLE_SHA256 && strcmp(algo, "sha256") == 0) {
1199 sha256_csum_wd((unsigned char *)data, data_len,
1200 (unsigned char *)value, CHUNKSZ_SHA256);
1201 *value_len = SHA256_SUM_LEN;
1202 #endif
1203 #ifdef CONFIG_MD5
1204 } else if (IMAGE_ENABLE_MD5 && strcmp(algo, "md5") == 0) {
1205 md5_wd((unsigned char *)data, data_len, value, CHUNKSZ_MD5);
1206 *value_len = 16;
1207 #endif
1208 } else {
1209 debug("Unsupported hash alogrithm\n");
1210 return -1;
1211 }
1212 return 0;
1213 }
1214
1215 #ifndef USE_HOSTCC
1216 #if CONFIG_IS_ENABLED(FIT_HW_CRYPTO)
crypto_csum(u32 cap,const char * data,int len,u8 * output)1217 static int crypto_csum(u32 cap, const char *data, int len, u8 *output)
1218 {
1219 struct udevice *dev;
1220 sha_context csha_ctx;
1221
1222 dev = crypto_get_device(cap);
1223 if (!dev) {
1224 printf("Can't find expected crypto device\n");
1225 return -ENODEV;
1226 }
1227
1228 csha_ctx.algo = cap;
1229 csha_ctx.length = len;
1230
1231 return crypto_sha_csum(dev, &csha_ctx, (char *)data, len, output);
1232 }
1233
hw_fit_calculate_hash(const void * data,int data_len,const char * algo,uint8_t * value,int * value_len)1234 static int hw_fit_calculate_hash(const void *data, int data_len,
1235 const char *algo, uint8_t *value,
1236 int *value_len)
1237 {
1238 int ret = 0;
1239
1240 if (IMAGE_ENABLE_CRC32 && strcmp(algo, "crc32") == 0) {
1241 *((uint32_t *)value) = crc32_wd(0, data, data_len,
1242 CHUNKSZ_CRC32);
1243 *((uint32_t *)value) = cpu_to_uimage(*((uint32_t *)value));
1244 *value_len = 4;
1245 } else if (IMAGE_ENABLE_SHA1 && strcmp(algo, "sha1") == 0) {
1246 ret = crypto_csum(CRYPTO_SHA1, data, data_len, value);
1247 *value_len = 20;
1248 } else if (IMAGE_ENABLE_SHA256 && strcmp(algo, "sha256") == 0) {
1249 ret = crypto_csum(CRYPTO_SHA256, data, data_len, value);
1250 *value_len = SHA256_SUM_LEN;
1251 } else if (IMAGE_ENABLE_MD5 && strcmp(algo, "md5") == 0) {
1252 ret = crypto_csum(CRYPTO_MD5, data, data_len, value);
1253 *value_len = 16;
1254 } else {
1255 debug("Unsupported hash alogrithm\n");
1256 return -1;
1257 }
1258
1259 if (ret)
1260 printf("%s: algo %s failed, ret=%d\n", __func__, algo, ret);
1261
1262 return ret;
1263 }
1264 #endif
1265 #endif
1266
1267 /**
1268 * calculate_hash - calculate and return hash for provided input data
1269 * @data: pointer to the input data
1270 * @data_len: data length
1271 * @algo: requested hash algorithm
1272 * @value: pointer to the char, will hold hash value data (caller must
1273 * allocate enough free space)
1274 * value_len: length of the calculated hash
1275 *
1276 * calculate_hash() computes input data hash according to the requested
1277 * algorithm.
1278 * Resulting hash value is placed in caller provided 'value' buffer, length
1279 * of the calculated hash is returned via value_len pointer argument.
1280 *
1281 * returns:
1282 * 0, on success
1283 * -1, when algo is unsupported
1284 */
calculate_hash(const void * data,int data_len,const char * algo,uint8_t * value,int * value_len)1285 int calculate_hash(const void *data, int data_len, const char *algo,
1286 uint8_t *value, int *value_len)
1287 {
1288 #if defined(USE_HOSTCC)
1289 return fit_calculate_hash(data, data_len, algo, value, value_len);
1290 #else
1291 #if !CONFIG_IS_ENABLED(FIT_HW_CRYPTO)
1292 return fit_calculate_hash(data, data_len, algo, value, value_len);
1293 #else
1294 return hw_fit_calculate_hash(data, data_len, algo, value, value_len);
1295 #endif
1296 #endif
1297 }
1298
fit_image_check_hash(const void * fit,int noffset,const void * data,size_t size,char ** err_msgp)1299 int fit_image_check_hash(const void *fit, int noffset, const void *data,
1300 size_t size, char **err_msgp)
1301 {
1302 uint8_t value[FIT_MAX_HASH_LEN];
1303 int value_len;
1304 char *algo;
1305 uint8_t *fit_value;
1306 int fit_value_len;
1307 int ignore;
1308 int i;
1309
1310 *err_msgp = NULL;
1311
1312 if (fit_image_hash_get_algo(fit, noffset, &algo)) {
1313 *err_msgp = "Can't get hash algo property";
1314 return -1;
1315 }
1316 printf("%s", algo);
1317
1318 if (IMAGE_ENABLE_IGNORE) {
1319 fit_image_hash_get_ignore(fit, noffset, &ignore);
1320 if (ignore) {
1321 printf("-skipped ");
1322 return 0;
1323 }
1324 }
1325
1326 if (fit_image_hash_get_value(fit, noffset, &fit_value,
1327 &fit_value_len)) {
1328 *err_msgp = "Can't get hash value property";
1329 return -1;
1330 }
1331
1332 if (calculate_hash(data, size, algo, value, &value_len)) {
1333 *err_msgp = "Unsupported hash algorithm";
1334 return -1;
1335 }
1336
1337 if (value_len != fit_value_len) {
1338 *err_msgp = "Bad hash value len";
1339 return -1;
1340 } else if (memcmp(value, fit_value, value_len) != 0) {
1341 printf(" Bad hash: ");
1342 for (i = 0; i < value_len; i++)
1343 printf("%02x", value[i]);
1344 printf("\n");
1345
1346 *err_msgp = "Bad hash value";
1347 return -1;
1348 }
1349
1350 #ifdef CONFIG_SPL_BUILD
1351 printf("(");
1352 for (i = 0; i < 5; i++)
1353 printf("%02x", value[i]);
1354 printf("...) ");
1355 #endif
1356
1357 return 0;
1358 }
1359
fit_image_verify_with_data(const void * fit,int image_noffset,const void * data,size_t size)1360 int fit_image_verify_with_data(const void *fit, int image_noffset,
1361 const void *data, size_t size)
1362 {
1363 int noffset = 0;
1364 char *err_msg = "";
1365 int verify_all = 1;
1366 int ret;
1367
1368 /* Verify all required signatures */
1369 if (IMAGE_ENABLE_VERIFY &&
1370 fit_image_verify_required_sigs(fit, image_noffset, data, size,
1371 gd_fdt_blob(), &verify_all)) {
1372 err_msg = "Unable to verify required signature";
1373 goto error;
1374 }
1375
1376 /* Process all hash subnodes of the component image node */
1377 fdt_for_each_subnode(noffset, fit, image_noffset) {
1378 const char *name = fit_get_name(fit, noffset, NULL);
1379
1380 /*
1381 * Check subnode name, must be equal to "hash".
