1*4882a593Smuzhiyun /*
2*4882a593Smuzhiyun * (C) Copyright 2023 Rockchip Electronics Co., Ltd
3*4882a593Smuzhiyun *
4*4882a593Smuzhiyun * SPDX-License-Identifier: GPL-2.0+
5*4882a593Smuzhiyun */
6*4882a593Smuzhiyun
7*4882a593Smuzhiyun #include <common.h>
8*4882a593Smuzhiyun #include <android_image.h>
9*4882a593Smuzhiyun #include <crypto.h>
10*4882a593Smuzhiyun #include <image.h>
11*4882a593Smuzhiyun #include <mp_boot.h>
12*4882a593Smuzhiyun #include <part.h>
13*4882a593Smuzhiyun #include <spl.h>
14*4882a593Smuzhiyun #include <asm/io.h>
15*4882a593Smuzhiyun
16*4882a593Smuzhiyun #define BLK_CNT(_num_bytes, _block_size) \
17*4882a593Smuzhiyun ((_num_bytes + _block_size - 1) / _block_size)
18*4882a593Smuzhiyun
19*4882a593Smuzhiyun #ifdef CONFIG_ANDROID_BOOT_IMAGE
android_check_header(const struct andr_img_hdr * hdr)20*4882a593Smuzhiyun static int android_check_header(const struct andr_img_hdr *hdr)
21*4882a593Smuzhiyun {
22*4882a593Smuzhiyun return memcmp(ANDR_BOOT_MAGIC, hdr->magic, ANDR_BOOT_MAGIC_SIZE);
23*4882a593Smuzhiyun }
24*4882a593Smuzhiyun
print_hash(const char * label,u8 * hash,int len)25*4882a593Smuzhiyun static void print_hash(const char *label, u8 *hash, int len)
26*4882a593Smuzhiyun {
27*4882a593Smuzhiyun int i;
28*4882a593Smuzhiyun
29*4882a593Smuzhiyun printf("%s:\n 0x", label ? : "Hash");
30*4882a593Smuzhiyun for (i = 0; i < len; i++)
31*4882a593Smuzhiyun printf("%02x", hash[i]);
32*4882a593Smuzhiyun printf("\n");
33*4882a593Smuzhiyun }
34*4882a593Smuzhiyun
35*4882a593Smuzhiyun #if 0
36*4882a593Smuzhiyun static void spl_android_print_contents(const struct andr_img_hdr *hdr)
37*4882a593Smuzhiyun {
38*4882a593Smuzhiyun const char * const p = IMAGE_INDENT_STRING;
39*4882a593Smuzhiyun /* os_version = ver << 11 | lvl */
40*4882a593Smuzhiyun u32 os_ver = hdr->os_version >> 11;
41*4882a593Smuzhiyun u32 os_lvl = hdr->os_version & ((1U << 11) - 1);
42*4882a593Smuzhiyun u32 header_version = hdr->header_version;
43*4882a593Smuzhiyun
44*4882a593Smuzhiyun printf("%skernel size: %x\n", p, hdr->kernel_size);
45*4882a593Smuzhiyun printf("%skernel address: %x\n", p, hdr->kernel_addr);
46*4882a593Smuzhiyun printf("%sramdisk size: %x\n", p, hdr->ramdisk_size);
47*4882a593Smuzhiyun printf("%sramdisk address: %x\n", p, hdr->ramdisk_addr);
48*4882a593Smuzhiyun printf("%ssecond size: %x\n", p, hdr->second_size);
49*4882a593Smuzhiyun printf("%ssecond address: %x\n", p, hdr->second_addr);
50*4882a593Smuzhiyun printf("%stags address: %x\n", p, hdr->tags_addr);
51*4882a593Smuzhiyun printf("%spage size: %x\n", p, hdr->page_size);
52*4882a593Smuzhiyun printf("%sheader_version: %x\n", p, header_version);
53*4882a593Smuzhiyun /* ver = A << 14 | B << 7 | C (7 bits for each of A, B, C)
54*4882a593Smuzhiyun * lvl = ((Y - 2000) & 127) << 4 | M (7 bits for Y, 4 bits for M) */
55*4882a593Smuzhiyun printf("%sos_version: %x (ver: %u.%u.%u, level: %u.%u)\n",
56*4882a593Smuzhiyun p, hdr->os_version,
57*4882a593Smuzhiyun (os_ver >> 7) & 0x7F, (os_ver >> 14) & 0x7F, os_ver & 0x7F,
58*4882a593Smuzhiyun (os_lvl >> 4) + 2000, os_lvl & 0x0F);
