diff options
Diffstat (limited to 'samsung-ipc/device/maguro')
| -rw-r--r-- | samsung-ipc/device/maguro/maguro_ipc.c | 387 | ||||
| -rw-r--r-- | samsung-ipc/device/maguro/maguro_ipc.h | 52 | ||||
| -rw-r--r-- | samsung-ipc/device/maguro/maguro_loader.c | 844 | ||||
| -rw-r--r-- | samsung-ipc/device/maguro/maguro_loader.h | 104 |
4 files changed, 408 insertions, 979 deletions
diff --git a/samsung-ipc/device/maguro/maguro_ipc.c b/samsung-ipc/device/maguro/maguro_ipc.c index f68e7e6..4774f08 100644 --- a/samsung-ipc/device/maguro/maguro_ipc.c +++ b/samsung-ipc/device/maguro/maguro_ipc.c @@ -1,14 +1,8 @@ -/** +/* * This file is part of libsamsung-ipc. * + * Copyright (C) 2013 Paul Kocialkowski <contact@paulk.fr> * Copyright (C) 2012 Alexander Tarasikov <alexander.tarasikov@gmail.com> - * Copyright (C) 2011 Paul Kocialkowski <contact@paulk.fr> - * - * based on crespo IPC code which is: - * - * Copyright (C) 2011 Paul Kocialkowski <contact@paulk.fr> - * Joerie de Gram <j.de.gram@gmail.com> - * Simon Busch <morphis@gravedo.de> * * libsamsung-ipc is free software: you can redistribute it and/or modify * it under the terms of the GNU General Public License as published by @@ -25,52 +19,383 @@ */ #include <stdlib.h> +#include <unistd.h> +#include <string.h> +#include <fcntl.h> +#include <sys/mman.h> + +#include <samsung-ipc.h> +#include <ipc.h> +#include <util.h> + +#include "xmm6260.h" +#include "xmm6260_mipi.h" +#include "xmm6260_sec_modem.h" +#include "maguro_ipc.h" + +int maguro_ipc_bootstrap(struct ipc_client *client) +{ + void *modem_image_data = NULL; + int modem_image_fd = -1; + int modem_boot_fd = -1; + void *mps_data = NULL; + + unsigned char *p; + int rc; + + if (client == NULL) + return -1; + + ipc_client_log(client, "Starting maguro modem bootstrap"); + + modem_image_fd = open(MAGURO_MODEM_IMAGE_DEVICE, O_RDONLY); + if (modem_image_fd < 0) { + ipc_client_log(client, "Opening modem image device failed"); + goto error; + } + ipc_client_log(client, "Opened modem image device"); + + modem_image_data = mmap(0, MAGURO_MODEM_IMAGE_SIZE, PROT_READ, MAP_SHARED, modem_image_fd, 0); + if (modem_image_data == NULL || modem_image_data == (void *) 0xffffffff) { + ipc_client_log(client, "Mapping modem image data to memory failed"); + goto error; + } + ipc_client_log(client, "Mapped modem image data to memory"); + + modem_boot_fd = open(XMM6260_SEC_MODEM_BOOT0_DEVICE, O_RDWR | O_NOCTTY | O_NONBLOCK); + if (modem_boot_fd < 0) { + ipc_client_log(client, "Opening modem boot device failed"); + goto error; + } + ipc_client_log(client, "Opened modem boot device"); + + rc = xmm6260_sec_modem_power(modem_boot_fd, 0); + if (rc < 0) { + ipc_client_log(client, "Turning the modem off failed"); + goto error; + } + ipc_client_log(client, "Turned the modem off"); + + rc = xmm6260_sec_modem_power(modem_boot_fd, 1); + if (rc < 0) { + ipc_client_log(client, "Turning the modem on failed"); + goto error; + } + ipc_client_log(client, "Turned the modem on"); + + p = (unsigned char *) modem_image_data + MAGURO_PSI_OFFSET; + + rc = xmm6260_mipi_psi_send(client, modem_boot_fd, (void *) p, MAGURO_PSI_SIZE); + if (rc < 0) { + ipc_client_log(client, "Sending XMM6260 MIPI PSI failed"); + goto error; + } + ipc_client_log(client, "Sent XMM6260 MIPI PSI"); + + close(modem_boot_fd); + + modem_boot_fd = open(XMM6260_SEC_MODEM_BOOT1_DEVICE, O_RDWR | O_NOCTTY | O_NONBLOCK); + if (modem_boot_fd < 0) { + ipc_client_log(client, "Opening modem boot device failed"); + goto error; + } + ipc_client_log(client, "Opened modem boot device"); + + p = (unsigned char *) modem_image_data + MAGURO_EBL_OFFSET; + + rc = xmm6260_mipi_ebl_send(client, modem_boot_fd, (void *) p, MAGURO_EBL_SIZE); + if (rc < 0) { + ipc_client_log(client, "Sending XMM6260 MIPI EBL failed"); + goto error; + } + ipc_client_log(client, "Sent XMM6260 MIPI EBL"); + + rc = xmm6260_mipi_port_config_send(client, modem_boot_fd); + if (rc < 0) { + ipc_client_log(client, "Sending XMM6260 MIPI port config failed"); + goto error; + } + ipc_client_log(client, "Sent XMM6260 MIPI port config"); + + p = (unsigned char *) modem_image_data + MAGURO_SEC_START_OFFSET; + + rc = xmm6260_mipi_sec_start_send(client, modem_boot_fd, (void *) p, MAGURO_SEC_START_SIZE); + if (rc < 0) { + ipc_client_log(client, "Sending XMM6260 MIPI SEC start failed"); + goto error; + } + ipc_client_log(client, "Sent XMM6260 MIPI SEC start"); + + p = (unsigned char *) modem_image_data + MAGURO_FIRMWARE_OFFSET; + + rc = xmm6260_mipi_firmware_send(client, modem_boot_fd, (void *) p, MAGURO_FIRMWARE_SIZE); + if (rc < 0) { + ipc_client_log(client, "Sending XMM6260 MIPI firmware failed"); + goto error; + } + ipc_client_log(client, "Sent XMM6260 MIPI firmware"); + + rc = xmm6260_mipi_nv_data_send(client, modem_boot_fd); + if (rc < 0) { + ipc_client_log(client, "Sending XMM6260 MIPI