From cd1a204365fff2639329c28c1b986f3a4e7246d4 Mon Sep 17 00:00:00 2001 From: John Crispin Date: Tue, 14 Feb 2012 17:48:04 +0000 Subject: Support booting the Speedport W502V using BRN-BOOT. While the disadvantage is less available flash space, it's easy and safe to flash without opening the device. Going back to the original firmware is also possible. This patch add two firmware utilities, mkbrncmdline and mkbrnboot. mkbrncmdline patches the uncompressed kernel so the registeres a0 to a3 are initialized and the memory size is passed in. mkbrnboot takes the lzma compressed kernel and squashfs images and creates a firmware image that can be flashed using the BRN-BOOT recovery kernel, which is booted by holding both buttons when powering up the device and will listen on http://192.168.2.1. The firmware file from bin/lantiq/ to use is openwrt-lantiq-danube-ARV4525PW-BRNDTW502-brnImage The BRN-BOOT recovery kernel does size-check the image, so if it's too big to fit into flash it will complain accordingly. A second patch is needed to make the wired network interface work since there is no u-boot to pre-initialise it. Signed-off-by: Tobias Diedrich SVN-Revision: 30532 --- tools/firmware-utils/Makefile | 2 + tools/firmware-utils/src/mkbrncmdline.c | 168 +++++++++++++++++++++++++++++ tools/firmware-utils/src/mkbrnimg.c | 183 ++++++++++++++++++++++++++++++++ 3 files changed, 353 insertions(+) create mode 100644 tools/firmware-utils/src/mkbrncmdline.c create mode 100644 tools/firmware-utils/src/mkbrnimg.c (limited to 'tools/firmware-utils') diff --git a/tools/firmware-utils/Makefile b/tools/firmware-utils/Makefile index cd7531f216..4364223546 100644 --- a/tools/firmware-utils/Makefile +++ b/tools/firmware-utils/Makefile @@ -55,6 +55,8 @@ define Host/Compile $(call cc,buffalo-tftp buffalo-lib, -Wall) $(call cc,mkwrgimg md5, -Wall) $(call cc,mkedimaximg) + $(call cc,mkbrncmdline) + $(call cc,mkbrnimg) endef define Host/Install diff --git a/tools/firmware-utils/src/mkbrncmdline.c b/tools/firmware-utils/src/mkbrncmdline.c new file mode 100644 index 0000000000..6eb4bfe7cf --- /dev/null +++ b/tools/firmware-utils/src/mkbrncmdline.c @@ -0,0 +1,168 @@ +/* + * mkbrncmdline.c - partially based on OpenWrt's wndr3700.c + * + * Copyright (C) 2011 Tobias Diedrich + * + * This program is free software; you can redistribute it and/or + * modify it under the terms of the GNU General Public License, + * version 2 as published by the Free Software Foundation. + * + * This program is distributed in the hope that it will be useful, + * but WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + * GNU General Public License for more details. + * + * You should have received a copy of the GNU General Public License + * along with this program; if not, write to the Free Software + * Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. + */ + +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include + +static void usage(const char *) __attribute__ (( __noreturn__ )); + +static void usage(const char *mess) +{ + fprintf(stderr, "Error: %s\n", mess); + fprintf(stderr, "Usage: mkbrncmdline -i input_file -o output_file [-a loadaddress] arg1 [argx ...]