1 /*
2 * Copyright 1994, 1995, 2000 Neil Russell.
3 * (See License)
4 * Copyright 2000, 2001 DENX Software Engineering, Wolfgang Denk, wd@denx.de
5 * Copyright 2011 Comelit Group SpA,
6 * Luca Ceresoli <luca.ceresoli@comelit.it>
7 */
8 #include <common.h>
9 #include <command.h>
10 #include <efi_loader.h>
11 #include <env.h>
12 #include <image.h>
13 #include <lmb.h>
14 #include <log.h>
15 #include <mapmem.h>
16 #include <net.h>
17 #include <asm/global_data.h>
18 #include <net/tftp.h>
19 #include "bootp.h"
20 #ifdef CONFIG_SYS_DIRECT_FLASH_TFTP
21 #include <flash.h>
22 #endif
23
24 DECLARE_GLOBAL_DATA_PTR;
25
26 /* Well known TFTP port # */
27 #define WELL_KNOWN_PORT 69
28 /* Millisecs to timeout for lost pkt */
29 #define TIMEOUT 5000UL
30 #ifndef CONFIG_NET_RETRY_COUNT
31 /* # of timeouts before giving up */
32 # define TIMEOUT_COUNT 10
33 #else
34 # define TIMEOUT_COUNT (CONFIG_NET_RETRY_COUNT * 2)
35 #endif
36 /* Number of "loading" hashes per line (for checking the image size) */
37 #define HASHES_PER_LINE 65
38
39 /*
40 * TFTP operations.
41 */
42 #define TFTP_RRQ 1
43 #define TFTP_WRQ 2
44 #define TFTP_DATA 3
45 #define TFTP_ACK 4
46 #define TFTP_ERROR 5
47 #define TFTP_OACK 6
48
49 static ulong timeout_ms = TIMEOUT;
50 static int timeout_count_max = TIMEOUT_COUNT;
51 static ulong time_start; /* Record time we started tftp */
52
53 /*
54 * These globals govern the timeout behavior when attempting a connection to a
55 * TFTP server. tftp_timeout_ms specifies the number of milliseconds to
56 * wait for the server to respond to initial connection. Second global,
57 * tftp_timeout_count_max, gives the number of such connection retries.
58 * tftp_timeout_count_max must be non-negative and tftp_timeout_ms must be
59 * positive. The globals are meant to be set (and restored) by code needing
60 * non-standard timeout behavior when initiating a TFTP transfer.
61 */
62 ulong tftp_timeout_ms = TIMEOUT;
63 int tftp_timeout_count_max = TIMEOUT_COUNT;
64
65 enum {
66 TFTP_ERR_UNDEFINED = 0,
67 TFTP_ERR_FILE_NOT_FOUND = 1,
68 TFTP_ERR_ACCESS_DENIED = 2,
69 TFTP_ERR_DISK_FULL = 3,
70 TFTP_ERR_UNEXPECTED_OPCODE = 4,
71 TFTP_ERR_UNKNOWN_TRANSFER_ID = 5,
72 TFTP_ERR_FILE_ALREADY_EXISTS = 6,
73 TFTP_ERR_OPTION_NEGOTIATION = 8,
74 };
75
76 static struct in_addr tftp_remote_ip;
77 /* The UDP port at their end */
78 static int tftp_remote_port;
79 /* The UDP port at our end */
80 static int tftp_our_port;
81 static int timeout_count;
82 /* packet sequence number */
83 static ulong tftp_cur_block;
84 /* last packet sequence number received */
85 static ulong tftp_prev_block;
86 /* count of sequence number wraparounds */
87 static ulong tftp_block_wrap;
88 /* memory offset due to wrapping */
89 static ulong tftp_block_wrap_offset;
90 static int tftp_state;
91 static ulong tftp_load_addr;
92 #ifdef CONFIG_LMB
93 static ulong tftp_load_size;
94 #endif
95 #ifdef CONFIG_TFTP_TSIZE
96 /* The file size reported by the server */
97 static int tftp_tsize;
98 /* The number of hashes we printed */
99 static short tftp_tsize_num_hash;
100 #endif
101 /* The window size negotiated */
102 static ushort tftp_windowsize;
103 /* Next block to send ack to */
104 static ushort tftp_next_ack;
105 /* Last nack block we send */
106 static ushort tftp_last_nack;
107 #ifdef CONFIG_CMD_TFTPPUT
108 /* 1 if writing, else 0 */