59*4882a593Smuzhiyun printf("%sname: %s\n", p, hdr->name);
60*4882a593Smuzhiyun printf("%scmdline: %s\n", p, hdr->cmdline);
61*4882a593Smuzhiyun
62*4882a593Smuzhiyun if (header_version == 1 || header_version == 2) {
63*4882a593Smuzhiyun printf("%srecovery dtbo size: %x\n", p, hdr->recovery_dtbo_size);
64*4882a593Smuzhiyun printf("%srecovery dtbo offset: %llx\n", p, hdr->recovery_dtbo_offset);
65*4882a593Smuzhiyun printf("%sheader size: %x\n", p, hdr->header_size);
66*4882a593Smuzhiyun }
67*4882a593Smuzhiyun
68*4882a593Smuzhiyun if (header_version == 2 || header_version == 3) {
69*4882a593Smuzhiyun printf("%sdtb size: %x\n", p, hdr->dtb_size);
70*4882a593Smuzhiyun printf("%sdtb addr: %llx\n", p, hdr->dtb_addr);
71*4882a593Smuzhiyun }
72*4882a593Smuzhiyun
73*4882a593Smuzhiyun if (header_version >= 3) {
74*4882a593Smuzhiyun printf("%scmdline: %s\n", p, hdr->total_cmdline);
75*4882a593Smuzhiyun printf("%svendor ramdisk size: %x\n", p, hdr->vendor_ramdisk_size);
76*4882a593Smuzhiyun printf("%svendor page size: %x\n", p, hdr->vendor_page_size);
77*4882a593Smuzhiyun printf("%svendor header version: %d\n", p, hdr->vendor_header_version);
78*4882a593Smuzhiyun printf("%svendor header size: %x\n", p, hdr->vendor_header_size);
79*4882a593Smuzhiyun }
80*4882a593Smuzhiyun
81*4882a593Smuzhiyun if (header_version >= 4) {
82*4882a593Smuzhiyun printf("%svendor ramdisk table size: %x\n",
83*4882a593Smuzhiyun p, hdr->vendor_ramdisk_table_size);
84*4882a593Smuzhiyun printf("%svendor ramdisk table entry num: %x\n",
85*4882a593Smuzhiyun p, hdr->vendor_ramdisk_table_entry_num);
86*4882a593Smuzhiyun printf("%svendor ramdisk table entry size: %x\n",
87*4882a593Smuzhiyun p, hdr->vendor_ramdisk_table_entry_size);
88*4882a593Smuzhiyun printf("%svendor bootconfig size: %d\n",
89*4882a593Smuzhiyun p, hdr->vendor_bootconfig_size);
90*4882a593Smuzhiyun }
91*4882a593Smuzhiyun }
92*4882a593Smuzhiyun #endif
93*4882a593Smuzhiyun
android_size(struct andr_img_hdr * hdr)94*4882a593Smuzhiyun static ulong android_size(struct andr_img_hdr *hdr)
95*4882a593Smuzhiyun {
96*4882a593Smuzhiyun ulong len;
97*4882a593Smuzhiyun
98*4882a593Smuzhiyun len = hdr->page_size +
99*4882a593Smuzhiyun ALIGN(hdr->kernel_size, hdr->page_size) +
100*4882a593Smuzhiyun ALIGN(hdr->ramdisk_size, hdr->page_size) +
101*4882a593Smuzhiyun ALIGN(hdr->second_size, hdr->page_size);
102*4882a593Smuzhiyun if (hdr->header_version > 0)
103*4882a593Smuzhiyun len += ALIGN(hdr->recovery_dtbo_size, hdr->page_size);
104*4882a593Smuzhiyun if (hdr->header_version > 1)
105*4882a593Smuzhiyun len += ALIGN(hdr->dtb_size, hdr->page_size);
106*4882a593Smuzhiyun #if 0
107*4882a593Smuzhiyun spl_android_print_contents(hdr);
108*4882a593Smuzhiyun #endif
109*4882a593Smuzhiyun
110*4882a593Smuzhiyun return len;
111*4882a593Smuzhiyun }
112*4882a593Smuzhiyun
spl_load_android(struct task_data * data)113*4882a593Smuzhiyun int spl_load_android(struct task_data *data)
114*4882a593Smuzhiyun {
115*4882a593Smuzhiyun struct spl_load_info *info = &data->info;
116*4882a593Smuzhiyun void *buf = (void *)CONFIG_SPL_BOOT_IMAGE_BUF;
117*4882a593Smuzhiyun disk_partition_t part;
