net/tftp.c

   1 /*
   2  * Copyright 1994, 1995, 2000 Neil Russell.
   3  * (See License)
   4  * Copyright 2000, 2001 DENX Software Engineering, Wolfgang Denk, wd@denx.de
   5  * Copyright 2011 Comelit Group SpA,
   6  *                Luca Ceresoli <luca.ceresoli@comelit.it>
   7  */
   8
   9 #include <common.h>
  10 #include <command.h>
  11 #include <efi_loader.h>
  12 #include <env.h>
  13 #include <mapmem.h>
  14 #include <net.h>
  15 #include <net/tftp.h>
  16 #include "bootp.h"
  17 #ifdef CONFIG_SYS_DIRECT_FLASH_TFTP
  18 #include <flash.h>
  19 #endif
  20
  21 DECLARE_GLOBAL_DATA_PTR;
  22
  23 /* Well known TFTP port # */
  24 #define WELL_KNOWN_PORT 69
  25 /* Millisecs to timeout for lost pkt */
  26 #define TIMEOUT         5000UL
  27 #ifndef CONFIG_NET_RETRY_COUNT
  28 /* # of timeouts before giving up */
  29 # define TIMEOUT_COUNT  10
  30 #else
  31 # define TIMEOUT_COUNT  (CONFIG_NET_RETRY_COUNT * 2)
  32 #endif
  33 /* Number of "loading" hashes per line (for checking the image size) */
  34 #define HASHES_PER_LINE 65
  35
  36 /*
  37  *      TFTP operations.
  38  */
  39 #define TFTP_RRQ        1
  40 #define TFTP_WRQ        2
  41 #define TFTP_DATA       3
  42 #define TFTP_ACK        4
  43 #define TFTP_ERROR      5
  44 #define TFTP_OACK       6
  45
  46 static ulong timeout_ms = TIMEOUT;
  47 static int timeout_count_max = TIMEOUT_COUNT;
  48 static ulong time_start;   /* Record time we started tftp */
  49
  50 /*
  51  * These globals govern the timeout behavior when attempting a connection to a
  52  * TFTP server. tftp_timeout_ms specifies the number of milliseconds to
  53  * wait for the server to respond to initial connection. Second global,
  54  * tftp_timeout_count_max, gives the number of such connection retries.
  55  * tftp_timeout_count_max must be non-negative and tftp_timeout_ms must be
  56  * positive. The globals are meant to be set (and restored) by code needing
  57  * non-standard timeout behavior when initiating a TFTP transfer.
  58  */
  59 ulong tftp_timeout_ms = TIMEOUT;
  60 int tftp_timeout_count_max = TIMEOUT_COUNT;
  61
  62 enum {
  63         TFTP_ERR_UNDEFINED           = 0,
  64         TFTP_ERR_FILE_NOT_FOUND      = 1,
  65         TFTP_ERR_ACCESS_DENIED       = 2,
  66         TFTP_ERR_DISK_FULL           = 3,
  67         TFTP_ERR_UNEXPECTED_OPCODE   = 4,
  68         TFTP_ERR_UNKNOWN_TRANSFER_ID  = 5,
  69         TFTP_ERR_FILE_ALREADY_EXISTS = 6,
  70 };
  71
  72 static struct in_addr tftp_remote_ip;
  73 /* The UDP port at their end */
  74 static int      tftp_remote_port;
  75 /* The UDP port at our end */
  76 static int      tftp_our_port;
  77 static int      timeout_count;
  78 /* packet sequence number */
  79 static ulong    tftp_cur_block;
  80 /* last packet sequence number received */
  81 static ulong    tftp_prev_block;
  82 /* count of sequence number wraparounds */
  83 static ulong    tftp_block_wrap;
  84 /* memory offset due to wrapping */
  85 static ulong    tftp_block_wrap_offset;
  86 static int      tftp_state;
  87 static ulong    tftp_load_addr;
  88 #ifdef CONFIG_LMB
  89 static ulong    tftp_load_size;
  90 #endif
  91 #ifdef CONFIG_TFTP_TSIZE
  92 /* The file size reported by the server */
  93 static int      tftp_tsize;
  94 /* The number of hashes we printed */
  95 static short    tftp_tsize_num_hash;
  96 #endif
  97 #ifdef CONFIG_CMD_TFTPPUT
  98 /* 1 if writing, else 0 */
  99 static int      tftp_put_active;
 100 /* 1 if we have sent the last block */
 101 static int      tftp_put_final_block_sent;
