-#define _BSD_SOURCE
-#include <arpa/inet.h>
-#include <sys/socket.h>
-#include <net/if.h>
+/**
+ * nmrp-flash - Netgear Unbrick Utility
+ * Copyright (C) 2016 Joseph Lehner <joseph.c.lehner@gmail.com>
+ *
+ * nmrp-flash is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * nmrp-flash is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with nmrp-flash. If not, see <http://www.gnu.org/licenses/>.
+ *
+ */
+
#include <string.h>
#include <unistd.h>
+#include <stdlib.h>
#include <stdio.h>
#include <errno.h>
#include <fcntl.h>
+#include <ctype.h>
+#include "nmrpd.h"
#define TFTP_PKT_SIZE 516
-static const char *opcode_names[] = {
+static const char *opcode_names[] = {
"RRQ", "WRQ", "DATA", "ACK", "ERR"
};
WRQ = 2,
DATA = 3,
ACK = 4,
- ERR = 5,
- NETGEAR_ERR = 0x4669
+ ERR = 5
};
+static const char *leafname(const char *path)
+{
+ const char *slash, *bslash;
+
+ slash = strrchr(path, '/');
+ bslash = strrchr(path, '\\');
+
+ if (slash && bslash) {
+ path = 1 + (slash > bslash ? slash : bslash);
+ } else if (slash) {
+ path = 1 + slash;
+ } else if (bslash) {
+ path = 1 + bslash;
+ }
+
+ return path;
+}
+
+static bool is_netascii(const char *str)
+{
+ for (; *str; ++str) {
+ if (*str < 0x20 || *str > 0x7f) {
+ return false;
+ }
+ }
+
+ return true;
+}
+
static inline void pkt_mknum(char *pkt, uint16_t n)
{
*(uint16_t*)pkt = htons(n);
return ntohs(*(uint16_t*)pkt);
}
-static void pkt_mkwrq(char *pkt, const char *filename, const char *mode)
+static void pkt_mkwrq(char *pkt, const char *filename)
{
size_t len = 2;
+ filename = leafname(filename);
+ if (!is_netascii(filename) || strlen(filename) > 500) {
+ fprintf(stderr, "Overlong/illegal filename; using 'firmware.bin'.");
+ filename = "firmware.bin";
+ }
+
pkt_mknum(pkt, WRQ);
strcpy(pkt + len, filename);
len += strlen(filename) + 1;
- strcpy(pkt + len, mode);
- len += strlen(mode) + 1;
+ strcpy(pkt + len, "octet");
}
static inline void pkt_print(char *pkt, FILE *fp)
fprintf(fp, "%s", opcode_names[opcode - 1]);
if (opcode == ACK || opcode == DATA) {
fprintf(fp, "(%d)", pkt_num(pkt + 2));
- } else if (opcode == WRQ) {
+ } else if (opcode == WRQ || opcode == RRQ) {
fprintf(fp, "(%s, %s)", pkt + 2, pkt + 2 + strlen(pkt + 2) + 1);
}
}
}
-static ssize_t tftp_recvfrom(int sock, char *pkt, struct sockaddr_in *src)
+static ssize_t tftp_recvfrom(int sock, char *pkt, uint16_t* port,
+ unsigned timeout)
{
- static int fail = 0;
- socklen_t socklen;
ssize_t len;
-
- len = recvfrom(sock, pkt, TFTP_PKT_SIZE, 0, NULL, NULL);
+ struct sockaddr_in src;
+#ifndef NMRPFLASH_WINDOWS
+ socklen_t alen;
+#else
+ int alen;
+#endif
+
+ len = select_fd(sock, timeout);
if (len < 0) {
- if (errno != EAGAIN) {
- perror("recvfrom");
- return -1;
- }
+ return -1;
+ } else if (!len) {
+ return 0;
+ }
- return -2;
+ alen = sizeof(src);
+ len = recvfrom(sock, pkt, TFTP_PKT_SIZE, 0, (struct sockaddr*)&src, &alen);
+ if (len < 0) {
+ sock_perror("recvfrom");
+ return -1;
}
+ *port = ntohs(src.sin_port);
+
uint16_t opcode = pkt_num(pkt);
if (opcode == ERR) {
fprintf(stderr, "Error (%d): %.511s\n", pkt_num(pkt + 2), pkt + 4);
return -1;
- } else if (!opcode || opcode > ERR) {
- /* The EX2700 I've tested this on sends a raw TFTP packet with no
- * opcode, and an error message starting at offset 0.
+ } else if (isprint(pkt[0])) {
+ /* In case of a firmware checksum error, the EX2700 I've tested this
+ * on sends a raw UDP packet containing just an error message starting
+ * at offset 0. The limit of 32 chars is arbitrary.
