1595 lines
43 KiB
C
1595 lines
43 KiB
C
// SPDX-License-Identifier: (GPL-2.0+ OR MIT)
|
|
/*
|
|
* Copyright (c) 2019 Amlogic, Inc. All rights reserved.
|
|
*/
|
|
|
|
#include <common.h>
|
|
#include <command.h>
|
|
#include <env.h>
|
|
#include <malloc.h>
|
|
#ifdef CONFIG_AML_MTD
|
|
#include <linux/mtd/mtd.h>
|
|
#endif
|
|
#include <asm/byteorder.h>
|
|
#include <config.h>
|
|
#include <asm/amlogic/arch/io.h>
|
|
#include <amlogic/partition_table.h>
|
|
#include <amlogic/libavb/libavb.h>
|
|
#include <version.h>
|
|
#include <amlogic/storage.h>
|
|
#include <fastboot.h>
|
|
#include <u-boot/sha1.h>
|
|
#include <asm/amlogic/arch/efuse.h>
|
|
#include <amlogic/emmc_partitions.h>
|
|
#include <fs.h>
|
|
#if (IS_ENABLED(CONFIG_UNIFY_BOOTLOADER))
|
|
#include "cmd_bootctl_wrapper.h"
|
|
#endif
|
|
#include "cmd_bootctl_utils.h"
|
|
#include <amlogic/store_wrapper.h>
|
|
#include <part_efi.h>
|
|
|
|
#include <asm/amlogic/arch/secure_apb.h>
|
|
#include <linux/arm-smccc.h>
|
|
#include <asm/amlogic/arch/reboot.h>
|
|
#include <asm/amlogic/arch/bl31_apis.h>
|
|
|
|
|
|
#if defined(CONFIG_EFUSE_OBJ_API) && defined(CONFIG_CMD_EFUSE)
|
|
extern efuse_obj_field_t efuse_field;
|
|
#endif//#ifdef CONFIG_EFUSE_OBJ_API
|
|
|
|
#define BOOTLOADER_OFFSET 512
|
|
#define BOOTLOADER_MAX_SIZE (4 * 1024 * 1024)
|
|
#define MIB_SIZE (1024 * 1024)
|
|
#define GPT_OFFSET 0x3DFE00
|
|
#define DTS_GPT_OFFSET 0x3E0000
|
|
|
|
#define BOOTLOADER_CHECK_SIZE 2048
|
|
|
|
#ifdef CONFIG_BOOTLOADER_CONTROL_BLOCK
|
|
|
|
// Spaces used by misc partition are as below:
|
|
// 0 - 2K For bootloader_message
|
|
// 2K - 16K Used by Vendor's bootloader (the 2K - 4K range may be optionally used
|
|
// as bootloader_message_ab struct)
|
|
// 16K - 32K Used by uncrypt and recovery to store wipe_package for A/B devices
|
|
// 32K - 64K System space, used for miscellanious AOSP features. See below.
|
|
// Note that these offsets are admitted by bootloader,recovery and uncrypt, so they
|
|
// are not configurable without changing all of them.
|
|
#define BOOTLOADER_MESSAGE_OFFSET_IN_MISC 0
|
|
#define VENDOR_SPACE_OFFSET_IN_MISC 2 * 1024
|
|
#define WIPE_PACKAGE_OFFSET_IN_MISC 16 * 1024
|
|
#define SYSTEM_SPACE_OFFSET_IN_MISC 32 * 1024
|
|
#define SYSTEM_SPACE_SIZE_IN_MISC 32 * 1024
|
|
|
|
|
|
#define AB_METADATA_MISC_PARTITION_OFFSET 2048
|
|
|
|
#define MISCBUF_SIZE 2080
|
|
|
|
/* Bootloader Message (2-KiB)
|
|
*
|
|
* This structure describes the content of a block in flash
|
|
* that is used for recovery and the bootloader to talk to
|
|
* each other.
|
|
*
|
|
* The command field is updated by linux when it wants to
|
|
* reboot into recovery or to update radio or bootloader firmware.
|
|
* It is also updated by the bootloader when firmware update
|
|
* is complete (to boot into recovery for any final cleanup)
|
|
*
|
|
* The status field was used by the bootloader after the completion
|
|
* of an "update-radio" or "update-hboot" command, which has been
|
|
* deprecated since Froyo.
|
|
*
|
|
* The recovery field is only written by linux and used
|
|
* for the system to send a message to recovery or the
|
|
* other way around.
|
|
*
|
|
* The stage field is written by packages which restart themselves
|
|
* multiple times, so that the UI can reflect which invocation of the
|
|
* package it is. If the value is of the format "#/#" (eg, "1/3"),
|
|
* the UI will add a simple indicator of that status.
|
|
*
|
|
* We used to have slot_suffix field for A/B boot control metadata in
|
|
* this struct, which gets unintentionally cleared by recovery or
|
|
* uncrypt. Move it into struct bootloader_message_ab to avoid the
|
|
* issue.
|
|
*/
|
|
struct bootloader_message {
|
|
char command[32];
|
|
char status[32];
|
|
char recovery[768];
|
|
|
|
// The 'recovery' field used to be 1024 bytes. It has only ever
|
|
// been used to store the recovery command line, so 768 bytes
|
|
// should be plenty. We carve off the last 256 bytes to store the
|
|
// stage string (for multistage packages) and possible future
|
|
// expansion.
|
|
char stage[32];
|
|
|
|
// The 'reserved' field used to be 224 bytes when it was initially
|
|
// carved off from the 1024-byte recovery field. Bump it up to
|
|
// 1184-byte so that the entire bootloader_message struct rounds up
|
|
// to 2048-byte.
|
|
char reserved[1184];
|
|
};
|
|
|
|
/**
|
|
* The A/B-specific bootloader message structure (4-KiB).
|
|
*
|
|
* We separate A/B boot control metadata from the regular bootloader
|
|
* message struct and keep it here. Everything that's A/B-specific
|
|
* stays after struct bootloader_message, which should be managed by
|
|
* the A/B-bootloader or boot control HAL.
|
|
*
|
|
* The slot_suffix field is used for A/B implementations where the
|
|
* bootloader does not set the androidboot.ro.boot.slot_suffix kernel
|
|
* commandline parameter. This is used by fs_mgr to mount /system and
|
|
* other partitions with the slotselect flag set in fstab. A/B
|
|
* implementations are free to use all 32 bytes and may store private
|
|
* data past the first NUL-byte in this field. It is encouraged, but
|
|
* not mandatory, to use 'struct bootloader_control' described below.
|
|
*
|
|
* The update_channel field is used to store the Omaha update channel
|
|
* if update_engine is compiled with Omaha support.
|
|
*/
|
|
struct bootloader_message_ab {
|
|
struct bootloader_message message;
|
|
char slot_suffix[32];
|
|
char update_channel[128];
|
|
|
|
// Round up the entire struct to 4096-byte.
|
|
char reserved[1888];
|
|
};
|
|
|
|
#define BOOT_CTRL_MAGIC 0x42414342 /* Bootloader Control AB */
|
|
#define BOOT_CTRL_VERSION 1
|
|
|
|
typedef struct slot_metadata {
|
|
// Slot priority with 15 meaning highest priority, 1 lowest
|
|
// priority and 0 the slot is unbootable.
|
|
uint8_t priority : 4;
|
|
// Number of times left attempting to boot this slot.
|
|
uint8_t tries_remaining : 3;
|
|
// 1 if this slot has booted successfully, 0 otherwise.
|
|
uint8_t successful_boot : 1;
|
|
// 1 if this slot is corrupted from a dm-verity corruption, 0
|
|
// otherwise.
|
|
uint8_t verity_corrupted : 1;
|
|
// 0 init after ota; 1 slot boot success; 2 update boot1 ok
|
|
uint8_t uboot_status : 2;
|
|
// Reserved for further use.
|
|
uint8_t reserved : 5;
|
|
} slot_metadata;
|
|
|
|
/* Bootloader Control AB
|
|
*
|
|
* This struct can be used to manage A/B metadata. It is designed to
|
|
* be put in the 'slot_suffix' field of the 'bootloader_message'
|
|
* structure described above. It is encouraged to use the
|
|
* 'bootloader_control' structure to store the A/B metadata, but not
|
|
* mandatory.
|
|
*/
|
|
typedef struct bootloader_control {
|
|
// NUL terminated active slot suffix.
|
|
char slot_suffix[4];
|
|
// Bootloader Control AB magic number (see BOOT_CTRL_MAGIC).
|
|
uint32_t magic;
|
|
// Version of struct being used (see BOOT_CTRL_VERSION).
|
|
uint8_t version;
|
|
// Number of slots being managed.
