Three issues: 1. the hardcoded dereferenced pointer at 0xfffffffc 2. "RAM media" has no idea about ROM relative addresses 3. off-by-one in RAM media: it's legal to request 4 bytes from 0xfffffffc Change-Id: I671ac12d412c71dc8e8e6114f2ea13f58dd99c1d Signed-off-by: Patrick Georgi <patrick@georgi-clan.de> Reviewed-on: http://review.coreboot.org/2624 Tested-by: build bot (Jenkins) Reviewed-by: Paul Menzel <paulepanter@users.sourceforge.net> Reviewed-by: Hung-Te Lin <hungte@chromium.org>
		
			
				
	
	
		
			254 lines
		
	
	
		
			7.3 KiB
		
	
	
	
		
			C
		
	
	
	
	
	
			
		
		
	
	
			254 lines
		
	
	
		
			7.3 KiB
		
	
	
	
		
			C
		
	
	
	
	
	
| /*
 | |
|  * This file is part of the libpayload project.
 | |
|  *
 | |
|  * Copyright (C) 2011 secunet Security Networks AG
 | |
|  * Copyright (C) 2013 Google, Inc.
 | |
|  *
 | |
|  * Redistribution and use in source and binary forms, with or without
 | |
|  * modification, are permitted provided that the following conditions
 | |
|  * are met:
 | |
|  * 1. Redistributions of source code must retain the above copyright
 | |
|  *    notice, this list of conditions and the following disclaimer.
 | |
|  * 2. Redistributions in binary form must reproduce the above copyright
 | |
|  *    notice, this list of conditions and the following disclaimer in the
 | |
|  *    documentation and/or other materials provided with the distribution.
 | |
|  * 3. The name of the author may not be used to endorse or promote products
 | |
|  *    derived from this software without specific prior written permission.
 | |
|  *
 | |
|  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
 | |
|  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 | |
|  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
 | |
|  * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
 | |
|  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
 | |
|  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
 | |
|  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
 | |
|  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
 | |
|  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
 | |
|  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
 | |
|  * SUCH DAMAGE.
 | |
|  */
 | |
| #define LIBPAYLOAD
 | |
| 
 | |
| #ifdef LIBPAYLOAD
 | |
| # include <libpayload-config.h>
 | |
| # ifdef CONFIG_LZMA
 | |
| #  include <lzma.h>
 | |
| #  define CBFS_CORE_WITH_LZMA
 | |
| # endif
 | |
| # define CBFS_MINI_BUILD
 | |
| #elif defined(__SMM__)
 | |
| # define CBFS_MINI_BUILD
 | |
| #else
 | |
| # define CBFS_CORE_WITH_LZMA
 | |
| # include <lib.h>
 | |
| #endif
 | |
| 
 | |
| #include <cbfs.h>
 | |
| #include <string.h>
 | |
| 
 | |
| #ifdef LIBPAYLOAD
 | |
| # include <stdio.h>
 | |
| # define DEBUG(x...)
 | |
| # define LOG(x...) printf(x)
 | |
| # define ERROR(x...) printf(x)
 | |
| #else
 | |
| # include <console/console.h>
 | |
| # define ERROR(x...) printk(BIOS_ERR, "CBFS: " x)
 | |
| # define LOG(x...) printk(BIOS_INFO, "CBFS: " x)
 | |
| # if CONFIG_DEBUG_CBFS
 | |
| #  define DEBUG(x...) printk(BIOS_SPEW, "CBFS: " x)
 | |
| # else
 | |
| #  define DEBUG(x...)
 | |
| # endif
 | |
| #endif
 | |
| 
 | |
| #if defined(CONFIG_CBFS_HEADER_ROM_OFFSET) && (CONFIG_CBFS_HEADER_ROM_OFFSET)
