git.zerfleddert.de Git - rsbs2/blob - firmware.c

   1 #include <stdio.h>
   2 #include <stdlib.h>
   3 #include <sys/types.h>
   4 #include <sys/stat.h>
   5 #include <fcntl.h>
   6 #include <unistd.h>
   7 #include <errno.h>
   8 #include <string.h>
   9 #include <strings.h>
  10 #include "rsb-crc.h"
  11 #include "filesystem.h"
  12
  13 #define FINDSTR(addr, str) (!strncmp((char*)addr, str, strlen(str)))
  14
  15 struct properties {
  16         unsigned int magic;
  17         unsigned char unknown0;
  18         unsigned char unknown1;
  19         unsigned char right_rw;
  20         unsigned char rw_mask;
  21         unsigned char type1;
  22         unsigned char unknown5;
  23         unsigned char unknown6;
  24         unsigned char unknown7;
  25         unsigned char type2;
  26         unsigned char val[];
  27 };
  28
  29 #define PROP_ACTION_TRUE        (1<<0)
  30 #define PROP_ACTION_FALSE       (1<<1)
  31 #define PROP_ACTION_RO          (1<<2)
  32 #define PROP_ACTION_RW          (1<<3)
  33
  34 #define PROP_STATUS_NOTFOUND    (0)
  35 #define PROP_STATUS_WRONGTYPE   (1<<0)
  36 #define PROP_STATUS_WRONGRIGHTS (1<<1)
  37 #define PROP_STATUS_SAMEVAL     (1<<2)
  38 #define PROP_STATUS_SUCCESS     (1<<3)
  39
  40 struct propaction {
  41         char *property;
  42         unsigned int action;
  43         unsigned int status;
  44         struct propaction *next;
  45 };
  46
  47 void show_properties(unsigned char *fw, int len)
  48 {
  49         struct file_entry *fent;
  50
  51         for (fent = get_next_file(fw, len); fent != NULL; fent = get_next_file(NULL, 0)) {
  52                 if (FINDSTR(fent->name, "/default/fw_prop/") ||
  53                     FINDSTR(fent->name, "/default/fw_setup/") ||
  54                     FINDSTR(fent->name, "/default/oem_prop/")) {
  55                         struct properties *prop;
  56
  57                         printf("0x%08x: found setting: %s ", fent->start - fw, fent->name);
  58
  59                         prop = (struct properties*)fent->start;
  60
  61                         if (prop->magic != 0x83011111) {
  62                                 printf("ignoring...\n");
  63                                 continue;
  64                         }
  65
  66                         if (prop->type1 == 0x00 && prop->type2 == 0x04) {
  67                                 printf("STRING: '%s' ", prop->val);
  68                         } else if (prop->type1 == 0x01 && prop->type2 == 0x01) {
  69                                 printf("BOOL: %s ",(*prop->val ? "TRUE" : "FALSE"));
  70                         } else if (prop->type1 == 0x04 && prop->type2 == 0x02) {
  71                                 printf("VAL: 0x%x ", *((unsigned int*)prop->val));
  72                         } else {
  73                                 printf("0x%02x 0x%2x...ignoring\n", prop->type1, prop->type2);
  74                                 continue;
  75                         }
  76
  77                         if (prop->right_rw == 0x00 && prop->rw_mask == 0x00) {
  78                                 printf("(R-)");
  79                         } else if (prop->right_rw == 0x01) {
  80                                 printf("(RW mask: 0x%02x)", prop->rw_mask);
  81                         } else {
  82                                 printf("(UNK 0x%02x 0x%02x)", prop->right_rw, prop->rw_mask);
  83                         }
  84                         printf(", length: %d\n", fent->length);
  85                 }
  86         }
  87 }
  88
  89 void change_properties(unsigned char *fw, int len, struct propaction *paction)
  90 {
  91         struct file_entry *fent;
  92         struct propaction *cpaction;
  93
  94         for (fent = get_next_file(fw, len); fent != NULL; fent = get_next_file(NULL, 0)) {
  95                 cpaction = paction;
  96                 while (cpaction != NULL) {
  97                         if (FINDSTR(fent->name, cpaction->property)) {
  98                                 break;
  99                         }
 100                         cpaction = cpaction->next;
 101                 }
 102                 if (cpaction != NULL) {
 103                         struct properties *prop;
 104
 105                         prop = (struct properties*)fent->start;
 106
 107                         if (prop->magic != 0x83011111) {