\n"); + fprintf(stderr, "\n"); + exit(1); +} + +static char *input_file = NULL; +static char *output_file = NULL; +static unsigned loadaddr = 0x80002000; + +static void parseopts(int *argc, char ***argv) +{ + char *endptr; + int res; + + while ((res = getopt(*argc, *argv, "a:i:o:")) != -1) { + switch (res) { + default: + usage("Unknown option"); + break; + case 'a': + loadaddr = strtoul(optarg, &endptr, 0); + if (endptr == optarg || *endptr != 0) + usage("loadaddress must be a decimal or hexadecimal 32-bit value"); + break; + case 'i': + input_file = optarg; + break; + case 'o': + output_file = optarg; + break; + } + } + *argc -= optind; + *argv += optind; +} + +static void emitload(int outfd, int reg, unsigned value) +{ + char buf[8] = { + 0x3c, 0x04 + reg, + value >> 24, value >> 16, + 0x34, 0x84 + reg + (reg << 5), + value >> 8, value, + }; + if (write(outfd, buf, sizeof(buf)) != sizeof(buf)) { + fprintf(stderr, "write: %s\n", strerror(errno)); + exit(1); + } +} + +int main(int argc, char **argv) +{ + int outfd; + int i; + int fd; + size_t len, skip, buf_len; + unsigned cmdline_addr; + unsigned s_ofs; + char *buf; + + parseopts(&argc, &argv); + + if (argc < 1) + usage("must specify at least one kernel cmdline argument"); + + if (input_file == NULL || output_file == NULL) + usage("must specify input and output file"); + + if ((outfd = open(output_file, O_WRONLY|O_CREAT|O_TRUNC, 0644)) == -1) + { + fprintf(stderr, "Error opening '%s' for writing: %s\n", output_file, strerror(errno)); + exit(1); + } + + // mmap input_file + if ((fd = open(input_file, O_RDONLY)) < 0 + || (len = lseek(fd, 0, SEEK_END)) < 0 + || (input_file = mmap(0, len, PROT_READ, MAP_SHARED, fd, 0)) == (void *) (-1) + || close(fd) < 0) + { + fprintf(stderr, "Error mapping file '%s': %s\n", input_file, strerror(errno)); + exit(1); + } + + cmdline_addr = loadaddr + len; + + // Kernel args are passed in registers a0,a1,a2 and a3 + emitload(outfd, 0, 0); /* a0 = 0 */ + emitload(outfd, 1, 0); /* a1 = 0 */ + emitload(outfd, 2, cmdline_addr); /* a2 = &cmdline */ + emitload(outfd, 3, 0); /* a3 = 0 */ + skip = lseek(outfd, 0, SEEK_END); + + // write the kernel + if (write(outfd, input_file + skip, len - skip) != len -skip) { + fprintf(stderr, "write: %s\n", strerror(errno)); + exit(1); + } + + // write cmdline structure + buf_len = (argc + 1) * 4; + for (i=0; i> 24; + buf[i * 4 + 1] = s_ptr >> 16; + buf[i * 4 + 2] = s_ptr >> 8; + buf[i * 4 + 3] = s_ptr >> 0; + memcpy(&buf[s_ofs], argv[i], strlen(argv[i])); + s_ofs += strlen(argv[i]) + 1; + } + if (write(outfd, buf, buf_len) != buf_len) { + fprintf(stderr, "write: %s\n", strerror(errno)); + exit(1); + } + + + munmap(input_file, len); + close(outfd); + free(buf); + + return 0; +} diff --git a/tools/firmware-utils/src/mkbrnimg.c b/tools/firmware-utils/src/mkbrnimg.c new file mode 100644 index 0000000000..fff92c4ef6 --- /dev/null +++ b/tools/firmware-utils/src/mkbrnimg.c @@ -0,0 +1,183 @@ +/* + * mkbrnimg.c - partially based on OpenWrt's wndr3700.c + * + * Copyright (C) 2011 Tobias Diedrich + * + * This program is free software; you can redistribute it and/or + * modify it under the terms of the GNU General Public License, + * version 2 as published by the Free Software Foundation. + * + * This program is distributed in the hope that it will be useful, + * but WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + * GNU General Public License for more details. + * + * You should have received a copy of the GNU General Public License + * along with this program; if not, write to the Free Software + * Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. + */ + +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include + +#define BPB 8 /* bits/byte */ + +static uint32_t crc32[1<> 1)) : (crc >> 1); + crc32[n] = crc; + } +} + +static uint32_t crc32buf(unsigned char *buf, size_t len) +{ + uint32_t crc = 0xFFFFFFFF; + + for (; len; len--, buf++) + crc = crc32[(uint8_t)crc ^ *buf] ^ (crc >> BPB); + return ~crc; +} + +static void usage(const char *) __attribute__ (( __noreturn__ )); + +static void usage(const char *mess) +{ + fprintf(stderr, "Error: %s\n", mess); + fprintf(stderr, "Usage: mkbrnimg [-o output_file] [-m magic] [-s signature] kernel_file [additional files]\n"); + fprintf(stderr, "\n"); + exit(1); +} + +static char *output_file = "default-brnImage"; +static uint32_t magic = 0x12345678; +static char *signature = "BRNDTW502"; + +static void parseopts(int *argc, char ***argv) +{ + char *endptr; + int res; + + while ((res = getopt(*argc, *argv, "o:m:s:")) != -1) { + switch (res) { + default: + usage("Unknown option"); + break; + case 'o': + output_file = optarg; + break; + case 'm': + magic = strtoul(optarg, &endptr, 0); + if (endptr == optarg || *endptr != 0) + usage("magic must be a decimal or hexadecimal 32-bit value"); + break; + case 's': + signature = optarg; + break; + } + } + *argc -= optind; + *argv += optind; +} + +static void appendfile(int outfd, char *path, int kernel) { + int fd; + size_t len, padded_len; + char *input_file; + uint32_t crc; + char padding[0x400]; + char footer[12]; + + memset(padding, 0xff, sizeof(padding)); + + // mmap input_file + if ((fd = open(path, O_RDONLY)) < 0 + || (len = lseek(fd, 0, SEEK_END)) < 0 + || (input_file = mmap(0, len, PROT_READ, MAP_SHARED, fd, 0)) == (void *) (-1) + || close(fd) < 0) + { + fprintf(stderr, "Error mapping file '%s': %s\n", path, strerror(errno)); + exit(1); + } + + // kernel should be lzma compressed image, not uImage + if (kernel && + (input_file[0] != (char)0x5d || + input_file[1] != (char)0x00 || + input_file[2] != (char)0x00 || + input_file[3] != (char)0x80)) { + fprintf(stderr, "lzma signature not found on kernel image.\n"); + exit(1); + } + + init_crc32(); + crc = crc32buf(input_file, len); + fprintf(stderr, "crc32 for '%s' is %08x.\n", path, crc); + + // write the file + write(outfd, input_file, len); + + // write padding + padded_len = ((len + sizeof(footer) + sizeof(padding) - 1) & ~(sizeof(padding) - 1)) - sizeof(footer); + fprintf(stderr, "len=%08x padded_len=%08x\n", len, padded_len); + write(outfd, padding, padded_len - len); + + // write footer + footer[0] = (len >> 0) & 0xff; + footer[1] = (len >> 8) & 0xff; + footer[2] = (len >> 16) & 0xff; + footer[3] = (len >> 24) & 0xff; + footer[4] = (magic >> 0) & 0xff; + footer[5] = (magic >> 8) & 0xff; + footer[6] = (magic >> 16) & 0xff; + footer[7] = (magic >> 24) & 0xff; + footer[8] = (crc >> 0) & 0xff; + footer[9] = (crc >> 8) & 0xff; + footer[10] = (crc >> 16) & 0xff; + footer[11] = (crc >> 24) & 0xff; + write(outfd, footer, sizeof(footer)); + + munmap(input_file, len); +} + +int main(int argc, char **argv) +{ + int outfd; + int i; + + parseopts(&argc, &argv); + + if (argc < 1) + usage("wrong number of arguments"); + + if ((outfd = open(output_file, O_WRONLY|O_CREAT|O_TRUNC, 0644)) == -1) + { + fprintf(stderr, "Error opening '%s' for writing: %s\n", output_file, strerror(errno)); + exit(1); + } + + for (i=0; i