|
|
uint8_t nb_slot : 3;
|
|
// Number of times left attempting to boot recovery.
|
|
uint8_t recovery_tries_remaining : 3;
|
|
// Status of any pending snapshot merge of dynamic partitions.
|
|
uint8_t merge_status : 3;
|
|
// Ensure 4-bytes alignment for slot_info field.
|
|
uint8_t roll_flag;
|
|
// Per-slot information. Up to 4 slots.
|
|
struct slot_metadata slot_info[4];
|
|
// Reserved for further use.
|
|
uint8_t merge_flag;
|
|
u8 firstboot;
|
|
u8 boot_tries_remaining;
|
|
u8 retest_times;
|
|
u8 reserved1[4];
|
|
// CRC32 of all 28 bytes preceding this field (little endian
|
|
// format).
|
|
uint32_t crc32_le;
|
|
}bootloader_control;
|
|
|
|
#define MISC_VIRTUAL_AB_MESSAGE_VERSION 2
|
|
#define MISC_VIRTUAL_AB_MAGIC_HEADER 0x56740AB0
|
|
|
|
#define BOOT_ATTEMPTS 4
|
|
|
|
/* Magic for the A/B struct when serialized. */
|
|
#define AVB_AB_MAGIC "\0AB0"
|
|
#define AVB_AB_MAGIC_LEN 4
|
|
|
|
/* Versioning for the on-disk A/B metadata - keep in sync with avbtool. */
|
|
#define AVB_AB_MAJOR_VERSION 1
|
|
#define AVB_AB_MINOR_VERSION 0
|
|
|
|
/* Size of AvbABData struct. */
|
|
#define AVB_AB_DATA_SIZE 32
|
|
|
|
/* Maximum values for slot data */
|
|
#define AVB_AB_MAX_PRIORITY 15
|
|
#define AVB_AB_MAX_TRIES_REMAINING 7
|
|
|
|
/* Struct used for recording per-slot metadata.
|
|
*
|
|
* When serialized, data is stored in network byte-order.
|
|
*/
|
|
typedef struct AvbABSlotData {
|
|
/* Slot priority. Valid values range from 0 to AVB_AB_MAX_PRIORITY,
|
|
* both inclusive with 1 being the lowest and AVB_AB_MAX_PRIORITY
|
|
* being the highest. The special value 0 is used to indicate the
|
|
* slot is unbootable.
|
|
*/
|
|
uint8_t priority;
|
|
|
|
/* Number of times left attempting to boot this slot ranging from 0
|
|
* to AVB_AB_MAX_TRIES_REMAINING.
|
|
*/
|
|
uint8_t tries_remaining;
|
|
|
|
/* Non-zero if this slot has booted successfully, 0 otherwise. */
|
|
uint8_t successful_boot;
|
|
|
|
/* Reserved for future use. */
|
|
uint8_t reserved[1];
|
|
} AvbABSlotData;
|
|
|
|
/* Struct used for recording A/B metadata.
|
|
*
|
|
* When serialized, data is stored in network byte-order.
|
|
*/
|
|
typedef struct AvbABData {
|
|
/* Magic number used for identification - see AVB_AB_MAGIC. */
|
|
uint8_t magic[AVB_AB_MAGIC_LEN];
|
|
|
|
/* Version of on-disk struct - see AVB_AB_{MAJOR,MINOR}_VERSION. */
|
|
uint8_t version_major;
|
|
uint8_t version_minor;
|
|
|
|
/* Padding to ensure |slots| field start eight bytes in. */
|
|
uint8_t reserved1[2];
|
|
|
|
/* Per-slot metadata. */
|
|
AvbABSlotData slots[2];
|
|
|
|
/* Reserved for future use. */
|
|
uint8_t reserved2[12];
|
|
|
|
/* CRC32 of all 28 bytes preceding this field. */
|
|
uint32_t crc32;
|
|
}AvbABData;
|
|
|
|
#ifdef CONFIG_UNIFY_BOOTLOADER
|
|
bootctl_func_handles vab_cmd_bootctrl_handles = {0};
|
|
#endif
|
|
|
|
static bootloader_control s_boot_ctrl_cache;
|
|
static bool s_boot_ctrl_initialized;
|
|
static char s_miscbuf_cache[MISCBUF_SIZE] = {0};
|
|
|
|
static void reboot_by_reason(unsigned int r)
|
|
{
|
|
struct arm_smccc_res res;
|
|
|
|
arm_smccc_smc(SET_REBOOT_REASON, r, 0, 0, 0, 0, 0, 0, &res);
|
|
|
|
if (res.a0)
|
|
printf("failed to set reboot reason\n");
|
|
|
|
run_command("wdt dev watchdog", 0);
|
|
run_command("wdt expire", 0);
|
|
}
|
|
|
|
static bool boot_info_validate(bootloader_control *info)
|
|
{
|
|
if (info->magic != BOOT_CTRL_MAGIC) {
|
|
printf("Magic 0x%x is incorrect.\n", info->magic);
|
|
return false;
|
|
}
|
|
return true;
|
|
}
|
|
|
|
bool boot_info_validate_normalAB(AvbABData* info)
|
|
{
|
|
if (memcmp(info->magic, AVB_AB_MAGIC, AVB_AB_MAGIC_LEN) != 0) {
|
|
printf("Magic %s is incorrect.\n", info->magic);
|
|
return false;
|
|
}
|
|
if (info->version_major > AVB_AB_MAJOR_VERSION) {
|
|
printf("No support for given major version.\n");
|
|
return false;
|
|
}
|
|
return true;
|
|
}
|
|
|
|
|
|
void boot_info_reset(bootloader_control* boot_ctrl)
|
|
{
|
|
int slot;
|
|
|
|
memset(boot_ctrl, '\0', sizeof(bootloader_control));
|
|
memcpy(boot_ctrl->slot_suffix, "_a", 2);
|
|
boot_ctrl->magic = BOOT_CTRL_MAGIC;
|
|
boot_ctrl->version = BOOT_CTRL_VERSION;
|
|
boot_ctrl->nb_slot = 2;
|
|
boot_ctrl->roll_flag = 0;
|
|
boot_ctrl->merge_flag = -1;
|
|
boot_ctrl->firstboot = 1;
|
|
boot_ctrl->boot_tries_remaining = BOOT_ATTEMPTS;
|
|
boot_ctrl->retest_times = 0;
|
|
|
|
for (slot = 0; slot < 4; ++slot) {
|
|
slot_metadata entry = {};
|
|
|
|
if (slot < boot_ctrl->nb_slot) {
|
|
entry.priority = 7;
|
|
entry.tries_remaining = 0;
|
|
entry.successful_boot = 0;
|
|
entry.uboot_status = 0;
|
|
} else {
|
|
entry.priority = 0; // Unbootable
|
|
entry.tries_remaining = 0;
|
|
entry.successful_boot = 0;
|
|
entry.uboot_status = 0;
|
|
}
|
|
|
|
boot_ctrl->slot_info[slot] = entry;
|
|
}
|
|
boot_ctrl->slot_info[0].priority = 15;
|
|
boot_ctrl->slot_info[0].tries_remaining = BOOT_ATTEMPTS;
|
|
boot_ctrl->slot_info[0].successful_boot = 1;
|
|
boot_ctrl->slot_info[0].uboot_status = 1;
|
|
boot_ctrl->recovery_tries_remaining = 0;
|
|
}
|
|
|
|
static void dump_boot_info(bootloader_control *boot_ctrl)
|
|
{
|
|
int loglevel = env_get_ulong("loglevel", 10, 0);
|
|
char *rebootmode = env_get("reboot_mode");
|
|
|
|
if (loglevel >= 9 &&
|
|
(rebootmode && strcmp(rebootmode, "fastboot"))) {
|
|
int slot;
|
|
|
|
printf("boot_ctrl->slot_suffix = %s\n", boot_ctrl->slot_suffix);
|
|
printf("boot_ctrl->magic = 0x%x\n", boot_ctrl->magic);
|
|
printf("boot_ctrl->version = %d\n", boot_ctrl->version);
|
|
printf("boot_ctrl->nb_slot = %d\n", boot_ctrl->nb_slot);
|
|
printf("boot_ctrl->firstboot = %d\n", boot_ctrl->firstboot);
|
|
printf("boot_ctrl->boot_tries_remaining = %d\n",
|
|
boot_ctrl->boot_tries_remaining);
|
|
printf("boot_ctrl->retest_times = %d\n",
|
|
boot_ctrl->retest_times);
|
|
for (slot = 0; slot < 4; ++slot) {
|
|
printf("boot_ctrl->slot_info[%d].priority = %d\n",
|
|
slot, boot_ctrl->slot_info[slot].priority);
|
|
printf("boot_ctrl->slot_info[%d].tries_remaining = %d\n",
|
|
slot, boot_ctrl->slot_info[slot].tries_remaining);
|
|
printf("boot_ctrl->slot_info[%d].successful_boot = %d\n",
|
|
slot, boot_ctrl->slot_info[slot].successful_boot);
|
|
printf("boot_ctrl->slot_info[%d].uboot_status = %d\n",
|
|
slot, boot_ctrl->slot_info[slot].uboot_status);
|
|
}
|
|
printf("boot_ctrl->recovery_tries_remaining = %d\n",
|
|
boot_ctrl->recovery_tries_remaining);
|
|
}
|
|
}
|
|
|
|
static bool slot_is_bootable(slot_metadata* slot) {
|
|
return slot->tries_remaining != 0;
|
|
}
|
|
|
|
static int get_active_slot(bootloader_control *info)
|
|
{
|
|
if (info->slot_info[0].priority > info->slot_info[1].priority) {
|
|
return 0;
|
|
} else if (info->slot_info[0].priority == info->slot_info[1].priority) {
|
|
if (info->slot_info[0].successful_boot == 1)
|
|
return 0;
|
|
else
|
|
return 1;
|
|
} else {
|
|
return 1;
|
|
}
|
|
}
|
|
|
|
int get_active_slot_normalAB(AvbABData* info) {
|
|
if (info->slots[0].priority > info->slots[1].priority)
|
|
return 0;
|
|
else
|
|
return 1;
|
|
}
|
|
|
|
static uint32_t vab_crc32(const uint8_t *buf, size_t size)
|
|
{
|
|
static uint32_t crc_table[256];
|
|
uint32_t ret = -1;
|
|
|
|
// Compute the CRC-32 table only once.