109 static int tftp_put_active;
110 /* 1 if we have sent the last block */
111 static int tftp_put_final_block_sent;
112 #else
113 #define tftp_put_active 0
114 #endif
115
116 #define STATE_SEND_RRQ 1
117 #define STATE_DATA 2
118 #define STATE_TOO_LARGE 3
119 #define STATE_BAD_MAGIC 4
120 #define STATE_OACK 5
121 #define STATE_RECV_WRQ 6
122 #define STATE_SEND_WRQ 7
123 #define STATE_INVALID_OPTION 8
124
125 /* default TFTP block size */
126 #define TFTP_BLOCK_SIZE 512
127 /* sequence number is 16 bit */
128 #define TFTP_SEQUENCE_SIZE ((ulong)(1<<16))
129
130 #define DEFAULT_NAME_LEN (8 + 4 + 1)
131 static char default_filename[DEFAULT_NAME_LEN];
132
133 #ifndef CONFIG_TFTP_FILE_NAME_MAX_LEN
134 #define MAX_LEN 128
135 #else
136 #define MAX_LEN CONFIG_TFTP_FILE_NAME_MAX_LEN
137 #endif
138
139 static char tftp_filename[MAX_LEN];
140
141 /* 512 is poor choice for ethernet, MTU is typically 1500.
142 * Minus eth.hdrs thats 1468. Can get 2x better throughput with
143 * almost-MTU block sizes. At least try... fall back to 512 if need be.
144 * (but those using CONFIG_IP_DEFRAG may want to set a larger block in cfg file)
145 */
146
147 /* When windowsize is defined to 1,
148 * tftp behaves the same way as it was
149 * never declared
150 */
151 #ifdef CONFIG_TFTP_WINDOWSIZE
152 #define TFTP_WINDOWSIZE CONFIG_TFTP_WINDOWSIZE
153 #else
154 #define TFTP_WINDOWSIZE 1
155 #endif
156
157 static unsigned short tftp_block_size = TFTP_BLOCK_SIZE;
158 static unsigned short tftp_block_size_option = CONFIG_TFTP_BLOCKSIZE;
159 static unsigned short tftp_window_size_option = TFTP_WINDOWSIZE;
160
store_block(int block,uchar * src,unsigned int len)161 static inline int store_block(int block, uchar *src, unsigned int len)
162 {
163 ulong offset = block * tftp_block_size + tftp_block_wrap_offset -
164 tftp_block_size;
165 ulong newsize = offset + len;
166 ulong store_addr = tftp_load_addr + offset;
167 #ifdef CONFIG_SYS_DIRECT_FLASH_TFTP
168 int i, rc = 0;
169
170 for (i = 0; i < CONFIG_SYS_MAX_FLASH_BANKS; i++) {
171 /* start address in flash? */
172 if (flash_info[i].flash_id == FLASH_UNKNOWN)
173 continue;
174 if (store_addr >= flash_info[i].start[0]) {
175 rc = 1;
176 break;
177 }
178 }
179
180 if (rc) { /* Flash is destination for this packet */
181 rc = flash_write((char *)src, store_addr, len);
182 if (rc) {
183 flash_perror(rc);
184 return rc;
185 }
186 } else
187 #endif /* CONFIG_SYS_DIRECT_FLASH_TFTP */
188 {
189 void *ptr;
190
191 #ifdef CONFIG_LMB
192 ulong end_addr = tftp_load_addr + tftp_load_size;
193
194 if (!end_addr)
195 end_addr = ULONG_MAX;
196
197 if (store_addr < tftp_load_addr ||
198 store_addr + len > end_addr) {
199 puts("\nTFTP error: ");
200 puts("trying to overwrite reserved memory...\n");
201 return -1;
202 }
203 #endif
204 ptr = map_sysmem(store_addr, len);
205 memcpy(ptr, src, len);
206 unmap_sysmem(ptr);
207 }
208
209 if (net_boot_file_size < newsize)
210 net_boot_file_size = newsize;
211
212 return 0;
213 }
214
215 /* Clear our state ready for a new transfer */
new_transfer(void)216 static void new_transfer(void)
217 {
218 tftp_prev_block = 0;
219 tftp_block_wrap = 0;
220 tftp_block_wrap_offset = 0;
221 #ifdef CONFIG_CMD_TFTPPUT
222 tftp_put_final_block_sent = 0;
223 #endif
224 }
225
226 #ifdef CONFIG_CMD_TFTPPUT
227 /**
228 * Load the next block from memory to be sent over tftp.
