blob: 8282f47bcf5d374e03d343453d62ee0bc4851785 [file] [log] [blame]
Rafał Miłecki3cf7f132012-08-30 07:41:16 +02001/*
2 * BCM47XX MTD partitioning
3 *
4 * Copyright © 2012 Rafał Miłecki <zajec5@gmail.com>
5 *
6 * This program is free software; you can redistribute it and/or modify
7 * it under the terms of the GNU General Public License version 2 as
8 * published by the Free Software Foundation.
9 *
10 */
11
12#include <linux/module.h>
13#include <linux/kernel.h>
14#include <linux/slab.h>
15#include <linux/mtd/mtd.h>
16#include <linux/mtd/partitions.h>
Rafał Miłecki3cf7f132012-08-30 07:41:16 +020017
Rafał Miłecki0b56d2d2014-12-16 09:50:25 +010018#include <uapi/linux/magic.h>
19
Rafał Miłecki59af5c72014-10-02 11:48:46 +020020/*
21 * NAND flash on Netgear R6250 was verified to contain 15 partitions.
22 * This will result in allocating too big array for some old devices, but the
23 * memory will be freed soon anyway (see mtd_device_parse_register).
24 */
25#define BCM47XXPART_MAX_PARTS 20
Rafał Miłecki3cf7f132012-08-30 07:41:16 +020026
Rafał Miłecki5ca10882013-03-07 09:02:38 +010027/*
28 * Amount of bytes we read when analyzing each block of flash memory.
29 * Set it big enough to allow detecting partition and reading important data.
30 */
Rafał Miłecki4f8aaf72013-12-21 19:39:11 +010031#define BCM47XXPART_BYTES_TO_READ 0x4e8
Rafał Miłecki5ca10882013-03-07 09:02:38 +010032
Rafał Miłecki3cf7f132012-08-30 07:41:16 +020033/* Magics */
34#define BOARD_DATA_MAGIC 0x5246504D /* MPFR */
Rafał Miłeckif0501e82013-12-21 19:39:12 +010035#define BOARD_DATA_MAGIC2 0xBD0D0BBD
Rafał Miłecki4f8aaf72013-12-21 19:39:11 +010036#define CFE_MAGIC 0x43464531 /* 1EFC */
Rafał Miłecki33094c72013-10-21 22:35:34 +020037#define FACTORY_MAGIC 0x59544346 /* FCTY */
Rafał Miłecki9e3afa52014-02-28 18:02:01 +010038#define NVRAM_HEADER 0x48534C46 /* FLSH */
Rafał Miłecki3cf7f132012-08-30 07:41:16 +020039#define POT_MAGIC1 0x54544f50 /* POTT */
40#define POT_MAGIC2 0x504f /* OP */
41#define ML_MAGIC1 0x39685a42
42#define ML_MAGIC2 0x26594131
43#define TRX_MAGIC 0x30524448
Rafał Miłecki0b56d2d2014-12-16 09:50:25 +010044#define SHSQ_MAGIC 0x71736873 /* shsq (weird ZTE H218N endianness) */
Rafał Miłeckibd10c262014-12-01 18:50:20 +010045#define UBI_EC_MAGIC 0x23494255 /* UBI# */
Rafał Miłecki3cf7f132012-08-30 07:41:16 +020046
47struct trx_header {
48 uint32_t magic;
49 uint32_t length;
50 uint32_t crc32;
51 uint16_t flags;
52 uint16_t version;
53 uint32_t offset[3];
54} __packed;
55
Rafał Miłeckibd10c262014-12-01 18:50:20 +010056static void bcm47xxpart_add_part(struct mtd_partition *part, const char *name,
Rafał Miłecki3cf7f132012-08-30 07:41:16 +020057 u64 offset, uint32_t mask_flags)
58{
59 part->name = name;
60 part->offset = offset;
61 part->mask_flags = mask_flags;
62}
63
Rafał Miłeckibd10c262014-12-01 18:50:20 +010064static const char *bcm47xxpart_trx_data_part_name(struct mtd_info *master,
65 size_t offset)
66{
67 uint32_t buf;
68 size_t bytes_read;
