1*4882a593Smuzhiyun // SPDX-License-Identifier: GPL-2.0-or-later
2*4882a593Smuzhiyun /*
3*4882a593Smuzhiyun * Parse RedBoot-style Flash Image System (FIS) tables and
4*4882a593Smuzhiyun * produce a Linux partition array to match.
5*4882a593Smuzhiyun *
6*4882a593Smuzhiyun * Copyright © 2001 Red Hat UK Limited
7*4882a593Smuzhiyun * Copyright © 2001-2010 David Woodhouse <dwmw2@infradead.org>
8*4882a593Smuzhiyun */
9*4882a593Smuzhiyun
10*4882a593Smuzhiyun #include <linux/kernel.h>
11*4882a593Smuzhiyun #include <linux/slab.h>
12*4882a593Smuzhiyun #include <linux/init.h>
13*4882a593Smuzhiyun #include <linux/vmalloc.h>
14*4882a593Smuzhiyun #include <linux/of.h>
15*4882a593Smuzhiyun #include <linux/mtd/mtd.h>
16*4882a593Smuzhiyun #include <linux/mtd/partitions.h>
17*4882a593Smuzhiyun #include <linux/module.h>
18*4882a593Smuzhiyun
19*4882a593Smuzhiyun struct fis_image_desc {
20*4882a593Smuzhiyun unsigned char name[16]; // Null terminated name
21*4882a593Smuzhiyun uint32_t flash_base; // Address within FLASH of image
22*4882a593Smuzhiyun uint32_t mem_base; // Address in memory where it executes
23*4882a593Smuzhiyun uint32_t size; // Length of image
24*4882a593Smuzhiyun uint32_t entry_point; // Execution entry point
25*4882a593Smuzhiyun uint32_t data_length; // Length of actual data
26*4882a593Smuzhiyun unsigned char _pad[256-(16+7*sizeof(uint32_t))];
27*4882a593Smuzhiyun uint32_t desc_cksum; // Checksum over image descriptor
28*4882a593Smuzhiyun uint32_t file_cksum; // Checksum over image data
29*4882a593Smuzhiyun };
30*4882a593Smuzhiyun
31*4882a593Smuzhiyun struct fis_list {
32*4882a593Smuzhiyun struct fis_image_desc *img;
33*4882a593Smuzhiyun struct fis_list *next;
34*4882a593Smuzhiyun };
35*4882a593Smuzhiyun
36*4882a593Smuzhiyun static int directory = CONFIG_MTD_REDBOOT_DIRECTORY_BLOCK;
37*4882a593Smuzhiyun module_param(directory, int, 0);
38*4882a593Smuzhiyun
redboot_checksum(struct fis_image_desc * img)39*4882a593Smuzhiyun static inline int redboot_checksum(struct fis_image_desc *img)
40*4882a593Smuzhiyun {
41*4882a593Smuzhiyun /* RedBoot doesn't actually write the desc_cksum field yet AFAICT */
42*4882a593Smuzhiyun return 1;
43*4882a593Smuzhiyun }
44*4882a593Smuzhiyun
parse_redboot_of(struct mtd_info * master)45*4882a593Smuzhiyun static void parse_redboot_of(struct mtd_info *master)
46*4882a593Smuzhiyun {
47*4882a593Smuzhiyun struct device_node *np;
48*4882a593Smuzhiyun struct device_node *npart;
49*4882a593Smuzhiyun u32 dirblock;
50*4882a593Smuzhiyun int ret;
51*4882a593Smuzhiyun
52*4882a593Smuzhiyun np = mtd_get_of_node(master);
53*4882a593Smuzhiyun if (!np)
54*4882a593Smuzhiyun return;
55*4882a593Smuzhiyun
56*4882a593Smuzhiyun npart = of_get_child_by_name(np, "partitions");
57*4882a593Smuzhiyun if (!npart)
58*4882a593Smuzhiyun return;
59*4882a593Smuzhiyun
60*4882a593Smuzhiyun ret = of_property_read_u32(npart, "fis-index-block", &dirblock);
61*4882a593Smuzhiyun of_node_put(npart);
62*4882a593Smuzhiyun if (ret)
63*4882a593Smuzhiyun return;
64*4882a593Smuzhiyun
65*4882a593Smuzhiyun /*
66*4882a593Smuzhiyun * Assign the block found in the device tree to the local
67*4882a593Smuzhiyun * directory block pointer.