229 *
230 * @param block Block number to send
231 * @param dst Destination buffer for data
232 * @param len Number of bytes in block (this one and every other)
233 * @return number of bytes loaded
234 */
load_block(unsigned block,uchar * dst,unsigned len)235 static int load_block(unsigned block, uchar *dst, unsigned len)
236 {
237 /* We may want to get the final block from the previous set */
238 ulong offset = block * tftp_block_size + tftp_block_wrap_offset -
239 tftp_block_size;
240 ulong tosend = len;
241
242 tosend = min(net_boot_file_size - offset, tosend);
243 (void)memcpy(dst, (void *)(image_save_addr + offset), tosend);
244 debug("%s: block=%u, offset=%lu, len=%u, tosend=%lu\n", __func__,
245 block, offset, len, tosend);
246 return tosend;
247 }
248 #endif
249
250 static void tftp_send(void);
251 static void tftp_timeout_handler(void);
252
253 /**********************************************************************/
254
show_block_marker(void)255 static void show_block_marker(void)
256 {
257 ulong pos;
258
259 #ifdef CONFIG_TFTP_TSIZE
260 if (tftp_tsize) {
261 pos = tftp_cur_block * tftp_block_size +
262 tftp_block_wrap_offset;
263 if (pos > tftp_tsize)
264 pos = tftp_tsize;
265
266 while (tftp_tsize_num_hash < pos * 50 / tftp_tsize) {
267 putc('#');
268 tftp_tsize_num_hash++;
269 }
270 } else
271 #endif
272 {
273 pos = (tftp_cur_block - 1) +
274 (tftp_block_wrap * TFTP_SEQUENCE_SIZE);
275 if ((pos % 10) == 0)
276 putc('#');
277 else if (((pos + 1) % (10 * HASHES_PER_LINE)) == 0)
278 puts("\n\t ");
279 }
280 }
281
282 /**
283 * restart the current transfer due to an error
284 *
285 * @param msg Message to print for user
286 */
restart(const char * msg)287 static void restart(const char *msg)
288 {
289 printf("\n%s; starting again\n", msg);
290 net_start_again();
291 }
292
293 /*
294 * Check if the block number has wrapped, and update progress
295 *
296 * TODO: The egregious use of global variables in this file should be tidied.
297 */
update_block_number(void)298 static void update_block_number(void)
299 {
300 /*
301 * RFC1350 specifies that the first data packet will
302 * have sequence number 1. If we receive a sequence
303 * number of 0 this means that there was a wrap
304 * around of the (16 bit) counter.
305 */
306 if (tftp_cur_block == 0 && tftp_prev_block != 0) {
307 tftp_block_wrap++;
308 tftp_block_wrap_offset += tftp_block_size * TFTP_SEQUENCE_SIZE;
309 timeout_count = 0; /* we've done well, reset the timeout */
310 }
311 show_block_marker();
312 }
313
314 /* The TFTP get or put is complete */
tftp_complete(void)315 static void tftp_complete(void)
316 {
317 #ifdef CONFIG_TFTP_TSIZE
318 /* Print hash marks for the last packet received */
319 while (tftp_tsize && tftp_tsize_num_hash < 49) {
320 putc('#');
321 tftp_tsize_num_hash++;
322 }
323 puts(" ");
324 print_size(tftp_tsize, "");
325 #endif
326 time_start = get_timer(time_start);
327 if (time_start > 0) {
328 puts("\n\t "); /* Line up with "Loading: " */
329 print_size(net_boot_file_size /
330 time_start * 1000, "/s");
331 }
332 puts("\ndone\n");
333 if (IS_ENABLED(CONFIG_CMD_BOOTEFI)) {
334 if (!tftp_put_active)
335 efi_set_bootdev("Net", "", tftp_filename,
336 map_sysmem(tftp_load_addr, 0),
337 net_boot_file_size);
338 }
339 net_set_state(NETLOOP_SUCCESS);
340 }
341
tftp_send(void)342 static void tftp_send(void)
343 {
344 uchar *pkt;
345 uchar *xp;
346 int len = 0;
347 ushort *s;
348 bool err_pkt = false;
349
350 /*
351 * We will always be sending some sort of packet, so
352 * cobble together the packet headers now.
