You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
361 lines
8.5 KiB
361 lines
8.5 KiB
/*
|
|
* Copyright (C) 2013 Gabor Juhos <juhosg@openwrt.org>
|
|
*
|
|
* This program is free software; you can redistribute it and/or modify it
|
|
* under the terms of the GNU General Public License version 2 as published
|
|
* by the Free Software Foundation.
|
|
*
|
|
*/
|
|
|
|
#define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
|
|
|
|
#include <linux/module.h>
|
|
#include <linux/init.h>
|
|
#include <linux/kernel.h>
|
|
#include <linux/slab.h>
|
|
#include <linux/vmalloc.h>
|
|
#include <linux/mtd/mtd.h>
|
|
#include <linux/mtd/partitions.h>
|
|
#include <linux/byteorder/generic.h>
|
|
|
|
#include "mtdsplit.h"
|
|
|
|
/*
|
|
* uimage_header itself is only 64B, but it may be prepended with another data.
|
|
* Currently the biggest size is for Edimax devices: 20B + 64B
|
|
*/
|
|
#define MAX_HEADER_LEN 84
|
|
|
|
#define IH_MAGIC 0x27051956 /* Image Magic Number */
|
|
#define IH_NMLEN 32 /* Image Name Length */
|
|
|
|
#define IH_OS_LINUX 5 /* Linux */
|
|
|
|
#define IH_TYPE_KERNEL 2 /* OS Kernel Image */
|
|
#define IH_TYPE_FILESYSTEM 7 /* Filesystem Image */
|
|
|
|
/*
|
|
* Legacy format image header,
|
|
* all data in network byte order (aka natural aka bigendian).
|
|
*/
|
|
struct uimage_header {
|
|
uint32_t ih_magic; /* Image Header Magic Number */
|
|
uint32_t ih_hcrc; /* Image Header CRC Checksum */
|
|
uint32_t ih_time; /* Image Creation Timestamp */
|
|
uint32_t ih_size; /* Image Data Size */
|
|
uint32_t ih_load; /* Data Load Address */
|
|
uint32_t ih_ep; /* Entry Point Address */
|
|
uint32_t ih_dcrc; /* Image Data CRC Checksum */
|
|
uint8_t ih_os; /* Operating System */
|
|
uint8_t ih_arch; /* CPU architecture */
|
|
uint8_t ih_type; /* Image Type */
|
|
uint8_t ih_comp; /* Compression Type */
|
|
uint8_t ih_name[IH_NMLEN]; /* Image Name */
|
|
};
|
|
|
|
static int
|
|
read_uimage_header(struct mtd_info *mtd, size_t offset, u_char *buf,
|
|
size_t header_len)
|
|
{
|
|
size_t retlen;
|
|
int ret;
|
|
|
|
ret = mtd_read(mtd, offset, header_len, &retlen, buf);
|
|
if (ret) {
|
|
pr_debug("read error in \"%s\"\n", mtd->name);
|
|
return ret;
|
|
}
|
|
|
|
if (retlen != header_len) {
|
|
pr_debug("short read in \"%s\"\n", mtd->name);
|
|
return -EIO;
|
|
}
|
|
|
|
return 0;
|
|
}
|
|
|
|
/**
|
|
* __mtdsplit_parse_uimage - scan partition and create kernel + rootfs parts
|
|
*
|
|
* @find_header: function to call for a block of data that will return offset
|
|
* of a valid uImage header if found
|
|
*/
|
|
static int __mtdsplit_parse_uimage(struct mtd_info *master,
|
|
struct mtd_partition **pparts,
|
|
struct mtd_part_parser_data *data,
|
|
ssize_t (*find_header)(u_char *buf, size_t len))
|
|
{
|
|
struct mtd_partition *parts;
|
|
u_char *buf;
|
|
int nr_parts;
|
|
size_t offset;
|
|
size_t uimage_offset;
|
|
size_t uimage_size = 0;
|
|
size_t rootfs_offset;
|
|
size_t rootfs_size = 0;
|
|
int uimage_part, rf_part;
|
|
int ret;
|
|
|
|
nr_parts = 2;
|
|
parts = kzalloc(nr_parts * sizeof(*parts), GFP_KERNEL);
|
|
if (!parts)
|
|
return -ENOMEM;
|
|
|
|
buf = vmalloc(MAX_HEADER_LEN);
|
|
if (!buf) {
|
|
ret = -ENOMEM;
|
|
goto err_free_parts;
|
|
}
|
|
|
|