|
|
if (!crc_table[1]) {
|
|
for (uint32_t i = 0; i < 256; ++i) {
|
|
uint32_t crc = i;
|
|
|
|
for (uint32_t j = 0; j < 8; ++j) {
|
|
uint32_t mask = -(crc & 1);
|
|
|
|
crc = (crc >> 1) ^ (0xEDB88320 & mask);
|
|
}
|
|
crc_table[i] = crc;
|
|
}
|
|
}
|
|
|
|
for (size_t i = 0; i < size; ++i)
|
|
ret = (ret >> 8) ^ crc_table[(ret ^ buf[i]) & 0xFF];
|
|
|
|
return ~ret;
|
|
}
|
|
|
|
static int boot_info_set_active_slot(bootloader_control *bootctrl, int slot)
|
|
{
|
|
int i;
|
|
// Set every other slot with a lower priority than the new "active" slot.
|
|
const unsigned int kActivePriority = 15;
|
|
const unsigned int kActiveTries = 6;
|
|
|
|
for (i = 0; i < bootctrl->nb_slot; ++i) {
|
|
if (i != slot) {
|
|
//bootctrl->slot_info[i].priority -= 1;
|
|
if (bootctrl->slot_info[i].priority >= kActivePriority)
|
|
bootctrl->slot_info[i].priority = kActivePriority - 1;
|
|
}
|
|
printf("bootctrl->slot_info[%d].priority = %d\n", i,
|
|
bootctrl->slot_info[i].priority);
|
|
}
|
|
|
|
// Note that setting a slot as active doesn't change the successful bit.
|
|
// The successful bit will only be changed by setSlotAsUnbootable().
|
|
bootctrl->slot_info[slot].priority = kActivePriority;
|
|
bootctrl->slot_info[slot].tries_remaining = kActiveTries;
|
|
|
|
printf("bootctrl->slot_info[%d].priority = %d\n", slot,
|
|
bootctrl->slot_info[slot].priority);
|
|
printf("bootctrl->slot_info[%d].tries_remaining = %d\n",
|
|
slot, bootctrl->slot_info[slot].tries_remaining);
|
|
|
|
// Setting the current slot as active is a way to revert the operation that
|
|
// set *another* slot as active at the end of an updater. This is commonly
|
|
// used to cancel the pending update. We should only reset the verity_corrpted
|
|
// bit when attempting a new slot, otherwise the verity bit on the current
|
|
// slot would be flip.
|
|
if (slot != get_active_slot(bootctrl))
|
|
bootctrl->slot_info[slot].verity_corrupted = 0;
|
|
|
|
return 0;
|
|
}
|
|
|
|
static bool boot_info_load(bootloader_control *out_info, char *miscbuf)
|
|
{
|
|
memcpy(out_info, miscbuf + AB_METADATA_MISC_PARTITION_OFFSET, sizeof(bootloader_control));
|
|
dump_boot_info(out_info);
|
|
return true;
|
|
}
|
|
|
|
bool boot_info_load_normalAB(AvbABData *out_info, char *miscbuf)
|
|
{
|
|
memcpy(out_info, miscbuf + AB_METADATA_MISC_PARTITION_OFFSET, AVB_AB_DATA_SIZE);
|
|
return true;
|
|
}
|
|
|
|
static bool boot_info_save(bootloader_control *info, char *miscbuf)
|
|
{
|
|
char *partition = "misc";
|
|
int ret = 0;
|
|
|
|
printf("save boot-info\n");
|
|
info->crc32_le = vab_crc32((const uint8_t *)info,
|
|
sizeof(bootloader_control) - sizeof(uint32_t));
|
|
|
|
memcpy(miscbuf + AB_METADATA_MISC_PARTITION_OFFSET, info, sizeof(bootloader_control));
|
|
dump_boot_info(info);
|
|
|
|
#ifdef CONFIG_AML_MTD
|
|
enum boot_type_e device_boot_flag = store_get_type();
|
|
|
|
if (device_boot_flag == BOOT_NAND_NFTL || device_boot_flag == BOOT_NAND_MTD ||
|
|
device_boot_flag == BOOT_SNAND) {
|
|
int ret = 0;
|
|
|
|
ret = run_command("store erase misc 0 0x4000", 0);
|
|
if (ret != 0) {
|
|
printf("erase partition misc failed!\n");
|
|
return false;
|
|
}
|
|
}
|
|
#endif
|
|
|
|
ret = store_logic_write((const char *)partition, 0, MISCBUF_SIZE, (unsigned char *)miscbuf);
|
|
if (ret) {
|
|
printf("store logic write failed at %s\n", partition);
|
|
return false;
|
|
}
|
|
return true;
|
|
}
|
|
|
|
static int check_bootloader(int slot)
|
|
{
|
|
int i = 0;
|
|
int iRet = 0;
|
|
int ret = 0;
|
|
unsigned char *buffer_src = NULL;
|
|
int capacity_boot = 0;
|
|
char back_partname[32] = {0};
|
|
struct blk_desc *dev_desc;
|
|
gpt_header *gpt_h1;
|
|
gpt_header *gpt_h2;
|
|
const int SHA1SUMLEN = 20;
|
|
u8 gensum0[SHA1SUMLEN * 2];
|
|
u8 *gensum1 = gensum0 + SHA1SUMLEN;
|
|
|
|
#ifdef CONFIG_MMC_MESON_GX
|
|
struct mmc *mmc = NULL;
|
|
|
|
if (store_get_type() == BOOT_EMMC)
|
|
mmc = find_mmc_device(1);
|
|
|
|
if (mmc)
|
|
capacity_boot = mmc->capacity_boot;
|
|
#endif
|
|
|
|
printf("check_bootloader: %x\n", capacity_boot);
|
|
|
|
buffer_src = (unsigned char *)malloc(capacity_boot);
|
|
if (!buffer_src) {
|
|
printf("ERROR! fail to allocate memory ...\n");
|
|
goto exit;
|
|
}
|
|
memset(buffer_src, 0, capacity_boot);
|
|
|
|
if (slot == 0) {
|
|
strcpy((char *)back_partname, "bootloader_b");
|
|
} else if (slot == 1) {
|
|
strcpy((char *)back_partname, "bootloader_a");
|
|
}
|
|
|
|
iRet = store_boot_read("bootloader", 2,
|
|
BOOTLOADER_MAX_SIZE - BOOTLOADER_OFFSET, buffer_src);
|
|
if (iRet) {
|
|
printf("Fail read boot1\n");
|
|
goto exit;
|
|
}
|
|
|
|
sha1_csum(buffer_src + 512, capacity_boot - 512, gensum0);
|
|
|
|
memset(buffer_src, 0, capacity_boot);
|
|
|
|
iRet = store_logic_read(back_partname, 0,
|
|
BOOTLOADER_MAX_SIZE - BOOTLOADER_OFFSET, buffer_src);
|
|
if (iRet) {
|
|
printf("Fail read %s\n", back_partname);
|
|
goto exit;
|
|
}
|
|
|
|
for (i = 0; i < BOOTLOADER_CHECK_SIZE; i++) {
|
|
if (buffer_src[i] != 0x00)
|
|
break;
|
|
}
|
|
|
|
if (i == BOOTLOADER_CHECK_SIZE) {
|
|
printf("%s header 2048 is all zero, skip\n", back_partname);
|
|
goto exit;
|
|
}
|
|
|
|
sha1_csum(buffer_src + 512, capacity_boot - 512, gensum1);
|
|
|
|
ret = memcmp(gensum0, gensum1, SHA1SUMLEN);
|
|
|
|
printf("boot1 & %s %s same\n", back_partname, ret ? "NOT" : "DO");
|
|
|
|
#ifdef CONFIG_MMC_MESON_GX
|
|
dev_desc = blk_get_dev("mmc", 1);
|
|
if (dev_desc && dev_desc->type != DEV_TYPE_UNKNOWN) {
|
|
printf("valid mmc device, check gpt\n");
|
|
|
|
gpt_h1 = (void *)buffer_src + GPT_OFFSET +
|
|
(GPT_PRIMARY_PARTITION_TABLE_LBA *
|
|
dev_desc->blksz);
|
|
|
|
gpt_h2 = (void *)buffer_src + DTS_GPT_OFFSET +
|
|
(GPT_PRIMARY_PARTITION_TABLE_LBA *