69
70 if (mtd_read(master, offset, sizeof(buf), &bytes_read,
71 (uint8_t *)&buf) < 0) {
72 pr_err("mtd_read error while parsing (offset: 0x%X)!\n",
73 offset);
74 goto out_default;
75 }
76
77 if (buf == UBI_EC_MAGIC)
78 return "ubi";
79
80out_default:
81 return "rootfs";
82}
83
Rafał Miłecki3cf7f132012-08-30 07:41:16 +020084static int bcm47xxpart_parse(struct mtd_info *master,
Brian Norrisb9adf462015-12-04 15:25:14 -080085 const struct mtd_partition **pparts,
Rafał Miłecki3cf7f132012-08-30 07:41:16 +020086 struct mtd_part_parser_data *data)
87{
88 struct mtd_partition *parts;
89 uint8_t i, curr_part = 0;
90 uint32_t *buf;
91 size_t bytes_read;
92 uint32_t offset;
Hauke Mehrtens25bad1d2013-01-24 17:39:58 +010093 uint32_t blocksize = master->erasesize;
Rafał Miłecki3cf7f132012-08-30 07:41:16 +020094 struct trx_header *trx;
Rafał Miłecki396afe52013-01-06 16:08:36 +010095 int trx_part = -1;
96 int last_trx_part = -1;
Rafał Miłecki91d542f2013-03-07 09:02:39 +010097 int possible_nvram_sizes[] = { 0x8000, 0xF000, 0x10000, };
Rafał Miłecki3cf7f132012-08-30 07:41:16 +020098
Rafał Miłecki16bd87b2014-12-08 18:45:00 +010099 /*
100 * Some really old flashes (like AT45DB*) had smaller erasesize-s, but
101 * partitions were aligned to at least 0x1000 anyway.
102 */
103 if (blocksize < 0x1000)
104 blocksize = 0x1000;
Rafał Miłecki3cf7f132012-08-30 07:41:16 +0200105
106 /* Alloc */
107 parts = kzalloc(sizeof(struct mtd_partition) * BCM47XXPART_MAX_PARTS,
108 GFP_KERNEL);
Hauke Mehrtens99b1d182013-10-13 22:53:49 +0200109 if (!parts)
110 return -ENOMEM;
111
Rafał Miłecki5ca10882013-03-07 09:02:38 +0100112 buf = kzalloc(BCM47XXPART_BYTES_TO_READ, GFP_KERNEL);
Hauke Mehrtens99b1d182013-10-13 22:53:49 +0200113 if (!buf) {
114 kfree(parts);
115 return -ENOMEM;
116 }
Rafał Miłecki3cf7f132012-08-30 07:41:16 +0200117
118 /* Parse block by block looking for magics */
119 for (offset = 0; offset <= master->size - blocksize;
120 offset += blocksize) {
121 /* Nothing more in higher memory */
122 if (offset >= 0x2000000)
123 break;
124
Rafał Miłecki00b79862014-02-26 14:02:06 +0100125 if (curr_part >= BCM47XXPART_MAX_PARTS) {
Rafał Miłecki3cf7f132012-08-30 07:41:16 +0200126 pr_warn("Reached maximum number of partitions, scanning stopped!\n");
127 break;
128 }
129
130 /* Read beginning of the block */
Rafał Miłecki5ca10882013-03-07 09:02:38 +0100131 if (mtd_read(master, offset, BCM47XXPART_BYTES_TO_READ,
Rafał Miłecki3cf7f132012-08-30 07:41:16 +0200132 &bytes_read, (uint8_t *)buf) < 0) {
133 pr_err("mtd_read error while parsing (offset: 0x%X)!\n",
134 offset);
135 continue;
136 }
137
Rafał Miłecki4f8aaf72013-12-21 19:39:11 +0100138 /* Magic or small NVRAM at 0x400 */
139 if ((buf[0x4e0 / 4] == CFE_MAGIC && buf[0x4e4 / 4] == CFE_MAGIC) ||
140 (buf[0x400 / 4] == NVRAM_HEADER)) {
Rafał Miłecki3cf7f132012-08-30 07:41:16 +0200141 bcm47xxpart_add_part(&parts[curr_part++], "boot",
142 offset, MTD_WRITEABLE);
143 continue;
144 }
145
