mirror of
https://review.coreboot.org/flashrom.git
synced 2025-04-27 07:02:34 +02:00

This patch removes the extremely dangerous unprotect_jedec function which is not used at all within flashrom code, and renames the misleadingly named protect_jedec function to start_program_jedec. Calls to protect_jedec after flashing are removed, because a) on LPC chips, the command sent by protoct_jedec is not even in the datasheet and b) on parallel chips, the block write command issued before already contained the software protection sequence, so software protection is definitely enabled. This patch also removes two clones of protect_jedec Background: JEDEC Software Data Protection started as an optional feature, which was disabled on the first single-voltage-flash chips. The software data protection is the need to prefix a write with a magic "write enable" command, while without write protection every write access into the chip's address space modifies flash content. This magic write enable command also tells the flash chip that the programmer obviously support sending write-enable commands and turns off the "any write modifies flash content" mode. There also exist a two-command (6 writes) sequence that disables Software Data Protection completey, which should only ever be used to prepare updating with a device that can't handle software data protection. Corresponding to flashrom svn r783. Signed-off-by: Michael Karcher <flashrom@mkarcher.dialup.fu-berlin.de> Acked-by: Sean Nelson <audiohacked@gmail.com> Acked-by: Carl-Daniel Hailfinger <c-d.hailfinger.devel.2006@gmx.net>
197 lines
5.1 KiB
C
197 lines
5.1 KiB
C
/*
|
|
* This file is part of the flashrom project.
|
|
*
|
|
* Copyright (C) 2000 Silicon Integrated System Corporation
|
|
*
|
|
* This program is free software; you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation; either version 2 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with this program; if not, write to the Free Software
|
|
* Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
|
|
*/
|
|
|
|
/*
|
|
* Datasheet:
|
|
* - Name: Intel 82802AB/82802AC Firmware Hub (FWH)
|
|
* - URL: http://www.intel.com/design/chipsets/datashts/290658.htm
|
|
* - PDF: http://download.intel.com/design/chipsets/datashts/29065804.pdf
|
|
* - Order number: 290658-004
|
|
*/
|
|
|
|
#include <string.h>
|
|
#include <stdlib.h>
|
|
#include "flash.h"
|
|
|
|
// I need that Berkeley bit-map printer
|
|
void print_82802ab_status(uint8_t status)
|
|
{
|
|
printf_debug("%s", status & 0x80 ? "Ready:" : "Busy:");
|
|
printf_debug("%s", status & 0x40 ? "BE SUSPEND:" : "BE RUN/FINISH:");
|
|
printf_debug("%s", status & 0x20 ? "BE ERROR:" : "BE OK:");
|
|
printf_debug("%s", status & 0x10 ? "PROG ERR:" : "PROG OK:");
|
|
printf_debug("%s", status & 0x8 ? "VP ERR:" : "VPP OK:");
|
|
printf_debug("%s", status & 0x4 ? "PROG SUSPEND:" : "PROG RUN/FINISH:");
|
|
printf_debug("%s", status & 0x2 ? "WP|TBL#|WP#,ABORT:" : "UNLOCK:");
|
|
}
|
|
|
|
int probe_82802ab(struct flashchip *flash)
|
|
{
|
|
chipaddr bios = flash->virtual_memory;
|
|
uint8_t id1, id2;
|
|
|
|
/* Reset to get a clean state */
|
|
chip_writeb(0xFF, bios);
|
|
programmer_delay(10);
|
|
|
|
/* Enter ID mode */
|
|
chip_writeb(0x90, bios);
|
|
programmer_delay(10);
|
|
|
|
id1 = chip_readb(bios);
|
|
id2 = chip_readb(bios + 0x01);
|
|
|
|
/* Leave ID mode */
|
|
chip_writeb(0xFF, bios);
|
|
|
|
programmer_delay(10);
|
|
|
|