1382 * Multiple hash nodes require unique unit node
1383 * names, e.g. hash@1, hash@2, etc.
1384 */
1385 if (!strncmp(name, FIT_HASH_NODENAME,
1386 strlen(FIT_HASH_NODENAME))) {
1387 if (fit_image_check_hash(fit, noffset, data, size,
1388 &err_msg))
1389 goto error;
1390 puts("+ ");
1391 } else if (IMAGE_ENABLE_VERIFY && verify_all &&
1392 !strncmp(name, FIT_SIG_NODENAME,
1393 strlen(FIT_SIG_NODENAME))) {
1394 ret = fit_image_check_sig(fit, noffset, data,
1395 size, -1, &err_msg);
1396
1397 /*
1398 * Show an indication on failure, but do not return
1399 * an error. Only keys marked 'required' can cause
1400 * an image validation failure. See the call to
1401 * fit_image_verify_required_sigs() above.
1402 */
1403 if (ret)
1404 puts("- ");
1405 else
1406 puts("+ ");
1407 }
1408 }
1409
1410 if (noffset == -FDT_ERR_TRUNCATED || noffset == -FDT_ERR_BADSTRUCTURE) {
1411 err_msg = "Corrupted or truncated tree";
1412 goto error;
1413 }
1414
1415 return 1; /* success */
1416
1417 error:
1418 printf(" error!\n%s for '%s' hash node in '%s' image node\n",
1419 err_msg, fit_get_name(fit, noffset, NULL),
1420 fit_get_name(fit, image_noffset, NULL));
1421 return 0;
1422 }
1423
1424 /**
1425 * fit_image_verify - verify data integrity
1426 * @fit: pointer to the FIT format image header
1427 * @image_noffset: component image node offset
1428 *
1429 * fit_image_verify() goes over component image hash nodes,
1430 * re-calculates each data hash and compares with the value stored in hash
1431 * node.
1432 *
1433 * returns:
1434 * 1, if all hashes are valid
1435 * 0, otherwise (or on error)
1436 */
fit_image_verify(const void * fit,int image_noffset)1437 int fit_image_verify(const void *fit, int image_noffset)
1438 {
1439 const void *data;
1440 size_t size;
1441 int noffset = 0;
1442 char *err_msg = "";
1443
1444 /* Get image data and data length */
1445 if (fit_image_get_data(fit, image_noffset, &data, &size)) {
1446 err_msg = "Can't get image data/size";
1447 printf("error!\n%s for '%s' hash node in '%s' image node\n",
1448 err_msg, fit_get_name(fit, noffset, NULL),
1449 fit_get_name(fit, image_noffset, NULL));
1450 return 0;
1451 }
1452
1453 return fit_image_verify_with_data(fit, image_noffset, data, size);
1454 }
1455
1456 /**
1457 * fit_all_image_verify - verify data integrity for all images
1458 * @fit: pointer to the FIT format image header
1459 *
1460 * fit_all_image_verify() goes over all images in the FIT and
1461 * for every images checks if all it's hashes are valid.
1462 *
1463 * returns:
1464 * 1, if all hashes of all images are valid
1465 * 0, otherwise (or on error)
1466 */
fit_all_image_verify(const void * fit)1467 int fit_all_image_verify(const void *fit)
1468 {
1469 int images_noffset;
1470 int noffset;
1471 int ndepth;
1472 int count;
1473
1474 /* Find images parent node offset */
1475 images_noffset = fdt_path_offset(fit, FIT_IMAGES_PATH);
1476 if (images_noffset < 0) {
1477 printf("Can't find images parent node '%s' (%s)\n",
1478 FIT_IMAGES_PATH, fdt_strerror(images_noffset));
1479 return 0;
1480 }
1481
1482 /* Process all image subnodes, check hashes for each */
1483 printf("## Checking hash(es) for FIT Image at %08lx ...\n",
1484 (ulong)fit);
1485 for (ndepth = 0, count = 0,
1486 noffset = fdt_next_node(fit, images_noffset, &ndepth);
1487 (noffset >= 0) && (ndepth > 0);
1488 noffset = fdt_next_node(fit, noffset, &ndepth)) {
1489 if (ndepth == 1) {
1490 /*
1491 * Direct child node of the images parent node,
1492 * i.e. component image node.
1493 */
1494 printf(" Hash(es) for Image %u (%s): ", count,
1495 fit_get_name(fit, noffset, NULL));
1496 count++;
1497
1498 if (!fit_image_verify(fit, noffset))
1499 return 0;
1500 printf("\n");
1501 }
1502 }
1503 return 1;
1504 }
1505
1506 /**
1507 * fit_image_check_os - check whether image node is of a given os type
1508 * @fit: pointer to the FIT format image header
1509 * @noffset: component image node offset
1510 * @os: requested image os
1511 *
1512 * fit_image_check_os() reads image os property and compares its numeric
1513 * id with the requested os. Comparison result is returned to the caller.
