xref: /rk3399_rockchip-uboot/tools/rkcommon.c (revision 8c7c24c01a6f59f93e6564743e0e75c973d73387)
1 /*
2  * (C) Copyright 2015 Google,  Inc
3  * Written by Simon Glass <sjg@chromium.org>
4  *
5  * (C) 2017 Theobroma Systems Design und Consulting GmbH
6  *
7  * SPDX-License-Identifier:	GPL-2.0+
8  *
9  * Helper functions for Rockchip images
10  */
11 
12 #include "imagetool.h"
13 #include <image.h>
14 #include <u-boot/sha256.h>
15 #include <rc4.h>
16 #include "mkimage.h"
17 #include "rkcommon.h"
18 
19 enum {
20 	RK_MAGIC		= 0x0ff0aa55,
21 	RK_MAGIC_V2		= 0x534E4B52,
22 };
23 
24 enum {
25 	RK_HEADER_V1	= 1,
26 	RK_HEADER_V2	= 2,
27 };
28 
29 enum hash_type {
30 	HASH_NONE	= 0,
31 	HASH_SHA256	= 1,
32 	HASH_SHA512	= 2,
33 };
34 
35 /**
36  * struct image_entry
37  *
38  * @size_and_off:	[31:16]image size;[15:0]image offset
39  * @address:	default as 0xFFFFFFFF
40  * @flag:	no use
41  * @counter:	no use
42  * @hash:	hash of image
43  *
44  */
45 struct image_entry {
46 	uint32_t size_and_off;
47 	uint32_t address;
48 	uint32_t flag;
49 	uint32_t counter;
50 	uint8_t reserved[8];
51 	uint8_t hash[64];
52 };
53 
54 /**
55  * struct header0_info_v2 - from rk35 on boot rom using the new header block
56  *
57  * This is stored at SD card block 64 (where each block is 512 bytes)
58  *
59  * @magic:	Magic (must be RK_MAGIC_V2)
60  * @size_and_nimage:	[31:16]number of images;[15:0]
61  *			offset to hash field of header(unit as 4Byte)
62  * @boot_flag:	[3:0]hash type(0:none,1:sha256,2:sha512)
63  * @signature:	hash or signature for header info
64  *
65  */
66 struct header0_info_v2 {
67 	uint32_t magic;
68 	uint8_t reserved[4];
69 	uint32_t size_and_nimage;
70 	uint32_t boot_flag;
71 	uint8_t reserved1[104];
72 	struct image_entry images[4];
73 	uint8_t reserved2[1064];
74 	uint8_t hash[512];
75 };
76 
77 /**
78  * struct header0_info - header block for boot ROM
79  *
80  * This is stored at SD card block 64 (where each block is 512 bytes, or at
81  * the start of SPI flash. It is encoded with RC4.
82  *
83  * @magic:		Magic (must be RK_MAGIC)
84  * @disable_rc4:	0 to use rc4 for boot image,  1 to use plain binary
85  * @init_offset:	Offset in blocks of the SPL code from this header
86  *			block. E.g. 4 means 2KB after the start of this header.
