[qemu.git] / hw / loader.c

/*
 * QEMU Executable loader
 *
 * Copyright (c) 2006 Fabrice Bellard
 *
 * Permission is hereby granted, free of charge, to any person obtaining a copy
 * of this software and associated documentation files (the "Software"), to deal
 * in the Software without restriction, including without limitation the rights
 * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 * copies of the Software, and to permit persons to whom the Software is
 * furnished to do so, subject to the following conditions:
 *
 * The above copyright notice and this permission notice shall be included in
 * all copies or substantial portions of the Software.
 *
 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
 * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
 * THE SOFTWARE.
 *
 * Gunzip functionality in this file is derived from u-boot:
 *
 * (C) Copyright 2008 Semihalf
 *
 * (C) Copyright 2000-2005
 * Wolfgang Denk, DENX Software Engineering, [email protected].
 *
 * This program is free software; you can redistribute it and/or
 * modify it under the terms of the GNU General Public License as
 * published by the Free Software Foundation; either version 2 of
 * the License, or (at your option) any later version.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.	 See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License along
 * with this program; if not, see <http://www.gnu.org/licenses/>.
 */

#include "hw.h"
#include "disas.h"
#include "monitor.h"
#include "sysemu.h"
#include "uboot_image.h"
#include "loader.h"

#include <zlib.h>

static int roms_loaded;

/* return the size or -1 if error */
int get_image_size(const char *filename)
{
    int fd, size;
    fd = open(filename, O_RDONLY | O_BINARY);
    if (fd < 0)
        return -1;
    size = lseek(fd, 0, SEEK_END);
    close(fd);
    return size;
}

/* return the size or -1 if error */
/* deprecated, because caller does not specify buffer size! */
int load_image(const char *filename, uint8_t *addr)
{
    int fd, size;
    fd = open(filename, O_RDONLY | O_BINARY);
    if (fd < 0)
        return -1;
    size = lseek(fd, 0, SEEK_END);
    lseek(fd, 0, SEEK_SET);
    if (read(fd, addr, size) != size) {
        close(fd);
        return -1;
    }
    close(fd);
    return size;
}

/* read()-like version */
int read_targphys(const char *name,
                  int fd, target_phys_addr_t dst_addr, size_t nbytes)
{
    uint8_t *buf;
    size_t did;

    buf = qemu_malloc(nbytes);
    did = read(fd, buf, nbytes);
    if (did > 0)
        rom_add_blob_fixed("read", buf, did, dst_addr);
    qemu_free(buf);
    return did;
}

/* return the size or -1 if error */
int load_image_targphys(const char *filename,
			target_phys_addr_t addr, int max_sz)
{
    int size;

    size = get_image_size(filename);
    if (size > 0)
        rom_add_file_fixed(filename, addr);
    return size;
}

void pstrcpy_targphys(const char *name, target_phys_addr_t dest, int buf_size,
                      const char *source)
{
    const char *nulp;
    char *ptr;

    if (buf_size <= 0) return;
    nulp = memchr(source, 0, buf_size);
    if (nulp) {
        rom_add_blob_fixed(name, source, (nulp - source) + 1, dest);
    } else {
        rom_add_blob_fixed(name, source, buf_size, dest);
        ptr = rom_ptr(dest + buf_size - 1);
        *ptr = 0;
    }
}

/* A.OUT loader */

struct exec
{
  uint32_t a_info;   /* Use macros N_MAGIC, etc for access */
  uint32_t a_text;   /* length of text, in bytes */
  uint32_t a_data;   /* length of data, in bytes */
  uint32_t a_bss;    /* length of uninitialized data area, in bytes */
  uint32_t a_syms;   /* length of symbol table data in file, in bytes */
  uint32_t a_entry;  /* start address */
  uint32_t a_trsize; /* length of relocation info for text, in bytes */
  uint32_t a_drsize; /* length of relocation info for data, in bytes */
};

static void bswap_ahdr(struct exec *e)
{
    bswap32s(&e->a_info);
    bswap32s(&e->a_text);
    bswap32s(&e->a_data);
    bswap32s(&e->a_bss);
    bswap32s(&e->a_syms);
    bswap32s(&e->a_entry);
    bswap32s(&e->a_trsize);
    bswap32s(&e->a_drsize);
}

#define N_MAGIC(exec) ((exec).a_info & 0xffff)
#define OMAGIC 0407
#define NMAGIC 0410
#define ZMAGIC 0413
#define QMAGIC 0314
#define _N_HDROFF(x) (1024 - sizeof (struct exec))
#define N_TXTOFF(x)							\
    (N_MAGIC(x) == ZMAGIC ? _N_HDROFF((x)) + sizeof (struct exec) :	\
     (N_MAGIC(x) == QMAGIC ? 0 : sizeof (struct exec)))
#define N_TXTADDR(x, target_page_size) (N_MAGIC(x) == QMAGIC ? target_page_size : 0)
#define _N_SEGMENT_ROUND(x, target_page_size) (((x) + target_page_size - 1) & ~(target_page_size - 1))

#define _N_TXTENDADDR(x, target_page_size) (N_TXTADDR(x, target_page_size)+(x).a_text)

#define N_DATADDR(x, target_page_size) \
    (N_MAGIC(x)==OMAGIC? (_N_TXTENDADDR(x, target_page_size)) \
     : (_N_SEGMENT_ROUND (_N_TXTENDADDR(x, target_page_size), target_page_size)))


int load_aout(const char *filename, target_phys_addr_t addr, int max_sz,
              int bswap_needed, target_phys_addr_t target_page_size)
{
    int fd, size, ret;
    struct exec e;
    uint32_t magic;

    fd = open(filename, O_RDONLY | O_BINARY);
    if (fd < 0)
        return -1;

    size = read(fd, &e, sizeof(e));
    if (size < 0)
        goto fail;

    if (bswap_needed) {
        bswap_ahdr(&e);
    }

    magic = N_MAGIC(e);
    switch (magic) {
    case ZMAGIC:
    case QMAGIC:
    case OMAGIC:
        if (e.a_text + e.a_data > max_sz)
            goto fail;
	lseek(fd, N_TXTOFF(e), SEEK_SET);
	size = read_targphys(filename, fd, addr, e.a_text + e.a_data);
	if (size < 0)
	    goto fail;
	break;
    case NMAGIC:
        if (N_DATADDR(e, target_page_size) + e.a_data > max_sz)
            goto fail;
	lseek(fd, N_TXTOFF(e), SEEK_SET);
	size = read_targphys(filename, fd, addr, e.a_text);
	if (size < 0)
	    goto fail;
        ret = read_targphys(filename, fd, addr + N_DATADDR(e, target_page_size),
                            e.a_data);
	if (ret < 0)
	    goto fail;
	size += ret;
	break;
    default:
	goto fail;
    }
    close(fd);
    return size;
 fail:
    close(fd);
    return -1;
}