1514 *
1515 * returns:
1516 * 1 if image is of given os type
1517 * 0 otherwise (or on error)
1518 */
fit_image_check_os(const void * fit,int noffset,uint8_t os)1519 int fit_image_check_os(const void *fit, int noffset, uint8_t os)
1520 {
1521 uint8_t image_os;
1522
1523 if (fit_image_get_os(fit, noffset, &image_os))
1524 return 0;
1525 return (os == image_os);
1526 }
1527
1528 /**
1529 * fit_image_check_arch - check whether image node is of a given arch
1530 * @fit: pointer to the FIT format image header
1531 * @noffset: component image node offset
1532 * @arch: requested imagearch
1533 *
1534 * fit_image_check_arch() reads image arch property and compares its numeric
1535 * id with the requested arch. Comparison result is returned to the caller.
1536 *
1537 * returns:
1538 * 1 if image is of given arch
1539 * 0 otherwise (or on error)
1540 */
fit_image_check_arch(const void * fit,int noffset,uint8_t arch)1541 int fit_image_check_arch(const void *fit, int noffset, uint8_t arch)
1542 {
1543 uint8_t image_arch;
1544 int aarch32_support = 0;
1545
1546 #ifdef CONFIG_ARM64_SUPPORT_AARCH32
1547 aarch32_support = 1;
1548 #endif
1549
1550 if (fit_image_get_arch(fit, noffset, &image_arch))
1551 return 0;
1552 return (arch == image_arch) ||
1553 (arch == IH_ARCH_I386 && image_arch == IH_ARCH_X86_64) ||
1554 (arch == IH_ARCH_ARM64 && image_arch == IH_ARCH_ARM &&
1555 aarch32_support);
1556 }
1557
1558 /**
1559 * fit_image_check_type - check whether image node is of a given type
1560 * @fit: pointer to the FIT format image header
1561 * @noffset: component image node offset
1562 * @type: requested image type
1563 *
1564 * fit_image_check_type() reads image type property and compares its numeric
1565 * id with the requested type. Comparison result is returned to the caller.
1566 *
1567 * returns:
1568 * 1 if image is of given type
1569 * 0 otherwise (or on error)
1570 */
fit_image_check_type(const void * fit,int noffset,uint8_t type)1571 int fit_image_check_type(const void *fit, int noffset, uint8_t type)
1572 {
1573 uint8_t image_type;
1574
1575 if (fit_image_get_type(fit, noffset, &image_type))
1576 return 0;
1577 return (type == image_type);
1578 }
1579
1580 /**
1581 * fit_image_check_comp - check whether image node uses given compression
1582 * @fit: pointer to the FIT format image header
1583 * @noffset: component image node offset
1584 * @comp: requested image compression type
1585 *
1586 * fit_image_check_comp() reads image compression property and compares its
1587 * numeric id with the requested compression type. Comparison result is
1588 * returned to the caller.
1589 *
1590 * returns:
1591 * 1 if image uses requested compression
1592 * 0 otherwise (or on error)
1593 */
fit_image_check_comp(const void * fit,int noffset,uint8_t comp)1594 int fit_image_check_comp(const void *fit, int noffset, uint8_t comp)
1595 {
1596 uint8_t image_comp;
1597
1598 if (fit_image_get_comp(fit, noffset, &image_comp))
1599 return 0;
1600 return (comp == image_comp);
1601 }
1602
1603 /**
1604 * fit_check_format - sanity check FIT image format
1605 * @fit: pointer to the FIT format image header
1606 *
1607 * fit_check_format() runs a basic sanity FIT image verification.
1608 * Routine checks for mandatory properties, nodes, etc.
1609 *
1610 * returns:
1611 * 1, on success
1612 * 0, on failure
1613 */
fit_check_format(const void * fit)1614 int fit_check_format(const void *fit)
1615 {
1616 /* mandatory / node 'description' property */
1617 if (fdt_getprop(fit, 0, FIT_DESC_PROP, NULL) == NULL) {
1618 debug("Wrong FIT format: no description\n");
1619 return 0;
1620 }
1621
1622 if (IMAGE_ENABLE_TIMESTAMP) {
1623 /* mandatory / node 'timestamp' property */
1624 if (fdt_getprop(fit, 0, FIT_TIMESTAMP_PROP, NULL) == NULL) {
1625 debug("Wrong FIT format: no timestamp\n");
1626 return 0;
1627 }
1628 }
1629
1630 /* mandatory subimages parent '/images' node */
1631 if (fdt_path_offset(fit, FIT_IMAGES_PATH) < 0) {
1632 debug("Wrong FIT format: no images parent node\n");
1633 return 0;
1634 }
1635
1636 return 1;
1637 }
1638
1639
1640 /**
1641 * fit_conf_find_compat
1642 * @fit: pointer to the FIT format image header
1643 * @fdt: pointer to the device tree to compare against
1644 *
1645 * fit_conf_find_compat() attempts to find the configuration whose fdt is the
1646 * most compatible with the passed in device tree.
1647 *
1648 * Example:
1649 *
1650 * / o image-tree
1651 * |-o images
1652 * | |-o fdt@1
1653 * | |-o fdt@2
1654 * |
1655 * |-o configurations
1656 * |-o config@1
1657 * | |-fdt = fdt@1
1658 * |
1659 * |-o config@2
1660 * |-fdt = fdt@2
1661 *
1662 * / o U-Boot fdt
1663 * |-compatible = "foo,bar", "bim,bam"
1664 *
1665 * / o kernel fdt1
1666 * |-compatible = "foo,bar",
1667 *
1668 * / o kernel fdt2
1669 * |-compatible = "bim,bam", "baz,biz"
1670 *
1671 * Configuration 1 would be picked because the first string in U-Boot's
1672 * compatible list, "foo,bar", matches a compatible string in the root of fdt1.
1673 * "bim,bam" in fdt2 matches the second string which isn't as good as fdt1.
1674 *
1675 * returns:
1676 * offset to the configuration to use if one was found
1677 * -1 otherwise
1678 */
fit_conf_find_compat(const void * fit,const void * fdt)1679 int fit_conf_find_compat(const void *fit, const void *fdt)
1680 {
1681 int ndepth = 0;
1682 int noffset, confs_noffset, images_noffset;
1683 const void *fdt_compat;
1684 int fdt_compat_len;
1685 int best_match_offset = 0;
1686 int best_match_pos = 0;
1687
1688 confs_noffset = fdt_path_offset(fit, FIT_CONFS_PATH);
1689 images_noffset = fdt_path_offset(fit, FIT_IMAGES_PATH);
1690 if (confs_noffset < 0 || images_noffset < 0) {
1691 debug("Can't find configurations or images nodes.\n");
1692 return -1;
1693 }
1694
1695 fdt_compat = fdt_getprop(fdt, 0, "compatible", &fdt_compat_len);
1696 if (!fdt_compat) {
1697 debug("Fdt for comparison has no \"compatible\" property.\n");
1698 return -1;
1699 }
1700
1701 /*
1702 * Loop over the configurations in the FIT image.
