2 * This file is subject to the terms and conditions of the GNU General Public
3 * License. See the file "COPYING" in the main directory of this archive
6 * Copyright (C) 2008 Axel Gembe <ago@bastart.eu.org>
7 * Copyright (C) 2009 Daniel Dickinson <crazycshore@gmail.com>
17 #include <netinet/in.h>
21 #define IMAGETAG_MAGIC1 "Broadcom Corporatio"
22 #define IMAGETAG_MAGIC2 "ver. 2.0"
23 #define IMAGETAG_VER "6"
24 #define IMAGETAG_DEFAULT_LOADADDR 0x80010000
25 #define DEFAULT_FW_OFFSET 0x10000
26 #define DEFAULT_FLASH_START 0xBFC00000
27 #define DEFAULT_FLASH_BS (64 * 1024)
28 #define DEADCODE 0xDEADC0DE
32 unsigned char output
[4];
35 /* This appears to be necessary due to alignment issues */
36 #define int2tag(tag, value) intchar.input = htonl(value); \
37 strncpy(tag, intchar.output, sizeof(union int2char))
41 uint32_t loadaddr
; /* Kernel load address */
42 uint32_t entry
; /* Kernel entry point address */
43 uint32_t lzmalen
; /* Compressed length of the LZMA data that follows */
46 static struct tagiddesc_t tagidtab
[NUM_TAGID
] = TAGID_DEFINITIONS
;
48 static uint32_t crc32tab
[256] = {
49 0x00000000, 0x77073096, 0xEE0E612C, 0x990951BA, 0x076DC419, 0x706AF48F, 0xE963A535, 0x9E6495A3,
50 0x0EDB8832, 0x79DCB8A4, 0xE0D5E91E, 0x97D2D988, 0x09B64C2B, 0x7EB17CBD, 0xE7B82D07, 0x90BF1D91,
51 0x1DB71064, 0x6AB020F2, 0xF3B97148, 0x84BE41DE, 0x1ADAD47D, 0x6DDDE4EB, 0xF4D4B551, 0x83D385C7,
52 0x136C9856, 0x646BA8C0, 0xFD62F97A, 0x8A65C9EC, 0x14015C4F, 0x63066CD9, 0xFA0F3D63, 0x8D080DF5,
53 0x3B6E20C8, 0x4C69105E, 0xD56041E4, 0xA2677172, 0x3C03E4D1, 0x4B04D447, 0xD20D85FD, 0xA50AB56B,
54 0x35B5A8FA, 0x42B2986C, 0xDBBBC9D6, 0xACBCF940, 0x32D86CE3, 0x45DF5C75, 0xDCD60DCF, 0xABD13D59,
55 0x26D930AC, 0x51DE003A, 0xC8D75180, 0xBFD06116, 0x21B4F4B5, 0x56B3C423, 0xCFBA9599, 0xB8BDA50F,
56 0x2802B89E, 0x5F058808, 0xC60CD9B2, 0xB10BE924, 0x2F6F7C87, 0x58684C11, 0xC1611DAB, 0xB6662D3D,
57 0x76DC4190, 0x01DB7106, 0x98D220BC, 0xEFD5102A, 0x71B18589, 0x06B6B51F, 0x9FBFE4A5, 0xE8B8D433,
58 0x7807C9A2, 0x0F00F934, 0x9609A88E, 0xE10E9818, 0x7F6A0DBB, 0x086D3D2D, 0x91646C97, 0xE6635C01,
59 0x6B6B51F4, 0x1C6C6162, 0x856530D8, 0xF262004E, 0x6C0695ED, 0x1B01A57B, 0x8208F4C1, 0xF50FC457,
60 0x65B0D9C6, 0x12B7E950, 0x8BBEB8EA, 0xFCB9887C, 0x62DD1DDF, 0x15DA2D49, 0x8CD37CF3, 0xFBD44C65,
61 0x4DB26158, 0x3AB551CE, 0xA3BC0074, 0xD4BB30E2, 0x4ADFA541, 0x3DD895D7, 0xA4D1C46D, 0xD3D6F4FB,
62 0x4369E96A, 0x346ED9FC, 0xAD678846, 0xDA60B8D0, 0x44042D73, 0x33031DE5, 0xAA0A4C5F, 0xDD0D7CC9,
63 0x5005713C, 0x270241AA, 0xBE0B1010, 0xC90C2086, 0x5768B525, 0x206F85B3, 0xB966D409, 0xCE61E49F,