/* ELF loader */

static void *load_at(int fd, int offset, int size)
{
    void *ptr;
    if (lseek(fd, offset, SEEK_SET) < 0)
        return NULL;
    ptr = qemu_malloc(size);
    if (read(fd, ptr, size) != size) {
        qemu_free(ptr);
        return NULL;
    }
    return ptr;
}

#ifdef ELF_CLASS
#undef ELF_CLASS
#endif

#define ELF_CLASS   ELFCLASS32
#include "elf.h"

#define SZ		32
#define elf_word        uint32_t
#define elf_sword        int32_t
#define bswapSZs	bswap32s
#include "elf_ops.h"

#undef elfhdr
#undef elf_phdr
#undef elf_shdr
#undef elf_sym
#undef elf_note
#undef elf_word
#undef elf_sword
#undef bswapSZs
#undef SZ
#define elfhdr		elf64_hdr
#define elf_phdr	elf64_phdr
#define elf_note	elf64_note
#define elf_shdr	elf64_shdr
#define elf_sym		elf64_sym
#define elf_word        uint64_t
#define elf_sword        int64_t
#define bswapSZs	bswap64s
#define SZ		64
#include "elf_ops.h"

/* return < 0 if error, otherwise the number of bytes loaded in memory */
int load_elf(const char *filename, int64_t address_offset,
             uint64_t *pentry, uint64_t *lowaddr, uint64_t *highaddr,
             int big_endian, int elf_machine, int clear_lsb)
{
    int fd, data_order, target_data_order, must_swab, ret;
    uint8_t e_ident[EI_NIDENT];

    fd = open(filename, O_RDONLY | O_BINARY);
    if (fd < 0) {
        perror(filename);
        return -1;
    }
    if (read(fd, e_ident, sizeof(e_ident)) != sizeof(e_ident))
        goto fail;
    if (e_ident[0] != ELFMAG0 ||
        e_ident[1] != ELFMAG1 ||
        e_ident[2] != ELFMAG2 ||
        e_ident[3] != ELFMAG3)
        goto fail;
#ifdef HOST_WORDS_BIGENDIAN
    data_order = ELFDATA2MSB;
#else
    data_order = ELFDATA2LSB;
#endif
    must_swab = data_order != e_ident[EI_DATA];
    if (big_endian) {
        target_data_order = ELFDATA2MSB;
    } else {
        target_data_order = ELFDATA2LSB;
    }

    if (target_data_order != e_ident[EI_DATA])
        return -1;

    lseek(fd, 0, SEEK_SET);
    if (e_ident[EI_CLASS] == ELFCLASS64) {
        ret = load_elf64(filename, fd, address_offset, must_swab, pentry,
                         lowaddr, highaddr, elf_machine, clear_lsb);
    } else {
        ret = load_elf32(filename, fd, address_offset, must_swab, pentry,
                         lowaddr, highaddr, elf_machine, clear_lsb);
    }

    close(fd);
    return ret;

 fail:
    close(fd);
    return -1;
}

static void bswap_uboot_header(uboot_image_header_t *hdr)
{
#ifndef HOST_WORDS_BIGENDIAN
    bswap32s(&hdr->ih_magic);
    bswap32s(&hdr->ih_hcrc);
    bswap32s(&hdr->ih_time);
    bswap32s(&hdr->ih_size);
    bswap32s(&hdr->ih_load);
    bswap32s(&hdr->ih_ep);
    bswap32s(&hdr->ih_dcrc);
#endif
}


#define ZALLOC_ALIGNMENT	16

static void *zalloc(void *x, unsigned items, unsigned size)
{
    void *p;

    size *= items;
    size = (size + ZALLOC_ALIGNMENT - 1) & ~(ZALLOC_ALIGNMENT - 1);

    p = qemu_malloc(size);

    return (p);
}

static void zfree(void *x, void *addr)
{
    qemu_free(addr);
}


#define HEAD_CRC	2
#define EXTRA_FIELD	4
#define ORIG_NAME	8
#define COMMENT		0x10
#define RESERVED	0xe0

#define DEFLATED	8

/* This is the maximum in uboot, so if a uImage overflows this, it would
 * overflow on real hardware too. */
#define UBOOT_MAX_GUNZIP_BYTES 0x800000

static ssize_t gunzip(void *dst, size_t dstlen, uint8_t *src,
                      size_t srclen)
{
    z_stream s;
    ssize_t dstbytes;
    int r, i, flags;

    /* skip header */
    i = 10;
    flags = src[3];
    if (src[2] != DEFLATED || (flags & RESERVED) != 0) {
        puts ("Error: Bad gzipped data\n");
        return -1;
    }
    if ((flags & EXTRA_FIELD) != 0)
        i = 12 + src[10] + (src[11] << 8);
    if ((flags & ORIG_NAME) != 0)
        while (src[i++] != 0)
            ;
    if ((flags & COMMENT) != 0)
        while (src[i++] != 0)
            ;
    if ((flags & HEAD_CRC) != 0)
        i += 2;
    if (i >= srclen) {
        puts ("Error: gunzip out of data in header\n");
        return -1;
    }

    s.zalloc = zalloc;
    s.zfree = zfree;

    r = inflateInit2(&s, -MAX_WBITS);
    if (r != Z_OK) {
        printf ("Error: inflateInit2() returned %d\n", r);
        return (-1);
    }
    s.next_in = src + i;
    s.avail_in = srclen - i;
    s.next_out = dst;
    s.avail_out = dstlen;
    r = inflate(&s, Z_FINISH);
    if (r != Z_OK && r != Z_STREAM_END) {
        printf ("Error: inflate() returned %d\n", r);
        return -1;
    }
    dstbytes = s.next_out - (unsigned char *) dst;
    inflateEnd(&s);

    return dstbytes;
}

/* Load a U-Boot image.  */
int load_uimage(const char *filename, target_phys_addr_t *ep,
                target_phys_addr_t *loadaddr, int *is_linux)
{
    int fd;
    int size;
    uboot_image_header_t h;
    uboot_image_header_t *hdr = &h;
    uint8_t *data = NULL;
    int ret = -1;

    fd = open(filename, O_RDONLY | O_BINARY);
    if (fd < 0)
        return -1;

    size = read(fd, hdr, sizeof(uboot_image_header_t));
    if (size < 0)
        goto out;

    bswap_uboot_header(hdr);

    if (hdr->ih_magic != IH_MAGIC)
        goto out;

