1*4882a593Smuzhiyun /*
2*4882a593Smuzhiyun * Copyright (c) 2009, Google Inc.
3*4882a593Smuzhiyun * All rights reserved.
4*4882a593Smuzhiyun *
5*4882a593Smuzhiyun * Copyright (c) 2009-2014, The Linux Foundation. All rights reserved.
6*4882a593Smuzhiyun * Portions Copyright 2014 Broadcom Corporation.
7*4882a593Smuzhiyun *
8*4882a593Smuzhiyun * Redistribution and use in source and binary forms, with or without
9*4882a593Smuzhiyun * modification, are permitted provided that the following conditions are met:
10*4882a593Smuzhiyun * * Redistributions of source code must retain the above copyright
11*4882a593Smuzhiyun * notice, this list of conditions and the following disclaimer.
12*4882a593Smuzhiyun * * Redistributions in binary form must reproduce the above copyright
13*4882a593Smuzhiyun * notice, this list of conditions and the following disclaimer in the
14*4882a593Smuzhiyun * documentation and/or other materials provided with the distribution.
15*4882a593Smuzhiyun * * Neither the name of The Linux Foundation nor
16*4882a593Smuzhiyun * the names of its contributors may be used to endorse or promote
17*4882a593Smuzhiyun * products derived from this software without specific prior written
18*4882a593Smuzhiyun * permission.
19*4882a593Smuzhiyun *
20*4882a593Smuzhiyun * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
21*4882a593Smuzhiyun * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
22*4882a593Smuzhiyun * IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
23*4882a593Smuzhiyun * NON-INFRINGEMENT ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR
24*4882a593Smuzhiyun * CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
25*4882a593Smuzhiyun * EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
26*4882a593Smuzhiyun * PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS;
27*4882a593Smuzhiyun * OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
28*4882a593Smuzhiyun * WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR
29*4882a593Smuzhiyun * OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF
30*4882a593Smuzhiyun * ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
31*4882a593Smuzhiyun *
32*4882a593Smuzhiyun * NOTE:
33*4882a593Smuzhiyun * Although it is very similar, this license text is not identical
34*4882a593Smuzhiyun * to the "BSD-3-Clause", therefore, DO NOT MODIFY THIS LICENSE TEXT!
35*4882a593Smuzhiyun */
36*4882a593Smuzhiyun
37*4882a593Smuzhiyun #include <config.h>
38*4882a593Smuzhiyun #include <common.h>
39*4882a593Smuzhiyun #include <image-sparse.h>
40*4882a593Smuzhiyun #include <div64.h>
41*4882a593Smuzhiyun #include <malloc.h>
42*4882a593Smuzhiyun #include <part.h>
43*4882a593Smuzhiyun #include <sparse_format.h>
44*4882a593Smuzhiyun #include <fastboot.h>
45*4882a593Smuzhiyun
46*4882a593Smuzhiyun #include <linux/math64.h>
47*4882a593Smuzhiyun
48*4882a593Smuzhiyun #ifndef CONFIG_FASTBOOT_FLASH_FILLBUF_SIZE
49*4882a593Smuzhiyun #define CONFIG_FASTBOOT_FLASH_FILLBUF_SIZE (1024 * 512)
50*4882a593Smuzhiyun #endif
51*4882a593Smuzhiyun
write_sparse_image(struct sparse_storage * info,const char * part_name,void * data,unsigned sz,char * response)52*4882a593Smuzhiyun void write_sparse_image(
53*4882a593Smuzhiyun struct sparse_storage *info, const char *part_name,
54*4882a593Smuzhiyun void *data, unsigned sz, char *response)
55*4882a593Smuzhiyun {
56*4882a593Smuzhiyun lbaint_t blk;
57*4882a593Smuzhiyun lbaint_t blkcnt;
58*4882a593Smuzhiyun lbaint_t blks;
59*4882a593Smuzhiyun uint64_t bytes_written = 0;
60*4882a593Smuzhiyun unsigned int chunk;
61*4882a593Smuzhiyun unsigned int offset;
62*4882a593Smuzhiyun uint64_t chunk_data_sz;
63*4882a593Smuzhiyun uint32_t *fill_buf = NULL;
64*4882a593Smuzhiyun uint32_t fill_val;
65*4882a593Smuzhiyun sparse_header_t *sparse_header;
66*4882a593Smuzhiyun chunk_header_t *chunk_header;
67*4882a593Smuzhiyun uint32_t total_blocks = 0;
68*4882a593Smuzhiyun int fill_buf_num_blks;
69*4882a593Smuzhiyun int i;
70*4882a593Smuzhiyun int j;
71*4882a593Smuzhiyun
72*4882a593Smuzhiyun fill_buf_num_blks = CONFIG_FASTBOOT_FLASH_FILLBUF_SIZE / info->blksz;
73*4882a593Smuzhiyun
74*4882a593Smuzhiyun /* Read and skip over sparse image header */
75*4882a593Smuzhiyun sparse_header = (sparse_header_t *)data;
76*4882a593Smuzhiyun
77*4882a593Smuzhiyun data += sparse_header->file_hdr_sz;
78*4882a593Smuzhiyun if (sparse_header->file_hdr_sz > sizeof(sparse_header_t)) {
79*4882a593Smuzhiyun /*
80*4882a593Smuzhiyun * Skip the remaining bytes in a header that is longer than
81*4882a593Smuzhiyun * we expected.
