2 * mtd - simple memory technology device manipulation tool
4 * Copyright (C) 2005 Waldemar Brodkorb <wbx@dass-it.de>,
5 * Felix Fietkau <nbd@openwrt.org>
7 * This program is free software; you can redistribute it and/or
8 * modify it under the terms of the GNU General Public License
9 * as published by the Free Software Foundation; either version 2
10 * of the License, or (at your option) any later version.
12 * This program is distributed in the hope that it will be useful,
13 * but WITHOUT ANY WARRANTY; without even the implied warranty of
14 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
15 * GNU General Public License for more details.
17 * You should have received a copy of the GNU General Public License
18 * along with this program; if not, write to the Free Software
19 * Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
23 * The code is based on the linux-mtd examples.
31 #include <sys/ioctl.h>
32 #include <sys/syscall.h>
38 #include <sys/ioctl.h>
39 #include <sys/types.h>
40 #include <sys/param.h>
41 #include <sys/mount.h>
43 #include <sys/reboot.h>
44 #include <linux/reboot.h>
48 #define TRX_MAGIC 0x30524448 /* "HDR0" */
49 #define BUFSIZE (16 * 1024)
54 #define SYSTYPE_UNKNOWN 0
55 #define SYSTYPE_BROADCOM 1
59 uint32_t magic
; /* "HDR0" */
60 uint32_t len
; /* Length of file including header */
61 uint32_t crc32
; /* 32-bit CRC from flag_version to end of file */
62 uint32_t flag_version
; /* 0:15 flags, 16:31 version */
63 uint32_t offsets
[3]; /* Offsets of partitions from start of header */
72 image_check_brcm(int imagefd
, const char *mtd
)
74 struct trx_header
*trx
= (struct trx_header
*) buf
;
75 struct mtd_info_user mtdInfo
;
78 if (strcmp(mtd
, "linux") != 0)
81 buflen
= read(imagefd
, buf
, 32);
83 fprintf(stdout
, "Could not get image header, file too small (%ld bytes)\n", buflen
);
88 case 0x47343557: /* W54G */
89 case 0x53343557: /* W54S */
90 case 0x73343557: /* W54s */
91 case 0x46343557: /* W54F */
92 case 0x55343557: /* W54U */
93 /* ignore the first 32 bytes */
94 buflen
= read(imagefd
, buf
, sizeof(struct trx_header
));
98 if (trx
->magic
!= TRX_MAGIC
|| trx
->len
< sizeof(struct trx_header
)) {
100 fprintf(stderr
, "Bad trx header\n");
101 fprintf(stderr
, "If this is a firmware in bin format, like some of the\n"
102 "original firmware files are, you need to convert it to trx.\n");
107 /* check if image fits to mtd device */
108 fd
= mtd_open(mtd
, O_RDWR
| O_SYNC
);
110 fprintf(stderr
, "Could not open mtd device: %s\n", mtd
);
114 if(ioctl(fd
, MEMGETINFO
, &mtdInfo
)) {
115 fprintf(stderr
, "Could not get MTD device info from %s\n", mtd
);
119 if(mtdInfo
.size
< trx
->len
) {
120 fprintf(stderr
, "Image too big for partition: %s\n", mtd
);
128 #endif /* target_brcm */
131 image_check(int imagefd
, const char *mtd
)
139 return image_check_brcm(imagefd
, mtd
);
143 int mtd_check(char *mtd
)
145 struct mtd_info_user mtdInfo
;
148 fd
= mtd_open(mtd
, O_RDWR
| O_SYNC
);
150 fprintf(stderr
, "Could not open mtd device: %s\n", mtd
);
154 if(ioctl(fd
, MEMGETINFO
, &mtdInfo
)) {
155 fprintf(stderr
, "Could not get MTD device info from %s\n", mtd
);
165 mtd_unlock(const char *mtd
)
168 struct mtd_info_user mtdInfo
;
169 struct erase_info_user mtdLockInfo
;
171 fd
= mtd_open(mtd
, O_RDWR
| O_SYNC
);
173 fprintf(stderr
, "Could not open mtd device: %s\n", mtd
);
177 if(ioctl(fd
, MEMGETINFO
, &mtdInfo
)) {
178 fprintf(stderr
, "Could not get MTD device info from %s\n", mtd
);
183 mtdLockInfo
.start
= 0;
184 mtdLockInfo
.length
= mtdInfo
.size
;
185 if(ioctl(fd
, MEMUNLOCK
, &mtdLockInfo
)) {
195 mtd_open(const char *mtd
, int flags
)
202 if ((fp
= fopen("/proc/mtd", "r"))) {
203 while (fgets(dev
, sizeof(dev
), fp
)) {
204 if (sscanf(dev
, "mtd%d:", &i
) && strstr(dev
, mtd
)) {
205 snprintf(dev
, sizeof(dev
), "/dev/mtd/%d", i
);
206 if ((ret
=open(dev
, flags
))<0) {
207 snprintf(dev
, sizeof(dev
), "/dev/mtd%d", i
);
208 ret
=open(dev
, flags
);
