2013-03-13 13:30:42 +00:00
|
|
|
/*
|
|
|
|
* imx_usb:
|
|
|
|
*
|
|
|
|
* Program to download and execute an image over the USB boot protocol
|
|
|
|
* on i.MX series processors.
|
|
|
|
*
|
|
|
|
* Code originally written by Eric Nelson.
|
|
|
|
*
|
|
|
|
* This library is free software; you can redistribute it and/or
|
|
|
|
* modify it under the terms of the GNU Lesser General Public
|
|
|
|
* License as published by the Free Software Foundation; either
|
|
|
|
* version 2.1 of the License, or (at your option) any later version.
|
|
|
|
*
|
|
|
|
* This library is distributed in the hope that it will be useful,
|
|
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
|
|
* Lesser General Public License for more details.
|
|
|
|
*
|
|
|
|
* You should have received a copy of the GNU Lesser General Public
|
|
|
|
* License along with this library; if not, write to the Free Software
|
|
|
|
* Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
|
|
|
|
*/
|
|
|
|
#include <stdio.h>
|
|
|
|
#include <sys/types.h>
|
|
|
|
#include <time.h>
|
|
|
|
|
|
|
|
#include <unistd.h>
|
|
|
|
#include <ctype.h>
|
|
|
|
#include <sys/io.h>
|
|
|
|
#include <errno.h>
|
|
|
|
#include <string.h>
|
|
|
|
#include <stdlib.h>
|
|
|
|
#include <libusb.h>
|
|
|
|
#include <getopt.h>
|
|
|
|
|
|
|
|
#define get_min(a, b) (((a) < (b)) ? (a) : (b))
|
|
|
|
|
|
|
|
int verbose;
|
|
|
|
|
|
|
|
struct mach_id {
|
|
|
|
struct mach_id * next;
|
|
|
|
unsigned short vid;
|
|
|
|
unsigned short pid;
|
|
|
|
char file_name[256];
|
|
|
|
char *name;
|
|
|
|
#define MODE_HID 0
|
|
|
|
#define MODE_BULK 1
|
|
|
|
unsigned char mode;
|
|
|
|
#define HDR_NONE 0
|
|
|
|
#define HDR_MX51 1
|
|
|
|
#define HDR_MX53 2
|
|
|
|
unsigned char header_type;
|
|
|
|
unsigned short max_transfer;
|
|
|
|
};
|
|
|
|
|
|
|
|
#define ARRAY_SIZE(arr) (sizeof(arr) / sizeof((arr)[0]))
|
|
|
|
#ifndef offsetof
|
|
|
|
#define offsetof(TYPE, MEMBER) __builtin_offsetof(TYPE, MEMBER)
|
|
|
|
#endif
|
|
|
|
|
|
|
|
struct usb_work {
|
|
|
|
char filename[256];
|
|
|
|
unsigned char dcd;
|
|
|
|
unsigned char clear_dcd;
|
|
|
|
unsigned char plug;
|
|
|
|
#define J_ADDR 1
|
|
|
|
#define J_HEADER 2
|
|
|
|
#define J_HEADER2 3
|
|
|
|
unsigned char jump_mode;
|
|
|
|
unsigned jump_addr;
|
|
|
|
};
|
|
|
|
|
|
|
|
struct usb_id {
|
|
|
|
struct mach_id *mach_id;
|
|
|
|
struct usb_work *work;
|
|
|
|
};
|
|
|
|
|
|
|
|
struct mach_id imx_ids[] = {
|
|
|
|
{
|
|
|
|
.vid = 0x066f,
|
|
|
|
.pid = 0x3780,
|
|
|
|
.name = "i.MX23",
|
|
|
|
.mode = MODE_BULK,
|
|
|
|
}, {
|
|
|
|
.vid = 0x15a2,
|
|
|
|
.pid = 0x004f,
|
|
|
|
.name = "i.MX28",
|
|
|
|
}, {
|
|
|
|
.vid = 0x15a2,
|
|
|
|
.pid = 0x0052,
|
|
|
|
.name = "i.MX50",
|
|
|
|
}, {
|
|
|
|
.vid = 0x15a2,
|
|
|
|
.pid = 0x0054,
|
2013-06-21 13:27:46 +00:00
|
|
|
.name = "i.MX6q",
|
|
|
|
.header_type = HDR_MX53,
|
|
|
|
.mode = MODE_HID,
|
|
|
|
.max_transfer = 1024,
|
|
|
|
}, {
|
|
|
|
.vid = 0x15a2,
|
|
|
|
.pid = 0x0061,
|
|
|
|
.name = "i.MX6dl/s",
|
2013-03-13 13:30:42 +00:00
|
|
|
.header_type = HDR_MX53,
|
|
|
|
.mode = MODE_HID,
|
|
|
|
.max_transfer = 1024,
|
|
|
|
}, {
|
|
|
|
.vid = 0x15a2,
|
|
|
|
.pid = 0x0041,
|
|
|
|
.name = "i.MX51",
|
|
|
|
.header_type = HDR_MX51,
|
|
|
|
.mode = MODE_BULK,
|
|
|
|
.max_transfer = 64,
|
|
|
|
}, {
|
|
|
|
.vid = 0x15a2,
|
|
|
|
.pid = 0x004e,
|
|
|
|
.name = "i.MX53",
|
|
|
|
.header_type = HDR_MX53,
|
|
|
|
.mode = MODE_BULK,
|
|
|
|
.max_transfer = 512,
|
|
|
|
}, {
|
|
|
|
.vid = 0x15a2,
|
|
|
|
.pid = 0x0030,
|
|
|
|
.name = "i.MX35",
|
|
|
|
.header_type = HDR_MX51,
|
|
|
|
.mode = MODE_BULK,
|
|
|
|
.max_transfer = 64,
|
2013-11-27 12:49:33 +00:00
|
|
|
}, {
|
|
|
|
.vid = 0x15a2,
|
|
|
|
.pid = 0x003a,
|
|
|
|
.name = "i.MX25",
|
|
|
|
.header_type = HDR_MX51,
|
|
|
|
.mode = MODE_BULK,
|
|
|
|
.max_transfer = 64,
|
2013-03-13 13:30:42 +00:00
|
|
|
},
|
|
|
|
};
|
|
|
|
|
|
|
|
static struct mach_id *imx_device(unsigned short vid, unsigned short pid)
|
|
|
|
{
|
|
|
|
int i;
|
|
|
|
|
|
|
|
for (i = 0; i < ARRAY_SIZE(imx_ids); i++) {
|
|
|
|
struct mach_id *id = &imx_ids[i];
|
|
|
|
if (id->vid == vid && id->pid == pid) {
|
|
|
|
fprintf(stderr, "found %s USB device [%04x:%04x]\n",
|
|
|
|
id->name, vid, pid);
|
|
|
|
return id;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
return NULL;
|
|
|
|
}
|
|
|
|
|
|
|
|
static libusb_device *find_imx_dev(libusb_device **devs, struct mach_id **pp_id)
|
|
|
|
{
|
|
|
|
int i = 0;
|
|
|
|
struct mach_id *p;
|
|
|
|
|
|
|
|
for (;;) {
|
|
|
|
struct libusb_device_descriptor desc;
|
|
|
|
int r;
|
|
|
|
|
|
|
|
libusb_device *dev = devs[i++];
|
|
|
|
if (!dev)
|
|
|
|
break;
|
|
|
|
|
|
|
|
r = libusb_get_device_descriptor(dev, &desc);
|
|
|
|
if (r < 0) {
|
|
|
|
fprintf(stderr, "failed to get device descriptor");
|
|
|
|
return NULL;
|
|
|
|
}
|
|
|
|
|
|
|
|
p = imx_device(desc.idVendor, desc.idProduct);
|
|
|
|
if (p) {
|
|
|
|
*pp_id = p;
|
|
|
|
return dev;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
*pp_id = NULL;
|
|
|
|
|
|
|
|
return NULL;
|
|
|
|
}
|
|
|
|
|
|
|
|
static void dump_long(unsigned char *src, unsigned cnt, unsigned addr)
|
|
|
|
{
|
|
|
|
unsigned *p = (unsigned *)src;
|
|
|
|
while (cnt >= 32) {
|
|
|
|