|
|
dev_desc->blksz);
|
|
|
|
printf("gpt_h1 signature is: 0x%llX\n",
|
|
le64_to_cpu(gpt_h1->signature));
|
|
|
|
printf("gpt_h2 signature is: 0x%llX\n",
|
|
le64_to_cpu(gpt_h2->signature));
|
|
|
|
if (le64_to_cpu(gpt_h1->signature) == GPT_HEADER_SIGNATURE_UBOOT ||
|
|
le64_to_cpu(gpt_h2->signature) == GPT_HEADER_SIGNATURE_UBOOT) {
|
|
printf("backup slot has gpt, set dts_to_gpt to 0\n");
|
|
#if CONFIG_IS_ENABLED(AML_UPDATE_ENV)
|
|
env_set("dts_to_gpt", "0");
|
|
run_command("update_env_part -p dts_to_gpt;", 0);
|
|
#else
|
|
run_command("defenv_reserve;setenv dts_to_gpt 0;saveenv;", 0);
|
|
#endif
|
|
}
|
|
|
|
if (ret) {
|
|
printf("boot1 doesn't = %s, rewrite it\n", back_partname);
|
|
iRet = store_boot_write("bootloader", 2,
|
|
BOOTLOADER_MAX_SIZE - BOOTLOADER_OFFSET, buffer_src);
|
|
if (iRet) {
|
|
printf("Failed to write bootloader\n");
|
|
goto exit;
|
|
} else {
|
|
printf("write %s to boot1 ok\n", back_partname);
|
|
ret = 0;
|
|
}
|
|
}
|
|
}
|
|
#endif
|
|
|
|
exit:
|
|
if (buffer_src) {
|
|
free(buffer_src);
|
|
buffer_src = NULL;
|
|
}
|
|
return ret;
|
|
}
|
|
|
|
static int is_BootSame(int srcindex, int dstindex)
|
|
{
|
|
int iRet = 0;
|
|
int ret = -1;
|
|
unsigned char *buffer_src = NULL;
|
|
unsigned char *buffer_dest = NULL;
|
|
const int SHA1SUMLEN = 20;
|
|
u8 gensum0[SHA1SUMLEN * 2];
|
|
u8 *gensum1 = gensum0 + SHA1SUMLEN;
|
|
int capacity_boot = 0;
|
|
|
|
#ifdef CONFIG_MMC_MESON_GX
|
|
struct mmc *mmc = NULL;
|
|
|
|
if (store_get_type() == BOOT_EMMC)
|
|
mmc = find_mmc_device(1);
|
|
|
|
if (mmc)
|
|
capacity_boot = mmc->capacity_boot;
|
|
#endif
|
|
|
|
printf("is_BootSame_capacity_boot: %x\n", capacity_boot);
|
|
|
|
buffer_src = (unsigned char *)malloc(capacity_boot);
|
|
if (!buffer_src) {
|
|
printf("ERROR! fail to allocate memory ...\n");
|
|
goto exit;
|
|
}
|
|
memset(buffer_src, 0, capacity_boot);
|
|
|
|
iRet = store_boot_read("bootloader", srcindex, 0, buffer_src);
|
|
if (iRet) {
|
|
printf("Fail read bootloader %d\n", srcindex);
|
|
goto exit;
|
|
}
|
|
sha1_csum(buffer_src, capacity_boot, gensum0);
|
|
|
|
buffer_dest = buffer_src;
|
|
memset(buffer_dest, 0, capacity_boot);
|
|
iRet = store_boot_read("bootloader", dstindex, 0, buffer_dest);
|
|
if (iRet) {
|
|
printf("Fail read bootloader %d\n", dstindex);
|
|
goto exit;
|
|
}
|
|
sha1_csum(buffer_dest, capacity_boot, gensum1);
|
|
|
|
ret = memcmp(gensum0, gensum1, SHA1SUMLEN);
|
|
printf("bootloader %d & %d %s same\n", srcindex, dstindex, ret ? "NOT" : "DO");
|
|
|
|
exit:
|
|
if (buffer_src) {
|
|
free(buffer_src);
|
|
buffer_src = NULL;
|
|
}
|
|
return ret;
|
|
}
|
|
|
|
static int write_bootloader(int copy, int dstindex)
|
|
{
|
|
int iRet = 0;
|
|
int ret = -1;
|
|
unsigned char *buffer = NULL;
|
|
int capacity_boot = 0;
|
|
|
|
#ifdef CONFIG_MMC_MESON_GX
|
|
struct mmc *mmc = NULL;
|
|
|
|
if (store_get_type() == BOOT_EMMC)
|
|
mmc = find_mmc_device(1);
|
|
#endif
|
|
|
|
if (mmc)
|
|
capacity_boot = mmc->capacity_boot;
|
|
|
|
printf("write_bootloader_capacity_boot: %x\n", capacity_boot);
|
|
|
|
buffer = (unsigned char *)malloc(capacity_boot);
|
|
if (!buffer) {
|
|
printf("ERROR! fail to allocate memory ...\n");
|
|
goto exit;
|
|
}
|
|
memset(buffer, 0, capacity_boot);
|
|
printf("copy from boot%d to boot%d\n", copy, dstindex);
|
|
iRet = store_boot_read("bootloader", copy, 0, buffer);
|
|
if (iRet) {
|
|
printf("Fail read bootloader from rsv with sz\n");
|
|
goto exit;
|
|
}
|
|
iRet = store_boot_write("bootloader", dstindex, 0, buffer);
|
|
if (iRet) {
|
|
printf("Failed to write bootloader\n");
|
|
goto exit;
|
|
} else {
|
|
ret = 0;
|
|
}
|
|
|
|
exit:
|
|
if (buffer) {
|
|
free(buffer);
|
|
buffer = NULL;
|
|
}
|
|
return ret;
|
|
}
|
|
|
|
static void set_ddr_size(void)
|
|
{
|
|
char ddr_size_str[32];
|
|
ulong ddr_size = (readl(SYSCTRL_SEC_STATUS_REG4) & ~0xfffffUL) << 4;
|
|
|
|
memset(ddr_size_str, 0, 32);
|
|
ddr_size = ddr_size / SZ_1M;
|
|
|
|
sprintf(ddr_size_str, "%lu%s", ddr_size, "MiB");
|
|
debug("ddr_size_str = %s\n", ddr_size_str);
|
|
env_set("ddr_size", ddr_size_str);
|
|
}
|
|
|
|
static void update_after_failed_rollback(void)
|
|
{
|
|
run_command("run init_display; run storeargs; run enter_fastboot;", 0);
|
|
}
|
|
|
|
void rollback_failure_handler(void) __attribute__((weak, alias("update_after_failed_rollback")));
|
|
|
|
static void boot_ctrl_init_once(void)
|
|
{
|
|
if (s_boot_ctrl_initialized)
|
|
return;
|
|
|
|
boot_info_open_partition(s_miscbuf_cache);
|
|
boot_info_load(&s_boot_ctrl_cache, s_miscbuf_cache);
|
|
|
|
if (!boot_info_validate(&s_boot_ctrl_cache)) {
|
|
printf("boot-info virtual ab is invalid. Try normal ab.\n");
|
|
AvbABData info;
|
|
|
|
boot_info_load_normalAB(&info, s_miscbuf_cache);
|
|
if (!boot_info_validate_normalAB(&info)) {
|
|
printf("boot-info is invalid. Resetting.\n");
|
|
boot_info_reset(&s_boot_ctrl_cache);
|
|
boot_info_save(&s_boot_ctrl_cache, s_miscbuf_cache);
|
|
} else {
|
|
printf("update from normal ab to virtual ab\n");
|
|
env_set("normal_to_virtual", "1");
|
|
|
|
boot_info_reset(&s_boot_ctrl_cache);
|
|
s_boot_ctrl_cache.slot_info[0].successful_boot =
|
|
info.slots[0].successful_boot;
|
|
s_boot_ctrl_cache.slot_info[1].successful_boot =
|
|
info.slots[1].successful_boot;
|
|
int slot = get_active_slot_normalAB(&info);
|
|
|
|
boot_info_set_active_slot(&s_boot_ctrl_cache, slot);
|
|
boot_info_save(&s_boot_ctrl_cache, s_miscbuf_cache);
|
|
}
|
|
}
|
|
|
|
s_boot_ctrl_initialized = true;
|
|
}
|
|
|
|
static int do_GetValidSlot(
|
|
cmd_tbl_t *cmdtp,
|
|
int flag,
|
|
int argc,
|
|
char * const argv[])
|
|
{
|
|
boot_ctrl_init_once();
|
|
|
|
bootloader_control *boot_ctrl = &s_boot_ctrl_cache;