87  * Other fields are not used by U-Boot
88  */
89 struct header0_info {
90 	uint32_t magic;
91 	uint8_t reserved[4];
92 	uint32_t disable_rc4;
93 	uint16_t init_offset;
94 	uint8_t reserved1[492];
95 	uint16_t init_size;
96 	uint16_t init_boot_size;
97 	uint8_t reserved2[2];
98 };
99 
100 /**
101  * struct header1 info
102  */
103 struct header1_info {
104 	uint32_t magic;
105 };
106 
107 /**
108  * struct spl_info - spl info for each chip
109  *
110  * @imagename:		Image name(passed by "mkimage -n")
111  * @spl_hdr:		Boot ROM requires a 4-bytes spl header
112  * @spl_size:		Spl size(include extra 4-bytes spl header)
113  * @spl_rc4:		RC4 encode the SPL binary (same key as header)
114  * @header_ver:		header block version
115  */
116 struct spl_info {
117 	const char *imagename;
118 	const char *spl_hdr;
119 	const uint32_t spl_size;
120 	const bool spl_rc4;
121 	const uint32_t header_ver;
122 };
123 
124 static struct spl_info spl_infos[] = {
125 	{ "rk3036", "RK30", 0x1000, false, RK_HEADER_V1 },
126 	{ "rk3066", "RK30", 0x8000, true, RK_HEADER_V1 },
127 	{ "rk3128", "RK31", 0x2000 - 0x800, false, RK_HEADER_V1 },
128 	{ "px3se", "RK31", 0x2000 - 0x800, false, RK_HEADER_V1 },
129 	{ "rk3188", "RK31", 0x8000 - 0x800, true, RK_HEADER_V1 },
130 	{ "rk322x", "RK32", 0x8000 - 0x1000, false, RK_HEADER_V1 },
131 	{ "rk3288", "RK32", 0x8000, false, RK_HEADER_V1 },
132 	{ "rk3308", "RK33", 0x40000 - 0x1000, false, RK_HEADER_V1 },
133 	{ "rk3328", "RK32", 0x8000 - 0x800, false, RK_HEADER_V1 },
134 	{ "rk3368", "RK33", 0x8000 - 0x1000, false, RK_HEADER_V1 },
135 	{ "rk3399", "RK33", 0x30000 - 0x2000, false, RK_HEADER_V1 },
136 	{ "rk3326", "RK33", 0x4000 - 0x1000, false, RK_HEADER_V1 },
137 	{ "px30", "RK33", 0x4000 - 0x1000, false, RK_HEADER_V1 },
138 	{ "rv1108", "RK11", 0x1800, false, RK_HEADER_V1 },
139 	{ "rv1126", "110B", 0x10000 - 0x1000, false, RK_HEADER_V1 },
140 	{ "rk1808", "RK18", 0x200000 - 0x2000, false, RK_HEADER_V1 },
141 	{ "rk3528", "RK35", 0x10000 - 0x1000, false, RK_HEADER_V2 },
142 	{ "rk3562", "RK35", 0x10000 - 0x1000, false, RK_HEADER_V2 },
143 	{ "rk3568", "RK35", 0x10000 - 0x1000, false, RK_HEADER_V2 },
144 	{ "rk3576", "RK35", 0x80000 - 0x1000, false, RK_HEADER_V2 },
145 	{ "rk3588", "RK35", 0x100000 - 0x1000, false, RK_HEADER_V2 },
146 	{ "rk3506", "RK35", 0x40000 - 0x1000, false, RK_HEADER_V2 },
147 };
148 
149 /**
150  * struct spl_params - spl params parsed in check_params()
151  *
152  * @init_file:		Init data file path
153  * @init_size:		Aligned size of init data in bytes
154  * @boot_file:		Boot data file path
155  * @boot_size:		Aligned size of boot data in bytes
156  */
157 
158 struct spl_params {
159 	char *init_file;
160 	uint32_t init_size;
161 	char *boot_file;
162 	uint32_t boot_size;
163 };
164 
165 static struct spl_params spl_params = { 0 };
166 
167 static unsigned char rc4_key[16] = {
168 	124, 78, 3, 4, 85, 5, 9, 7,
169 	45, 44, 123, 56, 23, 13, 23, 17
170 };
171 
172 static struct spl_info *rkcommon_get_spl_info(char *imagename)
173 {
174 	int i;
175 
176 	if (!imagename)
177 		return NULL;
178 
179 	for (i = 0; i < ARRAY_SIZE(spl_infos); i++)
180 		if (!strncmp(imagename, spl_infos[i].imagename, 6))
181 			return spl_infos + i;
182 
183 	return NULL;
184 }
185 
186 static int rkcommon_get_aligned_size(struct image_tool_params *params,
187 				     const char *fname)
188 {
189 	int size;
190 
191 	size = imagetool_get_filesize(params, fname);
192 	if (size < 0)
193 		return -1;
194 
195 	/*
196 	 * Pad to a 2KB alignment, as required for init/boot size by the ROM
197 	 * (see https://lists.denx.de/pipermail/u-boot/2017-May/293268.html)
198 	 */
199 	return ROUND(size, RK_SIZE_ALIGN);
200 }
201 
202 int rkcommon_check_params(struct image_tool_params *params)
203 {
204 	int i;
205 
206 	/*
207 	 * If this is a operation (list or extract), the don't require
208 	 * imagename to be set.