nv_data failed"); + goto error; + } + ipc_client_log(client, "Sent XMM6260 MIPI nv_data"); + + mps_data = file_data_read(MAGURO_MPS_DATA_DEVICE, MAGURO_MPS_DATA_SIZE, MAGURO_MPS_DATA_SIZE); + if (mps_data == NULL) { + ipc_client_log(client, "Reading MPS data failed"); + goto error; + } + ipc_client_log(client, "Read MPS data"); + + rc = xmm6260_mipi_mps_data_send(client, modem_boot_fd, mps_data, MAGURO_MPS_DATA_SIZE); + if (rc < 0) { + ipc_client_log(client, "Sending XMM6260 MIPI MPS data failed"); + goto error; + } + ipc_client_log(client, "Sent XMM6260 MIPI MPS data"); + + rc = xmm6260_mipi_sec_end_send(client, modem_boot_fd); + if (rc < 0) { + ipc_client_log(client, "Sending XMM6260 MIPI SEC end failed"); + goto error; + } + ipc_client_log(client, "Sent XMM6260 MIPI SEC end"); + + rc = xmm6260_mipi_hw_reset_send(client, modem_boot_fd); + if (rc < 0) { + ipc_client_log(client, "Sending XMM6260 MIPI HW reset failed"); + goto error; + } + ipc_client_log(client, "Sent XMM6260 MIPI HW reset"); + + rc = xmm6260_sec_modem_status_online_wait(modem_boot_fd); + if (rc < 0) { + ipc_client_log(client, "Waiting for online status failed"); + goto error; + } + ipc_client_log(client, "Waited for online status"); + + rc = xmm6260_sec_modem_boot_power(modem_boot_fd, 0); + if (rc < 0) { + ipc_client_log(client, "Turning modem boot off failed"); + goto error; + } + ipc_client_log(client, "Turned modem boot off"); + + rc = 0; + goto complete; + +error: + rc = -1; + +complete: + if (mps_data != NULL) + free(mps_data); + + if (modem_image_data != NULL) + munmap(modem_image_data, MAGURO_MODEM_IMAGE_SIZE); + + if (modem_image_fd >= 0) + close(modem_image_fd); + + if (modem_boot_fd >= 0) + close(modem_boot_fd); + + return rc; +} + + +int maguro_ipc_fmt_send(struct ipc_client *client, struct ipc_message_info *request) +{ + return xmm6260_sec_modem_ipc_fmt_send(client, request); +} + +int maguro_ipc_fmt_recv(struct ipc_client *client, struct ipc_message_info *response) +{ + return xmm6260_sec_modem_ipc_fmt_recv(client, response); +} + +int maguro_ipc_rfs_send(struct ipc_client *client, struct ipc_message_info *request) +{ + return xmm6260_sec_modem_ipc_rfs_send(client, request); +} + +int maguro_ipc_rfs_recv(struct ipc_client *client, struct ipc_message_info *response) +{ + return xmm6260_sec_modem_ipc_rfs_recv(client, response); +} + +int maguro_ipc_open(void *data, int type) +{ + struct maguro_ipc_transport_data *transport_data; + + if (data == NULL) + return -1; + + transport_data = (struct maguro_ipc_transport_data *) data; + + transport_data->fd = xmm6260_sec_modem_ipc_open(type); + if (transport_data->fd < 0) + return -1; + + return 0; +} + +int maguro_ipc_close(void *data) +{ + struct maguro_ipc_transport_data *transport_data; + + if (data == NULL) + return -1; + + transport_data = (struct maguro_ipc_transport_data *) data; + + xmm6260_sec_modem_ipc_close(transport_data->fd); + transport_data->fd = -1; + + return 0; +} + +int maguro_ipc_read(void *data, void *buffer, unsigned int length) +{ + struct maguro_ipc_transport_data *transport_data; + int rc; + + if (data == NULL) + return -1; + + transport_data = (struct maguro_ipc_transport_data *) data; + + rc = xmm6260_sec_modem_ipc_read(transport_data->fd, buffer, length); + return rc; +} + +int maguro_ipc_write(void *data, void *buffer, unsigned int length) +{ + struct maguro_ipc_transport_data *transport_data; + int rc; + + if (data == NULL) + return -1; + + transport_data = (struct maguro_ipc_transport_data *) data; + + rc = xmm6260_sec_modem_ipc_write(transport_data->fd, buffer, length); + return rc; +} + +int maguro_ipc_poll(void *data, struct timeval *timeout) +{ + struct maguro_ipc_transport_data *transport_data; + int rc; + + if (data == NULL) + return -1; + + transport_data = (struct maguro_ipc_transport_data *) data; + + rc = xmm6260_sec_modem_ipc_poll(transport_data->fd, timeout); + return rc; +} + +int maguro_ipc_power_on(void *data) +{ + return 0; +} + +int maguro_ipc_power_off(void *data) +{ + int fd; + int rc; + + fd = open(XMM6260_SEC_MODEM_BOOT0_DEVICE, O_RDWR | O_NOCTTY | O_NONBLOCK); + if (fd < 0) + return -1; + + rc = xmm6260_sec_modem_power(fd, 0); + + close(fd); + + if (rc < 0) + return -1; + + return 0; +} + +int maguro_ipc_data_create(void **transport_data, void **power_data, void **gprs_data) +{ + if (transport_data == NULL) + return -1; + + *transport_data = (void *) malloc(sizeof(struct maguro_ipc_transport_data)); + memset(*transport_data, 0, sizeof(struct maguro_ipc_transport_data)); + + return 0; +} + +int maguro_ipc_data_destroy(void *transport_data, void *power_data, void *gprs_data) +{ + if (transport_data == NULL) + return -1; + + free(transport_data); + + return 0; +} + +char *maguro_ipc_gprs_get_iface(int cid) +{ + return xmm6260_sec_modem_ipc_gprs_get_iface(cid); +} -#include "ipc.h" -#include "xmm6260_ipc.h" -#include "maguro_loader.h" +int maguro_ipc_gprs_get_capabilities(struct ipc_client_gprs_capabilities *capabilities) +{ + return xmm6260_sec_modem_ipc_gprs_get_capabilities(capabilities); +} struct ipc_ops maguro_ipc_fmt_ops = { .bootstrap = maguro_ipc_bootstrap, - .send = xmm6260_ipc_fmt_send, - .recv = xmm6260_ipc_fmt_recv, + .send = maguro_ipc_fmt_send, + .recv = maguro_ipc_fmt_recv, }; struct ipc_ops maguro_ipc_rfs_ops = { .bootstrap = NULL, - .send = xmm6260_ipc_rfs_send, - .recv = xmm6260_ipc_rfs_recv, + .send = maguro_ipc_rfs_send, + .recv = maguro_ipc_rfs_recv, }; struct ipc_handlers maguro_ipc_handlers = { - .open = xmm6260_ipc_open, - .close = xmm6260_ipc_close, - .read = xmm6260_ipc_read, - .write = xmm6260_ipc_write, - .poll = xmm6260_ipc_poll, + .read = maguro_ipc_read, + .write = maguro_ipc_write, + .open = maguro_ipc_open, + .close = maguro_ipc_close, + .poll = maguro_ipc_poll, .transport_data = NULL, - .power_on = xmm6260_ipc_power_on, - .power_off = xmm6260_ipc_power_off, + .power_on = maguro_ipc_power_on, + .power_off = maguro_ipc_power_off, .power_data = NULL, .gprs_activate = NULL, .gprs_deactivate = NULL, .gprs_data = NULL, - .data_create = xmm6260_ipc_data_create, - .data_destroy = xmm6260_ipc_data_destroy, + .data_create = maguro_ipc_data_create, + .data_destroy = maguro_ipc_data_destroy, }; struct ipc_gprs_specs maguro_ipc_gprs_specs = { - .gprs_get_iface = xmm6260_ipc_gprs_get_iface, - .gprs_get_capabilities = xmm6260_ipc_gprs_get_capabilities, + .gprs_get_iface = maguro_ipc_gprs_get_iface, + .gprs_get_capabilities = maguro_ipc_gprs_get_capabilities, }; struct ipc_nv_data_specs maguro_ipc_nv_data_specs = { - .nv_data_path = "/factory/nv_data.bin", - .nv_data_md5_path = "/factory/nv_data.bin.md5", - .nv_state_path = "/factory/.nv_state", - .nv_data_bak_path = "/factory/.nv_data.bak", - .nv_data_md5_bak_path = "/factory/.nv_data.bak.md5", + .nv_data_path = MAGURO_NV_DATA_PATH, + .nv_data_md5_path = MAGURO_NV_DATA_MD5_PATH, + .nv_state_path = MAGURO_NV_STATE_PATH, + .nv_data_bak_path = MAGURO_NV_DATA_BAK_PATH, + .nv_data_md5_bak_path = MAGURO_NV_DATA_MD5_BAK_PATH, }; // vim:ts=4:sw=4:expandtab diff --git a/samsung-ipc/device/maguro/maguro_ipc.h b/samsung-ipc/device/maguro/maguro_ipc.h new file mode 100644 index 0000000..eb4b500 --- /dev/null +++ b/samsung-ipc/device/maguro/maguro_ipc.h @@ -0,0 +1,52 @@ +/* + * This file is part of libsamsung-ipc. + * + * Copyright (C) 2013 Paul Kocialkowski <contact@paulk.fr> + * + * libsamsung-ipc is free software: you can redistribute it and/or modify + * it under the terms of the GNU General Public License as published by + * the Free Software Foundation, either version 2 of the License, or + * (at your option) any later version. + * + * libsamsung-ipc is distributed in the hope that it will be useful, + * but WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + * GNU General Public License for more details. + * + * You should have received a copy of the GNU General Public License + * along with libsamsung-ipc. If not, see <http://www.gnu.org/licenses/>. + * + */ + +#ifndef __MAGURO_IPC_H__ +#define __MAGURO_IPC_H__ + +#define MAGURO_MODEM_IMAGE_SIZE 0x1000000 +#define MAGURO_PSI_OFFSET 0 +#define MAGURO_PSI_SIZE 0xF000 +#define MAGURO_EBL_OFFSET 0xF000 +#define MAGURO_EBL_SIZE 0x19000 +#define MAGURO_SEC_START_OFFSET 0x9FF800 +#define MAGURO_SEC_START_SIZE 0x800 +#define MAGURO_FIRMWARE_OFFSET 0x28000 +#define MAGURO_FIRMWARE_SIZE 0x9D8000 +#define MAGURO_NV_DATA_OFFSET 0xA00000 +#define MAGURO_NV_DATA_SIZE 0x200000 +#define MAGURO_MPS_DATA_SIZE 3 + +#define MAGURO_MODEM_IMAGE_DEVICE "/dev/block/platform/omap/omap_hsmmc.0/by-name/radio" +#define MAGURO_MPS_DATA_DEVICE "/factory/imei/mps_code.dat" + +#define MAGURO_NV_DATA_PATH "/factory/nv_data.bin" +#define MAGURO_NV_DATA_MD5_PATH "/factory/nv_data.bin.md5" +#define MAGURO_NV_STATE_PATH "/factory/.nv_state" +#define MAGURO_NV_DATA_BAK_PATH "/factory/.nv_data.bak" +#define MAGURO_NV_DATA_MD5_BAK_PATH "/factory/.nv_data.bak.md5" + +struct maguro_ipc_transport_data { + int fd; +}; + +#endif + +// vim:ts=4:sw=4:expandtab diff --git a/samsung-ipc/device/maguro/maguro_loader.c b/samsung-ipc/device/maguro/maguro_loader.c deleted file mode 100644 index 785585f..0000000 --- a/samsung-ipc/device/maguro/maguro_loader.c +++ /dev/null @@ -1,844 +0,0 @@ -/* - * Firmware loader for Samsung I9250 (maguro) - * Copyright (C) 2012 Alexander Tarasikov <alexander.tarasikov@gmail.com> - * Copyright (C) 2012 Paul Kocialkowski <contact@paulk.fr> - * - * based on the incomplete C++ implementation which is - * Copyright (C) 2012 Sergey Gridasov <grindars@gmail.com> - * - * This program is free software: you can redistribute it and/or modify - * it under the terms of the GNU General Public License as published by - * the Free