2 * spw303v.c - partially based on OpenWrt's imagetag.c and addpattern.c
4 * Copyright (C) 2011 Jonas Gorski <jonas.gorski@gmail.com>
6 * This program is free software; you can redistribute it and/or modify
7 * it under the terms of the GNU General Public License as published by
8 * the Free Software Foundation; either version 2 of the License, or
9 * (at your option) any later version.
11 * This program is distributed in the hope that it will be useful,
12 * but WITHOUT ANY WARRANTY; without even the implied warranty of
13 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
14 * General Public License for more details.
16 * You should have received a copy of the GNU General Public License
17 * along with this program; if not, write to the Free Software
18 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
29 #define IMAGE_LEN 10 /* Length of Length Field */
30 #define ADDRESS_LEN 12 /* Length of Address field */
31 #define TAGID_LEN 6 /* Length of tag ID */
32 #define TAGINFO_LEN 20 /* Length of vendor information field in tag */
33 #define TAGVER_LEN 4 /* Length of Tag Version */
34 #define TAGLAYOUT_LEN 4 /* Length of FlashLayoutVer */
39 unsigned char tagVersion[4]; // tag version. Will be 2 here.
40 unsigned char signiture_1[20]; // text line for company info
41 unsigned char signiture_2[14]; // additional info (can be version number)
42 unsigned char chipId[6]; // chip id
43 unsigned char boardId[16]; // board id
44 unsigned char bigEndian[2]; // if = 1 - big, = 0 - little endia of the host
45 unsigned char totalImageLen[IMAGE_LEN]; // the sum of all the following length
46 unsigned char cfeAddress[ADDRESS_LEN]; // if non zero, cfe starting address
47 unsigned char cfeLen[IMAGE_LEN]; // if non zero, cfe size in clear ASCII text.
48 unsigned char rootfsAddress[ADDRESS_LEN]; // if non zero, filesystem starting address
49 unsigned char rootfsLen[IMAGE_LEN]; // if non zero, filesystem size in clear ASCII text.
50 unsigned char kernelAddress[ADDRESS_LEN]; // if non zero, kernel starting address
51 unsigned char kernelLen[IMAGE_LEN]; // if non zero, kernel size in clear ASCII text.
53 unsigned char certf1Address[ADDRESS_LEN];
54 unsigned char certf1Len[6];
55 unsigned char certf2Address[ADDRESS_LEN];
56 unsigned char certf2Len[6];
57 unsigned char certf3Address[ADDRESS_LEN];
58 unsigned char certf3Len[6];
59 unsigned char httpsFileSize[4];
60 unsigned char tr64FileSize[4];
61 unsigned char tr69FileSize[4];
62 unsigned char filesmap[4];
64 unsigned char imageSequence[4]; // incrments everytime an image is flashed
65 unsigned char reserved[4]; // reserved for later use
66 unsigned char imageCRC[4]; // 216-219: CRC32 of images
67 unsigned char reserved2[16]; // 220-235: Unused at present