353 */
354 pkt = net_tx_packet + net_eth_hdr_size() + IP_UDP_HDR_SIZE;
355
356 switch (tftp_state) {
357 case STATE_SEND_RRQ:
358 case STATE_SEND_WRQ:
359 xp = pkt;
360 s = (ushort *)pkt;
361 #ifdef CONFIG_CMD_TFTPPUT
362 *s++ = htons(tftp_state == STATE_SEND_RRQ ? TFTP_RRQ :
363 TFTP_WRQ);
364 #else
365 *s++ = htons(TFTP_RRQ);
366 #endif
367 pkt = (uchar *)s;
368 strcpy((char *)pkt, tftp_filename);
369 pkt += strlen(tftp_filename) + 1;
370 strcpy((char *)pkt, "octet");
371 pkt += 5 /*strlen("octet")*/ + 1;
372 strcpy((char *)pkt, "timeout");
373 pkt += 7 /*strlen("timeout")*/ + 1;
374 sprintf((char *)pkt, "%lu", timeout_ms / 1000);
375 debug("send option \"timeout %s\"\n", (char *)pkt);
376 pkt += strlen((char *)pkt) + 1;
377 #ifdef CONFIG_TFTP_TSIZE
378 pkt += sprintf((char *)pkt, "tsize%c%u%c",
379 0, net_boot_file_size, 0);
380 #endif
381 /* try for more effic. blk size */
382 pkt += sprintf((char *)pkt, "blksize%c%d%c",
383 0, tftp_block_size_option, 0);
384
385 /* try for more effic. window size.
386 * Implemented only for tftp get.
387 * Don't bother sending if it's 1
388 */
389 if (tftp_state == STATE_SEND_RRQ && tftp_window_size_option > 1)
390 pkt += sprintf((char *)pkt, "windowsize%c%d%c",
391 0, tftp_window_size_option, 0);
392 len = pkt - xp;
393 break;
394
395 case STATE_OACK:
396
397 case STATE_RECV_WRQ:
398 case STATE_DATA:
399 xp = pkt;
400 s = (ushort *)pkt;
401 s[0] = htons(TFTP_ACK);
402 s[1] = htons(tftp_cur_block);
403 pkt = (uchar *)(s + 2);
404 #ifdef CONFIG_CMD_TFTPPUT
405 if (tftp_put_active) {
406 int toload = tftp_block_size;
407 int loaded = load_block(tftp_cur_block, pkt, toload);
408
409 s[0] = htons(TFTP_DATA);
410 pkt += loaded;
411 tftp_put_final_block_sent = (loaded < toload);
412 }
413 #endif
414 len = pkt - xp;
415 break;
416
417 case STATE_TOO_LARGE:
418 xp = pkt;
419 s = (ushort *)pkt;
420 *s++ = htons(TFTP_ERROR);
421 *s++ = htons(3);
422
423 pkt = (uchar *)s;
424 strcpy((char *)pkt, "File too large");
425 pkt += 14 /*strlen("File too large")*/ + 1;
426 len = pkt - xp;
427 err_pkt = true;
428 break;
429
430 case STATE_BAD_MAGIC:
431 xp = pkt;
432 s = (ushort *)pkt;
433 *s++ = htons(TFTP_ERROR);
434 *s++ = htons(2);
435 pkt = (uchar *)s;
436 strcpy((char *)pkt, "File has bad magic");
437 pkt += 18 /*strlen("File has bad magic")*/ + 1;
438 len = pkt - xp;
439 err_pkt = true;
440 break;
441
442 case STATE_INVALID_OPTION:
443 xp = pkt;
444 s = (ushort *)pkt;
445 *s++ = htons(TFTP_ERROR);
446 *s++ = htons(TFTP_ERR_OPTION_NEGOTIATION);
447 pkt = (uchar *)s;
448 strcpy((char *)pkt, "Option Negotiation Failed");
449 /* strlen("Option Negotiation Failed") + NULL*/
450 pkt += 25 + 1;
451 len = pkt - xp;
452 err_pkt = true;
453 break;
454 }
455
456 net_send_udp_packet(net_server_ethaddr, tftp_remote_ip,
457 tftp_remote_port, tftp_our_port, len);
458
459 if (err_pkt)
460 net_set_state(NETLOOP_FAIL);
461 }
462