209 	 */
210 	if (params->lflag || params->iflag)
211 		return EXIT_SUCCESS;
212 
213 	if (!rkcommon_get_spl_info(params->imagename))
214 		goto err_spl_info;
215 
216 	spl_params.init_file = params->datafile;
217 
218 	spl_params.boot_file = strchr(spl_params.init_file, ':');
219 	if (spl_params.boot_file) {
220 		*spl_params.boot_file = '\0';
221 		spl_params.boot_file += 1;
222 	}
223 
224 	spl_params.init_size =
225 		rkcommon_get_aligned_size(params, spl_params.init_file);
226 	if (spl_params.init_size < 0)
227 		return EXIT_FAILURE;
228 
229 	/* Boot file is optional, and only for back-to-bootrom functionality. */
230 	if (spl_params.boot_file) {
231 		spl_params.boot_size =
232 			rkcommon_get_aligned_size(params, spl_params.boot_file);
233 		if (spl_params.boot_size < 0)
234 			return EXIT_FAILURE;
235 	}
236 
237 	if (spl_params.init_size > rkcommon_get_spl_size(params)) {
238 		fprintf(stderr,
239 			"Error: SPL image is too large (size %#x than %#x)\n",
240 			spl_params.init_size, rkcommon_get_spl_size(params));
241 		return EXIT_FAILURE;
242 	}
243 
244 	return EXIT_SUCCESS;
245 
246 err_spl_info:
247 	fprintf(stderr, "ERROR: imagename (%s) is not supported!\n",
248 		params->imagename ? params->imagename : "NULL");
249 
250 	fprintf(stderr, "Available imagename:");
251 	for (i = 0; i < ARRAY_SIZE(spl_infos); i++)
252 		fprintf(stderr, "\t%s", spl_infos[i].imagename);
253 	fprintf(stderr, "\n");
254 
255 	return EXIT_FAILURE;
256 }
257 
258 const char *rkcommon_get_spl_hdr(struct image_tool_params *params)
259 {
260 	struct spl_info *info = rkcommon_get_spl_info(params->imagename);
261 
262 	/*
263 	 * info would not be NULL, because of we checked params before.
264 	 */
265 	return info->spl_hdr;
266 }
267 
268 int rkcommon_get_spl_size(struct image_tool_params *params)
269 {
270 	struct spl_info *info = rkcommon_get_spl_info(params->imagename);
271 
272 	/*
273 	 * info would not be NULL, because of we checked params before.
274 	 */
275 	return info->spl_size;
276 }
277 
278 bool rkcommon_need_rc4_spl(struct image_tool_params *params)
279 {
280 	struct spl_info *info = rkcommon_get_spl_info(params->imagename);
281 
282 	/*
283 	 * info would not be NULL, because of we checked params before.
284 	 */
285 	return info->spl_rc4;
286 }
287 
288 bool rkcommon_is_header_v2(struct image_tool_params *params)
289 {
290 	struct spl_info *info = rkcommon_get_spl_info(params->imagename);
291 
292 	/*
293 	 * info would not be NULL, because of we checked params before.