    /* TODO: Implement other image types.  */
    if (hdr->ih_type != IH_TYPE_KERNEL) {
        fprintf(stderr, "Can only load u-boot image type \"kernel\"\n");
        goto out;
    }

    switch (hdr->ih_comp) {
    case IH_COMP_NONE:
    case IH_COMP_GZIP:
        break;
    default:
        fprintf(stderr,
                "Unable to load u-boot images with compression type %d\n",
                hdr->ih_comp);
        goto out;
    }

    /* TODO: Check CPU type.  */
    if (is_linux) {
        if (hdr->ih_os == IH_OS_LINUX)
            *is_linux = 1;
        else
            *is_linux = 0;
    }

    *ep = hdr->ih_ep;
    data = qemu_malloc(hdr->ih_size);

    if (read(fd, data, hdr->ih_size) != hdr->ih_size) {
        fprintf(stderr, "Error reading file\n");
        goto out;
    }

    if (hdr->ih_comp == IH_COMP_GZIP) {
        uint8_t *compressed_data;
        size_t max_bytes;
        ssize_t bytes;

        compressed_data = data;
        max_bytes = UBOOT_MAX_GUNZIP_BYTES;
        data = qemu_malloc(max_bytes);

        bytes = gunzip(data, max_bytes, compressed_data, hdr->ih_size);
        qemu_free(compressed_data);
        if (bytes < 0) {
            fprintf(stderr, "Unable to decompress gzipped image!\n");
            goto out;
        }
        hdr->ih_size = bytes;
    }

    rom_add_blob_fixed(filename, data, hdr->ih_size, hdr->ih_load);

    if (loadaddr)
        *loadaddr = hdr->ih_load;

    ret = hdr->ih_size;

out:
    if (data)
        qemu_free(data);
    close(fd);
    return ret;
}

/*
 * Functions for reboot-persistent memory regions.
 *  - used for vga bios and option roms.
 *  - also linux kernel (-kernel / -initrd).
 */

typedef struct Rom Rom;

struct Rom {
    char *name;
    char *path;
    size_t romsize;
    uint8_t *data;
    int align;
    int isrom;

    target_phys_addr_t min;
    target_phys_addr_t max;
    target_phys_addr_t addr;
    QTAILQ_ENTRY(Rom) next;
};

static QTAILQ_HEAD(, Rom) roms = QTAILQ_HEAD_INITIALIZER(roms);
int rom_enable_driver_roms;

static void rom_insert(Rom *rom)
{
    Rom *item;

    if (roms_loaded) {
        hw_error ("ROM images must be loaded at startup\n");
    }

    /* list is ordered by load address */
    QTAILQ_FOREACH(item, &roms, next) {
        if (rom->min >= item->min)
            continue;
        QTAILQ_INSERT_BEFORE(item, rom, next);
        return;
    }
    QTAILQ_INSERT_TAIL(&roms, rom, next);
}

int rom_add_file(const char *file,
                 target_phys_addr_t min, target_phys_addr_t max, int align)
{
    Rom *rom;
    int rc, fd = -1;

    rom = qemu_mallocz(sizeof(*rom));
    rom->name = qemu_strdup(file);
    rom->path = qemu_find_file(QEMU_FILE_TYPE_BIOS, rom->name);
    if (rom->path == NULL) {
        rom->path = qemu_strdup(file);
    }

    fd = open(rom->path, O_RDONLY | O_BINARY);
    if (fd == -1) {
        fprintf(stderr, "Could not open option rom '%s': %s\n",
                rom->path, strerror(errno));
        goto err;
    }

    rom->align   = align;
    rom->min     = min;
    rom->max     = max;
    rom->romsize = lseek(fd, 0, SEEK_END);
    rom->data    = qemu_mallocz(rom->romsize);
    lseek(fd, 0, SEEK_SET);
    rc = read(fd, rom->data, rom->romsize);
    if (rc != rom->romsize) {
        fprintf(stderr, "rom: file %-20s: read error: rc=%d (expected %zd)\n",
                rom->name, rc, rom->romsize);
        goto err;
    }
    close(fd);
    rom_insert(rom);
    return 0;

err:
    if (fd != -1)
        close(fd);
    qemu_free(rom->data);
    qemu_free(rom->path);
    qemu_free(rom->name);
    qemu_free(rom);
    return -1;
}

int rom_add_blob(const char *name, const void *blob, size_t len,
                 target_phys_addr_t min, target_phys_addr_t max, int align)
{
    Rom *rom;

    rom = qemu_mallocz(sizeof(*rom));
    rom->name    = qemu_strdup(name);
    rom->align   = align;
    rom->min     = min;
    rom->max     = max;
    rom->romsize = len;
    rom->data    = qemu_mallocz(rom->romsize);
    memcpy(rom->data, blob, len);
    rom_insert(rom);
    return 0;
}

int rom_add_vga(const char *file)
{
    if (!rom_enable_driver_roms)
        return 0;
    return rom_add_file(file, PC_ROM_MIN_VGA, PC_ROM_MAX, PC_ROM_ALIGN);
}

int rom_add_option(const char *file)
{
    if (!rom_enable_driver_roms)
        return 0;
    return rom_add_file(file, PC_ROM_MIN_OPTION, PC_ROM_MAX, PC_ROM_ALIGN);
}

static void rom_reset(void *unused)
{
    Rom *rom;

    QTAILQ_FOREACH(rom, &roms, next) {
        if (rom->data == NULL)
            continue;
        cpu_physical_memory_write_rom(rom->addr, rom->data, rom->romsize);
        if (rom->isrom) {
            /* rom needs to be written only once */
            qemu_free(rom->data);
            rom->data = NULL;
        }
    }
}

int rom_load_all(void)
{
    target_phys_addr_t addr = 0;
    int memtype;
    Rom *rom;

