common/cmd_bootm.c

   1 /*
   2  * (C) Copyright 2000-2009
   3  * Wolfgang Denk, DENX Software Engineering, wd@denx.de.
   4  *
   5  * See file CREDITS for list of people who contributed to this
   6  * project.
   7  *
   8  * This program is free software; you can redistribute it and/or
   9  * modify it under the terms of the GNU General Public License as
  10  * published by the Free Software Foundation; either version 2 of
  11  * the License, or (at your option) any later version.
  12  *
  13  * This program is distributed in the hope that it will be useful,
  14  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  15  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  16  * GNU General Public License for more details.
  17  *
  18  * You should have received a copy of the GNU General Public License
  19  * along with this program; if not, write to the Free Software
  20  * Foundation, Inc., 59 Temple Place, Suite 330, Boston,
  21  * MA 02111-1307 USA
  22  */
  23
  24
  25 /*
  26  * Boot support
  27  */
  28 #include <common.h>
  29 #include <watchdog.h>
  30 #include <command.h>
  31 #include <image.h>
  32 #include <malloc.h>
  33 #include <u-boot/zlib.h>
  34 #include <bzlib.h>
  35 #include <environment.h>
  36 #include <lmb.h>
  37 #include <linux/ctype.h>
  38 #include <asm/byteorder.h>
  39 #include <asm/io.h>
  40 #include <linux/compiler.h>
  41
  42 #if defined(CONFIG_CMD_USB)
  43 #include <usb.h>
  44 #endif
  45
  46 #ifdef CONFIG_SYS_HUSH_PARSER
  47 #include <hush.h>
  48 #endif
  49
  50 #if defined(CONFIG_OF_LIBFDT)
  51 #include <libfdt.h>
  52 #include <fdt_support.h>
  53 #endif
  54
  55 #ifdef CONFIG_LZMA
  56 #include <lzma/LzmaTypes.h>
  57 #include <lzma/LzmaDec.h>
  58 #include <lzma/LzmaTools.h>
  59 #endif /* CONFIG_LZMA */
  60
  61 #ifdef CONFIG_LZO
  62 #include <linux/lzo.h>
  63 #endif /* CONFIG_LZO */
  64
  65 DECLARE_GLOBAL_DATA_PTR;
  66
  67 #ifndef CONFIG_SYS_BOOTM_LEN
  68 #define CONFIG_SYS_BOOTM_LEN    0x800000        /* use 8MByte as default max gunzip size */
  69 #endif
  70
  71 #ifdef CONFIG_BZIP2
  72 extern void bz_internal_error(int);
  73 #endif
  74
  75 #if defined(CONFIG_CMD_IMI)
  76 static int image_info(unsigned long addr);
  77 #endif
  78
  79 #if defined(CONFIG_CMD_IMLS)
  80 #include <flash.h>
  81 #include <mtd/cfi_flash.h>
  82 extern flash_info_t flash_info[]; /* info for FLASH chips */
  83 #endif
  84
  85 #if defined(CONFIG_CMD_IMLS) || defined(CONFIG_CMD_IMLS_NAND)
  86 static int do_imls(cmd_tbl_t *cmdtp, int flag, int argc, char * const argv[]);
  87 #endif
  88
  89 #include <linux/err.h>
  90 #include <nand.h>
  91
  92 #if defined(CONFIG_SILENT_CONSOLE) && !defined(CONFIG_SILENT_U_BOOT_ONLY)
  93 static void fixup_silent_linux(void);
  94 #endif
  95
  96 static const void *boot_get_kernel(cmd_tbl_t *cmdtp, int flag, int argc,
  97                                 char * const argv[], bootm_headers_t *images,
  98                                 ulong *os_data, ulong *os_len);
  99
 100 /*
 101  *  Continue booting an OS image; caller already has:
 102  *  - copied image header to global variable `header'
 103  *  - checked header magic number, checksums (both header & image),
 104  *  - verified image architecture (PPC) and type (KERNEL or MULTI),
 105  *  - loaded (first part of) image to header load address,
 106  *  - disabled interrupts.
 107  *
 108  * @flag: Flags indicating what to do (BOOTM_STATE_...)
 109  * @argc: Number of arguments. Note that the arguments are shifted down
 110  *       so that 0 is the first argument not processed by U-Boot, and
 111  *       argc is adjusted accordingly. This avoids confusion as to how
 112  *       many arguments are available for the OS.
 113  * @images: Pointers to os/initrd/fdt
 114  * @return 1 on error. On success the OS boots so this function does
 115  * not return.
 116  */
 117 typedef int boot_os_fn(int flag, int argc, char * const argv[],
 118                         bootm_headers_t *images);
 119
 120 #ifdef CONFIG_BOOTM_LINUX
 121 extern boot_os_fn do_bootm_linux;
 122 #endif
 123 #ifdef CONFIG_BOOTM_NETBSD
 124 static boot_os_fn do_bootm_netbsd;
 125 #endif
 126 #if defined(CONFIG_LYNXKDI)
 127 static boot_os_fn do_bootm_lynxkdi;
 128 extern void lynxkdi_boot(image_header_t *);
 129 #endif
 130 #ifdef CONFIG_BOOTM_RTEMS
 131 static boot_os_fn do_bootm_rtems;
 132 #endif
 133 #if defined(CONFIG_BOOTM_OSE)
 134 static boot_os_fn do_bootm_ose;
 135 #endif
 136 #if defined(CONFIG_BOOTM_PLAN9)
 137 static boot_os_fn do_bootm_plan9;
 138 #endif
 139 #if defined(CONFIG_CMD_ELF)
 140 static boot_os_fn do_bootm_vxworks;
 141 static boot_os_fn do_bootm_qnxelf;
 142 int do_bootvx(cmd_tbl_t *cmdtp, int flag, int argc, char * const argv[]);
 143 int do_bootelf(cmd_tbl_t *cmdtp, int flag, int argc, char * const argv[]);
 144 #endif
 145 #if defined(CONFIG_INTEGRITY)
 146 static boot_os_fn do_bootm_integrity;
 147 #endif
 148
 149 static boot_os_fn *boot_os[] = {
 150 #ifdef CONFIG_BOOTM_LINUX
 151         [IH_OS_LINUX] = do_bootm_linux,
 152 #endif
 153 #ifdef CONFIG_BOOTM_NETBSD
 154         [IH_OS_NETBSD] = do_bootm_netbsd,
 155 #endif
 156 #ifdef CONFIG_LYNXKDI
 157         [IH_OS_LYNXOS] = do_bootm_lynxkdi,
 158 #endif
 159 #ifdef CONFIG_BOOTM_RTEMS
 160         [IH_OS_RTEMS] = do_bootm_rtems,
 161 #endif
 162 #if defined(CONFIG_BOOTM_OSE)
 163         [IH_OS_OSE] = do_bootm_ose,
 164 #endif
 165 #if defined(CONFIG_BOOTM_PLAN9)
 166         [IH_OS_PLAN9] = do_bootm_plan9,
 167 #endif
 168 #if defined(CONFIG_CMD_ELF)
 169         [IH_OS_VXWORKS] = do_bootm_vxworks,
 170         [IH_OS_QNX] = do_bootm_qnxelf,
 171 #endif
 172 #ifdef CONFIG_INTEGRITY
 173         [IH_OS_INTEGRITY] = do_bootm_integrity,
 174 #endif
 175 };
 176
 177 bootm_headers_t images;         /* pointers to os/initrd/fdt images */
 178
 179 /* Allow for arch specific config before we boot */
 180 static void __arch_preboot_os(void)
 181 {
 182         /* please define platform specific arch_preboot_os() */
 183 }
 184 void arch_preboot_os(void) __attribute__((weak, alias("__arch_preboot_os")));
 185
 186 #define IH_INITRD_ARCH IH_ARCH_DEFAULT
 187
 188 #ifdef CONFIG_LMB
 189 static void boot_start_lmb(bootm_headers_t *images)
 190 {
 191         ulong           mem_start;
 192         phys_size_t     mem_size;
 193
 194         lmb_init(&images->lmb);
 195
 196         mem_start = getenv_bootm_low();
 197         mem_size = getenv_bootm_size();
 198
 199         lmb_add(&images->lmb, (phys_addr_t)mem_start, mem_size);
 200
 201         arch_lmb_reserve(&images->lmb);
 202         board_lmb_reserve(&images->lmb);
 203 }
 204 #else
 205 #define lmb_reserve(lmb, base, size)
 206 static inline void boot_start_lmb(bootm_headers_t *images) { }
 207 #endif
 208
 209 static int bootm_start(cmd_tbl_t *cmdtp, int flag, int argc, char * const argv[])
 210 {
 211         memset((void *)&images, 0, sizeof(images));
 212         images.verify = getenv_yesno("verify");
 213
 214         boot_start_lmb(&images);
 215
 216         bootstage_mark_name(BOOTSTAGE_ID_BOOTM_START, "bootm_start");
 217         images.state = BOOTM_STATE_START;
 218
 219         return 0;
 220 }
 221
 222 static int bootm_find_os(cmd_tbl_t *cmdtp, int flag, int argc,
 223                          char * const argv[])
 224 {
 225         const void *os_hdr;
 226
 227         /* get kernel image header, start address and length */
