blob: e5668404d6163326c00e1e365b54b85cc5419db5 [file] [log] [blame]
Stefan Reinauer5380d512007-05-24 09:08:36 +00001/*
Uwe Hermannd1107642007-08-29 17:52:32 +00002 * This file is part of the flashrom project.
Stefan Reinauer5380d512007-05-24 09:08:36 +00003 *
4 * Copyright (C) 2002 Steven James <pyro@linuxlabs.com>
5 * Copyright (C) 2002 Linux Networx
6 * (Written by Eric Biederman <ebiederman@lnxi.com> for Linux Networx)
Stefan Reinauer2d853bb2009-03-17 14:39:25 +00007 * Copyright (C) 2006-2009 coresystems GmbH
Stefan Reinauer5380d512007-05-24 09:08:36 +00008 * (Written by Stefan Reinauer <stepan@coresystems.de> for coresystems GmbH)
Carl-Daniel Hailfingerbaaffe02010-02-02 11:09:03 +00009 * Copyright (C) 2010 Carl-Daniel Hailfinger
Stefan Reinauer5380d512007-05-24 09:08:36 +000010 *
11 * This program is free software; you can redistribute it and/or modify
12 * it under the terms of the GNU General Public License as published by
13 * the Free Software Foundation; version 2 of the License.
14 *
15 * This program is distributed in the hope that it will be useful,
16 * but WITHOUT ANY WARRANTY; without even the implied warranty of
17 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
18 * GNU General Public License for more details.
Stefan Reinauer5380d512007-05-24 09:08:36 +000019 */
20
Carl-Daniel Hailfinger831e8f42010-05-30 22:24:40 +000021#include <unistd.h>
22#include <stdio.h>
Stefan Tauner37e86862012-08-11 16:07:08 +000023#include <ctype.h>
Carl-Daniel Hailfinger1c6d2ff2012-08-27 00:44:42 +000024#include <strings.h>
Ollie Lho184a4042005-11-26 21:55:36 +000025#include <string.h>
Adam Kaufman064b1f22007-02-06 19:47:50 +000026#include "flash.h"
Carl-Daniel Hailfinger5b997c32010-07-27 22:41:39 +000027#include "programmer.h"
Stefan Reinauer2fbe6242008-01-18 16:17:44 +000028#include "coreboot_tables.h"
Ollie Lho184a4042005-11-26 21:55:36 +000029
Stefan Taunerb4e06bd2012-08-20 00:24:22 +000030static char *cb_vendor = NULL, *cb_model = NULL;
Ollie Lho184a4042005-11-26 21:55:36 +000031
Stefan Taunerb4e06bd2012-08-20 00:24:22 +000032/* Tries to find coreboot IDs in the supplied image and compares them to the current IDs.
33 * Returns...
Elyes HAOUASac01baa2018-05-28 16:52:21 +020034 * -1 if IDs in the image do not match the IDs embedded in the current firmware,
35 * 0 if the IDs could not be found in the image or if they match correctly.
Carl-Daniel Hailfinger2d927fb2012-01-04 00:48:27 +000036 */
Nico Huber519be662018-12-23 20:03:35 +010037int cb_check_image(const uint8_t *image, unsigned int size)
Carl-Daniel Hailfinger66ef4e52009-12-13 22:28:00 +000038{
Nico Huber441d2a42016-05-02 11:39:35 +020039 const unsigned int *walk;
Stefan Tauner37e86862012-08-11 16:07:08 +000040 unsigned int mb_part_offset, mb_vendor_offset;
Nico Huber441d2a42016-05-02 11:39:35 +020041 const char *mb_part, *mb_vendor;
Stefan Tauner37e86862012-08-11 16:07:08 +000042
Nico Huber441d2a42016-05-02 11:39:35 +020043 walk = (const unsigned int *)(image + size - 0x10);
Stefan Tauner37e86862012-08-11 16:07:08 +000044 walk--;
45
46 if ((*walk) == 0 || ((*walk) & 0x3ff) != 0) {
Stefan Taunerb4e06bd2012-08-20 00:24:22 +000047 /* Some NVIDIA chipsets store chipset soft straps (IIRC Hypertransport init info etc.) in
48 * flash at exactly the location where coreboot image size, coreboot vendor name pointer and
49 * coreboot board name pointer are usually stored. In this case coreboot uses an alternate
50 * location for the coreboot image data. */
Nico Huber441d2a42016-05-02 11:39:35 +020051 walk = (const unsigned int *)(image + size - 0x80);
Stefan Tauner37e86862012-08-11 16:07:08 +000052 walk--;
53 }
54
55 /*
56 * Check if coreboot last image size is 0 or not a multiple of 1k or
57 * bigger than the chip or if the pointers to vendor ID or mainboard ID
58 * are outside the image of if the start of ID strings are nonsensical
59 * (nonprintable and not \0).
