[J-u-boot.git] / drivers / fastboot / fb_mmc.c

// SPDX-License-Identifier: GPL-2.0+
/*
 * Copyright 2014 Broadcom Corporation.
 */

#include <config.h>
#include <common.h>
#include <blk.h>
#include <env.h>
#include <fastboot.h>
#include <fastboot-internal.h>
#include <fb_mmc.h>
#include <flash.h>
#include <image-sparse.h>
#include <part.h>
#include <mmc.h>
#include <div64.h>
#include <linux/compat.h>
#include <android_image.h>

#define FASTBOOT_MAX_BLK_WRITE 16384

#define BOOT_PARTITION_NAME "boot"

struct fb_mmc_sparse {
	struct blk_desc	*dev_desc;
};

static int part_get_info_by_name_or_alias(struct blk_desc *dev_desc,
		const char *name, disk_partition_t *info)
{
	int ret;

	ret = part_get_info_by_name(dev_desc, name, info);
	if (ret < 0) {
		/* strlen("fastboot_partition_alias_") + PART_NAME_LEN + 1 */
		char env_alias_name[25 + PART_NAME_LEN + 1];
		char *aliased_part_name;

		/* check for alias */
		strcpy(env_alias_name, "fastboot_partition_alias_");
		strncat(env_alias_name, name, PART_NAME_LEN);
		aliased_part_name = env_get(env_alias_name);
		if (aliased_part_name != NULL)
			ret = part_get_info_by_name(dev_desc,
					aliased_part_name, info);
	}
	return ret;
}

/**
 * fb_mmc_blk_write() - Write/erase MMC in chunks of FASTBOOT_MAX_BLK_WRITE
 *
 * @block_dev: Pointer to block device
 * @start: First block to write/erase
 * @blkcnt: Count of blocks
 * @buffer: Pointer to data buffer for write or NULL for erase
 */
static lbaint_t fb_mmc_blk_write(struct blk_desc *block_dev, lbaint_t start,
				 lbaint_t blkcnt, const void *buffer)
{
	lbaint_t blk = start;
	lbaint_t blks_written;
	lbaint_t cur_blkcnt;
	lbaint_t blks = 0;
	int i;

	for (i = 0; i < blkcnt; i += FASTBOOT_MAX_BLK_WRITE) {
		cur_blkcnt = min((int)blkcnt - i, FASTBOOT_MAX_BLK_WRITE);
		if (buffer) {
			if (fastboot_progress_callback)
				fastboot_progress_callback("writing");
			blks_written = blk_dwrite(block_dev, blk, cur_blkcnt,
						  buffer + (i * block_dev->blksz));
		} else {
			if (fastboot_progress_callback)
				fastboot_progress_callback("erasing");
			blks_written = blk_derase(block_dev, blk, cur_blkcnt);
		}
		blk += blks_written;
		blks += blks_written;
	}
	return blks;
}

static lbaint_t fb_mmc_sparse_write(struct sparse_storage *info,
		lbaint_t blk, lbaint_t blkcnt, const void *buffer)
{
	struct fb_mmc_sparse *sparse = info->priv;
	struct blk_desc *dev_desc = sparse->dev_desc;

	return fb_mmc_blk_write(dev_desc, blk, blkcnt, buffer);
}

static lbaint_t fb_mmc_sparse_reserve(struct sparse_storage *info,
		lbaint_t blk, lbaint_t blkcnt)
{
	return blkcnt;
}

static void write_raw_image(struct blk_desc *dev_desc, disk_partition_t *info,
		const char *part_name, void *buffer,
		u32 download_bytes, char *response)
{
	lbaint_t blkcnt;
	lbaint_t blks;

	/* determine number of blocks to write */
	blkcnt = ((download_bytes + (info->blksz - 1)) & ~(info->blksz - 1));
	blkcnt = lldiv(blkcnt, info->blksz);

	if (blkcnt > info->size) {
		pr_err("too large for partition: '%s'\n", part_name);
		fastboot_fail("too large for partition", response);
		return;
	}

	puts("Flashing Raw Image\n");

	blks = fb_mmc_blk_write(dev_desc, info->start, blkcnt, buffer);

	if (blks != blkcnt) {
		pr_err("failed writing to device %d\n", dev_desc->devnum);
		fastboot_fail("failed writing to device", response);
		return;
	}

	printf("........ wrote " LBAFU " bytes to '%s'\n", blkcnt * info->blksz,
	       part_name);
	fastboot_okay(NULL, response);
}

#ifdef CONFIG_FASTBOOT_MMC_BOOT1_SUPPORT
static int fb_mmc_erase_mmc_hwpart(struct blk_desc *dev_desc)
{
	lbaint_t blks;

	debug("Start Erasing mmc hwpart[%u]...\n", dev_desc->hwpart);

	blks = fb_mmc_blk_write(dev_desc, 0, dev_desc->lba, NULL);

	if (blks != dev_desc->lba) {
		pr_err("Failed to erase mmc hwpart[%u]\n", dev_desc->hwpart);
		return 1;
	}

	printf("........ erased %lu bytes from mmc hwpart[%u]\n",
	       dev_desc->lba * dev_desc->blksz, dev_desc->hwpart);

	return 0;
}

static void fb_mmc_boot1_ops(struct blk_desc *dev_desc, void *buffer,
			     u32 buff_sz, char *response)
{
	lbaint_t blkcnt;
	lbaint_t blks;
	unsigned long blksz;