 228         os_hdr = boot_get_kernel(cmdtp, flag, argc, argv,
 229                         &images, &images.os.image_start, &images.os.image_len);
 230         if (images.os.image_len == 0) {
 231                 puts("ERROR: can't get kernel image!\n");
 232                 return 1;
 233         }
 234
 235         /* get image parameters */
 236         switch (genimg_get_format(os_hdr)) {
 237         case IMAGE_FORMAT_LEGACY:
 238                 images.os.type = image_get_type(os_hdr);
 239                 images.os.comp = image_get_comp(os_hdr);
 240                 images.os.os = image_get_os(os_hdr);
 241
 242                 images.os.end = image_get_image_end(os_hdr);
 243                 images.os.load = image_get_load(os_hdr);
 244                 break;
 245 #if defined(CONFIG_FIT)
 246         case IMAGE_FORMAT_FIT:
 247                 if (fit_image_get_type(images.fit_hdr_os,
 248                                         images.fit_noffset_os, &images.os.type)) {
 249                         puts("Can't get image type!\n");
 250                         bootstage_error(BOOTSTAGE_ID_FIT_TYPE);
 251                         return 1;
 252                 }
 253
 254                 if (fit_image_get_comp(images.fit_hdr_os,
 255                                         images.fit_noffset_os, &images.os.comp)) {
 256                         puts("Can't get image compression!\n");
 257                         bootstage_error(BOOTSTAGE_ID_FIT_COMPRESSION);
 258                         return 1;
 259                 }
 260
 261                 if (fit_image_get_os(images.fit_hdr_os,
 262                                         images.fit_noffset_os, &images.os.os)) {
 263                         puts("Can't get image OS!\n");
 264                         bootstage_error(BOOTSTAGE_ID_FIT_OS);
 265                         return 1;
 266                 }
 267
 268                 images.os.end = fit_get_end(images.fit_hdr_os);
 269
 270                 if (fit_image_get_load(images.fit_hdr_os, images.fit_noffset_os,
 271                                         &images.os.load)) {
 272                         puts("Can't get image load address!\n");
 273                         bootstage_error(BOOTSTAGE_ID_FIT_LOADADDR);
 274                         return 1;
 275                 }
 276                 break;
 277 #endif
 278         default:
 279                 puts("ERROR: unknown image format type!\n");
 280                 return 1;
 281         }
 282
 283         /* find kernel entry point */
 284         if (images.legacy_hdr_valid) {
 285                 images.ep = image_get_ep(&images.legacy_hdr_os_copy);
 286 #if defined(CONFIG_FIT)
 287         } else if (images.fit_uname_os) {
 288                 int ret;
 289
 290                 ret = fit_image_get_entry(images.fit_hdr_os,
 291                                           images.fit_noffset_os, &images.ep);
 292                 if (ret) {
 293                         puts("Can't get entry point property!\n");
 294                         return 1;
 295                 }
 296 #endif
 297         } else {
 298                 puts("Could not find kernel entry point!\n");
 299                 return 1;
 300         }
 301
 302         if (images.os.type == IH_TYPE_KERNEL_NOLOAD) {
 303                 images.os.load = images.os.image_start;
 304                 images.ep += images.os.load;
 305         }
 306
 307         images.os.start = (ulong)os_hdr;
 308
 309         return 0;
 310 }
 311
 312 static int bootm_find_other(cmd_tbl_t *cmdtp, int flag, int argc,
 313                             char * const argv[])
 314 {
 315         int ret;
 316
 317         if (((images.os.type == IH_TYPE_KERNEL) ||
 318              (images.os.type == IH_TYPE_KERNEL_NOLOAD) ||
 319              (images.os.type == IH_TYPE_MULTI)) &&
 320             (images.os.os == IH_OS_LINUX)) {
 321                 /* find ramdisk */
 322                 ret = boot_get_ramdisk(argc, argv, &images, IH_INITRD_ARCH,
 323                                 &images.rd_start, &images.rd_end);
 324                 if (ret) {
 325                         puts("Ramdisk image is corrupt or invalid\n");
 326                         return 1;
 327                 }
 328
 329 #if defined(CONFIG_OF_LIBFDT)
 330                 /* find flattened device tree */
 331                 ret = boot_get_fdt(flag, argc, argv, IH_ARCH_DEFAULT, &images,
 332                                    &images.ft_addr, &images.ft_len);
 333                 if (ret) {
 334                         puts("Could not find a valid device tree\n");
 335                         return 1;
 336                 }
 337
 338                 set_working_fdt_addr(images.ft_addr);
 339 #endif
 340         }
 341
 342         return 0;
 343 }
 344
 345 #define BOOTM_ERR_RESET         -1
 346 #define BOOTM_ERR_OVERLAP       -2
 347 #define BOOTM_ERR_UNIMPLEMENTED -3
 348 static int bootm_load_os(bootm_headers_t *images, unsigned long *load_end,
 349                 int boot_progress)
 350 {
 351         image_info_t os = images->os;
 352         uint8_t comp = os.comp;
 353         ulong load = os.load;
 354         ulong blob_start = os.start;
 355         ulong blob_end = os.end;
 356         ulong image_start = os.image_start;
 357         ulong image_len = os.image_len;
 358         __maybe_unused uint unc_len = CONFIG_SYS_BOOTM_LEN;
 359         int no_overlap = 0;
 360         void *load_buf, *image_buf;
 361 #if defined(CONFIG_LZMA) || defined(CONFIG_LZO)
 362         int ret;
 363 #endif /* defined(CONFIG_LZMA) || defined(CONFIG_LZO) */
 364
 365         const char *type_name = genimg_get_type_name(os.type);
 366
 367         load_buf = map_sysmem(load, image_len);
 368         image_buf = map_sysmem(image_start, image_len);
 369         switch (comp) {
 370         case IH_COMP_NONE:
 371                 if (load == blob_start || load == image_start) {
 372                         printf("   XIP %s ... ", type_name);
 373                         no_overlap = 1;
 374                 } else {
 375                         printf("   Loading %s ... ", type_name);
 376                         memmove_wd(load_buf, image_buf, image_len, CHUNKSZ);
 377                 }
 378                 *load_end = load + image_len;
 379                 puts("OK\n");
 380                 break;
 381 #ifdef CONFIG_GZIP
 382         case IH_COMP_GZIP:
 383                 printf("   Uncompressing %s ... ", type_name);
 384                 if (gunzip(load_buf, unc_len, image_buf, &image_len) != 0) {
 385                         puts("GUNZIP: uncompress, out-of-mem or overwrite "
 386                                 "error - must RESET board to recover\n");
 387                         if (boot_progress)
 388                                 bootstage_error(BOOTSTAGE_ID_DECOMP_IMAGE);
 389                         return BOOTM_ERR_RESET;
 390                 }
 391
 392                 *load_end = load + image_len;
 393                 break;
 394 #endif /* CONFIG_GZIP */
 395 #ifdef CONFIG_BZIP2
 396         case IH_COMP_BZIP2:
 397                 printf("   Uncompressing %s ... ", type_name);
 398                 /*
 399                  * If we've got less than 4 MB of malloc() space,
 400                  * use slower decompression algorithm which requires
 401                  * at most 2300 KB of memory.