118*4882a593Smuzhiyun ulong blkcnt;
119*4882a593Smuzhiyun
120*4882a593Smuzhiyun debug("== Android: load start\n");
121*4882a593Smuzhiyun
122*4882a593Smuzhiyun if (part_get_info_by_name(info->dev, "boot", &part) < 0) {
123*4882a593Smuzhiyun printf("No boot partition\n");
124*4882a593Smuzhiyun return -ENOENT;
125*4882a593Smuzhiyun }
126*4882a593Smuzhiyun
127*4882a593Smuzhiyun blkcnt = BLK_CNT(sizeof(struct andr_img_hdr), info->bl_len);
128*4882a593Smuzhiyun if (info->read(info, part.start, blkcnt, buf) != blkcnt)
129*4882a593Smuzhiyun return -EIO;
130*4882a593Smuzhiyun
131*4882a593Smuzhiyun if (android_check_header(buf))
132*4882a593Smuzhiyun return -EINVAL;
133*4882a593Smuzhiyun
134*4882a593Smuzhiyun blkcnt = BLK_CNT(android_size(buf), info->bl_len);
135*4882a593Smuzhiyun if (info->read(info, part.start, blkcnt, buf) != blkcnt)
136*4882a593Smuzhiyun return -EIO;
137*4882a593Smuzhiyun
138*4882a593Smuzhiyun data->boot_addr = (void *)CONFIG_SPL_BOOT_IMAGE_BUF;
139*4882a593Smuzhiyun data->boot_size = blkcnt * info->bl_len;
140*4882a593Smuzhiyun
141*4882a593Smuzhiyun flush_dcache_range((ulong)data, (ulong)data + sizeof(*data));
142*4882a593Smuzhiyun flush_dcache_range((ulong)buf, (ulong)buf + blkcnt);
143*4882a593Smuzhiyun
144*4882a593Smuzhiyun debug("== Android: load 0x%08lx size OK\n", blkcnt * info->bl_len);
145*4882a593Smuzhiyun
146*4882a593Smuzhiyun return 0;
147*4882a593Smuzhiyun }
148*4882a593Smuzhiyun
149*4882a593Smuzhiyun #ifdef CONFIG_ARMV8_CE_SHA1
spl_hash_android(struct task_data * data)150*4882a593Smuzhiyun int spl_hash_android(struct task_data *data)
151*4882a593Smuzhiyun {
152*4882a593Smuzhiyun struct andr_img_hdr *hdr = (void *)CONFIG_SPL_BOOT_IMAGE_BUF;
153*4882a593Smuzhiyun sha1_context ctx;
154*4882a593Smuzhiyun uchar hash[32];
155*4882a593Smuzhiyun void *buf;
156*4882a593Smuzhiyun
157*4882a593Smuzhiyun printf("== Android: hash start\n");
158*4882a593Smuzhiyun
159*4882a593Smuzhiyun if (hdr->header_version >= 3)
160*4882a593Smuzhiyun return -EINVAL;
161*4882a593Smuzhiyun
162*4882a593Smuzhiyun sha1_starts(&ctx);
163*4882a593Smuzhiyun
164*4882a593Smuzhiyun buf = (void *)hdr + hdr->page_size;
165*4882a593Smuzhiyun sha1_update(&ctx, (const uchar *)buf, hdr->kernel_size);
166*4882a593Smuzhiyun sha1_update(&ctx, (const uchar *)&hdr->kernel_size, sizeof(hdr->kernel_size));
167*4882a593Smuzhiyun
168*4882a593Smuzhiyun buf += ALIGN(hdr->kernel_size, hdr->page_size);
169*4882a593Smuzhiyun sha1_update(&ctx, (const uchar *)buf, hdr->ramdisk_size);
170*4882a593Smuzhiyun sha1_update(&ctx, (const uchar *)&hdr->ramdisk_size, sizeof(hdr->ramdisk_size));
171*4882a593Smuzhiyun
172*4882a593Smuzhiyun buf += ALIGN(hdr->ramdisk_size, hdr->page_size);
173*4882a593Smuzhiyun sha1_update(&ctx, (const uchar *)buf, hdr->second_size);
174*4882a593Smuzhiyun sha1_update(&ctx, (const uchar *)&hdr->second_size, sizeof(hdr->second_size));
175*4882a593Smuzhiyun
176*4882a593Smuzhiyun if (hdr->header_version > 0) {
177*4882a593Smuzhiyun buf += ALIGN(hdr->second_size, hdr->page_size);
178*4882a593Smuzhiyun sha1_update(&ctx, (const uchar *)buf, hdr->recovery_dtbo_size);