68*4882a593Smuzhiyun */
69*4882a593Smuzhiyun directory = dirblock;
70*4882a593Smuzhiyun }
71*4882a593Smuzhiyun
parse_redboot_partitions(struct mtd_info * master,const struct mtd_partition ** pparts,struct mtd_part_parser_data * data)72*4882a593Smuzhiyun static int parse_redboot_partitions(struct mtd_info *master,
73*4882a593Smuzhiyun const struct mtd_partition **pparts,
74*4882a593Smuzhiyun struct mtd_part_parser_data *data)
75*4882a593Smuzhiyun {
76*4882a593Smuzhiyun int nrparts = 0;
77*4882a593Smuzhiyun struct fis_image_desc *buf;
78*4882a593Smuzhiyun struct mtd_partition *parts;
79*4882a593Smuzhiyun struct fis_list *fl = NULL, *tmp_fl;
80*4882a593Smuzhiyun int ret, i;
81*4882a593Smuzhiyun size_t retlen;
82*4882a593Smuzhiyun char *names;
83*4882a593Smuzhiyun char *nullname;
84*4882a593Smuzhiyun int namelen = 0;
85*4882a593Smuzhiyun int nulllen = 0;
86*4882a593Smuzhiyun int numslots;
87*4882a593Smuzhiyun unsigned long offset;
88*4882a593Smuzhiyun #ifdef CONFIG_MTD_REDBOOT_PARTS_UNALLOCATED
89*4882a593Smuzhiyun static char nullstring[] = "unallocated";
90*4882a593Smuzhiyun #endif
91*4882a593Smuzhiyun
92*4882a593Smuzhiyun parse_redboot_of(master);
93*4882a593Smuzhiyun
94*4882a593Smuzhiyun if ( directory < 0 ) {
95*4882a593Smuzhiyun offset = master->size + directory * master->erasesize;
96*4882a593Smuzhiyun while (mtd_block_isbad(master, offset)) {
97*4882a593Smuzhiyun if (!offset) {
98*4882a593Smuzhiyun nogood:
99*4882a593Smuzhiyun printk(KERN_NOTICE "Failed to find a non-bad block to check for RedBoot partition table\n");
100*4882a593Smuzhiyun return -EIO;
101*4882a593Smuzhiyun }
102*4882a593Smuzhiyun offset -= master->erasesize;
103*4882a593Smuzhiyun }
104*4882a593Smuzhiyun } else {
105*4882a593Smuzhiyun offset = directory * master->erasesize;
106*4882a593Smuzhiyun while (mtd_block_isbad(master, offset)) {
107*4882a593Smuzhiyun offset += master->erasesize;
108*4882a593Smuzhiyun if (offset == master->size)
109*4882a593Smuzhiyun goto nogood;
110*4882a593Smuzhiyun }
111*4882a593Smuzhiyun }
112*4882a593Smuzhiyun buf = vmalloc(master->erasesize);
113*4882a593Smuzhiyun
114*4882a593Smuzhiyun if (!buf)
115*4882a593Smuzhiyun return -ENOMEM;
116*4882a593Smuzhiyun
117*4882a593Smuzhiyun printk(KERN_NOTICE "Searching for RedBoot partition table in %s at offset 0x%lx\n",
118*4882a593Smuzhiyun master->name, offset);
119*4882a593Smuzhiyun
120*4882a593Smuzhiyun ret = mtd_read(master, offset, master->erasesize, &retlen,
121*4882a593Smuzhiyun (void *)buf);
122*4882a593Smuzhiyun
123*4882a593Smuzhiyun if (ret)
124*4882a593Smuzhiyun goto out;
125*4882a593Smuzhiyun
126*4882a593Smuzhiyun if (retlen != master->erasesize) {
127*4882a593Smuzhiyun ret = -EIO;
128*4882a593Smuzhiyun goto out;
129*4882a593Smuzhiyun }
130*4882a593Smuzhiyun
131*4882a593Smuzhiyun numslots = (master->erasesize / sizeof(struct fis_image_desc));
132*4882a593Smuzhiyun for (i = 0; i < numslots; i++) {
133*4882a593Smuzhiyun if (!memcmp(buf[i].name, "FIS directory", 14)) {
134*4882a593Smuzhiyun /* This is apparently the FIS directory entry for the
135*4882a593Smuzhiyun * FIS directory itself. The FIS directory size is
136*4882a593Smuzhiyun * one erase block; if the buf[i].size field is
137*4882a593Smuzhiyun * swab32(erasesize) then we know we are looking at
138*4882a593Smuzhiyun * a byte swapped FIS directory - swap all the entries!