 402                  */
 403                 int i = BZ2_bzBuffToBuffDecompress(load_buf, &unc_len,
 404                         image_buf, image_len,
 405                         CONFIG_SYS_MALLOC_LEN < (4096 * 1024), 0);
 406                 if (i != BZ_OK) {
 407                         printf("BUNZIP2: uncompress or overwrite error %d "
 408                                 "- must RESET board to recover\n", i);
 409                         if (boot_progress)
 410                                 bootstage_error(BOOTSTAGE_ID_DECOMP_IMAGE);
 411                         return BOOTM_ERR_RESET;
 412                 }
 413
 414                 *load_end = load + unc_len;
 415                 break;
 416 #endif /* CONFIG_BZIP2 */
 417 #ifdef CONFIG_LZMA
 418         case IH_COMP_LZMA: {
 419                 SizeT lzma_len = unc_len;
 420                 printf("   Uncompressing %s ... ", type_name);
 421
 422                 ret = lzmaBuffToBuffDecompress(load_buf, &lzma_len,
 423                                                image_buf, image_len);
 424                 unc_len = lzma_len;
 425                 if (ret != SZ_OK) {
 426                         printf("LZMA: uncompress or overwrite error %d "
 427                                 "- must RESET board to recover\n", ret);
 428                         bootstage_error(BOOTSTAGE_ID_DECOMP_IMAGE);
 429                         return BOOTM_ERR_RESET;
 430                 }
 431                 *load_end = load + unc_len;
 432                 break;
 433         }
 434 #endif /* CONFIG_LZMA */
 435 #ifdef CONFIG_LZO
 436         case IH_COMP_LZO:
 437                 printf("   Uncompressing %s ... ", type_name);
 438
 439                 ret = lzop_decompress(image_buf, image_len, load_buf,
 440                                       &unc_len);
 441                 if (ret != LZO_E_OK) {
 442                         printf("LZO: uncompress or overwrite error %d "
 443                               "- must RESET board to recover\n", ret);
 444                         if (boot_progress)
 445                                 bootstage_error(BOOTSTAGE_ID_DECOMP_IMAGE);
 446                         return BOOTM_ERR_RESET;
 447                 }
 448
 449                 *load_end = load + unc_len;
 450                 break;
 451 #endif /* CONFIG_LZO */
 452         default:
 453                 printf("Unimplemented compression type %d\n", comp);
 454                 return BOOTM_ERR_UNIMPLEMENTED;
 455         }
 456
 457         flush_cache(load, (*load_end - load) * sizeof(ulong));
 458
 459         puts("OK\n");
 460         debug("   kernel loaded at 0x%08lx, end = 0x%08lx\n", load, *load_end);
 461         bootstage_mark(BOOTSTAGE_ID_KERNEL_LOADED);
 462
 463         if (!no_overlap && (load < blob_end) && (*load_end > blob_start)) {
 464                 debug("images.os.start = 0x%lX, images.os.end = 0x%lx\n",
 465                         blob_start, blob_end);
 466                 debug("images.os.load = 0x%lx, load_end = 0x%lx\n", load,
 467                         *load_end);
 468
 469                 /* Check what type of image this is. */
 470                 if (images->legacy_hdr_valid) {
 471                         if (image_get_type(&images->legacy_hdr_os_copy)
 472                                         == IH_TYPE_MULTI)
 473                                 puts("WARNING: legacy format multi component image overwritten\n");
 474                         return BOOTM_ERR_OVERLAP;
 475                 } else {
 476                         puts("ERROR: new format image overwritten - must RESET the board to recover\n");
 477                         bootstage_error(BOOTSTAGE_ID_OVERWRITTEN);
 478                         return BOOTM_ERR_RESET;
 479                 }
 480         }
 481
 482         return 0;
 483 }
 484
 485 static int bootm_start_standalone(int argc, char * const argv[])
 486 {
 487         char  *s;
 488         int   (*appl)(int, char * const []);
 489
 490         /* Don't start if "autostart" is set to "no" */
 491         if (((s = getenv("autostart")) != NULL) && (strcmp(s, "no") == 0)) {
 492                 setenv_hex("filesize", images.os.image_len);
 493                 return 0;
 494         }
 495         appl = (int (*)(int, char * const []))(ulong)ntohl(images.ep);
 496         (*appl)(argc, argv);
 497         return 0;
 498 }
 499
 500 /* we overload the cmd field with our state machine info instead of a
 501  * function pointer */
 502 static cmd_tbl_t cmd_bootm_sub[] = {
 503         U_BOOT_CMD_MKENT(start, 0, 1, (void *)BOOTM_STATE_START, "", ""),
 504         U_BOOT_CMD_MKENT(loados, 0, 1, (void *)BOOTM_STATE_LOADOS, "", ""),
 505 #ifdef CONFIG_SYS_BOOT_RAMDISK_HIGH
 506         U_BOOT_CMD_MKENT(ramdisk, 0, 1, (void *)BOOTM_STATE_RAMDISK, "", ""),
 507 #endif
 508 #ifdef CONFIG_OF_LIBFDT
 509         U_BOOT_CMD_MKENT(fdt, 0, 1, (void *)BOOTM_STATE_FDT, "", ""),
 510 #endif
 511         U_BOOT_CMD_MKENT(cmdline, 0, 1, (void *)BOOTM_STATE_OS_CMDLINE, "", ""),
 512         U_BOOT_CMD_MKENT(bdt, 0, 1, (void *)BOOTM_STATE_OS_BD_T, "", ""),
 513         U_BOOT_CMD_MKENT(prep, 0, 1, (void *)BOOTM_STATE_OS_PREP, "", ""),
 514         U_BOOT_CMD_MKENT(fake, 0, 1, (void *)BOOTM_STATE_OS_FAKE_GO, "", ""),
 515         U_BOOT_CMD_MKENT(go, 0, 1, (void *)BOOTM_STATE_OS_GO, "", ""),
 516 };
 517
 518 static int boot_selected_os(int argc, char * const argv[], int state,
 519                 bootm_headers_t *images, boot_os_fn *boot_fn)
 520 {
 521         if (images->os.type == IH_TYPE_STANDALONE) {
 522                 /* This may return when 'autostart' is 'no' */
 523                 bootm_start_standalone(argc, argv);
 524                 return 0;
 525         }
 526 #ifdef CONFIG_SILENT_CONSOLE
 527         if (images->os.os == IH_OS_LINUX)
 528                 fixup_silent_linux();
 529 #endif
 530         arch_preboot_os();
 531         boot_fn(state, argc, argv, images);
 532         if (state == BOOTM_STATE_OS_FAKE_GO) /* We expect to return */
 533                 return 0;
 534         bootstage_error(BOOTSTAGE_ID_BOOT_OS_RETURNED);
 535 #ifdef DEBUG
 536         puts("\n## Control returned to monitor - resetting...\n");
 537 #endif
 538         return BOOTM_ERR_RESET;
 539 }
 540
 541 /**
 542  * Execute selected states of the bootm command.
 543  *
 544  * Note the arguments to this state must be the first argument, Any 'bootm'
 545  * or sub-command arguments must have already been taken.
 546  *
 547  * Note that if states contains more than one flag it MUST contain
 548  * BOOTM_STATE_START, since this handles and consumes the command line args.
 549  *
 550  * Also note that aside from boot_os_fn functions and bootm_load_os no other
 551  * functions we store the return value of in 'ret' may use a negative return
 552  * value, without special handling.
 553  *
 554  * @param cmdtp         Pointer to bootm command table entry
 555  * @param flag          Command flags (CMD_FLAG_...)
 556  * @param argc          Number of subcommand arguments (0 = no arguments)
 557  * @param argv          Arguments
 558  * @param states        Mask containing states to run (BOOTM_STATE_...)
