2 * Copyright (C) 2013 Gabor Juhos <juhosg@openwrt.org>
4 * This program is free software; you can redistribute it and/or modify it
5 * under the terms of the GNU General Public License version 2 as published
6 * by the Free Software Foundation.
10 #define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
12 #include <linux/module.h>
13 #include <linux/init.h>
14 #include <linux/kernel.h>
15 #include <linux/slab.h>
16 #include <linux/vmalloc.h>
17 #include <linux/mtd/mtd.h>
18 #include <linux/mtd/partitions.h>
19 #include <linux/version.h>
20 #include <linux/byteorder/generic.h>
26 * uimage_header itself is only 64B, but it may be prepended with another data.
27 * Currently the biggest size is for Fon(Foxconn) devices: 64B + 32B
29 #define MAX_HEADER_LEN 96
31 #define IH_MAGIC 0x27051956 /* Image Magic Number */
32 #define IH_NMLEN 32 /* Image Name Length */
34 #define IH_OS_LINUX 5 /* Linux */
36 #define IH_TYPE_KERNEL 2 /* OS Kernel Image */
37 #define IH_TYPE_FILESYSTEM 7 /* Filesystem Image */
40 * Legacy format image header,
41 * all data in network byte order (aka natural aka bigendian).
43 struct uimage_header {
44 uint32_t ih_magic; /* Image Header Magic Number */
45 uint32_t ih_hcrc; /* Image Header CRC Checksum */
46 uint32_t ih_time; /* Image Creation Timestamp */
47 uint32_t ih_size; /* Image Data Size */
48 uint32_t ih_load; /* Data Load Address */
49 uint32_t ih_ep; /* Entry Point Address */
50 uint32_t ih_dcrc; /* Image Data CRC Checksum */
51 uint8_t ih_os; /* Operating System */
52 uint8_t ih_arch; /* CPU architecture */
53 uint8_t ih_type; /* Image Type */
54 uint8_t ih_comp; /* Compression Type */
55 uint8_t ih_name[IH_NMLEN]; /* Image Name */
59 read_uimage_header(struct mtd_info *mtd, size_t offset, u_char *buf,
65 ret = mtd_read(mtd, offset, header_len, &retlen, buf);
67 pr_debug("read error in \"%s\"\n", mtd->name);
71 if (retlen != header_len) {
72 pr_debug("short read in \"%s\"\n", mtd->name);
80 * __mtdsplit_parse_uimage - scan partition and create kernel + rootfs parts
82 * @find_header: function to call for a block of data that will return offset
83 * and tail padding length of a valid uImage header if found
85 static int __mtdsplit_parse_uimage(struct mtd_info *master,
86 const struct mtd_partition **pparts,
87 struct mtd_part_parser_data *data,
88 ssize_t (*find_header)(u_char *buf, size_t len, int *extralen))
90 struct mtd_partition *parts;
95 size_t uimage_size = 0;
97 size_t rootfs_size = 0;
98 int uimage_part, rf_part;
101 enum mtdsplit_part_type type;
104 parts = kzalloc(nr_parts * sizeof(*parts), GFP_KERNEL);
108 buf = vmalloc(MAX_HEADER_LEN);
114 /* find uImage on erase block boundaries */
115 for (offset = 0; offset < master->size; offset += master->erasesize) {
116 struct uimage_header *header;
120 ret = read_uimage_header(master, offset, buf, MAX_HEADER_LEN);
125 ret = find_header(buf, MAX_HEADER_LEN, &extralen);
127 pr_debug("no valid uImage found in \"%s\" at offset %llx\n",
128 master->name, (unsigned long long) offset);
131 header = (struct uimage_header *)(buf + ret);
133 uimage_size = sizeof(*header) +
134 be32_to_cpu(header->ih_size) + ret + extralen;
136 if ((offset + uimage_size) > master->size) {
137 pr_debug("uImage exceeds MTD device \"%s\"\n",
144 if (uimage_size == 0) {
145 pr_debug("no uImage found in \"%s\"\n", master->name);
150 uimage_offset = offset;
152 if (uimage_offset == 0) {
156 /* find the roots after the uImage */
157 ret = mtd_find_rootfs_from(master, uimage_offset + uimage_size,
158 master->size, &rootfs_offset, &type);
160 pr_debug("no rootfs after uImage in \"%s\"\n",
165 rootfs_size = master->size - rootfs_offset;
166 uimage_size = rootfs_offset - uimage_offset;
171 /* check rootfs presence at offset 0 */