64 0x5EDEF90E, 0x29D9C998, 0xB0D09822, 0xC7D7A8B4, 0x59B33D17, 0x2EB40D81, 0xB7BD5C3B, 0xC0BA6CAD,
65 0xEDB88320, 0x9ABFB3B6, 0x03B6E20C, 0x74B1D29A, 0xEAD54739, 0x9DD277AF, 0x04DB2615, 0x73DC1683,
66 0xE3630B12, 0x94643B84, 0x0D6D6A3E, 0x7A6A5AA8, 0xE40ECF0B, 0x9309FF9D, 0x0A00AE27, 0x7D079EB1,
67 0xF00F9344, 0x8708A3D2, 0x1E01F268, 0x6906C2FE, 0xF762575D, 0x806567CB, 0x196C3671, 0x6E6B06E7,
68 0xFED41B76, 0x89D32BE0, 0x10DA7A5A, 0x67DD4ACC, 0xF9B9DF6F, 0x8EBEEFF9, 0x17B7BE43, 0x60B08ED5,
69 0xD6D6A3E8, 0xA1D1937E, 0x38D8C2C4, 0x4FDFF252, 0xD1BB67F1, 0xA6BC5767, 0x3FB506DD, 0x48B2364B,
70 0xD80D2BDA, 0xAF0A1B4C, 0x36034AF6, 0x41047A60, 0xDF60EFC3, 0xA867DF55, 0x316E8EEF, 0x4669BE79,
71 0xCB61B38C, 0xBC66831A, 0x256FD2A0, 0x5268E236, 0xCC0C7795, 0xBB0B4703, 0x220216B9, 0x5505262F,
72 0xC5BA3BBE, 0xB2BD0B28, 0x2BB45A92, 0x5CB36A04, 0xC2D7FFA7, 0xB5D0CF31, 0x2CD99E8B, 0x5BDEAE1D,
73 0x9B64C2B0, 0xEC63F226, 0x756AA39C, 0x026D930A, 0x9C0906A9, 0xEB0E363F, 0x72076785, 0x05005713,
74 0x95BF4A82, 0xE2B87A14, 0x7BB12BAE, 0x0CB61B38, 0x92D28E9B, 0xE5D5BE0D, 0x7CDCEFB7, 0x0BDBDF21,
75 0x86D3D2D4, 0xF1D4E242, 0x68DDB3F8, 0x1FDA836E, 0x81BE16CD, 0xF6B9265B, 0x6FB077E1, 0x18B74777,
76 0x88085AE6, 0xFF0F6A70, 0x66063BCA, 0x11010B5C, 0x8F659EFF, 0xF862AE69, 0x616BFFD3, 0x166CCF45,
77 0xA00AE278, 0xD70DD2EE, 0x4E048354, 0x3903B3C2, 0xA7672661, 0xD06016F7, 0x4969474D, 0x3E6E77DB,
78 0xAED16A4A, 0xD9D65ADC, 0x40DF0B66, 0x37D83BF0, 0xA9BCAE53, 0xDEBB9EC5, 0x47B2CF7F, 0x30B5FFE9,
79 0xBDBDF21C, 0xCABAC28A, 0x53B39330, 0x24B4A3A6, 0xBAD03605, 0xCDD70693, 0x54DE5729, 0x23D967BF,
80 0xB3667A2E, 0xC4614AB8, 0x5D681B02, 0x2A6F2B94, 0xB40BBE37, 0xC30C8EA1, 0x5A05DF1B, 0x2D02EF8D
83 uint32_t crc32(uint32_t crc
, uint8_t *data
, size_t len
)
86 crc
= (crc
>> 8) ^ crc32tab
[(crc
^ *data
++) & 0xFF];
91 uint32_t compute_crc32(uint32_t crc
, FILE *binfile
, size_t compute_start
, size_t compute_len
)
93 uint8_t readbuf
[1024];
96 fseek(binfile
, compute_start
, SEEK_SET
);
98 /* read block of 1024 bytes */
99 while (binfile
&& !feof(binfile
) && !ferror(binfile
) && (compute_len
>= sizeof(readbuf
))) {
100 read
= fread(readbuf
, sizeof(uint8_t), sizeof(readbuf
), binfile
);
101 crc
= crc32(crc
, readbuf
, read
);
102 compute_len
= compute_len
- read
;
105 /* Less than 1024 bytes remains, read compute_len bytes */
106 if (binfile
&& !feof(binfile
) && !ferror(binfile
) && (compute_len
> 0)) {
107 read
= fread(readbuf
, sizeof(uint8_t), compute_len
, binfile
);
108 crc
= crc32(crc
, readbuf
, read
);
114 size_t getlen(FILE *fp
)
116 size_t retval
, curpos
;