printf("%08x: %08x %08x %08x %08x %08x %08x %08x %08x\n",
|
|
|
|
addr, p[0], p[1], p[2], p[3], p[4], p[5], p[6], p[7]);
|
|
|
|
p += 8;
|
|
|
|
cnt -= 32;
|
|
|
|
addr += 32;
|
|
|
|
}
|
|
|
|
if (cnt) {
|
|
|
|
printf("%08x:", addr);
|
|
|
|
while (cnt >= 4) {
|
|
|
|
printf(" %08x", p[0]);
|
|
|
|
p++;
|
|
|
|
cnt -= 4;
|
|
|
|
}
|
|
|
|
printf("\n");
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
static void dump_bytes(unsigned char *src, unsigned cnt, unsigned addr)
|
|
|
|
{
|
|
|
|
unsigned char *p = src;
|
|
|
|
int i;
|
|
|
|
|
|
|
|
while (cnt >= 16) {
|
|
|
|
printf("%08x: %02x %02x %02x %02x %02x %02x %02x %02x %02x %02x %02x %02x %02x %02x %02x %02x\n",
|
|
|
|
addr,
|
|
|
|
p[0], p[1], p[2], p[3], p[4], p[5], p[6], p[7], p[8], p[9], p[10],
|
|
|
|
p[11], p[12], p[13], p[14], p[15]);
|
|
|
|
p += 16;
|
|
|
|
cnt -= 16;
|
|
|
|
addr += 16;
|
|
|
|
}
|
|
|
|
|
|
|
|
if (cnt) {
|
|
|
|
printf("%08x:", addr);
|
|
|
|
i = 0;
|
|
|
|
while (cnt) {
|
|
|
|
printf(" %02x", p[0]);
|
|
|
|
p++;
|
|
|
|
cnt--;
|
|
|
|
i++;
|
|
|
|
if (cnt) if (i == 4) {
|
|
|
|
i = 0;
|
|
|
|
printf(" ");
|
|
|
|
}
|
|
|
|
}
|
|
|
|
printf("\n");
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
static long get_file_size(FILE *xfile)
|
|
|
|
{
|
|
|
|
long size;
|
|
|
|
fseek(xfile, 0, SEEK_END);
|
|
|
|
size = ftell(xfile);
|
|
|
|
rewind(xfile);
|
|
|
|
|
|
|
|
return size;
|
|
|
|
}
|
|
|
|
|
|
|
|
/*
|
|
|
|
* HID Class-Specific Requests values. See section 7.2 of the HID specifications
|
|
|
|
*/
|
|
|
|
#define HID_GET_REPORT 0x01
|
|
|
|
#define HID_GET_IDLE 0x02
|
|
|
|
#define HID_GET_PROTOCOL 0x03
|
|
|
|
#define HID_SET_REPORT 0x09
|
|
|
|
#define HID_SET_IDLE 0x0A
|
|
|
|
#define HID_SET_PROTOCOL 0x0B
|
|
|
|
#define HID_REPORT_TYPE_INPUT 0x01
|
|
|
|
#define HID_REPORT_TYPE_OUTPUT 0x02
|
|
|
|
#define HID_REPORT_TYPE_FEATURE 0x03
|
|
|
|
#define CTRL_IN LIBUSB_ENDPOINT_IN |LIBUSB_REQUEST_TYPE_CLASS|LIBUSB_RECIPIENT_INTERFACE
|
|
|
|
#define CTRL_OUT LIBUSB_ENDPOINT_OUT|LIBUSB_REQUEST_TYPE_CLASS|LIBUSB_RECIPIENT_INTERFACE
|
|
|
|
|
|
|
|
#define EP_IN 0x80
|
|
|
|
|
|
|
|
/*
|
|
|
|
* For HID class drivers, 4 reports are used to implement
|
|
|
|
* Serial Download protocol(SDP)
|
|
|
|
* Report 1 (control out endpoint) 16 byte SDP comand
|
|
|
|
* (total of 17 bytes with 1st byte report id of 0x01
|
|
|
|
* Report 2 (control out endpoint) data associated with report 1 commands
|
|
|
|
* (max size of 1025 with 1st byte of 0x02)
|
|
|
|
* Report 3 (interrupt in endpoint) HAB security state
|
|
|
|
* (max size of 5 bytes with 1st byte of 0x03)
|
|
|
|
* (0x12343412 production)
|
|
|
|
* (0x56787856 engineering)
|
|
|
|
* Report 4 (interrupt in endpoint) date associated with report 1 commands
|
|
|
|
* (max size of 65 bytes with 1st byte of 0x04)
|
|
|
|
*
|
|
|
|
*/
|
|
|
|
/*
|
|
|
|
* For Bulk class drivers, the device is configured as
|
|
|
|
* EP0IN, EP0OUT control transfer
|
|
|
|
* EP1OUT - bulk out
|
|
|
|
* (max packet size of 512 bytes)
|
|
|
|
* EP2IN - bulk in
|
|
|
|
* (max packet size of 512 bytes)
|
|
|
|
*/
|
|
|
|
static int transfer(struct libusb_device_handle *h, int report, unsigned char *p, unsigned cnt,
|
|
|
|
int* last_trans, struct usb_id *p_id)
|
|
|
|
{
|
|
|
|
int err;
|
|
|
|
if (cnt > p_id->mach_id->max_transfer)
|
|
|
|
cnt = p_id->mach_id->max_transfer;
|
|
|
|
|
|
|
|
if (verbose > 4) {
|
|
|
|
printf("report=%i\n", report);
|
|
|
|
if (report < 3)
|
|
|
|
dump_bytes(p, cnt, 0);
|
|
|
|
}
|
|
|
|
|
|
|
|
if (p_id->mach_id->mode == MODE_BULK) {
|
|
|
|
*last_trans = 0;
|
|
|
|
err = libusb_bulk_transfer(h, (report < 3) ? 1 : 2 + EP_IN, p, cnt, last_trans, 1000);
|
|
|
|
} else {
|
|
|
|
unsigned char tmp[1028];
|
|
|
|
|
|
|
|
tmp[0] = (unsigned char)report;
|
|
|
|
|
|
|
|
if (report < 3) {
|
|
|
|
memcpy(&tmp[1], p, cnt);
|
|
|
|
err = libusb_control_transfer(h,
|
|
|
|
CTRL_OUT,
|
|
|
|
HID_SET_REPORT,
|
|
|
|
(HID_REPORT_TYPE_OUTPUT << 8) | report,
|
|
|
|
0,
|
|
|
|
tmp, cnt + 1, 1000);
|
|
|
|
*last_trans = (err > 0) ? err - 1 : 0;
|
|
|
|
if (err > 0)
|
|
|
|
err = 0;
|
|
|
|
} else {
|
|
|
|
*last_trans = 0;
|
|
|
|
memset(&tmp[1], 0, cnt);
|
|
|
|
err = libusb_interrupt_transfer(h, 1 + EP_IN, tmp, cnt + 1, last_trans, 1000);
|
|
|
|
if (err >= 0) {
|
|
|
|
if (tmp[0] == (unsigned char)report) {
|
|
|
|
if (*last_trans > 1) {
|
|
|
|
*last_trans -= 1;
|
|
|
|
memcpy(p, &tmp[1], *last_trans);
|
|
|
|
}
|
|
|
|
} else {
|
|
|
|
printf("Unexpected report %i err=%i, cnt=%i, last_trans=%i, %02x %02x %02x %02x\n",
|
|
|
|
tmp[0], err, cnt, *last_trans, tmp[0], tmp[1], tmp[2], tmp[3]);
|
|
|
|
err = 0;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
if (verbose > 4 && report >= 3)
|
|
|
|
dump_bytes(p, cnt, 0);
|
|
|
|
|
|
|
|
return err;
|
|
|
|
}
|
|
|
|
|
|
|
|
int do_status(libusb_device_handle *h, struct usb_id *p_id)
|
|
|
|
{
|
|
|
|
int last_trans;
|
|
|
|
unsigned char tmp[64];
|
|
|
|
int retry = 0;
|
|
|
|
int err;
|
|
|
|
const unsigned char status_command[] = {
|
|
|
|
5, 5, 0, 0, 0, 0,
|
|
|
|
0,
|
|
|
|
0, 0, 0, 0,
|
|
|
|
0, 0, 0, 0,
|
|
|
|
0
|
|
|
|
};
|
|
|
|
|
|
|
|
for (;;) {
|
|
|
|
err = transfer(h, 1, (unsigned char*)status_command, 16, &last_trans, p_id);
|
|
|
|
|
|
|
|
if (verbose > 2)
|
|
|
|