 102 #else
 103 #define tftp_put_active 0
 104 #endif
 105
 106 #define STATE_SEND_RRQ  1
 107 #define STATE_DATA      2
 108 #define STATE_TOO_LARGE 3
 109 #define STATE_BAD_MAGIC 4
 110 #define STATE_OACK      5
 111 #define STATE_RECV_WRQ  6
 112 #define STATE_SEND_WRQ  7
 113
 114 /* default TFTP block size */
 115 #define TFTP_BLOCK_SIZE         512
 116 /* sequence number is 16 bit */
 117 #define TFTP_SEQUENCE_SIZE      ((ulong)(1<<16))
 118
 119 #define DEFAULT_NAME_LEN        (8 + 4 + 1)
 120 static char default_filename[DEFAULT_NAME_LEN];
 121
 122 #ifndef CONFIG_TFTP_FILE_NAME_MAX_LEN
 123 #define MAX_LEN 128
 124 #else
 125 #define MAX_LEN CONFIG_TFTP_FILE_NAME_MAX_LEN
 126 #endif
 127
 128 static char tftp_filename[MAX_LEN];
 129
 130 /* 512 is poor choice for ethernet, MTU is typically 1500.
 131  * Minus eth.hdrs thats 1468.  Can get 2x better throughput with
 132  * almost-MTU block sizes.  At least try... fall back to 512 if need be.
 133  * (but those using CONFIG_IP_DEFRAG may want to set a larger block in cfg file)
 134  */
 135 #ifdef CONFIG_TFTP_BLOCKSIZE
 136 #define TFTP_MTU_BLOCKSIZE CONFIG_TFTP_BLOCKSIZE
 137 #else
 138 #define TFTP_MTU_BLOCKSIZE 1468
 139 #endif
 140
 141 static unsigned short tftp_block_size = TFTP_BLOCK_SIZE;
 142 static unsigned short tftp_block_size_option = TFTP_MTU_BLOCKSIZE;
 143
 144 static inline int store_block(int block, uchar *src, unsigned int len)
 145 {
 146         ulong offset = block * tftp_block_size + tftp_block_wrap_offset;
 147         ulong newsize = offset + len;
 148         ulong store_addr = tftp_load_addr + offset;
 149 #ifdef CONFIG_SYS_DIRECT_FLASH_TFTP
 150         int i, rc = 0;
 151
 152         for (i = 0; i < CONFIG_SYS_MAX_FLASH_BANKS; i++) {
 153                 /* start address in flash? */
 154                 if (flash_info[i].flash_id == FLASH_UNKNOWN)
 155                         continue;
 156                 if (store_addr >= flash_info[i].start[0]) {
 157                         rc = 1;
 158                         break;
 159                 }
 160         }
 161
 162         if (rc) { /* Flash is destination for this packet */
 163                 rc = flash_write((char *)src, store_addr, len);
 164                 if (rc) {
 165                         flash_perror(rc);
 166                         return rc;
 167                 }
 168         } else
 169 #endif /* CONFIG_SYS_DIRECT_FLASH_TFTP */
 170         {
 171                 void *ptr;
 172
 173 #ifdef CONFIG_LMB
 174                 if (store_addr < tftp_load_addr ||
 175                     store_addr + len > tftp_load_addr + tftp_load_size) {
 176                         puts("\nTFTP error: ");
 177                         puts("trying to overwrite reserved memory...\n");
 178                         return -1;
 179                 }
 180 #endif
 181                 ptr = map_sysmem(store_addr, len);
 182                 memcpy(ptr, src, len);
 183                 unmap_sysmem(ptr);
 184         }
 185
 186         if (net_boot_file_size < newsize)
 187                 net_boot_file_size = newsize;
 188
 189         return 0;
 190 }
 191
 192 /* Clear our state ready for a new transfer */
 193 static void new_transfer(void)
 194 {
 195         tftp_prev_block = 0;
 196         tftp_block_wrap = 0;
 197         tftp_block_wrap_offset = 0;
 198 #ifdef CONFIG_CMD_TFTPPUT
 199         tftp_put_final_block_sent = 0;
 200 #endif
 201 }
 202
 203 #ifdef CONFIG_CMD_TFTPPUT
 204 /**
 205  * Load the next block from memory to be sent over tftp.