|
|
char *miscbuf = s_miscbuf_cache;
|
|
int slot;
|
|
bool bootable_a, bootable_b;
|
|
bool nocs_mode = false;
|
|
char *rebootmode = env_get("reboot_mode");
|
|
|
|
if (argc != 1)
|
|
return cmd_usage(cmdtp);
|
|
|
|
set_ddr_size();
|
|
|
|
slot = get_active_slot(boot_ctrl);
|
|
printf("active slot = %d\n", slot);
|
|
bootable_a = slot_is_bootable(&boot_ctrl->slot_info[0]);
|
|
bootable_b = slot_is_bootable(&boot_ctrl->slot_info[1]);
|
|
|
|
if (dynamic_partition)
|
|
env_set("partition_mode", "dynamic");
|
|
else
|
|
env_set("partition_mode", "normal");
|
|
|
|
if (gpt_partition)
|
|
env_set("gpt_mode", "true");
|
|
else
|
|
env_set("gpt_mode", "false");
|
|
|
|
if (vendor_boot_partition) {
|
|
env_set("vendor_boot_mode", "true");
|
|
printf("set vendor_boot_mode true\n");
|
|
} else {
|
|
env_set("vendor_boot_mode", "false");
|
|
printf("set vendor_boot_mode false\n");
|
|
}
|
|
|
|
if (slot == 0) {
|
|
if (bootable_a) {
|
|
if (has_boot_slot == 1) {
|
|
env_set("active_slot", "_a");
|
|
env_set("boot_part", "boot_a");
|
|
env_set("recovery_part", "recovery_a");
|
|
env_set("slot-suffixes", "0");
|
|
} else {
|
|
env_set("active_slot", "normal");
|
|
env_set("boot_part", "boot");
|
|
env_set("recovery_part", "recovery");
|
|
env_set("slot-suffixes", "-1");
|
|
}
|
|
return 0;
|
|
} else if (bootable_b) {
|
|
printf("slot a is unbootable, back to b\n");
|
|
char *reason = env_get("rollback_reason");
|
|
|
|
if (reason && (strcmp(reason, "kernel_panic") == 0))
|
|
env_set("rollback_reason", "kernel_panic");
|
|
else if (reason && (strcmp(reason, "insufficient_data") == 0))
|
|
env_set("rollback_reason", "insufficient_data");
|
|
else
|
|
env_set("rollback_reason", "boot_failure");
|
|
#if CONFIG_IS_ENABLED(AML_UPDATE_ENV)
|
|
run_command("update_env_part -p rollback_reason;", 0);
|
|
#else
|
|
run_command("saveenv", 0);
|
|
#endif
|
|
if (gpt_partition || nocs_mode)
|
|
check_bootloader(0);
|
|
boot_ctrl->roll_flag = 1;
|
|
boot_info_save(boot_ctrl, miscbuf);
|
|
run_command("set_active_slot b", 0);
|
|
env_set("update_env", "1");
|
|
env_set("reboot_status", "reboot_next");
|
|
|
|
#if defined(CONFIG_EFUSE_OBJ_API) && defined(CONFIG_CMD_EFUSE)
|
|
run_command("efuse_obj get FEAT_DISABLE_EMMC_USER", 0);
|
|
if (*efuse_field.data == 1)
|
|
nocs_mode = true;
|
|
#endif//#ifdef CONFIG_EFUSE_OBJ_API
|
|
if (gpt_partition || nocs_mode) {
|
|
printf("gpt or nocs mode\n");
|
|
write_bootloader(2, 1);
|
|
env_set("expect_index", "1");
|
|
} else {
|
|
printf("normal mode\n");
|
|
write_bootloader(2, 0);
|
|
env_set("expect_index", "0");
|
|
}
|
|
run_command("saveenv", 0);
|
|
if (rebootmode && (strcmp(rebootmode, "quiescent") == 0))
|
|
reboot_by_reason(AMLOGIC_QUIESCENT_REBOOT);
|
|
else
|
|
reboot_by_reason(AMLOGIC_NORMAL_BOOT);
|
|
} else {
|
|
boot_info_reset(boot_ctrl);
|
|
boot_info_save(boot_ctrl, miscbuf);
|
|
rollback_failure_handler();
|
|
}
|
|
}
|
|
|
|
if (slot == 1) {
|
|
if (bootable_b) {
|
|
if (has_boot_slot == 1) {
|
|
env_set("active_slot", "_b");
|
|
env_set("boot_part", "boot_b");
|
|
env_set("recovery_part", "recovery_b");
|
|
env_set("slot-suffixes", "1");
|
|
} else {
|
|
env_set("active_slot", "normal");
|
|
env_set("boot_part", "boot");
|
|
env_set("recovery_part", "recovery");
|
|
env_set("slot-suffixes", "-1");
|
|
}
|
|
return 0;
|
|
} else if (bootable_a) {
|
|
printf("slot b is unbootable, back to a\n");
|
|
char *reason = env_get("rollback_reason");
|
|
|
|
if (reason && (strcmp(reason, "kernel_panic") == 0))
|
|
env_set("rollback_reason", "kernel_panic");
|
|
else if (reason && (strcmp(reason, "insufficient_data") == 0))
|
|
env_set("rollback_reason", "insufficient_data");
|
|
else
|
|
env_set("rollback_reason", "boot_failure");
|
|
#if CONFIG_IS_ENABLED(AML_UPDATE_ENV)
|
|
run_command("update_env_part -p rollback_reason;", 0);
|
|
#else
|
|
run_command("saveenv", 0);
|
|
#endif
|
|
if (gpt_partition || nocs_mode)
|
|
check_bootloader(1);
|
|
boot_ctrl->roll_flag = 1;
|
|
boot_info_save(boot_ctrl, miscbuf);
|
|
run_command("set_active_slot a", 0);
|
|
env_set("update_env", "1");
|
|
env_set("reboot_status", "reboot_next");
|
|
|
|
#if defined(CONFIG_EFUSE_OBJ_API) && defined(CONFIG_CMD_EFUSE)
|
|
run_command("efuse_obj get FEAT_DISABLE_EMMC_USER", 0);
|
|
if (*efuse_field.data == 1)
|
|
nocs_mode = true;
|
|
#endif//#ifdef CONFIG_EFUSE_OBJ_API
|
|
if (gpt_partition || nocs_mode) {
|
|
printf("gpt or nocs mode\n");
|
|
write_bootloader(2, 1);
|
|
env_set("expect_index", "1");
|
|
} else {
|
|
printf("normal mode\n");
|
|
write_bootloader(1, 0);
|
|
env_set("expect_index", "0");
|
|
}
|
|
run_command("saveenv", 0);
|
|
if (rebootmode && (strcmp(rebootmode, "quiescent") == 0))
|
|
reboot_by_reason(AMLOGIC_QUIESCENT_REBOOT);
|
|
else
|
|
reboot_by_reason(AMLOGIC_NORMAL_BOOT);
|
|
} else {
|
|
boot_info_reset(boot_ctrl);
|
|
boot_info_save(boot_ctrl, miscbuf);
|
|
rollback_failure_handler();
|
|
}
|
|
}
|
|
|
|
return 0;
|
|
}
|
|
|
|
static int do_SetActiveSlot(
|
|
cmd_tbl_t *cmdtp,
|
|
int flag,
|
|
int argc,
|
|
char * const argv[])
|
|
{
|
|
boot_ctrl_init_once();
|
|
|
|
bootloader_control *info = &s_boot_ctrl_cache;
|
|
char *miscbuf = s_miscbuf_cache;
|
|
|
|
if (argc != 2)
|
|
return cmd_usage(cmdtp);
|
|
|
|
if (has_boot_slot == 0) {
|
|
printf("device is not ab mode\n");
|
|
return -1;
|
|
}
|
|
|
|
if (strcmp(argv[1], "a") == 0) {
|
|
env_set("active_slot", "_a");
|
|
env_set("slot-suffixes", "0");
|
|
env_set("boot_part", "boot_a");
|
|
env_set("recovery_part", "recovery_a");
|
|
printf("set active slot a\n");
|
|
boot_info_set_active_slot(info, 0);
|
|
} else if (strcmp(argv[1], "b") == 0) {
|
|
env_set("active_slot", "_b");