60 */
61 mb_part_offset = *(walk - 1);
62 mb_vendor_offset = *(walk - 2);
63 if ((*walk) == 0 || ((*walk) & 0x3ff) != 0 || (*walk) > size ||
64 mb_part_offset > size || mb_vendor_offset > size) {
Stefan Taunerb4e06bd2012-08-20 00:24:22 +000065 msg_pdbg("Flash image seems to be a legacy BIOS. Disabling coreboot-related checks.\n");
Stefan Tauner37e86862012-08-11 16:07:08 +000066 return 0;
67 }
68
Nico Huber441d2a42016-05-02 11:39:35 +020069 mb_part = (const char *)(image + size - mb_part_offset);
70 mb_vendor = (const char *)(image + size - mb_vendor_offset);
Stefan Tauner37e86862012-08-11 16:07:08 +000071 if (!isprint((unsigned char)*mb_part) ||
72 !isprint((unsigned char)*mb_vendor)) {
Stefan Taunerb4e06bd2012-08-20 00:24:22 +000073 msg_pdbg("Flash image seems to have garbage in the ID location. "
74 "Disabling coreboot-related checks.\n");
Stefan Tauner37e86862012-08-11 16:07:08 +000075 return 0;
76 }
77
78 msg_pdbg("coreboot last image size (not ROM size) is %d bytes.\n", *walk);
79
Paul Menzel592d99c2014-11-01 23:12:33 +000080 msg_pdbg("Manufacturer: %s\n", mb_vendor);
81 msg_pdbg("Mainboard ID: %s\n", mb_part);
Stefan Tauner37e86862012-08-11 16:07:08 +000082
83 /* If these are not set, the coreboot table was not found. */
Stefan Taunerb4e06bd2012-08-20 00:24:22 +000084 if (!cb_vendor || !cb_model)
Stefan Tauner37e86862012-08-11 16:07:08 +000085 return 0;
Stefan Tauner37e86862012-08-11 16:07:08 +000086
87 /* These comparisons are case insensitive to make things a little less user^Werror prone. */
Paul Menzel592d99c2014-11-01 23:12:33 +000088 if (!strcasecmp(mb_vendor, cb_vendor) && !strcasecmp(mb_part, cb_model)) {
Stefan Taunerb4e06bd2012-08-20 00:24:22 +000089 msg_pdbg2("This coreboot image matches this mainboard.\n");
Stefan Tauner37e86862012-08-11 16:07:08 +000090 } else {
Stefan Taunerc6fa32d2013-01-04 22:54:07 +000091 msg_perr("This coreboot image (%s:%s) does not appear to\n"
92 "be correct for the detected mainboard (%s:%s).\n",
Paul Menzel592d99c2014-11-01 23:12:33 +000093 mb_vendor, mb_part, cb_vendor, cb_model);
Stefan Taunerb4e06bd2012-08-20 00:24:22 +000094 return -1;
Stefan Tauner37e86862012-08-11 16:07:08 +000095 }
96
97 return 0;
98}
99
Ollie Lho184a4042005-11-26 21:55:36 +0000100static unsigned long compute_checksum(void *addr, unsigned long length)
101{
102 uint8_t *ptr;
103 volatile union {
Uwe Hermanna7e05482007-05-09 10:17:44 +0000104 uint8_t byte[2];
Ollie Lho184a4042005-11-26 21:55:36 +0000105 uint16_t word;
Michael Karchere7f32092010-01-12 15:36:24 +0000106 } chksum;
Uwe Hermannac309342007-10-10 17:42:20 +0000107 unsigned long sum;
108 unsigned long i;
Uwe Hermannffec5f32007-08-23 16:08:21 +0000109
Ollie Lho184a4042005-11-26 21:55:36 +0000110 /* In the most straight forward way possible,
111 * compute an ip style checksum.