294 	 */
295 	return (info->header_ver == RK_HEADER_V2);
296 }
297 
298 static void do_sha256_hash(uint8_t *buf, uint32_t size, uint8_t *out)
299 {
300 	sha256_context ctx;
301 
302 	sha256_starts(&ctx);
303 	sha256_update(&ctx, buf, size);
304 	sha256_finish(&ctx, out);
305 }
306 
307 static void rkcommon_set_header0(void *buf, struct image_tool_params *params)
308 {
309 	struct header0_info *hdr = buf;
310 
311 	memset(buf, '\0', RK_INIT_OFFSET * RK_BLK_SIZE);
312 	hdr->magic = RK_MAGIC;
313 	hdr->disable_rc4 = !rkcommon_need_rc4_spl(params);
314 	hdr->init_offset = RK_INIT_OFFSET;
315 	hdr->init_size = spl_params.init_size / RK_BLK_SIZE;
316 
317 	/*
318 	 * init_boot_size needs to be set, as it is read by the BootROM
319 	 * to determine the size of the next-stage bootloader (e.g. U-Boot
320 	 * proper), when used with the back-to-bootrom functionality.
321 	 *
322 	 * see https://lists.denx.de/pipermail/u-boot/2017-May/293267.html
323 	 * for a more detailed explanation by Andy Yan
324 	 */
325 	if (spl_params.boot_file)
326 		hdr->init_boot_size =
327 			hdr->init_size + spl_params.boot_size / RK_BLK_SIZE;
328 	else
329 		hdr->init_boot_size =
330 			hdr->init_size + RK_MAX_BOOT_SIZE / RK_BLK_SIZE;
331 
332 	rc4_encode(buf, RK_BLK_SIZE, rc4_key);
333 }
334 
335 static void rkcommon_set_header0_v2(void *buf, struct image_tool_params *params)
336 {
337 	struct header0_info_v2 *hdr = buf;
338 	uint32_t sector_offset, image_sector_count;
339 	uint32_t image_size_array[2];
340 	uint8_t *image_ptr = NULL;
341 	int i;
342 
343 	printf("Image Type:   Rockchip %s boot image\n", rkcommon_get_spl_hdr(params));
344 	memset(buf, '\0', RK_INIT_OFFSET * RK_BLK_SIZE);
345 	hdr->magic   = cpu_to_le32(RK_MAGIC_V2);
346 	hdr->size_and_nimage = cpu_to_le32((2 << 16) + 384);
347 	hdr->boot_flag = cpu_to_le32(HASH_SHA256);
348 	sector_offset = 4;
349 	image_size_array[0] = spl_params.init_size;
350 	image_size_array[1] = spl_params.boot_size;
351 
352 	for (i = 0; i < 2; i++) {
353 		image_sector_count = image_size_array[i] / RK_BLK_SIZE;
354 		hdr->images[i].size_and_off = cpu_to_le32((image_sector_count << 16) + sector_offset);
355 		hdr->images[i].address = 0xFFFFFFFF;
356 		hdr->images[i].counter = cpu_to_le32(i + 1);
357 		image_ptr = buf + sector_offset * RK_BLK_SIZE;
358 		do_sha256_hash(image_ptr, image_size_array[i], hdr->images[i].hash);
359 		sector_offset = sector_offset + image_sector_count;
360 	}
361 
362 	do_sha256_hash(buf, (void *)hdr->hash - buf, hdr->hash);
363 }
364 
365 void rkcommon_set_header(void *buf,  struct stat *sbuf,  int ifd,
366 			 struct image_tool_params *params)
367 {
368 	struct header1_info *hdr = buf + RK_SPL_HDR_START;
369 
370 	if (rkcommon_is_header_v2(params)) {
371 		rkcommon_set_header0_v2(buf, params);
372 	} else {
373 		rkcommon_set_header0(buf, params);
374 
375 		/* Set up the SPL name (i.e. copy spl_hdr over) */
376 		if (memcmp(&hdr->magic, "RSAK", 4))
377 			memcpy(&hdr->magic, rkcommon_get_spl_hdr(params), RK_SPL_HDR_SIZE);
378 
379 		if (rkcommon_need_rc4_spl(params))
380 			rkcommon_rc4_encode_spl(buf, RK_SPL_HDR_START,
381 						spl_params.init_size);
382 
383 		if (spl_params.boot_file) {
384 			if (rkcommon_need_rc4_spl(params))
385 				rkcommon_rc4_encode_spl(buf + RK_SPL_HDR_START,
386 							spl_params.init_size,
387 							spl_params.boot_size);
388 		}
389 	}
390 }
391 
392 static inline unsigned int rkcommon_offset_to_spi(unsigned int offset)
393 {
394 	/*
395 	 * While SD/MMC images use a flat addressing, SPI images are padded
396 	 * to use the first 2K of every 4K sector only.