122 fseek(fp
, 0, SEEK_END
);
124 fseek(fp
, curpos
, SEEK_SET
);
129 int tagfile(const char *kernel
, const char *rootfs
, const char *bin
,
130 const char *boardid
, const char *chipid
, const uint32_t fwaddr
,
131 const uint32_t loadaddr
, const uint32_t entry
,
132 const char *ver
, const char *magic2
, const uint32_t flash_bs
,
133 const char *tagid
, const char *information
, const char *layoutver
)
136 struct kernelhdr khdr
;
137 FILE *kernelfile
= NULL
, *rootfsfile
= NULL
, *binfile
;
138 size_t kerneloff
, kernellen
, rootfsoff
, rootfslen
, read
, imagelen
, rootfsoffpadlen
, kernelfslen
;
139 uint8_t readbuf
[1024];
140 uint32_t imagecrc
= IMAGETAG_CRC_START
;
141 uint32_t kernelcrc
= IMAGETAG_CRC_START
;
142 uint32_t rootfscrc
= IMAGETAG_CRC_START
;
143 uint32_t kernelfscrc
= IMAGETAG_CRC_START
;
144 const uint32_t deadcode
= htonl(DEADCODE
);
145 union int2char intchar
;
147 memset(&tag
, 0, sizeof(union bcm_tag
));
149 /* All imagetags have boardid in the same location and of the same
150 * size, so we just use the bccfe one
152 if (strlen(boardid
) >= sizeof(tag
.bccfe
.boardid
)) {
153 fprintf(stderr
, "Board id is too long!\n");
157 /* Likewise chipid */
158 if (strlen(chipid
) >= sizeof(tag
.bccfe
.chipid
)) {
159 fprintf(stderr
, "Chip id is too long!\n");
163 if (kernel
&& !(kernelfile
= fopen(kernel
, "rb"))) {
164 fprintf(stderr
, "Unable to open kernel \"%s\"\n", kernel
);
168 if (rootfs
&& !(rootfsfile
= fopen(rootfs
, "rb"))) {
169 fprintf(stderr
, "Unable to open rootfs \"%s\"\n", rootfs
);
173 if (!bin
|| !(binfile
= fopen(bin
, "wb+"))) {
174 fprintf(stderr
, "Unable to open output file \"%s\"\n", bin
);
178 /* Build the kernel address and length (doesn't need to be aligned, read only) */
179 kerneloff
= fwaddr
+ sizeof(tag
);
180 kernellen
= getlen(kernelfile
);
182 /* Build the kernel header */
183 khdr
.loadaddr
= htonl(loadaddr
);
184 khdr
.entry
= htonl(entry
);
185 khdr
.lzmalen
= htonl(kernellen
);
187 /* Increase the kernel size by the header size */
188 kernellen
+= sizeof(khdr
);
190 /* Build the rootfs address and length (start and end do need to be aligned on flash erase block boundaries */
191 rootfsoff
= kerneloff
+ kernellen
;
192 rootfsoff
= (rootfsoff
% flash_bs
) > 0 ? (((rootfsoff
/ flash_bs
) + 1) * flash_bs
) : rootfsoff
;
193 rootfslen
= getlen(rootfsfile
);
194 rootfslen
= ( (rootfslen
% flash_bs
) > 0 ? (((rootfslen
/ flash_bs
) + 1) * flash_bs
) : rootfslen
);
195 imagelen
= rootfsoff
+ rootfslen
- kerneloff
+ sizeof(deadcode
);
196 rootfsoffpadlen
= rootfsoff
- (kerneloff
+ kernellen
);