179*4882a593Smuzhiyun sha1_update(&ctx, (const uchar *)&hdr->recovery_dtbo_size, sizeof(hdr->recovery_dtbo_size));
180*4882a593Smuzhiyun }
181*4882a593Smuzhiyun if (hdr->header_version > 1) {
182*4882a593Smuzhiyun buf += ALIGN(hdr->recovery_dtbo_size, hdr->page_size);
183*4882a593Smuzhiyun sha1_update(&ctx, (const uchar *)buf, hdr->dtb_size);
184*4882a593Smuzhiyun sha1_update(&ctx, (const uchar *)&hdr->dtb_size, sizeof(hdr->dtb_size));
185*4882a593Smuzhiyun }
186*4882a593Smuzhiyun
187*4882a593Smuzhiyun sha1_finish(&ctx, hash);
188*4882a593Smuzhiyun
189*4882a593Smuzhiyun if (memcmp(hash, hdr->id, 20)) {
190*4882a593Smuzhiyun print_hash("Hash from header", (u8 *)hdr->id, 20);
191*4882a593Smuzhiyun print_hash("Hash real", (u8 *)hash, 20);
192*4882a593Smuzhiyun return -EBADFD;
193*4882a593Smuzhiyun }
194*4882a593Smuzhiyun
195*4882a593Smuzhiyun printf("== Android: hash OK, 0x%08lx\n", (ulong)data->boot_addr);
196*4882a593Smuzhiyun
197*4882a593Smuzhiyun return 0;
198*4882a593Smuzhiyun }
199*4882a593Smuzhiyun
200*4882a593Smuzhiyun #else
spl_hash_android(struct task_data * data)201*4882a593Smuzhiyun int spl_hash_android(struct task_data *data)
202*4882a593Smuzhiyun {
203*4882a593Smuzhiyun struct andr_img_hdr *hdr = (void *)CONFIG_SPL_BOOT_IMAGE_BUF;
204*4882a593Smuzhiyun struct udevice *dev;
205*4882a593Smuzhiyun sha_context ctx;
206*4882a593Smuzhiyun uchar hash[32];
207*4882a593Smuzhiyun void *buf;
208*4882a593Smuzhiyun
209*4882a593Smuzhiyun debug("== Android: hash start\n");
210*4882a593Smuzhiyun
211*4882a593Smuzhiyun if (hdr->header_version >= 3)
212*4882a593Smuzhiyun return -EINVAL;
213*4882a593Smuzhiyun
214*4882a593Smuzhiyun ctx.algo = CRYPTO_SHA1;
215*4882a593Smuzhiyun dev = crypto_get_device(ctx.algo);
216*4882a593Smuzhiyun if (!dev) {
217*4882a593Smuzhiyun printf("No crypto device for sha1\n");
218*4882a593Smuzhiyun return -ENODEV;
219*4882a593Smuzhiyun }
220*4882a593Smuzhiyun
221*4882a593Smuzhiyun ctx.length = hdr->kernel_size + sizeof(hdr->kernel_size) +
222*4882a593Smuzhiyun hdr->ramdisk_size + sizeof(hdr->ramdisk_size) +
223*4882a593Smuzhiyun hdr->second_size + sizeof(hdr->second_size);
224*4882a593Smuzhiyun if (hdr->header_version > 0)
225*4882a593Smuzhiyun ctx.length += hdr->recovery_dtbo_size + sizeof(hdr->recovery_dtbo_size);
226*4882a593Smuzhiyun if (hdr->header_version > 1)
227*4882a593Smuzhiyun ctx.length += hdr->dtb_size + sizeof(hdr->dtb_size);
228*4882a593Smuzhiyun
229*4882a593Smuzhiyun crypto_sha_init(dev, &ctx);
230*4882a593Smuzhiyun
231*4882a593Smuzhiyun buf = (void *)hdr + hdr->page_size;
232*4882a593Smuzhiyun crypto_sha_update(dev, buf, hdr->kernel_size);
233*4882a593Smuzhiyun crypto_sha_update(dev, &hdr->kernel_size, sizeof(hdr->kernel_size));
234*4882a593Smuzhiyun
235*4882a593Smuzhiyun buf += ALIGN(hdr->kernel_size, hdr->page_size);
236*4882a593Smuzhiyun crypto_sha_update(dev, buf, hdr->ramdisk_size);
237*4882a593Smuzhiyun crypto_sha_update(dev, &hdr->ramdisk_size, sizeof(hdr->ramdisk_size));
238*4882a593Smuzhiyun
239*4882a593Smuzhiyun buf += ALIGN(hdr->ramdisk_size, hdr->page_size);