 559  * @param images        Image header information
 560  * @param boot_progress 1 to show boot progress, 0 to not do this
 561  * @return 0 if ok, something else on error. Some errors will cause this
 562  *      function to perform a reboot! If states contains BOOTM_STATE_OS_GO
 563  *      then the intent is to boot an OS, so this function will not return
 564  *      unless the image type is standalone.
 565  */
 566 static int do_bootm_states(cmd_tbl_t *cmdtp, int flag, int argc,
 567                 char * const argv[], int states, bootm_headers_t *images,
 568                 int boot_progress)
 569 {
 570         boot_os_fn *boot_fn;
 571         ulong iflag = 0;
 572         int ret = 0;
 573
 574         images->state |= states;
 575
 576         /*
 577          * Work through the states and see how far we get. We stop on
 578          * any error.
 579          */
 580         if (states & BOOTM_STATE_START)
 581                 ret = bootm_start(cmdtp, flag, argc, argv);
 582
 583         if (!ret && (states & BOOTM_STATE_FINDOS))
 584                 ret = bootm_find_os(cmdtp, flag, argc, argv);
 585
 586         if (!ret && (states & BOOTM_STATE_FINDOTHER)) {
 587                 ret = bootm_find_other(cmdtp, flag, argc, argv);
 588                 argc = 0;       /* consume the args */
 589         }
 590
 591         /*
 592          * We have reached the point of no return: we are going to
 593          * overwrite all exception vector code, so we cannot easily
 594          * recover from any failures any more...
 595          */
 596         iflag = disable_interrupts();
 597 #ifdef CONFIG_NETCONSOLE
 598         /* Stop the ethernet stack if NetConsole could have left it up */
 599         eth_halt();
 600 #endif
 601
 602 #if defined(CONFIG_CMD_USB)
 603         /*
 604          * turn off USB to prevent the host controller from writing to the
 605          * SDRAM while Linux is booting. This could happen (at least for OHCI
 606          * controller), because the HCCA (Host Controller Communication Area)
 607          * lies within the SDRAM and the host controller writes continously to
 608          * this area (as busmaster!). The HccaFrameNumber is for example
 609          * updated every 1 ms within the HCCA structure in SDRAM! For more
 610          * details see the OpenHCI specification.
 611          */
 612         usb_stop();
 613 #endif
 614
 615         /* Load the OS */
 616         if (!ret && (states & BOOTM_STATE_LOADOS)) {
 617                 ulong load_end;
 618
 619                 ret = bootm_load_os(images, &load_end, 0);
 620                 if (ret && ret != BOOTM_ERR_OVERLAP)
 621                         goto err;
 622
 623                 if (ret == 0)
 624                         lmb_reserve(&images->lmb, images->os.load,
 625                                     (load_end - images->os.load));
 626                 else if (ret == BOOTM_ERR_OVERLAP)
 627                         ret = 0;
 628         }
 629
 630         /* Relocate the ramdisk */
 631 #ifdef CONFIG_SYS_BOOT_RAMDISK_HIGH
 632         if (!ret && (states & BOOTM_STATE_RAMDISK)) {
 633                 ulong rd_len = images->rd_end - images->rd_start;
 634
 635                 ret = boot_ramdisk_high(&images->lmb, images->rd_start,
 636                         rd_len, &images->initrd_start, &images->initrd_end);
 637                 if (!ret) {
 638                         setenv_hex("initrd_start", images->initrd_start);
 639                         setenv_hex("initrd_end", images->initrd_end);
 640                 }
 641         }
 642 #endif
 643 #if defined(CONFIG_OF_LIBFDT) && defined(CONFIG_LMB)
 644         if (!ret && (states & BOOTM_STATE_FDT)) {
 645                 boot_fdt_add_mem_rsv_regions(&images->lmb, images->ft_addr);
 646                 ret = boot_relocate_fdt(&images->lmb, &images->ft_addr,
 647                                         &images->ft_len);
 648         }
 649 #endif
 650
 651         /* From now on, we need the OS boot function */
 652         if (ret)
 653                 return ret;
 654         boot_fn = boot_os[images->os.os];
 655         if (boot_fn == NULL) {
 656                 if (iflag)
 657                         enable_interrupts();
 658                 printf("ERROR: booting os '%s' (%d) is not supported\n",
 659                        genimg_get_os_name(images->os.os), images->os.os);
 660                 bootstage_error(BOOTSTAGE_ID_CHECK_BOOT_OS);
 661                 return 1;
 662         }
 663
 664         /* Call various other states that are not generally used */
 665         if (!ret && (states & BOOTM_STATE_OS_CMDLINE))
 666                 ret = boot_fn(BOOTM_STATE_OS_CMDLINE, argc, argv, images);
 667         if (!ret && (states & BOOTM_STATE_OS_BD_T))
 668                 ret = boot_fn(BOOTM_STATE_OS_BD_T, argc, argv, images);
 669         if (!ret && (states & BOOTM_STATE_OS_PREP))
 670                 ret = boot_fn(BOOTM_STATE_OS_PREP, argc, argv, images);
 671
 672 #ifdef CONFIG_TRACE
 673         /* Pretend to run the OS, then run a user command */
 674         if (!ret && (states & BOOTM_STATE_OS_FAKE_GO)) {
 675                 char *cmd_list = getenv("fakegocmd");
 676
 677                 ret = boot_selected_os(argc, argv, BOOTM_STATE_OS_FAKE_GO,
 678                                 images, boot_fn);
 679                 if (!ret && cmd_list)
 680                         ret = run_command_list(cmd_list, -1, flag);
 681         }
 682 #endif
 683         /* Now run the OS! We hope this doesn't return */
 684         if (!ret && (states & BOOTM_STATE_OS_GO)) {
 685                 ret = boot_selected_os(argc, argv, BOOTM_STATE_OS_GO,
 686                                 images, boot_fn);
 687                 if (ret)
 688                         goto err;
 689         }
 690
 691         return ret;
 692
 693         /* Deal with any fallout */
 694 err:
 695         if (iflag)
 696                 enable_interrupts();
 697
 698         if (ret == BOOTM_ERR_UNIMPLEMENTED)
 699                 bootstage_error(BOOTSTAGE_ID_DECOMP_UNIMPL);
 700         else if (ret == BOOTM_ERR_RESET)
 701                 do_reset(cmdtp, flag, argc, argv);
 702         else
 703                 puts("subcommand not supported\n");
 704
 705         return ret;
 706 }
 707
 708 static int do_bootm_subcommand(cmd_tbl_t *cmdtp, int flag, int argc,
 709                         char * const argv[])
 710 {
 711         int ret = 0;
 712         long state;
 713         cmd_tbl_t *c;
 714
 715         c = find_cmd_tbl(argv[0], &cmd_bootm_sub[0], ARRAY_SIZE(cmd_bootm_sub));
 716         argc--; argv++;
 717
 718         if (c) {
 719                 state = (long)c->cmd;
 720                 if (state == BOOTM_STATE_START)
 721                         state |= BOOTM_STATE_FINDOS | BOOTM_STATE_FINDOTHER;
 722         } else {
 723                 /* Unrecognized command */
 724                 return CMD_RET_USAGE;
 725         }
 726
 727         if (state != BOOTM_STATE_START && images.state >= state) {
 728                 printf("Trying to execute a command out of order\n");
 729                 return CMD_RET_USAGE;
 730         }
 731
 732         ret = do_bootm_states(cmdtp, flag, argc, argv, state, &images, 0);
 733
 734         return ret;
 735 }
 736
 737 /*******************************************************************/
 738 /* bootm - boot application image from image in memory */
 739 /*******************************************************************/
 740
 741 int do_bootm(cmd_tbl_t *cmdtp, int flag, int argc, char * const argv[])
 742 {
 743 #ifdef CONFIG_NEEDS_MANUAL_RELOC
 744         static int relocated = 0;
 745
 746         if (!relocated) {
 747                 int i;
 748
 749                 /* relocate boot function table */
 750                 for (i = 0; i < ARRAY_SIZE(boot_os); i++)
 751                         if (boot_os[i] != NULL)
 752                                 boot_os[i] += gd->reloc_off;
 753
 754                 /* relocate names of sub-command table */
 755                 for (i = 0; i < ARRAY_SIZE(cmd_bootm_sub); i++)
 756                         cmd_bootm_sub[i].name += gd->reloc_off;
 757
 758                 relocated = 1;
 759         }
 760 #endif
 761
 762         /* determine if we have a sub command */
 763         argc--; argv++;
 764         if (argc > 0) {
 765                 char *endp;
 766
 767                 simple_strtoul(argv[0], &endp, 16);
 768                 /* endp pointing to NULL means that argv[0] was just a
 769                  * valid number, pass it along to the normal bootm processing
 770                  *
 771                  * If endp is ':' or '#' assume a FIT identifier so pass
 772                  * along for normal processing.