172 ret = mtd_check_rootfs_magic(master, 0, &type);
174 pr_debug("no rootfs before uImage in \"%s\"\n",
180 rootfs_size = uimage_offset;
183 if (rootfs_size == 0) {
184 pr_debug("no rootfs found in \"%s\"\n", master->name);
189 parts[uimage_part].name = KERNEL_PART_NAME;
190 parts[uimage_part].offset = uimage_offset;
191 parts[uimage_part].size = uimage_size;
193 if (type == MTDSPLIT_PART_TYPE_UBI)
194 parts[rf_part].name = UBI_PART_NAME;
196 parts[rf_part].name = ROOTFS_PART_NAME;
197 parts[rf_part].offset = rootfs_offset;
198 parts[rf_part].size = rootfs_size;
213 static ssize_t uimage_verify_default(u_char *buf, size_t len, int *extralen)
215 struct uimage_header *header = (struct uimage_header *)buf;
217 /* default sanity checks */
218 if (be32_to_cpu(header->ih_magic) != IH_MAGIC) {
219 pr_debug("invalid uImage magic: %08x\n",
220 be32_to_cpu(header->ih_magic));
224 if (header->ih_os != IH_OS_LINUX) {
225 pr_debug("invalid uImage OS: %08x\n",
226 be32_to_cpu(header->ih_os));
230 if (header->ih_type != IH_TYPE_KERNEL) {
231 pr_debug("invalid uImage type: %08x\n",
232 be32_to_cpu(header->ih_type));
240 mtdsplit_uimage_parse_generic(struct mtd_info *master,
241 const struct mtd_partition **pparts,
242 struct mtd_part_parser_data *data)
244 return __mtdsplit_parse_uimage(master, pparts, data,
245 uimage_verify_default);
248 #if LINUX_VERSION_CODE >= KERNEL_VERSION(4, 9, 0)
249 static const struct of_device_id mtdsplit_uimage_of_match_table[] = {
250 { .compatible = "denx,uimage" },
255 static struct mtd_part_parser uimage_generic_parser = {
256 .owner = THIS_MODULE,
258 #if LINUX_VERSION_CODE >= KERNEL_VERSION(4, 9, 0)
259 .of_match_table = mtdsplit_uimage_of_match_table,
261 .parse_fn = mtdsplit_uimage_parse_generic,
262 .type = MTD_PARSER_TYPE_FIRMWARE,
265 #define FW_MAGIC_WNR2000V1 0x32303031
266 #define FW_MAGIC_WNR2000V3 0x32303033
267 #define FW_MAGIC_WNR2000V4 0x32303034
268 #define FW_MAGIC_WNR2200 0x32323030
269 #define FW_MAGIC_WNR612V2 0x32303631
270 #define FW_MAGIC_WNR1000V2 0x31303031
271 #define FW_MAGIC_WNR1000V2_VC 0x31303030
272 #define FW_MAGIC_WNDR3700 0x33373030
273 #define FW_MAGIC_WNDR3700V2 0x33373031
274 #define FW_MAGIC_WPN824N 0x31313030
276 static ssize_t uimage_verify_wndr3700(u_char *buf, size_t len, int *extralen)
278 struct uimage_header *header = (struct uimage_header *)buf;
279 uint8_t expected_type = IH_TYPE_FILESYSTEM;
281 switch (be32_to_cpu(header->ih_magic)) {
282 case FW_MAGIC_WNR612V2:
283 case FW_MAGIC_WNR1000V2:
284 case FW_MAGIC_WNR1000V2_VC:
285 case FW_MAGIC_WNR2000V1:
286 case FW_MAGIC_WNR2000V3:
287 case FW_MAGIC_WNR2200:
288 case FW_MAGIC_WNDR3700:
289 case FW_MAGIC_WNDR3700V2:
290 case FW_MAGIC_WPN824N:
292 case FW_MAGIC_WNR2000V4:
293 expected_type = IH_TYPE_KERNEL;
299 if (header->ih_os != IH_OS_LINUX ||
300 header->ih_type != expected_type)
307 mtdsplit_uimage_parse_netgear(struct mtd_info *master,
308 const struct mtd_partition **pparts,
309 struct mtd_part_parser_data *data)
311 return __mtdsplit_parse_uimage(master, pparts, data,
312 uimage_verify_wndr3700);
315 #if LINUX_VERSION_CODE >= KERNEL_VERSION(4, 9, 0)
316 static const struct of_device_id mtdsplit_uimage_netgear_of_match_table[] = {
317 { .compatible = "netgear,uimage" },
322 static struct mtd_part_parser uimage_netgear_parser = {
323 .owner = THIS_MODULE,
324 .name = "netgear-fw",
325 #if LINUX_VERSION_CODE >= KERNEL_VERSION(4, 9, 0)
326 .of_match_table = mtdsplit_uimage_netgear_of_match_table,
328 .parse_fn = mtdsplit_uimage_parse_netgear,
329 .type = MTD_PARSER_TYPE_FIRMWARE,
332 /**************************************************
334 **************************************************/
336 #define FW_EDIMAX_OFFSET 20