 206  *
 207  * @param block Block number to send
 208  * @param dst   Destination buffer for data
 209  * @param len   Number of bytes in block (this one and every other)
 210  * @return number of bytes loaded
 211  */
 212 static int load_block(unsigned block, uchar *dst, unsigned len)
 213 {
 214         /* We may want to get the final block from the previous set */
 215         ulong offset = ((int)block - 1) * len + tftp_block_wrap_offset;
 216         ulong tosend = len;
 217
 218         tosend = min(net_boot_file_size - offset, tosend);
 219         (void)memcpy(dst, (void *)(save_addr + offset), tosend);
 220         debug("%s: block=%d, offset=%ld, len=%d, tosend=%ld\n", __func__,
 221               block, offset, len, tosend);
 222         return tosend;
 223 }
 224 #endif
 225
 226 static void tftp_send(void);
 227 static void tftp_timeout_handler(void);
 228
 229 /**********************************************************************/
 230
 231 static void show_block_marker(void)
 232 {
 233 #ifdef CONFIG_TFTP_TSIZE
 234         if (tftp_tsize) {
 235                 ulong pos = tftp_cur_block * tftp_block_size +
 236                         tftp_block_wrap_offset;
 237                 if (pos > tftp_tsize)
 238                         pos = tftp_tsize;
 239
 240                 while (tftp_tsize_num_hash < pos * 50 / tftp_tsize) {
 241                         putc('#');
 242                         tftp_tsize_num_hash++;
 243                 }
 244         } else
 245 #endif
 246         {
 247                 if (((tftp_cur_block - 1) % 10) == 0)
 248                         putc('#');
 249                 else if ((tftp_cur_block % (10 * HASHES_PER_LINE)) == 0)
 250                         puts("\n\t ");
 251         }
 252 }
 253
 254 /**
 255  * restart the current transfer due to an error
 256  *
 257  * @param msg   Message to print for user
 258  */
 259 static void restart(const char *msg)
 260 {
 261         printf("\n%s; starting again\n", msg);
 262         net_start_again();
 263 }
 264
 265 /*
 266  * Check if the block number has wrapped, and update progress
 267  *
 268  * TODO: The egregious use of global variables in this file should be tidied.
 269  */
 270 static void update_block_number(void)
 271 {
 272         /*
 273          * RFC1350 specifies that the first data packet will
 274          * have sequence number 1. If we receive a sequence
 275          * number of 0 this means that there was a wrap
 276          * around of the (16 bit) counter.
 277          */
 278         if (tftp_cur_block == 0 && tftp_prev_block != 0) {
 279                 tftp_block_wrap++;
 280                 tftp_block_wrap_offset += tftp_block_size * TFTP_SEQUENCE_SIZE;
 281                 timeout_count = 0; /* we've done well, reset the timeout */
 282         } else {
 283                 show_block_marker();
 284         }
 285 }
 286
 287 /* The TFTP get or put is complete */
 288 static void tftp_complete(void)
 289 {
 290 #ifdef CONFIG_TFTP_TSIZE
 291         /* Print hash marks for the last packet received */
 292         while (tftp_tsize && tftp_tsize_num_hash < 49) {
 293                 putc('#');
 294                 tftp_tsize_num_hash++;
 295         }
 296         puts("  ");
 297         print_size(tftp_tsize, "");
 298 #endif
 299         time_start = get_timer(time_start);
 300         if (time_start > 0) {
 301                 puts("\n\t ");  /* Line up with "Loading: " */
 302                 print_size(net_boot_file_size /
 303                         time_start * 1000, "/s");
 304         }
 305         puts("\ndone\n");
 306         net_set_state(NETLOOP_SUCCESS);
 307 }
 308
 309 static void tftp_send(void)
 310 {
 311         uchar *pkt;
 312         uchar *xp;
 313         int len = 0;
 314         ushort *s;
 315
 316         /*
 317          *      We will always be sending some sort of packet, so
 318          *      cobble together the packet headers now.