 108                                 continue;
 109                         }
 110
 111                         if (cpaction->action & (PROP_ACTION_TRUE|PROP_ACTION_FALSE)) {
 112                                 if (prop->type1 == 0x01 && prop->type2 == 0x01) {
 113                                         if (cpaction->action & PROP_ACTION_TRUE) {
 114                                                 if (*prop->val == 0x00) {
 115                                                         *prop->val = 0x01;
 116                                                         cpaction->status |= PROP_STATUS_SUCCESS;
 117                                                 } else {
 118                                                         cpaction->status |= PROP_STATUS_SAMEVAL;
 119                                                 }
 120                                         } else {
 121                                                 if (*prop->val == 0x01) {
 122                                                         *prop->val = 0x00;
 123                                                         cpaction->status |= PROP_STATUS_SUCCESS;
 124                                                 } else {
 125                                                         cpaction->status |= PROP_STATUS_SAMEVAL;
 126                                                 }
 127                                         }
 128                                 } else {
 129                                         cpaction->status = PROP_STATUS_WRONGTYPE;
 130                                 }
 131                         }
 132                         if (cpaction->action & PROP_ACTION_RW) {
 133                                 if (prop->right_rw == 0x00 && prop->rw_mask == 0x00) {
 134                                         prop->right_rw = 0x01;
 135                                         prop->rw_mask = 0x02;
 136                                         cpaction->status |= PROP_STATUS_SUCCESS;
 137                                 } else {
 138                                         cpaction->status |= PROP_STATUS_WRONGRIGHTS;
 139                                 }
 140                         }
 141                         if (cpaction->action & PROP_ACTION_RO) {
 142                                 if (prop->right_rw == 0x01 && prop->rw_mask == 0x02) {
 143                                         prop->right_rw = 0x00;
 144                                         prop->rw_mask = 0x00;
 145                                         cpaction->status |= PROP_STATUS_SUCCESS;
 146                                 } else {
 147                                         cpaction->status |= PROP_STATUS_WRONGRIGHTS;
 148                                 }
 149                         }
 150                 }
 151         }
 152 }
 153
 154 #define BD_SERIAL1      0x14,0x02
 155 #define BD_ICMB         0x14,0x04
 156 #define BD_LAN          0x14,0x08
 157 #define BD_SERIAL2      0x14,0x10
 158 #define BD_SERIAL3      0x14,0x20
 159 #define BD_USB          0x14,0x40
 160 #define BD_PCI          0x15,0x03
 161 #define BD_LPC          0x15,0x04
 162 #define BD_VGA          0x15,0x08
 163 #define BD_BATTERY      0x15,0x10
 164 #define BD_ACDC         0x15,0x20
 165 #define BD_STANDBY      0x15,0x40
 166 #define BD_POWERCONN    0x15,0x70
 167 #define BD_DVI          0x15,0x80
 168 #define BD_PWRATX       0x16,0x01
 169 #define BD_PWRRELAY     0x16,0x02
 170 #define BD_PS2A         0x19,0xff
 171
 172 #define MAGIC(fn, args...) fn(args)
 173
 174 #define _BD_IS_SET(bd, byte, bits) (bd[byte] & bits)
 175 #define BD_IS_SET(bd, ident) MAGIC(_BD_IS_SET, bd, BD_##ident)
 176 #define BD_TEXT(bd, ident) (BD_IS_SET(bd, ident) ? "TRUE" : "FALSE")
 177
 178 #define _BD_SET(bd, byte, bits) (bd[byte] |= bits)
 179 #define BD_SET(bd, ident) MAGIC(_BD_SET, bd, BD_##ident)
 180
 181 void print_boarddescription(unsigned char *bd)
 182 {
 183         int j;
 184
 185         for (j = 0; j < 32; j++) {
 186                 printf("%02x ", *(bd+j));
 187         }
 188         printf("\n");
 189
 190         /* com/agilent/rmc/amr/AmrMaster.class
 191          * com/agilent/rmc/mgui/RmcPanel.class
 192          * com/agilent/rmc/mgui/panels/AvrManualConfig.class
 193          * com/agilent/rmc/mgui/panels/CardConf.jad
 194          * com/agilent/rmc/mgui/panels/PowerMgmtConf.jad