217 return open(mtd
, flags
);
221 mtd_erase(const char *mtd
)
224 struct mtd_info_user mtdInfo
;
225 struct erase_info_user mtdEraseInfo
;
227 fd
= mtd_open(mtd
, O_RDWR
| O_SYNC
);
229 fprintf(stderr
, "Could not open mtd device: %s\n", mtd
);
233 if(ioctl(fd
, MEMGETINFO
, &mtdInfo
)) {
234 fprintf(stderr
, "Could not get MTD device info from %s\n", mtd
);
239 mtdEraseInfo
.length
= mtdInfo
.erasesize
;
241 for (mtdEraseInfo
.start
= 0;
242 mtdEraseInfo
.start
< mtdInfo
.size
;
243 mtdEraseInfo
.start
+= mtdInfo
.erasesize
) {
245 ioctl(fd
, MEMUNLOCK
, &mtdEraseInfo
);
246 if(ioctl(fd
, MEMERASE
, &mtdEraseInfo
))
247 fprintf(stderr
, "Failed to erase block on %s at 0x%x\n", mtd
, mtdEraseInfo
.start
);
256 mtd_write(int imagefd
, const char *mtd
)
260 struct mtd_info_user mtdInfo
;
261 struct erase_info_user mtdEraseInfo
;
264 fd
= mtd_open(mtd
, O_RDWR
| O_SYNC
);
266 fprintf(stderr
, "Could not open mtd device: %s\n", mtd
);
270 if(ioctl(fd
, MEMGETINFO
, &mtdInfo
)) {
271 fprintf(stderr
, "Could not get MTD device info from %s\n", mtd
);
278 fprintf(stderr
, " [ ]");
281 /* buffer may contain data already (from trx check) */
283 r
+= read(imagefd
, buf
+ buflen
, BUFSIZE
- buflen
);
289 /* need to erase the next block before writing data to it */
291 mtdEraseInfo
.start
= e
;
292 mtdEraseInfo
.length
= mtdInfo
.erasesize
;
295 fprintf(stderr
, "\b\b\b[e]");
296 /* erase the chunk */
297 if (ioctl (fd
,MEMERASE
,&mtdEraseInfo
) < 0) {
298 fprintf(stderr
, "Erasing mtd failed: %s\n", mtd
);
301 e
+= mtdInfo
.erasesize
;
305 fprintf(stderr
, "\b\b\b[w]");
307 if ((result
= write(fd
, buf
, r
)) < r
) {
309 fprintf(stderr
, "Error writing image.\n");
312 fprintf(stderr
, "Insufficient space.\n");
320 fprintf(stderr
, "\b\b\b\b");
328 fprintf(stderr
, "Usage: mtd [<options> ...] <command> [<arguments> ...] <device>\n\n"
329 "The device is in the format of mtdX (eg: mtd4) or its label.\n"
330 "mtd recognizes these commands:\n"
331 " unlock unlock the device\n"
332 " erase erase all data on device\n"
333 " write <imagefile>|- write <imagefile> (use - for stdin) to device\n"
334 "Following options are available:\n"
335 " -q quiet mode (once: no [w] on writing,\n"
336 " twice: no status messages)\n"
337 " -r reboot after successful command\n"
338 " -f force write without trx checks\n"
339 " -e <device> erase <device> before executing the command\n\n"
340 "Example: To write linux.trx to mtd4 labeled as linux and reboot afterwards\n"
341 " mtd -r write linux.trx linux\n\n");
345 int main (int argc
, char **argv
)
347 int ch
, i
, boot
, unlock
, imagefd
, force
, unlocked
;
348 char *erase
[MAX_ARGS
], *device
, *imagefile
;
361 while ((ch
= getopt(argc
, argv
, "frqe:")) != -1)
374 while ((erase
[i
] != NULL
) && ((i
+ 1) < MAX_ARGS
))
391 if ((strcmp(argv
[0], "unlock") == 0) && (argc
== 2)) {
394 } else if ((strcmp(argv
[0], "erase") == 0) && (argc
== 2)) {
397 } else if ((strcmp(argv
[0], "write") == 0) && (argc
== 3)) {
401 if (strcmp(argv
[1], "-") == 0) {
402 imagefile
= "<stdin>";
406 if ((imagefd
= open(argv
[1], O_RDONLY
)) < 0) {
407 fprintf(stderr
, "Couldn't open image file: %s!\n", imagefile
);
412 /* check trx file before erasing or writing anything */
413 if (!image_check(imagefd
, device
)) {
415 fprintf(stderr
, "Image check failed.\n");
419 if (!mtd_check(device
)) {
420 fprintf(stderr
, "Can't open device for writing!\n");
432 while (erase
[i
] != NULL
) {
434 fprintf(stderr
, "Unlocking %s ...\n", erase
[i
]);
435 mtd_unlock(erase
[i
]);
437 fprintf(stderr
, "Erasing %s ...\n", erase
[i
]);
439 if (strcmp(erase
[i
], device
) == 0)
446 fprintf(stderr
, "Unlocking %s ...\n", device
);
455 fprintf(stderr
, "Erasing %s ...\n", device
);
460 fprintf(stderr
, "Writing from %s to %s ... ", imagefile
, device
);
461 mtd_write(imagefd
, device
);
463 fprintf(stderr
, "\n");
471 syscall(SYS_reboot
,LINUX_REBOOT_MAGIC1
,LINUX_REBOOT_MAGIC2
,LINUX_REBOOT_CMD_RESTART
,NULL
);