337 #define FW_MAGIC_EDIMAX 0x43535953
339 static ssize_t uimage_find_edimax(u_char *buf, size_t len, int *extralen)
343 if (len < FW_EDIMAX_OFFSET + sizeof(struct uimage_header)) {
344 pr_err("Buffer too small for checking Edimax header\n");
349 if (be32_to_cpu(*magic) != FW_MAGIC_EDIMAX)
352 if (!uimage_verify_default(buf + FW_EDIMAX_OFFSET, len, extralen))
353 return FW_EDIMAX_OFFSET;
359 mtdsplit_uimage_parse_edimax(struct mtd_info *master,
360 const struct mtd_partition **pparts,
361 struct mtd_part_parser_data *data)
363 return __mtdsplit_parse_uimage(master, pparts, data,
367 #if LINUX_VERSION_CODE >= KERNEL_VERSION(4, 9, 0)
368 static const struct of_device_id mtdsplit_uimage_edimax_of_match_table[] = {
369 { .compatible = "edimax,uimage" },
374 static struct mtd_part_parser uimage_edimax_parser = {
375 .owner = THIS_MODULE,
377 #if LINUX_VERSION_CODE >= KERNEL_VERSION(4, 9, 0)
378 .of_match_table = mtdsplit_uimage_edimax_of_match_table,
380 .parse_fn = mtdsplit_uimage_parse_edimax,
381 .type = MTD_PARSER_TYPE_FIRMWARE,
385 /**************************************************
387 **************************************************/
389 #define FONFXC_PAD_LEN 32
391 static ssize_t uimage_find_fonfxc(u_char *buf, size_t len, int *extralen)
393 if (uimage_verify_default(buf, len, extralen) < 0)
396 *extralen = FONFXC_PAD_LEN;
402 mtdsplit_uimage_parse_fonfxc(struct mtd_info *master,
403 const struct mtd_partition **pparts,
404 struct mtd_part_parser_data *data)
406 return __mtdsplit_parse_uimage(master, pparts, data,
410 #if LINUX_VERSION_CODE >= KERNEL_VERSION(4, 9, 0)
411 static const struct of_device_id mtdsplit_uimage_fonfxc_of_match_table[] = {
412 { .compatible = "fonfxc,uimage" },
417 static struct mtd_part_parser uimage_fonfxc_parser = {
418 .owner = THIS_MODULE,
420 #if LINUX_VERSION_CODE >= KERNEL_VERSION(4, 9, 0)
421 .of_match_table = mtdsplit_uimage_fonfxc_of_match_table,
423 .parse_fn = mtdsplit_uimage_parse_fonfxc,
426 /**************************************************
427 * OKLI (OpenWrt Kernel Loader Image)
428 **************************************************/
430 #define IH_MAGIC_OKLI 0x4f4b4c49
432 static ssize_t uimage_verify_okli(u_char *buf, size_t len, int *extralen)
434 struct uimage_header *header = (struct uimage_header *)buf;
436 /* default sanity checks */
437 if (be32_to_cpu(header->ih_magic) != IH_MAGIC_OKLI) {
438 pr_debug("invalid uImage magic: %08x\n",
439 be32_to_cpu(header->ih_magic));
443 if (header->ih_os != IH_OS_LINUX) {
444 pr_debug("invalid uImage OS: %08x\n",
445 be32_to_cpu(header->ih_os));
449 if (header->ih_type != IH_TYPE_KERNEL) {
450 pr_debug("invalid uImage type: %08x\n",
451 be32_to_cpu(header->ih_type));
459 mtdsplit_uimage_parse_okli(struct mtd_info *master,
460 const struct mtd_partition **pparts,
461 struct mtd_part_parser_data *data)
463 return __mtdsplit_parse_uimage(master, pparts, data,
467 #if LINUX_VERSION_CODE >= KERNEL_VERSION(4, 9, 0)
468 static const struct of_device_id mtdsplit_uimage_okli_of_match_table[] = {
469 { .compatible = "openwrt,okli" },
474 static struct mtd_part_parser uimage_okli_parser = {
475 .owner = THIS_MODULE,
477 #if LINUX_VERSION_CODE >= KERNEL_VERSION(4, 9, 0)
478 .of_match_table = mtdsplit_uimage_okli_of_match_table,
480 .parse_fn = mtdsplit_uimage_parse_okli,
483 /**************************************************
485 **************************************************/
487 static int __init mtdsplit_uimage_init(void)
489 register_mtd_parser(&uimage_generic_parser);
490 register_mtd_parser(&uimage_netgear_parser);
491 register_mtd_parser(&uimage_edimax_parser);
492 register_mtd_parser(&uimage_fonfxc_parser);
493 register_mtd_parser(&uimage_okli_parser);
498 module_init(mtdsplit_uimage_init);