 195          * com/agilent/rmc/mgui/panels/RemoteDiskConf.jad
 196          */
 197         printf("\tserial1Present\t\t: %s\n", BD_TEXT(bd, SERIAL1));
 198         printf("\ticmbPresent\t\t: %s\n", BD_TEXT(bd, ICMB));
 199         printf("\tlanPresent\t\t: %s\n", BD_TEXT(bd, LAN));
 200         printf("\tserial2Present\t\t: %s\n", BD_TEXT(bd, SERIAL2));
 201         printf("\tserial3Present\t\t: %s\n", BD_TEXT(bd, SERIAL3));
 202         printf("\tusbPresent\t\t: %s\n", BD_TEXT(bd, USB));
 203         printf("\tpciPresent\t\t: %s\n", BD_TEXT(bd, PCI));
 204         printf("\tlpcPresent\t\t: %s\n", BD_TEXT(bd, LPC));
 205         printf("\tvgaPresent\t\t: %s\n", BD_TEXT(bd, VGA));
 206         printf("\tbatteryPresent\t\t: %s\n", BD_TEXT(bd, BATTERY));
 207         printf("\tacdcPresent\t\t: %s\n", BD_TEXT(bd, ACDC));
 208         printf("\tstandbyPresent\t\t: %s\n", BD_TEXT(bd, STANDBY));
 209         printf("\thasPowerConnectors\t: %s\n", BD_TEXT(bd, POWERCONN));
 210         printf("\tdviPresent\t\t: %s\n", BD_TEXT(bd, DVI));
 211         printf("\tpowerSwitchATX\t\t: %s\n", BD_TEXT(bd, PWRATX));
 212         printf("\tpowerSwitchRelay\t: %s\n", BD_TEXT(bd, PWRRELAY));
 213         /* 22 & 4 */
 214         printf("\tps2aPresent\t\t: %s\n", BD_TEXT(bd, PS2A));
 215 }
 216
 217 void handle_boarddescription(unsigned char *fw, int len, int patch)
 218 {
 219         struct file_entry *fent;
 220         unsigned char *pos;
 221
 222         for (fent = get_next_file(fw, len); fent != NULL; fent = get_next_file(NULL, 0)) {
 223                 if (!strcmp(fent->name, "pdata"))
 224                         break;
 225         }
 226
 227         if (fent == NULL) {
 228                 fprintf(stderr, "pdata file not found, aborting!\n");
 229                 exit(1);
 230         }
 231
 232
 233         pos = fent->start;
 234         /* MAGIC? */
 235         if (*((unsigned int*)pos) != 0x00002802) {
 236                 fprintf(stderr, "pdata magic does not match, aborting!\n");
 237                 exit(1);
 238         }
 239
 240         pos += 26;
 241
 242         /* MAGIC2? */
 243         if (*((unsigned int*)pos) != 0x00500101) {
 244                 fprintf(stderr, "pdata magic2 does not match, aborting!\n");
 245                 exit(1);
 246         }
 247
 248         if (patch) {
 249                 /* Enable ATX and relay power switching */
 250                 BD_SET(pos, PWRATX);
 251                 BD_SET(pos, PWRRELAY);
 252         }
 253
 254         printf("0x%08x: BOARD_DESCRIPTION: ", fent->start - fw);
 255         print_boarddescription(pos);
 256 }
 257
 258 void syntax(char *name)
 259 {
 260         fprintf(stderr,"Syntax: %s parameters firmware.bin\n", name);
 261         fprintf(stderr,"parameters as follows:\n");
 262         fprintf(stderr,"\t-d\t\t\tdisplay all properties of the image\n");
 263         fprintf(stderr,"\t-u\t\t\tupdate checksum of the image\n");
 264         fprintf(stderr,"\t-b\t\t\tmodify BOARD_DESCRIPTION for more power-switch options\n");
 265         fprintf(stderr,"\t-e\t\t\textract files in firmware\n");
 266         fprintf(stderr,"\t-l\t\t\tlist files in firmware\n");
 267         fprintf(stderr,"\t-t property\t\tset 'property' to true\n");
 268         fprintf(stderr,"\t-f property\t\tset 'property' to false\n");
 269         fprintf(stderr,"\t-w property\t\tallow read-write access to 'property'\n");
 270         fprintf(stderr,"\t-r property\t\tallow read-only access to 'property'\n");
 271         fprintf(stderr,"\t-x fw_file=local_file\treplace or add fw_file with content of local_file\n");
 272         exit(1);
 273 }
 274
 275 void add_action(int opt, char *optarg, struct propaction **paction) {
 276         struct propaction *pos = *paction;
 277         struct propaction *prev = NULL;
 278
 279         while (pos != NULL) {
 280                 if (!strcmp(pos->property, optarg))
 281                         break;
 282                 prev = pos;
 283                 pos = pos->next;
 284         }
 285
 286         if (pos == NULL) {
 287                 pos = malloc(sizeof(struct propaction));
 288                 if (pos == NULL) {
 289                         perror("malloc");
 290                         exit(1);
 291                 }
 292                 bzero(pos, sizeof(struct propaction));
 293                 pos->property = optarg;
 294