    QTAILQ_FOREACH(rom, &roms, next) {
        if (addr < rom->min)
            addr = rom->min;
        if (rom->max) {
            /* load address range */
            if (rom->align) {
                addr += (rom->align-1);
                addr &= ~(rom->align-1);
            }
            if (addr + rom->romsize > rom->max) {
                fprintf(stderr, "rom: out of memory (rom %s, "
                        "addr 0x" TARGET_FMT_plx
                        ", size 0x%zx, max 0x" TARGET_FMT_plx ")\n",
                        rom->name, addr, rom->romsize, rom->max);
                return -1;
            }
        } else {
            /* fixed address requested */
            if (addr != rom->min) {
                fprintf(stderr, "rom: requested regions overlap "
                        "(rom %s. free=0x" TARGET_FMT_plx
                        ", addr=0x" TARGET_FMT_plx ")\n",
                        rom->name, addr, rom->min);
                return -1;
            }
        }
        rom->addr = addr;
        addr += rom->romsize;
        memtype = cpu_get_physical_page_desc(rom->addr) & (3 << IO_MEM_SHIFT);
        if (memtype == IO_MEM_ROM)
            rom->isrom = 1;
    }
    qemu_register_reset(rom_reset, NULL);
    roms_loaded = 1;
    return 0;
}

static Rom *find_rom(target_phys_addr_t addr)
{
    Rom *rom;

    QTAILQ_FOREACH(rom, &roms, next) {
        if (rom->max)
            continue;
        if (rom->min > addr)
            continue;
        if (rom->min + rom->romsize < addr)
            continue;
        return rom;
    }
    return NULL;
}

int rom_copy(uint8_t *dest, target_phys_addr_t addr, size_t size)
{
    target_phys_addr_t end = addr + size;
    uint8_t *s, *d = dest;
    size_t l = 0;
    Rom *rom;

    QTAILQ_FOREACH(rom, &roms, next) {
        if (rom->max)
            continue;
        if (rom->min > addr)
            continue;
        if (rom->min + rom->romsize < addr)
            continue;
        if (rom->min > end)
            break;
        if (!rom->data)
            continue;

        d = dest + (rom->min - addr);
        s = rom->data;
        l = rom->romsize;

        if (rom->min < addr) {
            d = dest;
            s += (addr - rom->min);
            l -= (addr - rom->min);
        }
        if ((d + l) > (dest + size)) {
            l = dest - d;
        }

        memcpy(d, s, l);
    }

    return (d + l) - dest;
}

void *rom_ptr(target_phys_addr_t addr)
{
    Rom *rom;

    rom = find_rom(addr);
    if (!rom || !rom->data)
        return NULL;
    return rom->data + (addr - rom->min);
}

void do_info_roms(Monitor *mon)
{
    Rom *rom;