 | |
| # define CBFS_HEADER_ROM_ADDRESS (CONFIG_CBFS_HEADER_ROM_OFFSET)
 | |
| #else
 | |
| /* ugly hack: this assumes that "media" exists
 | |
|               in the scope where the macro is used. */
 | |
| static uint32_t fetch_x86_header(struct cbfs_media *media)
 | |
| {
 | |
| 	uint32_t *header_ptr = media->map(media, 0xfffffffc, 4);
 | |
| 	return *header_ptr;
 | |
| }
 | |
| # define CBFS_HEADER_ROM_ADDRESS fetch_x86_header(media)
 | |
| #endif
 | |
| 
 | |
| #include "cbfs_core.c"
 | |
| 
 | |
| #ifndef __SMM__
 | |
| static inline int tohex4(unsigned int c)
 | |
| {
 | |
| 	return (c <= 9) ? (c + '0') : (c - 10 + 'a');
 | |
| }
 | |
| 
 | |
| static void tohex16(unsigned int val, char* dest)
 | |
| {
 | |
| 	dest[0] = tohex4(val>>12);
 | |
| 	dest[1] = tohex4((val>>8) & 0xf);
 | |
| 	dest[2] = tohex4((val>>4) & 0xf);
 | |
| 	dest[3] = tohex4(val & 0xf);
 | |
| }
 | |
| 
 | |
| void *cbfs_load_optionrom(struct cbfs_media *media, uint16_t vendor,
 | |
| 			  uint16_t device, void *dest)
 | |
| {
 | |
| 	char name[17] = "pciXXXX,XXXX.rom";
 | |
| 	struct cbfs_optionrom *orom;
 | |
| 	uint8_t *src;
 | |
| 
 | |
| 	tohex16(vendor, name+3);
 | |
| 	tohex16(device, name+8);
 | |
| 
 | |
| 	orom = (struct cbfs_optionrom *)
 | |
| 		cbfs_get_file_content(media, name, CBFS_TYPE_OPTIONROM);
 | |
| 
 | |
| 	if (orom == NULL)
 | |
| 		return NULL;
 | |
| 
 | |
| 	/* They might have specified a dest address. If so, we can decompress.
 | |
| 	 * If not, there's not much hope of decompressing or relocating the rom.
 | |
| 	 * in the common case, the expansion rom is uncompressed, we
 | |
| 	 * pass 0 in for the dest, and all we have to do is find the rom and
 | |
| 	 * return a pointer to it.
 | |
| 	 */
 | |
| 
 | |
| 	/* BUG: the cbfstool is (not yet) including a cbfs_optionrom header */
 | |
| 	src = (uint8_t*)orom; // + sizeof(struct cbfs_optionrom);
 | |
| 
 | |
| 	if (! dest)
 | |
| 		return src;
 | |
| 
 | |
| 	if (cbfs_decompress(ntohl(orom->compression),
 | |
| 			     src,
 | |
| 			     dest,
 | |
| 			     ntohl(orom->len)))
 | |
| 		return NULL;
 | |
| 
 | |
| 	return dest;
 | |
| }
 | |
| 
 | |
| void * cbfs_load_stage(struct cbfs_media *media, const char *name)
 | |
| {
 | |
| 	struct cbfs_stage *stage = (struct cbfs_stage *)
 | |
| 		cbfs_get_file_content(media, name, CBFS_TYPE_STAGE);
 | |
| 	/* this is a mess. There is no ntohll. */
 | |
| 	/* for now, assume compatible byte order until we solve this. */
 | |
| 	uint32_t entry;
 | |
| 
 | |
| 	if (stage == NULL)
 | |
| 		return (void *) -1;
 | |
| 
 | |
| 	LOG("loading stage %s @ 0x%x (%d bytes), entry @ 0x%llx\n",
 | |
| 			name,
 | |
| 			(uint32_t) stage->load, stage->memlen,
 | |
| 			stage->entry);
 | |
| 	memset((void *) (uint32_t) stage->load, 0, stage->memlen);
 | |
| 
 | |
| 	if (cbfs_decompress(stage->compression,
 | |
| 			     ((unsigned char *) stage) +
 | |
| 			     sizeof(struct cbfs_stage),
 | |
| 			     (void *) (uint32_t) stage->load,
 | |
| 			     stage->len))
 | |
| 		return (void *) -1;
 | |
| 
 | |
| 	DEBUG("stage loaded.\n");
 | |
| 
 | |
| 	entry = stage->entry;
 | |
| 	// entry = ntohll(stage->entry);
 | |
| 
 | |
| 	return (void *) entry;
 | |
| }
 | |
| 
 | |