463 #ifdef CONFIG_CMD_TFTPPUT
icmp_handler(unsigned type,unsigned code,unsigned dest,struct in_addr sip,unsigned src,uchar * pkt,unsigned len)464 static void icmp_handler(unsigned type, unsigned code, unsigned dest,
465 struct in_addr sip, unsigned src, uchar *pkt,
466 unsigned len)
467 {
468 if (type == ICMP_NOT_REACH && code == ICMP_NOT_REACH_PORT) {
469 /* Oh dear the other end has gone away */
470 restart("TFTP server died");
471 }
472 }
473 #endif
474
tftp_handler(uchar * pkt,unsigned dest,struct in_addr sip,unsigned src,unsigned len)475 static void tftp_handler(uchar *pkt, unsigned dest, struct in_addr sip,
476 unsigned src, unsigned len)
477 {
478 __be16 proto;
479 __be16 *s;
480 int i;
481 u16 timeout_val_rcvd;
482
483 if (dest != tftp_our_port) {
484 return;
485 }
486 if (tftp_state != STATE_SEND_RRQ && src != tftp_remote_port &&
487 tftp_state != STATE_RECV_WRQ && tftp_state != STATE_SEND_WRQ)
488 return;
489
490 if (len < 2)
491 return;
492 len -= 2;
493 /* warning: don't use increment (++) in ntohs() macros!! */
494 s = (__be16 *)pkt;
495 proto = *s++;
496 pkt = (uchar *)s;
497 switch (ntohs(proto)) {
498 case TFTP_RRQ:
499 break;
500
501 case TFTP_ACK:
502 #ifdef CONFIG_CMD_TFTPPUT
503 if (tftp_put_active) {
504 if (tftp_put_final_block_sent) {
505 tftp_complete();
506 } else {
507 /*
508 * Move to the next block. We want our block
509 * count to wrap just like the other end!
510 */
511 int block = ntohs(*s);
512 int ack_ok = (tftp_cur_block == block);
513
514 tftp_prev_block = tftp_cur_block;
515 tftp_cur_block = (unsigned short)(block + 1);
516 update_block_number();
517 if (ack_ok)
518 tftp_send(); /* Send next data block */
519 }
520 }
521 #endif
522 break;
523
524 default:
525 break;
526
527 #ifdef CONFIG_CMD_TFTPSRV
528 case TFTP_WRQ:
529 debug("Got WRQ\n");
530 tftp_remote_ip = sip;
531 tftp_remote_port = src;
532 tftp_our_port = 1024 + (get_timer(0) % 3072);
533 new_transfer();
534 tftp_send(); /* Send ACK(0) */
535 break;
536 #endif
537
538 case TFTP_OACK:
539 debug("Got OACK: ");
540 for (i = 0; i < len; i++) {
541 if (pkt[i] == '\0')
542 debug(" ");
543 else
544 debug("%c", pkt[i]);
545 }
546 debug("\n");
547 tftp_state = STATE_OACK;
548 tftp_remote_port = src;
549 /*
550 * Check for 'blksize' option.
551 * Careful: "i" is signed, "len" is unsigned, thus
552 * something like "len-8" may give a *huge* number
553 */
554 for (i = 0; i+8 < len; i++) {
555 if (strcasecmp((char *)pkt + i, "blksize") == 0) {
556 tftp_block_size = (unsigned short)
557 dectoul((char *)pkt + i + 8, NULL);
558 debug("Blocksize oack: %s, %d\n",
559 (char *)pkt + i + 8, tftp_block_size);
560 if (tftp_block_size > tftp_block_size_option) {
561 printf("Invalid blk size(=%d)\n",
562 tftp_block_size);
563 tftp_state = STATE_INVALID_OPTION;
564 }
565 }
566 if (strcasecmp((char *)pkt + i, "timeout") == 0) {
567 timeout_val_rcvd = (unsigned short)
568 dectoul((char *)pkt + i + 8, NULL);