|
|
env_set("slot-suffixes", "1");
|
|
env_set("boot_part", "boot_b");
|
|
env_set("recovery_part", "recovery_b");
|
|
printf("set active slot b\n");
|
|
boot_info_set_active_slot(info, 1);
|
|
} else {
|
|
printf("error input slot\n");
|
|
return -1;
|
|
}
|
|
|
|
boot_info_save(info, miscbuf);
|
|
|
|
printf("info.roll_flag = %d\n", info->roll_flag);
|
|
|
|
if (!gpt_partition && info->roll_flag == 1) {
|
|
printf("if null gpt, write dtb back when rollback\n");
|
|
if (run_command("imgread dtb ${boot_part} ${dtb_mem_addr}", 0)) {
|
|
printf("Fail in load dtb\n");
|
|
} else {
|
|
printf("write dtb back\n");
|
|
run_command("emmc dtb_write ${dtb_mem_addr} 0", 0);
|
|
}
|
|
}
|
|
|
|
return 0;
|
|
}
|
|
|
|
static int do_SetRollFlag
|
|
(cmd_tbl_t *cmdtp,
|
|
int flag,
|
|
int argc,
|
|
char * const argv[])
|
|
{
|
|
boot_ctrl_init_once();
|
|
|
|
bootloader_control *info = &s_boot_ctrl_cache;
|
|
char *miscbuf = s_miscbuf_cache;
|
|
|
|
if (argc != 2)
|
|
return cmd_usage(cmdtp);
|
|
|
|
if (has_boot_slot == 0) {
|
|
printf("device is not ab mode\n");
|
|
return -1;
|
|
}
|
|
|
|
if (strcmp(argv[1], "1") == 0)
|
|
info->roll_flag = 1;
|
|
else
|
|
info->roll_flag = 0;
|
|
|
|
boot_info_save(info, miscbuf);
|
|
|
|
printf("set info.roll_flag = %d\n", info->roll_flag);
|
|
|
|
return 0;
|
|
}
|
|
|
|
static int do_CheckUbootState
|
|
(cmd_tbl_t *cmdtp,
|
|
int flag,
|
|
int argc,
|
|
char * const argv[])
|
|
{
|
|
boot_ctrl_init_once();
|
|
|
|
bootloader_control *info = &s_boot_ctrl_cache;
|
|
char *miscbuf = s_miscbuf_cache;
|
|
int active_slot, backup_slot;
|
|
int ret = -1;
|
|
|
|
if (argc != 2)
|
|
return cmd_usage(cmdtp);
|
|
|
|
if (has_boot_slot == 0) {
|
|
printf("device is not ab mode\n");
|
|
return -1;
|
|
}
|
|
|
|
if (strcmp(argv[1], "1") == 0) {
|
|
check_bootloader(1);
|
|
} else if (strcmp(argv[1], "0") == 0) {
|
|
check_bootloader(0);
|
|
} else if (strcmp(argv[1], "boot1") == 0) {
|
|
char *bootloaderindex = NULL;
|
|
|
|
bootloaderindex = env_get("forUpgrade_bootloaderIndex");
|
|
/*if boot from boot1, means boot0 is bab, don't need to check uboot state*/
|
|
if (bootloaderindex && (strcmp(bootloaderindex, "2") == 0))
|
|
return 0;
|
|
|
|
active_slot = get_active_slot(info);
|
|
if (active_slot == 1)
|
|
backup_slot = 0;
|
|
else
|
|
backup_slot = 1;
|
|
if (info->slot_info[backup_slot].successful_boot == 1 &&
|
|
info->slot_info[backup_slot].uboot_status != 2) {
|
|
if (gpt_partition) {
|
|
printf("check if boot0 = boot1\n");
|
|
ret = is_BootSame(1, 2);
|
|
if (ret) {
|
|
printf("boot0 doesn't = boot1, write boot0 to boot1\n");
|
|
write_bootloader(1, 2);
|
|
printf("after write boot0 to boot1\n");
|
|
}
|
|
info->slot_info[backup_slot].uboot_status = 2;
|
|
boot_info_save(info, miscbuf);
|
|
}
|
|
}
|
|
}
|
|
|
|
return 0;
|
|
}
|
|
|
|
static int do_SetUpdateTries(
|
|
cmd_tbl_t *cmdtp,
|
|
int flag,
|
|
int argc,
|
|
char * const argv[])
|
|
{
|
|
boot_ctrl_init_once();
|
|
|
|
bootloader_control *boot_ctrl = &s_boot_ctrl_cache;
|
|
char *miscbuf = s_miscbuf_cache;
|
|
bool bootable_a, bootable_b;
|
|
int slot;
|
|
int ret = -1;
|
|
bool nocs_mode = false;
|
|
int update_flag = 0;
|
|
int success_flag = -1;
|
|
int merge_ret = -1;
|
|
char *rebootmode = env_get("reboot_mode");
|
|
|
|
if (has_boot_slot == 0) {
|
|
printf("device is not ab mode\n");
|
|
return -1;
|
|
}
|
|
|
|
slot = get_active_slot(boot_ctrl);
|
|
bootable_a = slot_is_bootable(&boot_ctrl->slot_info[0]);
|
|
bootable_b = slot_is_bootable(&boot_ctrl->slot_info[1]);
|
|
|
|
if (slot == 0) {
|
|
if (bootable_a) {
|
|
if (boot_ctrl->slot_info[0].successful_boot == 0) {
|
|
success_flag = 0;
|
|
if (rebootmode && strcmp(rebootmode, "fastboot") &&
|
|
strcmp(rebootmode, "factory_reboot") &&
|
|
strcmp(rebootmode, "bist_reboot")) {
|
|
boot_ctrl->slot_info[0].tries_remaining -= 1;
|
|
update_flag = 1;
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
if (slot == 1) {
|
|
if (bootable_b) {
|
|
if (boot_ctrl->slot_info[1].successful_boot == 0) {
|
|
success_flag = 0;
|
|
if (rebootmode && strcmp(rebootmode, "fastboot") &&
|
|
strcmp(rebootmode, "factory_reboot") &&
|
|
strcmp(rebootmode, "bist_reboot")) {
|
|
boot_ctrl->slot_info[1].tries_remaining -= 1;
|
|
update_flag = 1;
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
if (boot_ctrl->firstboot == 1) {
|
|
if (rebootmode && strcmp(rebootmode, "fastboot") &&
|
|
strcmp(rebootmode, "factory_reset") &&
|
|
strcmp(rebootmode, "factory_reboot") &&
|
|
strcmp(rebootmode, "bist_reboot")) {
|
|
boot_ctrl->boot_tries_remaining -= 1;
|
|
update_flag = 1;
|
|
}
|
|
}
|
|
|
|
debug("boot_ctrl->merge_flag = %d\n", boot_ctrl->merge_flag);
|
|
|
|
if (update_flag == 1)
|
|
boot_info_save(boot_ctrl, miscbuf);
|
|
|
|
char *insufficient_data = env_get("insufficient_data");
|
|
|
|
debug("insufficient_data : %s\n", insufficient_data);
|
|
if (insufficient_data && !strcmp(insufficient_data, "1") &&
|
|
!strcmp(rebootmode, "kernel_panic")) {
|
|
printf("Insufficient data space, rollback\n");
|
|
env_set("insufficient_data", "0");
|
|
env_set("rollback_reason", "insufficient_data");
|
|
#if CONFIG_IS_ENABLED(AML_UPDATE_ENV)
|
|
run_command("update_env_part -p insufficient_data rollback_reason;", 0);
|
|
#else
|
|
run_command("saveenv", 0);
|
|
#endif
|
|
|
|
if (slot == 0 && bootable_a) {
|
|
if (boot_ctrl->slot_info[0].successful_boot == 0)
|
|
boot_ctrl->slot_info[0].tries_remaining = 0;
|
|
} else if (slot == 1 && bootable_b) {
|
|
if (boot_ctrl->slot_info[1].successful_boot == 0)
|
|
boot_ctrl->slot_info[1].tries_remaining = 0;
|
|
}
|
|
boot_info_save(boot_ctrl, miscbuf);
|
|
if (rebootmode && (strcmp(rebootmode, "quiescent") == 0))