 295                 if (prev == NULL) {
 296                         *paction = pos;
 297                 } else {
 298                         prev->next = pos;
 299                 }
 300         }
 301
 302         switch(opt) {
 303                 case 't':
 304                         if (pos->action & PROP_ACTION_FALSE) {
 305                                 fprintf(stderr,"inconsistent requests for %s\n",pos->property);
 306                                 exit(1);
 307                         }
 308                         pos->action |= PROP_ACTION_TRUE;
 309                         break;
 310                 case 'f':
 311                         if (pos->action & PROP_ACTION_TRUE) {
 312                                 fprintf(stderr,"inconsistent requests for %s\n",pos->property);
 313                                 exit(1);
 314                         }
 315                         pos->action |= PROP_ACTION_FALSE;
 316                         break;
 317                 case 'w':
 318                         if (pos->action & PROP_ACTION_RO) {
 319                                 fprintf(stderr,"inconsistent requests for %s\n",pos->property);
 320                                 exit(1);
 321                         }
 322                         pos->action |= PROP_ACTION_RW;
 323                         break;
 324                 case 'r':
 325                         if (pos->action & PROP_ACTION_RW) {
 326                                 fprintf(stderr,"inconsistent requests for %s\n",pos->property);
 327                                 exit(1);
 328                         }
 329                         pos->action |= PROP_ACTION_RO;
 330                         break;
 331         }
 332 }
 333
 334 int check_crc(unsigned char *fw, int len)
 335 {
 336         int ret;
 337         unsigned int crc, oldcrc;
 338
 339         ret = rsb_crc2(fw, len, 0x55335053, &crc);
 340         oldcrc = (unsigned int)*((unsigned int*)(fw + len - 4));
 341
 342         printf("Checksum: 0x%08x (%s), should be: 0x%08x\n",
 343                 crc,
 344                 (ret ? "NOT OK" : "OK"),
 345                 oldcrc);
 346
 347         return ret;
 348 }
 349
 350 void check_image(unsigned char *fw, int len)
 351 {
 352         struct file_entry *fent;
 353         char *last_name = NULL;
 354
 355         /* get_next_file will abort on error */
 356         fent = get_next_file(fw, len);
 357         while (fent != NULL) {
 358                 last_name = fent->name;
 359                 fent = get_next_file(NULL, 0);
 360         }
 361 }
 362
 363 int main(int argc, char **argv)
 364 {
 365         struct stat statbuf;
 366         char *file = NULL;
 367         unsigned char *fw;
 368         int fd;
 369         int remaining;
 370         int ret;
 371         int opt;
 372         unsigned int crc;
 373         struct propaction *paction = NULL;
 374         int showall = 0;
 375         int update_crc = 0;
 376         int patch_bd = 0;
 377         int patch_fw = 0;
 378         int extract = 0;
 379         int list = 0;
 380
 381         if (argc < 2)
 382                 syntax(argv[0]);
 383
 384         while ((opt = getopt(argc, argv, "dubelt:f:w:r:x:")) != -1) {
 385                 switch(opt) {
 386                         case 'd':
 387                                 showall = 1;
 388                                 break;
 389                         case 'u':
 390                                 update_crc = 1;
 391                                 break;
 392                         case 'b':
 393                                 patch_bd = 1;
 394                                 break;
 395                         case 'e':
 396                                 extract = 1;
 397                                 break;
 398                         case 'l':
 399                                 list = 1;
 400                                 break;
 401                         case 't':
 402                         case 'f':
 403                         case 'w':
 404                         case 'r':
 405                                 patch_fw = 1;
 406                                 add_action(opt, optarg, &paction);
 407                                 break;
 408                         case 'x':
 409                                 replace_add_file(NULL, 0, NULL, NULL);