569 debug("Timeout oack: %s, %d\n",
570 (char *)pkt + i + 8, timeout_val_rcvd);
571 if (timeout_val_rcvd != (timeout_ms / 1000)) {
572 printf("Invalid timeout val(=%d s)\n",
573 timeout_val_rcvd);
574 tftp_state = STATE_INVALID_OPTION;
575 }
576 }
577 #ifdef CONFIG_TFTP_TSIZE
578 if (strcasecmp((char *)pkt + i, "tsize") == 0) {
579 tftp_tsize = dectoul((char *)pkt + i + 6,
580 NULL);
581 debug("size = %s, %d\n",
582 (char *)pkt + i + 6, tftp_tsize);
583 }
584 #endif
585 if (strcasecmp((char *)pkt + i, "windowsize") == 0) {
586 tftp_windowsize =
587 dectoul((char *)pkt + i + 11, NULL);
588 debug("windowsize = %s, %d\n",
589 (char *)pkt + i + 11, tftp_windowsize);
590 }
591 }
592
593 tftp_next_ack = tftp_windowsize;
594
595 #ifdef CONFIG_CMD_TFTPPUT
596 if (tftp_put_active && tftp_state == STATE_OACK) {
597 /* Get ready to send the first block */
598 tftp_state = STATE_DATA;
599 tftp_cur_block++;
600 }
601 #endif
602 tftp_send(); /* Send ACK or first data block */
603 break;
604 case TFTP_DATA:
605 if (len < 2)
606 return;
607 len -= 2;
608
609 if (ntohs(*(__be16 *)pkt) != (ushort)(tftp_cur_block + 1)) {
610 debug("Received unexpected block: %d, expected: %d\n",
611 ntohs(*(__be16 *)pkt),
612 (ushort)(tftp_cur_block + 1));
613 /*
614 * If one packet is dropped most likely
615 * all other buffers in the window
616 * that will arrive will cause a sending NACK.
617 * This just overwellms the server, let's just send one.
618 */
619 if (tftp_last_nack != tftp_cur_block) {
620 tftp_send();
621 tftp_last_nack = tftp_cur_block;
622 tftp_next_ack = (ushort)(tftp_cur_block +
623 tftp_windowsize);
624 }
625 break;
626 }
627
628 tftp_cur_block++;
629 tftp_cur_block %= TFTP_SEQUENCE_SIZE;
630
631 if (tftp_state == STATE_SEND_RRQ) {
632 debug("Server did not acknowledge any options!\n");
633 tftp_next_ack = tftp_windowsize;
634 }
635
636 if (tftp_state == STATE_SEND_RRQ || tftp_state == STATE_OACK ||
637 tftp_state == STATE_RECV_WRQ) {
638 /* first block received */
639 tftp_state = STATE_DATA;
640 tftp_remote_port = src;
641 new_transfer();
642
643 if (tftp_cur_block != 1) { /* Assertion */
644 puts("\nTFTP error: ");
645 printf("First block is not block 1 (%ld)\n",
646 tftp_cur_block);
647 puts("Starting again\n\n");
648 net_start_again();
649 break;
650 }
651 }
652
653 if (tftp_cur_block == tftp_prev_block) {
654 /* Same block again; ignore it. */
655 break;
656 }
657
658 update_block_number();
659 tftp_prev_block = tftp_cur_block;
660 timeout_count_max = tftp_timeout_count_max;
661 net_set_timeout_handler(timeout_ms, tftp_timeout_handler);
662
663 if (store_block(tftp_cur_block, pkt + 2, len)) {
664 eth_halt();
665 net_set_state(NETLOOP_FAIL);
666 break;
667 }
668
669 if (len < tftp_block_size) {
670 tftp_send();
671 tftp_complete();
672 break;
673 }
674
675 /*
676 * Acknowledge the block just received, which will prompt
677 * the remote for the next one.