    QTAILQ_FOREACH(rom, &roms, next) {
        monitor_printf(mon, "addr=" TARGET_FMT_plx
                       " size=0x%06zx mem=%s name=\"%s\" \n",
                       rom->addr, rom->romsize,
                       rom->isrom ? "rom" : "ram",
                       rom->name);
    }
}
Commit	Line	Data
5fe141fd FB	1	/*
5fe141fd FB	2	* QEMU Executable loader
5fafdf24	3	*
5fe141fd	4	* Copyright (c) 2006 Fabrice Bellard
5fafdf24	5	*
5fe141fd FB	6	* Permission is hereby granted, free of charge, to any person obtaining a copy
	7	* of this software and associated documentation files (the "Software"), to deal
	8	* in the Software without restriction, including without limitation the rights
	9	* to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
	10	* copies of the Software, and to permit persons to whom the Software is
	11	* furnished to do so, subject to the following conditions:
	12	*
	13	* The above copyright notice and this permission notice shall be included in
	14	* all copies or substantial portions of the Software.
	15	*
	16	* THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
	17	* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
	18	* FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
	19	* THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
	20	* LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
	21	* OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
	22	* THE SOFTWARE.
5a123577 AL	23	*
	24	* Gunzip functionality in this file is derived from u-boot:
	25	*
	26	* (C) Copyright 2008 Semihalf
	27	*
	28	* (C) Copyright 2000-2005
	29	* Wolfgang Denk, DENX Software Engineering, [email protected].
	30	*
	31	* This program is free software; you can redistribute it and/or
	32	* modify it under the terms of the GNU General Public License as
	33	* published by the Free Software Foundation; either version 2 of
	34	* the License, or (at your option) any later version.
	35	*
	36	* This program is distributed in the hope that it will be useful,
	37	* but WITHOUT ANY WARRANTY; without even the implied warranty of
	38	* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
	39	* GNU General Public License for more details.
	40	*
fad6cb1a	41	* You should have received a copy of the GNU General Public License along
8167ee88	42	* with this program; if not, see <http://www.gnu.org/licenses/>.
5fe141fd	43	*/
5a123577	44
ca20cf32	45	#include "hw.h"
5fe141fd	46	#include "disas.h"
45a50b16	47	#include "monitor.h"
9596ebb7	48	#include "sysemu.h"
1c7b3754	49	#include "uboot_image.h"
ca20cf32	50	#include "loader.h"
5fe141fd	51
5a123577 AL	52	#include <zlib.h>
5a123577 AL	53
97fe84f5 PB	54	static int roms_loaded;
97fe84f5 PB	55
5fe141fd FB	56	/* return the size or -1 if error */
	57	int get_image_size(const char *filename)
	58	{
	59	int fd, size;
	60	fd = open(filename, O_RDONLY \| O_BINARY);
	61	if (fd < 0)
	62	return -1;
	63	size = lseek(fd, 0, SEEK_END);
	64	close(fd);
	65	return size;
	66	}
	67
	68	/* return the size or -1 if error */
293f78bc	69	/* deprecated, because caller does not specify buffer size! */
5fe141fd FB	70	int load_image(const char filename, uint8_t addr)
	71	{
	72	int fd, size;
	73	fd = open(filename, O_RDONLY \| O_BINARY);
	74	if (fd < 0)
	75	return -1;
	76	size = lseek(fd, 0, SEEK_END);
	77	lseek(fd, 0, SEEK_SET);
	78	if (read(fd, addr, size) != size) {
	79	close(fd);
	80	return -1;
	81	}
	82	close(fd);
	83	return size;
	84	}
	85
293f78bc	86	/* read()-like version */
45a50b16 GH	87	int read_targphys(const char *name,
45a50b16 GH	88	int fd, target_phys_addr_t dst_addr, size_t nbytes)
293f78bc	89	{
45a50b16 GH	90	uint8_t *buf;
	91	size_t did;
	92
	93	buf = qemu_malloc(nbytes);
	94	did = read(fd, buf, nbytes);
	95	if (did > 0)
	96	rom_add_blob_fixed("read", buf, did, dst_addr);
	97	qemu_free(buf);
	98	return did;
293f78bc BS	99	}
	100
	101	/* return the size or -1 if error */
	102	int load_image_targphys(const char *filename,
c227f099	103	target_phys_addr_t addr, int max_sz)
293f78bc	104	{
45a50b16	105	int size;
293f78bc	106
45a50b16 GH	107	size = get_image_size(filename);
	108	if (size > 0)
	109	rom_add_file_fixed(filename, addr);
	110	return size;
293f78bc BS	111	}
293f78bc BS	112
3c178e72	113	void pstrcpy_targphys(const char *name, target_phys_addr_t dest, int buf_size,
293f78bc BS	114	const char *source)
293f78bc BS	115	{
293f78bc	116	const char *nulp;
3c178e72	117	char *ptr;
293f78bc BS	118
	119	if (buf_size <= 0) return;
	120	nulp = memchr(source, 0, buf_size);
	121	if (nulp) {
3c178e72	122	rom_add_blob_fixed(name, source, (nulp - source) + 1, dest);
293f78bc	123	} else {
3c178e72 GH	124	rom_add_blob_fixed(name, source, buf_size, dest);
	125	ptr = rom_ptr(dest + buf_size - 1);
	126	*ptr = 0;
293f78bc BS	127	}
	128	}
	129
5fe141fd FB	130	/* A.OUT loader */
	131
	132	struct exec
	133	{
	134	uint32_t a_info; /* Use macros N_MAGIC, etc for access */
	135	uint32_t a_text; /* length of text, in bytes */
	136	uint32_t a_data; /* length of data, in bytes */
	137	uint32_t a_bss; /* length of uninitialized data area, in bytes */
	138	uint32_t a_syms; /* length of symbol table data in file, in bytes */
	139	uint32_t a_entry; /* start address */
	140	uint32_t a_trsize; /* length of relocation info for text, in bytes */
	141	uint32_t a_drsize; /* length of relocation info for data, in bytes */
	142	};
	143
5fe141fd FB	144	static void bswap_ahdr(struct exec *e)
	145	{
	146	bswap32s(&e->a_info);
	147	bswap32s(&e->a_text);
	148	bswap32s(&e->a_data);
	149	bswap32s(&e->a_bss);
