123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337 |
- // SPDX-License-Identifier: GPL-2.0-only
- /*
- * Qualcomm Peripheral Image Loader
- *
- * Copyright (C) 2016 Linaro Ltd
- * Copyright (C) 2015 Sony Mobile Communications Inc
- * Copyright (c) 2012-2013, The Linux Foundation. All rights reserved.
- */
- #include <linux/device.h>
- #include <linux/elf.h>
- #include <linux/firmware.h>
- #include <linux/kernel.h>
- #include <linux/module.h>
- #include <linux/qcom_scm.h>
- #include <linux/sizes.h>
- #include <linux/slab.h>
- #include <linux/soc/qcom/mdt_loader.h>
- static bool mdt_phdr_valid(const struct elf32_phdr *phdr)
- {
- if (phdr->p_type != PT_LOAD)
- return false;
- if ((phdr->p_flags & QCOM_MDT_TYPE_MASK) == QCOM_MDT_TYPE_HASH)
- return false;
- if (!phdr->p_memsz)
- return false;
- return true;
- }
- /**
- * qcom_mdt_get_size() - acquire size of the memory region needed to load mdt
- * @fw: firmware object for the mdt file
- *
- * Returns size of the loaded firmware blob, or -EINVAL on failure.
- */
- ssize_t qcom_mdt_get_size(const struct firmware *fw)
- {
- const struct elf32_phdr *phdrs;
- const struct elf32_phdr *phdr;
- const struct elf32_hdr *ehdr;
- phys_addr_t min_addr = PHYS_ADDR_MAX;
- phys_addr_t max_addr = 0;
- int i;
- ehdr = (struct elf32_hdr *)fw->data;
- phdrs = (struct elf32_phdr *)(ehdr + 1);
- for (i = 0; i < ehdr->e_phnum; i++) {
- phdr = &phdrs[i];
- if (!mdt_phdr_valid(phdr))
- continue;
- if (phdr->p_paddr < min_addr)
- min_addr = phdr->p_paddr;
- if (phdr->p_paddr + phdr->p_memsz > max_addr)
- max_addr = ALIGN(phdr->p_paddr + phdr->p_memsz, SZ_4K);
- }
- return min_addr < max_addr ? max_addr - min_addr : -EINVAL;
- }
- EXPORT_SYMBOL_GPL(qcom_mdt_get_size);
- /**
- * qcom_mdt_read_metadata() - read header and metadata from mdt or mbn
- * @fw: firmware of mdt header or mbn
- * @data_len: length of the read metadata blob
- *
- * The mechanism that performs the authentication of the loading firmware
- * expects an ELF header directly followed by the segment of hashes, with no
- * padding inbetween. This function allocates a chunk of memory for this pair
- * and copy the two pieces into the buffer.
- *
- * In the case of split firmware the hash is found directly following the ELF
- * header, rather than at p_offset described by the second program header.
- *
- * The caller is responsible to free (kfree()) the returned pointer.
- *
- * Return: pointer to data, or ERR_PTR()
- */
- void *qcom_mdt_read_metadata(const struct firmware *fw, size_t *data_len)
- {
- const struct elf32_phdr *phdrs;
- const struct elf32_hdr *ehdr;
- size_t hash_offset;
- size_t hash_size;
- size_t ehdr_size;
- void *data;
- ehdr = (struct elf32_hdr *)fw->data;
- phdrs = (struct elf32_phdr *)(ehdr + 1);
- if (ehdr->e_phnum < 2)
- return ERR_PTR(-EINVAL);
- if (phdrs[0].p_type == PT_LOAD || phdrs[1].p_type == PT_LOAD)
- return ERR_PTR(-EINVAL);
- if ((phdrs[1].p_flags & QCOM_MDT_TYPE_MASK) != QCOM_MDT_TYPE_HASH)
- return ERR_PTR(-EINVAL);
- ehdr_size = phdrs[0].p_filesz;
- hash_size = phdrs[1].p_filesz;
- data = kmalloc(ehdr_size + hash_size, GFP_KERNEL);
- if (!data)
- return ERR_PTR(-ENOMEM);
- /* Is the header and hash already packed */
- if (ehdr_size + hash_size == fw->size)
- hash_offset = phdrs[0].p_filesz;
- else
- hash_offset = phdrs[1].p_offset;
- memcpy(data, fw->data, ehdr_size);
- memcpy(data + ehdr_size, fw->data + hash_offset, hash_size);
- *data_len = ehdr_size + hash_size;
- return data;
- }
- EXPORT_SYMBOL_GPL(qcom_mdt_read_metadata);
- static int __qcom_mdt_load(struct device *dev, const struct firmware *fw,
- const char *firmware, int pas_id, void *mem_region,
- phys_addr_t mem_phys, size_t mem_size,
- phys_addr_t *reloc_base, bool pas_init)
- {
- const struct elf32_phdr *phdrs;
- const struct elf32_phdr *phdr;
- const struct elf32_hdr *ehdr;
- const struct firmware *seg_fw;
- phys_addr_t mem_reloc;
- phys_addr_t min_addr = PHYS_ADDR_MAX;
- phys_addr_t max_addr = 0;
- size_t metadata_len;
- size_t fw_name_len;
- ssize_t offset;
- void *metadata;
- char *fw_name;
- bool relocate = false;
- void *ptr;
- int ret = 0;
- int i;
- if (!fw || !mem_region || !mem_phys || !mem_size)
- return -EINVAL;
- ehdr = (struct elf32_hdr *)fw->data;
- phdrs = (struct elf32_phdr *)(ehdr + 1);
- fw_name_len = strlen(firmware);
- if (fw_name_len <= 4)
- return -EINVAL;
- fw_name = kstrdup(firmware, GFP_KERNEL);
- if (!fw_name)
- return -ENOMEM;
- if (pas_init) {
- metadata = qcom_mdt_read_metadata(fw, &metadata_len);
- if (IS_ERR(metadata)) {
- ret = PTR_ERR(metadata);
- goto out;
- }
- ret = qcom_scm_pas_init_image(pas_id, metadata, metadata_len);
- kfree(metadata);
- if (ret) {
- dev_err(dev, "invalid firmware metadata\n");
- goto out;
- }
- }
- for (i = 0; i < ehdr->e_phnum; i++) {
- phdr = &phdrs[i];
- if (!mdt_phdr_valid(phdr))
- continue;
- if (phdr->p_flags & QCOM_MDT_RELOCATABLE)
- relocate = true;
- if (phdr->p_paddr < min_addr)
- min_addr = phdr->p_paddr;
- if (phdr->p_paddr + phdr->p_memsz > max_addr)
- max_addr = ALIGN(phdr->p_paddr + phdr->p_memsz, SZ_4K);
- }
- if (relocate) {
- if (pas_init) {
- ret = qcom_scm_pas_mem_setup(pas_id, mem_phys,
- max_addr - min_addr);
- if (ret) {
- dev_err(dev, "unable to setup relocation\n");
- goto out;
- }
- }
- /*
- * The image is relocatable, so offset each segment based on
- * the lowest segment address.