678 */
679 if (tftp_cur_block == tftp_next_ack) {
680 tftp_send();
681 tftp_next_ack += tftp_windowsize;
682 }
683 break;
684
685 case TFTP_ERROR:
686 printf("\nTFTP error: '%s' (%d)\n",
687 pkt + 2, ntohs(*(__be16 *)pkt));
688
689 switch (ntohs(*(__be16 *)pkt)) {
690 case TFTP_ERR_FILE_NOT_FOUND:
691 case TFTP_ERR_ACCESS_DENIED:
692 puts("Not retrying...\n");
693 eth_halt();
694 net_set_state(NETLOOP_FAIL);
695 break;
696 case TFTP_ERR_UNDEFINED:
697 case TFTP_ERR_DISK_FULL:
698 case TFTP_ERR_UNEXPECTED_OPCODE:
699 case TFTP_ERR_UNKNOWN_TRANSFER_ID:
700 case TFTP_ERR_FILE_ALREADY_EXISTS:
701 default:
702 puts("Starting again\n\n");
703 net_start_again();
704 break;
705 }
706 break;
707 }
708 }
709
710
tftp_timeout_handler(void)711 static void tftp_timeout_handler(void)
712 {
713 if (++timeout_count > timeout_count_max) {
714 restart("Retry count exceeded");
715 } else {
716 puts("T ");
717 net_set_timeout_handler(timeout_ms, tftp_timeout_handler);
718 if (tftp_state != STATE_RECV_WRQ)
719 tftp_send();
720 }
721 }
722
723 /* Initialize tftp_load_addr and tftp_load_size from image_load_addr and lmb */
tftp_init_load_addr(void)724 static int tftp_init_load_addr(void)
725 {
726 #ifdef CONFIG_LMB
727 struct lmb lmb;
728 phys_size_t max_size;
729
730 lmb_init_and_reserve(&lmb, gd->bd, (void *)gd->fdt_blob);
731
732 max_size = lmb_get_free_size(&lmb, image_load_addr);
733 if (!max_size)
734 return -1;
735
736 tftp_load_size = max_size;
737 #endif
738 tftp_load_addr = image_load_addr;
739 return 0;
740 }
741
tftp_start(enum proto_t protocol)742 void tftp_start(enum proto_t protocol)
743 {
744 #if CONFIG_NET_TFTP_VARS
745 char *ep; /* Environment pointer */
746
747 /*
748 * Allow the user to choose TFTP blocksize and timeout.
749 * TFTP protocol has a minimal timeout of 1 second.
750 */
751
752 ep = env_get("tftpblocksize");
753 if (ep != NULL)
754 tftp_block_size_option = simple_strtol(ep, NULL, 10);
755
756 ep = env_get("tftpwindowsize");
757 if (ep != NULL)
758 tftp_window_size_option = simple_strtol(ep, NULL, 10);
759
760 ep = env_get("tftptimeout");
761 if (ep != NULL)
762 timeout_ms = simple_strtol(ep, NULL, 10);
763
764 if (timeout_ms < 1000) {
765 printf("TFTP timeout (%ld ms) too low, set min = 1000 ms\n",
766 timeout_ms);
767 timeout_ms = 1000;
768 }
769
770 ep = env_get("tftptimeoutcountmax");
771 if (ep != NULL)
772 tftp_timeout_count_max = simple_strtol(ep, NULL, 10);
773
774 if (tftp_timeout_count_max < 0) {
775 printf("TFTP timeout count max (%d ms) negative, set to 0\n",
776 tftp_timeout_count_max);
777 tftp_timeout_count_max = 0;
778 }
779 #endif
780
781 debug("TFTP blocksize = %i, TFTP windowsize = %d timeout = %ld ms\n",
782 tftp_block_size_option, tftp_window_size_option, timeout_ms);
783
784 tftp_remote_ip = net_server_ip;
785 if (!net_parse_bootfile(&tftp_remote_ip, tftp_filename, MAX_LEN)) {
786 sprintf(default_filename, "%02X%02X%02X%02X.img",
787 net_ip.s_addr & 0xFF,
788 (net_ip.s_addr >> 8) & 0xFF,
789 (net_ip.s_addr >> 16) & 0xFF,
790 (net_ip.s_addr >> 24) & 0xFF);
791
792 strncpy(tftp_filename, default_filename, DEFAULT_NAME_LEN);
793 tftp_filename[DEFAULT_NAME_LEN - 1] = 0;
794
795 printf("*** Warning: no boot file name; using '%s'\n",
796 tftp_filename);
797 }
798
799 printf("Using %s device\n", eth_get_name());
800 printf("TFTP %s server %pI4; our IP address is %pI4",
801 #ifdef CONFIG_CMD_TFTPPUT
802 protocol == TFTPPUT ? "to" : "from",
803 #else
804 "from",
805 #endif
806 &tftp_remote_ip, &net_ip);
807