	// To operate on EMMC_BOOT1 (mmc0boot0), we first change the hwpart
	if (blk_dselect_hwpart(dev_desc, 1)) {
		pr_err("Failed to select hwpart\n");
		fastboot_fail("Failed to select hwpart", response);
		return;
	}

	if (buffer) { /* flash */

		/* determine number of blocks to write */
		blksz = dev_desc->blksz;
		blkcnt = ((buff_sz + (blksz - 1)) & ~(blksz - 1));
		blkcnt = lldiv(blkcnt, blksz);

		if (blkcnt > dev_desc->lba) {
			pr_err("Image size too large\n");
			fastboot_fail("Image size too large", response);
			return;
		}

		debug("Start Flashing Image to EMMC_BOOT1...\n");

		blks = fb_mmc_blk_write(dev_desc, 0, blkcnt, buffer);

		if (blks != blkcnt) {
			pr_err("Failed to write EMMC_BOOT1\n");
			fastboot_fail("Failed to write EMMC_BOOT1", response);
			return;
		}

		printf("........ wrote %lu bytes to EMMC_BOOT1\n",
		       blkcnt * blksz);
	} else { /* erase */
		if (fb_mmc_erase_mmc_hwpart(dev_desc)) {
			fastboot_fail("Failed to erase EMMC_BOOT1", response);
			return;
		}
	}

	fastboot_okay(NULL, response);
}
#endif

#ifdef CONFIG_ANDROID_BOOT_IMAGE
/**
 * Read Android boot image header from boot partition.
 *
 * @param[in] dev_desc MMC device descriptor
 * @param[in] info Boot partition info
 * @param[out] hdr Where to store read boot image header
 *
 * @return Boot image header sectors count or 0 on error
 */
static lbaint_t fb_mmc_get_boot_header(struct blk_desc *dev_desc,
				       disk_partition_t *info,
				       struct andr_img_hdr *hdr,
				       char *response)
{
	ulong sector_size;		/* boot partition sector size */
	lbaint_t hdr_sectors;		/* boot image header sectors count */
	int res;

	/* Calculate boot image sectors count */
	sector_size = info->blksz;
	hdr_sectors = DIV_ROUND_UP(sizeof(struct andr_img_hdr), sector_size);
	if (hdr_sectors == 0) {
		pr_err("invalid number of boot sectors: 0\n");
		fastboot_fail("invalid number of boot sectors: 0", response);
		return 0;
	}

	/* Read the boot image header */
	res = blk_dread(dev_desc, info->start, hdr_sectors, (void *)hdr);
	if (res != hdr_sectors) {
		pr_err("cannot read header from boot partition\n");
		fastboot_fail("cannot read header from boot partition",
			      response);
		return 0;
	}

	/* Check boot header magic string */
	res = android_image_check_header(hdr);
	if (res != 0) {
		pr_err("bad boot image magic\n");
		fastboot_fail("boot partition not initialized", response);
		return 0;
	}

	return hdr_sectors;
}

/**
 * Write downloaded zImage to boot partition and repack it properly.
 *
 * @param dev_desc MMC device descriptor
 * @param download_buffer Address to fastboot buffer with zImage in it
 * @param download_bytes Size of fastboot buffer, in bytes
 *
 * @return 0 on success or -1 on error
 */
static int fb_mmc_update_zimage(struct blk_desc *dev_desc,
				void *download_buffer,
				u32 download_bytes,
				char *response)
{
	uintptr_t hdr_addr;			/* boot image header address */
	struct andr_img_hdr *hdr;		/* boot image header */
	lbaint_t hdr_sectors;			/* boot image header sectors */
	u8 *ramdisk_buffer;
	u32 ramdisk_sector_start;
	u32 ramdisk_sectors;
	u32 kernel_sector_start;
	u32 kernel_sectors;
	u32 sectors_per_page;
	disk_partition_t info;
	int res;

	puts("Flashing zImage\n");

	/* Get boot partition info */
	res = part_get_info_by_name(dev_desc, BOOT_PARTITION_NAME, &info);
	if (res < 0) {
		pr_err("cannot find boot partition\n");
		fastboot_fail("cannot find boot partition", response);
		return -1;
	}

	/* Put boot image header in fastboot buffer after downloaded zImage */
	hdr_addr = (uintptr_t)download_buffer + ALIGN(download_bytes, PAGE_SIZE);
	hdr = (struct andr_img_hdr *)hdr_addr;

	/* Read boot image header */
	hdr_sectors = fb_mmc_get_boot_header(dev_desc, &info, hdr, response);
	if (hdr_sectors == 0) {
		pr_err("unable to read boot image header\n");
		fastboot_fail("unable to read boot image header", response);
		return -1;
	}

	/* Check if boot image has second stage in it (we don't support it) */
	if (hdr->second_size > 0) {
		pr_err("moving second stage is not supported yet\n");
		fastboot_fail("moving second stage is not supported yet",
			      response);
		return -1;
	}

	/* Extract ramdisk location */
	sectors_per_page = hdr->page_size / info.blksz;
	ramdisk_sector_start = info.start + sectors_per_page;
	ramdisk_sector_start += DIV_ROUND_UP(hdr->kernel_size, hdr->page_size) *
					     sectors_per_page;
	ramdisk_sectors = DIV_ROUND_UP(hdr->ramdisk_size, hdr->page_size) *
				       sectors_per_page;

	/* Read ramdisk and put it in fastboot buffer after boot image header */
	ramdisk_buffer = (u8 *)hdr + (hdr_sectors * info.blksz);
	res = blk_dread(dev_desc, ramdisk_sector_start, ramdisk_sectors,
			ramdisk_buffer);
	if (res != ramdisk_sectors) {
		pr_err("cannot read ramdisk from boot partition\n");
		fastboot_fail("cannot read ramdisk from boot partition",
			      response);
		return -1;
	}

	/* Write new kernel size to boot image header */
	hdr->kernel_size = download_bytes;
	res = blk_dwrite(dev_desc, info.start, hdr_sectors, (void *)hdr);
	if (res == 0) {
		pr_err("cannot writeback boot image header\n");
		fastboot_fail("cannot write back boot image header", response);
		return -1;
	}

	/* Write the new downloaded kernel */
	kernel_sector_start = info.start + sectors_per_page;
	kernel_sectors = DIV_ROUND_UP(hdr->kernel_size, hdr->page_size) *
				      sectors_per_page;
	res = blk_dwrite(dev_desc, kernel_sector_start, kernel_sectors,
			 download_buffer);
	if (res == 0) {
		pr_err("cannot write new kernel\n");
		fastboot_fail("cannot write new kernel", response);
		return -1;
	}