1703 */
1704 for (noffset = fdt_next_node(fit, confs_noffset, &ndepth);
1705 (noffset >= 0) && (ndepth > 0);
1706 noffset = fdt_next_node(fit, noffset, &ndepth)) {
1707 const void *kfdt;
1708 const char *kfdt_name;
1709 int kfdt_noffset;
1710 const char *cur_fdt_compat;
1711 int len;
1712 size_t size;
1713 int i;
1714
1715 if (ndepth > 1)
1716 continue;
1717
1718 kfdt_name = fdt_getprop(fit, noffset, "fdt", &len);
1719 if (!kfdt_name) {
1720 debug("No fdt property found.\n");
1721 continue;
1722 }
1723 kfdt_noffset = fdt_subnode_offset(fit, images_noffset,
1724 kfdt_name);
1725 if (kfdt_noffset < 0) {
1726 debug("No image node named \"%s\" found.\n",
1727 kfdt_name);
1728 continue;
1729 }
1730 /*
1731 * Get a pointer to this configuration's fdt.
1732 */
1733 if (fit_image_get_data(fit, kfdt_noffset, &kfdt, &size)) {
1734 debug("Failed to get fdt \"%s\".\n", kfdt_name);
1735 continue;
1736 }
1737
1738 len = fdt_compat_len;
1739 cur_fdt_compat = fdt_compat;
1740 /*
1741 * Look for a match for each U-Boot compatibility string in
1742 * turn in this configuration's fdt.
1743 */
1744 for (i = 0; len > 0 &&
1745 (!best_match_offset || best_match_pos > i); i++) {
1746 int cur_len = strlen(cur_fdt_compat) + 1;
1747
1748 if (!fdt_node_check_compatible(kfdt, 0,
1749 cur_fdt_compat)) {
1750 best_match_offset = noffset;
1751 best_match_pos = i;
1752 break;
1753 }
1754 len -= cur_len;
1755 cur_fdt_compat += cur_len;
1756 }
1757 }
1758 if (!best_match_offset) {
1759 debug("No match found.\n");
1760 return -1;
1761 }
1762
1763 return best_match_offset;
1764 }
1765
1766 /**
1767 * fit_conf_get_node - get node offset for configuration of a given unit name
1768 * @fit: pointer to the FIT format image header
1769 * @conf_uname: configuration node unit name
1770 *
1771 * fit_conf_get_node() finds a configuration (within the '/configurations'
1772 * parent node) of a provided unit name. If configuration is found its node
1773 * offset is returned to the caller.
1774 *
1775 * When NULL is provided in second argument fit_conf_get_node() will search
1776 * for a default configuration node instead. Default configuration node unit
1777 * name is retrieved from FIT_DEFAULT_PROP property of the '/configurations'
1778 * node.
1779 *
1780 * returns:
1781 * configuration node offset when found (>=0)
1782 * negative number on failure (FDT_ERR_* code)
1783 */
fit_conf_get_node(const void * fit,const char * conf_uname)1784 int fit_conf_get_node(const void *fit, const char *conf_uname)
1785 {
1786 int noffset, confs_noffset;
1787 int len;
1788 const char *s;
1789 char *conf_uname_copy = NULL;
1790
1791 confs_noffset = fdt_path_offset(fit, FIT_CONFS_PATH);
1792 if (confs_noffset < 0) {
1793 debug("Can't find configurations parent node '%s' (%s)\n",
1794 FIT_CONFS_PATH, fdt_strerror(confs_noffset));
1795 return confs_noffset;
1796 }
1797
1798 if (conf_uname == NULL) {
1799 /* get configuration unit name from the default property */
1800 debug("No configuration specified, trying default...\n");
1801 conf_uname = (char *)fdt_getprop(fit, confs_noffset,
1802 FIT_DEFAULT_PROP, &len);
1803 if (conf_uname == NULL) {
1804 fit_get_debug(fit, confs_noffset, FIT_DEFAULT_PROP,
1805 len);
1806 return len;
1807 }
1808 debug("Found default configuration: '%s'\n", conf_uname);
1809 }
1810
1811 s = strchr(conf_uname, '#');
1812 if (s) {
1813 len = s - conf_uname;
1814 conf_uname_copy = malloc(len + 1);
1815 if (!conf_uname_copy) {
1816 debug("Can't allocate uname copy: '%s'\n",
1817 conf_uname);
1818 return -ENOMEM;
1819 }
1820 memcpy(conf_uname_copy, conf_uname, len);
1821 conf_uname_copy[len] = '\0';
1822 conf_uname = conf_uname_copy;
1823 }
1824
1825 noffset = fdt_subnode_offset(fit, confs_noffset, conf_uname);
1826 if (noffset < 0) {
1827 debug("Can't get node offset for configuration unit name: '%s' (%s)\n",
1828 conf_uname, fdt_strerror(noffset));
1829 }
1830
1831 if (conf_uname_copy)
1832 free(conf_uname_copy);
1833
1834 return noffset;
1835 }
1836
fit_conf_get_prop_node_count(const void * fit,int noffset,const char * prop_name)1837 int fit_conf_get_prop_node_count(const void *fit, int noffset,
1838 const char *prop_name)
1839 {
1840 return fdt_stringlist_count(fit, noffset, prop_name);
1841 }
1842
fit_conf_get_prop_node_index(const void * fit,int noffset,const char * prop_name,int index)1843 int fit_conf_get_prop_node_index(const void *fit, int noffset,
1844 const char *prop_name, int index)
1845 {
1846 const char *uname;
1847 int len;
1848
1849 /* get kernel image unit name from configuration kernel property */
1850 uname = fdt_stringlist_get(fit, noffset, prop_name, index, &len);
1851 if (uname == NULL)
1852 return len;
1853
1854 return fit_image_get_node(fit, uname);
1855 }
1856
fit_conf_get_prop_node(const void * fit,int noffset,const char * prop_name)1857 int fit_conf_get_prop_node(const void *fit, int noffset,
1858 const char *prop_name)
1859 {
1860 return fit_conf_get_prop_node_index(fit, noffset, prop_name, 0);
1861 }
1862
1863 /**
1864 * fit_conf_print - prints out the FIT configuration details
1865 * @fit: pointer to the FIT format image header
1866 * @noffset: offset of the configuration node
1867 * @p: pointer to prefix string
1868 *
1869 * fit_conf_print() lists all mandatory properties for the processed
1870 * configuration node.