 319          */
 320         pkt = net_tx_packet + net_eth_hdr_size() + IP_UDP_HDR_SIZE;
 321
 322         switch (tftp_state) {
 323         case STATE_SEND_RRQ:
 324         case STATE_SEND_WRQ:
 325                 xp = pkt;
 326                 s = (ushort *)pkt;
 327 #ifdef CONFIG_CMD_TFTPPUT
 328                 *s++ = htons(tftp_state == STATE_SEND_RRQ ? TFTP_RRQ :
 329                         TFTP_WRQ);
 330 #else
 331                 *s++ = htons(TFTP_RRQ);
 332 #endif
 333                 pkt = (uchar *)s;
 334                 strcpy((char *)pkt, tftp_filename);
 335                 pkt += strlen(tftp_filename) + 1;
 336                 strcpy((char *)pkt, "octet");
 337                 pkt += 5 /*strlen("octet")*/ + 1;
 338                 strcpy((char *)pkt, "timeout");
 339                 pkt += 7 /*strlen("timeout")*/ + 1;
 340                 sprintf((char *)pkt, "%lu", timeout_ms / 1000);
 341                 debug("send option \"timeout %s\"\n", (char *)pkt);
 342                 pkt += strlen((char *)pkt) + 1;
 343 #ifdef CONFIG_TFTP_TSIZE
 344                 pkt += sprintf((char *)pkt, "tsize%c%u%c",
 345                                 0, net_boot_file_size, 0);
 346 #endif
 347                 /* try for more effic. blk size */
 348                 pkt += sprintf((char *)pkt, "blksize%c%d%c",
 349                                 0, tftp_block_size_option, 0);
 350                 len = pkt - xp;
 351                 break;
 352
 353         case STATE_OACK:
 354
 355         case STATE_RECV_WRQ:
 356         case STATE_DATA:
 357                 xp = pkt;
 358                 s = (ushort *)pkt;
 359                 s[0] = htons(TFTP_ACK);
 360                 s[1] = htons(tftp_cur_block);
 361                 pkt = (uchar *)(s + 2);
 362 #ifdef CONFIG_CMD_TFTPPUT
 363                 if (tftp_put_active) {
 364                         int toload = tftp_block_size;
 365                         int loaded = load_block(tftp_cur_block, pkt, toload);
 366
 367                         s[0] = htons(TFTP_DATA);
 368                         pkt += loaded;
 369                         tftp_put_final_block_sent = (loaded < toload);
 370                 }
 371 #endif
 372                 len = pkt - xp;
 373                 break;
 374
 375         case STATE_TOO_LARGE:
 376                 xp = pkt;
 377                 s = (ushort *)pkt;
 378                 *s++ = htons(TFTP_ERROR);
 379                         *s++ = htons(3);
 380
 381                 pkt = (uchar *)s;
 382                 strcpy((char *)pkt, "File too large");
 383                 pkt += 14 /*strlen("File too large")*/ + 1;
 384                 len = pkt - xp;
 385                 break;
 386
 387         case STATE_BAD_MAGIC:
 388                 xp = pkt;
 389                 s = (ushort *)pkt;
 390                 *s++ = htons(TFTP_ERROR);
 391                 *s++ = htons(2);
 392                 pkt = (uchar *)s;
 393                 strcpy((char *)pkt, "File has bad magic");
 394                 pkt += 18 /*strlen("File has bad magic")*/ + 1;
 395                 len = pkt - xp;
 396                 break;
 397         }
 398