82*4882a593Smuzhiyun */
83*4882a593Smuzhiyun data += (sparse_header->file_hdr_sz - sizeof(sparse_header_t));
84*4882a593Smuzhiyun }
85*4882a593Smuzhiyun
86*4882a593Smuzhiyun debug("=== Sparse Image Header ===\n");
87*4882a593Smuzhiyun debug("magic: 0x%x\n", sparse_header->magic);
88*4882a593Smuzhiyun debug("major_version: 0x%x\n", sparse_header->major_version);
89*4882a593Smuzhiyun debug("minor_version: 0x%x\n", sparse_header->minor_version);
90*4882a593Smuzhiyun debug("file_hdr_sz: %d\n", sparse_header->file_hdr_sz);
91*4882a593Smuzhiyun debug("chunk_hdr_sz: %d\n", sparse_header->chunk_hdr_sz);
92*4882a593Smuzhiyun debug("blk_sz: %d\n", sparse_header->blk_sz);
93*4882a593Smuzhiyun debug("total_blks: %d\n", sparse_header->total_blks);
94*4882a593Smuzhiyun debug("total_chunks: %d\n", sparse_header->total_chunks);
95*4882a593Smuzhiyun
96*4882a593Smuzhiyun /*
97*4882a593Smuzhiyun * Verify that the sparse block size is a multiple of our
98*4882a593Smuzhiyun * storage backend block size
99*4882a593Smuzhiyun */
100*4882a593Smuzhiyun div_u64_rem(sparse_header->blk_sz, info->blksz, &offset);
101*4882a593Smuzhiyun if (offset) {
102*4882a593Smuzhiyun printf("%s: Sparse image block size issue [%u]\n",
103*4882a593Smuzhiyun __func__, sparse_header->blk_sz);
104*4882a593Smuzhiyun fastboot_fail("sparse image block size issue", response);
105*4882a593Smuzhiyun return;
106*4882a593Smuzhiyun }
107*4882a593Smuzhiyun
108*4882a593Smuzhiyun puts("Flashing Sparse Image\n");
109*4882a593Smuzhiyun
110*4882a593Smuzhiyun /* Start processing chunks */
111*4882a593Smuzhiyun blk = info->start;
112*4882a593Smuzhiyun for (chunk = 0; chunk < sparse_header->total_chunks; chunk++) {
113*4882a593Smuzhiyun /* Read and skip over chunk header */
114*4882a593Smuzhiyun chunk_header = (chunk_header_t *)data;
115*4882a593Smuzhiyun data += sizeof(chunk_header_t);
116*4882a593Smuzhiyun
117*4882a593Smuzhiyun if (chunk_header->chunk_type != CHUNK_TYPE_RAW) {
118*4882a593Smuzhiyun debug("=== Chunk Header ===\n");
119*4882a593Smuzhiyun debug("chunk_type: 0x%x\n", chunk_header->chunk_type);
120*4882a593Smuzhiyun debug("chunk_data_sz: 0x%x\n", chunk_header->chunk_sz);
121*4882a593Smuzhiyun debug("total_size: 0x%x\n", chunk_header->total_sz);
122*4882a593Smuzhiyun }
123*4882a593Smuzhiyun
124*4882a593Smuzhiyun if (sparse_header->chunk_hdr_sz > sizeof(chunk_header_t)) {
125*4882a593Smuzhiyun /*
126*4882a593Smuzhiyun * Skip the remaining bytes in a header that is longer
127*4882a593Smuzhiyun * than we expected.