	150	bswap32s(&e->a_syms);
	151	bswap32s(&e->a_entry);
	152	bswap32s(&e->a_trsize);
	153	bswap32s(&e->a_drsize);
	154	}
5fe141fd FB	155
	156	#define N_MAGIC(exec) ((exec).a_info & 0xffff)
	157	#define OMAGIC 0407
	158	#define NMAGIC 0410
	159	#define ZMAGIC 0413
	160	#define QMAGIC 0314
	161	#define _N_HDROFF(x) (1024 - sizeof (struct exec))
	162	#define N_TXTOFF(x) \
	163	(N_MAGIC(x) == ZMAGIC ? _N_HDROFF((x)) + sizeof (struct exec) : \
	164	(N_MAGIC(x) == QMAGIC ? 0 : sizeof (struct exec)))
ca20cf32 BS	165	#define N_TXTADDR(x, target_page_size) (N_MAGIC(x) == QMAGIC ? target_page_size : 0)
ca20cf32 BS	166	#define _N_SEGMENT_ROUND(x, target_page_size) (((x) + target_page_size - 1) & ~(target_page_size - 1))
5fe141fd	167
ca20cf32	168	#define _N_TXTENDADDR(x, target_page_size) (N_TXTADDR(x, target_page_size)+(x).a_text)
5fe141fd	169
ca20cf32 BS	170	#define N_DATADDR(x, target_page_size) \
	171	(N_MAGIC(x)==OMAGIC? (_N_TXTENDADDR(x, target_page_size)) \
	172	: (_N_SEGMENT_ROUND (_N_TXTENDADDR(x, target_page_size), target_page_size)))
5fe141fd FB	173
5fe141fd FB	174
c227f099 AL	175	int load_aout(const char *filename, target_phys_addr_t addr, int max_sz,
c227f099 AL	176	int bswap_needed, target_phys_addr_t target_page_size)
5fe141fd FB	177	{
	178	int fd, size, ret;
	179	struct exec e;
	180	uint32_t magic;
	181
	182	fd = open(filename, O_RDONLY \| O_BINARY);
	183	if (fd < 0)
	184	return -1;
	185
	186	size = read(fd, &e, sizeof(e));
	187	if (size < 0)
	188	goto fail;
	189
ca20cf32 BS	190	if (bswap_needed) {
	191	bswap_ahdr(&e);
	192	}
5fe141fd FB	193
	194	magic = N_MAGIC(e);
	195	switch (magic) {
	196	case ZMAGIC:
	197	case QMAGIC:
	198	case OMAGIC:
293f78bc BS	199	if (e.a_text + e.a_data > max_sz)
293f78bc BS	200	goto fail;
5fe141fd	201	lseek(fd, N_TXTOFF(e), SEEK_SET);
45a50b16	202	size = read_targphys(filename, fd, addr, e.a_text + e.a_data);
5fe141fd FB	203	if (size < 0)
	204	goto fail;
	205	break;
	206	case NMAGIC:
ca20cf32	207	if (N_DATADDR(e, target_page_size) + e.a_data > max_sz)
293f78bc	208	goto fail;
5fe141fd	209	lseek(fd, N_TXTOFF(e), SEEK_SET);
45a50b16	210	size = read_targphys(filename, fd, addr, e.a_text);
5fe141fd FB	211	if (size < 0)
5fe141fd FB	212	goto fail;
45a50b16	213	ret = read_targphys(filename, fd, addr + N_DATADDR(e, target_page_size),
ca20cf32	214	e.a_data);
5fe141fd FB	215	if (ret < 0)
	216	goto fail;
	217	size += ret;
	218	break;
	219	default:
	220	goto fail;
	221	}
	222	close(fd);
	223	return size;
	224	fail:
	225	close(fd);
	226	return -1;
	227	}
	228
	229	/* ELF loader */
	230
	231	static void *load_at(int fd, int offset, int size)
	232	{
	233	void *ptr;
	234	if (lseek(fd, offset, SEEK_SET) < 0)
	235	return NULL;
	236	ptr = qemu_malloc(size);
5fe141fd FB	237	if (read(fd, ptr, size) != size) {
	238	qemu_free(ptr);
	239	return NULL;
	240	}
	241	return ptr;
	242	}
	243
3efa9a67	244	#ifdef ELF_CLASS
	245	#undef ELF_CLASS
	246	#endif
5fe141fd FB	247
	248	#define ELF_CLASS ELFCLASS32
	249	#include "elf.h"
	250
	251	#define SZ 32
	252	#define elf_word uint32_t
82790064	253	#define elf_sword int32_t
5fe141fd FB	254	#define bswapSZs bswap32s
	255	#include "elf_ops.h"
	256
	257	#undef elfhdr
	258	#undef elf_phdr
	259	#undef elf_shdr
	260	#undef elf_sym
	261	#undef elf_note
	262	#undef elf_word
82790064	263	#undef elf_sword
5fe141fd FB	264	#undef bswapSZs
	265	#undef SZ
	266	#define elfhdr elf64_hdr
	267	#define elf_phdr elf64_phdr
	268	#define elf_note elf64_note
	269	#define elf_shdr elf64_shdr
	270	#define elf_sym elf64_sym
	271	#define elf_word uint64_t
82790064	272	#define elf_sword int64_t
5fe141fd FB	273	#define bswapSZs bswap64s
	274	#define SZ 64
	275	#include "elf_ops.h"
	276
	277	/* return < 0 if error, otherwise the number of bytes loaded in memory */
83c1f87c	278	int load_elf(const char *filename, int64_t address_offset,
ca20cf32 BS	279	uint64_t pentry, uint64_t lowaddr, uint64_t *highaddr,
ca20cf32 BS	280	int big_endian, int elf_machine, int clear_lsb)
5fe141fd	281	{
ca20cf32	282	int fd, data_order, target_data_order, must_swab, ret;
5fe141fd FB	283	uint8_t e_ident[EI_NIDENT];
5fe141fd FB	284
699e4642	285	fd = open(filename, O_RDONLY \| O_BINARY);
5fe141fd FB	286	if (fd < 0) {
	287	perror(filename);
	288	return -1;
	289	}
	290	if (read(fd, e_ident, sizeof(e_ident)) != sizeof(e_ident))
	291	goto fail;
	292	if (e_ident[0] != ELFMAG0 \|\|
	293	e_ident[1] != ELFMAG1 \|\|
	294	e_ident[2] != ELFMAG2 \|\|
	295	e_ident[3] != ELFMAG3)
	296	goto fail;
e2542fe2	297	#ifdef HOST_WORDS_BIGENDIAN
5fe141fd FB	298	data_order = ELFDATA2MSB;
	299	#else
	300	data_order = ELFDATA2LSB;
	301	#endif
	302	must_swab = data_order != e_ident[EI_DATA];
ca20cf32 BS	303	if (big_endian) {
	304	target_data_order = ELFDATA2MSB;
	305	} else {
	306	target_data_order = ELFDATA2LSB;
	307	}
9042c0e2	308
ca20cf32	309	if (target_data_order != e_ident[EI_DATA])
9042c0e2 TS	310	return -1;
9042c0e2 TS	311
5fe141fd FB	312	lseek(fd, 0, SEEK_SET);
5fe141fd FB	313	if (e_ident[EI_CLASS] == ELFCLASS64) {
45a50b16	314	ret = load_elf64(filename, fd, address_offset, must_swab, pentry,
ca20cf32	315	lowaddr, highaddr, elf_machine, clear_lsb);
5fe141fd	316	} else {
45a50b16	317	ret = load_elf32(filename, fd, address_offset, must_swab, pentry,
ca20cf32	318	lowaddr, highaddr, elf_machine, clear_lsb);
5fe141fd FB	319	}
	320
	321	close(fd);
	322	return ret;
	323
	324	fail:
	325	close(fd);
	326	return -1;
	327	}
1c7b3754	328
c227f099	329	static void bswap_uboot_header(uboot_image_header_t *hdr)
1c7b3754	330	{