|
|
reboot_by_reason(AMLOGIC_QUIESCENT_REBOOT);
|
|
else
|
|
reboot_by_reason(AMLOGIC_NORMAL_BOOT);
|
|
}
|
|
|
|
if (boot_ctrl->merge_flag == SNAPSHOTTED) {
|
|
printf("merge_flag is SNAPSHOTTED\n");
|
|
merge_ret = 1;
|
|
}
|
|
|
|
if (rebootmode && (!strcmp(rebootmode, "fastboot") ||
|
|
!strcmp(rebootmode, "kernel_panic")) &&
|
|
success_flag == 0 &&
|
|
merge_ret == 1) {
|
|
printf("reboot bootloader during merge, rollback\n");
|
|
|
|
env_set("rollback_reason", "kernel_panic");
|
|
#if CONFIG_IS_ENABLED(AML_UPDATE_ENV)
|
|
run_command("update_env_part -p rollback_reason;", 0);
|
|
#else
|
|
run_command("saveenv", 0);
|
|
#endif
|
|
if (slot == 0 && bootable_a) {
|
|
if (boot_ctrl->slot_info[0].successful_boot == 0)
|
|
boot_ctrl->slot_info[0].tries_remaining = 0;
|
|
} else if (slot == 1 && bootable_b) {
|
|
if (boot_ctrl->slot_info[1].successful_boot == 0)
|
|
boot_ctrl->slot_info[1].tries_remaining = 0;
|
|
}
|
|
boot_info_save(boot_ctrl, miscbuf);
|
|
if (rebootmode && (strcmp(rebootmode, "quiescent") == 0))
|
|
reboot_by_reason(AMLOGIC_QUIESCENT_REBOOT);
|
|
else
|
|
reboot_by_reason(AMLOGIC_NORMAL_BOOT);
|
|
}
|
|
|
|
debug("boot_ctrl->roll_flag = %d\n", boot_ctrl->roll_flag);
|
|
if (boot_ctrl->roll_flag == 1)
|
|
env_set("rollback_flag", "1");
|
|
|
|
#if defined(CONFIG_EFUSE_OBJ_API) && defined(CONFIG_CMD_EFUSE)
|
|
run_command("efuse_obj get FEAT_DISABLE_EMMC_USER", 0);
|
|
if (*efuse_field.data == 1)
|
|
nocs_mode = true;
|
|
#endif//#ifdef CONFIG_EFUSE_OBJ_API
|
|
|
|
if (boot_ctrl->slot_info[slot].successful_boot == 1 &&
|
|
boot_ctrl->slot_info[slot].uboot_status != 2) {
|
|
if (gpt_partition || nocs_mode) {
|
|
char *bootloaderindex = NULL;
|
|
|
|
printf("current slot %d is successful_boot\n", slot);
|
|
bootloaderindex = env_get("forUpgrade_bootloaderIndex");
|
|
printf("bootloaderindex: %s\n", bootloaderindex);
|
|
|
|
#ifdef CONFIG_BURN_KEY
|
|
char *factorytest = env_get("factorytest");
|
|
|
|
if (factorytest && (strcmp(factorytest, "1") == 0)) {
|
|
printf("factory burn mode, stop sync boot0 & boot1\n");
|
|
return 0;
|
|
}
|
|
#endif
|
|
|
|
/*if boot from boot1, means boot0 is bab, don't need to copyback*/
|
|
if (bootloaderindex && strcmp(bootloaderindex, "2")) {
|
|
printf("check if boot0 = boot1\n");
|
|
ret = is_BootSame(1, 2);
|
|
if (ret) {
|
|
printf("boot0 doesn't = boot1, write boot0 to boot1\n");
|
|
write_bootloader(1, 2);
|
|
printf("after write boot0 to boot1\n");
|
|
}
|
|
boot_ctrl->slot_info[slot].uboot_status = 2;
|
|
boot_info_save(boot_ctrl, miscbuf);
|
|
}
|
|
}
|
|
}
|
|
|
|
bootable_a = slot_is_bootable(&boot_ctrl->slot_info[0]);
|
|
bootable_b = slot_is_bootable(&boot_ctrl->slot_info[1]);
|
|
if ((!bootable_a && !bootable_b) ||
|
|
(boot_ctrl->firstboot == 1 && boot_ctrl->boot_tries_remaining <= 0)) {
|
|
printf("both a & b can't bootup, enter fastboot\n");
|
|
boot_info_reset(boot_ctrl);
|
|
boot_info_save(boot_ctrl, miscbuf);
|
|
run_command("run init_display; run storeargs; run enter_fastboot;", 0);
|
|
}
|
|
|
|
return 0;
|
|
}
|
|
|
|
static int do_CheckABState(cmd_tbl_t *cmdtp,
|
|
int flag,
|
|
int argc,
|
|
char * const argv[])
|
|
{
|
|
boot_ctrl_init_once();
|
|
|
|
bootloader_control *boot_ctrl = &s_boot_ctrl_cache;
|
|
bool bootable_a, bootable_b;
|
|
int slot;
|
|
int retry_times = 0;
|
|
char *rebootmode = env_get("reboot_mode");
|
|
|
|
if (has_boot_slot == 0) {
|
|
printf("device is not ab mode\n");
|
|
return -1;
|
|
}
|
|
|
|
slot = get_active_slot(boot_ctrl);
|
|
bootable_a = slot_is_bootable(&boot_ctrl->slot_info[0]);
|
|
bootable_b = slot_is_bootable(&boot_ctrl->slot_info[1]);
|
|
|
|
if ((slot == 0 && bootable_a &&
|
|
boot_ctrl->slot_info[0].successful_boot == 1) ||
|
|
(slot == 1 && bootable_b &&
|
|
boot_ctrl->slot_info[1].successful_boot == 1) ||
|
|
(!bootable_a && !bootable_b))
|
|
return 0;
|
|
|
|
if (slot == 0 && bootable_a &&
|
|
boot_ctrl->slot_info[0].successful_boot == 0)
|
|
retry_times = boot_ctrl->slot_info[0].tries_remaining;
|
|
|
|
if (slot == 1 && bootable_b &&
|
|
boot_ctrl->slot_info[1].successful_boot == 0)
|
|
retry_times = boot_ctrl->slot_info[1].tries_remaining;
|
|
|
|
printf("ab update mode, try %d times again\n", retry_times + 1);
|
|
if (rebootmode && (strcmp(rebootmode, "quiescent") == 0))
|
|
reboot_by_reason(AMLOGIC_QUIESCENT_REBOOT);
|
|
else
|
|
reboot_by_reason(AMLOGIC_NORMAL_BOOT);
|
|
return 0;
|
|
}
|
|
|
|
static int do_CopySlot(
|
|
cmd_tbl_t *cmdtp,
|
|
int flag,
|
|
int argc,
|
|
char * const argv[])
|
|
{
|
|
boot_ctrl_init_once();
|
|
|
|
bootloader_control *boot_ctrl = &s_boot_ctrl_cache;
|
|
int copy = -1;
|
|
int dest = -1;
|
|
|
|
if (strcmp(argv[1], "1") == 0)
|
|
copy = 1;
|
|
else if (strcmp(argv[1], "2") == 0)
|
|
copy = 2;
|
|
else if (strcmp(argv[1], "0") == 0)
|
|
copy = 0;
|
|
|
|
if (strcmp(argv[2], "1") == 0)
|
|
dest = 1;
|
|
else if (strcmp(argv[2], "2") == 0)
|
|
dest = 2;
|
|
else if (strcmp(argv[2], "0") == 0)
|
|
dest = 0;
|
|
|
|
#ifdef CONFIG_BURN_KEY
|
|
char *factorytest = env_get("factorytest");
|
|
|
|
if (factorytest && (strcmp(factorytest, "1") == 0)) {
|
|
write_bootloader(copy, dest);
|
|
return 0;
|
|
}
|
|
#endif
|
|
|
|
char *fastboot_step = env_get("fastboot_step");
|
|
|
|
if (copy == 1) {
|
|
if ((fastboot_step && (strcmp(fastboot_step, "2") == 0)) ||
|
|
boot_ctrl->slot_info[0].successful_boot == 1)
|
|
write_bootloader(copy, dest);
|
|
} else if (copy == 2) {
|
|
if ((fastboot_step && (strcmp(fastboot_step, "2") == 0)) ||
|
|
boot_ctrl->slot_info[1].successful_boot == 1) {
|
|
write_bootloader(copy, dest);
|
|
} else {
|
|
env_set("update_env", "1");
|
|
env_set("reboot_status", "reboot_next");
|
|