Rafał Miłecki3cf7f132012-08-30 07:41:16 +0200146 /*
147 * board_data starts with board_id which differs across boards,
148 * but we can use 'MPFR' (hopefully) magic at 0x100
149 */
150 if (buf[0x100 / 4] == BOARD_DATA_MAGIC) {
151 bcm47xxpart_add_part(&parts[curr_part++], "board_data",
152 offset, MTD_WRITEABLE);
153 continue;
154 }
155
Rafał Miłecki33094c72013-10-21 22:35:34 +0200156 /* Found on Huawei E970 */
157 if (buf[0x000 / 4] == FACTORY_MAGIC) {
158 bcm47xxpart_add_part(&parts[curr_part++], "factory",
159 offset, MTD_WRITEABLE);
160 continue;
161 }
162
Rafał Miłecki3cf7f132012-08-30 07:41:16 +0200163 /* POT(TOP) */
164 if (buf[0x000 / 4] == POT_MAGIC1 &&
165 (buf[0x004 / 4] & 0xFFFF) == POT_MAGIC2) {
166 bcm47xxpart_add_part(&parts[curr_part++], "POT", offset,
167 MTD_WRITEABLE);
168 continue;
169 }
170
171 /* ML */
172 if (buf[0x010 / 4] == ML_MAGIC1 &&
173 buf[0x014 / 4] == ML_MAGIC2) {
174 bcm47xxpart_add_part(&parts[curr_part++], "ML", offset,
175 MTD_WRITEABLE);
176 continue;
177 }
178
179 /* TRX */
180 if (buf[0x000 / 4] == TRX_MAGIC) {
Rafał Miłecki108ebcd2014-02-26 14:30:34 +0100181 if (BCM47XXPART_MAX_PARTS - curr_part < 4) {
182 pr_warn("Not enough partitions left to register trx, scanning stopped!\n");
183 break;
184 }
185
Rafał Miłecki3cf7f132012-08-30 07:41:16 +0200186 trx = (struct trx_header *)buf;
187
Rafał Miłecki396afe52013-01-06 16:08:36 +0100188 trx_part = curr_part;
189 bcm47xxpart_add_part(&parts[curr_part++], "firmware",
190 offset, 0);
191
Rafał Miłecki3cf7f132012-08-30 07:41:16 +0200192 i = 0;
193 /* We have LZMA loader if offset[2] points to sth */
194 if (trx->offset[2]) {
195 bcm47xxpart_add_part(&parts[curr_part++],
196 "loader",
197 offset + trx->offset[i],
198 0);
199 i++;
200 }
201
Hauke Mehrtensa1ff7d62014-09-22 00:33:13 +0200202 if (trx->offset[i]) {
203 bcm47xxpart_add_part(&parts[curr_part++],
204 "linux",
205 offset + trx->offset[i],
206 0);
207 i++;
208 }
Rafał Miłecki3cf7f132012-08-30 07:41:16 +0200209
210 /*
211 * Pure rootfs size is known and can be calculated as:
212 * trx->length - trx->offset[i]. We don't fill it as
213 * we want to have jffs2 (overlay) in the same mtd.
214 */
Hauke Mehrtensa1ff7d62014-09-22 00:33:13 +0200215 if (trx->offset[i]) {
Rafał Miłeckibd10c262014-12-01 18:50:20 +0100216 const char *name;
217
218 name = bcm47xxpart_trx_data_part_name(master, offset + trx->offset[i]);
Hauke Mehrtensa1ff7d62014-09-22 00:33:13 +0200219 bcm47xxpart_add_part(&parts[curr_part++],
Rafał Miłeckibd10c262014-12-01 18:50:20 +0100220 name,
Hauke Mehrtensa1ff7d62014-09-22 00:33:13 +0200221 offset + trx->offset[i],
222 0);
223 i++;
224 }
Rafał Miłecki3cf7f132012-08-30 07:41:16 +0200225
Rafał Miłecki396afe52013-01-06 16:08:36 +0100226 last_trx_part = curr_part - 1;
227
Rafał Miłecki3cf7f132012-08-30 07:41:16 +0200228 /*
229 * We have whole TRX scanned, skip to the next part. Use
230 * roundown (not roundup), as the loop will increase
231 * offset in next step.