112 */
113 sum = 0;
114 ptr = addr;
Uwe Hermanna7e05482007-05-09 10:17:44 +0000115 for (i = 0; i < length; i++) {
Ollie Lho184a4042005-11-26 21:55:36 +0000116 unsigned long value;
117 value = ptr[i];
Uwe Hermannac309342007-10-10 17:42:20 +0000118 if (i & 1) {
Ollie Lho184a4042005-11-26 21:55:36 +0000119 value <<= 8;
Uwe Hermannac309342007-10-10 17:42:20 +0000120 }
Ollie Lho184a4042005-11-26 21:55:36 +0000121 /* Add the new value */
122 sum += value;
123 /* Wrap around the carry */
Uwe Hermannac309342007-10-10 17:42:20 +0000124 if (sum > 0xFFFF) {
Ollie Lho184a4042005-11-26 21:55:36 +0000125 sum = (sum + (sum >> 16)) & 0xFFFF;
Uwe Hermannac309342007-10-10 17:42:20 +0000126 }
Ollie Lho184a4042005-11-26 21:55:36 +0000127 }
Michael Karchere7f32092010-01-12 15:36:24 +0000128 chksum.byte[0] = sum & 0xff;
129 chksum.byte[1] = (sum >> 8) & 0xff;
Uwe Hermannffec5f32007-08-23 16:08:21 +0000130
Michael Karchere7f32092010-01-12 15:36:24 +0000131 return (~chksum.word) & 0xFFFF;
Ollie Lho184a4042005-11-26 21:55:36 +0000132}
133
134#define for_each_lbrec(head, rec) \
135 for(rec = (struct lb_record *)(((char *)head) + sizeof(*head)); \
136 (((char *)rec) < (((char *)head) + sizeof(*head) + head->table_bytes)) && \
137 (rec->size >= 1) && \
138 ((((char *)rec) + rec->size) <= (((char *)head) + sizeof(*head) + head->table_bytes)); \
Uwe Hermanna7e05482007-05-09 10:17:44 +0000139 rec = (struct lb_record *)(((char *)rec) + rec->size))
Ollie Lho184a4042005-11-26 21:55:36 +0000140
Nico Huber519be662018-12-23 20:03:35 +0100141static unsigned int count_lb_records(struct lb_header *head)
Ollie Lho184a4042005-11-26 21:55:36 +0000142{
143 struct lb_record *rec;
Nico Huber519be662018-12-23 20:03:35 +0100144 unsigned int count;
Uwe Hermannffec5f32007-08-23 16:08:21 +0000145
Ollie Lho184a4042005-11-26 21:55:36 +0000146 count = 0;
147 for_each_lbrec(head, rec) {
148 count++;
149 }
Uwe Hermannffec5f32007-08-23 16:08:21 +0000150
Ollie Lho184a4042005-11-26 21:55:36 +0000151 return count;
152}
153
Edward O'Callaghan4a55e682019-11-26 23:28:05 +1100154static int lb_header_valid(struct lb_header *head, unsigned long addr)
155{
156 if (memcmp(head->signature, "LBIO", 4) != 0)
157 return 0;
158 msg_pdbg("Found candidate at: %08lx-%08lx\n",
159 addr, addr + sizeof(*head) + head->table_bytes);
160 if (head->header_bytes != sizeof(*head)) {
161 msg_perr("Header bytes of %d are incorrect.\n",
162 head->header_bytes);
163 return 0;
164 }
165 if (compute_checksum((uint8_t *) head, sizeof(*head)) != 0) {
166 msg_perr("Bad header checksum.\n");
167 return 0;
168 }
169
170 return 1;
171}
172
Edward O'Callaghan1d80d642019-11-26 23:31:06 +1100173static int lb_table_valid(struct lb_header *head, struct lb_record *recs)
174{
175 if (compute_checksum(recs, head->table_bytes)
176 != head->table_checksum) {
177 msg_perr("Bad table checksum: %04x.\n",
178 head->table_checksum);
179 return 0;
180 }
181 if (count_lb_records(head) != head->table_entries) {
182 msg_perr("Bad record count: %d.\n",
183 head->table_entries);
184 return 0;
185 }
186
187 return 1;
188}
189
Uwe Hermanna7e05482007-05-09 10:17:44 +0000190static struct lb_header *find_lb_table(void *base, unsigned long start,
191 unsigned long end)
Ollie Lho184a4042005-11-26 21:55:36 +0000192{
193 unsigned long addr;
Uwe Hermannffec5f32007-08-23 16:08:21 +0000194
Ollie Lho184a4042005-11-26 21:55:36 +0000195 /* For now be stupid.... */
Uwe Hermanna7e05482007-05-09 10:17:44 +0000196 for (addr = start; addr < end; addr += 16) {