1871 *
1872 * returns:
1873 * no returned results
1874 */
fit_conf_print(const void * fit,int noffset,const char * p)1875 void fit_conf_print(const void *fit, int noffset, const char *p)
1876 {
1877 char *desc;
1878 const char *uname;
1879 int ret;
1880 int fdt_index, loadables_index;
1881
1882 /* Mandatory properties */
1883 ret = fit_get_desc(fit, noffset, &desc);
1884 printf("%s Description: ", p);
1885 if (ret)
1886 printf("unavailable\n");
1887 else
1888 printf("%s\n", desc);
1889
1890 uname = fdt_getprop(fit, noffset, FIT_KERNEL_PROP, NULL);
1891 printf("%s Kernel: ", p);
1892 if (uname == NULL)
1893 printf("unavailable\n");
1894 else
1895 printf("%s\n", uname);
1896
1897 /* Optional properties */
1898 uname = fdt_getprop(fit, noffset, FIT_RAMDISK_PROP, NULL);
1899 if (uname)
1900 printf("%s Init Ramdisk: %s\n", p, uname);
1901
1902 uname = fdt_getprop(fit, noffset, FIT_FIRMWARE_PROP, NULL);
1903 if (uname)
1904 printf("%s Firmware: %s\n", p, uname);
1905
1906 for (fdt_index = 0;
1907 uname = fdt_stringlist_get(fit, noffset, FIT_FDT_PROP,
1908 fdt_index, NULL), uname;
1909 fdt_index++) {
1910
1911 if (fdt_index == 0)
1912 printf("%s FDT: ", p);
1913 else
1914 printf("%s ", p);
1915 printf("%s\n", uname);
1916 }
1917
1918 uname = fdt_getprop(fit, noffset, FIT_FPGA_PROP, NULL);
1919 if (uname)
1920 printf("%s FPGA: %s\n", p, uname);
1921
1922 /* Print out all of the specified loadables */
1923 for (loadables_index = 0;
1924 uname = fdt_stringlist_get(fit, noffset, FIT_LOADABLE_PROP,
1925 loadables_index, NULL), uname;
1926 loadables_index++) {
1927 if (loadables_index == 0) {
1928 printf("%s Loadables: ", p);
1929 } else {
1930 printf("%s ", p);
1931 }
1932 printf("%s\n", uname);
1933 }
1934 }
1935
fit_image_select(const void * fit,int rd_noffset,int verify)1936 static int fit_image_select(const void *fit, int rd_noffset, int verify)
1937 {
1938 #ifdef USE_HOSTCC
1939 fit_image_print(fit, rd_noffset, " ");
1940 #else
1941 #if CONFIG_IS_ENABLED(FIT_PRINT)
1942 fit_image_print(fit, rd_noffset, " ");
1943 #endif
1944 #endif
1945 if (verify) {
1946 puts(" Verifying Hash Integrity ... ");
1947 if (!fit_image_verify(fit, rd_noffset)) {
1948 puts("Bad Data Hash\n");
1949 return -EACCES;
1950 }
1951 puts("OK\n");
1952 }
1953
1954 return 0;
1955 }
1956
fit_get_node_from_config(bootm_headers_t * images,const char * prop_name,ulong addr)1957 int fit_get_node_from_config(bootm_headers_t *images, const char *prop_name,
1958 ulong addr)
1959 {
1960 int cfg_noffset;
1961 void *fit_hdr;
1962 int noffset;
1963
1964 debug("* %s: using config '%s' from image at 0x%08lx\n",
1965 prop_name, images->fit_uname_cfg, addr);
1966
1967 /* Check whether configuration has this property defined */
1968 fit_hdr = map_sysmem(addr, 0);
1969 cfg_noffset = fit_conf_get_node(fit_hdr, images->fit_uname_cfg);
1970 if (cfg_noffset < 0) {
1971 debug("* %s: no such config\n", prop_name);
1972 return -EINVAL;
1973 }
1974
1975 noffset = fit_conf_get_prop_node(fit_hdr, cfg_noffset, prop_name);
1976 if (noffset < 0) {
1977 debug("* %s: no '%s' in config\n", prop_name, prop_name);
1978 return -ENOENT;
1979 }
1980
1981 return noffset;
1982 }
1983
1984 /**
1985 * fit_get_image_type_property() - get property name for IH_TYPE_...
1986 *
1987 * @return the properly name where we expect to find the image in the
1988 * config node
1989 */
fit_get_image_type_property(int type)1990 static const char *fit_get_image_type_property(int type)
1991 {
1992 /*
1993 * This is sort-of available in the uimage_type[] table in image.c
1994 * but we don't have access to the short name, and "fdt" is different
1995 * anyway. So let's just keep it here.