| int cbfs_execute_stage(struct cbfs_media *media, const char *name)
 | |
| {
 | |
| 	struct cbfs_stage *stage = (struct cbfs_stage *)
 | |
| 		cbfs_get_file_content(media, name, CBFS_TYPE_STAGE);
 | |
| 
 | |
| 	if (stage == NULL)
 | |
| 		return 1;
 | |
| 
 | |
| 	if (ntohl(stage->compression) != CBFS_COMPRESS_NONE) {
 | |
| 		LOG("Unable to run %s:  Compressed file"
 | |
| 		       "Not supported for in-place execution\n", name);
 | |
| 		return 1;
 | |
| 	}
 | |
| 
 | |
| 	/* FIXME: This isn't right */
 | |
| 	LOG("run @ %p\n", (void *) ntohl((uint32_t) stage->entry));
 | |
| 	return run_address((void *)(uintptr_t)ntohll(stage->entry));
 | |
| }
 | |
| 
 | |
| void *cbfs_load_payload(struct cbfs_media *media, const char *name)
 | |
| {
 | |
| 	return (struct cbfs_payload *)cbfs_get_file_content(
 | |
| 			media, name, CBFS_TYPE_PAYLOAD);
 | |
| }
 | |
| 
 | |
| struct cbfs_file *cbfs_find(const char *name) {
 | |
| 	return cbfs_get_file(CBFS_DEFAULT_MEDIA, name);
 | |
| }
 | |
| 
 | |
| void *cbfs_find_file(const char *name, int type) {
 | |
| 	return cbfs_get_file_content(CBFS_DEFAULT_MEDIA, name, type);
 | |
| }
 | |
| 
 | |
| const struct cbfs_header *get_cbfs_header(void) {
 | |
| 	return cbfs_get_header(CBFS_DEFAULT_MEDIA);
 | |
| }
 | |
| 
 | |
| /* Simple buffer */
 | |
| 
 | |
| void *cbfs_simple_buffer_map(struct cbfs_simple_buffer *buffer,
 | |
| 			     struct cbfs_media *media,
 | |
| 			     size_t offset, size_t count) {
 | |
| 	void *address = buffer->buffer + buffer->allocated;;
 | |
| 	DEBUG("simple_buffer_map(offset=%d, count=%d): "
 | |
| 	      "allocated=%d, size=%d, last_allocate=%d\n",
 | |
| 	    offset, count, buffer->allocated, buffer->size,
 | |
| 	    buffer->last_allocate);
 | |
| 	if (buffer->allocated + count >= buffer->size)
 | |
| 		return CBFS_MEDIA_INVALID_MAP_ADDRESS;
 | |
| 	if (media->read(media, address, offset, count) != count) {
 | |
| 		ERROR("simple_buffer: fail to read %zd bytes from 0x%zx\n",
 | |
| 		      count, offset);
 | |
| 		return CBFS_MEDIA_INVALID_MAP_ADDRESS;
 | |
| 	}
 | |
| 	buffer->allocated += count;
 | |
| 	buffer->last_allocate = count;
 | |
| 	return address;
 | |
| }
 | |
| 
 | |
| void *cbfs_simple_buffer_unmap(struct cbfs_simple_buffer *buffer,
 | |
| 			       const void *address) {
 | |
| 	// TODO Add simple buffer management so we can free more than last
 | |
| 	// allocated one.
 | |
| 	DEBUG("simple_buffer_unmap(address=0x%p): "
 | |
| 	      "allocated=%d, size=%d, last_allocate=%d\n",
 | |
| 	    address, buffer->allocated, buffer->size,
 | |
| 	    buffer->last_allocate);
 | |
| 	if ((buffer->buffer + buffer->allocated - buffer->last_allocate) ==
 | |
| 	    address) {
 | |
| 		buffer->allocated -= buffer->last_allocate;
 | |
| 		buffer->last_allocate = 0;
 | |
| 	}
 | |
| 	return NULL;
 | |
| }
 | |
| 
 | |
| /**
 | |
|  * run_address is passed the address of a function taking no parameters and
 | |
|  * jumps to it, returning the result.
 | |
|  * @param f the address to call as a function.
 | |
|  * @return value returned by the function.
 | |
|  */
 | |
| 
 | |
| int run_address(void *f)
 | |
| {
 | |
| 	int (*v) (void);
 | |
| 	v = f;
 | |
| 	return v();
 | |
| }
 | |
| 
 | |
| #endif
 |