printf("report 1, wrote %i bytes, err=%i\n", last_trans, err);
|
|
|
|
|
|
|
|
memset(tmp, 0, sizeof(tmp));
|
|
|
|
|
|
|
|
err = transfer(h, 3, tmp, 64, &last_trans, p_id);
|
|
|
|
|
|
|
|
if (verbose > 2) {
|
|
|
|
printf("report 3, read %i bytes, err=%i\n", last_trans, err);
|
|
|
|
printf("read=%02x %02x %02x %02x\n", tmp[0], tmp[1], tmp[2], tmp[3]);
|
|
|
|
}
|
|
|
|
|
|
|
|
if (!err)
|
|
|
|
break;
|
|
|
|
|
|
|
|
retry++;
|
|
|
|
|
|
|
|
if (retry > 5)
|
|
|
|
break;
|
|
|
|
}
|
|
|
|
|
|
|
|
if (p_id->mach_id->mode == MODE_HID) {
|
|
|
|
err = transfer(h, 4, tmp, sizeof(tmp), &last_trans, p_id);
|
|
|
|
if (err)
|
|
|
|
printf("4 in err=%i, last_trans=%i %02x %02x %02x %02x\n",
|
|
|
|
err, last_trans, tmp[0], tmp[1], tmp[2], tmp[3]);
|
|
|
|
}
|
|
|
|
|
|
|
|
return err;
|
|
|
|
}
|
|
|
|
|
|
|
|
struct boot_data {
|
|
|
|
uint32_t dest;
|
|
|
|
uint32_t image_len;
|
|
|
|
uint32_t plugin;
|
|
|
|
};
|
|
|
|
|
|
|
|
struct imx_flash_header_v2 {
|
|
|
|
#define IVT_BARKER 0x402000d1
|
|
|
|
uint32_t barker;
|
|
|
|
uint32_t start_addr;
|
|
|
|
uint32_t reserv1;
|
|
|
|
uint32_t dcd_ptr;
|
|
|
|
uint32_t boot_data_ptr; /* struct boot_data * */
|
|
|
|
uint32_t self_ptr; /* struct imx_flash_header_v2 *, this - boot_data.start = offset linked at */
|
|
|
|
uint32_t app_code_csf;
|
|
|
|
uint32_t reserv2;
|
|
|
|
};
|
|
|
|
|
|
|
|
/*
|
|
|
|
* MX51 header type
|
|
|
|
*/
|
|
|
|
struct imx_flash_header_v1 {
|
|
|
|
uint32_t app_start_addr;
|
|
|
|
#define APP_BARKER 0xb1
|
|
|
|
#define DCD_BARKER 0xb17219e9
|
|
|
|
uint32_t app_barker;
|
|
|
|
uint32_t csf_ptr;
|
|
|
|
uint32_t dcd_ptr_ptr;
|
|
|
|
uint32_t srk_ptr;
|
|
|
|
uint32_t dcd_ptr;
|
|
|
|
uint32_t app_dest_ptr;
|
|
|
|
};
|
|
|
|
|
|
|
|
#define V(a) (((a) >> 24) & 0xff), (((a) >> 16) & 0xff), (((a) >> 8) & 0xff), ((a) & 0xff)
|
|
|
|
|
|
|
|
static int read_memory(struct libusb_device_handle *h, struct usb_id *p_id,
|
|
|
|
unsigned addr, unsigned char *dest, unsigned cnt)
|
|
|
|
{
|
|
|
|
static unsigned char read_reg_command[] = {
|
|
|
|
1,
|
|
|
|
1,
|
|
|
|
V(0), /* address */
|
|
|
|
0x20, /* format */
|
|
|
|
V(0x00000004), /* data count */
|
|
|
|
V(0), /* data */
|
|
|
|
0x00, /* type */
|
|
|
|
};
|
|
|
|
|
|
|
|
int retry = 0;
|
|
|
|
int last_trans;
|
|
|
|
int err;
|
|
|
|
int rem;
|
|
|
|
unsigned char tmp[64];
|
|
|
|
read_reg_command[2] = (unsigned char)(addr >> 24);
|
|
|
|
read_reg_command[3] = (unsigned char)(addr >> 16);
|
|
|
|
read_reg_command[4] = (unsigned char)(addr >> 8);
|
|
|
|
read_reg_command[5] = (unsigned char)(addr);
|
|
|
|
|
|
|
|
read_reg_command[7] = (unsigned char)(cnt >> 24);
|
|
|
|
read_reg_command[8] = (unsigned char)(cnt >> 16);
|
|
|
|
read_reg_command[9] = (unsigned char)(cnt >> 8);
|
|
|
|
read_reg_command[10] = (unsigned char)(cnt);
|
|
|
|
|
|
|
|
for (;;) {
|
|
|
|
err = transfer(h, 1, read_reg_command, 16, &last_trans, p_id);
|
|
|
|
if (!err)
|
|
|
|
break;
|
|
|
|
printf("read_reg_command err=%i, last_trans=%i\n", err, last_trans);
|
|
|
|
if (retry > 5) {
|
|
|
|
return -4;
|
|
|
|
}
|
|
|
|
retry++;
|
|
|
|
}
|
|
|
|
|
|
|
|
err = transfer(h, 3, tmp, 4, &last_trans, p_id);
|
|
|
|
if (err) {
|
|
|
|
printf("r3 in err=%i, last_trans=%i %02x %02x %02x %02x\n",
|
|
|
|
err, last_trans, tmp[0], tmp[1], tmp[2], tmp[3]);
|
|
|
|
return err;
|
|
|
|
}
|
|
|
|
|
|
|
|
rem = cnt;
|
|
|
|
|
|
|
|
while (rem) {
|
|
|
|
tmp[0] = tmp[1] = tmp[2] = tmp[3] = 0;
|
|
|
|
err = transfer(h, 4, tmp, 64, &last_trans, p_id);
|
|
|
|
if (err) {
|
|
|
|
printf("r4 in err=%i, last_trans=%i %02x %02x %02x %02x cnt=%d rem=%d\n",
|
|
|
|
err, last_trans, tmp[0], tmp[1], tmp[2], tmp[3], cnt, rem);
|
|
|
|
break;
|
|
|
|
}
|
|
|
|
if ((last_trans > rem) || (last_trans > 64)) {
|
|
|
|
if ((last_trans == 64) && (cnt == rem)) {
|
|
|
|
/* Last transfer is expected to be too large for HID */
|
|
|
|
} else {
|
|
|
|
printf("err: %02x %02x %02x %02x cnt=%d rem=%d last_trans=%i\n",
|
|
|
|
tmp[0], tmp[1], tmp[2], tmp[3], cnt, rem, last_trans);
|
|
|
|
}
|
|
|
|
last_trans = rem;
|
|
|
|
if (last_trans > 64)
|
|
|
|
last_trans = 64;
|
|
|
|
}
|
|
|
|
memcpy(dest, tmp, last_trans);
|
|
|
|
dest += last_trans;
|
|
|
|
rem -= last_trans;
|
|
|
|
}
|
|
|
|
return err;
|
|
|
|
}
|
|
|
|
|
|
|
|
static int write_memory(struct libusb_device_handle *h, struct usb_id *p_id,
|
|
|
|
unsigned addr, unsigned val, int width)
|
|
|
|
{
|
|
|
|
int retry = 0;
|
|
|
|
int last_trans;
|
|
|
|
int err = 0;
|
|
|
|
unsigned char tmp[64];
|
|
|
|
unsigned char ds;
|
|
|
|
unsigned char write_reg_command[] = {
|
|
|
|
2,
|
|
|
|
2,
|
|
|
|
V(0), /* address */
|
|
|
|
0x0, /* format */
|
|
|
|
V(0x00000004), /* data count */
|
|
|
|
V(0), /* data */
|
|
|
|
0x00, /* type */
|
|
|
|
};
|
|
|
|
write_reg_command[2] = (unsigned char)(addr >> 24);
|
|
|
|
write_reg_command[3] = (unsigned char)(addr >> 16);
|
|
|
|
write_reg_command[4] = (unsigned char)(addr >> 8);
|
|
|
|
write_reg_command[5] = (unsigned char)(addr);
|
|
|
|
|
|
|
|
switch (width) {
|
|
|
|
case 1:
|
|
|
|
ds = 0x8;
|
|
|
|
break;
|
|
|
|
case 2:
|
|
|
|
ds = 0x10;
|
|
|
|
break;
|
|
|
|
case 4:
|
|
|
|
ds = 0x20;
|
|
|
|
break;
|
|
|
|
default:
|
|
|
|
return -1;
|
|
|
|
}
|
|
|
|
|
|
|
|
write_reg_command[6] = ds;
|
|
|
|
|
|
|
|