198 /* Seek to the start of the kernel */
199 fseek(binfile
, kerneloff
- fwaddr
, SEEK_SET
);
201 /* Write the kernel header */
202 fwrite(&khdr
, sizeof(khdr
), 1, binfile
);
204 /* Write the kernel */
205 while (kernelfile
&& !feof(kernelfile
) && !ferror(kernelfile
)) {
206 read
= fread(readbuf
, sizeof(uint8_t), sizeof(readbuf
), kernelfile
);
207 fwrite(readbuf
, sizeof(uint8_t), read
, binfile
);
210 /* Write the RootFS */
211 fseek(binfile
, rootfsoff
- fwaddr
, SEEK_SET
);
212 while (rootfsfile
&& !feof(rootfsfile
) && !ferror(rootfsfile
)) {
213 read
= fread(readbuf
, sizeof(uint8_t), sizeof(readbuf
), rootfsfile
);
214 fwrite(readbuf
, sizeof(uint8_t), read
, binfile
);
217 /* Align image to specified erase block size and append deadc0de */
218 printf("Data alignment to %dk with 'deadc0de' appended\n", flash_bs
/1024);
219 fseek(binfile
, rootfsoff
+ rootfslen
- fwaddr
, SEEK_SET
);
220 fwrite(&deadcode
, sizeof(uint32_t), 1, binfile
);
222 /* Flush the binfile buffer so that when we read from file, it contains
223 * everything in the buffer
227 /* Choose and compute the CRC32 that should be inserted in the tag */
228 if ( tagid
&& ( (strncmp(tagid
, "bccfe", TAGID_LEN
) == 0)) || ( strncmp(tagid
, "bc300", TAGID_LEN
) == 0)) {
229 /* Compute the crc32 of the entire image (deadC0de included) */
230 imagecrc
= compute_crc32(imagecrc
, binfile
, kerneloff
- fwaddr
, imagelen
);
231 } else if ( tagid
&& (strncmp(tagid
, "ag306", TAGID_LEN
) == 0)) {
232 /* Compute the crc32 of the kernel and padding between kernel and rootfs) */
233 kernelcrc
= compute_crc32(kernelcrc
, binfile
, kerneloff
- fwaddr
, kernellen
+ rootfsoffpadlen
);
234 } else if ( tagid
&& ( (strncmp(tagid
, "bc221", TAGID_LEN
) == 0))) {
235 /* Compute the crc32 of the entire image (deadC0de included) */
236 imagecrc
= compute_crc32(imagecrc
, binfile
, kerneloff
- fwaddr
, imagelen
);
237 /* Compute the crc32 of the kernel and padding between kernel and rootfs) */
238 kernelfscrc
= compute_crc32(kernelfscrc
, binfile
, kerneloff
- fwaddr
, kernellen
+ rootfsoffpadlen
+ rootfslen
+ sizeof(deadcode
));
239 } else if ( tagid
&& (strncmp(tagid
, "bc310", TAGID_LEN
) == 0) ) {
240 /* Compute the crc32 of the entire image (deadC0de included) */
241 imagecrc
= compute_crc32(imagecrc
, binfile
, kerneloff
- fwaddr
, imagelen
);
242 /* Compute the crc32 of the kernel and padding between kernel and rootfs) */
243 kernelcrc
= compute_crc32(kernelcrc
, binfile
, kerneloff
- fwaddr
, kernellen
+ rootfsoffpadlen
);
244 /* Compute the crc32 of the flashImageStart to rootLength.