397 	 */
398 	return ((offset & ~0x7ff) << 1) + (offset & 0x7ff);
399 }
400 
401 static int rkcommon_parse_header(const void *buf, struct header0_info *header0,
402 				 struct spl_info **spl_info)
403 {
404 	unsigned int hdr1_offset;
405 	struct header1_info *hdr1_sdmmc, *hdr1_spi;
406 	int i;
407 
408 	if (spl_info)
409 		*spl_info = NULL;
410 
411 	/*
412 	 * The first header (hdr0) is always RC4 encoded, so try to decrypt
413 	 * with the well-known key.
414 	 */
415 	memcpy((void *)header0, buf, sizeof(struct header0_info));
416 	rc4_encode((void *)header0, sizeof(struct header0_info), rc4_key);
417 
418 	if (header0->magic != RK_MAGIC)
419 		return -EPROTO;
420 
421 	/* We don't support RC4 encoded image payloads here, yet... */
422 	if (header0->disable_rc4 == 0)
423 		return -ENOSYS;
424 
425 	hdr1_offset = header0->init_offset * RK_BLK_SIZE;
426 	hdr1_sdmmc = (struct header1_info *)(buf + hdr1_offset);
427 	hdr1_spi = (struct header1_info *)(buf +
428 					   rkcommon_offset_to_spi(hdr1_offset));
429 
430 	for (i = 0; i < ARRAY_SIZE(spl_infos); i++) {
431 		if (!memcmp(&hdr1_sdmmc->magic, spl_infos[i].spl_hdr, 4)) {
432 			if (spl_info)
433 				*spl_info = &spl_infos[i];
434 			return IH_TYPE_RKSD;
435 		} else if (!memcmp(&hdr1_spi->magic, spl_infos[i].spl_hdr, 4)) {
436 			if (spl_info)
437 				*spl_info = &spl_infos[i];
438 			return IH_TYPE_RKSPI;
439 		}
440 	}
441 
442 	return -1;
443 }
444 
445 static int rkcommon_parse_header_v2(const void *buf, struct header0_info_v2 *header)
446 {
447 	memcpy((void *)header, buf, sizeof(struct header0_info_v2));
448 
449 	if (le32_to_cpu(header->magic) != RK_MAGIC_V2)
450 		return -EPROTO;
451 
452 	return 0;
453 }
454 
455 int rkcommon_verify_header(unsigned char *buf, int size,
456 			   struct image_tool_params *params)
457 {
458 	struct header0_info header0;
459 	struct spl_info *img_spl_info, *spl_info;
460 	int ret;
461 
462 	/* spl_hdr is abandon on header_v2 */
463 	if ((*(uint32_t *)buf) == RK_MAGIC_V2)
464 		return 0;
465 
466 	ret = rkcommon_parse_header(buf, &header0, &img_spl_info);
467 
468 	/* If this is the (unimplemented) RC4 case, then rewrite the result */
469 	if (ret == -ENOSYS)
470 		return 0;
471 
472 	if (ret < 0)
473 		return ret;
474 
475 	/*
476 	 * If no 'imagename' is specified via the commandline (e.g. if this is
477 	 * 'dumpimage -l' w/o any further constraints), we accept any spl_info.