1996 */
1997 switch (type) {
1998 case IH_TYPE_FLATDT:
1999 return FIT_FDT_PROP;
2000 case IH_TYPE_KERNEL:
2001 return FIT_KERNEL_PROP;
2002 case IH_TYPE_RAMDISK:
2003 return FIT_RAMDISK_PROP;
2004 case IH_TYPE_FIRMWARE:
2005 return FIT_FIRMWARE_PROP;
2006 case IH_TYPE_X86_SETUP:
2007 return FIT_SETUP_PROP;
2008 case IH_TYPE_LOADABLE:
2009 return FIT_LOADABLE_PROP;
2010 case IH_TYPE_FPGA:
2011 return FIT_FPGA_PROP;
2012 case IH_TYPE_STANDALONE:
2013 return FIT_STANDALONE_PROP;
2014 }
2015
2016 return "unknown";
2017 }
2018
2019 #ifndef USE_HOSTCC
fit_board_verify_required_sigs(void)2020 __weak int fit_board_verify_required_sigs(void)
2021 {
2022 return 0;
2023 }
2024 #endif
2025
fit_image_load_index(bootm_headers_t * images,ulong addr,const char ** fit_unamep,const char ** fit_uname_configp,int arch,int image_type,int image_index,int bootstage_id,enum fit_load_op load_op,ulong * datap,ulong * lenp)2026 int fit_image_load_index(bootm_headers_t *images, ulong addr,
2027 const char **fit_unamep, const char **fit_uname_configp,
2028 int arch, int image_type, int image_index, int bootstage_id,
2029 enum fit_load_op load_op, ulong *datap, ulong *lenp)
2030 {
2031 int cfg_noffset, noffset;
2032 const char *fit_uname;
2033 const char *fit_uname_config;
2034 const char *fit_base_uname_config;
2035 const void *fit;
2036 const void *buf;
2037 size_t size;
2038 int type_ok, os_ok;
2039 ulong load, data, len;
2040 uint8_t os;
2041 #ifndef USE_HOSTCC
2042 uint8_t os_arch;
2043 #endif
2044 const char *prop_name;
2045 int ret;
2046
2047 fit = map_sysmem(addr, 0);
2048 fit_uname = fit_unamep ? *fit_unamep : NULL;
2049 fit_uname_config = fit_uname_configp ? *fit_uname_configp : NULL;
2050 fit_base_uname_config = NULL;
2051 prop_name = fit_get_image_type_property(image_type);
2052 printf("## Loading %s from FIT Image at %08lx ...\n", prop_name, addr);
2053
2054 bootstage_mark(bootstage_id + BOOTSTAGE_SUB_FORMAT);
2055 if (!fit_check_format(fit)) {
2056 printf("Bad FIT %s image format!\n", prop_name);
2057 bootstage_error(bootstage_id + BOOTSTAGE_SUB_FORMAT);
2058 return -ENOEXEC;
2059 }
2060 bootstage_mark(bootstage_id + BOOTSTAGE_SUB_FORMAT_OK);
2061 if (fit_uname) {
2062 /* get FIT component image node offset */
2063 bootstage_mark(bootstage_id + BOOTSTAGE_SUB_UNIT_NAME);
2064 noffset = fit_image_get_node(fit, fit_uname);
2065 } else {
2066 /*
2067 * no image node unit name, try to get config
2068 * node first. If config unit node name is NULL
2069 * fit_conf_get_node() will try to find default config node
2070 */
2071 bootstage_mark(bootstage_id + BOOTSTAGE_SUB_NO_UNIT_NAME);
2072 if (IMAGE_ENABLE_BEST_MATCH && !fit_uname_config) {
2073 cfg_noffset = fit_conf_find_compat(fit, gd_fdt_blob());
2074 } else {
2075 cfg_noffset = fit_conf_get_node(fit,
2076 fit_uname_config);
2077 }
2078 if (cfg_noffset < 0) {
2079 puts("Could not find configuration node\n");
2080 bootstage_error(bootstage_id +
2081 BOOTSTAGE_SUB_NO_UNIT_NAME);
2082 return -ENOENT;
2083 }
2084 fit_base_uname_config = fdt_get_name(fit, cfg_noffset, NULL);
2085 printf(" Using '%s' configuration\n", fit_base_uname_config);
2086 if (image_type == IH_TYPE_KERNEL) {
2087 #ifndef USE_HOSTCC
2088 /* If board required sigs, check self */
2089 if (fit_board_verify_required_sigs() &&
2090 !IS_ENABLED(CONFIG_FIT_SIGNATURE)) {
2091 printf("Verified-boot requires CONFIG_FIT_SIGNATURE enabled\n");
2092 hang();
2093 }
2094 #endif
2095 /* Remember (and possibly verify) this config */
2096 images->fit_uname_cfg = fit_base_uname_config;
2097 if (IMAGE_ENABLE_VERIFY) {
2098 puts(" Verifying Hash Integrity ... ");
2099 if (fit_config_verify(fit, cfg_noffset)) {
2100 puts("Bad Data Hash\n");
2101 bootstage_error(bootstage_id +
2102 BOOTSTAGE_SUB_HASH);
2103 return -EACCES;
2104 }
2105 puts("OK\n");
2106
2107 #ifdef CONFIG_FIT_ROLLBACK_PROTECT
2108 uint32_t this_index, min_index;
2109
2110 puts(" Verifying Rollback-index ... ");
2111 if (fit_rollback_index_verify(fit,
2112 FIT_ROLLBACK_INDEX,
2113 &this_index, &min_index)) {
2114 puts("Failed to get index\n");
2115 return ret;
2116 } else if (this_index < min_index) {
2117 printf("Reject index %d < %d(min)\n",
2118 this_index, min_index);
2119 return -EINVAL;
2120 }
2121
2122 printf("%d >= %d(min), OK\n", this_index, min_index);
2123 #endif
2124 }
2125 bootstage_mark(BOOTSTAGE_ID_FIT_CONFIG);
2126 }
2127
2128 noffset = fit_conf_get_prop_node_index(fit, cfg_noffset,
2129 prop_name, image_index);
2130 fit_uname = fit_get_name(fit, noffset, NULL);
2131 }
2132 if (noffset < 0) {
2133 puts("Could not find subimage node\n");
2134 bootstage_error(bootstage_id + BOOTSTAGE_SUB_SUBNODE);
2135 return -ENOENT;
2136 }
2137
2138 printf(" Trying '%s' %s subimage\n", fit_uname, prop_name);
2139
2140 ret = fit_image_select(fit, noffset, images->verify);
2141 if (ret) {
2142 bootstage_error(bootstage_id + BOOTSTAGE_SUB_HASH);
2143 return ret;
2144 }
2145