245 * The broadcom firmware assumes the rootfs starts the image,
246 * therefore uses the rootfs start to determine where to flash
247 * the image. Since we have the kernel first we have to give
248 * it the kernel address, but the crc uses the length
249 * associated with this address, which is added to the kernel
250 * length to determine the length of image to flash and thus
251 * needs to be rootfs + deadcode
253 rootfscrc
= compute_crc32(rootfscrc
, binfile
, kerneloff
- fwaddr
, rootfslen
+ sizeof(deadcode
));
256 /* Close the files */
260 if ( tagid
&& (strcmp(tagid
, "bccfe") == 0)) {
262 strncpy(tag
.bccfe
.tagVersion
, ver
, TAGVER_LEN
);
263 strncpy(tag
.bccfe
.sig_1
, IMAGETAG_MAGIC1
, sizeof(tag
.bccfe
.sig_1
) - 1);
264 strncpy(tag
.bccfe
.sig_2
, magic2
, sizeof(tag
.bccfe
.sig_2
) - 1);
265 strcpy(tag
.bccfe
.chipid
, chipid
);
266 strcpy(tag
.bccfe
.boardid
, boardid
);
267 strcpy(tag
.bccfe
.big_endian
, "1");
268 sprintf(tag
.bccfe
.totalLength
, "%lu", imagelen
);
270 /* We don't include CFE */
271 strcpy(tag
.bccfe
.cfeAddress
, "0");
272 strcpy(tag
.bccfe
.cfeLength
, "0");
275 sprintf(tag
.bccfe
.kernelAddress
, "%lu", kerneloff
);
276 sprintf(tag
.bccfe
.kernelLength
, "%lu", kernellen
+ rootfsoffpadlen
);
280 sprintf(tag
.bccfe
.rootAddress
, "%lu", rootfsoff
);
281 sprintf(tag
.bccfe
.rootLength
, "%lu", rootfslen
);
284 strncpy(tag
.bccfe
.tagId
, "bccfe", TAGID_LEN
);
286 int2tag(tag
.bccfe
.tagIdCRC
, crc32(IMAGETAG_CRC_START
, (uint8_t*)&(tag
.bccfe
.tagId
[0]), TAGID_LEN
));
287 int2tag(tag
.bccfe
.imageCRC
, imagecrc
);
288 int2tag(tag
.bccfe
.headerCRC
, crc32(IMAGETAG_CRC_START
, (uint8_t*)&tag
, sizeof(tag
) - 20));
289 } else if ( tagid
&& (strcmp(tagid
, "bc300") == 0)) {
291 strncpy(tag
.bc300
.tagVersion
, ver
, TAGVER_LEN
);
292 strncpy(tag
.bc300
.sig_1
, IMAGETAG_MAGIC1
, sizeof(tag
.bc300
.sig_1
) - 1);
293 strncpy(tag
.bc300
.sig_2
, magic2
, sizeof(tag
.bc300
.sig_2
) - 1);
294 strcpy(tag
.bc300
.chipid
, chipid
);
295 strcpy(tag
.bc300
.boardid
, boardid
);
296 strcpy(tag
.bc300
.big_endian
, "1");
297 sprintf(tag
.bc300
.totalLength
, "%lu", imagelen
);
299 /* We don't include CFE */
300 strcpy(tag
.bc300
.cfeAddress
, "0");
301 strcpy(tag
.bc300
.cfeLength
, "0");
304 sprintf(tag
.bc300
.kernelAddress
, "%lu", kerneloff
);
305 sprintf(tag
.bc300
.kernelLength
, "%lu", kernellen
+ rootfsoffpadlen
);
309 sprintf(tag
.bc300
.flashImageStart
, "%lu", kerneloff
);
310 sprintf(tag
.bc300
.flashRootLength
, "%lu", rootfslen
+ sizeof(deadcode
));
311 sprintf(tag
.bc300
.rootAddress
, "%lu", rootfsoff
);
312 sprintf(tag
.bc300
.rootLength
, "%lu", rootfslen
);
315 strncpy(tag
.bc300
.tagId