- */
- mem_reloc = min_addr;
- } else {
- /*
- * Image is not relocatable, so offset each segment based on
- * the allocated physical chunk of memory.
- */
- mem_reloc = mem_phys;
- }
- for (i = 0; i < ehdr->e_phnum; i++) {
- phdr = &phdrs[i];
- if (!mdt_phdr_valid(phdr))
- continue;
- offset = phdr->p_paddr - mem_reloc;
- if (offset < 0 || offset + phdr->p_memsz > mem_size) {
- dev_err(dev, "segment outside memory range\n");
- ret = -EINVAL;
- break;
- }
- if (phdr->p_filesz > phdr->p_memsz) {
- dev_err(dev,
- "refusing to load segment %d with p_filesz > p_memsz\n",
- i);
- ret = -EINVAL;
- break;
- }
- ptr = mem_region + offset;
- if (phdr->p_filesz && phdr->p_offset < fw->size) {
- /* Firmware is large enough to be non-split */
- if (phdr->p_offset + phdr->p_filesz > fw->size) {
- dev_err(dev,
- "failed to load segment %d from truncated file %s\n",
- i, firmware);
- ret = -EINVAL;
- break;
- }
- memcpy(ptr, fw->data + phdr->p_offset, phdr->p_filesz);
- } else if (phdr->p_filesz) {
- /* Firmware not large enough, load split-out segments */
- sprintf(fw_name + fw_name_len - 3, "b%02d", i);
- ret = request_firmware_into_buf(&seg_fw, fw_name, dev,
- ptr, phdr->p_filesz);
- if (ret) {
- dev_err(dev, "failed to load %s\n", fw_name);
- break;
- }
- if (seg_fw->size != phdr->p_filesz) {
- dev_err(dev,
- "failed to load segment %d from truncated file %s\n",
- i, fw_name);
- release_firmware(seg_fw);
- ret = -EINVAL;
- break;
- }
- release_firmware(seg_fw);
- }
- if (phdr->p_memsz > phdr->p_filesz)
- memset(ptr + phdr->p_filesz, 0, phdr->p_memsz - phdr->p_filesz);
- }
- if (reloc_base)
- *reloc_base = mem_reloc;
- out:
- kfree(fw_name);
- return ret;
- }
- /**
- * qcom_mdt_load() - load the firmware which header is loaded as fw
- * @dev: device handle to associate resources with
- * @fw: firmware object for the mdt file
- * @firmware: name of the firmware, for construction of segment file names
- * @pas_id: PAS identifier
- * @mem_region: allocated memory region to load firmware into
- * @mem_phys: physical address of allocated memory region
- * @mem_size: size of the allocated memory region
- * @reloc_base: adjusted physical address after relocation
- *
- * Returns 0 on success, negative errno otherwise.
- */
- int qcom_mdt_load(struct device *dev, const struct firmware *fw,
- const char *firmware, int pas_id, void *mem_region,
- phys_addr_t mem_phys, size_t mem_size,
- phys_addr_t *reloc_base)
- {
- return __qcom_mdt_load(dev, fw, firmware, pas_id, mem_region, mem_phys,
- mem_size, reloc_base, true);
- }
- EXPORT_SYMBOL_GPL(qcom_mdt_load);
- /**
- * qcom_mdt_load_no_init() - load the firmware which header is loaded as fw
- * @dev: device handle to associate resources with
- * @fw: firmware object for the mdt file
- * @firmware: name of the firmware, for construction of segment file names
- * @pas_id: PAS identifier
- * @mem_region: allocated memory region to load firmware into
- * @mem_phys: physical address of allocated memory region
- * @mem_size: size of the allocated memory region
- * @reloc_base: adjusted physical address after relocation
- *
- * Returns 0 on success, negative errno otherwise.
- */
- int qcom_mdt_load_no_init(struct device *dev, const struct firmware *fw,
- const char *firmware, int pas_id,
- void *mem_region, phys_addr_t mem_phys,
- size_t mem_size, phys_addr_t *reloc_base)
- {
- return __qcom_mdt_load(dev, fw, firmware, pas_id, mem_region, mem_phys,
- mem_size, reloc_base, false);
- }
- EXPORT_SYMBOL_GPL(qcom_mdt_load_no_init);
- MODULE_DESCRIPTION("Firmware parser for Qualcomm MDT format");
- MODULE_LICENSE("GPL v2");
|