env_set("expect_index", "2");
|
|
run_command("saveenv", 0);
|
|
}
|
|
}
|
|
|
|
return 0;
|
|
}
|
|
|
|
static int do_GetSystemMode(cmd_tbl_t *cmdtp, int flag, int argc, char * const argv[])
|
|
{
|
|
#ifdef CONFIG_SYSTEM_AS_ROOT
|
|
env_set("system_mode", "1");
|
|
#else
|
|
env_set("system_mode", "0");
|
|
#endif
|
|
|
|
return 0;
|
|
}
|
|
|
|
static int do_UpdateDt(cmd_tbl_t *cmdtp, int flag, int argc, char * const argv[])
|
|
{
|
|
char *update_dt = env_get("update_dt");
|
|
char *rebootmode = env_get("reboot_mode");
|
|
|
|
if (update_dt && (!strcmp(update_dt, "1"))) {
|
|
printf("write dtb from ${boot_part}\n");
|
|
run_command("imgread dtb ${boot_part} ${dtb_mem_addr}", 0);
|
|
run_command("emmc dtb_write ${dtb_mem_addr} 0", 0);
|
|
|
|
env_set("update_dt", "0");
|
|
#if CONFIG_IS_ENABLED(AML_UPDATE_ENV)
|
|
run_command("update_env_part -p update_dt;", 0);
|
|
#else
|
|
run_command("saveenv", 0);
|
|
#endif
|
|
|
|
char *part_changed = env_get("part_changed");
|
|
if (part_changed && (!strcmp(part_changed, "1"))) {
|
|
env_set("part_changed", "0");
|
|
#if CONFIG_IS_ENABLED(AML_UPDATE_ENV)
|
|
run_command("update_env_part -p part_changed;", 0);
|
|
#else
|
|
run_command("saveenv", 0);
|
|
#endif
|
|
|
|
printf("part changes, reset\n");
|
|
if (rebootmode && (strcmp(rebootmode, "quiescent") == 0))
|
|
reboot_by_reason(AMLOGIC_QUIESCENT_REBOOT);
|
|
else
|
|
reboot_by_reason(AMLOGIC_NORMAL_BOOT);
|
|
}
|
|
}
|
|
return 0;
|
|
}
|
|
|
|
#endif /* CONFIG_BOOTLOADER_CONTROL_BLOCK */
|
|
|
|
#ifdef CONFIG_UNIFY_BOOTLOADER
|
|
bootctl_func_handles *get_bootctl_cmd_func_vab(void)
|
|
{
|
|
vab_cmd_bootctrl_handles.do_GetValidSlot_func = do_GetValidSlot;
|
|
vab_cmd_bootctrl_handles.do_SetActiveSlot_func = do_SetActiveSlot;
|
|
vab_cmd_bootctrl_handles.do_SetRollFlag_func = do_SetRollFlag;
|
|
vab_cmd_bootctrl_handles.do_CopySlot_func = do_CopySlot;
|
|
vab_cmd_bootctrl_handles.do_SetUpdateTries_func = do_SetUpdateTries;
|
|
vab_cmd_bootctrl_handles.do_GetSystemMode_func = do_GetSystemMode;
|
|
vab_cmd_bootctrl_handles.do_UpdateDt_func = do_UpdateDt;
|
|
vab_cmd_bootctrl_handles.do_CheckABState_func = do_CheckABState;
|
|
|
|
return &vab_cmd_bootctrl_handles;
|
|
}
|
|
|
|
#else
|
|
|
|
U_BOOT_CMD(
|
|
get_valid_slot, 2, 0, do_GetValidSlot,
|
|
"get_valid_slot",
|
|
"\nThis command will choose valid slot to boot up which saved in misc\n"
|
|
"partition by mark to decide whether execute command!\n"
|
|
"So you can execute command: get_valid_slot"
|
|
);
|
|
|
|
U_BOOT_CMD(
|
|
set_active_slot, 2, 1, do_SetActiveSlot,
|
|
"set_active_slot",
|
|
"\nThis command will set active slot\n"
|
|
"So you can execute command: set_active_slot a"
|
|
);
|
|
|
|
U_BOOT_CMD(
|
|
set_roll_flag, 2, 1, do_SetRollFlag,
|
|
"set_roll_flag",
|
|
"\nThis command will set active slot\n"
|
|
"So you can execute command: set_active_slot a"
|
|
);
|
|
|
|
U_BOOT_CMD(
|
|
check_uboot_state, 2, 1, do_CheckUbootState,
|
|
"check_uboot_state",
|
|
"\nThis command will check_uboot_state\n"
|
|
"So you can execute command: check_uboot_state 0"
|
|
);
|
|
|
|
U_BOOT_CMD
|
|
(copy_slot_bootable, 3, 1, do_CopySlot,
|
|
"copy_slot_bootable",
|
|
"\nThis command will set active slot\n"
|
|
"So you can execute command: copy_slot_bootable 2 1"
|
|
);
|
|
|
|
U_BOOT_CMD
|
|
(check_ab, 2, 0, do_CheckABState,
|
|
"check_ab",
|
|
"\nThis command will check ab sate\n"
|
|
"So you can execute command: check_ab"
|
|
);
|
|
|
|
U_BOOT_CMD(
|
|
update_tries, 2, 0, do_SetUpdateTries,
|
|
"update_tries",
|
|
"\nThis command will change tries_remaining in misc\n"
|
|
"So you can execute command: update_tries"
|
|
);
|
|
|
|
U_BOOT_CMD(
|
|
get_system_as_root_mode, 1, 0, do_GetSystemMode,
|
|
"get_system_as_root_mode",
|
|
"\nThis command will get system_as_root_mode\n"
|
|
"So you can execute command: get_system_as_root_mode"
|
|
);
|
|
|
|
U_BOOT_CMD
|
|
(update_dt, 1, 0, do_UpdateDt,
|
|
"update_dt",
|
|
"\nThis command will update dt\n"
|
|
"So you can execute command: update_dt"
|
|
);
|
|
#endif
|
|
|
|
int set_successful_boot(void) {
|
|
char miscbuf[MISCBUF_SIZE] = {0};
|
|
AvbABData info;
|
|
int slot_num = 0;
|
|
bootloader_control boot_ctrl;
|
|
bool bootable = 0;
|
|
int AB_mode = 0;
|
|
|
|
boot_info_open_partition(miscbuf);
|
|
boot_info_load(&boot_ctrl, miscbuf);
|
|
|
|
if (!boot_info_validate(&boot_ctrl)) {
|
|
printf("boot-info virtual ab is invalid. Try normal ab.\n");
|
|
boot_info_load_normalAB(&info, miscbuf);
|
|
if (!boot_info_validate_normalAB(&info)) {
|
|
printf("boot-info is invalid.\n");
|
|
/*printf("boot-info is invalid. Resetting.\n");
|
|
boot_info_reset(&boot_ctrl);
|
|
boot_info_save(&boot_ctrl, miscbuf);*/
|
|
} else {
|
|
printf("update from normal ab to virtual ab\n");
|
|
AB_mode = 1;
|
|
}
|
|
}
|
|
|
|
if (AB_mode == 1) {
|
|
slot_num = get_active_slot_normalAB(&info);
|
|
printf("active slot = %d\n", slot_num);
|
|
bootable = info.slots[slot_num].successful_boot;
|
|
//bootable_b = slot_is_bootable_normalAB(&info.slots[1]);
|
|
/*boot_info_reset(&boot_ctrl);
|
|
boot_ctrl.slot_info[0].successful_boot = info.slots[0].successful_boot;
|
|
boot_ctrl.slot_info[1].successful_boot = info.slots[1].successful_boot;
|
|
boot_info_set_active_slot(&boot_ctrl, slot);
|
|
boot_info_save(&boot_ctrl, miscbuf);
|
|
slot = get_active_slot(&boot_ctrl);*/
|
|
} else {
|
|
slot_num = get_active_slot(&boot_ctrl);
|
|
printf("active slot = %d\n", slot_num);
|
|
bootable = boot_ctrl.slot_info[slot_num].successful_boot;
|
|
//bootable_b = slot_is_bootable(&boot_ctrl.slot_info[1]);
|
|
}
|
|
|
|
if (bootable) {
|
|
printf("slots[%d] is bootable\n", slot_num);
|
|
return 0;
|
|
}
|
|
|
|
return -1;
|
|
}
|
|
|