write_reg_command[11] = (unsigned char)(val >> 24);
|
|
|
|
write_reg_command[12] = (unsigned char)(val >> 16);
|
|
|
|
write_reg_command[13] = (unsigned char)(val >> 8);
|
|
|
|
write_reg_command[14] = (unsigned char)(val);
|
|
|
|
|
|
|
|
for (;;) {
|
|
|
|
err = transfer(h, 1, write_reg_command, 16, &last_trans, p_id);
|
|
|
|
if (!err)
|
|
|
|
break;
|
|
|
|
printf("write_reg_command err=%i, last_trans=%i\n", err, last_trans);
|
|
|
|
if (retry > 5) {
|
|
|
|
return -4;
|
|
|
|
}
|
|
|
|
retry++;
|
|
|
|
}
|
|
|
|
|
|
|
|
memset(tmp, 0, sizeof(tmp));
|
|
|
|
|
|
|
|
err = transfer(h, 3, tmp, sizeof(tmp), &last_trans, p_id);
|
|
|
|
if (err) {
|
|
|
|
printf("w3 in err=%i, last_trans=%i %02x %02x %02x %02x\n",
|
|
|
|
err, last_trans, tmp[0], tmp[1], tmp[2], tmp[3]);
|
|
|
|
printf("addr=0x%08x, val=0x%08x\n", addr, val);
|
|
|
|
}
|
|
|
|
|
|
|
|
memset(tmp, 0, sizeof(tmp));
|
|
|
|
|
|
|
|
err = transfer(h, 4, tmp, sizeof(tmp), &last_trans, p_id);
|
|
|
|
if (err)
|
|
|
|
printf("w4 in err=%i, last_trans=%i %02x %02x %02x %02x\n",
|
|
|
|
err, last_trans, tmp[0], tmp[1], tmp[2], tmp[3]);
|
|
|
|
return err;
|
|
|
|
}
|
|
|
|
|
|
|
|
static int write_dcd_table_ivt(struct libusb_device_handle *h, struct usb_id *p_id,
|
|
|
|
struct imx_flash_header_v2 *hdr, unsigned char *file_start, unsigned cnt)
|
|
|
|
{
|
|
|
|
unsigned char *dcd_end;
|
|
|
|
unsigned m_length;
|
|
|
|
#define cvt_dest_to_src (((unsigned char *)hdr) - hdr->self_ptr)
|
|
|
|
unsigned char* dcd;
|
|
|
|
unsigned char* file_end = file_start + cnt;
|
|
|
|
int err = 0;
|
|
|
|
|
|
|
|
if (!hdr->dcd_ptr) {
|
|
|
|
printf("No dcd table, barker=%x\n", hdr->barker);
|
|
|
|
return 0; /* nothing to do */
|
|
|
|
}
|
|
|
|
|
|
|
|
dcd = hdr->dcd_ptr + cvt_dest_to_src;
|
|
|
|
|
|
|
|
if ((dcd < file_start) || ((dcd + 4) > file_end)) {
|
|
|
|
printf("bad dcd_ptr %08x\n", hdr->dcd_ptr);
|
|
|
|
return -1;
|
|
|
|
}
|
|
|
|
|
|
|
|
m_length = (dcd[1] << 8) + dcd[2];
|
|
|
|
|
|
|
|
printf("main dcd length %x\n", m_length);
|
|
|
|
|
|
|
|
if ((dcd[0] != 0xd2) || (dcd[3] != 0x40)) {
|
|
|
|
printf("Unknown tag\n");
|
|
|
|
return -1;
|
|
|
|
}
|
|
|
|
|
|
|
|
dcd_end = dcd + m_length;
|
|
|
|
|
|
|
|
if (dcd_end > file_end) {
|
|
|
|
printf("bad dcd length %08x\n", m_length);
|
|
|
|
return -1;
|
|
|
|
}
|
|
|
|
dcd += 4;
|
|
|
|
|
|
|
|
while (dcd < dcd_end) {
|
|
|
|
unsigned s_length = (dcd[1] << 8) + dcd[2];
|
|
|
|
unsigned char *s_end = dcd + s_length;
|
|
|
|
|
|
|
|
printf("sub dcd length %x\n", s_length);
|
|
|
|
|
|
|
|
if ((dcd[0] != 0xcc) || (dcd[3] != 0x04)) {
|
|
|
|
printf("Unknown sub tag\n");
|
|
|
|
return -1;
|
|
|
|
}
|
|
|
|
dcd += 4;
|
|
|
|
|
|
|
|
if (s_end > dcd_end) {
|
|
|
|
printf("error s_end(%p) > dcd_end(%p)\n", s_end, dcd_end);
|
|
|
|
return -1;
|
|
|
|
}
|
|
|
|
|
|
|
|
while (dcd < s_end) {
|
|
|
|
unsigned addr = (dcd[0] << 24) | (dcd[1] << 16) | (dcd[2] << 8) | dcd[3];
|
|
|
|
unsigned val = (dcd[4] << 24) | (dcd[5] << 16) | (dcd[6] << 8) | dcd[7];
|
|
|
|
|
|
|
|
dcd += 8;
|
|
|
|
err = write_memory(h, p_id, addr, val, 4);
|
|
|
|
if (err < 0)
|
|
|
|
return err;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
return err;
|
|
|
|
}
|
|
|
|
|
|
|
|
static int get_dcd_range_old(struct imx_flash_header_v1 *hdr,
|
|
|
|
unsigned char *file_start, unsigned cnt,
|
|
|
|
unsigned char **pstart, unsigned char **pend)
|
|
|
|
{
|
|
|
|
unsigned char *dcd_end;
|
|
|
|
unsigned m_length;
|
|
|
|
#define cvt_dest_to_src_old (((unsigned char *)&hdr->dcd_ptr) - hdr->dcd_ptr_ptr)
|
|
|
|
unsigned char* dcd;
|
|
|
|
unsigned val;
|
|
|
|
unsigned char* file_end = file_start + cnt;
|
|
|
|
|
|
|
|
if (!hdr->dcd_ptr) {
|
|
|
|
printf("No dcd table, barker=%x\n", hdr->app_barker);
|
|
|
|
*pstart = *pend = ((unsigned char *)hdr) + sizeof(struct imx_flash_header_v1);
|
|
|
|
return 0; /* nothing to do */
|
|
|
|
}
|
|
|
|
|
|
|
|
dcd = hdr->dcd_ptr + cvt_dest_to_src_old;
|
|
|
|
|
|
|
|
if ((dcd < file_start) || ((dcd + 8) > file_end)) {
|
|
|
|
printf("bad dcd_ptr %08x\n", hdr->dcd_ptr);
|
|
|
|
return -1;
|
|
|
|
}
|
|
|
|
|
|
|
|
val = (dcd[0] << 0) | (dcd[1] << 8) | (dcd[2] << 16) | (dcd[3] << 24);
|
|
|
|
|
|
|
|
if (val != DCD_BARKER) {
|
|
|
|
printf("Unknown tag\n");
|
|
|
|
return -1;
|
|
|
|
}
|
|
|
|
|
|
|
|
dcd += 4;
|
|
|
|
m_length = (dcd[0] << 0) | (dcd[1] << 8) | (dcd[2] << 16) | (dcd[3] << 24);
|
|
|
|
dcd += 4;
|
|
|
|
dcd_end = dcd + m_length;
|
|
|
|
|
|
|
|
if (dcd_end > file_end) {
|
|
|
|
printf("bad dcd length %08x\n", m_length);
|
|
|
|
return -1;
|
|
|
|
}
|
|
|
|
|
|
|
|
*pstart = dcd;
|
|
|
|
*pend = dcd_end;
|
|
|
|
|
|
|
|
return 0;
|
|
|
|
}
|
|
|
|
|
|
|
|
static int write_dcd_table_old(struct libusb_device_handle *h, struct usb_id *p_id,
|
|
|
|
struct imx_flash_header_v1 *hdr, unsigned char *file_start, unsigned cnt)
|
|
|
|
{
|
|
|
|
unsigned val;
|
|
|
|
unsigned char *dcd_end;
|
|
|
|
unsigned char* dcd;
|
|
|
|
int err = get_dcd_range_old(hdr, file_start, cnt, &dcd, &dcd_end);
|
|
|
|
if (err < 0)
|
|
|
|
return err;
|
|
|
|
|
|
|
|
printf("writing DCD table...\n");
|
|
|
|
|
|
|
|
while (dcd < dcd_end) {
|
|
|
|
unsigned type = (dcd[0] << 0) | (dcd[1] << 8) | (dcd[2] << 16) | (dcd[3] << 24);
|
|
|
|
unsigned addr = (dcd[4] << 0) | (dcd[5] << 8) | (dcd[6] << 16) | (dcd[7] << 24);