197 struct lb_header *head =
198 (struct lb_header *)(((char *)base) + addr);
199 struct lb_record *recs =
200 (struct lb_record *)(((char *)base) + addr + sizeof(*head));
Edward O'Callaghan4a55e682019-11-26 23:28:05 +1100201 if (!lb_header_valid(head, addr))
Ollie Lho184a4042005-11-26 21:55:36 +0000202 continue;
Edward O'Callaghan1d80d642019-11-26 23:31:06 +1100203 if (!lb_table_valid(head, recs))
Ollie Lho184a4042005-11-26 21:55:36 +0000204 continue;
Sean Nelson316a29f2010-05-07 20:09:04 +0000205 msg_pdbg("Found coreboot table at 0x%08lx.\n", addr);
Ollie Lho184a4042005-11-26 21:55:36 +0000206 return head;
207
208 };
Uwe Hermannffec5f32007-08-23 16:08:21 +0000209
Peter Huewe73f8ec82011-01-24 19:15:51 +0000210 return NULL;
Ollie Lho184a4042005-11-26 21:55:36 +0000211}
212
213static void find_mainboard(struct lb_record *ptr, unsigned long addr)
214{
215 struct lb_mainboard *rec;
216 int max_size;
217 char vendor[256], part[256];
Uwe Hermannffec5f32007-08-23 16:08:21 +0000218
Ollie Lho184a4042005-11-26 21:55:36 +0000219 rec = (struct lb_mainboard *)ptr;
220 max_size = rec->size - sizeof(*rec);
Sean Nelson316a29f2010-05-07 20:09:04 +0000221 msg_pdbg("Vendor ID: %.*s, part ID: %.*s\n",
Stefan Taunerb4e06bd2012-08-20 00:24:22 +0000222 max_size - rec->vendor_idx,
223 rec->strings + rec->vendor_idx,
224 max_size - rec->part_number_idx,
225 rec->strings + rec->part_number_idx);
226 snprintf(vendor, 255, "%.*s", max_size - rec->vendor_idx, rec->strings + rec->vendor_idx);
227 snprintf(part, 255, "%.*s", max_size - rec->part_number_idx, rec->strings + rec->part_number_idx);
Ollie Lho184a4042005-11-26 21:55:36 +0000228
Stefan Taunerb4e06bd2012-08-20 00:24:22 +0000229 cb_vendor = strdup(vendor);
230 cb_model = strdup(part);
Ollie Lho184a4042005-11-26 21:55:36 +0000231}
232
233static struct lb_record *next_record(struct lb_record *rec)
234{
235 return (struct lb_record *)(((char *)rec) + rec->size);
236}
237
Stefan Taunerb4e06bd2012-08-20 00:24:22 +0000238static void search_lb_records(struct lb_record *rec, struct lb_record *last, unsigned long addr)
Ollie Lho184a4042005-11-26 21:55:36 +0000239{
240 struct lb_record *next;
241 int count;
242 count = 0;
243
Uwe Hermanna7e05482007-05-09 10:17:44 +0000244 for (next = next_record(rec); (rec < last) && (next <= last);
245 rec = next, addr += rec->size) {
Ollie Lho184a4042005-11-26 21:55:36 +0000246 next = next_record(rec);
247 count++;
Uwe Hermanna7e05482007-05-09 10:17:44 +0000248 if (rec->tag == LB_TAG_MAINBOARD) {
249 find_mainboard(rec, addr);
Ollie Lho184a4042005-11-26 21:55:36 +0000250 break;
251 }
252 }
253}
254
Stefan Reinauer2d853bb2009-03-17 14:39:25 +0000255#define BYTES_TO_MAP (1024*1024)
Stefan Taunerb4e06bd2012-08-20 00:24:22 +0000256/* returns 0 if the table was parsed successfully and cb_vendor/cb_model have been set. */
257int cb_parse_table(const char **vendor, const char **model)
Ollie Lho184a4042005-11-26 21:55:36 +0000258{
Stefan Reinauer2d853bb2009-03-17 14:39:25 +0000259 uint8_t *table_area;
Stefan Reinauerf79edb92009-01-26 01:23:31 +0000260 unsigned long addr, start;
Ollie Lho184a4042005-11-26 21:55:36 +0000261 struct lb_header *lb_table;
262 struct lb_record *rec, *last;
Uwe Hermanna7e05482007-05-09 10:17:44 +0000263
Carl-Daniel Hailfinger60d9bd22012-08-09 23:34:41 +0000264#if defined(__MACH__) && defined(__APPLE__)
Carl-Daniel Hailfingerf992c192010-10-06 23:16:10 +0000265 /* This is a hack. DirectHW fails to map physical address 0x00000000.