	/* Write the saved ramdisk back */
	ramdisk_sector_start = info.start + sectors_per_page;
	ramdisk_sector_start += DIV_ROUND_UP(hdr->kernel_size, hdr->page_size) *
					     sectors_per_page;
	res = blk_dwrite(dev_desc, ramdisk_sector_start, ramdisk_sectors,
			 ramdisk_buffer);
	if (res == 0) {
		pr_err("cannot write back original ramdisk\n");
		fastboot_fail("cannot write back original ramdisk", response);
		return -1;
	}

	puts("........ zImage was updated in boot partition\n");
	fastboot_okay(NULL, response);
	return 0;
}
#endif

/**
 * fastboot_mmc_get_part_info() - Lookup eMMC partion by name
 *
 * @part_name: Named partition to lookup
 * @dev_desc: Pointer to returned blk_desc pointer
 * @part_info: Pointer to returned disk_partition_t
 * @response: Pointer to fastboot response buffer
 */
int fastboot_mmc_get_part_info(const char *part_name,
			       struct blk_desc **dev_desc,
			       disk_partition_t *part_info, char *response)
{
	int r;

	*dev_desc = blk_get_dev("mmc", CONFIG_FASTBOOT_FLASH_MMC_DEV);
	if (!*dev_desc) {
		fastboot_fail("block device not found", response);
		return -ENOENT;
	}
	if (!part_name || !strcmp(part_name, "")) {
		fastboot_fail("partition not given", response);
		return -ENOENT;
	}

	r = part_get_info_by_name_or_alias(*dev_desc, part_name, part_info);
	if (r < 0) {
		fastboot_fail("partition not found", response);
		return r;
	}

	return r;
}

/**
 * fastboot_mmc_flash_write() - Write image to eMMC for fastboot
 *
 * @cmd: Named partition to write image to
 * @download_buffer: Pointer to image data
 * @download_bytes: Size of image data
 * @response: Pointer to fastboot response buffer
 */
void fastboot_mmc_flash_write(const char *cmd, void *download_buffer,
			      u32 download_bytes, char *response)
{
	struct blk_desc *dev_desc;
	disk_partition_t info;

	dev_desc = blk_get_dev("mmc", CONFIG_FASTBOOT_FLASH_MMC_DEV);
	if (!dev_desc || dev_desc->type == DEV_TYPE_UNKNOWN) {
		pr_err("invalid mmc device\n");
		fastboot_fail("invalid mmc device", response);
		return;
	}

#ifdef CONFIG_FASTBOOT_MMC_BOOT1_SUPPORT
	if (strcmp(cmd, CONFIG_FASTBOOT_MMC_BOOT1_NAME) == 0) {
		fb_mmc_boot1_ops(dev_desc, download_buffer,
				 download_bytes, response);
		return;
	}
#endif

#if CONFIG_IS_ENABLED(EFI_PARTITION)
#ifndef CONFIG_FASTBOOT_MMC_USER_NAME
	if (strcmp(cmd, CONFIG_FASTBOOT_GPT_NAME) == 0) {
#else
	if (strcmp(cmd, CONFIG_FASTBOOT_GPT_NAME) == 0 ||
	    strcmp(cmd, CONFIG_FASTBOOT_MMC_USER_NAME) == 0) {
#endif
		printf("%s: updating MBR, Primary and Backup GPT(s)\n",
		       __func__);
		if (is_valid_gpt_buf(dev_desc, download_buffer)) {
			printf("%s: invalid GPT - refusing to write to flash\n",
			       __func__);
			fastboot_fail("invalid GPT partition", response);
			return;
		}
		if (write_mbr_and_gpt_partitions(dev_desc, download_buffer)) {
			printf("%s: writing GPT partitions failed\n", __func__);
			fastboot_fail("writing GPT partitions failed",
				      response);
			return;
		}
		printf("........ success\n");
		fastboot_okay(NULL, response);
		return;
	}
#endif

#if CONFIG_IS_ENABLED(DOS_PARTITION)
	if (strcmp(cmd, CONFIG_FASTBOOT_MBR_NAME) == 0) {
		printf("%s: updating MBR\n", __func__);
		if (is_valid_dos_buf(download_buffer)) {
			printf("%s: invalid MBR - refusing to write to flash\n",
			       __func__);
			fastboot_fail("invalid MBR partition", response);
			return;
		}
		if (write_mbr_partition(dev_desc, download_buffer)) {
			printf("%s: writing MBR partition failed\n", __func__);
			fastboot_fail("writing MBR partition failed",
				      response);
			return;
		}
		printf("........ success\n");
		fastboot_okay(NULL, response);
		return;
	}
#endif

#ifdef CONFIG_ANDROID_BOOT_IMAGE
	if (strncasecmp(cmd, "zimage", 6) == 0) {
		fb_mmc_update_zimage(dev_desc, download_buffer,
				     download_bytes, response);
		return;
	}
#endif

	if (part_get_info_by_name_or_alias(dev_desc, cmd, &info) < 0) {
		pr_err("cannot find partition: '%s'\n", cmd);
		fastboot_fail("cannot find partition", response);
		return;
	}

	if (is_sparse_image(download_buffer)) {
		struct fb_mmc_sparse sparse_priv;
		struct sparse_storage sparse;
		int err;

		sparse_priv.dev_desc = dev_desc;

		sparse.blksz = info.blksz;
		sparse.start = info.start;
		sparse.size = info.size;
		sparse.write = fb_mmc_sparse_write;
		sparse.reserve = fb_mmc_sparse_reserve;
		sparse.mssg = fastboot_fail;

		printf("Flashing sparse image at offset " LBAFU "\n",
		       sparse.start);

		sparse.priv = &sparse_priv;
		err = write_sparse_image(&sparse, cmd, download_buffer,
					 response);
		if (!err)
			fastboot_okay(NULL, response);
	} else {
		write_raw_image(dev_desc, &info, cmd, download_buffer,
				download_bytes, response);
	}
}