e2542fe2	331	#ifndef HOST_WORDS_BIGENDIAN
1c7b3754 PB	332	bswap32s(&hdr->ih_magic);
	333	bswap32s(&hdr->ih_hcrc);
	334	bswap32s(&hdr->ih_time);
	335	bswap32s(&hdr->ih_size);
	336	bswap32s(&hdr->ih_load);
	337	bswap32s(&hdr->ih_ep);
	338	bswap32s(&hdr->ih_dcrc);
	339	#endif
	340	}
	341
5a123577 AL	342
	343	#define ZALLOC_ALIGNMENT 16
	344
	345	static void zalloc(void x, unsigned items, unsigned size)
	346	{
	347	void *p;
	348
	349	size *= items;
	350	size = (size + ZALLOC_ALIGNMENT - 1) & ~(ZALLOC_ALIGNMENT - 1);
	351
	352	p = qemu_malloc(size);
	353
	354	return (p);
	355	}
	356
d084eab6	357	static void zfree(void x, void addr)
5a123577 AL	358	{
	359	qemu_free(addr);
	360	}
	361
	362
	363	#define HEAD_CRC 2
	364	#define EXTRA_FIELD 4
	365	#define ORIG_NAME 8
	366	#define COMMENT 0x10
	367	#define RESERVED 0xe0
	368
	369	#define DEFLATED 8
	370
	371	/* This is the maximum in uboot, so if a uImage overflows this, it would
	372	* overflow on real hardware too. */
	373	#define UBOOT_MAX_GUNZIP_BYTES 0x800000
	374
	375	static ssize_t gunzip(void dst, size_t dstlen, uint8_t src,
	376	size_t srclen)
	377	{
	378	z_stream s;
	379	ssize_t dstbytes;
	380	int r, i, flags;
	381
	382	/* skip header */
	383	i = 10;
	384	flags = src[3];
	385	if (src[2] != DEFLATED \|\| (flags & RESERVED) != 0) {
	386	puts ("Error: Bad gzipped data\n");
	387	return -1;
	388	}
	389	if ((flags & EXTRA_FIELD) != 0)
	390	i = 12 + src[10] + (src[11] << 8);
	391	if ((flags & ORIG_NAME) != 0)
	392	while (src[i++] != 0)
	393	;
	394	if ((flags & COMMENT) != 0)
	395	while (src[i++] != 0)
	396	;
	397	if ((flags & HEAD_CRC) != 0)
	398	i += 2;
	399	if (i >= srclen) {
	400	puts ("Error: gunzip out of data in header\n");
	401	return -1;
	402	}
	403
	404	s.zalloc = zalloc;
d084eab6	405	s.zfree = zfree;
5a123577 AL	406
	407	r = inflateInit2(&s, -MAX_WBITS);
	408	if (r != Z_OK) {
	409	printf ("Error: inflateInit2() returned %d\n", r);
	410	return (-1);
	411	}
	412	s.next_in = src + i;
	413	s.avail_in = srclen - i;
	414	s.next_out = dst;
	415	s.avail_out = dstlen;
	416	r = inflate(&s, Z_FINISH);
	417	if (r != Z_OK && r != Z_STREAM_END) {
	418	printf ("Error: inflate() returned %d\n", r);
	419	return -1;
	420	}
	421	dstbytes = s.next_out - (unsigned char *) dst;
	422	inflateEnd(&s);
	423
	424	return dstbytes;
	425	}
	426
1c7b3754	427	/* Load a U-Boot image. */
c227f099 AL	428	int load_uimage(const char filename, target_phys_addr_t ep,
c227f099 AL	429	target_phys_addr_t loadaddr, int is_linux)
1c7b3754	430	{
1c7b3754 PB	431	int fd;
1c7b3754 PB	432	int size;
c227f099 AL	433	uboot_image_header_t h;
c227f099 AL	434	uboot_image_header_t *hdr = &h;
1c7b3754	435	uint8_t *data = NULL;
265ca29a	436	int ret = -1;
1c7b3754 PB	437
	438	fd = open(filename, O_RDONLY \| O_BINARY);
	439	if (fd < 0)
	440	return -1;
	441
c227f099	442	size = read(fd, hdr, sizeof(uboot_image_header_t));
1c7b3754	443	if (size < 0)
265ca29a	444	goto out;
1c7b3754 PB	445
	446	bswap_uboot_header(hdr);
	447
	448	if (hdr->ih_magic != IH_MAGIC)
265ca29a	449	goto out;
1c7b3754	450
7e5f90fa AL	451	/* TODO: Implement other image types. */
	452	if (hdr->ih_type != IH_TYPE_KERNEL) {
	453	fprintf(stderr, "Can only load u-boot image type \"kernel\"\n");
265ca29a	454	goto out;
1c7b3754 PB	455	}
1c7b3754 PB	456
5a123577 AL	457	switch (hdr->ih_comp) {
	458	case IH_COMP_NONE:
	459	case IH_COMP_GZIP:
	460	break;
	461	default:
	462	fprintf(stderr,
	463	"Unable to load u-boot images with compression type %d\n",
	464	hdr->ih_comp);
265ca29a	465	goto out;
1c7b3754 PB	466	}
	467
	468	/* TODO: Check CPU type. */
	469	if (is_linux) {
7e5f90fa	470	if (hdr->ih_os == IH_OS_LINUX)
1c7b3754 PB	471	*is_linux = 1;
	472	else
	473	*is_linux = 0;
	474	}
	475
	476	*ep = hdr->ih_ep;
	477	data = qemu_malloc(hdr->ih_size);
1c7b3754 PB	478
	479	if (read(fd, data, hdr->ih_size) != hdr->ih_size) {
	480	fprintf(stderr, "Error reading file\n");
265ca29a	481	goto out;
1c7b3754 PB	482	}
1c7b3754 PB	483
5a123577 AL	484	if (hdr->ih_comp == IH_COMP_GZIP) {
	485	uint8_t *compressed_data;
	486	size_t max_bytes;
	487	ssize_t bytes;
	488
	489	compressed_data = data;
	490	max_bytes = UBOOT_MAX_GUNZIP_BYTES;
	491	data = qemu_malloc(max_bytes);
	492
	493	bytes = gunzip(data, max_bytes, compressed_data, hdr->ih_size);
	494	qemu_free(compressed_data);
	495	if (bytes < 0) {
	496	fprintf(stderr, "Unable to decompress gzipped image!\n");
	497	goto out;
	498	}
	499	hdr->ih_size = bytes;
	500	}
	501
45a50b16	502	rom_add_blob_fixed(filename, data, hdr->ih_size, hdr->ih_load);
1c7b3754	503
21cafd08 AL	504	if (loadaddr)
	505	*loadaddr = hdr->ih_load;
	506
265ca29a	507	ret = hdr->ih_size;
1c7b3754	508
265ca29a	509	out:
1c7b3754 PB	510	if (data)
	511	qemu_free(data);
	512	close(fd);
265ca29a	513	return ret;
1c7b3754	514	}
45a50b16 GH	515
	516	/*
	517	* Functions for reboot-persistent memory regions.
	518	* - used for vga bios and option roms.
	519	* - also linux kernel (-kernel / -initrd).
	520	*/
	521
	522	typedef struct Rom Rom;
	523
	524	struct Rom {
	525	char *name;
	526	char *path;
	527	size_t romsize;
	528	uint8_t *data;
	529	int align;
	530	int isrom;
	531
	532	target_phys_addr_t min;
	533	target_phys_addr_t max;
	534	target_phys_addr_t addr;
	535	QTAILQ_ENTRY(Rom) next;
	536	};
	537
	538	static QTAILQ_HEAD(, Rom) roms = QTAILQ_HEAD_INITIALIZER(roms);
de2aff17	539	int rom_enable_driver_roms;
45a50b16 GH	540
	541	static void rom_insert(Rom *rom)
	542	{
	543	Rom *item;
	544
97fe84f5 PB	545	if (roms_loaded) {
	546	hw_error ("ROM images must be loaded at startup\n");