 399         net_send_udp_packet(net_server_ethaddr, tftp_remote_ip,
 400                             tftp_remote_port, tftp_our_port, len);
 401 }
 402
 403 #ifdef CONFIG_CMD_TFTPPUT
 404 static void icmp_handler(unsigned type, unsigned code, unsigned dest,
 405                          struct in_addr sip, unsigned src, uchar *pkt,
 406                          unsigned len)
 407 {
 408         if (type == ICMP_NOT_REACH && code == ICMP_NOT_REACH_PORT) {
 409                 /* Oh dear the other end has gone away */
 410                 restart("TFTP server died");
 411         }
 412 }
 413 #endif
 414
 415 static void tftp_handler(uchar *pkt, unsigned dest, struct in_addr sip,
 416                          unsigned src, unsigned len)
 417 {
 418         __be16 proto;
 419         __be16 *s;
 420         int i;
 421
 422         if (dest != tftp_our_port) {
 423                         return;
 424         }
 425         if (tftp_state != STATE_SEND_RRQ && src != tftp_remote_port &&
 426             tftp_state != STATE_RECV_WRQ && tftp_state != STATE_SEND_WRQ)
 427                 return;
 428
 429         if (len < 2)
 430                 return;
 431         len -= 2;
 432         /* warning: don't use increment (++) in ntohs() macros!! */
 433         s = (__be16 *)pkt;
 434         proto = *s++;
 435         pkt = (uchar *)s;
 436         switch (ntohs(proto)) {
 437         case TFTP_RRQ:
 438                 break;
 439
 440         case TFTP_ACK:
 441 #ifdef CONFIG_CMD_TFTPPUT
 442                 if (tftp_put_active) {
 443                         if (tftp_put_final_block_sent) {
 444                                 tftp_complete();
 445                         } else {
 446                                 /*
 447                                  * Move to the next block. We want our block
 448                                  * count to wrap just like the other end!
 449                                  */
 450                                 int block = ntohs(*s);
 451                                 int ack_ok = (tftp_cur_block == block);
 452
 453                                 tftp_cur_block = (unsigned short)(block + 1);
 454                                 update_block_number();
 455                                 if (ack_ok)
 456                                         tftp_send(); /* Send next data block */
 457                         }
 458                 }
 459 #endif
 460                 break;
 461
 462         default:
 463                 break;
 464
 465 #ifdef CONFIG_CMD_TFTPSRV
 466         case TFTP_WRQ:
 467                 debug("Got WRQ\n");
 468                 tftp_remote_ip = sip;
 469                 tftp_remote_port = src;
 470                 tftp_our_port = 1024 + (get_timer(0) % 3072);
 471                 new_transfer();
 472                 tftp_send(); /* Send ACK(0) */
 473                 break;
 474 #endif
 475
 476         case TFTP_OACK:
 477                 debug("Got OACK: %s %s\n",
 478                       pkt, pkt + strlen((char *)pkt) + 1);
 479                 tftp_state = STATE_OACK;
 480                 tftp_remote_port = src;
 481                 /*
 482                  * Check for 'blksize' option.