, "bc300", TAGID_LEN
);
317 int2tag(tag
.bc300
.tagIdCRC
, crc32(IMAGETAG_CRC_START
, (uint8_t*)&(tag
.bc300
.tagId
[0]), TAGID_LEN
));
318 int2tag(tag
.bc300
.imageCRC
, imagecrc
);
319 int2tag(tag
.bc300
.headerCRC
, crc32(IMAGETAG_CRC_START
, (uint8_t*)&tag
, sizeof(tag
) - 20));
320 } else if ( tagid
&& (strcmp(tagid
, "ag306") == 0)) {
322 strncpy(tag
.ag306
.tagVersion
, ver
, TAGVER_LEN
);
323 strncpy(tag
.ag306
.sig_1
, IMAGETAG_MAGIC1
, sizeof(tag
.ag306
.sig_1
) - 1);
324 strncpy(tag
.ag306
.sig_2
, magic2
, sizeof(tag
.ag306
.sig_2
) - 1);
325 strcpy(tag
.ag306
.chipid
, chipid
);
326 strcpy(tag
.ag306
.boardid
, boardid
);
327 strcpy(tag
.ag306
.big_endian
, "1");
328 sprintf(tag
.ag306
.totalLength
, "%lu", imagelen
);
330 /* We don't include CFE */
331 strcpy(tag
.ag306
.cfeAddress
, "0");
332 strcpy(tag
.ag306
.cfeLength
, "0");
335 sprintf(tag
.ag306
.kernelAddress
, "%lu", kerneloff
);
336 sprintf(tag
.ag306
.kernelLength
, "%lu", kernellen
+ rootfsoffpadlen
);
340 sprintf(tag
.ag306
.flashImageStart
, "%lu", kerneloff
);
341 sprintf(tag
.ag306
.flashRootLength
, "%lu", rootfslen
+ sizeof(deadcode
));
342 sprintf(tag
.ag306
.rootAddress
, "%lu", rootfsoff
);
343 sprintf(tag
.ag306
.rootLength
, "%lu", rootfslen
);
346 strncpy(tag
.ag306
.tagId
, "ag306", TAGID_LEN
);
348 int2tag(tag
.ag306
.tagIdCRC
, crc32(IMAGETAG_CRC_START
, (uint8_t*)&(tag
.ag306
.tagId
[0]), TAGID_LEN
));
349 int2tag(tag
.ag306
.kernelCRC
, kernelcrc
);
350 int2tag(tag
.ag306
.headerCRC
, crc32(IMAGETAG_CRC_START
, (uint8_t*)&tag
, sizeof(tag
) - 20));
351 } else if ( tagid
&& (strcmp(tagid
, "bc221") == 0)) {
353 strncpy(tag
.bc221
.tagVersion
, ver
, TAGVER_LEN
);
354 strncpy(tag
.bc221
.sig_1
, IMAGETAG_MAGIC1
, sizeof(tag
.bc221
.sig_1
) - 1);
355 strncpy(tag
.bc221
.sig_2
, magic2
, sizeof(tag
.bc221
.sig_2
) - 1);
356 strcpy(tag
.bc221
.chipid
, chipid
);
357 strcpy(tag
.bc221
.boardid
, boardid
);
358 strcpy(tag
.bc221
.big_endian
, "1");
359 sprintf(tag
.bc221
.totalLength
, "%lu", imagelen
);
361 /* We don't include CFE */
362 strcpy(tag
.bc221
.cfeAddress
, "0");
363 strcpy(tag
.bc221
.cfeLength
, "0");
366 sprintf(tag
.bc221
.kernelAddress
, "%lu", kerneloff
);
367 sprintf(tag
.bc221
.kernelLength
, "%lu", kernellen
+ rootfsoffpadlen
);
371 sprintf(tag
.bc221
.flashImageStart
, "%lu", kerneloff
);
372 sprintf(tag
.bc221
.flashRootLength
, "%lu", rootfslen
+ sizeof(deadcode
));
373 sprintf(tag
.bc221
.rootAddress
, "%lu", rootfsoff
);
374 sprintf(tag
.bc221
.rootLength
, "%lu", rootfslen
);
377 strncpy(tag
.bc221
.tagId
, "bc221", TAGID_LEN
);
379 strncpy(tag
.bc221
.flashLayoutVer
, layoutver
, TAGLAYOUT_LEN
);
382 int2tag(tag
.bc221