/* find uImage on erase block boundaries */
|
|
for (offset = 0; offset < master->size; offset += master->erasesize) {
|
|
struct uimage_header *header;
|
|
|
|
uimage_size = 0;
|
|
|
|
ret = read_uimage_header(master, offset, buf, MAX_HEADER_LEN);
|
|
if (ret)
|
|
continue;
|
|
|
|
ret = find_header(buf, MAX_HEADER_LEN);
|
|
if (ret < 0) {
|
|
pr_debug("no valid uImage found in \"%s\" at offset %llx\n",
|
|
master->name, (unsigned long long) offset);
|
|
continue;
|
|
}
|
|
header = (struct uimage_header *)(buf + ret);
|
|
|
|
uimage_size = sizeof(*header) + be32_to_cpu(header->ih_size);
|
|
if ((offset + uimage_size) > master->size) {
|
|
pr_debug("uImage exceeds MTD device \"%s\"\n",
|
|
master->name);
|
|
continue;
|
|
}
|
|
break;
|
|
}
|
|
|
|
if (uimage_size == 0) {
|
|
pr_debug("no uImage found in \"%s\"\n", master->name);
|
|
ret = -ENODEV;
|
|
goto err_free_buf;
|
|
}
|
|
|
|
uimage_offset = offset;
|
|
|
|
if (uimage_offset == 0) {
|
|
uimage_part = 0;
|
|
rf_part = 1;
|
|
|
|
/* find the roots after the uImage */
|
|
ret = mtd_find_rootfs_from(master,
|
|
uimage_offset + uimage_size,
|
|
master->size,
|
|
&rootfs_offset);
|
|
if (ret) {
|
|
pr_debug("no rootfs after uImage in \"%s\"\n",
|
|
master->name);
|
|
goto err_free_buf;
|
|
}
|
|
|
|
rootfs_size = master->size - rootfs_offset;
|
|
uimage_size = rootfs_offset - uimage_offset;
|
|
} else {
|
|
rf_part = 0;
|
|
uimage_part = 1;
|
|
|
|
/* check rootfs presence at offset 0 */
|
|
ret = mtd_check_rootfs_magic(master, 0);
|
|
if (ret) {
|
|
pr_debug("no rootfs before uImage in \"%s\"\n",
|
|
master->name);
|
|
goto err_free_buf;
|
|
}
|
|
|
|
rootfs_offset = 0;
|
|
rootfs_size = uimage_offset;
|
|
}
|
|
|
|
if (rootfs_size == 0) {
|
|
pr_debug("no rootfs found in \"%s\"\n", master->name);
|
|
ret = -ENODEV;
|
|
goto err_free_buf;
|
|
}
|
|
|
|
parts[uimage_part].name = KERNEL_PART_NAME;
|
|
parts[uimage_part].offset = uimage_offset;
|
|
parts[uimage_part].size = uimage_size;
|
|
|
|
parts[rf_part].name = ROOTFS_PART_NAME;
|
|
parts[rf_part].offset = rootfs_offset;
|
|
parts[rf_part].size = rootfs_size;
|
|
|
|
vfree(buf);
|
|
|
|
*pparts = parts;
|
|
return nr_parts;
|
|
|
|
err_free_buf:
|
|
vfree(buf);
|
|
|
|
err_free_parts:
|
|
kfree(parts);
|
|
return ret;
|
|
}
|
|
|
|
static ssize_t uimage_verify_default(u_char *buf, size_t len)
|
|
{
|
|
struct uimage_header *header = (struct uimage_header *)buf;
|
|
|
|
/* default sanity checks */
|
|
if (be32_to_cpu(header->ih_magic) != IH_MAGIC) {
|
|
pr_debug("invalid uImage magic: %08x\n",
|
|
be32_to_cpu(header->ih_magic));
|
|
return -EINVAL;
|
|
}
|
|
|
|
if (header->ih_os != IH_OS_LINUX) {
|
|
pr_debug("invalid uImage OS: %08x\n",
|
|
be32_to_cpu(header->ih_os));
|
|
return -EINVAL;
|
|
}
|
|
|
|
if (header->ih_type != IH_TYPE_KERNEL) {
|
|
pr_debug("invalid uImage type: %08x\n",
|
|
be32_to_cpu(header->ih_type));
|
|
return -EINVAL;
|
|
}
|
|
|
|
return 0;
|
|
}
|
|
|
|
static int
|
|
mtdsplit_uimage_parse_generic(struct mtd_info *master,
|
|
struct mtd_partition **pparts,
|
|
struct mtd_part_parser_data *data)
|
|
{
|
|
return __mtdsplit_parse_uimage(master, pparts, data,
|
|
uimage_verify_default);
|
|
}
|
|
|
|
static struct mtd_part_parser uimage_generic_parser = {
|
|
.owner = THIS_MODULE,