808 /* Check if we need to send across this subnet */
809 if (net_gateway.s_addr && net_netmask.s_addr) {
810 struct in_addr our_net;
811 struct in_addr remote_net;
812
813 our_net.s_addr = net_ip.s_addr & net_netmask.s_addr;
814 remote_net.s_addr = tftp_remote_ip.s_addr & net_netmask.s_addr;
815 if (our_net.s_addr != remote_net.s_addr)
816 printf("; sending through gateway %pI4", &net_gateway);
817 }
818 putc('\n');
819
820 printf("Filename '%s'.", tftp_filename);
821
822 if (net_boot_file_expected_size_in_blocks) {
823 printf(" Size is 0x%x Bytes = ",
824 net_boot_file_expected_size_in_blocks << 9);
825 print_size(net_boot_file_expected_size_in_blocks << 9, "");
826 }
827
828 putc('\n');
829 #ifdef CONFIG_CMD_TFTPPUT
830 tftp_put_active = (protocol == TFTPPUT);
831 if (tftp_put_active) {
832 printf("Save address: 0x%lx\n", image_save_addr);
833 printf("Save size: 0x%lx\n", image_save_size);
834 net_boot_file_size = image_save_size;
835 puts("Saving: *\b");
836 tftp_state = STATE_SEND_WRQ;
837 new_transfer();
838 } else
839 #endif
840 {
841 if (tftp_init_load_addr()) {
842 eth_halt();
843 net_set_state(NETLOOP_FAIL);
844 puts("\nTFTP error: ");
845 puts("trying to overwrite reserved memory...\n");
846 return;
847 }
848 printf("Load address: 0x%lx\n", tftp_load_addr);
849 puts("Loading: *\b");
850 tftp_state = STATE_SEND_RRQ;
851 }
852
853 time_start = get_timer(0);
854 timeout_count_max = tftp_timeout_count_max;
855
856 net_set_timeout_handler(timeout_ms, tftp_timeout_handler);
857 net_set_udp_handler(tftp_handler);
858 #ifdef CONFIG_CMD_TFTPPUT
859 net_set_icmp_handler(icmp_handler);
860 #endif
861 tftp_remote_port = WELL_KNOWN_PORT;
862 timeout_count = 0;
863 /* Use a pseudo-random port unless a specific port is set */
864 tftp_our_port = 1024 + (get_timer(0) % 3072);
865
866 #ifdef CONFIG_TFTP_PORT
867 ep = env_get("tftpdstp");
868 if (ep != NULL)
869 tftp_remote_port = simple_strtol(ep, NULL, 10);
870 ep = env_get("tftpsrcp");
871 if (ep != NULL)
872 tftp_our_port = simple_strtol(ep, NULL, 10);
873 #endif
874 tftp_cur_block = 0;
875 tftp_windowsize = 1;
876 tftp_last_nack = 0;
877 /* zero out server ether in case the server ip has changed */
878 memset(net_server_ethaddr, 0, 6);
879 /* Revert tftp_block_size to dflt */
880 tftp_block_size = TFTP_BLOCK_SIZE;
881 #ifdef CONFIG_TFTP_TSIZE
882 tftp_tsize = 0;
883 tftp_tsize_num_hash = 0;
884 #endif
885
886 tftp_send();
887 }
888
889 #ifdef CONFIG_CMD_TFTPSRV
tftp_start_server(void)890 void tftp_start_server(void)
891 {
892 tftp_filename[0] = 0;
893
894 if (tftp_init_load_addr()) {
895 eth_halt();
896 net_set_state(NETLOOP_FAIL);
897 puts("\nTFTP error: trying to overwrite reserved memory...\n");
898 return;
899 }
900 printf("Using %s device\n", eth_get_name());
901 printf("Listening for TFTP transfer on %pI4\n", &net_ip);
902 printf("Load address: 0x%lx\n", tftp_load_addr);
903
904 puts("Loading: *\b");
905
906 timeout_count_max = tftp_timeout_count_max;
907 timeout_count = 0;
908 timeout_ms = TIMEOUT;
909 net_set_timeout_handler(timeout_ms, tftp_timeout_handler);
910
911 /* Revert tftp_block_size to dflt */
912 tftp_block_size = TFTP_BLOCK_SIZE;
913 tftp_cur_block = 0;
914 tftp_our_port = WELL_KNOWN_PORT;
915
916 #ifdef CONFIG_TFTP_TSIZE
917 tftp_tsize = 0;
918 tftp_tsize_num_hash = 0;
919 #endif
920
921 tftp_state = STATE_RECV_WRQ;
922 net_set_udp_handler(tftp_handler);
923
924 /* zero out server ether in case the server ip has changed */
925 memset(net_server_ethaddr, 0, 6);
926 }
927 #endif /* CONFIG_CMD_TFTPSRV */
928