/**
 * fastboot_mmc_flash_erase() - Erase eMMC for fastboot
 *
 * @cmd: Named partition to erase
 * @response: Pointer to fastboot response buffer
 */
void fastboot_mmc_erase(const char *cmd, char *response)
{
	int ret;
	struct blk_desc *dev_desc;
	disk_partition_t info;
	lbaint_t blks, blks_start, blks_size, grp_size;
	struct mmc *mmc = find_mmc_device(CONFIG_FASTBOOT_FLASH_MMC_DEV);

	if (mmc == NULL) {
		pr_err("invalid mmc device\n");
		fastboot_fail("invalid mmc device", response);
		return;
	}

	dev_desc = blk_get_dev("mmc", CONFIG_FASTBOOT_FLASH_MMC_DEV);
	if (!dev_desc || dev_desc->type == DEV_TYPE_UNKNOWN) {
		pr_err("invalid mmc device\n");
		fastboot_fail("invalid mmc device", response);
		return;
	}

#ifdef CONFIG_FASTBOOT_MMC_BOOT1_SUPPORT
	if (strcmp(cmd, CONFIG_FASTBOOT_MMC_BOOT1_NAME) == 0) {
		/* erase EMMC boot1 */
		fb_mmc_boot1_ops(dev_desc, NULL, 0, response);
		return;
	}
#endif

#ifdef CONFIG_FASTBOOT_MMC_USER_NAME
	if (strcmp(cmd, CONFIG_FASTBOOT_MMC_USER_NAME) == 0) {
		/* erase EMMC userdata */
		if (fb_mmc_erase_mmc_hwpart(dev_desc))
			fastboot_fail("Failed to erase EMMC_USER", response);
		else
			fastboot_okay(NULL, response);
		return;
	}
#endif

	ret = part_get_info_by_name_or_alias(dev_desc, cmd, &info);
	if (ret < 0) {
		pr_err("cannot find partition: '%s'\n", cmd);
		fastboot_fail("cannot find partition", response);
		return;
	}

	/* Align blocks to erase group size to avoid erasing other partitions */
	grp_size = mmc->erase_grp_size;
	blks_start = (info.start + grp_size - 1) & ~(grp_size - 1);
	if (info.size >= grp_size)
		blks_size = (info.size - (blks_start - info.start)) &
				(~(grp_size - 1));
	else
		blks_size = 0;

	printf("Erasing blocks " LBAFU " to " LBAFU " due to alignment\n",
	       blks_start, blks_start + blks_size);

	blks = fb_mmc_blk_write(dev_desc, blks_start, blks_size, NULL);

	if (blks != blks_size) {
		pr_err("failed erasing from device %d\n", dev_desc->devnum);
		fastboot_fail("failed erasing from device", response);
		return;
	}