|
|
.name = "uimage-fw",
|
|
.parse_fn = mtdsplit_uimage_parse_generic,
|
|
.type = MTD_PARSER_TYPE_FIRMWARE,
|
|
};
|
|
|
|
#define FW_MAGIC_WNR2000V3 0x32303033
|
|
#define FW_MAGIC_WNR2000V4 0x32303034
|
|
#define FW_MAGIC_WNR2200 0x32323030
|
|
#define FW_MAGIC_WNR612V2 0x32303631
|
|
#define FW_MAGIC_WNR1000V2 0x31303031
|
|
#define FW_MAGIC_WNR1000V2_VC 0x31303030
|
|
#define FW_MAGIC_WNDR3700 0x33373030
|
|
#define FW_MAGIC_WNDR3700V2 0x33373031
|
|
|
|
static ssize_t uimage_verify_wndr3700(u_char *buf, size_t len)
|
|
{
|
|
struct uimage_header *header = (struct uimage_header *)buf;
|
|
uint8_t expected_type = IH_TYPE_FILESYSTEM;
|
|
|
|
switch be32_to_cpu(header->ih_magic) {
|
|
case FW_MAGIC_WNR612V2:
|
|
case FW_MAGIC_WNR1000V2:
|
|
case FW_MAGIC_WNR1000V2_VC:
|
|
case FW_MAGIC_WNR2000V3:
|
|
case FW_MAGIC_WNR2200:
|
|
case FW_MAGIC_WNDR3700:
|
|
case FW_MAGIC_WNDR3700V2:
|
|
break;
|
|
case FW_MAGIC_WNR2000V4:
|
|
expected_type = IH_TYPE_KERNEL;
|
|
break;
|
|
default:
|
|
return -EINVAL;
|
|
}
|
|
|
|
if (header->ih_os != IH_OS_LINUX ||
|
|
header->ih_type != expected_type)
|
|
return -EINVAL;
|
|
|
|
return 0;
|
|
}
|
|
|
|
static int
|
|
mtdsplit_uimage_parse_netgear(struct mtd_info *master,
|
|
struct mtd_partition **pparts,
|
|
struct mtd_part_parser_data *data)
|
|
{
|
|
return __mtdsplit_parse_uimage(master, pparts, data,
|
|
uimage_verify_wndr3700);
|
|
}
|
|
|
|
static struct mtd_part_parser uimage_netgear_parser = {
|
|
.owner = THIS_MODULE,
|
|
.name = "netgear-fw",
|
|
.parse_fn = mtdsplit_uimage_parse_netgear,
|
|
.type = MTD_PARSER_TYPE_FIRMWARE,
|
|
};
|
|
|
|
/**************************************************
|
|
* Edimax
|
|
**************************************************/
|
|
|
|
#define FW_EDIMAX_OFFSET 20
|
|
#define FW_MAGIC_EDIMAX 0x43535953
|
|
|
|
static ssize_t uimage_find_edimax(u_char *buf, size_t len)
|
|
{
|
|
struct uimage_header *header;
|
|
|
|
if (len < FW_EDIMAX_OFFSET + sizeof(*header)) {
|
|
pr_err("Buffer too small for checking Edimax header\n");
|
|
return -ENOSPC;
|
|
}
|
|
|
|
header = (struct uimage_header *)(buf + FW_EDIMAX_OFFSET);
|
|
|
|
switch be32_to_cpu(header->ih_magic) {
|
|
case FW_MAGIC_EDIMAX:
|
|
break;
|
|
default:
|
|
return -EINVAL;
|
|
}
|
|
|
|
if (header->ih_os != IH_OS_LINUX ||
|
|
header->ih_type != IH_TYPE_FILESYSTEM)
|
|
return -EINVAL;
|
|
|
|
return FW_EDIMAX_OFFSET;
|
|
}
|
|
|
|
static int
|
|
mtdsplit_uimage_parse_edimax(struct mtd_info *master,
|
|
struct mtd_partition **pparts,
|
|
struct mtd_part_parser_data *data)
|
|
{
|
|
return __mtdsplit_parse_uimage(master, pparts, data,
|
|
uimage_find_edimax);
|
|
}
|
|
|
|
static struct mtd_part_parser uimage_edimax_parser = {
|
|
.owner = THIS_MODULE,
|
|
.name = "edimax-fw",
|
|
.parse_fn = mtdsplit_uimage_parse_edimax,
|
|
.type = MTD_PARSER_TYPE_FIRMWARE,
|
|
};
|
|
|
|
/**************************************************
|
|
* Init
|
|
**************************************************/
|
|
|
|
static int __init mtdsplit_uimage_init(void)
|
|
{
|
|
register_mtd_parser(&uimage_generic_parser);
|
|
register_mtd_parser(&uimage_netgear_parser);
|
|
register_mtd_parser(&uimage_edimax_parser);
|
|
|
|
return 0;
|
|
}
|
|
|
|
module_init(mtdsplit_uimage_init);
|
|
|