 773                  *
 774                  * Right now we assume the first arg should never be '-'
 775                  */
 776                 if ((*endp != 0) && (*endp != ':') && (*endp != '#'))
 777                         return do_bootm_subcommand(cmdtp, flag, argc, argv);
 778         }
 779
 780         return do_bootm_states(cmdtp, flag, argc, argv, BOOTM_STATE_START |
 781                 BOOTM_STATE_FINDOS | BOOTM_STATE_FINDOTHER |
 782                 BOOTM_STATE_LOADOS | BOOTM_STATE_OS_PREP |
 783                 BOOTM_STATE_OS_FAKE_GO | BOOTM_STATE_OS_GO, &images, 1);
 784 }
 785
 786 int bootm_maybe_autostart(cmd_tbl_t *cmdtp, const char *cmd)
 787 {
 788         const char *ep = getenv("autostart");
 789
 790         if (ep && !strcmp(ep, "yes")) {
 791                 char *local_args[2];
 792                 local_args[0] = (char *)cmd;
 793                 local_args[1] = NULL;
 794                 printf("Automatic boot of image at addr 0x%08lX ...\n", load_addr);
 795                 return do_bootm(cmdtp, 0, 1, local_args);
 796         }
 797
 798         return 0;
 799 }
 800
 801 /**
 802  * image_get_kernel - verify legacy format kernel image
 803  * @img_addr: in RAM address of the legacy format image to be verified
 804  * @verify: data CRC verification flag
 805  *
 806  * image_get_kernel() verifies legacy image integrity and returns pointer to
 807  * legacy image header if image verification was completed successfully.
 808  *
 809  * returns:
 810  *     pointer to a legacy image header if valid image was found
 811  *     otherwise return NULL
 812  */
 813 static image_header_t *image_get_kernel(ulong img_addr, int verify)
 814 {
 815         image_header_t *hdr = (image_header_t *)img_addr;
 816
 817         if (!image_check_magic(hdr)) {
 818                 puts("Bad Magic Number\n");
 819                 bootstage_error(BOOTSTAGE_ID_CHECK_MAGIC);
 820                 return NULL;
 821         }
 822         bootstage_mark(BOOTSTAGE_ID_CHECK_HEADER);
 823
 824         if (!image_check_hcrc(hdr)) {
 825                 puts("Bad Header Checksum\n");
 826                 bootstage_error(BOOTSTAGE_ID_CHECK_HEADER);
 827                 return NULL;
 828         }
 829
 830         bootstage_mark(BOOTSTAGE_ID_CHECK_CHECKSUM);
 831         image_print_contents(hdr);
 832
 833         if (verify) {
 834                 puts("   Verifying Checksum ... ");
 835                 if (!image_check_dcrc(hdr)) {
 836                         printf("Bad Data CRC\n");
 837                         bootstage_error(BOOTSTAGE_ID_CHECK_CHECKSUM);
 838                         return NULL;
 839                 }
 840                 puts("OK\n");
 841         }
 842         bootstage_mark(BOOTSTAGE_ID_CHECK_ARCH);
 843
 844         if (!image_check_target_arch(hdr)) {
 845                 printf("Unsupported Architecture 0x%x\n", image_get_arch(hdr));
 846                 bootstage_error(BOOTSTAGE_ID_CHECK_ARCH);
 847                 return NULL;
 848         }
 849         return hdr;
 850 }
 851
 852 /**
 853  * boot_get_kernel - find kernel image
 854  * @os_data: pointer to a ulong variable, will hold os data start address
 855  * @os_len: pointer to a ulong variable, will hold os data length
 856  *
 857  * boot_get_kernel() tries to find a kernel image, verifies its integrity
 858  * and locates kernel data.
 859  *
 860  * returns:
 861  *     pointer to image header if valid image was found, plus kernel start
 862  *     address and length, otherwise NULL
 863  */
 864 static const void *boot_get_kernel(cmd_tbl_t *cmdtp, int flag, int argc,
 865                 char * const argv[], bootm_headers_t *images, ulong *os_data,
 866                 ulong *os_len)
 867 {
 868         image_header_t  *hdr;
 869         ulong           img_addr;
 870         const void *buf;
 871 #if defined(CONFIG_FIT)
 872         const char      *fit_uname_config = NULL;
 873         const char      *fit_uname_kernel = NULL;
 874         int             os_noffset;
 875 #endif
 876
 877         /* find out kernel image address */
 878         if (argc < 1) {
 879                 img_addr = load_addr;
 880                 debug("*  kernel: default image load address = 0x%08lx\n",
 881                                 load_addr);
 882 #if defined(CONFIG_FIT)
 883         } else if (fit_parse_conf(argv[0], load_addr, &img_addr,
 884                                                         &fit_uname_config)) {
 885                 debug("*  kernel: config '%s' from image at 0x%08lx\n",
 886                                 fit_uname_config, img_addr);
 887         } else if (fit_parse_subimage(argv[0], load_addr, &img_addr,
 888                                                         &fit_uname_kernel)) {
 889                 debug("*  kernel: subimage '%s' from image at 0x%08lx\n",
 890                                 fit_uname_kernel, img_addr);
 891 #endif
 892         } else {
 893                 img_addr = simple_strtoul(argv[0], NULL, 16);
 894                 debug("*  kernel: cmdline image address = 0x%08lx\n", img_addr);
 895         }
 896
 897         bootstage_mark(BOOTSTAGE_ID_CHECK_MAGIC);
 898
 899         /* copy from dataflash if needed */
 900         img_addr = genimg_get_image(img_addr);
 901
 902         /* check image type, for FIT images get FIT kernel node */
 903         *os_data = *os_len = 0;
 904         buf = map_sysmem(img_addr, 0);
 905         switch (genimg_get_format(buf)) {
 906         case IMAGE_FORMAT_LEGACY:
 907                 printf("## Booting kernel from Legacy Image at %08lx ...\n",
 908                                 img_addr);
 909                 hdr = image_get_kernel(img_addr, images->verify);
 910                 if (!hdr)
 911                         return NULL;
 912                 bootstage_mark(BOOTSTAGE_ID_CHECK_IMAGETYPE);
 913
 914                 /* get os_data and os_len */
 915                 switch (image_get_type(hdr)) {
 916                 case IH_TYPE_KERNEL:
 917                 case IH_TYPE_KERNEL_NOLOAD:
 918                         *os_data = image_get_data(hdr);
 919                         *os_len = image_get_data_size(hdr);
 920                         break;
 921                 case IH_TYPE_MULTI:
 922                         image_multi_getimg(hdr, 0, os_data, os_len);
 923                         break;
 924                 case IH_TYPE_STANDALONE:
 925                         *os_data = image_get_data(hdr);
 926                         *os_len = image_get_data_size(hdr);
 927                         break;
 928                 default:
 929                         printf("Wrong Image Type for %s command\n",
 930                                 cmdtp->name);
 931                         bootstage_error(BOOTSTAGE_ID_CHECK_IMAGETYPE);
 932                         return NULL;
 933                 }
 934
 935                 /*
 936                  * copy image header to allow for image overwrites during
 937                  * kernel decompression.