128*4882a593Smuzhiyun */
129*4882a593Smuzhiyun data += (sparse_header->chunk_hdr_sz -
130*4882a593Smuzhiyun sizeof(chunk_header_t));
131*4882a593Smuzhiyun }
132*4882a593Smuzhiyun
133*4882a593Smuzhiyun chunk_data_sz = ((u64)sparse_header->blk_sz) * chunk_header->chunk_sz;
134*4882a593Smuzhiyun blkcnt = DIV_ROUND_UP_ULL(chunk_data_sz, info->blksz);
135*4882a593Smuzhiyun switch (chunk_header->chunk_type) {
136*4882a593Smuzhiyun case CHUNK_TYPE_RAW:
137*4882a593Smuzhiyun if (chunk_header->total_sz !=
138*4882a593Smuzhiyun (sparse_header->chunk_hdr_sz + chunk_data_sz)) {
139*4882a593Smuzhiyun fastboot_fail(
140*4882a593Smuzhiyun "Bogus chunk size for chunk type Raw", response);
141*4882a593Smuzhiyun return;
142*4882a593Smuzhiyun }
143*4882a593Smuzhiyun
144*4882a593Smuzhiyun if (blk + blkcnt > info->start + info->size) {
145*4882a593Smuzhiyun printf(
146*4882a593Smuzhiyun "%s: Request would exceed partition size!\n",
147*4882a593Smuzhiyun __func__);
148*4882a593Smuzhiyun fastboot_fail(
149*4882a593Smuzhiyun "Request would exceed partition size!", response);
150*4882a593Smuzhiyun return;
151*4882a593Smuzhiyun }
152*4882a593Smuzhiyun
153*4882a593Smuzhiyun blks = info->write(info, blk, blkcnt, data);
154*4882a593Smuzhiyun /* blks might be > blkcnt (eg. NAND bad-blocks) */
155*4882a593Smuzhiyun if (blks < blkcnt) {
156*4882a593Smuzhiyun printf("%s: %s" LBAFU " [" LBAFU "]\n",
157*4882a593Smuzhiyun __func__, "Write failed, block #",
158*4882a593Smuzhiyun blk, blks);
159*4882a593Smuzhiyun fastboot_fail(
160*4882a593Smuzhiyun "flash write failure", response);
161*4882a593Smuzhiyun return;
162*4882a593Smuzhiyun }
163*4882a593Smuzhiyun blk += blks;
164*4882a593Smuzhiyun bytes_written += ((u64)blkcnt) * info->blksz;
165*4882a593Smuzhiyun total_blocks += chunk_header->chunk_sz;
166*4882a593Smuzhiyun data += chunk_data_sz;
167*4882a593Smuzhiyun break;
168*4882a593Smuzhiyun
169*4882a593Smuzhiyun case CHUNK_TYPE_FILL:
170*4882a593Smuzhiyun if (chunk_header->total_sz !=
171*4882a593Smuzhiyun (sparse_header->chunk_hdr_sz + sizeof(uint32_t))) {
172*4882a593Smuzhiyun fastboot_fail(
173*4882a593Smuzhiyun "Bogus chunk size for chunk type FILL", response);
174*4882a593Smuzhiyun return;
175*4882a593Smuzhiyun }
176*4882a593Smuzhiyun
177*4882a593Smuzhiyun fill_buf = (uint32_t *)
178*4882a593Smuzhiyun memalign(ARCH_DMA_MINALIGN,
179*4882a593Smuzhiyun ROUNDUP(
180*4882a593Smuzhiyun info->blksz * fill_buf_num_blks,
181*4882a593Smuzhiyun ARCH_DMA_MINALIGN));
182*4882a593Smuzhiyun if (!fill_buf) {
183*4882a593Smuzhiyun fastboot_fail(
184*4882a593Smuzhiyun "Malloc failed for: CHUNK_TYPE_FILL", response);
185*4882a593Smuzhiyun return;
186*4882a593Smuzhiyun }
187*4882a593Smuzhiyun
188*4882a593Smuzhiyun fill_val = *(uint32_t *)data;
189*4882a593Smuzhiyun data = (char *)data + sizeof(uint32_t);
190*4882a593Smuzhiyun
191*4882a593Smuzhiyun for (i = 0;
192*4882a593Smuzhiyun i < (info->blksz * fill_buf_num_blks /
193*4882a593Smuzhiyun sizeof(fill_val));
194*4882a593Smuzhiyun i++)
195*4882a593Smuzhiyun fill_buf[i] = fill_val;