232 */
233 offset = rounddown(offset + trx->length, blocksize);
234 continue;
235 }
Rafał Miłecki020c6bc2013-10-21 22:34:37 +0200236
237 /* Squashfs on devices not using TRX */
Rafał Miłecki0b56d2d2014-12-16 09:50:25 +0100238 if (le32_to_cpu(buf[0x000 / 4]) == SQUASHFS_MAGIC ||
239 buf[0x000 / 4] == SHSQ_MAGIC) {
Rafał Miłecki020c6bc2013-10-21 22:34:37 +0200240 bcm47xxpart_add_part(&parts[curr_part++], "rootfs",
241 offset, 0);
242 continue;
243 }
Rafał Miłeckif0501e82013-12-21 19:39:12 +0100244
Rafał Miłecki024629f2014-08-18 20:20:27 +0200245 /*
246 * New (ARM?) devices may have NVRAM in some middle block. Last
247 * block will be checked later, so skip it.
248 */
249 if (offset != master->size - blocksize &&
250 buf[0x000 / 4] == NVRAM_HEADER) {
251 bcm47xxpart_add_part(&parts[curr_part++], "nvram",
252 offset, 0);
253 continue;
254 }
255
Rafał Miłeckif0501e82013-12-21 19:39:12 +0100256 /* Read middle of the block */
257 if (mtd_read(master, offset + 0x8000, 0x4,
258 &bytes_read, (uint8_t *)buf) < 0) {
259 pr_err("mtd_read error while parsing (offset: 0x%X)!\n",
260 offset);
261 continue;
262 }
263
264 /* Some devices (ex. WNDR3700v3) don't have a standard 'MPFR' */
265 if (buf[0x000 / 4] == BOARD_DATA_MAGIC2) {
266 bcm47xxpart_add_part(&parts[curr_part++], "board_data",
267 offset, MTD_WRITEABLE);
268 continue;
269 }
Rafał Miłecki3cf7f132012-08-30 07:41:16 +0200270 }
Rafał Miłecki91d542f2013-03-07 09:02:39 +0100271
272 /* Look for NVRAM at the end of the last block. */
273 for (i = 0; i < ARRAY_SIZE(possible_nvram_sizes); i++) {
Rafał Miłecki00b79862014-02-26 14:02:06 +0100274 if (curr_part >= BCM47XXPART_MAX_PARTS) {
Rafał Miłecki91d542f2013-03-07 09:02:39 +0100275 pr_warn("Reached maximum number of partitions, scanning stopped!\n");
276 break;
277 }
278
279 offset = master->size - possible_nvram_sizes[i];
280 if (mtd_read(master, offset, 0x4, &bytes_read,
281 (uint8_t *)buf) < 0) {
282 pr_err("mtd_read error while reading at offset 0x%X!\n",
283 offset);
284 continue;
285 }
286
287 /* Standard NVRAM */
288 if (buf[0] == NVRAM_HEADER) {
289 bcm47xxpart_add_part(&parts[curr_part++], "nvram",
290 master->size - blocksize, 0);
291 break;
292 }
293 }
294
Rafał Miłecki3cf7f132012-08-30 07:41:16 +0200295 kfree(buf);
296
297 /*
298 * Assume that partitions end at the beginning of the one they are
299 * followed by.
300 */
Rafał Miłecki648bdbe2013-01-06 16:08:35 +0100301 for (i = 0; i < curr_part; i++) {
302 u64 next_part_offset = (i < curr_part - 1) ?
303 parts[i + 1].offset : master->size;
304
305 parts[i].size = next_part_offset - parts[i].offset;
Rafał Miłecki396afe52013-01-06 16:08:36 +0100306 if (i == last_trx_part && trx_part >= 0)
307 parts[trx_part].size = next_part_offset -
308 parts[trx_part].offset;
Rafał Miłecki648bdbe2013-01-06 16:08:35 +0100309 }
Rafał Miłecki3cf7f132012-08-30 07:41:16 +0200310
311 *pparts = parts;
312 return curr_part;
313};
314
315static struct mtd_part_parser bcm47xxpart_mtd_parser = {
Rafał Miłecki3cf7f132012-08-30 07:41:16 +0200316 .parse_fn = bcm47xxpart_parse,
317 .name = "bcm47xxpart",
318};
Brian Norrisb8f70ba2015-11-11 19:13:30 -0800319module_mtd_part_parser(bcm47xxpart_mtd_parser);
Rafał Miłecki3cf7f132012-08-30 07:41:16 +0200320
321MODULE_LICENSE("GPL");
322MODULE_DESCRIPTION("MTD partitioning for BCM47XX flash memories");