	printf("........ erased " LBAFU " bytes from '%s'\n",
	       blks_size * info.blksz, cmd);
	fastboot_okay(NULL, response);
}
Commit	Line	Data
83d290c5	1	// SPDX-License-Identifier: GPL-2.0+
c0aebb33 SR	2	/*
c0aebb33 SR	3	* Copyright 2014 Broadcom Corporation.
c0aebb33 SR	4	*/
c0aebb33 SR	5
0ff7e585	6	#include <config.h>
c0aebb33	7	#include <common.h>
2a981dc2	8	#include <blk.h>
7b51b576	9	#include <env.h>
3c8f98f5	10	#include <fastboot.h>
f73a7df9	11	#include <fastboot-internal.h>
c0aebb33	12	#include <fb_mmc.h>
b79fdc76	13	#include <flash.h>
3d4ef38d	14	#include <image-sparse.h>
c0aebb33	15	#include <part.h>
89792381	16	#include <mmc.h>
5e0efc1b	17	#include <div64.h>
efeccfe7 SP	18	#include <linux/compat.h>
efeccfe7 SP	19	#include <android_image.h>
c0aebb33	20
f73a7df9 AK	21	#define FASTBOOT_MAX_BLK_WRITE 16384
f73a7df9 AK	22
efeccfe7 SP	23	#define BOOT_PARTITION_NAME "boot"
efeccfe7 SP	24
a5d1e04a	25	struct fb_mmc_sparse {
4101f687	26	struct blk_desc *dev_desc;
a5d1e04a MR	27	};
a5d1e04a MR	28
b6dd69a4	29	static int part_get_info_by_name_or_alias(struct blk_desc *dev_desc,
8a41802f MS	30	const char name, disk_partition_t info)
	31	{
	32	int ret;
	33
87b8530f	34	ret = part_get_info_by_name(dev_desc, name, info);
88b6329c	35	if (ret < 0) {
b762aa12 AK	36	/* strlen("fastboot_partition_alias_") + PART_NAME_LEN + 1 */
b762aa12 AK	37	char env_alias_name[25 + PART_NAME_LEN + 1];
8a41802f MS	38	char *aliased_part_name;
	39
	40	/* check for alias */
	41	strcpy(env_alias_name, "fastboot_partition_alias_");
b762aa12	42	strncat(env_alias_name, name, PART_NAME_LEN);
00caae6d	43	aliased_part_name = env_get(env_alias_name);
8a41802f	44	if (aliased_part_name != NULL)
87b8530f	45	ret = part_get_info_by_name(dev_desc,
8a41802f MS	46	aliased_part_name, info);
	47	}
	48	return ret;
	49	}
	50
f73a7df9 AK	51	/**
	52	* fb_mmc_blk_write() - Write/erase MMC in chunks of FASTBOOT_MAX_BLK_WRITE
	53	*
	54	* @block_dev: Pointer to block device
	55	* @start: First block to write/erase
	56	* @blkcnt: Count of blocks
	57	* @buffer: Pointer to data buffer for write or NULL for erase
	58	*/
	59	static lbaint_t fb_mmc_blk_write(struct blk_desc *block_dev, lbaint_t start,
	60	lbaint_t blkcnt, const void *buffer)
	61	{
	62	lbaint_t blk = start;
	63	lbaint_t blks_written;
	64	lbaint_t cur_blkcnt;
	65	lbaint_t blks = 0;
	66	int i;
	67
	68	for (i = 0; i < blkcnt; i += FASTBOOT_MAX_BLK_WRITE) {
	69	cur_blkcnt = min((int)blkcnt - i, FASTBOOT_MAX_BLK_WRITE);
	70	if (buffer) {
	71	if (fastboot_progress_callback)
	72	fastboot_progress_callback("writing");
	73	blks_written = blk_dwrite(block_dev, blk, cur_blkcnt,
	74	buffer + (i * block_dev->blksz));
	75	} else {
	76	if (fastboot_progress_callback)
	77	fastboot_progress_callback("erasing");
	78	blks_written = blk_derase(block_dev, blk, cur_blkcnt);
	79	}
	80	blk += blks_written;
	81	blks += blks_written;
	82	}
	83	return blks;
	84	}
	85
cc0f08cd SR	86	static lbaint_t fb_mmc_sparse_write(struct sparse_storage *info,
cc0f08cd SR	87	lbaint_t blk, lbaint_t blkcnt, const void *buffer)
a5d1e04a	88	{
cc0f08cd	89	struct fb_mmc_sparse *sparse = info->priv;
4101f687	90	struct blk_desc *dev_desc = sparse->dev_desc;
a5d1e04a	91
f73a7df9	92	return fb_mmc_blk_write(dev_desc, blk, blkcnt, buffer);
a5d1e04a MR	93	}
a5d1e04a MR	94
2c724046 SR	95	static lbaint_t fb_mmc_sparse_reserve(struct sparse_storage *info,
	96	lbaint_t blk, lbaint_t blkcnt)
	97	{
	98	return blkcnt;
	99	}
	100
4101f687	101	static void write_raw_image(struct blk_desc dev_desc, disk_partition_t info,
c0aebb33	102	const char part_name, void buffer,
f73a7df9	103	u32 download_bytes, char *response)
c0aebb33 SR	104	{
	105	lbaint_t blkcnt;
	106	lbaint_t blks;
	107
	108	/* determine number of blocks to write */
	109	blkcnt = ((download_bytes + (info->blksz - 1)) & ~(info->blksz - 1));
5e0efc1b	110	blkcnt = lldiv(blkcnt, info->blksz);
c0aebb33 SR	111
c0aebb33 SR	112	if (blkcnt > info->size) {
9b643e31	113	pr_err("too large for partition: '%s'\n", part_name);
c4ded03e	114	fastboot_fail("too large for partition", response);
c0aebb33 SR	115	return;
	116	}
	117
	118	puts("Flashing Raw Image\n");
	119
f73a7df9 AK	120	blks = fb_mmc_blk_write(dev_desc, info->start, blkcnt, buffer);
f73a7df9 AK	121
c0aebb33	122	if (blks != blkcnt) {
9b643e31	123	pr_err("failed writing to device %d\n", dev_desc->devnum);
c4ded03e	124	fastboot_fail("failed writing to device", response);
c0aebb33 SR	125	return;
	126	}
	127
	128	printf("........ wrote " LBAFU " bytes to '%s'\n", blkcnt * info->blksz,
	129	part_name);
c4ded03e	130	fastboot_okay(NULL, response);
c0aebb33 SR	131	}
c0aebb33 SR	132
1fdbad02	133	#ifdef CONFIG_FASTBOOT_MMC_BOOT1_SUPPORT
	134	static int fb_mmc_erase_mmc_hwpart(struct blk_desc *dev_desc)
	135	{
	136	lbaint_t blks;
	137
	138	debug("Start Erasing mmc hwpart[%u]...\n", dev_desc->hwpart);
	139
	140	blks = fb_mmc_blk_write(dev_desc, 0, dev_desc->lba, NULL);
	141
	142	if (blks != dev_desc->lba) {
	143	pr_err("Failed to erase mmc hwpart[%u]\n", dev_desc->hwpart);
	144	return 1;
	145	}
	146
	147	printf("........ erased %lu bytes from mmc hwpart[%u]\n",
	148	dev_desc->lba * dev_desc->blksz, dev_desc->hwpart);
	149
	150	return 0;