 483                  * Careful: "i" is signed, "len" is unsigned, thus
 484                  * something like "len-8" may give a *huge* number
 485                  */
 486                 for (i = 0; i+8 < len; i++) {
 487                         if (strcmp((char *)pkt + i, "blksize") == 0) {
 488                                 tftp_block_size = (unsigned short)
 489                                         simple_strtoul((char *)pkt + i + 8,
 490                                                        NULL, 10);
 491                                 debug("Blocksize ack: %s, %d\n",
 492                                       (char *)pkt + i + 8, tftp_block_size);
 493                         }
 494 #ifdef CONFIG_TFTP_TSIZE
 495                         if (strcmp((char *)pkt+i, "tsize") == 0) {
 496                                 tftp_tsize = simple_strtoul((char *)pkt + i + 6,
 497                                                            NULL, 10);
 498                                 debug("size = %s, %d\n",
 499                                       (char *)pkt + i + 6, tftp_tsize);
 500                         }
 501 #endif
 502                 }
 503 #ifdef CONFIG_CMD_TFTPPUT
 504                 if (tftp_put_active) {
 505                         /* Get ready to send the first block */
 506                         tftp_state = STATE_DATA;
 507                         tftp_cur_block++;
 508                 }
 509 #endif
 510                 tftp_send(); /* Send ACK or first data block */
 511                 break;
 512         case TFTP_DATA:
 513                 if (len < 2)
 514                         return;
 515                 len -= 2;
 516                 tftp_cur_block = ntohs(*(__be16 *)pkt);
 517
 518                 update_block_number();
 519
 520                 if (tftp_state == STATE_SEND_RRQ)
 521                         debug("Server did not acknowledge timeout option!\n");
 522
 523                 if (tftp_state == STATE_SEND_RRQ || tftp_state == STATE_OACK ||
 524                     tftp_state == STATE_RECV_WRQ) {
 525                         /* first block received */
 526                         tftp_state = STATE_DATA;
 527                         tftp_remote_port = src;
 528                         new_transfer();
 529
 530                         if (tftp_cur_block != 1) {      /* Assertion */
 531                                 puts("\nTFTP error: ");
 532                                 printf("First block is not block 1 (%ld)\n",
 533                                        tftp_cur_block);
 534                                 puts("Starting again\n\n");
 535                                 net_start_again();
 536                                 break;
 537                         }
 538                 }
 539
 540                 if (tftp_cur_block == tftp_prev_block) {
 541                         /* Same block again; ignore it. */
 542                         break;
 543                 }
 544
 545                 tftp_prev_block = tftp_cur_block;
 546                 timeout_count_max = tftp_timeout_count_max;
 547                 net_set_timeout_handler(timeout_ms, tftp_timeout_handler);
 548
 549                 if (store_block(tftp_cur_block - 1, pkt + 2, len)) {
 550                         eth_halt();
 551                         net_set_state(NETLOOP_FAIL);
 552                         break;
 553                 }
 554
 555                 /*
 556                  *      Acknowledge the block just received, which will prompt
 557                  *      the remote for the next one.
 558                  */
 559                 tftp_send();
 560
 561                 if (len < tftp_block_size)
 562                         tftp_complete();
 563                 break;
 564
 565         case TFTP_ERROR:
 566                 printf("\nTFTP error: '%s' (%d)\n",
 567                        pkt + 2, ntohs(*(__be16 *)pkt));
 568
 569                 switch (ntohs(*(__be16 *)pkt)) {
 570                 case TFTP_ERR_FILE_NOT_FOUND:
 571                 case TFTP_ERR_ACCESS_DENIED:
 572                         puts("Not retrying...\n");
 573                         eth_halt();
 574                         net_set_state(NETLOOP_FAIL);
 575                         break;
 576                 case TFTP_ERR_UNDEFINED:
 577                 case TFTP_ERR_DISK_FULL:
 578                 case TFTP_ERR_UNEXPECTED_OPCODE:
 579                 case TFTP_ERR_UNKNOWN_TRANSFER_ID:
 580                 case TFTP_ERR_FILE_ALREADY_EXISTS:
 581                 default:
 582                         puts("Starting again\n\n");
 583                         net_start_again();
 584                         break;
 585                 }
 586                 break;
 587         }
 588 }
 589
 590
 591 static void tftp_timeout_handler(void)
 592 {
 593         if (++timeout_count > timeout_count_max) {
 594                 restart("Retry count exceeded");
 595         } else {
 596                 puts("T ");
 597                 net_set_timeout_handler(timeout_ms, tftp_timeout_handler);
 598                 if (tftp_state != STATE_RECV_WRQ)
 599                         tftp_send();
 600         }
 601 }
 602
 603 /* Initialize tftp_load_addr and tftp_load_size from load_addr and lmb */
 604 static int tftp_init_load_addr(void)
 605 {
 606 #ifdef CONFIG_LMB
 607         struct lmb lmb;
 608         phys_size_t max_size;
 609
 610         lmb_init_and_reserve(&lmb, gd->bd, (void *)gd->fdt_blob);
 611
 612         max_size = lmb_get_free_size(&lmb, load_addr);
 613         if (!max_size)
 614                 return -1;
 615
 616         tftp_load_size = max_size;
 617 #endif
 618         tftp_load_addr = load_addr;
 619         return 0;
 620 }
 621
 622 void tftp_start(enum proto_t protocol)
 623 {
 624 #if CONFIG_NET_TFTP_VARS
 625         char *ep;             /* Environment pointer */
 626
 627         /*
 628          * Allow the user to choose TFTP blocksize and timeout.