 938                  */
 939                 memmove(&images->legacy_hdr_os_copy, hdr,
 940                         sizeof(image_header_t));
 941
 942                 /* save pointer to image header */
 943                 images->legacy_hdr_os = hdr;
 944
 945                 images->legacy_hdr_valid = 1;
 946                 bootstage_mark(BOOTSTAGE_ID_DECOMP_IMAGE);
 947                 break;
 948 #if defined(CONFIG_FIT)
 949         case IMAGE_FORMAT_FIT:
 950                 os_noffset = fit_image_load(images, FIT_KERNEL_PROP,
 951                                 img_addr,
 952                                 &fit_uname_kernel, fit_uname_config,
 953                                 IH_ARCH_DEFAULT, IH_TYPE_KERNEL,
 954                                 BOOTSTAGE_ID_FIT_KERNEL_START,
 955                                 FIT_LOAD_IGNORED, os_data, os_len);
 956                 if (os_noffset < 0)
 957                         return NULL;
 958
 959                 images->fit_hdr_os = map_sysmem(img_addr, 0);
 960                 images->fit_uname_os = fit_uname_kernel;
 961                 images->fit_noffset_os = os_noffset;
 962                 break;
 963 #endif
 964         default:
 965                 printf("Wrong Image Format for %s command\n", cmdtp->name);
 966                 bootstage_error(BOOTSTAGE_ID_FIT_KERNEL_INFO);
 967                 return NULL;
 968         }
 969
 970         debug("   kernel data at 0x%08lx, len = 0x%08lx (%ld)\n",
 971                         *os_data, *os_len, *os_len);
 972
 973         return buf;
 974 }
 975
 976 #ifdef CONFIG_SYS_LONGHELP
 977 static char bootm_help_text[] =
 978         "[addr [arg ...]]\n    - boot application image stored in memory\n"
 979         "\tpassing arguments 'arg ...'; when booting a Linux kernel,\n"
 980         "\t'arg' can be the address of an initrd image\n"
 981 #if defined(CONFIG_OF_LIBFDT)
 982         "\tWhen booting a Linux kernel which requires a flat device-tree\n"
 983         "\ta third argument is required which is the address of the\n"
 984         "\tdevice-tree blob. To boot that kernel without an initrd image,\n"
 985         "\tuse a '-' for the second argument. If you do not pass a third\n"
 986         "\ta bd_info struct will be passed instead\n"
 987 #endif
 988 #if defined(CONFIG_FIT)
 989         "\t\nFor the new multi component uImage format (FIT) addresses\n"
 990         "\tmust be extened to include component or configuration unit name:\n"
 991         "\taddr:<subimg_uname> - direct component image specification\n"
 992         "\taddr#<conf_uname>   - configuration specification\n"
 993         "\tUse iminfo command to get the list of existing component\n"
 994         "\timages and configurations.\n"
 995 #endif
 996         "\nSub-commands to do part of the bootm sequence.  The sub-commands "
 997         "must be\n"
 998         "issued in the order below (it's ok to not issue all sub-commands):\n"
 999         "\tstart [addr [arg ...]]\n"
1000         "\tloados  - load OS image\n"
1001 #if defined(CONFIG_SYS_BOOT_RAMDISK_HIGH)
1002         "\tramdisk - relocate initrd, set env initrd_start/initrd_end\n"
1003 #endif
1004 #if defined(CONFIG_OF_LIBFDT)
1005         "\tfdt     - relocate flat device tree\n"
1006 #endif
1007         "\tcmdline - OS specific command line processing/setup\n"
1008         "\tbdt     - OS specific bd_t processing\n"
1009         "\tprep    - OS specific prep before relocation or go\n"
1010         "\tgo      - start OS";
1011 #endif
1012
1013 U_BOOT_CMD(
1014         bootm,  CONFIG_SYS_MAXARGS,     1,      do_bootm,
1015         "boot application image from memory", bootm_help_text
1016 );
1017
1018 /*******************************************************************/
1019 /* bootd - boot default image */
1020 /*******************************************************************/
1021 #if defined(CONFIG_CMD_BOOTD)
1022 int do_bootd(cmd_tbl_t *cmdtp, int flag, int argc, char * const argv[])
1023 {
1024         int rcode = 0;
1025
1026         if (run_command(getenv("bootcmd"), flag) < 0)
1027                 rcode = 1;
1028         return rcode;
1029 }
1030
1031 U_BOOT_CMD(
1032         boot,   1,      1,      do_bootd,
1033         "boot default, i.e., run 'bootcmd'",
1034         ""
1035 );
1036
1037 /* keep old command name "bootd" for backward compatibility */
1038 U_BOOT_CMD(
1039         bootd, 1,       1,      do_bootd,
1040         "boot default, i.e., run 'bootcmd'",
1041         ""
1042 );
1043
1044 #endif
1045
1046
1047 /*******************************************************************/
1048 /* iminfo - print header info for a requested image */
1049 /*******************************************************************/
1050 #if defined(CONFIG_CMD_IMI)
1051 static int do_iminfo(cmd_tbl_t *cmdtp, int flag, int argc, char * const argv[])
1052 {
1053         int     arg;
1054         ulong   addr;
1055         int     rcode = 0;
1056
1057         if (argc < 2) {
1058                 return image_info(load_addr);
1059         }
1060
1061         for (arg = 1; arg < argc; ++arg) {
1062                 addr = simple_strtoul(argv[arg], NULL, 16);
1063                 if (image_info(addr) != 0)
1064                         rcode = 1;
1065         }
1066         return rcode;
1067 }
1068
1069 static int image_info(ulong addr)
1070 {
1071         void *hdr = (void *)addr;
1072
1073         printf("\n## Checking Image at %08lx ...\n", addr);
1074
1075         switch (genimg_get_format(hdr)) {
1076         case IMAGE_FORMAT_LEGACY:
1077                 puts("   Legacy image found\n");
1078                 if (!image_check_magic(hdr)) {
1079                         puts("   Bad Magic Number\n");
1080                         return 1;
1081                 }
1082
1083                 if (!image_check_hcrc(hdr)) {
1084                         puts("   Bad Header Checksum\n");
1085                         return 1;
1086                 }
1087
1088                 image_print_contents(hdr);
1089
1090                 puts("   Verifying Checksum ... ");
1091                 if (!image_check_dcrc(hdr)) {
1092                         puts("   Bad Data CRC\n");
1093                         return 1;
1094                 }
1095                 puts("OK\n");
1096                 return 0;
1097 #if defined(CONFIG_FIT)
1098         case IMAGE_FORMAT_FIT:
1099                 puts("   FIT image found\n");
1100
1101                 if (!fit_check_format(hdr)) {
1102                         puts("Bad FIT image format!\n");
1103                         return 1;
1104                 }
1105
1106                 fit_print_contents(hdr);
1107
1108                 if (!fit_all_image_verify(hdr)) {
1109                         puts("Bad hash in FIT image!\n");
1110                         return 1;
1111                 }
1112
1113                 return 0;
1114 #endif
1115         default:
1116                 puts("Unknown image format!\n");
1117                 break;
1118         }
1119
1120         return 1;
1121 }
1122
1123 U_BOOT_CMD(
1124         iminfo, CONFIG_SYS_MAXARGS,     1,      do_iminfo,
1125         "print header information for application image",
1126         "addr [addr ...]\n"
1127         "    - print header information for application image starting at\n"
1128         "      address 'addr' in memory; this includes verification of the\n"
1129         "      image contents (magic number, header and payload checksums)"
1130 );
1131 #endif
1132
1133
1134 /*******************************************************************/
1135 /* imls - list all images found in flash */