	151	}
	152
	153	static void fb_mmc_boot1_ops(struct blk_desc dev_desc, void buffer,
	154	u32 buff_sz, char *response)
	155	{
	156	lbaint_t blkcnt;
	157	lbaint_t blks;
	158	unsigned long blksz;
	159
	160	// To operate on EMMC_BOOT1 (mmc0boot0), we first change the hwpart
	161	if (blk_dselect_hwpart(dev_desc, 1)) {
	162	pr_err("Failed to select hwpart\n");
	163	fastboot_fail("Failed to select hwpart", response);
	164	return;
	165	}
	166
	167	if (buffer) { /* flash */
	168
	169	/* determine number of blocks to write */
	170	blksz = dev_desc->blksz;
	171	blkcnt = ((buff_sz + (blksz - 1)) & ~(blksz - 1));
	172	blkcnt = lldiv(blkcnt, blksz);
	173
	174	if (blkcnt > dev_desc->lba) {
	175	pr_err("Image size too large\n");
	176	fastboot_fail("Image size too large", response);
	177	return;
	178	}
	179
	180	debug("Start Flashing Image to EMMC_BOOT1...\n");
	181
	182	blks = fb_mmc_blk_write(dev_desc, 0, blkcnt, buffer);
	183
	184	if (blks != blkcnt) {
	185	pr_err("Failed to write EMMC_BOOT1\n");
	186	fastboot_fail("Failed to write EMMC_BOOT1", response);
	187	return;
	188	}
	189
	190	printf("........ wrote %lu bytes to EMMC_BOOT1\n",
	191	blkcnt * blksz);
	192	} else { /* erase */
	193	if (fb_mmc_erase_mmc_hwpart(dev_desc)) {
	194	fastboot_fail("Failed to erase EMMC_BOOT1", response);
	195	return;
	196	}
197	}
198
199	fastboot_okay(NULL, response);
200	}
201	#endif
202
efeccfe7 SP	203	#ifdef CONFIG_ANDROID_BOOT_IMAGE
	204	/**
	205	* Read Android boot image header from boot partition.
	206	*
	207	* @param[in] dev_desc MMC device descriptor
	208	* @param[in] info Boot partition info
	209	* @param[out] hdr Where to store read boot image header
	210	*
	211	* @return Boot image header sectors count or 0 on error
	212	*/
	213	static lbaint_t fb_mmc_get_boot_header(struct blk_desc *dev_desc,
	214	disk_partition_t *info,
c4ded03e AK	215	struct andr_img_hdr *hdr,
c4ded03e AK	216	char *response)
efeccfe7 SP	217	{
	218	ulong sector_size; /* boot partition sector size */
	219	lbaint_t hdr_sectors; /* boot image header sectors count */
	220	int res;
	221
	222	/* Calculate boot image sectors count */
	223	sector_size = info->blksz;
	224	hdr_sectors = DIV_ROUND_UP(sizeof(struct andr_img_hdr), sector_size);
	225	if (hdr_sectors == 0) {
1ad5facb	226	pr_err("invalid number of boot sectors: 0\n");
c4ded03e	227	fastboot_fail("invalid number of boot sectors: 0", response);
efeccfe7 SP	228	return 0;
	229	}
	230
	231	/* Read the boot image header */
	232	res = blk_dread(dev_desc, info->start, hdr_sectors, (void *)hdr);
6bafa5a4	233	if (res != hdr_sectors) {
1ad5facb	234	pr_err("cannot read header from boot partition\n");
c4ded03e AK	235	fastboot_fail("cannot read header from boot partition",
c4ded03e AK	236	response);
efeccfe7 SP	237	return 0;
	238	}
	239
	240	/* Check boot header magic string */
	241	res = android_image_check_header(hdr);
	242	if (res != 0) {
1ad5facb	243	pr_err("bad boot image magic\n");
c4ded03e	244	fastboot_fail("boot partition not initialized", response);
efeccfe7 SP	245	return 0;
	246	}
	247
	248	return hdr_sectors;
	249	}
	250
	251	/**
	252	* Write downloaded zImage to boot partition and repack it properly.
	253	*
	254	* @param dev_desc MMC device descriptor
	255	* @param download_buffer Address to fastboot buffer with zImage in it
	256	* @param download_bytes Size of fastboot buffer, in bytes
	257	*
	258	* @return 0 on success or -1 on error
	259	*/
	260	static int fb_mmc_update_zimage(struct blk_desc *dev_desc,
	261	void *download_buffer,
f73a7df9	262	u32 download_bytes,
c4ded03e	263	char *response)
efeccfe7	264	{
2341c80c	265	uintptr_t hdr_addr; /* boot image header address */
efeccfe7 SP	266	struct andr_img_hdr hdr; / boot image header */
	267	lbaint_t hdr_sectors; /* boot image header sectors */
	268	u8 *ramdisk_buffer;
	269	u32 ramdisk_sector_start;
	270	u32 ramdisk_sectors;
	271	u32 kernel_sector_start;
	272	u32 kernel_sectors;
	273	u32 sectors_per_page;
	274	disk_partition_t info;
	275	int res;
	276
	277	puts("Flashing zImage\n");
	278
	279	/* Get boot partition info */
	280	res = part_get_info_by_name(dev_desc, BOOT_PARTITION_NAME, &info);
	281	if (res < 0) {
1ad5facb	282	pr_err("cannot find boot partition\n");
c4ded03e	283	fastboot_fail("cannot find boot partition", response);
efeccfe7 SP	284	return -1;
	285	}
	286
	287	/* Put boot image header in fastboot buffer after downloaded zImage */
2341c80c	288	hdr_addr = (uintptr_t)download_buffer + ALIGN(download_bytes, PAGE_SIZE);
efeccfe7 SP	289	hdr = (struct andr_img_hdr *)hdr_addr;
	290
	291	/* Read boot image header */
c4ded03e	292	hdr_sectors = fb_mmc_get_boot_header(dev_desc, &info, hdr, response);
efeccfe7	293	if (hdr_sectors == 0) {
1ad5facb	294	pr_err("unable to read boot image header\n");
c4ded03e	295	fastboot_fail("unable to read boot image header", response);
efeccfe7 SP	296	return -1;
	297	}
	298
	299	/* Check if boot image has second stage in it (we don't support it) */
	300	if (hdr->second_size > 0) {
1ad5facb	301	pr_err("moving second stage is not supported yet\n");
c4ded03e AK	302	fastboot_fail("moving second stage is not supported yet",
c4ded03e AK	303	response);
efeccfe7 SP	304	return -1;
	305	}
	306