printf_debug("%s: id1 0x%02x, id2 0x%02x\n", __func__, id1, id2);
|
|
|
|
if (id1 != flash->manufacture_id || id2 != flash->model_id)
|
|
return 0;
|
|
|
|
map_flash_registers(flash);
|
|
|
|
return 1;
|
|
}
|
|
|
|
uint8_t wait_82802ab(chipaddr bios)
|
|
{
|
|
uint8_t status;
|
|
|
|
chip_writeb(0x70, bios);
|
|
if ((chip_readb(bios) & 0x80) == 0) { // it's busy
|
|
while ((chip_readb(bios) & 0x80) == 0) ;
|
|
}
|
|
|
|
status = chip_readb(bios);
|
|
|
|
/* Reset to get a clean state */
|
|
chip_writeb(0xFF, bios);
|
|
|
|
return status;
|
|
}
|
|
|
|
int erase_82802ab_block(struct flashchip *flash, int offset)
|
|
{
|
|
chipaddr bios = flash->virtual_memory + offset;
|
|
chipaddr wrprotect = flash->virtual_registers + offset + 2;
|
|
uint8_t status;
|
|
|
|
// clear status register
|
|
chip_writeb(0x50, bios);
|
|
|
|
// clear write protect
|
|
chip_writeb(0, wrprotect);
|
|
|
|
// now start it
|
|
chip_writeb(0x20, bios);
|
|
chip_writeb(0xd0, bios);
|
|
programmer_delay(10);
|
|
|
|
// now let's see what the register is
|
|
status = wait_82802ab(flash->virtual_memory);
|
|
print_82802ab_status(status);
|
|
|
|
if (check_erased_range(flash, offset, flash->page_size)) {
|
|
fprintf(stderr, "ERASE FAILED!\n");
|
|
return -1;
|
|
}
|
|
printf("DONE BLOCK 0x%x\n", offset);
|
|
|
|
return 0;
|
|
}
|
|
|
|
int erase_82802ab(struct flashchip *flash)
|
|
{
|
|
int i;
|
|
unsigned int total_size = flash->total_size * 1024;
|
|
|
|
printf("total_size is %d; flash->page_size is %d\n",
|
|
total_size, flash->page_size);
|
|
for (i = 0; i < total_size; i += flash->page_size)
|
|
if (erase_82802ab_block(flash, i)) {
|
|
fprintf(stderr, "ERASE FAILED!\n");
|
|
return -1;
|
|
}
|
|
printf("DONE ERASE\n");
|
|
|
|
return 0;
|
|
}
|
|
|
|
void write_page_82802ab(chipaddr bios, uint8_t *src,
|
|
chipaddr dst, int page_size)
|
|
{
|
|
int i;
|
|
|
|
for (i = 0; i < page_size; i++) {
|
|
/* transfer data from source to destination */
|
|
chip_writeb(0x40, dst);
|
|
chip_writeb(*src++, dst++);
|
|
wait_82802ab(bios);
|
|
}
|
|
}
|
|
|
|
int write_82802ab(struct flashchip *flash, uint8_t *buf)
|
|
{
|
|
int i;
|
|
int total_size = flash->total_size * 1024;
|
|
int page_size = flash->page_size;
|
|
chipaddr bios = flash->virtual_memory;
|
|
uint8_t *tmpbuf = malloc(page_size);
|
|
|
|
if (!tmpbuf) {
|
|
printf("Could not allocate memory!\n");
|
|
exit(1);
|
|
}
|
|
printf("Programming page: \n");
|
|
for (i = 0; i < total_size / page_size; i++) {
|
|
printf
|
|
("\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b");
|
|
printf("%04d at address: 0x%08x", i, i * page_size);
|
|
|
|
/* Auto Skip Blocks, which already contain the desired data
|
|
* Faster, because we only write, what has changed
|
|
* More secure, because blocks, which are excluded
|
|
* (with the exclude or layout feature)
|
|
* or not erased and rewritten; their data is retained also in
|
|
* sudden power off situations
|
|
*/
|
|
chip_readn(tmpbuf, bios + i * page_size, page_size);
|
|
if (!memcmp((void *)(buf + i * page_size), tmpbuf, page_size)) {
|
|
printf("SKIPPED\n");
|
|
continue;
|
|
}
|
|
|
|
/* erase block by block and write block by block; this is the most secure way */
|
|
if (erase_82802ab_block(flash, i * page_size)) {
|
|
fprintf(stderr, "ERASE FAILED!\n");
|
|
return -1;
|
|
}
|
|
write_page_82802ab(bios, buf + i * page_size,
|
|
bios + i * page_size, page_size);
|
|
}
|
|
printf("\n");
|
|
free(tmpbuf);
|
|
|
|
return 0;
|
|
}
|