Software Foundation, either version 2 of the License, or - * (at your option) any later version. - * - * This program is distributed in the hope that it will be useful, - * but WITHOUT ANY WARRANTY; without even the implied warranty of - * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the - * GNU General Public License for more details. - * - * You should have received a copy of the GNU General Public License - * along with this program. If not, see <http://www.gnu.org/licenses/>. - */ - -#include <stdio.h> -#include <stdlib.h> -#include <stdbool.h> -#include <string.h> - -#include <getopt.h> -#include <unistd.h> -#include <fcntl.h> -#include <errno.h> -#include <sys/ioctl.h> - -#include <sys/time.h> - -#include <sys/mman.h> -#include <sys/stat.h> - -#include "ipc.h" - -#include "maguro_loader.h" -#include "xmm6260_loader.h" -#include "xmm6260_modemctl.h" -#include "modem_prj.h" - -#define ARRAY_SIZE(x) (sizeof(x) / sizeof(x[0])) - -/* - * Locations of the firmware components in the Samsung firmware - */ - -struct xmm6260_radio_part maguro_radio_parts[] = { - [PSI] = { - .offset = 0, - .length = 0xf000, - }, - [EBL] = { - .offset = 0xf000, - .length = 0x19000, - }, - [SECURE_IMAGE] = { - .offset = 0x9ff800, - .length = 0x800, - }, - [FIRMWARE] = { - .offset = 0x28000, - .length = 0x9d8000, - }, - [NVDATA] = { - .offset = 0xa00000, - .length = 2 << 20, - } -}; - -struct maguro_boot_cmd_desc maguro_boot_cmd_desc[] = { - [SetPortConf] = { - .code = 0x86, - .long_tail = 1, - }, - [ReqSecStart] = { - .code = 0x204, - .long_tail = 1, - }, - [ReqSecEnd] = { - .code = 0x205, - }, - [ReqForceHwReset] = { - .code = 0x208, - .long_tail = 1, - .no_ack = 1, - }, - [ReqFlashSetAddress] = { - .code = 0x802, - .long_tail = 1, - }, - [ReqFlashWriteBlock] = { - .code = 0x804, - }, -}; - -#define I9250_RADIO_IMAGE_PATHS_NUM 2 - -const char *i9250_radio_image_paths[] = { - "/dev/block/platform/omap/omap_hsmmc.0/by-name/radio", - "/dev/mmcblk0p9" -}; - -static int maguro_send_image(struct ipc_client *client, - struct modemctl_io_data *io_data, enum xmm6260_image type) -{ - int ret = -1; - - if (type >= ARRAY_SIZE(maguro_radio_parts)) { - ipc_client_log(client, "Error: bad image type %x", type); - goto fail; - } - - size_t length = maguro_radio_parts[type].length; - size_t offset = maguro_radio_parts[type].offset; - - size_t start = offset; - size_t end = length + start; - - unsigned char crc = xmm6260_crc_calculate(io_data->radio_data, offset, length); - - //dump some image bytes - ipc_client_log(client, "image start"); - - size_t chunk_size = 0xdfc; - - while (start < end) { - size_t remaining = end - start; - size_t curr_chunk = chunk_size < remaining ? chunk_size : remaining; - - ret = write(io_data->boot_fd, io_data->radio_data + start, curr_chunk); - - if (ret < 0) { - ipc_client_log(client, "Error: failed to write image chunk"); - goto fail; - } - - start += ret; - } - - ipc_client_log(client, "sent image type=%d", type); - - if (type == EBL) { - if ((ret = write(io_data->boot_fd, &crc, 1)) < 1) { - ipc_client_log(client, "Error: failed to write EBL CRC"); - goto fail; - } - else { - ipc_client_log(client, "wrote EBL CRC %02x", crc); - } - - goto done; - } - - uint32_t crc32 = (crc << 24) | 0xffffff; - - if ((ret = write(io_data->boot_fd, &crc32, 4)) != 4) { - ipc_client_log(client, "Error: failed to write CRC"); - goto fail; - } - else { - ipc_client_log(client, "wrote CRC %x", crc); - } - -done: - ret = 0; - -fail: - return ret; -} - -static int maguro_send_psi(struct ipc_client *client, - struct modemctl_io_data *io_data) -{ - int ret = -1; - - if ((ret = write(io_data->boot_fd, I9250_PSI_START_MAGIC, 4)) < 0) { - ipc_client_log(client, "%s: failed to write header, ret %d", __func__, ret); - goto fail; - } - - if ((ret = maguro_send_image(client, io_data, PSI)) < 0) { - ipc_client_log(client, "Error: failed to send PSI image"); - goto fail; - } - - char expected_acks[4][4] = { - "\xff\xff\xff\x01", - "\xff\xff\xff\x01", - "\x02\x00\x00\x00", - "\x01\xdd\x00\x00", - }; - - unsigned i; - for (i = 0; i < ARRAY_SIZE(expected_acks); i++) { - ret = expect_data(io_data->boot_fd, expected_acks[i], 4); - if (ret < 0) { - ipc_client_log(client, "failed to wait for ack %d", i); - goto fail; - } - } - ipc_client_log(client, "received PSI ACK"); - - return 0; - -fail: - return ret; -} - -static int maguro_send_ebl(struct ipc_client *client, - struct modemctl_io_data *io_data) -{ - int ret; - int fd = io_data->boot_fd; - unsigned length = maguro_radio_parts[EBL].length; - - if ((ret = write(fd, "\x04\x00\x00\x00", 4)) != 4) { - ipc_client_log(client, "Error: failed to write length of EBL length ('4') "); - goto fail; - } - - if ((ret = write(fd, &length, sizeof(length))) != sizeof(length)) { - ipc_client_log(client, "Error: failed to write EBL length"); - goto