	307	/* Extract ramdisk location */
	308	sectors_per_page = hdr->page_size / info.blksz;
	309	ramdisk_sector_start = info.start + sectors_per_page;
	310	ramdisk_sector_start += DIV_ROUND_UP(hdr->kernel_size, hdr->page_size) *
	311	sectors_per_page;
	312	ramdisk_sectors = DIV_ROUND_UP(hdr->ramdisk_size, hdr->page_size) *
	313	sectors_per_page;
	314
	315	/* Read ramdisk and put it in fastboot buffer after boot image header */
	316	ramdisk_buffer = (u8 )hdr + (hdr_sectors info.blksz);
	317	res = blk_dread(dev_desc, ramdisk_sector_start, ramdisk_sectors,
	318	ramdisk_buffer);
6bafa5a4	319	if (res != ramdisk_sectors) {
1ad5facb	320	pr_err("cannot read ramdisk from boot partition\n");
c4ded03e AK	321	fastboot_fail("cannot read ramdisk from boot partition",
c4ded03e AK	322	response);
efeccfe7 SP	323	return -1;
	324	}
	325
	326	/* Write new kernel size to boot image header */
	327	hdr->kernel_size = download_bytes;
	328	res = blk_dwrite(dev_desc, info.start, hdr_sectors, (void *)hdr);
	329	if (res == 0) {
1ad5facb	330	pr_err("cannot writeback boot image header\n");
c4ded03e	331	fastboot_fail("cannot write back boot image header", response);
efeccfe7 SP	332	return -1;
	333	}
	334
	335	/* Write the new downloaded kernel */
	336	kernel_sector_start = info.start + sectors_per_page;
	337	kernel_sectors = DIV_ROUND_UP(hdr->kernel_size, hdr->page_size) *
	338	sectors_per_page;
	339	res = blk_dwrite(dev_desc, kernel_sector_start, kernel_sectors,
	340	download_buffer);
	341	if (res == 0) {
1ad5facb	342	pr_err("cannot write new kernel\n");
c4ded03e	343	fastboot_fail("cannot write new kernel", response);
efeccfe7 SP	344	return -1;
	345	}
	346
	347	/* Write the saved ramdisk back */
	348	ramdisk_sector_start = info.start + sectors_per_page;
	349	ramdisk_sector_start += DIV_ROUND_UP(hdr->kernel_size, hdr->page_size) *
	350	sectors_per_page;
	351	res = blk_dwrite(dev_desc, ramdisk_sector_start, ramdisk_sectors,
	352	ramdisk_buffer);
	353	if (res == 0) {
1ad5facb	354	pr_err("cannot write back original ramdisk\n");
c4ded03e	355	fastboot_fail("cannot write back original ramdisk", response);
efeccfe7 SP	356	return -1;
	357	}
	358
	359	puts("........ zImage was updated in boot partition\n");
c4ded03e	360	fastboot_okay(NULL, response);
efeccfe7 SP	361	return 0;
	362	}
	363	#endif
	364
f73a7df9 AK	365	/**
	366	* fastboot_mmc_get_part_info() - Lookup eMMC partion by name
	367	*
	368	* @part_name: Named partition to lookup
	369	* @dev_desc: Pointer to returned blk_desc pointer
	370	* @part_info: Pointer to returned disk_partition_t
	371	* @response: Pointer to fastboot response buffer
	372	*/
cacb03e4 SP	373	int fastboot_mmc_get_part_info(const char *part_name,
cacb03e4 SP	374	struct blk_desc **dev_desc,
f73a7df9 AK	375	disk_partition_t part_info, char response)
	376	{
	377	int r;
	378
	379	*dev_desc = blk_get_dev("mmc", CONFIG_FASTBOOT_FLASH_MMC_DEV);
	380	if (!*dev_desc) {
	381	fastboot_fail("block device not found", response);
	382	return -ENOENT;
	383	}
a40297d7 ER	384	if (!part_name \|\| !strcmp(part_name, "")) {
a40297d7 ER	385	fastboot_fail("partition not given", response);
f73a7df9 AK	386	return -ENOENT;
	387	}
	388
	389	r = part_get_info_by_name_or_alias(*dev_desc, part_name, part_info);
	390	if (r < 0) {
	391	fastboot_fail("partition not found", response);
	392	return r;
	393	}
	394
	395	return r;
	396	}
	397
d1a119d4 AK	398	/**
	399	* fastboot_mmc_flash_write() - Write image to eMMC for fastboot
	400	*
	401	* @cmd: Named partition to write image to
	402	* @download_buffer: Pointer to image data
	403	* @download_bytes: Size of image data
	404	* @response: Pointer to fastboot response buffer
	405	*/
	406	void fastboot_mmc_flash_write(const char cmd, void download_buffer,
f73a7df9	407	u32 download_bytes, char *response)
c0aebb33	408	{
4101f687	409	struct blk_desc *dev_desc;
c0aebb33 SR	410	disk_partition_t info;
c0aebb33 SR	411
db1d9e78	412	dev_desc = blk_get_dev("mmc", CONFIG_FASTBOOT_FLASH_MMC_DEV);
c0aebb33	413	if (!dev_desc \|\| dev_desc->type == DEV_TYPE_UNKNOWN) {
9b643e31	414	pr_err("invalid mmc device\n");
c4ded03e	415	fastboot_fail("invalid mmc device", response);
c0aebb33 SR	416	return;
	417	}
	418
1fdbad02	419	#ifdef CONFIG_FASTBOOT_MMC_BOOT1_SUPPORT
	420	if (strcmp(cmd, CONFIG_FASTBOOT_MMC_BOOT1_NAME) == 0) {
	421	fb_mmc_boot1_ops(dev_desc, download_buffer,
	422	download_bytes, response);
	423	return;
	424	}
	425	#endif
	426
bd42a942	427	#if CONFIG_IS_ENABLED(EFI_PARTITION)
1fdbad02	428	#ifndef CONFIG_FASTBOOT_MMC_USER_NAME
0ff7e585	429	if (strcmp(cmd, CONFIG_FASTBOOT_GPT_NAME) == 0) {
1fdbad02	430	#else
	431	if (strcmp(cmd, CONFIG_FASTBOOT_GPT_NAME) == 0 \|\|
	432	strcmp(cmd, CONFIG_FASTBOOT_MMC_USER_NAME) == 0) {
	433	#endif
0ff7e585 SR	434	printf("%s: updating MBR, Primary and Backup GPT(s)\n",
	435	__func__);
	436	if (is_valid_gpt_buf(dev_desc, download_buffer)) {
	437	printf("%s: invalid GPT - refusing to write to flash\n",
	438	__func__);
c4ded03e	439	fastboot_fail("invalid GPT partition", response);
0ff7e585 SR	440	return;
	441	}
	442	if (write_mbr_and_gpt_partitions(dev_desc, download_buffer)) {
	443	printf("%s: writing GPT partitions failed\n", __func__);