139*4882a593Smuzhiyun * (NOTE: this is 'size' not 'data_length'; size is
140*4882a593Smuzhiyun * the full size of the entry.)
141*4882a593Smuzhiyun */
142*4882a593Smuzhiyun
143*4882a593Smuzhiyun /* RedBoot can combine the FIS directory and
144*4882a593Smuzhiyun config partitions into a single eraseblock;
145*4882a593Smuzhiyun we assume wrong-endian if either the swapped
146*4882a593Smuzhiyun 'size' matches the eraseblock size precisely,
147*4882a593Smuzhiyun or if the swapped size actually fits in an
148*4882a593Smuzhiyun eraseblock while the unswapped size doesn't. */
149*4882a593Smuzhiyun if (swab32(buf[i].size) == master->erasesize ||
150*4882a593Smuzhiyun (buf[i].size > master->erasesize
151*4882a593Smuzhiyun && swab32(buf[i].size) < master->erasesize)) {
152*4882a593Smuzhiyun int j;
153*4882a593Smuzhiyun /* Update numslots based on actual FIS directory size */
154*4882a593Smuzhiyun numslots = swab32(buf[i].size) / sizeof (struct fis_image_desc);
155*4882a593Smuzhiyun for (j = 0; j < numslots; ++j) {
156*4882a593Smuzhiyun
157*4882a593Smuzhiyun /* A single 0xff denotes a deleted entry.
158*4882a593Smuzhiyun * Two of them in a row is the end of the table.
159*4882a593Smuzhiyun */
160*4882a593Smuzhiyun if (buf[j].name[0] == 0xff) {
161*4882a593Smuzhiyun if (buf[j].name[1] == 0xff) {
162*4882a593Smuzhiyun break;
163*4882a593Smuzhiyun } else {
164*4882a593Smuzhiyun continue;
165*4882a593Smuzhiyun }
166*4882a593Smuzhiyun }
167*4882a593Smuzhiyun
168*4882a593Smuzhiyun /* The unsigned long fields were written with the
169*4882a593Smuzhiyun * wrong byte sex, name and pad have no byte sex.
170*4882a593Smuzhiyun */
171*4882a593Smuzhiyun swab32s(&buf[j].flash_base);
172*4882a593Smuzhiyun swab32s(&buf[j].mem_base);
173*4882a593Smuzhiyun swab32s(&buf[j].size);
174*4882a593Smuzhiyun swab32s(&buf[j].entry_point);
175*4882a593Smuzhiyun swab32s(&buf[j].data_length);
176*4882a593Smuzhiyun swab32s(&buf[j].desc_cksum);
177*4882a593Smuzhiyun swab32s(&buf[j].file_cksum);
178*4882a593Smuzhiyun }
179*4882a593Smuzhiyun } else if (buf[i].size < master->erasesize) {
180*4882a593Smuzhiyun /* Update numslots based on actual FIS directory size */
181*4882a593Smuzhiyun numslots = buf[i].size / sizeof(struct fis_image_desc);
182*4882a593Smuzhiyun }
183*4882a593Smuzhiyun break;
184*4882a593Smuzhiyun }
185*4882a593Smuzhiyun }
186*4882a593Smuzhiyun if (i == numslots) {
187*4882a593Smuzhiyun /* Didn't find it */
188*4882a593Smuzhiyun printk(KERN_NOTICE "No RedBoot partition table detected in %s\n",
189*4882a593Smuzhiyun master->name);
190*4882a593Smuzhiyun ret = 0;
191*4882a593Smuzhiyun goto out;
192*4882a593Smuzhiyun }
193*4882a593Smuzhiyun
194*4882a593Smuzhiyun for (i = 0; i < numslots; i++) {
195*4882a593Smuzhiyun struct fis_list *new_fl, **prev;
196*4882a593Smuzhiyun
197*4882a593Smuzhiyun if (buf[i].name[0] == 0xff) {