*/
fprintf(stderr, "Error: %.32s\n", pkt);
return -3;
+ } else {
+ fprintf(stderr, "Received invalid packet: ");
+ pkt_print(pkt, stderr);
+ fprintf(stderr, ".\n");
+ return -2;
}
return len;
}
-static ssize_t tftp_sendto(int sock, char *pkt, size_t len,
+static ssize_t tftp_sendto(int sock, char *pkt, size_t len,
struct sockaddr_in *dst)
{
ssize_t sent;
len = 4 + strlen(pkt + 4);
break;
default:
- fprintf(stderr, "Error: Invalid packet ");
+ fprintf(stderr, "Attempted to send invalid packet ");
pkt_print(pkt, stderr);
+ fprintf(stderr, "; this is a bug!\n");
return -1;
}
sent = sendto(sock, pkt, len, 0, (struct sockaddr*)dst, sizeof(*dst));
if (sent < 0) {
- perror("sendto");
+ sock_perror("sendto");
}
return sent;
}
-int sock_set_rx_timeout(int fd, unsigned msec)
+#ifdef NMRPFLASH_WINDOWS
+void sock_perror(const char *msg)
{
- struct timeval tv;
-
- if (msec) {
- tv.tv_usec = (msec % 1000) * 1000;
- tv.tv_sec = msec / 1000;
- if (setsockopt(fd, SOL_SOCKET, SO_RCVTIMEO, &tv, sizeof(tv)) < 0) {
- perror("setsockopt(SO_RCVTIMEO)");
- return 1;
- }
- }
-
- return 0;
+ win_perror2(msg, WSAGetLastError());
+}
+#else
+inline void sock_perror(const char *msg)
+{
+ perror(msg);
}
+#endif
-int tftp_put(const char *filename, const char *ipaddr, uint16_t port)
+int tftp_put(struct nmrpd_args *args)
{
- struct sockaddr_in dst, src;
- enum tftp_opcode opcode;
- struct timeval tv;
- uint16_t block;
- ssize_t len;
- int fd, sock, err, done, i, last_len;
- char pkt[TFTP_PKT_SIZE];
+ struct sockaddr_in addr;
+ uint16_t block, port;
+ ssize_t len, last_len;
+ int fd, sock, ret, timeout;
+ char rx[TFTP_PKT_SIZE], tx[TFTP_PKT_SIZE];
+
+ sock = -1;
+ ret = -1;
- fd = open(filename, O_RDONLY);
+ fd = open(args->filename, O_RDONLY);
if (fd < 0) {
perror("open");
- err = fd;
+ ret = fd;
goto cleanup;
}
sock = socket(AF_INET, SOCK_DGRAM, IPPROTO_UDP);
if (sock < 0) {
- perror("socket");
- err = sock;
- goto cleanup;
- }
-
- err = sock_set_rx_timeout(sock, 999);
- if (err) {
- goto cleanup;
- }
-
- err = !inet_aton(ipaddr, &dst.sin_addr);
- if (err) {
- perror("inet_aton");
- goto cleanup;
- }
-
- dst.sin_family = AF_INET;
- dst.sin_port = htons(port);
-
- pkt_mkwrq(pkt, filename, "octet");
-
- len = tftp_sendto(sock, pkt, 0, &dst);
- if (len < 0) {
- err = len;
+ sock_perror("socket");
+ ret = sock;
goto cleanup;
}
- len = tftp_recvfrom(sock, pkt, &dst);
- if (len < 0) {
- err = len;
+ if ((addr.sin_addr.s_addr = inet_addr(args->ipaddr)) == INADDR_NONE) {
+ perror("inet_addr");
goto cleanup;
}
- //dst.sin_port = src.sin_port;
+ addr.sin_family = AF_INET;
+ addr.sin_port = htons(args->port);
block = 0;
- done = 0;
last_len = -1;
+ len = 0;
+ /* Not really, but this way the loop sends our WRQ before receiving */
+ timeout = 1;
+
+ pkt_mkwrq(tx, args->filename);
do {
- if (pkt_num(pkt) == ACK && pkt_num(pkt + 2) == block) {
- ++block;
- pkt_mknum(pkt, DATA);
- pkt_mknum(pkt + 2, block);
- len = read(fd, pkt + 4, 512);
- if (len < 0) {
- perror("read");
- err = len;
- goto cleanup;
- } else if (!len) {
- done = last_len != 512;
+ if (timeout || (pkt_num(rx) == ACK && pkt_num(rx + 2) == block)) {
+ if (!timeout) {
+ ++block;
+ pkt_mknum(tx, DATA);
+ pkt_mknum(tx + 2, block);
+ len = read(fd, tx + 4, 512);
+ if (len < 0) {
+ perror("read");
+ ret = len;
+ goto cleanup;
+ } else if (!len) {
+ if (last_len != 512) {
+ break;
+ }
+ }
+
+ last_len = len;
}
- last_len = len;
-
- len = tftp_sendto(sock, pkt, len, &dst);
- if (len < 0) {
- err = len;
+ ret = tftp_sendto(sock, tx, len, &addr);
+ if (ret < 0) {
goto cleanup;
}
- } else {
+ } else if (pkt_num(rx) != ACK) {
fprintf(stderr, "Expected ACK(%d), got ", block);
- pkt_print(pkt, stderr);
+ pkt_print(rx, stderr);
fprintf(stderr, "!\n");
- err = 1;
- goto cleanup;
}
- len = tftp_recvfrom(sock, pkt, &dst);
- if (len < 0) {
- if (len == -2) {
- fprintf(stderr, "Timeout while waiting for ACK(%d).\n", block);
+ ret = tftp_recvfrom(sock, rx, &port, args->rx_timeout);
+ if (ret < 0) {
+ goto cleanup;
+ } else if (!ret) {
+ if (++timeout < 5) {
+ continue;
}
- err = len;
+ fprintf(stderr, "Timeout while waiting for ACK(%d).\n", block);
goto cleanup;
+ } else {
+ timeout = 0;
+ ret = 0;
+
+ if (!block && port != args->port) {
+ if (verbosity > 1) {
+ printf("Switching to port %d\n", port);
+ }
+ addr.sin_port = htons(port);
+ }
}
- } while(!done);
+ } while(1);
- err = 0;
+ ret = 0;
cleanup:
if (fd >= 0) {
}
if (sock >= 0) {
+#ifndef NMRPFLASH_WINDOWS
+ shutdown(sock, SHUT_RDWR);
close(sock);
+#else
+ shutdown(sock, SD_BOTH);
+ closesocket(sock);
+#endif
}
- return err;
+ return ret;
}