	547	}
	548
45a50b16 GH	549	/* list is ordered by load address */
	550	QTAILQ_FOREACH(item, &roms, next) {
	551	if (rom->min >= item->min)
	552	continue;
	553	QTAILQ_INSERT_BEFORE(item, rom, next);
	554	return;
	555	}
	556	QTAILQ_INSERT_TAIL(&roms, rom, next);
	557	}
	558
	559	int rom_add_file(const char *file,
	560	target_phys_addr_t min, target_phys_addr_t max, int align)
	561	{
	562	Rom *rom;
	563	int rc, fd = -1;
	564
	565	rom = qemu_mallocz(sizeof(*rom));
	566	rom->name = qemu_strdup(file);
	567	rom->path = qemu_find_file(QEMU_FILE_TYPE_BIOS, rom->name);
	568	if (rom->path == NULL) {
14a3f32d	569	rom->path = qemu_strdup(file);
45a50b16 GH	570	}
45a50b16 GH	571
cef290b8	572	fd = open(rom->path, O_RDONLY \| O_BINARY);
45a50b16 GH	573	if (fd == -1) {
	574	fprintf(stderr, "Could not open option rom '%s': %s\n",
	575	rom->path, strerror(errno));
	576	goto err;
	577	}
	578
	579	rom->align = align;
	580	rom->min = min;
	581	rom->max = max;
	582	rom->romsize = lseek(fd, 0, SEEK_END);
	583	rom->data = qemu_mallocz(rom->romsize);
	584	lseek(fd, 0, SEEK_SET);
	585	rc = read(fd, rom->data, rom->romsize);
	586	if (rc != rom->romsize) {
	587	fprintf(stderr, "rom: file %-20s: read error: rc=%d (expected %zd)\n",
	588	rom->name, rc, rom->romsize);
	589	goto err;
	590	}
	591	close(fd);
	592	rom_insert(rom);
	593	return 0;
	594
	595	err:
	596	if (fd != -1)
	597	close(fd);
	598	qemu_free(rom->data);
	599	qemu_free(rom->path);
	600	qemu_free(rom->name);
	601	qemu_free(rom);
	602	return -1;
	603	}
	604
	605	int rom_add_blob(const char name, const void blob, size_t len,
	606	target_phys_addr_t min, target_phys_addr_t max, int align)
	607	{
	608	Rom *rom;
	609
	610	rom = qemu_mallocz(sizeof(*rom));
	611	rom->name = qemu_strdup(name);
	612	rom->align = align;
	613	rom->min = min;
	614	rom->max = max;
	615	rom->romsize = len;
	616	rom->data = qemu_mallocz(rom->romsize);
	617	memcpy(rom->data, blob, len);
	618	rom_insert(rom);
	619	return 0;
	620	}
	621
de2aff17 GH	622	int rom_add_vga(const char *file)
	623	{
	624	if (!rom_enable_driver_roms)
	625	return 0;
	626	return rom_add_file(file, PC_ROM_MIN_VGA, PC_ROM_MAX, PC_ROM_ALIGN);
	627	}
	628
	629	int rom_add_option(const char *file)
	630	{
	631	if (!rom_enable_driver_roms)
	632	return 0;
	633	return rom_add_file(file, PC_ROM_MIN_OPTION, PC_ROM_MAX, PC_ROM_ALIGN);
	634	}
	635
45a50b16 GH	636	static void rom_reset(void *unused)
	637	{
	638	Rom *rom;
	639
	640	QTAILQ_FOREACH(rom, &roms, next) {
	641	if (rom->data == NULL)
	642	continue;
	643	cpu_physical_memory_write_rom(rom->addr, rom->data, rom->romsize);
	644	if (rom->isrom) {
	645	/* rom needs to be written only once */
	646	qemu_free(rom->data);
	647	rom->data = NULL;
	648	}
	649	}
	650	}
	651
	652	int rom_load_all(void)
	653	{
	654	target_phys_addr_t addr = 0;
	655	int memtype;
	656	Rom *rom;
	657
	658	QTAILQ_FOREACH(rom, &roms, next) {
	659	if (addr < rom->min)
	660	addr = rom->min;
	661	if (rom->max) {
	662	/* load address range */
	663	if (rom->align) {
	664	addr += (rom->align-1);
	665	addr &= ~(rom->align-1);
	666	}
	667	if (addr + rom->romsize > rom->max) {
	668	fprintf(stderr, "rom: out of memory (rom %s, "
	669	"addr 0x" TARGET_FMT_plx
	670	", size 0x%zx, max 0x" TARGET_FMT_plx ")\n",
	671	rom->name, addr, rom->romsize, rom->max);
	672	return -1;
	673	}
	674	} else {
	675	/* fixed address requested */
	676	if (addr != rom->min) {
	677	fprintf(stderr, "rom: requested regions overlap "
	678	"(rom %s. free=0x" TARGET_FMT_plx
	679	", addr=0x" TARGET_FMT_plx ")\n",
	680	rom->name, addr, rom->min);
	681	return -1;
	682	}
	683	}
	684	rom->addr = addr;
	685	addr += rom->romsize;
	686	memtype = cpu_get_physical_page_desc(rom->addr) & (3 << IO_MEM_SHIFT);
	687	if (memtype == IO_MEM_ROM)
	688	rom->isrom = 1;
	689	}
	690	qemu_register_reset(rom_reset, NULL);
97fe84f5	691	roms_loaded = 1;
45a50b16 GH	692	return 0;
	693	}
	694
3c178e72 GH	695	static Rom *find_rom(target_phys_addr_t addr)
	696	{
	697	Rom *rom;
	698
	699	QTAILQ_FOREACH(rom, &roms, next) {
	700	if (rom->max)
	701	continue;
	702	if (rom->min > addr)
	703	continue;
	704	if (rom->min + rom->romsize < addr)
	705	continue;
	706	return rom;
	707	}
	708	return NULL;
	709	}
	710
235f86ef AG	711	int rom_copy(uint8_t *dest, target_phys_addr_t addr, size_t size)
	712	{
	713	target_phys_addr_t end = addr + size;
	714	uint8_t s, d = dest;
	715	size_t l = 0;
	716	Rom *rom;
	717
	718	QTAILQ_FOREACH(rom, &roms, next) {
	719	if (rom->max)
	720	continue;
	721	if (rom->min > addr)
	722	continue;
	723	if (rom->min + rom->romsize < addr)
	724	continue;
	725	if (rom->min > end)
	726	break;
	727	if (!rom->data)
	728	continue;
	729
	730	d = dest + (rom->min - addr);
	731	s = rom->data;
	732	l = rom->romsize;
	733
	734	if (rom->min < addr) {
	735	d = dest;
	736	s += (addr - rom->min);
	737	l -= (addr - rom->min);
	738	}
	739	if ((d + l) > (dest + size)) {
	740	l = dest - d;
	741	}
	742
	743	memcpy(d, s, l);
	744	}
	745
	746	return (d + l) - dest;
	747	}
	748
3c178e72 GH	749	void *rom_ptr(target_phys_addr_t addr)
	750	{
	751	Rom *rom;
	752
	753	rom = find_rom(addr);
	754	if (!rom \|\| !rom->data)
	755	return NULL;
	756	return rom->data + (addr - rom->min);
	757	}
	758
45a50b16 GH	759	void do_info_roms(Monitor *mon)
	760	{
	761	Rom *rom;
	762
	763	QTAILQ_FOREACH(rom, &roms, next) {
	764	monitor_printf(mon, "addr=" TARGET_FMT_plx
	765	" size=0x%06zx mem=%s name=\"%s\" \n",
	766	rom->addr, rom->romsize,
	767	rom->isrom ? "rom" : "ram",
	768	rom->name);
	769	}
	770	}