fail; - } - - if ((ret = expect_data(fd, I9250_GENERAL_ACK, 4)) < 0) { - ipc_client_log(client, "Error: failed to wait for EBL length ACK"); - goto fail; - } - - if ((ret = expect_data(fd, I9250_EBL_HDR_ACK_MAGIC, 4)) < 0) { - ipc_client_log(client, "Error: failed to wait for EBL header ACK"); - goto fail; - } - - length++; - if ((ret = write(fd, &length, sizeof(length))) != sizeof(length)) { - ipc_client_log(client, "Error: failed to write EBL length + 1"); - goto fail; - } - - if ((ret = maguro_send_image(client, io_data, EBL)) < 0) { - ipc_client_log(client, "Error: failed to send EBL image"); - goto fail; - } - else { - ipc_client_log(client, "sent EBL image, waiting for ACK"); - } - - if ((ret = expect_data(fd, I9250_GENERAL_ACK, 4)) < 0) { - ipc_client_log(client, "Error: failed to wait for EBL image general ACK"); - goto fail; - } - - if ((ret = expect_data(fd, I9250_EBL_IMG_ACK_MAGIC, 4)) < 0) { - ipc_client_log(client, "Error: failed to wait for EBL image ACK"); - goto fail; - } - else { - ipc_client_log(client, "got EBL ACK"); - } - - return 0; - -fail: - return ret; -} - -static int maguro_boot_cmd(struct ipc_client *client, - struct modemctl_io_data *io_data, enum xmm6260_boot_cmd cmd, - void *data, size_t data_size) -{ - int ret = 0; - char *cmd_data = 0; - uint32_t ack_length; - - if (cmd >= ARRAY_SIZE(maguro_boot_cmd_desc)) { - ipc_client_log(client, "Error: bad command %x\n", cmd); - goto done_or_fail; - } - - unsigned cmd_code = maguro_boot_cmd_desc[cmd].code; - uint16_t checksum = (data_size & 0xffff) + cmd_code; - unsigned char *ptr = (unsigned char*)data; - size_t i; - - for (i = 0; i < data_size; i++) { - checksum += ptr[i]; - } - - DECLARE_BOOT_CMD_HEADER(header, cmd_code, data_size); - DECLARE_BOOT_TAIL_HEADER(tail, checksum); - - size_t tail_size = sizeof(tail); - if (!maguro_boot_cmd_desc[cmd].long_tail) { - tail_size -= 2; - } - - size_t cmd_buffer_size = data_size + sizeof(header) + tail_size; - ipc_client_log(client, "data_size %d [%d] checksum 0x%x", data_size, cmd_buffer_size, checksum); - - cmd_data = (char*)malloc(cmd_buffer_size); - - if (!cmd_data) { - ipc_client_log(client, "Error: failed to allocate command buffer"); - ret = -ENOMEM; - goto done_or_fail; - } - - memset(cmd_data, 0, cmd_buffer_size); - memcpy(cmd_data, &header, sizeof(header)); - memcpy(cmd_data + sizeof(header), data, data_size); - memcpy(cmd_data + sizeof(header) + data_size, &tail, tail_size); - - if ((ret = write(io_data->boot_fd, cmd_data, cmd_buffer_size)) < 0) { - ipc_client_log(client, "Error: failed to write command to socket"); - goto done_or_fail; - } - - if ((unsigned)ret < cmd_buffer_size) { - ipc_client_log(client, "Error: written %d bytes of %d", ret, cmd_buffer_size); - ret = -EINVAL; - goto done_or_fail; - } - - if (maguro_boot_cmd_desc[cmd].no_ack) { - ipc_client_log(client, "not waiting for ACK"); - goto done_or_fail; - } - - if ((ret = expect_read(io_data->boot_fd, &ack_length, 4)) < 0) { - ipc_client_log(client, "Error: failed to receive ack header length"); - goto done_or_fail; - } - - if (ack_length + 4 > cmd_buffer_size) { - free(cmd_data); - - cmd_data = NULL; - cmd_data = malloc(ack_length + 4); - - if (!cmd_data) { - ipc_client_log(client, "Error: failed to allocate the buffer for ack data"); - goto done_or_fail; - } - } - - memset(cmd_data, 0, ack_length); - memcpy(cmd_data, &ack_length, 4); - - for (i = 0; i < (ack_length + 3) / 4; i++) { - if ((ret = expect_read(io_data->boot_fd, cmd_data + ((i + 1) << 2), 4)) < 0) { - ipc_client_log(client, "Error: failed to receive ack chunk"); - goto done_or_fail; - } - } - - ipc_client_log(client, "received ack"); - - struct maguro_boot_cmd_header *ack_hdr = (struct maguro_boot_cmd_header*)cmd_data; - struct maguro_boot_tail_header *ack_tail = (struct maguro_boot_tail_header*) - (cmd_data + ack_length + 4 - sizeof(struct maguro_boot_tail_header)); - - ipc_client_log(client, "ack code 0x%x checksum 0x%x", ack_hdr->cmd, ack_tail->checksum); - if (ack_hdr->cmd != header.cmd) { - ipc_client_log(client, "Error: request and ack command codes do not match"); - ret = -1; - goto done_or_fail; - } - - ret = 0; - -done_or_fail: - if (cmd_data) - free(cmd_data); - - return ret; -} - -static int maguro_boot_info_ack(struct ipc_client *client, - struct modemctl_io_data *io_data) -{ - int ret = -1; - uint32_t boot_info_length; - char *boot_info = 0; - - - if ((ret = expect_read(io_data->boot_fd, &boot_info_length, 4)) < 0) { - ipc_client_log(client, "Error: failed to receive boot info length"); - goto fail; - } - - ipc_client_log(client, "Boot Info length=0x%x", boot_info_length); - - boot_info = (char*)malloc(boot_info_length); - if (!boot_info) { - ipc_client_log(client, "Error: failed to allocate memory for boot info"); - goto fail; - } - - memset(boot_info, 0, boot_info_length); - - size_t