 629          * TFTP protocol has a minimal timeout of 1 second.
 630          */
 631
 632         ep = env_get("tftpblocksize");
 633         if (ep != NULL)
 634                 tftp_block_size_option = simple_strtol(ep, NULL, 10);
 635
 636         ep = env_get("tftptimeout");
 637         if (ep != NULL)
 638                 timeout_ms = simple_strtol(ep, NULL, 10);
 639
 640         if (timeout_ms < 1000) {
 641                 printf("TFTP timeout (%ld ms) too low, set min = 1000 ms\n",
 642                        timeout_ms);
 643                 timeout_ms = 1000;
 644         }
 645
 646         ep = env_get("tftptimeoutcountmax");
 647         if (ep != NULL)
 648                 tftp_timeout_count_max = simple_strtol(ep, NULL, 10);
 649
 650         if (tftp_timeout_count_max < 0) {
 651                 printf("TFTP timeout count max (%d ms) negative, set to 0\n",
 652                        tftp_timeout_count_max);
 653                 tftp_timeout_count_max = 0;
 654         }
 655 #endif
 656
 657         debug("TFTP blocksize = %i, timeout = %ld ms\n",
 658               tftp_block_size_option, timeout_ms);
 659
 660         tftp_remote_ip = net_server_ip;
 661         if (!net_parse_bootfile(&tftp_remote_ip, tftp_filename, MAX_LEN)) {
 662                 sprintf(default_filename, "%02X%02X%02X%02X.img",
 663                         net_ip.s_addr & 0xFF,
 664                         (net_ip.s_addr >>  8) & 0xFF,
 665                         (net_ip.s_addr >> 16) & 0xFF,
 666                         (net_ip.s_addr >> 24) & 0xFF);
 667
 668                 strncpy(tftp_filename, default_filename, DEFAULT_NAME_LEN);
 669                 tftp_filename[DEFAULT_NAME_LEN - 1] = 0;
 670
 671                 printf("*** Warning: no boot file name; using '%s'\n",
 672                        tftp_filename);
 673         }
 674
 675         printf("Using %s device\n", eth_get_name());
 676         printf("TFTP %s server %pI4; our IP address is %pI4",
 677 #ifdef CONFIG_CMD_TFTPPUT
 678                protocol == TFTPPUT ? "to" : "from",
 679 #else
 680                "from",
 681 #endif
 682                &tftp_remote_ip, &net_ip);
 683
 684         /* Check if we need to send across this subnet */
 685         if (net_gateway.s_addr && net_netmask.s_addr) {
 686                 struct in_addr our_net;
 687                 struct in_addr remote_net;
 688
 689                 our_net.s_addr = net_ip.s_addr & net_netmask.s_addr;
 690                 remote_net.s_addr = tftp_remote_ip.s_addr & net_netmask.s_addr;
 691                 if (our_net.s_addr != remote_net.s_addr)
 692                         printf("; sending through gateway %pI4", &net_gateway);
 693         }
 694         putc('\n');
 695
 696         printf("Filename '%s'.", tftp_filename);
 697
 698         if (net_boot_file_expected_size_in_blocks) {
 699                 printf(" Size is 0x%x Bytes = ",
 700                        net_boot_file_expected_size_in_blocks << 9);
 701                 print_size(net_boot_file_expected_size_in_blocks << 9, "");
 702         }
 703
 704         putc('\n');
 705 #ifdef CONFIG_CMD_TFTPPUT
 706         tftp_put_active = (protocol == TFTPPUT);
 707         if (tftp_put_active) {
 708                 printf("Save address: 0x%lx\n", save_addr);
 709                 printf("Save size:    0x%lx\n", save_size);
 710                 net_boot_file_size = save_size;