198*4882a593Smuzhiyun if (buf[i].name[1] == 0xff) {
199*4882a593Smuzhiyun break;
200*4882a593Smuzhiyun } else {
201*4882a593Smuzhiyun continue;
202*4882a593Smuzhiyun }
203*4882a593Smuzhiyun }
204*4882a593Smuzhiyun if (!redboot_checksum(&buf[i]))
205*4882a593Smuzhiyun break;
206*4882a593Smuzhiyun
207*4882a593Smuzhiyun new_fl = kmalloc(sizeof(struct fis_list), GFP_KERNEL);
208*4882a593Smuzhiyun namelen += strlen(buf[i].name)+1;
209*4882a593Smuzhiyun if (!new_fl) {
210*4882a593Smuzhiyun ret = -ENOMEM;
211*4882a593Smuzhiyun goto out;
212*4882a593Smuzhiyun }
213*4882a593Smuzhiyun new_fl->img = &buf[i];
214*4882a593Smuzhiyun if (data && data->origin)
215*4882a593Smuzhiyun buf[i].flash_base -= data->origin;
216*4882a593Smuzhiyun else
217*4882a593Smuzhiyun buf[i].flash_base &= master->size-1;
218*4882a593Smuzhiyun
219*4882a593Smuzhiyun /* I'm sure the JFFS2 code has done me permanent damage.
220*4882a593Smuzhiyun * I now think the following is _normal_
221*4882a593Smuzhiyun */
222*4882a593Smuzhiyun prev = &fl;
223*4882a593Smuzhiyun while(*prev && (*prev)->img->flash_base < new_fl->img->flash_base)
224*4882a593Smuzhiyun prev = &(*prev)->next;
225*4882a593Smuzhiyun new_fl->next = *prev;
226*4882a593Smuzhiyun *prev = new_fl;
227*4882a593Smuzhiyun
228*4882a593Smuzhiyun nrparts++;
229*4882a593Smuzhiyun }
230*4882a593Smuzhiyun #ifdef CONFIG_MTD_REDBOOT_PARTS_UNALLOCATED
231*4882a593Smuzhiyun if (fl->img->flash_base) {
232*4882a593Smuzhiyun nrparts++;
233*4882a593Smuzhiyun nulllen = sizeof(nullstring);
234*4882a593Smuzhiyun }
235*4882a593Smuzhiyun
236*4882a593Smuzhiyun for (tmp_fl = fl; tmp_fl->next; tmp_fl = tmp_fl->next) {
237*4882a593Smuzhiyun if (tmp_fl->img->flash_base + tmp_fl->img->size + master->erasesize <= tmp_fl->next->img->flash_base) {
238*4882a593Smuzhiyun nrparts++;
239*4882a593Smuzhiyun nulllen = sizeof(nullstring);
240*4882a593Smuzhiyun }
241*4882a593Smuzhiyun }
242*4882a593Smuzhiyun #endif
243*4882a593Smuzhiyun parts = kzalloc(sizeof(*parts)*nrparts + nulllen + namelen, GFP_KERNEL);
244*4882a593Smuzhiyun
245*4882a593Smuzhiyun if (!parts) {
246*4882a593Smuzhiyun ret = -ENOMEM;
247*4882a593Smuzhiyun goto out;
248*4882a593Smuzhiyun }
249*4882a593Smuzhiyun
250*4882a593Smuzhiyun nullname = (char *)&parts[nrparts];
251*4882a593Smuzhiyun #ifdef CONFIG_MTD_REDBOOT_PARTS_UNALLOCATED
252*4882a593Smuzhiyun if (nulllen > 0) {
253*4882a593Smuzhiyun strcpy(nullname, nullstring);
254*4882a593Smuzhiyun }
255*4882a593Smuzhiyun #endif
256*4882a593Smuzhiyun names = nullname + nulllen;
257*4882a593Smuzhiyun
258*4882a593Smuzhiyun i=0;
259*4882a593Smuzhiyun
260*4882a593Smuzhiyun #ifdef CONFIG_MTD_REDBOOT_PARTS_UNALLOCATED
261*4882a593Smuzhiyun if (fl->img->flash_base) {
262*4882a593Smuzhiyun parts[0].name = nullname;
263*4882a593Smuzhiyun parts[0].size = fl->img->flash_base;