|
|
|
|
val = (dcd[8] << 0) | (dcd[9] << 8) | (dcd[10] << 16) | (dcd[11] << 24);
|
|
|
|
dcd += 12;
|
|
|
|
|
|
|
|
switch (type) {
|
|
|
|
case 1:
|
|
|
|
if (verbose > 1)
|
|
|
|
printf("type=%08x *0x%08x = 0x%08x\n", type, addr, val);
|
|
|
|
err = write_memory(h, p_id, addr, val, 1);
|
|
|
|
if (err < 0)
|
|
|
|
return err;
|
|
|
|
break;
|
|
|
|
case 4:
|
|
|
|
if (verbose > 1)
|
|
|
|
printf("type=%08x *0x%08x = 0x%08x\n", type, addr, val);
|
|
|
|
err = write_memory(h, p_id, addr, val, 4);
|
|
|
|
if (err < 0)
|
|
|
|
return err;
|
|
|
|
break;
|
|
|
|
default:
|
|
|
|
printf("!!!unknown type=%08x *0x%08x = 0x%08x\n", type, addr, val);
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
if (err)
|
|
|
|
fprintf(stderr, "writing DCD table failed with %d\n", err);
|
|
|
|
else
|
|
|
|
printf("DCD table successfully written\n");
|
|
|
|
|
|
|
|
return err;
|
|
|
|
}
|
|
|
|
|
|
|
|
static int verify_memory(struct libusb_device_handle *h, struct usb_id *p_id,
|
|
|
|
FILE *xfile, unsigned offset, unsigned addr, unsigned size,
|
|
|
|
unsigned char *verify_buffer, unsigned verify_cnt)
|
|
|
|
{
|
|
|
|
int mismatch = 0;
|
|
|
|
unsigned char file_buf[1024];
|
|
|
|
fseek(xfile, offset + verify_cnt, SEEK_SET);
|
|
|
|
|
|
|
|
while (size) {
|
|
|
|
unsigned char mem_buf[64];
|
|
|
|
unsigned char *p = file_buf;
|
|
|
|
int cnt = addr & 0x3f;
|
|
|
|
int request = get_min(size, sizeof(file_buf));
|
|
|
|
|
|
|
|
if (cnt) {
|
|
|
|
cnt = 64 - cnt;
|
|
|
|
if (request > cnt)
|
|
|
|
request = cnt;
|
|
|
|
}
|
|
|
|
|
|
|
|
if (verify_cnt) {
|
|
|
|
p = verify_buffer;
|
|
|
|
cnt = get_min(request, verify_cnt);
|
|
|
|
verify_buffer += cnt;
|
|
|
|
verify_cnt -= cnt;
|
|
|
|
} else {
|
|
|
|
cnt = fread(p, 1, request, xfile);
|
|
|
|
if (cnt <= 0) {
|
|
|
|
printf("Unexpected end of file, request=0x%0x, size=0x%x, cnt=%i\n",
|
|
|
|
request, size, cnt);
|
|
|
|
return -1;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
size -= cnt;
|
|
|
|
|
|
|
|
while (cnt) {
|
|
|
|
int ret;
|
|
|
|
|
|
|
|
request = get_min(cnt, sizeof(mem_buf));
|
|
|
|
|
|
|
|
ret = read_memory(h, p_id, addr, mem_buf, request);
|
|
|
|
if (ret < 0)
|
|
|
|
return ret;
|
|
|
|
|
|
|
|
if (memcmp(p, mem_buf, request)) {
|
|
|
|
unsigned char * m = mem_buf;
|
|
|
|
if (!mismatch)
|
|
|
|
printf("!!!!mismatch\n");
|
|
|
|
mismatch++;
|
|
|
|
|
|
|
|
while (request) {
|
|
|
|
unsigned req = get_min(request, 32);
|
|
|
|
if (memcmp(p, m, req)) {
|
|
|
|
dump_long(p, req, offset);
|
|
|
|
dump_long(m, req, addr);
|
|
|
|
printf("\n");
|
|
|
|
}
|
|
|
|
p += req;
|
|
|
|
m+= req;
|
|
|
|
offset += req;
|
|
|
|
addr += req;
|
|
|
|
cnt -= req;
|
|
|
|
request -= req;
|
|
|
|
}
|
|
|
|
if (mismatch >= 5)
|
|
|
|
return -1;
|
|
|
|
}
|
|
|
|
p += request;
|
|
|
|
offset += request;
|
|
|
|
addr += request;
|
|
|
|
cnt -= request;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
return mismatch ? -1 : 0;
|
|
|
|
}
|
|
|
|
|
|
|
|
static int is_header(struct usb_id *p_id, unsigned char *p)
|
|
|
|
{
|
|
|
|
struct imx_flash_header_v1 *ohdr = (struct imx_flash_header_v1 *)p;
|
|
|
|
struct imx_flash_header_v2 *hdr = (struct imx_flash_header_v2 *)p;
|
|
|
|
|
|
|
|
switch (p_id->mach_id->header_type) {
|
|
|
|
case HDR_MX51:
|
|
|
|
if (ohdr->app_barker == 0xb1)
|
|
|
|
return 1;
|
|
|
|
break;
|
|
|
|
case HDR_MX53:
|
|
|
|
if (hdr->barker == IVT_BARKER)
|
|
|
|
return 1;
|
|
|
|
}
|
|
|
|
|
|
|
|
return 0;
|
|
|
|
}
|
|
|
|
|
|
|
|
static int perform_dcd(struct libusb_device_handle *h, struct usb_id *p_id, unsigned char *p,
|
|
|
|
unsigned char *file_start, unsigned cnt)
|
|
|
|
{
|
|
|
|
struct imx_flash_header_v1 *ohdr = (struct imx_flash_header_v1 *)p;
|
|
|
|
struct imx_flash_header_v2 *hdr = (struct imx_flash_header_v2 *)p;
|
|
|
|
int ret = 0;
|
|
|
|
|
|
|
|
switch (p_id->mach_id->header_type) {
|
|
|
|
case HDR_MX51:
|
|
|
|
ret = write_dcd_table_old(h, p_id, ohdr, file_start, cnt);
|
|
|
|
ohdr->dcd_ptr = 0;
|
|
|
|
|
|
|
|
break;
|
|
|
|
case HDR_MX53:
|
|
|
|
ret = write_dcd_table_ivt(h, p_id, hdr, file_start, cnt);
|
|
|
|
hdr->dcd_ptr = 0;
|
|
|
|
|
|
|
|
break;
|
|
|
|
}
|
|
|
|
|
|
|
|
return ret;
|
|
|
|
}
|
|
|
|
|
|
|
|
static int clear_dcd_ptr(struct libusb_device_handle *h, struct usb_id *p_id,
|
|
|
|
unsigned char *p, unsigned char *file_start, unsigned cnt)
|
|
|
|
{
|
|
|
|
struct imx_flash_header_v1 *ohdr = (struct imx_flash_header_v1 *)p;
|
|
|
|
struct imx_flash_header_v2 *hdr = (struct imx_flash_header_v2 *)p;
|
|
|
|
|
|
|
|
switch (p_id->mach_id->header_type) {
|
|
|
|
case HDR_MX51:
|
|
|
|
printf("clear dcd_ptr=0x%08x\n", ohdr->dcd_ptr);
|
|
|
|
ohdr->dcd_ptr = 0;
|
|
|
|
break;
|
|
|
|
case HDR_MX53:
|
|
|
|
printf("clear dcd_ptr=0x%08x\n", hdr->dcd_ptr);
|
|
|
|
hdr->dcd_ptr = 0;
|
|
|
|
break;
|
|
|
|
}
|
|
|
|
return 0;
|
|
|
|
}
|
|
|
|
|
|
|
|
static int get_dl_start(struct usb_id *p_id, unsigned char *p, unsigned char *file_start,
|
|
|
|
unsigned cnt, unsigned *dladdr, unsigned *max_length, unsigned *plugin,
|
|
|
|
unsigned *header_addr)
|
|
|
|
{
|
|
|
|
unsigned char* file_end = file_start + cnt;
|
|
|
|
switch (p_id->mach_id->header_type) {
|
|
|
|
case HDR_MX51:
|
|
|
|
{
|
|
|
|