1136 /*******************************************************************/
1137 #if defined(CONFIG_CMD_IMLS)
1138 static int do_imls_nor(void)
1139 {
1140         flash_info_t *info;
1141         int i, j;
1142         void *hdr;
1143
1144         for (i = 0, info = &flash_info[0];
1145                 i < CONFIG_SYS_MAX_FLASH_BANKS; ++i, ++info) {
1146
1147                 if (info->flash_id == FLASH_UNKNOWN)
1148                         goto next_bank;
1149                 for (j = 0; j < info->sector_count; ++j) {
1150
1151                         hdr = (void *)info->start[j];
1152                         if (!hdr)
1153                                 goto next_sector;
1154
1155                         switch (genimg_get_format(hdr)) {
1156                         case IMAGE_FORMAT_LEGACY:
1157                                 if (!image_check_hcrc(hdr))
1158                                         goto next_sector;
1159
1160                                 printf("Legacy Image at %08lX:\n", (ulong)hdr);
1161                                 image_print_contents(hdr);
1162
1163                                 puts("   Verifying Checksum ... ");
1164                                 if (!image_check_dcrc(hdr)) {
1165                                         puts("Bad Data CRC\n");
1166                                 } else {
1167                                         puts("OK\n");
1168                                 }
1169                                 break;
1170 #if defined(CONFIG_FIT)
1171                         case IMAGE_FORMAT_FIT:
1172                                 if (!fit_check_format(hdr))
1173                                         goto next_sector;
1174
1175                                 printf("FIT Image at %08lX:\n", (ulong)hdr);
1176                                 fit_print_contents(hdr);
1177                                 break;
1178 #endif
1179                         default:
1180                                 goto next_sector;
1181                         }
1182
1183 next_sector:            ;
1184                 }
1185 next_bank:      ;
1186         }
1187         return 0;
1188 }
1189 #endif
1190
1191 #if defined(CONFIG_CMD_IMLS_NAND)
1192 static int nand_imls_legacyimage(nand_info_t *nand, int nand_dev, loff_t off,
1193                 size_t len)
1194 {
1195         void *imgdata;
1196         int ret;
1197
1198         imgdata = malloc(len);
1199         if (!imgdata) {
1200                 printf("May be a Legacy Image at NAND device %d offset %08llX:\n",
1201                                 nand_dev, off);
1202                 printf("   Low memory(cannot allocate memory for image)\n");
1203                 return -ENOMEM;
1204         }
1205
1206         ret = nand_read_skip_bad(nand, off, &len,
1207                         imgdata);
1208         if (ret < 0 && ret != -EUCLEAN) {
1209                 free(imgdata);
1210                 return ret;
1211         }
1212
1213         if (!image_check_hcrc(imgdata)) {
1214                 free(imgdata);
1215                 return 0;
1216         }
1217
1218         printf("Legacy Image at NAND device %d offset %08llX:\n",
1219                         nand_dev, off);
1220         image_print_contents(imgdata);
1221
1222         puts("   Verifying Checksum ... ");
1223         if (!image_check_dcrc(imgdata))
1224                 puts("Bad Data CRC\n");
1225         else
1226                 puts("OK\n");
1227
1228         free(imgdata);
1229
1230         return 0;
1231 }
1232
1233 static int nand_imls_fitimage(nand_info_t *nand, int nand_dev, loff_t off,
1234                 size_t len)
1235 {
1236         void *imgdata;
1237         int ret;
1238
1239         imgdata = malloc(len);
1240         if (!imgdata) {
1241                 printf("May be a FIT Image at NAND device %d offset %08llX:\n",
1242                                 nand_dev, off);
1243                 printf("   Low memory(cannot allocate memory for image)\n");
1244                 return -ENOMEM;
1245         }
1246
1247         ret = nand_read_skip_bad(nand, off, &len,
1248                         imgdata);
1249         if (ret < 0 && ret != -EUCLEAN) {
1250                 free(imgdata);
1251                 return ret;
1252         }
1253
1254         if (!fit_check_format(imgdata)) {
1255                 free(imgdata);
1256                 return 0;
1257         }
1258
1259         printf("FIT Image at NAND device %d offset %08llX:\n", nand_dev, off);
1260
1261         fit_print_contents(imgdata);
1262         free(imgdata);
1263
1264         return 0;
1265 }
1266
1267 static int do_imls_nand(void)
1268 {
1269         nand_info_t *nand;
1270         int nand_dev = nand_curr_device;
1271         size_t len;
1272         loff_t off;
1273         u32 buffer[16];
1274
1275         if (nand_dev < 0 || nand_dev >= CONFIG_SYS_MAX_NAND_DEVICE) {
1276                 puts("\nNo NAND devices available\n");
1277                 return -ENODEV;
1278         }
1279
1280         printf("\n");
1281
1282         for (nand_dev = 0; nand_dev < CONFIG_SYS_MAX_NAND_DEVICE; nand_dev++) {
1283                 nand = &nand_info[nand_dev];
1284                 if (!nand->name || !nand->size)
1285                         continue;
1286
1287                 for (off = 0; off < nand->size; off += nand->erasesize) {
1288                         const image_header_t *header;
1289                         int ret;
1290
1291                         if (nand_block_isbad(nand, off))
1292                                 continue;
1293
1294                         len = sizeof(buffer);
1295
1296                         ret = nand_read(nand, off, &len, (u8 *)buffer);
1297                         if (ret < 0 && ret != -EUCLEAN) {
1298                                 printf("NAND read error %d at offset %08llX\n",
1299                                                 ret, off);
1300                                 continue;
1301                         }
1302
1303                         switch (genimg_get_format(buffer)) {
1304                         case IMAGE_FORMAT_LEGACY:
1305                                 header = (const image_header_t *)buffer;
1306
1307                                 len = image_get_image_size(header);
1308                                 nand_imls_legacyimage(nand, nand_dev, off, len);
1309                                 break;
1310 #if defined(CONFIG_FIT)
1311                         case IMAGE_FORMAT_FIT:
1312                                 len = fit_get_size(buffer);
1313                                 nand_imls_fitimage(nand, nand_dev, off, len);
1314                                 break;
1315 #endif
1316                         }
1317                 }
1318         }
1319
1320         return 0;
1321 }
1322 #endif
1323
1324 #if defined(CONFIG_CMD_IMLS) || defined(CONFIG_CMD_IMLS_NAND)
1325 static int do_imls(cmd_tbl_t *cmdtp, int flag, int argc, char * const argv[])
1326 {
1327         int ret_nor = 0, ret_nand = 0;
1328
1329 #if defined(CONFIG_CMD_IMLS)
1330         ret_nor = do_imls_nor();
1331 #endif
1332
1333 #if defined(CONFIG_CMD_IMLS_NAND)
1334         ret_nand = do_imls_nand();
1335 #endif
1336
1337         if (ret_nor)
1338                 return ret_nor;
1339
1340         if (ret_nand)
1341                 return ret_nand;
1342
1343         return (0);
1344 }
1345
1346 U_BOOT_CMD(
1347         imls,   1,              1,      do_imls,
1348         "list all images found in flash",
1349         "\n"
1350         "    - Prints information about all images found at sector/block\n"
1351         "      boundaries in nor/nand flash."