264*4882a593Smuzhiyun parts[0].offset = 0;
265*4882a593Smuzhiyun i++;
266*4882a593Smuzhiyun }
267*4882a593Smuzhiyun #endif
268*4882a593Smuzhiyun for ( ; i<nrparts; i++) {
269*4882a593Smuzhiyun parts[i].size = fl->img->size;
270*4882a593Smuzhiyun parts[i].offset = fl->img->flash_base;
271*4882a593Smuzhiyun parts[i].name = names;
272*4882a593Smuzhiyun
273*4882a593Smuzhiyun strcpy(names, fl->img->name);
274*4882a593Smuzhiyun #ifdef CONFIG_MTD_REDBOOT_PARTS_READONLY
275*4882a593Smuzhiyun if (!memcmp(names, "RedBoot", 8) ||
276*4882a593Smuzhiyun !memcmp(names, "RedBoot config", 15) ||
277*4882a593Smuzhiyun !memcmp(names, "FIS directory", 14)) {
278*4882a593Smuzhiyun parts[i].mask_flags = MTD_WRITEABLE;
279*4882a593Smuzhiyun }
280*4882a593Smuzhiyun #endif
281*4882a593Smuzhiyun names += strlen(names)+1;
282*4882a593Smuzhiyun
283*4882a593Smuzhiyun #ifdef CONFIG_MTD_REDBOOT_PARTS_UNALLOCATED
284*4882a593Smuzhiyun if(fl->next && fl->img->flash_base + fl->img->size + master->erasesize <= fl->next->img->flash_base) {
285*4882a593Smuzhiyun i++;
286*4882a593Smuzhiyun parts[i].offset = parts[i-1].size + parts[i-1].offset;
287*4882a593Smuzhiyun parts[i].size = fl->next->img->flash_base - parts[i].offset;
288*4882a593Smuzhiyun parts[i].name = nullname;
289*4882a593Smuzhiyun }
290*4882a593Smuzhiyun #endif
291*4882a593Smuzhiyun tmp_fl = fl;
292*4882a593Smuzhiyun fl = fl->next;
293*4882a593Smuzhiyun kfree(tmp_fl);
294*4882a593Smuzhiyun }
295*4882a593Smuzhiyun ret = nrparts;
296*4882a593Smuzhiyun *pparts = parts;
297*4882a593Smuzhiyun out:
298*4882a593Smuzhiyun while (fl) {
299*4882a593Smuzhiyun struct fis_list *old = fl;
300*4882a593Smuzhiyun fl = fl->next;
301*4882a593Smuzhiyun kfree(old);
302*4882a593Smuzhiyun }
303*4882a593Smuzhiyun vfree(buf);
304*4882a593Smuzhiyun return ret;
305*4882a593Smuzhiyun }
306*4882a593Smuzhiyun
307*4882a593Smuzhiyun static const struct of_device_id mtd_parser_redboot_of_match_table[] = {
308*4882a593Smuzhiyun { .compatible = "redboot-fis" },
309*4882a593Smuzhiyun {},
310*4882a593Smuzhiyun };
311*4882a593Smuzhiyun MODULE_DEVICE_TABLE(of, mtd_parser_redboot_of_match_table);
312*4882a593Smuzhiyun
313*4882a593Smuzhiyun static struct mtd_part_parser redboot_parser = {
314*4882a593Smuzhiyun .parse_fn = parse_redboot_partitions,
315*4882a593Smuzhiyun .name = "RedBoot",
316*4882a593Smuzhiyun .of_match_table = mtd_parser_redboot_of_match_table,
317*4882a593Smuzhiyun };
318*4882a593Smuzhiyun module_mtd_part_parser(redboot_parser);
319*4882a593Smuzhiyun
320*4882a593Smuzhiyun /* mtd parsers will request the module by parser name */
321*4882a593Smuzhiyun MODULE_ALIAS("RedBoot");
322*4882a593Smuzhiyun MODULE_LICENSE("GPL");
323*4882a593Smuzhiyun MODULE_AUTHOR("David Woodhouse <dwmw2@infradead.org>");
324*4882a593Smuzhiyun MODULE_DESCRIPTION("Parsing code for RedBoot Flash Image System (FIS) tables");
325