.tagIdCRC
, crc32(IMAGETAG_CRC_START
, (uint8_t*)&(tag
.bc221
.tagId
[0]), TAGID_LEN
));
383 int2tag(tag
.bc221
.imageCRC
, imagecrc
);
384 int2tag(tag
.bc221
.fskernelCRC
, kernelfscrc
);
385 int2tag(tag
.bc221
.headerCRC
, crc32(IMAGETAG_CRC_START
, (uint8_t*)&tag
, sizeof(tag
) - 20));
386 } else if ( tagid
&& (strcmp(tagid
, "bc310") == 0)) {
388 strncpy(tag
.bc310
.tagVersion
, ver
, TAGVER_LEN
);
389 strncpy(tag
.bc310
.sig_1
, IMAGETAG_MAGIC1
, sizeof(tag
.bc310
.sig_1
) - 1);
390 strncpy(tag
.bc310
.sig_2
, magic2
, sizeof(tag
.bc310
.sig_2
) - 1);
391 strcpy(tag
.bc310
.chipid
, chipid
);
392 strcpy(tag
.bc310
.boardid
, boardid
);
393 strcpy(tag
.bc310
.big_endian
, "1");
394 sprintf(tag
.bc310
.totalLength
, "%lu", imagelen
);
396 /* We don't include CFE */
397 strcpy(tag
.bc310
.cfeAddress
, "0");
398 strcpy(tag
.bc310
.cfeLength
, "0");
401 sprintf(tag
.bc310
.kernelAddress
, "%lu", kerneloff
);
402 sprintf(tag
.bc310
.kernelLength
, "%lu", kernellen
+ rootfsoffpadlen
);
406 sprintf(tag
.bc310
.flashImageStart
, "%lu", kerneloff
);
407 sprintf(tag
.bc310
.flashRootLength
, "%lu", rootfslen
+ sizeof(deadcode
));
408 sprintf(tag
.bc310
.rootAddress
, "%lu", rootfsoff
);
409 sprintf(tag
.bc310
.rootLength
, "%lu", rootfslen
);
412 strncpy(tag
.bc310
.tagId
, "bc310", TAGID_LEN
);
414 strncpy(tag
.bc310
.information1
, information
, TAGINFO_LEN
);
417 int2tag(tag
.bc310
.tagIdCRC
, crc32(IMAGETAG_CRC_START
, (uint8_t*)&(tag
.bc310
.tagId
[0]), TAGID_LEN
));
418 int2tag(tag
.bc310
.imageCRC
, imagecrc
);
419 int2tag(tag
.bc310
.kernelCRC
, kernelcrc
);
420 int2tag(tag
.bc310
.rootfsCRC
, rootfscrc
);
421 int2tag(tag
.bc310
.headerCRC
, crc32(IMAGETAG_CRC_START
, (uint8_t*)&tag
, sizeof(tag
) - 20));
424 fseek(binfile
, 0L, SEEK_SET
);
425 fwrite(&tag
, sizeof(uint8_t), sizeof(tag
), binfile
);
432 int main(int argc
, char **argv
)
435 char *kernel
, *rootfs
, *bin
, *boardid
, *chipid
, *magic2
, *ver
, *tagid
, *information
, *layoutver
;
436 uint32_t flashstart
, fwoffset
, loadaddr
, entry
;
437 uint32_t fwaddr
, flash_bs
;
440 kernel
= rootfs
= bin
= boardid
= chipid
= magic2
= ver
= tagid
= information
= layoutver
= NULL
;
443 flashstart
= DEFAULT_FLASH_START
;
444 fwoffset
= DEFAULT_FW_OFFSET
;
445 loadaddr
= IMAGETAG_DEFAULT_LOADADDR
;
446 flash_bs
= DEFAULT_FLASH_BS
;
448 printf("Broadcom image tagger - v0.2.0\n");
449 printf("Copyright (C) 2008 Axel Gembe\n");
450 printf("Copyright (C) 2009 Daniel Dickinson\n");
452 while ((c
= getopt(argc
, argv
, "i:f:o:b:c:s:n:v:m:k:l:e:h:t:d:y:")) != -1) {
470 flashstart
= strtoul(optarg
, NULL
, 16);
473 fwoffset
= strtoul(optarg
, NULL
, 16);
482 flash_bs
= strtoul(optarg