2146 bootstage_mark(bootstage_id + BOOTSTAGE_SUB_CHECK_ARCH);
2147 #if !defined(USE_HOSTCC) && !defined(CONFIG_SANDBOX)
2148 if (!fit_image_check_target_arch(fit, noffset)) {
2149 puts("Unsupported Architecture\n");
2150 bootstage_error(bootstage_id + BOOTSTAGE_SUB_CHECK_ARCH);
2151 return -ENOEXEC;
2152 }
2153 #endif
2154
2155 #ifndef USE_HOSTCC
2156 fit_image_get_arch(fit, noffset, &os_arch);
2157 images->os.arch = os_arch;
2158 #endif
2159
2160 if (image_type == IH_TYPE_FLATDT &&
2161 !fit_image_check_comp(fit, noffset, IH_COMP_NONE)) {
2162 puts("FDT image is compressed");
2163 return -EPROTONOSUPPORT;
2164 }
2165
2166 bootstage_mark(bootstage_id + BOOTSTAGE_SUB_CHECK_ALL);
2167 type_ok = fit_image_check_type(fit, noffset, image_type) ||
2168 fit_image_check_type(fit, noffset, IH_TYPE_FIRMWARE) ||
2169 (image_type == IH_TYPE_KERNEL &&
2170 fit_image_check_type(fit, noffset, IH_TYPE_KERNEL_NOLOAD));
2171
2172 os_ok = image_type == IH_TYPE_FLATDT ||
2173 image_type == IH_TYPE_FPGA ||
2174 fit_image_check_os(fit, noffset, IH_OS_LINUX) ||
2175 fit_image_check_os(fit, noffset, IH_OS_ARM_TRUSTED_FIRMWARE) ||
2176 fit_image_check_os(fit, noffset, IH_OS_OP_TEE) ||
2177 fit_image_check_os(fit, noffset, IH_OS_U_BOOT) ||
2178 fit_image_check_os(fit, noffset, IH_OS_QNX) ||
2179 fit_image_check_os(fit, noffset, IH_OS_OPENRTOS);
2180
2181 /*
2182 * If either of the checks fail, we should report an error, but
2183 * if the image type is coming from the "loadables" field, we
2184 * don't care what it is
2185 */
2186 if ((!type_ok || !os_ok) && image_type != IH_TYPE_LOADABLE) {
2187 fit_image_get_os(fit, noffset, &os);
2188 printf("No %s %s %s Image\n",
2189 genimg_get_os_name(os),
2190 genimg_get_arch_name(arch),
2191 genimg_get_type_name(image_type));
2192 bootstage_error(bootstage_id + BOOTSTAGE_SUB_CHECK_ALL);
2193 return -EIO;
2194 }
2195
2196 bootstage_mark(bootstage_id + BOOTSTAGE_SUB_CHECK_ALL_OK);
2197
2198 /* get image data address and length */
2199 if (fit_image_get_data(fit, noffset, &buf, &size)) {
2200 printf("Could not find %s subimage data!\n", prop_name);
2201 bootstage_error(bootstage_id + BOOTSTAGE_SUB_GET_DATA);
2202 return -ENOENT;
2203 }
2204
2205 #if !defined(USE_HOSTCC) && defined(CONFIG_FIT_IMAGE_POST_PROCESS)
2206 ret = fit_image_get_load(fit, noffset, &load);
2207 if (ret < 0)
2208 return ret;
2209
2210 /* perform any post-processing on the image data */
2211 board_fit_image_post_process((void *)fit, noffset,
2212 &load, (ulong **)&buf, &size, NULL);
2213 #endif
2214
2215 len = (ulong)size;
2216
2217 /* verify that image data is a proper FDT blob */
2218 if (image_type == IH_TYPE_FLATDT && fdt_check_header(buf)) {
2219 puts("Subimage data is not a FDT");
2220 return -ENOEXEC;
2221 }
2222
2223 bootstage_mark(bootstage_id + BOOTSTAGE_SUB_GET_DATA_OK);
2224
2225 /*
2226 * Work-around for eldk-4.2 which gives this warning if we try to
2227 * cast in the unmap_sysmem() call:
2228 * warning: initialization discards qualifiers from pointer target type
2229 */
2230 {
2231 void *vbuf = (void *)buf;
2232
2233 data = map_to_sysmem(vbuf);
2234 }
2235
2236 if (load_op == FIT_LOAD_IGNORED) {
2237 /* Don't load */
2238 } else if (fit_image_get_load(fit, noffset, &load)) {
2239 if (load_op == FIT_LOAD_REQUIRED) {
2240 printf("Can't get %s subimage load address!\n",
2241 prop_name);
2242 bootstage_error(bootstage_id + BOOTSTAGE_SUB_LOAD);
2243 return -EBADF;
2244 }
2245 } else if (load_op != FIT_LOAD_OPTIONAL_NON_ZERO || load) {
2246 ulong image_start, image_end;
2247 ulong load_end;
2248 void *dst;
2249
2250 /*
2251 * move image data to the load address,
2252 * make sure we don't overwrite initial image
2253 */
2254 image_start = addr;
2255 image_end = addr + fit_get_size(fit);
2256
2257 load_end = load + len;
2258 if (image_type != IH_TYPE_KERNEL &&
2259 load < image_end && load_end > image_start) {
2260 printf("Error: %s overwritten\n", prop_name);
2261 return -EXDEV;
2262 }
2263
2264 printf(" Loading %s from 0x%08lx to 0x%08lx\n",
2265 prop_name, data, load);
2266
2267 dst = map_sysmem(load, len);
2268 memmove(dst, buf, len);
2269 data = load;
2270 }
2271 bootstage_mark(bootstage_id + BOOTSTAGE_SUB_LOAD);
2272
2273 *datap = data;
2274 *lenp = len;
2275 if (fit_unamep)
2276 *fit_unamep = (char *)fit_uname;
2277 if (fit_uname_configp)
2278 *fit_uname_configp = (char *)(fit_uname_config ? :
2279 fit_base_uname_config);
2280
2281 return noffset;
2282 }
2283
fit_image_load(bootm_headers_t * images,ulong addr,const char ** fit_unamep,const char ** fit_uname_configp,int arch,int image_type,int bootstage_id,enum fit_load_op load_op,ulong * datap,ulong * lenp)2284 int fit_image_load(bootm_headers_t *images, ulong addr,
2285 const char **fit_unamep, const char **fit_uname_configp,
2286 int arch, int image_type, int bootstage_id,
2287 enum fit_load_op load_op, ulong *datap, ulong *lenp)
2288 {
2289 return fit_image_load_index(images, addr,fit_unamep, fit_uname_configp,