240*4882a593Smuzhiyun crypto_sha_update(dev, buf, hdr->second_size);
241*4882a593Smuzhiyun crypto_sha_update(dev, &hdr->second_size, sizeof(hdr->second_size));
242*4882a593Smuzhiyun
243*4882a593Smuzhiyun if (hdr->header_version > 0) {
244*4882a593Smuzhiyun buf += ALIGN(hdr->second_size, hdr->page_size);
245*4882a593Smuzhiyun crypto_sha_update(dev, buf, hdr->recovery_dtbo_size);
246*4882a593Smuzhiyun crypto_sha_update(dev, &hdr->recovery_dtbo_size, sizeof(hdr->recovery_dtbo_size));
247*4882a593Smuzhiyun }
248*4882a593Smuzhiyun if (hdr->header_version > 1) {
249*4882a593Smuzhiyun buf += ALIGN(hdr->recovery_dtbo_size, hdr->page_size);
250*4882a593Smuzhiyun crypto_sha_update(dev, buf, hdr->dtb_size);
251*4882a593Smuzhiyun crypto_sha_update(dev, &hdr->dtb_size, sizeof(hdr->dtb_size));
252*4882a593Smuzhiyun }
253*4882a593Smuzhiyun
254*4882a593Smuzhiyun crypto_sha_final(dev, &ctx, hash);
255*4882a593Smuzhiyun
256*4882a593Smuzhiyun if (memcmp(hash, hdr->id, 20)) {
257*4882a593Smuzhiyun print_hash("Hash from header", (u8 *)hdr->id, 20);
258*4882a593Smuzhiyun print_hash("Hash real", (u8 *)hash, 20);
259*4882a593Smuzhiyun return -EBADFD;
260*4882a593Smuzhiyun }
261*4882a593Smuzhiyun
262*4882a593Smuzhiyun debug("== Android: hash OK, 0x%08lx\n", (ulong)data->boot_addr);
263*4882a593Smuzhiyun
264*4882a593Smuzhiyun return 0;
265*4882a593Smuzhiyun }
266*4882a593Smuzhiyun
267*4882a593Smuzhiyun #endif
268*4882a593Smuzhiyun #endif
269*4882a593Smuzhiyun
270*4882a593Smuzhiyun #ifdef CONFIG_ROCKCHIP_FIT_IMAGE
spl_load_fit(struct task_data * data)271*4882a593Smuzhiyun int spl_load_fit(struct task_data *data)
272*4882a593Smuzhiyun {
273*4882a593Smuzhiyun struct spl_load_info *info = &data->info;
274*4882a593Smuzhiyun void *buf = (void *)CONFIG_SPL_BOOT_IMAGE_BUF;
275*4882a593Smuzhiyun disk_partition_t part;
276*4882a593Smuzhiyun ulong blkcnt;
277*4882a593Smuzhiyun int size;
278*4882a593Smuzhiyun
279*4882a593Smuzhiyun debug("== FIT: load start\n");
280*4882a593Smuzhiyun
281*4882a593Smuzhiyun if (part_get_info_by_name(info->dev, "boot", &part) < 0) {
282*4882a593Smuzhiyun printf("No boot partition\n");
283*4882a593Smuzhiyun return -ENOENT;
284*4882a593Smuzhiyun }
285*4882a593Smuzhiyun
286*4882a593Smuzhiyun blkcnt = BLK_CNT(sizeof(struct fdt_header), info->bl_len);
287*4882a593Smuzhiyun if (info->read(info, part.start, blkcnt, buf) != blkcnt)
288*4882a593Smuzhiyun return -EIO;
289*4882a593Smuzhiyun
290*4882a593Smuzhiyun if (fdt_check_header(buf))
291*4882a593Smuzhiyun return -EINVAL;
292*4882a593Smuzhiyun
293*4882a593Smuzhiyun size = fit_get_totalsize(buf, &size);
294*4882a593Smuzhiyun blkcnt = BLK_CNT(size, info->bl_len);
295*4882a593Smuzhiyun if (info->read(info, part.start, blkcnt, buf) != blkcnt)
296*4882a593Smuzhiyun return -EIO;
297*4882a593Smuzhiyun
298*4882a593Smuzhiyun flush_dcache_range((ulong)buf, (ulong)buf + blkcnt);
299*4882a593Smuzhiyun
300*4882a593Smuzhiyun debug("== FIT: load 0x%08x size OK\n", size);
301*4882a593Smuzhiyun
302*4882a593Smuzhiyun return 0;
303*4882a593Smuzhiyun }
304*4882a593Smuzhiyun #endif
305*4882a593Smuzhiyun
306