, NULL
, 16);
485 loadaddr
= strtoul(optarg
, NULL
, 16);
488 entry
= strtoul(optarg
, NULL
, 16);
494 information
= optarg
;
501 fprintf(stderr
, "Usage: imagetag <parameters>\n\n");
502 fprintf(stderr
, " -i <kernel> - The LZMA compressed kernel file to include in the image\n");
503 fprintf(stderr
, " -f <rootfs> - The RootFS file to include in the image\n");
504 fprintf(stderr
, " -o <bin> - The output file\n");
505 fprintf(stderr
, " -b <boardid> - The board id to set in the image (i.e. \"96345GW2\")\n");
506 fprintf(stderr
, " -c <chipid> - The chip id to set in the image (i.e. \"6345\")\n");
507 fprintf(stderr
, " -s <flashstart> - Flash start address (i.e. \"0xBFC00000\"\n");
508 fprintf(stderr
, " -n <fwoffset> - \n");
509 fprintf(stderr
, " -v <version> - \n");
510 fprintf(stderr
, " -m <magic2> - \n");
511 fprintf(stderr
, " -k <flash_bs> - flash erase block size\n");
512 fprintf(stderr
, " -l <loadaddr> - Address where the kernel expects to be loaded (defaults to 0x80010000)\n");
513 fprintf(stderr
, " -e <entry> - Address where the kernel entry point will end up\n");
514 fprintf(stderr
, " -t <tagid> - type if imagetag to create, use 'list' to see available choices");
515 fprintf(stderr
, " -d <information> - vendor specific information, for those that need it");
516 fprintf(stderr
, " -y <layoutver> - Flash Layout Version (2.2x code versions need this)");
517 fprintf(stderr
, " -h - Displays this text\n\n");
522 if (!boardid
|| !chipid
) {
523 fprintf(stderr
, "You need to specify the board (-b) and chip id (-c)!\n");
528 fprintf(stderr
, "You need to specify the kernel entry (-e)\n");
534 fprintf(stderr
, "You must specify a tagid (-t)\n");
536 if (strncmp(tagid
, "list", 4) == 0) {
537 fprintf(stderr
, "\n----------------------------------------\n");
538 fprintf(stderr
, "\tAvailable tagId:");
539 fprintf(stderr
, "\n\n");
540 for (i
= 0; i
< NUM_TAGID
; i
++) {
541 fprintf(stderr
, "\t%s\t%s", tagidtab
[i
].tagid
, tagidtab
[i
].tagiddesc
);
543 fprintf(stderr
, "\n----------------------------------------\n");
549 for(i
= 0; i
< NUM_TAGID
; i
++) {
550 if (strncmp(tagid
, tagidtab
[i
].tagid
, TAGID_LEN
) == 0) {
557 fprintf(stderr
, "The tagid you selected '%s' does't exist.\n", tagid
);
559 fprintf(stderr
, "Use -t list to see the list of available ids");
564 /* Fallback to defaults */
566 fwaddr
= flashstart
+ fwoffset
;
569 magic2
= malloc(sizeof(char) * 14);
574 strcpy(magic2
, IMAGETAG_MAGIC2
);
578 ver
= malloc(sizeof(char) * 4);
583 strcpy(ver
, IMAGETAG_VER
);
587 return tagfile(kernel
, rootfs
, bin
, boardid
, chipid
, fwaddr
, loadaddr
, entry
, ver
, magic2
, flash_bs
, tagid
, information
, layoutver
);