478 	 */
479 	if (params->imagename == NULL)
480 		return 0;
481 
482 	/* Match the 'imagename' against the 'spl_hdr' found */
483 	spl_info = rkcommon_get_spl_info(params->imagename);
484 	if (spl_info && img_spl_info)
485 		return strcmp(spl_info->spl_hdr, img_spl_info->spl_hdr);
486 
487 	return -ENOENT;
488 }
489 
490 void rkcommon_print_header(const void *buf)
491 {
492 	struct header0_info header0;
493 	struct header0_info_v2 header0_v2;
494 	struct spl_info *spl_info;
495 	uint8_t image_type;
496 	int ret, boot_size, init_size;
497 
498 	if ((*(uint32_t *)buf) == RK_MAGIC_V2) {
499 		ret = rkcommon_parse_header_v2(buf, &header0_v2);
500 
501 		if (ret < 0) {
502 			fprintf(stderr, "Error: image verification failed\n");
503 			return;
504 		}
505 
506 		init_size = header0_v2.images[0].size_and_off >> 16;
507 		init_size = init_size * RK_BLK_SIZE;
508 		boot_size = header0_v2.images[1].size_and_off >> 16;
509 		boot_size = boot_size * RK_BLK_SIZE;
510 	} else {
511 		ret = rkcommon_parse_header(buf, &header0, &spl_info);
512 
513 		/* If this is the (unimplemented) RC4 case, then fail silently */
514 		if (ret == -ENOSYS)
515 			return;
516 
517 		if (ret < 0) {
518 			fprintf(stderr, "Error: image verification failed\n");
519 			return;
520 		}
521 
522 		image_type = ret;
523 		init_size = header0.init_size * RK_BLK_SIZE;
524 		boot_size = header0.init_boot_size * RK_BLK_SIZE - init_size;
525 		printf("Image Type:   Rockchip %s (%s) boot image\n",
526 		       spl_info->spl_hdr,
527 		       (image_type == IH_TYPE_RKSD) ? "SD/MMC" : "SPI");
528 	}
529 
530 	printf("Init Data Size: %d bytes\n", init_size);
531 
532 	if (boot_size != RK_MAX_BOOT_SIZE)
533 		printf("Boot Data Size: %d bytes\n", boot_size);
534 }
535 
536 void rkcommon_rc4_encode_spl(void *buf, unsigned int offset, unsigned int size)
537 {
538 	unsigned int remaining = size;
539 
540 	while (remaining > 0) {
541 		int step = (remaining > RK_BLK_SIZE) ? RK_BLK_SIZE : remaining;
542 
543 		rc4_encode(buf + offset, step, rc4_key);
544 		offset += RK_BLK_SIZE;
545 		remaining -= step;
546 	}
547 }
548 
549 int rkcommon_vrec_header(struct image_tool_params *params,
550 			 struct image_type_params *tparams)
551 {
552 	/*
553 	 * The SPL image looks as follows:
554 	 *
555 	 * 0x0    header0 (see rkcommon.c)
556 	 * 0x800  spl_name ('RK30', ..., 'RK33')
557 	 *        (start of the payload for AArch64 payloads: we expect the
558 	 *        first 4 bytes to be available for overwriting with our
559 	 *        spl_name)
560 	 * 0x804  first instruction to be executed
561 	 *        (start of the image/payload for 32bit payloads)
562 	 *
563 	 * For AArch64 (ARMv8) payloads, natural alignment (8-bytes) is
564 	 * required for its sections (so the image we receive needs to
565 	 * have the first 4 bytes reserved for the spl_name).  Reserving
566 	 * these 4 bytes is done using the BOOT0_HOOK infrastructure.
567 	 *
568 	 * The header is always at 0x800 (as we now use a payload
569 	 * prepadded using the boot0 hook for all targets): the first
570 	 * 4 bytes of these images can safely be overwritten using the
571 	 * boot magic.