boot_chunk = 4; - size_t boot_chunk_count = (boot_info_length + boot_chunk - 1) / boot_chunk; - unsigned i; - for (i = 0; i < boot_chunk_count; i++) { - ret = expect_read(io_data->boot_fd, boot_info + (i * boot_chunk), boot_chunk); - if (ret < 0) { - ipc_client_log(client, "Error: failed to receive Boot Info chunk %i ret=%d", i, ret); - goto fail; - } - } - - ipc_client_log(client, "received Boot Info"); - - ret = maguro_boot_cmd(client, io_data, SetPortConf, boot_info, boot_info_length); - if (ret < 0) { - ipc_client_log(client, "Error: failed to send SetPortConf command"); - goto fail; - } - else { - ipc_client_log(client, "sent SetPortConf command"); - } - - ret = 0; - -fail: - if (boot_info) - free(boot_info); - - return ret; -} - -static int maguro_send_image_data(struct ipc_client *client, - struct modemctl_io_data *io_data, uint32_t addr, - void *data, int data_len) -{ - int ret = 0; - int count = 0; - char *data_p = (char *) data; - - if ((ret = maguro_boot_cmd(client, io_data, ReqFlashSetAddress, &addr, 4)) < 0) { - ipc_client_log(client, "Error: failed to send ReqFlashSetAddress"); - goto fail; - } - else { - ipc_client_log(client, "sent ReqFlashSetAddress"); - } - - while (count < data_len) { - int rest = data_len - count; - int chunk = rest < SEC_DOWNLOAD_CHUNK ? rest : SEC_DOWNLOAD_CHUNK; - - ret = maguro_boot_cmd(client, io_data, ReqFlashWriteBlock, data_p, chunk); - if (ret < 0) { - ipc_client_log(client, "Error: failed to send data chunk"); - goto fail; - } - - data_p += chunk; - count += chunk; - } - - usleep(SEC_DOWNLOAD_DELAY_US); - -fail: - return ret; -} - -static int maguro_send_image_addr(struct ipc_client *client, - struct modemctl_io_data *io_data, uint32_t addr, enum xmm6260_image type) -{ - uint32_t offset = maguro_radio_parts[type].offset; - uint32_t length = maguro_radio_parts[type].length; - char *start = io_data->radio_data + offset; - int ret = 0; - - ret = maguro_send_image_data(client, io_data, addr, start, length); - - return ret; -} - -static int maguro_send_mps_data(struct ipc_client *client, - struct modemctl_io_data *io_data) -{ - int ret = 0; - int mps_fd = -1; - char mps_data[I9250_MPS_LENGTH] = {}; - uint32_t addr = I9250_MPS_LOAD_ADDR; - - mps_fd = open(I9250_MPS_IMAGE_PATH, O_RDONLY); - if (mps_fd < 0) { - ipc_client_log(client, "Error: failed to open MPS data"); - goto fail; - } - else { - ret = read(mps_fd, mps_data, I9250_MPS_LENGTH); - if (ret < 0) { - ipc_client_log(client, "Error: failed to read MPS data\n"); - goto fail; - } - } - - if ((ret = maguro_boot_cmd(client, io_data, ReqFlashSetAddress, &addr, 4)) < 0) { - ipc_client_log(client, "Error: failed to send ReqFlashSetAddress"); - goto fail; - } - else { - ipc_client_log(client, "sent ReqFlashSetAddress"); - } - - if ((ret = maguro_boot_cmd(client, io_data, ReqFlashWriteBlock, - mps_data, I9250_MPS_LENGTH)) < 0) { - ipc_client_log(client, "Error: failed to write MPS data to modem"); - goto fail; - } - - -fail: - if (mps_fd >= 0) - close(mps_fd); - - return ret; -} - -static int maguro_send_image_addrs(struct ipc_client *client, - struct modemctl_io_data *io_data) -{ - int ret = 0; - - uint32_t sec_off = maguro_radio_parts[SECURE_IMAGE].offset; - uint32_t sec_len = maguro_radio_parts[SECURE_IMAGE].length; - void *sec_img = io_data->radio_data + sec_off; - void *nv_data = NULL; - - if ((ret = maguro_boot_cmd(client, io_data, ReqSecStart, sec_img, sec_len)) < 0) { - ipc_client_log(client, "Error: failed to write ReqSecStart"); - goto fail; - } - else { - ipc_client_log(client, "sent ReqSecStart"); - } - - if ((ret = maguro_send_image_addr(client, io_data, FW_LOAD_ADDR, FIRMWARE)) < 0) { - ipc_client_log(client, "Error: failed to send FIRMWARE image"); - goto fail; - } - else { - ipc_client_log(client, "sent FIRMWARE image"); - } - - if (nv_data_check(client) < 0) - goto fail; - - if (nv_data_md5_check(client) < 0) - goto fail; - - nv_data = ipc_client_file_read(client, nv_data_path(client), 2 << 20, 1024); - if (nv_data == NULL) { - ipc_client_log(client, "Error: failed to read NVDATA image"); - goto fail; - } - - if ((ret = maguro_send_image_data(client, io_data, NVDATA_LOAD_ADDR, nv_data, 2 << 20)) < 0) { - ipc_client_log(client, "Error: failed to send NVDATA image"); - goto fail; - } - else { - ipc_client_log(client, "sent NVDATA image"); - } - - free(nv_data); - - if ((ret = maguro_send_mps_data(client, io_data)) < 0) { - ipc_client_log(client, "Error: failed to send MPS data"); - goto fail; - } - else { - ipc_client_log(client, "sent MPS data"); - } - - if ((ret = maguro_boot_cmd(client, io_data, ReqSecEnd, - BL_END_MAGIC, BL_END_MAGIC_LEN)) < 0) - { - ipc_client_log(client, "Error: failed to write ReqSecEnd"); - goto fail; - } - else { - ipc_client_log(client, "sent ReqSecEnd"); - } - - ret = maguro_boot_cmd(client, io_data, ReqForceHwReset, - BL_RESET_MAGIC, BL_RESET_MAGIC_LEN); - if (ret < 0) { - ipc_client_log(client, "Error: failed to write ReqForceHwReset"); - goto fail; - } - else { - ipc_client_log(client, "sent ReqForceHwReset"); - } - -fail: - return ret; -} - -static int maguro_modem_reboot(struct ipc_client *client, - struct modemctl_io_data *io_data, bool hard) -{ - int ret; - - if (!hard) - return 0; - - /* Disable the hardware to ensure consistent state */ - if ((ret = modemctl_modem_power(client, io_data, false)) < 0) { - ipc_client_log(client, "Error: failed to disable modem power"); - goto fail; - } - else { - ipc_client_log(client, "disabled modem power"); - } - - /* Now, initialize the hardware */ - if ((ret = modemctl_modem_power(client, io_data, true)) < 0) { - ipc_client_log(client, "Error: failed to enable modem power"); - goto fail; - } - else { - ipc_client_log(client, "enabled modem power"); - } - -fail: - return ret; -} - -int maguro_ipc_power_off(void *io_data_unused) { - int ret = -1; - struct modemctl_io_data io_data; - - io_data.boot_fd = open(BOOT_DEV, O_RDWR | O_NOCTTY | O_NONBLOCK); - if (io_data.boot_fd < 0) { - ret = io_data.boot_fd; - goto fail; - } - - if ((ret = modemctl_modem_power(NULL, &io_data, false)) < 0) - goto fail_pwr; - - ret = 0; - -fail_pwr: - close(io_data.boot_fd); -fail: - return ret; -} - -int maguro_ipc_bootstrap(struct ipc_client *client) -{ - int ret = -1, n = 0, fd = -1, i; - struct modemctl_io_data io_data; - memset(&io_data, 0, sizeof(client, io_data)); - - io_data.radio_fd = -1; - for (n = 0; n < I9250_RADIO_IMAGE_PATHS_NUM; n++) { - fd = open(i9250_radio_image_paths[n], O_RDONLY); - if (fd > 0) { - io_data.radio_fd = fd; - ipc_client_log(client, "opened radio image %s, fd=%d", i9250_radio_image_paths[n], io_data.radio_fd); - break; - } - } - - if (io_data.radio_fd < 0) { - ipc_client_log(client, "Error: failed to open radio firmware"); - goto fail; - } - - if (fstat(io_data.radio_fd, &io_data.radio_stat) < 0) { - ipc_client_log(client, "Error: failed to stat radio image, error %s", strerror(errno)); - goto fail; - } - - io_data.radio_data = mmap(0, RADIO_MAP_SIZE, PROT_READ, MAP_SHARED, - io_data.radio_fd, 0); - if (io_data.radio_data == MAP_FAILED) { - ipc_client_log(client, "Error: failed to mmap radio image, error %s", strerror(errno)); - goto fail; - } - - io_data.boot_fd = open(BOOT_DEV, O_RDWR | O_NOCTTY | O_NONBLOCK); - if (io_data.boot_fd < 0) { - ipc_client_log(client, "Error: failed to open boot device"); - goto fail; - } - else { - ipc_client_log(client, "opened boot device %s, fd=%d", BOOT_DEV, io_data.boot_fd); - } - - if (maguro_modem_reboot(client, &io_data, true) < 0) { - ipc_client_log(client, "Error: failed to hard reset modem"); - goto fail; - } - else { - ipc_client_log(client, "modem hard reset done"); - } - - /* Now, actually load the firmware */ - for (i = 0; i < 2; i++) { - if (write(io_data.boot_fd, "ATAT", 4) != 4) { - ipc_client_log(client, "Error: failed to write ATAT to boot socket"); - goto fail; - } - else { - ipc_client_log(client, "written ATAT to boot socket, waiting for ACK"); - } - - if (expect(io_data.boot_fd, 100) < 0) { - ipc_client_log(client, "failed to select before next ACK, ignoring"); - } - } - - /* FIXME: make sure it does not timeout or add the retry in the ril library */ - if ((ret = expect(io_data.boot_fd, 100)) < 0) { - ipc_client_log(client, "Error: failed to wait for bootloader ready state"); - goto fail; - } - else { - ipc_client_log(client, "ready for PSI upload"); - } - - ret = -ETIMEDOUT; - for (i = 0; i < I9250_BOOT_REPLY_MAX; i++) { - uint32_t id_buf; - if ((ret = expect_read(io_data.boot_fd, (void*)&id_buf, 4)) != 4) { - ipc_client_log(client, "Error: failed receiving bootloader reply"); - goto fail; - } - ipc_client_log(client, "got bootloader reply %08x", id_buf); - if ((id_buf & I9250_BOOT_LAST_MASK) == I9250_BOOT_LAST_MASK) { - ret = 0; - break; - } - } - - if (ret < 0) { - ipc_client_log(client, "Error: bootloader id marker not received"); - goto fail; - } - else { - ipc_client_log(client, "got bootloader id marker"); - } - - if ((ret = maguro_send_psi(client, &io_data)) < 0) { - ipc_client_log(client, "Error: failed to upload PSI"); - goto fail; - } - else { - ipc_client_log(client, "PSI download complete"); - } - - close(io_data.boot_fd); - io_data.boot_fd = open(I9250_SECOND_BOOT_DEV, O_RDWR | O_NOCTTY | O_NONBLOCK); - if (io_data.boot_fd < 0) { - ipc_client_log(client, "Error: failed to open " I9250_SECOND_BOOT_DEV " control device"); - goto fail; - } - else { - ipc_client_log(client, "opened second boot device %s, fd=%d", I9250_SECOND_BOOT_DEV, io_data.boot_fd); - } - - if ((ret = write(io_data.boot_fd, I9250_PSI_CMD_EXEC, 4)) < 0) { - ipc_client_log(client, "Error: failed writing cmd_load_exe_EBL"); - goto fail; - } - - if ((ret = write(io_data.boot_fd, I9250_PSI_EXEC_DATA, 8)) < 0) { - ipc_client_log(client, "Error: failed writing 8 bytes to boot1"); - goto fail; - } - - if ((ret = expect_data(io_data.boot_fd, I9250_GENERAL_ACK, 4)) < 0) { - ipc_client_log(client, "Error: failed to receive cmd_load_exe_EBL ack"); - goto fail; - } - - if ((ret = expect_data(io_data.boot_fd, I9250_PSI_READY_ACK, 4)) < 0) { - ipc_client_log(client, "Error: failed to receive PSI ready ack"); - goto fail; - } - - if ((ret = maguro_send_ebl(client, &io_data)) < 0) { - ipc_client_log(client, "Error: failed to upload EBL"); - goto fail; - } - else { - ipc_client_log(client, "EBL download complete"); - } - - if ((ret = maguro_boot_info_ack(client, &io_data)) < 0) { - ipc_client_log(client, "Error: failed to receive Boot Info"); - goto fail; - } - else { - ipc_client_log(client, "Boot Info ACK done"); - } - - if ((ret = maguro_send_image_addrs(client, &io_data)) < 0) { - ipc_client_log(client, "Error: failed to upload Secure Image"); - goto fail; - } - else { - ipc_client_log(client, "Secure Image download complete"); - } - - if ((ret = modemctl_wait_modem_online(client, &io_data))) { - ipc_client_log(client, "Error: failed to wait for modem to become online"); - goto fail; - } - - /* This restores UART MUX to GPS */ - modemctl_modem_boot_power(client, &io_data, false); - - ipc_client_log(client, "Modem is online!"); - ret = 0; - -fail: - if (io_data.radio_data != MAP_FAILED) - munmap(io_data.radio_data, RADIO_MAP_SIZE); - - if (io_data.radio_fd >= 0) - close(io_data.radio_fd); - - if (io_data.boot_fd >= 0) - close(io_data.boot_fd); - - return ret; -} - -// vim:ts=4:sw=4:expandtab diff --git a/samsung-ipc/device/maguro/maguro_loader.h b/samsung-ipc/device/maguro/maguro_loader.h deleted file mode 100644 index 2f97133..0000000 --- a/samsung-ipc/device/maguro/maguro_loader.h +++ /dev/null @@ -1,104 +0,0 @@ -/* - * Firmware loader for Samsung I9250 (maguro) - * Copyright (C) 2012 Alexander Tarasikov <alexander.tarasikov@gmail.com> - * Copyright (C) 2012 Paul Kocialkowski <contact@paulk.fr> - * - * based on the incomplete C++ implementation which is - * Copyright (C) 2012 Sergey Gridasov <grindars@gmail.com> - * - * This program is free software: you can redistribute it and/or modify - * it under the terms of the GNU General Public License as published by - * the Free Software Foundation, either version 2 of the License, or - * (at your option) any later version. - * - * This program is distributed in the hope that it will be useful, - * but WITHOUT ANY WARRANTY; without even the implied warranty of - * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the - * GNU General Public License for more details. - * - * You should have received a copy of the GNU General Public License - * along with this program. If not, see <http://www.gnu.org/licenses/>. - */ - -#include <stdbool.h> -#include <stdint.h> -#include <stdlib.h> - -#ifndef __MAGURO_LOADER_H__ -#define __MAGURO_LOADER_H__ - -#define I9250_SECOND_BOOT_DEV "/dev/umts_boot1" - -#define I9250_BOOT_LAST_MASK 0x0000ffff -#define I9250_BOOT_REPLY_MAX 20 - -#define I9250_GENERAL_ACK "\x02\x00\x00\x00" - -#define I9250_PSI_START_MAGIC "\xff\xf0\x00\x30" -#define I9250_PSI_CMD_EXEC "\x08\x00\x00\x00" -#define I9250_PSI_EXEC_DATA "\x00\x00\x00\x00\x02\x00\x02\x00" -#define I9250_PSI_READY_ACK "\x00\xaa\x00\x00" - -#define I9250_EBL_IMG_ACK_MAGIC "\x51\xa5\x00\x00" -#define I9250_EBL_HDR_ACK_MAGIC "\xcc\xcc\x00\x00" - -#define I9250_MPS_IMAGE_PATH "/factory/imei/mps_code.dat" -#define I9250_MPS_LOAD_ADDR 0x61080000 -#define I9250_MPS_LENGTH 3 - -#define SEC_DOWNLOAD_CHUNK 0xdfc2 -#define SEC_DOWNLOAD_DELAY_US (500 * 1000) - - #define FW_LOAD_ADDR 0x60300000 -#define NVDATA_LOAD_ADDR 0x60e80000 - -#define BL_END_MAGIC "\x00\x00" -#define BL_END_MAGIC_LEN 2 - -#define BL_RESET_MAGIC "\x01\x10\x11\x00" -#define BL_RESET_MAGIC_LEN 4 - -/* - * on I9250, all commands need ACK and we do not need to - * allocate a fixed size buffer - */ -struct maguro_boot_cmd_desc { - unsigned code; - bool long_tail; - bool no_ack; -}; - -struct maguro_boot_cmd_header { - uint32_t total_size; - uint16_t hdr_magic; - uint16_t cmd; - uint16_t data_size; -} __attribute__((packed)); - -#define DECLARE_BOOT_CMD_HEADER(name, code, size) \ -struct maguro_boot_cmd_header name = {\ - .total_size = size + 10,\ - .hdr_magic = 2,\ - .cmd = code,\ - .data_size = size,\ -} - -struct maguro_boot_tail_header { - uint16_t checksum; - uint16_t tail_magic; - uint8_t unknown[2]; -} __attribute__((packed)); - -#define DECLARE_BOOT_TAIL_HEADER(name, checksum) \ -struct maguro_boot_tail_header name = {\ - .checksum = checksum,\ - .tail_magic = 3,\ - .unknown = "\xea\xea",\ -} - -int maguro_ipc_bootstrap(struct ipc_client *client); -int maguro_ipc_power_off(void *io_data); - -#endif - -// vim:ts=4:sw=4:expandtab |