68 unsigned char headerCRC[4]; // 236-239: CRC32 of header excluding tagVersion
69 unsigned char reserved3[16]; // 240-255: Unused at present
72 static uint32_t crc32tab[256] = {
73 0x00000000, 0x77073096, 0xEE0E612C, 0x990951BA, 0x076DC419, 0x706AF48F, 0xE963A535, 0x9E6495A3,
74 0x0EDB8832, 0x79DCB8A4, 0xE0D5E91E, 0x97D2D988, 0x09B64C2B, 0x7EB17CBD, 0xE7B82D07, 0x90BF1D91,
75 0x1DB71064, 0x6AB020F2, 0xF3B97148, 0x84BE41DE, 0x1ADAD47D, 0x6DDDE4EB, 0xF4D4B551, 0x83D385C7,
76 0x136C9856, 0x646BA8C0, 0xFD62F97A, 0x8A65C9EC, 0x14015C4F, 0x63066CD9, 0xFA0F3D63, 0x8D080DF5,
77 0x3B6E20C8, 0x4C69105E, 0xD56041E4, 0xA2677172, 0x3C03E4D1, 0x4B04D447, 0xD20D85FD, 0xA50AB56B,
78 0x35B5A8FA, 0x42B2986C, 0xDBBBC9D6, 0xACBCF940, 0x32D86CE3, 0x45DF5C75, 0xDCD60DCF, 0xABD13D59,
79 0x26D930AC, 0x51DE003A, 0xC8D75180, 0xBFD06116, 0x21B4F4B5, 0x56B3C423, 0xCFBA9599, 0xB8BDA50F,
80 0x2802B89E, 0x5F058808, 0xC60CD9B2, 0xB10BE924, 0x2F6F7C87, 0x58684C11, 0xC1611DAB, 0xB6662D3D,
81 0x76DC4190, 0x01DB7106, 0x98D220BC, 0xEFD5102A, 0x71B18589, 0x06B6B51F, 0x9FBFE4A5, 0xE8B8D433,
82 0x7807C9A2, 0x0F00F934, 0x9609A88E, 0xE10E9818, 0x7F6A0DBB, 0x086D3D2D, 0x91646C97, 0xE6635C01,
83 0x6B6B51F4, 0x1C6C6162, 0x856530D8, 0xF262004E, 0x6C0695ED, 0x1B01A57B, 0x8208F4C1, 0xF50FC457,
84 0x65B0D9C6, 0x12B7E950, 0x8BBEB8EA, 0xFCB9887C, 0x62DD1DDF, 0x15DA2D49, 0x8CD37CF3, 0xFBD44C65,
85 0x4DB26158, 0x3AB551CE, 0xA3BC0074, 0xD4BB30E2, 0x4ADFA541, 0x3DD895D7, 0xA4D1C46D, 0xD3D6F4FB,
86 0x4369E96A, 0x346ED9FC, 0xAD678846, 0xDA60B8D0, 0x44042D73, 0x33031DE5, 0xAA0A4C5F, 0xDD0D7CC9,
87 0x5005713C, 0x270241AA, 0xBE0B1010, 0xC90C2086, 0x5768B525, 0x206F85B3, 0xB966D409, 0xCE61E49F,
88 0x5EDEF90E, 0x29D9C998, 0xB0D09822, 0xC7D7A8B4, 0x59B33D17, 0x2EB40D81, 0xB7BD5C3B, 0xC0BA6CAD,
89 0xEDB88320, 0x9ABFB3B6, 0x03B6E20C, 0x74B1D29A, 0xEAD54739, 0x9DD277AF, 0x04DB2615, 0x73DC1683,
90 0xE3630B12, 0x94643B84, 0x0D6D6A3E, 0x7A6A5AA8, 0xE40ECF0B, 0x9309FF9D, 0x0A00AE27, 0x7D079EB1,
91 0xF00F9344, 0x8708A3D2, 0x1E01F268, 0x6906C2FE, 0xF762575D, 0x806567CB, 0x196C3671, 0x6E6B06E7,
92 0xFED41B76, 0x89D32BE0, 0x10DA7A5A, 0x67DD4ACC, 0xF9B9DF6F, 0x8EBEEFF9, 0x17B7BE43, 0x60B08ED5,
93 0xD6D6A3E8, 0xA1D1937E, 0x38D8C2C4, 0x4FDFF252, 0xD1BB67F1, 0xA6BC5767, 0x3FB506DD, 0x48B2364B,
94 0xD80D2BDA, 0xAF0A1B4C, 0x36034AF6, 0x41047A60, 0xDF60EFC3, 0xA867DF55, 0x316E8EEF, 0x4669BE79,
95 0xCB61B38C, 0xBC66831A, 0x256FD2A0, 0x5268E236, 0xCC0C7795, 0xBB0B4703, 0x220216B9, 0x5505262F,
96 0xC5BA3BBE, 0xB2BD0B28, 0x2BB45A92, 0x5CB36A04, 0xC2D7FFA7, 0xB5D0CF31, 0x2CD99E8B, 0x5BDEAE1D,
97 0x9B64C2B0, 0xEC63F226, 0x756AA39C, 0x026D930A, 0x9C0906A9, 0xEB0E363F, 0x72076785, 0x05005713,
98 0x95BF4A82, 0xE2B87A14, 0x7BB12BAE, 0x0CB61B38, 0x92D28E9B, 0xE5D5BE0D, 0x7CDCEFB7, 0x0BDBDF21,