struct imx_flash_header_v1 *ohdr = (struct imx_flash_header_v1 *)p;
|
|
|
|
unsigned char *dcd_end;
|
|
|
|
unsigned char* dcd;
|
|
|
|
int err = get_dcd_range_old(ohdr, file_start, cnt, &dcd, &dcd_end);
|
|
|
|
|
|
|
|
*dladdr = ohdr->app_dest_ptr;
|
|
|
|
*header_addr = ohdr->dcd_ptr_ptr - offsetof(struct imx_flash_header_v1, dcd_ptr);
|
|
|
|
*plugin = 0;
|
|
|
|
if (err >= 0)
|
|
|
|
*max_length = dcd_end[0] | (dcd_end[1] << 8) | (dcd_end[2] << 16) | (dcd_end[3] << 24);
|
|
|
|
|
|
|
|
break;
|
|
|
|
}
|
|
|
|
case HDR_MX53:
|
|
|
|
{
|
|
|
|
unsigned char *bd;
|
|
|
|
struct imx_flash_header_v2 *hdr = (struct imx_flash_header_v2 *)p;
|
|
|
|
|
|
|
|
*dladdr = hdr->self_ptr;
|
|
|
|
*header_addr = hdr->self_ptr;
|
|
|
|
bd = hdr->boot_data_ptr + cvt_dest_to_src;
|
|
|
|
if ((bd < file_start) || ((bd + 4) > file_end)) {
|
|
|
|
printf("bad boot_data_ptr %08x\n", hdr->boot_data_ptr);
|
|
|
|
return -1;
|
|
|
|
}
|
|
|
|
|
|
|
|
*dladdr = ((struct boot_data *)bd)->dest;
|
|
|
|
*max_length = ((struct boot_data *)bd)->image_len;
|
|
|
|
*plugin = ((struct boot_data *)bd)->plugin;
|
|
|
|
((struct boot_data *)bd)->plugin = 0;
|
|
|
|
|
|
|
|
hdr->boot_data_ptr = 0;
|
|
|
|
|
|
|
|
break;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
return 0;
|
|
|
|
}
|
|
|
|
|
|
|
|
static int process_header(struct libusb_device_handle *h, struct usb_id *p_id,
|
|
|
|
struct usb_work *curr, unsigned char *buf, int cnt,
|
|
|
|
unsigned *p_dladdr, unsigned *p_max_length, unsigned *p_plugin,
|
|
|
|
unsigned *p_header_addr)
|
|
|
|
{
|
|
|
|
int ret;
|
|
|
|
unsigned header_max = 0x800;
|
|
|
|
unsigned header_inc = 0x400;
|
|
|
|
unsigned header_offset = 0;
|
|
|
|
int header_cnt = 0;
|
|
|
|
unsigned char *p = buf;
|
|
|
|
|
|
|
|
for (header_offset = 0; header_offset < header_max; header_offset += header_inc, p += header_inc) {
|
|
|
|
|
|
|
|
if (!is_header(p_id, p))
|
|
|
|
continue;
|
|
|
|
|
|
|
|
ret = get_dl_start(p_id, p, buf, cnt, p_dladdr, p_max_length, p_plugin, p_header_addr);
|
|
|
|
if (ret < 0) {
|
|
|
|
printf("!!get_dl_start returned %i\n", ret);
|
|
|
|
return ret;
|
|
|
|
}
|
|
|
|
|
|
|
|
if (curr->dcd) {
|
|
|
|
ret = perform_dcd(h, p_id, p, buf, cnt);
|
|
|
|
if (ret < 0) {
|
|
|
|
printf("!!perform_dcd returned %i\n", ret);
|
|
|
|
return ret;
|
|
|
|
}
|
|
|
|
curr->dcd = 0;
|
|
|
|
if ((!curr->jump_mode) && (!curr->plug)) {
|
|
|
|
printf("!!dcd done, nothing else requested\n");
|
|
|
|
return 0;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
if (curr->clear_dcd) {
|
|
|
|
ret = clear_dcd_ptr(h, p_id, p, buf, cnt);
|
|
|
|
if (ret < 0) {
|
|
|
|
printf("!!clear_dcd returned %i\n", ret);
|
|
|
|
return ret;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
if (*p_plugin && (!curr->plug) && (!header_cnt)) {
|
|
|
|
header_cnt++;
|
|
|
|
header_max = header_offset + *p_max_length + 0x400;
|
|
|
|
if (header_max > cnt - 32)
|
|
|
|
header_max = cnt - 32;
|
|
|
|
printf("header_max=%x\n", header_max);
|
|
|
|
header_inc = 4;
|
|
|
|
} else {
|
|
|
|
if (!*p_plugin)
|
|
|
|
curr->plug = 0;
|
|
|
|
return header_offset;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
fprintf(stderr, "no DCD header found in image, run imx-image first\n");
|
|
|
|
|
|
|
|
return -ENODEV;
|
|
|
|
}
|
|
|
|
|
|
|
|
static int load_file(struct libusb_device_handle *h, struct usb_id *p_id,
|
|
|
|
unsigned char *p, int cnt, unsigned char *buf, unsigned buf_cnt,
|
|
|
|
unsigned dladdr, unsigned fsize, unsigned char type, FILE* xfile)
|
|
|
|
{
|
|
|
|
static unsigned char dl_command[] = {
|
|
|
|
0x04,
|
|
|
|
0x04,
|
|
|
|
V(0), /* address */
|
|
|
|
0x00, /* format */
|
|
|
|
V(0x00000020), /* data count */
|
|
|
|
V(0), /* data */
|
|
|
|
0xaa, /* type */
|
|
|
|
};
|
|
|
|
int last_trans, err;
|
|
|
|
int retry = 0;
|
|
|
|
unsigned transfer_size = 0;
|
|
|
|
int max = p_id->mach_id->max_transfer;
|
|
|
|
unsigned char tmp[64];
|
|
|
|
|
|
|
|
dl_command[2] = (unsigned char)(dladdr >> 24);
|
|
|
|
dl_command[3] = (unsigned char)(dladdr >> 16);
|
|
|
|
dl_command[4] = (unsigned char)(dladdr >> 8);
|
|
|
|
dl_command[5] = (unsigned char)(dladdr);
|
|
|
|
|
|
|
|
dl_command[7] = (unsigned char)(fsize >> 24);
|
|
|
|
dl_command[8] = (unsigned char)(fsize >> 16);
|
|
|
|
dl_command[9] = (unsigned char)(fsize >> 8);
|
|
|
|
dl_command[10] = (unsigned char)(fsize);
|
|
|
|
dl_command[15] = type;
|
|
|
|
|
|
|
|
for (;;) {
|
|
|
|
err = transfer(h, 1, dl_command, 16, &last_trans, p_id);
|
|
|
|
if (!err)
|
|
|
|
break;
|
|
|
|
|
|
|
|
printf("dl_command err=%i, last_trans=%i\n", err, last_trans);
|
|
|
|
|
|
|
|
if (retry > 5)
|
|
|
|
return -4;
|
|
|
|
retry++;
|
|
|
|
}
|
|
|
|
|
|
|
|
retry = 0;
|
|
|
|
|
|
|
|
if (p_id->mach_id->mode == MODE_BULK) {
|
|
|
|
err = transfer(h, 3, tmp, sizeof(tmp), &last_trans, p_id);
|
|
|
|
if (err)
|
|
|
|
printf("in err=%i, last_trans=%i %02x %02x %02x %02x\n",
|
|
|
|
err, last_trans, tmp[0], tmp[1], tmp[2], tmp[3]);
|
|
|
|
}
|
|
|
|
|
|
|
|
while (1) {
|
|
|
|
int retry;
|
|
|
|
|
|
|
|
if (cnt > (int)(fsize - transfer_size))
|
|
|
|
cnt = (fsize - transfer_size);
|
|
|
|
|
|
|
|
if (cnt <= 0)
|
|
|
|
break;
|
|
|
|
|
|
|
|
retry = 0;
|
|
|
|
|
|
|
|
while (cnt) {
|
|
|
|
err = transfer(h, 2, p, get_min(cnt, max), &last_trans, p_id);
|
|
|
|