2290 arch, image_type, 0, bootstage_id,
2291 load_op, datap, lenp);
2292 }
2293
boot_get_setup_fit(bootm_headers_t * images,uint8_t arch,ulong * setup_start,ulong * setup_len)2294 int boot_get_setup_fit(bootm_headers_t *images, uint8_t arch,
2295 ulong *setup_start, ulong *setup_len)
2296 {
2297 int noffset;
2298 ulong addr;
2299 ulong len;
2300 int ret;
2301
2302 addr = map_to_sysmem(images->fit_hdr_os);
2303 noffset = fit_get_node_from_config(images, FIT_SETUP_PROP, addr);
2304 if (noffset < 0)
2305 return noffset;
2306
2307 ret = fit_image_load(images, addr, NULL, NULL, arch,
2308 IH_TYPE_X86_SETUP, BOOTSTAGE_ID_FIT_SETUP_START,
2309 FIT_LOAD_REQUIRED, setup_start, &len);
2310
2311 return ret;
2312 }
2313
2314 #ifndef USE_HOSTCC
boot_get_fdt_fit(bootm_headers_t * images,ulong addr,const char ** fit_unamep,const char ** fit_uname_configp,int arch,ulong * datap,ulong * lenp)2315 int boot_get_fdt_fit(bootm_headers_t *images, ulong addr,
2316 const char **fit_unamep, const char **fit_uname_configp,
2317 int arch, ulong *datap, ulong *lenp)
2318 {
2319 int fdt_noffset, cfg_noffset, count;
2320 const void *fit;
2321 const char *fit_uname = NULL;
2322 const char *fit_uname_config = NULL;
2323 char *fit_uname_config_copy = NULL;
2324 char *next_config = NULL;
2325 ulong load, len;
2326 #ifdef CONFIG_OF_LIBFDT_OVERLAY
2327 ulong image_start, image_end;
2328 ulong ovload, ovlen;
2329 const char *uconfig;
2330 const char *uname;
2331 void *base, *ov;
2332 int i, err, noffset, ov_noffset;
2333 #endif
2334
2335 fit_uname = fit_unamep ? *fit_unamep : NULL;
2336
2337 if (fit_uname_configp && *fit_uname_configp) {
2338 fit_uname_config_copy = strdup(*fit_uname_configp);
2339 if (!fit_uname_config_copy)
2340 return -ENOMEM;
2341
2342 next_config = strchr(fit_uname_config_copy, '#');
2343 if (next_config)
2344 *next_config++ = '\0';
2345 if (next_config - 1 > fit_uname_config_copy)
2346 fit_uname_config = fit_uname_config_copy;
2347 }
2348
2349 fdt_noffset = fit_image_load(images,
2350 addr, &fit_uname, &fit_uname_config,
2351 arch, IH_TYPE_FLATDT,
2352 BOOTSTAGE_ID_FIT_FDT_START,
2353 FIT_LOAD_OPTIONAL, &load, &len);
2354
2355 if (fdt_noffset < 0)
2356 goto out;
2357
2358 debug("fit_uname=%s, fit_uname_config=%s\n",
2359 fit_uname ? fit_uname : "<NULL>",
2360 fit_uname_config ? fit_uname_config : "<NULL>");
2361
2362 fit = map_sysmem(addr, 0);
2363
2364 cfg_noffset = fit_conf_get_node(fit, fit_uname_config);
2365
2366 /* single blob, or error just return as well */
2367 count = fit_conf_get_prop_node_count(fit, cfg_noffset, FIT_FDT_PROP);
2368 if (count <= 1 && !next_config)
2369 goto out;
2370
2371 /* we need to apply overlays */
2372
2373 #ifdef CONFIG_OF_LIBFDT_OVERLAY
2374 image_start = addr;
2375 image_end = addr + fit_get_size(fit);
2376 /* verify that relocation took place by load address not being in fit */
2377 if (load >= image_start && load < image_end) {
2378 /* check is simplified; fit load checks for overlaps */
2379 printf("Overlayed FDT requires relocation\n");
2380 fdt_noffset = -EBADF;
2381 goto out;
2382 }
2383
2384 base = map_sysmem(load, len);
2385
2386 /* apply extra configs in FIT first, followed by args */
2387 for (i = 1; ; i++) {
2388 if (i < count) {
2389 noffset = fit_conf_get_prop_node_index(fit, cfg_noffset,
2390 FIT_FDT_PROP, i);
2391 uname = fit_get_name(fit, noffset, NULL);
2392 uconfig = NULL;
2393 } else {
2394 if (!next_config)
2395 break;
2396 uconfig = next_config;
2397 next_config = strchr(next_config, '#');
2398 if (next_config)
2399 *next_config++ = '\0';
2400 uname = NULL;
2401 }
2402
2403 debug("%d: using uname=%s uconfig=%s\n", i, uname, uconfig);
2404
2405 ov_noffset = fit_image_load(images,
2406 addr, &uname, &uconfig,
2407 arch, IH_TYPE_FLATDT,
2408 BOOTSTAGE_ID_FIT_FDT_START,
2409 FIT_LOAD_REQUIRED, &ovload, &ovlen);
2410 if (ov_noffset < 0) {
2411 printf("load of %s failed\n", uname);
2412 continue;
2413 }
2414 debug("%s loaded at 0x%08lx len=0x%08lx\n",
2415 uname, ovload, ovlen);
2416 ov = map_sysmem(ovload, ovlen);
2417
2418 base = map_sysmem(load, len + ovlen);
2419 err = fdt_open_into(base, base, len + ovlen);
2420 if (err < 0) {
2421 printf("failed on fdt_open_into\n");
2422 fdt_noffset = err;
2423 goto out;
2424 }
2425 /* the verbose method prints out messages on error */
2426 err = fdt_overlay_apply_verbose(base, ov);
2427 if (err < 0) {
2428 fdt_noffset = err;
2429 goto out;
2430 }
2431 fdt_pack(base);
2432 len = fdt_totalsize(base);
2433 }
2434 #else
2435 printf("config with overlays but CONFIG_OF_LIBFDT_OVERLAY not set\n");
2436 fdt_noffset = -EBADF;
2437 #endif
2438
2439 out:
2440 if (datap)
2441 *datap = load;
2442 if (lenp)
2443 *lenp = len;
2444 if (fit_unamep)
2445 *fit_unamep = fit_uname;
2446 if (fit_uname_configp)
2447 *fit_uname_configp = fit_uname_config;
2448
2449 if (fit_uname_config_copy)
2450 free(fit_uname_config_copy);
2451 return fdt_noffset;
2452 }
2453 #endif
2454