99 0x86D3D2D4, 0xF1D4E242, 0x68DDB3F8, 0x1FDA836E, 0x81BE16CD, 0xF6B9265B, 0x6FB077E1, 0x18B74777,
100 0x88085AE6, 0xFF0F6A70, 0x66063BCA, 0x11010B5C, 0x8F659EFF, 0xF862AE69, 0x616BFFD3, 0x166CCF45,
101 0xA00AE278, 0xD70DD2EE, 0x4E048354, 0x3903B3C2, 0xA7672661, 0xD06016F7, 0x4969474D, 0x3E6E77DB,
102 0xAED16A4A, 0xD9D65ADC, 0x40DF0B66, 0x37D83BF0, 0xA9BCAE53, 0xDEBB9EC5, 0x47B2CF7F, 0x30B5FFE9,
103 0xBDBDF21C, 0xCABAC28A, 0x53B39330, 0x24B4A3A6, 0xBAD03605, 0xCDD70693, 0x54DE5729, 0x23D967BF,
104 0xB3667A2E, 0xC4614AB8, 0x5D681B02, 0x2A6F2B94, 0xB40BBE37, 0xC30C8EA1, 0x5A05DF1B, 0x2D02EF8D
106 #define IMAGETAG_CRC_START 0xFFFFFFFF
108 #define IMAGETAG_MAGIC1_TCOM "AAAAAAAA Corporatio"
110 static char fake_data[] = {
111 0x18, 0x21, 0x21, 0x18, 0x21, 0x21, 0x21, 0x21, 0x21, 0x21, 0x21 ,0x18,
112 0x21, 0x24, 0x21, 0x1b, 0x18, 0x18, 0x24, 0x24, 0x18, 0x21, 0x21, 0x21,
113 0x21, 0x21, 0x21, 0x21, 0x1b, 0x18, 0x18, 0x24, 0x24, 0x21, 0x21, 0x21,
114 0x21, 0x21, 0x21, 0x21, 0x18, 0x21, 0x21, 0x21, 0x21, 0x21, 0x21, 0x18,
115 0x21, 0x21, 0x21, 0x21, 0x21, 0x21, 0x21, 0x21, 0x21, 0x18, 0x21, 0x21,
116 0x21, 0x21, 0x21, 0x21,
120 uint32_t crc32(uint32_t crc, uint8_t *data, size_t len)
123 crc = (crc >> 8) ^ crc32tab[(crc ^ *data++) & 0xFF];
128 void fix_header(void *buf)
130 struct spw303v_tag *tag = buf;
132 /* Replace signature with custom t-com one */
133 memset(tag->signiture_1, 0, 20);
134 memcpy(tag->signiture_1, IMAGETAG_MAGIC1_TCOM, strlen(IMAGETAG_MAGIC1_TCOM));
136 /* Clear cert fields to remove information_* data */
137 memset(tag->certf1Address, 0, 74);
139 /* replace image crc with modified one */
140 crc = ntohl(*((uint32_t *)&tag->imageCRC));
142 crc = htonl(crc32(crc, fake_data, 64));
144 memcpy(tag->imageCRC, &crc, 4);
147 crc = htonl(crc32(IMAGETAG_CRC_START, buf, 236));
148 memcpy(tag->headerCRC, &crc, 4);
153 void usage(void) __attribute__ (( __noreturn__ ));
157 fprintf(stderr, "Usage: spw303v [-i <inputfile>] [-o <outputfile>]\n");
162 int main(int argc, char **argv)
164 char buf[1024]; /* keep this at 1k or adjust garbage calc below */
174 uint32_t image_crc = IMAGETAG_CRC_START;
176 while ((c = getopt(argc, argv, "i:o:h")) != -1) {
190 if (optind != argc || optind == 1) {
191 fprintf(stderr, "illegal arg \"%s\"\n", argv[optind]);
195 if (ifn && !(in = fopen(ifn, "r"))) {
196 fprintf(stderr, "can not open \"%s\" for reading\n", ifn);
200 if (ofn && !(out = fopen(ofn, "w"))) {
201 fprintf(stderr, "can not open \"%s\" for writing\n", ofn);
207 while ((n = fread(buf, 1, sizeof(buf), in)) > 0) {
208 if (n < sizeof(buf)) {
211 fprintf(stderr, "fread error\n");
216 if (first_block && n >= 256) {
221 image_crc = crc32(image_crc, buf, n);
223 if (!fwrite(buf, n, 1, out)) {
225 fprintf(stderr, "fwrite error\n");