c4ded03e AK	444	fastboot_fail("writing GPT partitions failed",
c4ded03e AK	445	response);
0ff7e585 SR	446	return;
	447	}
	448	printf("........ success\n");
c4ded03e	449	fastboot_okay(NULL, response);
0ff7e585	450	return;
b6dd69a4 PK	451	}
	452	#endif
	453
b0cf7339	454	#if CONFIG_IS_ENABLED(DOS_PARTITION)
b6dd69a4 PK	455	if (strcmp(cmd, CONFIG_FASTBOOT_MBR_NAME) == 0) {
	456	printf("%s: updating MBR\n", __func__);
	457	if (is_valid_dos_buf(download_buffer)) {
	458	printf("%s: invalid MBR - refusing to write to flash\n",
	459	__func__);
c4ded03e	460	fastboot_fail("invalid MBR partition", response);
b6dd69a4 PK	461	return;
	462	}
	463	if (write_mbr_partition(dev_desc, download_buffer)) {
	464	printf("%s: writing MBR partition failed\n", __func__);
c4ded03e AK	465	fastboot_fail("writing MBR partition failed",
c4ded03e AK	466	response);
b6dd69a4 PK	467	return;
	468	}
	469	printf("........ success\n");
c4ded03e	470	fastboot_okay(NULL, response);
b6dd69a4 PK	471	return;
	472	}
	473	#endif
	474
efeccfe7 SP	475	#ifdef CONFIG_ANDROID_BOOT_IMAGE
efeccfe7 SP	476	if (strncasecmp(cmd, "zimage", 6) == 0) {
c4ded03e AK	477	fb_mmc_update_zimage(dev_desc, download_buffer,
c4ded03e AK	478	download_bytes, response);
efeccfe7 SP	479	return;
	480	}
	481	#endif
	482
88b6329c	483	if (part_get_info_by_name_or_alias(dev_desc, cmd, &info) < 0) {
9b643e31	484	pr_err("cannot find partition: '%s'\n", cmd);
c4ded03e	485	fastboot_fail("cannot find partition", response);
c0aebb33 SR	486	return;
	487	}
	488
a5d1e04a MR	489	if (is_sparse_image(download_buffer)) {
a5d1e04a MR	490	struct fb_mmc_sparse sparse_priv;
cc0f08cd	491	struct sparse_storage sparse;
2f83f219	492	int err;
a5d1e04a MR	493
	494	sparse_priv.dev_desc = dev_desc;
	495
cc0f08cd	496	sparse.blksz = info.blksz;
a5d1e04a MR	497	sparse.start = info.start;
a5d1e04a MR	498	sparse.size = info.size;
a5d1e04a	499	sparse.write = fb_mmc_sparse_write;
2c724046	500	sparse.reserve = fb_mmc_sparse_reserve;
2f83f219	501	sparse.mssg = fastboot_fail;
a5d1e04a MR	502
a5d1e04a MR	503	printf("Flashing sparse image at offset " LBAFU "\n",
cc0f08cd	504	sparse.start);
a5d1e04a	505
cc0f08cd	506	sparse.priv = &sparse_priv;
c4ded03e AK	507	err = write_sparse_image(&sparse, cmd, download_buffer,
c4ded03e AK	508	response);
2f83f219	509	if (!err)
c4ded03e	510	fastboot_okay(NULL, response);
a5d1e04a	511	} else {
e5bf9878	512	write_raw_image(dev_desc, &info, cmd, download_buffer,
c4ded03e	513	download_bytes, response);
a5d1e04a	514	}
c0aebb33	515	}
89792381	516
d1a119d4 AK	517	/**
	518	* fastboot_mmc_flash_erase() - Erase eMMC for fastboot
	519	*
	520	* @cmd: Named partition to erase
	521	* @response: Pointer to fastboot response buffer
	522	*/
	523	void fastboot_mmc_erase(const char cmd, char response)
89792381 DK	524	{
89792381 DK	525	int ret;
4101f687	526	struct blk_desc *dev_desc;
89792381 DK	527	disk_partition_t info;
	528	lbaint_t blks, blks_start, blks_size, grp_size;
	529	struct mmc *mmc = find_mmc_device(CONFIG_FASTBOOT_FLASH_MMC_DEV);
	530
	531	if (mmc == NULL) {
1ad5facb	532	pr_err("invalid mmc device\n");
c4ded03e	533	fastboot_fail("invalid mmc device", response);
89792381 DK	534	return;
	535	}
	536
db1d9e78	537	dev_desc = blk_get_dev("mmc", CONFIG_FASTBOOT_FLASH_MMC_DEV);
89792381	538	if (!dev_desc \|\| dev_desc->type == DEV_TYPE_UNKNOWN) {
1ad5facb	539	pr_err("invalid mmc device\n");
c4ded03e	540	fastboot_fail("invalid mmc device", response);
89792381 DK	541	return;
	542	}
	543
1fdbad02	544	#ifdef CONFIG_FASTBOOT_MMC_BOOT1_SUPPORT
	545	if (strcmp(cmd, CONFIG_FASTBOOT_MMC_BOOT1_NAME) == 0) {
	546	/* erase EMMC boot1 */
	547	fb_mmc_boot1_ops(dev_desc, NULL, 0, response);
	548	return;
	549	}
	550	#endif
	551
	552	#ifdef CONFIG_FASTBOOT_MMC_USER_NAME
	553	if (strcmp(cmd, CONFIG_FASTBOOT_MMC_USER_NAME) == 0) {
	554	/* erase EMMC userdata */
	555	if (fb_mmc_erase_mmc_hwpart(dev_desc))
	556	fastboot_fail("Failed to erase EMMC_USER", response);
	557	else
	558	fastboot_okay(NULL, response);
	559	return;
	560	}
	561	#endif
	562
b6dd69a4	563	ret = part_get_info_by_name_or_alias(dev_desc, cmd, &info);
88b6329c	564	if (ret < 0) {
1ad5facb	565	pr_err("cannot find partition: '%s'\n", cmd);
c4ded03e	566	fastboot_fail("cannot find partition", response);
89792381 DK	567	return;
	568	}
	569
	570	/* Align blocks to erase group size to avoid erasing other partitions */
	571	grp_size = mmc->erase_grp_size;
	572	blks_start = (info.start + grp_size - 1) & ~(grp_size - 1);
	573	if (info.size >= grp_size)
	574	blks_size = (info.size - (blks_start - info.start)) &
	575	(~(grp_size - 1));
	576	else
	577	blks_size = 0;
	578
	579	printf("Erasing blocks " LBAFU " to " LBAFU " due to alignment\n",
	580	blks_start, blks_start + blks_size);
	581
f73a7df9 AK	582	blks = fb_mmc_blk_write(dev_desc, blks_start, blks_size, NULL);
f73a7df9 AK	583
89792381	584	if (blks != blks_size) {
1ad5facb	585	pr_err("failed erasing from device %d\n", dev_desc->devnum);
c4ded03e	586	fastboot_fail("failed erasing from device", response);
89792381 DK	587	return;
	588	}
	589
	590	printf("........ erased " LBAFU " bytes from '%s'\n",
	591	blks_size * info.blksz, cmd);
c4ded03e	592	fastboot_okay(NULL, response);
89792381	593	}