196*4882a593Smuzhiyun
197*4882a593Smuzhiyun if (blk + blkcnt > info->start + info->size) {
198*4882a593Smuzhiyun printf(
199*4882a593Smuzhiyun "%s: Request would exceed partition size!\n",
200*4882a593Smuzhiyun __func__);
201*4882a593Smuzhiyun fastboot_fail(
202*4882a593Smuzhiyun "Request would exceed partition size!", response);
203*4882a593Smuzhiyun return;
204*4882a593Smuzhiyun }
205*4882a593Smuzhiyun
206*4882a593Smuzhiyun for (i = 0; i < blkcnt;) {
207*4882a593Smuzhiyun j = blkcnt - i;
208*4882a593Smuzhiyun if (j > fill_buf_num_blks)
209*4882a593Smuzhiyun j = fill_buf_num_blks;
210*4882a593Smuzhiyun blks = info->write(info, blk, j, fill_buf);
211*4882a593Smuzhiyun /* blks might be > j (eg. NAND bad-blocks) */
212*4882a593Smuzhiyun if (blks < j) {
213*4882a593Smuzhiyun printf("%s: %s " LBAFU " [%d]\n",
214*4882a593Smuzhiyun __func__,
215*4882a593Smuzhiyun "Write failed, block #",
216*4882a593Smuzhiyun blk, j);
217*4882a593Smuzhiyun fastboot_fail(
218*4882a593Smuzhiyun "flash write failure", response);
219*4882a593Smuzhiyun free(fill_buf);
220*4882a593Smuzhiyun return;
221*4882a593Smuzhiyun }
222*4882a593Smuzhiyun blk += blks;
223*4882a593Smuzhiyun i += j;
224*4882a593Smuzhiyun }
225*4882a593Smuzhiyun bytes_written += ((u64)blkcnt) * info->blksz;
226*4882a593Smuzhiyun total_blocks += DIV_ROUND_UP_ULL(chunk_data_sz,
227*4882a593Smuzhiyun sparse_header->blk_sz);
228*4882a593Smuzhiyun free(fill_buf);
229*4882a593Smuzhiyun break;
230*4882a593Smuzhiyun
231*4882a593Smuzhiyun case CHUNK_TYPE_DONT_CARE:
232*4882a593Smuzhiyun blk += info->reserve(info, blk, blkcnt);
233*4882a593Smuzhiyun total_blocks += chunk_header->chunk_sz;
234*4882a593Smuzhiyun break;
235*4882a593Smuzhiyun
236*4882a593Smuzhiyun case CHUNK_TYPE_CRC32:
237*4882a593Smuzhiyun if (chunk_header->total_sz !=
238*4882a593Smuzhiyun sparse_header->chunk_hdr_sz) {
239*4882a593Smuzhiyun fastboot_fail(
240*4882a593Smuzhiyun "Bogus chunk size for chunk type Dont Care", response);
241*4882a593Smuzhiyun return;
242*4882a593Smuzhiyun }
243*4882a593Smuzhiyun total_blocks += chunk_header->chunk_sz;
244*4882a593Smuzhiyun data += chunk_data_sz;
245*4882a593Smuzhiyun break;
246*4882a593Smuzhiyun
247*4882a593Smuzhiyun default:
248*4882a593Smuzhiyun printf("%s: Unknown chunk type: %x\n", __func__,
249*4882a593Smuzhiyun chunk_header->chunk_type);
250*4882a593Smuzhiyun fastboot_fail("Unknown chunk type", response);
251*4882a593Smuzhiyun return;
252*4882a593Smuzhiyun }
253*4882a593Smuzhiyun }
254*4882a593Smuzhiyun
255*4882a593Smuzhiyun debug("Wrote %d blocks, expected to write %d blocks\n",
256*4882a593Smuzhiyun total_blocks, sparse_header->total_blks);
257*4882a593Smuzhiyun printf("........ wrote %llu bytes to '%s'\n", bytes_written, part_name);
258*4882a593Smuzhiyun
259*4882a593Smuzhiyun if (total_blocks != sparse_header->total_blks)
260*4882a593Smuzhiyun fastboot_fail("sparse image write failure", response);
261*4882a593Smuzhiyun else
262*4882a593Smuzhiyun fastboot_okay("", response);
263*4882a593Smuzhiyun
264*4882a593Smuzhiyun return;
265*4882a593Smuzhiyun }
266