Stefan Reinauerf79edb92009-01-26 01:23:31 +0000266 * Why?
267 */
268 start = 0x400;
269#else
270 start = 0x0;
271#endif
Carl-Daniel Hailfinger43eac032014-03-05 00:16:16 +0000272 table_area = physmap_ro_unaligned("low megabyte", start, BYTES_TO_MAP - start);
Patrick Georgied7a9642010-09-25 22:53:44 +0000273 if (ERROR_PTR == table_area) {
Carl-Daniel Hailfingerbaaffe02010-02-02 11:09:03 +0000274 msg_perr("Failed getting access to coreboot low tables.\n");
275 return -1;
276 }
Stefan Reinauerf79edb92009-01-26 01:23:31 +0000277
Stefan Reinauer2d853bb2009-03-17 14:39:25 +0000278 lb_table = find_lb_table(table_area, 0x00000, 0x1000);
Ollie Lho184a4042005-11-26 21:55:36 +0000279 if (!lb_table)
Carl-Daniel Hailfingerbaaffe02010-02-02 11:09:03 +0000280 lb_table = find_lb_table(table_area, 0xf0000 - start, BYTES_TO_MAP - start);
Stefan Reinauer2d853bb2009-03-17 14:39:25 +0000281 if (lb_table) {
282 struct lb_forward *forward = (struct lb_forward *)
283 (((char *)lb_table) + lb_table->header_bytes);
284 if (forward->tag == LB_TAG_FORWARD) {
285 start = forward->forward;
Uwe Hermann7b2969b2009-04-15 10:52:49 +0000286 start &= ~(getpagesize() - 1);
Carl-Daniel Hailfinger43eac032014-03-05 00:16:16 +0000287 physunmap_unaligned(table_area, BYTES_TO_MAP);
288 // FIXME: table_area is never unmapped below, nor is it unmapped above in the no-forward case
289 table_area = physmap_ro_unaligned("high tables", start, BYTES_TO_MAP);
Patrick Georgied7a9642010-09-25 22:53:44 +0000290 if (ERROR_PTR == table_area) {
Stefan Taunerb4e06bd2012-08-20 00:24:22 +0000291 msg_perr("Failed getting access to coreboot high tables.\n");
Carl-Daniel Hailfingerbaaffe02010-02-02 11:09:03 +0000292 return -1;
293 }
Stefan Reinauer2d853bb2009-03-17 14:39:25 +0000294 lb_table = find_lb_table(table_area, 0x00000, 0x1000);
295 }
296 }
297
Peter Stuge2dc3aaa2009-01-26 00:15:56 +0000298 if (!lb_table) {
Stefan Reinauer12a04eb2011-04-01 18:05:20 +0000299 msg_pdbg("No coreboot table found.\n");
Ollie Lho184a4042005-11-26 21:55:36 +0000300 return -1;
301 }
Uwe Hermannffec5f32007-08-23 16:08:21 +0000302
Stefan Reinauer2d853bb2009-03-17 14:39:25 +0000303 addr = ((char *)lb_table) - ((char *)table_area) + start;
Elyes HAOUAS124ef382018-03-27 12:15:09 +0200304 msg_pinfo("coreboot table found at 0x%lx.\n",
Stefan Reinauer2d853bb2009-03-17 14:39:25 +0000305 (unsigned long)lb_table - (unsigned long)table_area + start);
Peter Stuge2dc3aaa2009-01-26 00:15:56 +0000306 rec = (struct lb_record *)(((char *)lb_table) + lb_table->header_bytes);
307 last = (struct lb_record *)(((char *)rec) + lb_table->table_bytes);
Sean Nelson316a29f2010-05-07 20:09:04 +0000308 msg_pdbg("coreboot header(%d) checksum: %04x table(%d) checksum: %04x entries: %d\n",
Peter Stuge2dc3aaa2009-01-26 00:15:56 +0000309 lb_table->header_bytes, lb_table->header_checksum,
310 lb_table->table_bytes, lb_table->table_checksum,
311 lb_table->table_entries);
312 search_lb_records(rec, last, addr + lb_table->header_bytes);
Stefan Taunerb4e06bd2012-08-20 00:24:22 +0000313 *vendor = cb_vendor;
314 *model = cb_model;
Ollie Lho184a4042005-11-26 21:55:36 +0000315 return 0;
316}