if (err) {
|
|
|
|
printf("out err=%i, last_trans=%i cnt=0x%x max=0x%x transfer_size=0x%X retry=%i\n",
|
|
|
|
err, last_trans, cnt, max, transfer_size, retry);
|
|
|
|
if (retry >= 10) {
|
|
|
|
printf("Giving up\n");
|
|
|
|
return err;
|
|
|
|
}
|
|
|
|
if (max >= 16)
|
|
|
|
max >>= 1;
|
|
|
|
else
|
|
|
|
max <<= 1;
|
|
|
|
usleep(10000);
|
|
|
|
retry++;
|
|
|
|
continue;
|
|
|
|
}
|
|
|
|
max = p_id->mach_id->max_transfer;
|
|
|
|
retry = 0;
|
|
|
|
if (cnt < last_trans) {
|
|
|
|
printf("error: last_trans=0x%x, attempted only=0%x\n", last_trans, cnt);
|
|
|
|
cnt = last_trans;
|
|
|
|
}
|
|
|
|
if (!last_trans) {
|
|
|
|
printf("Nothing last_trans, err=%i\n", err);
|
|
|
|
break;
|
|
|
|
}
|
|
|
|
p += last_trans;
|
|
|
|
cnt -= last_trans;
|
|
|
|
transfer_size += last_trans;
|
|
|
|
}
|
|
|
|
|
|
|
|
if (!last_trans)
|
|
|
|
break;
|
|
|
|
|
|
|
|
if (feof(xfile))
|
|
|
|
break;
|
|
|
|
|
|
|
|
cnt = fsize - transfer_size;
|
|
|
|
if (cnt <= 0)
|
|
|
|
break;
|
|
|
|
|
|
|
|
cnt = fread(buf, 1 , get_min(cnt, buf_cnt), xfile);
|
|
|
|
p = buf;
|
|
|
|
}
|
|
|
|
|
|
|
|
if (p_id->mach_id->mode == MODE_HID) {
|
|
|
|
err = transfer(h, 3, tmp, sizeof(tmp), &last_trans, p_id);
|
|
|
|
if (err)
|
|
|
|
printf("3 in err=%i, last_trans=%i %02x %02x %02x %02x\n",
|
|
|
|
err, last_trans, tmp[0], tmp[1], tmp[2], tmp[3]);
|
|
|
|
err = transfer(h, 4, tmp, sizeof(tmp), &last_trans, p_id);
|
|
|
|
if (err)
|
|
|
|
printf("4 in err=%i, last_trans=%i %02x %02x %02x %02x\n",
|
|
|
|
err, last_trans, tmp[0], tmp[1], tmp[2], tmp[3]);
|
|
|
|
} else {
|
|
|
|
do_status(h, p_id);
|
|
|
|
}
|
|
|
|
|
|
|
|
return transfer_size;
|
|
|
|
}
|
|
|
|
|
|
|
|
#define FT_APP 0xaa
|
|
|
|
#define FT_CSF 0xcc
|
|
|
|
#define FT_DCD 0xee
|
|
|
|
#define FT_LOAD_ONLY 0x00
|
|
|
|
|
|
|
|
static int do_irom_download(struct libusb_device_handle *h, struct usb_id *p_id,
|
|
|
|
struct usb_work *curr, int verify)
|
|
|
|
{
|
|
|
|
static unsigned char jump_command[] = {0x0b,0x0b, V(0), 0x00, V(0x00000000), V(0), 0x00};
|
|
|
|
|
|
|
|
int ret;
|
|
|
|
FILE* xfile;
|
|
|
|
unsigned char type;
|
|
|
|
unsigned fsize;
|
|
|
|
unsigned header_offset;
|
|
|
|
int cnt;
|
|
|
|
unsigned file_base;
|
|
|
|
int last_trans, err;
|
|
|
|
#define BUF_SIZE (1024*16)
|
|
|
|
unsigned char *buf = NULL;
|
|
|
|
unsigned char *verify_buffer = NULL;
|
|
|
|
unsigned verify_cnt;
|
|
|
|
unsigned char *p;
|
|
|
|
unsigned char tmp[64];
|
|
|
|
unsigned dladdr = 0;
|
|
|
|
unsigned max_length;
|
|
|
|
unsigned plugin = 0;
|
|
|
|
unsigned header_addr = 0;
|
|
|
|
|
|
|
|
unsigned skip = 0;
|
|
|
|
unsigned transfer_size=0;
|
|
|
|
int retry = 0;
|
|
|
|
|
|
|
|
xfile = fopen(curr->filename, "rb" );
|
|
|
|
if (!xfile) {
|
|
|
|
printf("error, can not open input file: %s\n", curr->filename);
|
|
|
|
return -5;
|
|
|
|
}
|
|
|
|
|
|
|
|
buf = malloc(BUF_SIZE);
|
|
|
|
if (!buf) {
|
|
|
|
printf("error, out of memory\n");
|
|
|
|
ret = -2;
|
|
|
|
goto cleanup;
|
|
|
|
}
|
|
|
|
|
|
|
|
fsize = get_file_size(xfile);
|
|
|
|
|
|
|
|
cnt = fread(buf, 1 , BUF_SIZE, xfile);
|
|
|
|
|
|
|
|
if (cnt < 0x20) {
|
|
|
|
printf("error, file: %s is too small\n", curr->filename);
|
|
|
|
ret = -2;
|
|
|
|
goto cleanup;
|
|
|
|
}
|
|
|
|
|
|
|
|
max_length = fsize;
|
|
|
|
|
|
|
|
ret = process_header(h, p_id, curr, buf, cnt,
|
|
|
|
&dladdr, &max_length, &plugin, &header_addr);
|
|
|
|
if (ret < 0)
|
|
|
|
goto cleanup;
|
|
|
|
|
|
|
|
header_offset = ret;
|
|
|
|
|
|
|
|
if ((!curr->jump_mode) && (!curr->plug)) {
|
|
|
|
/* nothing else requested */
|
|
|
|
ret = 0;
|
|
|
|
goto cleanup;
|
|
|
|
}
|
|
|
|
|
|
|
|
if (plugin && (!curr->plug)) {
|
|
|
|
printf("Only plugin header found\n");
|
|
|
|
ret = -1;
|
|
|
|
goto cleanup;
|
|
|
|
}
|
|
|
|
|
|
|
|
if (!dladdr) {
|
|
|
|
printf("unknown load address\n");
|
|
|
|
ret = -3;
|
|
|
|
goto cleanup;
|
|
|
|
}
|
|
|
|
|
|
|
|
file_base = header_addr - header_offset;
|
|
|
|
|
|
|
|
type = (curr->plug || curr->jump_mode) ? FT_APP : FT_LOAD_ONLY;
|
|
|
|
|
|
|
|
if (p_id->mach_id->mode == MODE_BULK && type == FT_APP) {
|
|
|
|
/* No jump command, dladdr should point to header */
|
|
|
|
dladdr = header_addr;
|
|
|
|
}
|
|
|
|
|
|
|
|
if (file_base > dladdr) {
|
|
|
|
max_length -= (file_base - dladdr);
|
|
|
|
dladdr = file_base;
|
|
|
|
}
|
|
|
|
|
|
|
|
skip = dladdr - file_base;
|
|
|
|
|
|
|
|
if (skip > cnt) {
|
|
|
|
if (skip > fsize) {
|
|
|
|
printf("skip(0x%08x) > fsize(0x%08x) file_base=0x%08x, header_offset=0x%x\n",
|
|
|
|
skip, fsize, file_base, header_offset);
|
|
|
|
ret = -4;
|
|
|
|
goto cleanup;
|
|
|
|
}
|
|
|
|
|
|
|
|
fseek(xfile, skip, SEEK_SET);
|
|
|
|
cnt -= skip;
|
|
|
|
fsize -= skip;
|
|
|
|
skip = 0;
|
|
|
|
cnt = fread(buf, 1 , BUF_SIZE, xfile);
|
|
|
|
}
|
|
|
|
|
|
|
|
p = &buf[skip];
|
|
|
|
cnt -= skip;
|
|
|
|
fsize -= skip;
|
|
|
|
|
|
|
|
if (fsize > max_length)
|
|
|
|
fsize = max_length;
|
|
|
|
|
|
|
|
if (verify) {
|
|
|
|
/*
|
|
|
|
* we need to save header for verification
|
|
|
|
* because some of the file is changed
|
|
|
|
* before download
|
|
|
|
*/
|
|
|
|
verify_buffer = malloc(cnt);
|
|
|
|
verify_cnt = cnt;
|
|
|
|
|
|
|
|
if (!verify_buffer) {
|
|
|
|
printf("error, out of memory\n");
|
|
|
|
ret = -2;
|
|
|
|
goto cleanup;