 711                 puts("Saving: *\b");
 712                 tftp_state = STATE_SEND_WRQ;
 713                 new_transfer();
 714         } else
 715 #endif
 716         {
 717                 if (tftp_init_load_addr()) {
 718                         eth_halt();
 719                         net_set_state(NETLOOP_FAIL);
 720                         puts("\nTFTP error: ");
 721                         puts("trying to overwrite reserved memory...\n");
 722                         return;
 723                 }
 724                 printf("Load address: 0x%lx\n", tftp_load_addr);
 725                 puts("Loading: *\b");
 726                 tftp_state = STATE_SEND_RRQ;
 727 #ifdef CONFIG_CMD_BOOTEFI
 728                 efi_set_bootdev("Net", "", tftp_filename);
 729 #endif
 730         }
 731
 732         time_start = get_timer(0);
 733         timeout_count_max = tftp_timeout_count_max;
 734
 735         net_set_timeout_handler(timeout_ms, tftp_timeout_handler);
 736         net_set_udp_handler(tftp_handler);
 737 #ifdef CONFIG_CMD_TFTPPUT
 738         net_set_icmp_handler(icmp_handler);
 739 #endif
 740         tftp_remote_port = WELL_KNOWN_PORT;
 741         timeout_count = 0;
 742         /* Use a pseudo-random port unless a specific port is set */
 743         tftp_our_port = 1024 + (get_timer(0) % 3072);
 744
 745 #ifdef CONFIG_TFTP_PORT
 746         ep = env_get("tftpdstp");
 747         if (ep != NULL)
 748                 tftp_remote_port = simple_strtol(ep, NULL, 10);
 749         ep = env_get("tftpsrcp");
 750         if (ep != NULL)
 751                 tftp_our_port = simple_strtol(ep, NULL, 10);
 752 #endif
 753         tftp_cur_block = 0;
 754
 755         /* zero out server ether in case the server ip has changed */
 756         memset(net_server_ethaddr, 0, 6);
 757         /* Revert tftp_block_size to dflt */
 758         tftp_block_size = TFTP_BLOCK_SIZE;
 759 #ifdef CONFIG_TFTP_TSIZE
 760         tftp_tsize = 0;
 761         tftp_tsize_num_hash = 0;
 762 #endif
 763
 764         tftp_send();
 765 }
 766
 767 #ifdef CONFIG_CMD_TFTPSRV
 768 void tftp_start_server(void)
 769 {
 770         tftp_filename[0] = 0;
 771
 772         if (tftp_init_load_addr()) {
 773                 eth_halt();
 774                 net_set_state(NETLOOP_FAIL);
 775                 puts("\nTFTP error: trying to overwrite reserved memory...\n");
 776                 return;
 777         }
 778         printf("Using %s device\n", eth_get_name());
 779         printf("Listening for TFTP transfer on %pI4\n", &net_ip);
 780         printf("Load address: 0x%lx\n", tftp_load_addr);
 781
 782         puts("Loading: *\b");
 783
 784         timeout_count_max = tftp_timeout_count_max;
 785         timeout_count = 0;
 786         timeout_ms = TIMEOUT;
 787         net_set_timeout_handler(timeout_ms, tftp_timeout_handler);
 788
 789         /* Revert tftp_block_size to dflt */
 790         tftp_block_size = TFTP_BLOCK_SIZE;
 791         tftp_cur_block = 0;
 792         tftp_our_port = WELL_KNOWN_PORT;
 793
 794 #ifdef CONFIG_TFTP_TSIZE
 795         tftp_tsize = 0;
 796         tftp_tsize_num_hash = 0;
 797 #endif
 798
 799         tftp_state = STATE_RECV_WRQ;
 800         net_set_udp_handler(tftp_handler);
 801
 802         /* zero out server ether in case the server ip has changed */
 803         memset(net_server_ethaddr, 0, 6);
 804 }
 805 #endif /* CONFIG_CMD_TFTPSRV */
 806