 410                                 break;
 411                         default:
 412                                 syntax(argv[0]);
 413                 }
 414         }
 415
 416         if (argc > optind) {
 417                 file = argv[optind];
 418         } else {
 419                 syntax(argv[0]);
 420         }
 421
 422         if (stat(file, &statbuf) == -1) {
 423                 fprintf(stderr,"%s: ", file);
 424                 perror("stat");
 425                 exit(1);
 426         }
 427
 428         if ((fd = open(file, O_RDONLY)) == -1) {
 429                 fprintf(stderr,"%s: ", file);
 430                 perror("open");
 431                 exit(1);
 432         }
 433
 434         if ((fw = malloc(statbuf.st_size)) == NULL) {
 435                 perror("malloc");
 436                 exit(1);
 437         }
 438
 439         bzero(fw, statbuf.st_size);
 440
 441         remaining = statbuf.st_size;
 442
 443         while(remaining) {
 444                 if ((ret = read(fd, fw + (statbuf.st_size - remaining), remaining)) == -1) {
 445                         perror("read");
 446                         exit(1);
 447                 }
 448                 remaining -= ret;
 449         }
 450         close(fd);
 451
 452         ret = check_crc(fw, statbuf.st_size);
 453         if ((ret != 0) && (!update_crc)) {
 454                 fprintf(stderr,"Checksum incorrect, aborting...\n");
 455                 exit(1);
 456         }
 457
 458         check_image(fw, statbuf.st_size - 4);
 459
 460         if (patch_fw) {
 461                 struct propaction *cpaction = paction;
 462
 463                 change_properties(fw, statbuf.st_size - 4, paction);
 464
 465                 printf("\nProperty change results:\n");
 466                 while(cpaction != NULL) {
 467                         printf("%s: ", cpaction->property);
 468
 469                         if (cpaction->status == PROP_STATUS_NOTFOUND)
 470                                 printf("NOTFOUND ");
 471                         if (cpaction->status & PROP_STATUS_SUCCESS)
 472                                 printf("SUCCESS ");
 473                         if (cpaction->status & PROP_STATUS_SAMEVAL)
 474                                 printf("SAMEVAL ");
 475                         if (cpaction->status & PROP_STATUS_WRONGTYPE)
 476                                 printf("WRONGTYPE ");
 477                         if (cpaction->status & PROP_STATUS_WRONGRIGHTS)
 478                                 printf("WRONGRIGHTS ");
 479                         printf("\n");
 480
 481                         cpaction = cpaction->next;
 482                 }
 483                 printf("\n");
 484         }
 485
 486         if (patch_bd) {
 487                 handle_boarddescription(fw, statbuf.st_size - 4, 1);
 488         }
 489
 490         if (showall) {
 491                 show_properties(fw, statbuf.st_size - 4);
 492                 handle_boarddescription(fw, statbuf.st_size - 4, 0);
 493         }
 494
 495         if (list) {
 496                 list_files(fw, statbuf.st_size - 4);
 497         }
 498
 499         if (extract) {
 500                 extract_files(fw, statbuf.st_size - 4);
 501         }
 502
 503         if (update_crc || patch_fw || patch_bd) {
 504                 ret = rsb_crc2(fw, statbuf.st_size, 0x55335053, &crc);
 505                 if (ret == 4) {
 506                         *((unsigned int*)(fw + statbuf.st_size - 4)) = crc;
 507                 }
 508
 509                 check_image(fw, statbuf.st_size-4);
 510
 511                 if (check_crc(fw, statbuf.st_size) == 0) {
 512                         char *newfile;
 513
 514                         newfile = malloc(strlen(file) + strlen(".patched") + 1);
 515                         if (newfile == NULL) {
 516                                 perror("malloc");
 517                                 exit(1);
 518                         }
 519                         strcpy(newfile, file);
 520                         strcat(newfile, ".patched");
 521
 522                         printf("Firmware ");
 523                         write_file(newfile, fw, statbuf.st_size);
 524                 } else {
 525                         fprintf(stderr,"Can't set correct checksum, aborting...\n");
 526                 }
 527         }
 528
 529         exit(0);
 530 }