572 	 */
573 	tparams->header_size = RK_SPL_HDR_START;
574 
575 	/* Allocate, clear and install the header */
576 	tparams->hdr = malloc(tparams->header_size);
577 	if (!tparams->hdr) {
578 		fprintf(stderr, "%s: Can't alloc header: %s\n",
579 			params->cmdname, strerror(errno));
580 		exit(EXIT_FAILURE);
581 	}
582 	memset(tparams->hdr, 0, tparams->header_size);
583 
584 	/*
585 	 * We need to store the original file-size (i.e. before padding), as
586 	 * imagetool does not set this during its adjustment of file_size.
587 	 */
588 	params->orig_file_size = tparams->header_size +
589 		spl_params.init_size + spl_params.boot_size;
590 
591 	params->file_size = ROUND(params->orig_file_size, RK_SIZE_ALIGN);
592 
593 	/* Ignoring pad len, since we are using our own copy_image() */
594 	return 0;
595 }
596 
597 static int pad_file(struct image_tool_params *params, int ifd, int pad)
598 {
599 	uint8_t zeros[4096];
600 
601 	memset(zeros, 0, sizeof(zeros));
602 
603 	while (pad > 0) {
604 		int todo = sizeof(zeros);
605 
606 		if (todo > pad)
607 			todo = pad;
608 		if (write(ifd, (char *)&zeros, todo) != todo) {
609 			fprintf(stderr, "%s: Write error on %s: %s\n",
610 				params->cmdname, params->imagefile,
611 				strerror(errno));
612 			return -1;
613 		}
614 		pad -= todo;
615 	}
616 
617 	return 0;
618 }
619 
620 static int copy_file(struct image_tool_params *params, int ifd,
621 		     const char *file, int padded_size)
622 {
623 	int dfd;
624 	struct stat sbuf;
625 	unsigned char *ptr;
626 	int size;
627 
628 	if (params->vflag)
629 		fprintf(stderr, "Adding Image %s\n", file);
630 
631 	dfd = open(file, O_RDONLY | O_BINARY);
632 	if (dfd < 0) {
633 		fprintf(stderr, "%s: Can't open %s: %s\n",
634 			params->cmdname, file, strerror(errno));
635 		return -1;
636 	}
637 
638 	if (fstat(dfd, &sbuf) < 0) {
639 		fprintf(stderr, "%s: Can't stat %s: %s\n",
640 			params->cmdname, file, strerror(errno));
641 		goto err_close;
642 	}
643 
644 	if (params->vflag)
645 		fprintf(stderr, "Size %u(pad to %u)\n",
646 			(int)sbuf.st_size, padded_size);
647 
648 	ptr = mmap(0, sbuf.st_size, PROT_READ, MAP_SHARED, dfd, 0);
649 	if (ptr == MAP_FAILED) {
650 		fprintf(stderr, "%s: Can't read %s: %s\n",
651 			params->cmdname, file, strerror(errno));
652 		goto err_munmap;
653 	}
654 
655 	size = sbuf.st_size;
656 	if (write(ifd, ptr, size) != size) {
657 		fprintf(stderr, "%s: Write error on %s: %s\n",
658 			params->cmdname, params->imagefile, strerror(errno));
659 		goto err_munmap;
660 	}
661 
662 	munmap((void *)ptr, sbuf.st_size);
663 	close(dfd);
664 	return pad_file(params, ifd, padded_size - size);
665 
666 err_munmap:
667 	munmap((void *)ptr, sbuf.st_size);
668 err_close:
669 	close(dfd);
670 	return -1;
671 }
672 
673 int rockchip_copy_image(int ifd, struct image_tool_params *params)
674 {
675 	int ret;
676 
677 	ret = copy_file(params, ifd, spl_params.init_file,
678 			spl_params.init_size);
679 	if (ret)
680 		return ret;
681 
682 	if (spl_params.boot_file) {
683 		ret = copy_file(params, ifd, spl_params.boot_file,
684 				spl_params.boot_size);
685 		if (ret)
686 			return ret;
687 	}
688 
689 	return pad_file(params, ifd,
690 			params->file_size - params->orig_file_size);
691 }
692