|
|
|
|
}
|
|
|
|
|
|
|
|
memcpy(verify_buffer, p, cnt);
|
|
|
|
|
|
|
|
if ((type == FT_APP) && (p_id->mach_id->mode != MODE_HID)) {
|
|
|
|
type = FT_LOAD_ONLY;
|
|
|
|
verify = 2;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
printf("loading binary file(%s) to %08x, skip=0x%x, fsize=%d type=%d...\n",
|
|
|
|
curr->filename, dladdr, skip, fsize, type);
|
|
|
|
|
|
|
|
ret = load_file(h, p_id, p, cnt, buf, BUF_SIZE,
|
|
|
|
dladdr, fsize, type, xfile);
|
|
|
|
if (ret < 0)
|
|
|
|
goto cleanup;
|
|
|
|
|
|
|
|
printf("binary file successfully loaded\n");
|
|
|
|
|
|
|
|
transfer_size = ret;
|
|
|
|
|
|
|
|
if (verify) {
|
|
|
|
printf("verifying file...\n");
|
|
|
|
|
|
|
|
ret = verify_memory(h, p_id, xfile, skip, dladdr, fsize, verify_buffer, verify_cnt);
|
|
|
|
if (ret < 0) {
|
|
|
|
printf("verifying failed\n");
|
|
|
|
goto cleanup;
|
|
|
|
}
|
|
|
|
|
|
|
|
printf("file successfully verified\n");
|
|
|
|
|
|
|
|
if (verify == 2) {
|
|
|
|
if (verify_cnt > 64)
|
|
|
|
verify_cnt = 64;
|
|
|
|
ret = load_file(h, p_id, verify_buffer, verify_cnt,
|
|
|
|
buf, BUF_SIZE, dladdr, verify_cnt,
|
|
|
|
FT_APP, xfile);
|
|
|
|
if (ret < 0)
|
|
|
|
goto cleanup;
|
|
|
|
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
if (p_id->mach_id->mode == MODE_HID && type == FT_APP) {
|
|
|
|
printf("jumping to 0x%08x\n", header_addr);
|
|
|
|
|
|
|
|
jump_command[2] = (unsigned char)(header_addr >> 24);
|
|
|
|
jump_command[3] = (unsigned char)(header_addr >> 16);
|
|
|
|
jump_command[4] = (unsigned char)(header_addr >> 8);
|
|
|
|
jump_command[5] = (unsigned char)(header_addr);
|
|
|
|
|
|
|
|
/* Any command will initiate jump for mx51, jump address is ignored by mx51 */
|
|
|
|
retry = 0;
|
|
|
|
|
|
|
|
for (;;) {
|
|
|
|
err = transfer(h, 1, jump_command, 16, &last_trans, p_id);
|
|
|
|
if (!err)
|
|
|
|
break;
|
|
|
|
|
|
|
|
printf("jump_command err=%i, last_trans=%i\n", err, last_trans);
|
|
|
|
|
|
|
|
if (retry > 5)
|
|
|
|
return -4;
|
|
|
|
|
|
|
|
retry++;
|
|
|
|
}
|
|
|
|
|
|
|
|
memset(tmp, 0, sizeof(tmp));
|
|
|
|
err = transfer(h, 3, tmp, sizeof(tmp), &last_trans, p_id);
|
|
|
|
|
|
|
|
if (err)
|
|
|
|
printf("j3 in err=%i, last_trans=%i %02x %02x %02x %02x\n",
|
|
|
|
err, last_trans, tmp[0], tmp[1], tmp[2], tmp[3]);
|
|
|
|
}
|
|
|
|
|
|
|
|
ret = (fsize == transfer_size) ? 0 : -16;
|
|
|
|
cleanup:
|
|
|
|
fclose(xfile);
|
|
|
|
free(verify_buffer);
|
|
|
|
free(buf);
|
|
|
|
|
|
|
|
return ret;
|
|
|
|
}
|
|
|
|
|
|
|
|
static void usage(const char *prgname)
|
|
|
|
{
|
|
|
|
fprintf(stderr, "usage: %s [OPTIONS] [FILENAME]\n\n"
|
|
|
|
"-c check correctness of flashed image\n"
|
|
|
|
"-v verbose (give multiple times to increase)\n"
|
|
|
|
"-h this help\n", prgname);
|
|
|
|
exit(1);
|
|
|
|
}
|
|
|
|
|
|
|
|
int main(int argc, char *argv[])
|
|
|
|
{
|
|
|
|
struct usb_id *p_id;
|
|
|
|
struct mach_id *mach;
|
|
|
|
libusb_device **devs;
|
|
|
|
libusb_device *dev;
|
|
|
|
int r;
|
|
|
|
int err;
|
|
|
|
int ret = 1;
|
|
|
|
ssize_t cnt;
|
|
|
|
libusb_device_handle *h = NULL;
|
|
|
|
int config = 0;
|
|
|
|
int verify = 0;
|
|
|
|
struct usb_work w = {};
|
|
|
|
int opt;
|
|
|
|
|
|
|
|
while ((opt = getopt(argc, argv, "cvh")) != -1) {
|
|
|
|
switch (opt) {
|
|
|
|
case 'c':
|
|
|
|
verify = 1;
|
|
|
|
break;
|
|
|
|
case 'v':
|
|
|
|
verbose++;
|
|
|
|
break;
|
|
|
|
case 'h':
|
|
|
|
usage(argv[0]);
|
|
|
|
default:
|
|
|
|
exit(1);
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
if (optind == argc) {
|
|
|
|
fprintf(stderr, "no filename given\n");
|
|
|
|
usage(argv[0]);
|
|
|
|
exit(1);
|
|
|
|
}
|
|
|
|
|
|
|
|
w.plug = 1;
|
|
|
|
w.dcd = 1;
|
|
|
|
w.jump_mode = J_HEADER;
|
|
|
|
strncpy(w.filename, argv[optind], sizeof(w.filename) - 1);
|
|
|
|
|
|
|
|
r = libusb_init(NULL);
|
|
|
|
if (r < 0)
|
|
|
|
goto out;
|
|
|
|
|
|
|
|
cnt = libusb_get_device_list(NULL, &devs);
|
|
|
|
if (cnt < 0) {
|
|
|
|
fprintf(stderr, "no supported device found\n");
|
|
|
|
goto out;
|
|
|
|
}
|
|
|
|
|
|
|
|
dev = find_imx_dev(devs, &mach);
|
|
|
|
if (!dev) {
|
|
|
|
fprintf(stderr, "no supported device found\n");
|
|
|
|
goto out;
|
|
|
|
}
|
|
|
|
|
|
|
|
err = libusb_open(dev, &h);
|
|
|
|
if (err) {
|
|
|
|
fprintf(stderr, "Could not open device vid=0x%x pid=0x%x err=%d\n",
|
|
|
|
mach->vid, mach->pid, err);
|
|
|
|
goto out;
|
|
|
|
}
|
|
|
|
|
|
|
|
libusb_free_device_list(devs, 1);
|
|
|
|
|
|
|
|
libusb_get_configuration(h, &config);
|
|
|
|
|
|
|
|
if (libusb_kernel_driver_active(h, 0))
|
|
|
|
libusb_detach_kernel_driver(h, 0);
|
|
|
|
|
|
|
|
err = libusb_claim_interface(h, 0);
|
|
|
|
if (err) {
|
|
|
|
printf("Claim failed\n");
|
|
|
|
goto out;
|
|
|
|
}
|
|
|
|
|
|
|
|
p_id = malloc(sizeof(*p_id));
|
|
|
|
if (!p_id) {
|
|
|
|
perror("malloc");
|
|
|
|
exit(1);
|
|
|
|
}
|
|
|
|
|
|
|
|
p_id->mach_id = mach;
|
|
|
|
|
|
|
|
err = do_status(h, p_id);
|
|
|
|
if (err) {
|
|
|
|
printf("status failed\n");
|
|
|
|
goto out;
|
|
|
|
}
|
|
|
|
|
|
|
|
err = do_irom_download(h, p_id, &w, verify);
|
|
|
|
if (err) {
|
|
|
|
err = do_status(h, p_id);
|
|
|
|
goto out;
|
|
|
|
}
|
|
|
|
|
|
|
|
ret = 0;
|
|
|
|
out:
|
|
|
|
if (h)
|
|
|
|
libusb_close(h);
|
|
|
|
|
|
|
|
libusb_exit(NULL);
|
|
|
|
|
|
|
|
return ret;
|
|
|
|
}
|