1352 );
1353 #endif
1354
1355 /*******************************************************************/
1356 /* helper routines */
1357 /*******************************************************************/
1358 #if defined(CONFIG_SILENT_CONSOLE) && !defined(CONFIG_SILENT_U_BOOT_ONLY)
1359
1360 #define CONSOLE_ARG     "console="
1361 #define CONSOLE_ARG_LEN (sizeof(CONSOLE_ARG) - 1)
1362
1363 static void fixup_silent_linux(void)
1364 {
1365         char *buf;
1366         const char *env_val;
1367         char *cmdline = getenv("bootargs");
1368
1369         /* Only fix cmdline when requested */
1370         if (!(gd->flags & GD_FLG_SILENT))
1371                 return;
1372
1373         debug("before silent fix-up: %s\n", cmdline);
1374         if (cmdline && (cmdline[0] != '\0')) {
1375                 char *start = strstr(cmdline, CONSOLE_ARG);
1376
1377                 /* Allocate space for maximum possible new command line */
1378                 buf = malloc(strlen(cmdline) + 1 + CONSOLE_ARG_LEN + 1);
1379                 if (!buf) {
1380                         debug("%s: out of memory\n", __func__);
1381                         return;
1382                 }
1383
1384                 if (start) {
1385                         char *end = strchr(start, ' ');
1386                         int num_start_bytes = start - cmdline + CONSOLE_ARG_LEN;
1387
1388                         strncpy(buf, cmdline, num_start_bytes);
1389                         if (end)
1390                                 strcpy(buf + num_start_bytes, end);
1391                         else
1392                                 buf[num_start_bytes] = '\0';
1393                 } else {
1394                         sprintf(buf, "%s %s", cmdline, CONSOLE_ARG);
1395                 }
1396                 env_val = buf;
1397         } else {
1398                 buf = NULL;
1399                 env_val = CONSOLE_ARG;
1400         }
1401
1402         setenv("bootargs", env_val);
1403         debug("after silent fix-up: %s\n", env_val);
1404         free(buf);
1405 }
1406 #endif /* CONFIG_SILENT_CONSOLE */
1407
1408 #if defined(CONFIG_BOOTM_NETBSD) || defined(CONFIG_BOOTM_PLAN9)
1409 static void copy_args(char *dest, int argc, char * const argv[], char delim)
1410 {
1411         int i;
1412
1413         for (i = 0; i < argc; i++) {
1414                 if (i > 0)
1415                         *dest++ = delim;
1416                 strcpy(dest, argv[i]);
1417                 dest += strlen(argv[i]);
1418         }
1419 }
1420 #endif
1421
1422 /*******************************************************************/
1423 /* OS booting routines */
1424 /*******************************************************************/
1425
1426 #ifdef CONFIG_BOOTM_NETBSD
1427 static int do_bootm_netbsd(int flag, int argc, char * const argv[],
1428                             bootm_headers_t *images)
1429 {
1430         void (*loader)(bd_t *, image_header_t *, char *, char *);
1431         image_header_t *os_hdr, *hdr;
1432         ulong kernel_data, kernel_len;
1433         char *consdev;
1434         char *cmdline;
1435
1436         if ((flag != 0) && (flag != BOOTM_STATE_OS_GO))
1437                 return 1;
1438
1439 #if defined(CONFIG_FIT)
1440         if (!images->legacy_hdr_valid) {
1441                 fit_unsupported_reset("NetBSD");
1442                 return 1;
1443         }
1444 #endif
1445         hdr = images->legacy_hdr_os;
1446
1447         /*
1448          * Booting a (NetBSD) kernel image
1449          *
1450          * This process is pretty similar to a standalone application:
1451          * The (first part of an multi-) image must be a stage-2 loader,
1452          * which in turn is responsible for loading & invoking the actual
1453          * kernel.  The only differences are the parameters being passed:
1454          * besides the board info strucure, the loader expects a command
1455          * line, the name of the console device, and (optionally) the
1456          * address of the original image header.
1457          */
1458         os_hdr = NULL;
1459         if (image_check_type(&images->legacy_hdr_os_copy, IH_TYPE_MULTI)) {
1460                 image_multi_getimg(hdr, 1, &kernel_data, &kernel_len);
1461                 if (kernel_len)
1462                         os_hdr = hdr;
1463         }
1464
1465         consdev = "";
1466 #if   defined(CONFIG_8xx_CONS_SMC1)
1467         consdev = "smc1";
1468 #elif defined(CONFIG_8xx_CONS_SMC2)
1469         consdev = "smc2";
1470 #elif defined(CONFIG_8xx_CONS_SCC2)
1471         consdev = "scc2";
1472 #elif defined(CONFIG_8xx_CONS_SCC3)
1473         consdev = "scc3";
1474 #endif
1475
1476         if (argc > 0) {
1477                 ulong len;
1478                 int   i;
1479
1480                 for (i = 0, len = 0; i < argc; i += 1)
1481                         len += strlen(argv[i]) + 1;
1482                 cmdline = malloc(len);
1483                 copy_args(cmdline, argc, argv, ' ');
1484         } else if ((cmdline = getenv("bootargs")) == NULL) {
1485                 cmdline = "";
1486         }
1487
1488         loader = (void (*)(bd_t *, image_header_t *, char *, char *))images->ep;
1489
1490         printf("## Transferring control to NetBSD stage-2 loader "
1491                 "(at address %08lx) ...\n",
1492                 (ulong)loader);
1493
1494         bootstage_mark(BOOTSTAGE_ID_RUN_OS);
1495
1496         /*
1497          * NetBSD Stage-2 Loader Parameters:
1498          *   r3: ptr to board info data
1499          *   r4: image address
1500          *   r5: console device
1501          *   r6: boot args string
1502          */
1503         (*loader)(gd->bd, os_hdr, consdev, cmdline);
1504
1505         return 1;
1506 }
1507 #endif /* CONFIG_BOOTM_NETBSD*/
1508
1509 #ifdef CONFIG_LYNXKDI
1510 static int do_bootm_lynxkdi(int flag, int argc, char * const argv[],
1511                              bootm_headers_t *images)
1512 {
1513         image_header_t *hdr = &images->legacy_hdr_os_copy;
1514
1515         if ((flag != 0) && (flag != BOOTM_STATE_OS_GO))
1516                 return 1;
1517
1518 #if defined(CONFIG_FIT)
1519         if (!images->legacy_hdr_valid) {
1520                 fit_unsupported_reset("Lynx");
1521                 return 1;
1522         }
1523 #endif
1524
1525         lynxkdi_boot((image_header_t *)hdr);
1526
1527         return 1;
1528 }
1529 #endif /* CONFIG_LYNXKDI */
1530
1531 #ifdef CONFIG_BOOTM_RTEMS
1532 static int do_bootm_rtems(int flag, int argc, char * const argv[],
1533                            bootm_headers_t *images)
1534 {
1535         void (*entry_point)(bd_t *);
1536
1537         if ((flag != 0) && (flag != BOOTM_STATE_OS_GO))
1538                 return 1;
1539
1540 #if defined(CONFIG_FIT)
1541         if (!images->legacy_hdr_valid) {
1542                 fit_unsupported_reset("RTEMS");
1543                 return 1;
1544         }
1545 #endif
1546
1547         entry_point = (void (*)(bd_t *))images->ep;
1548
1549         printf("## Transferring control to RTEMS (at address %08lx) ...\n",
1550                 (ulong)entry_point);
1551
1552         bootstage_mark(BOOTSTAGE_ID_RUN_OS);
1553
1554         /*
1555          * RTEMS Parameters:
1556          *   r3: ptr to board info data
1557          */
1558         (*entry_point)(gd->bd);
1559
1560         return 1;
1561 }
1562 #endif /* CONFIG_BOOTM_RTEMS */
1563
1564 #if defined(CONFIG_BOOTM_OSE)
1565 static int do_bootm_ose(int flag, int argc, char * const argv[],
1566                            bootm_headers_t *images)
1567 {
1568         void (*entry_point)(void);
1569
1570         if ((flag != 0) && (flag != BOOTM_STATE_OS_GO))
1571                 return 1;
1572
1573 #if defined(CONFIG_FIT)
1574         if (!images->legacy_hdr_valid) {
1575                 fit_unsupported_reset("OSE");
1576                 return 1;
1577         }
1578 #endif
1579
1580         entry_point = (void (*)(void))images->ep;
1581
1582         printf("## Transferring control to OSE (at address %08lx) ...\n",
1583                 (ulong)entry_point);
1584
1585         bootstage_mark(BOOTSTAGE_ID_RUN_OS);
1586
1587         /*
1588          * OSE Parameters:
1589          *   None
1590          */
1591         (*entry_point)();
1592
1593         return 1;
1594 }
1595 #endif /* CONFIG_BOOTM_OSE */
1596
1597 #if defined(CONFIG_BOOTM_PLAN9)
1598 static int do_bootm_plan9(int flag, int argc, char * const argv[],
1599                            bootm_headers_t *images)
1600 {
1601         void (*entry_point)(void);
1602         char *s;
1603
1604         if ((flag != 0) && (flag != BOOTM_STATE_OS_GO))
1605                 return 1;
1606
1607 #if defined(CONFIG_FIT)
1608         if (!images->legacy_hdr_valid) {
1609                 fit_unsupported_reset("Plan 9");
1610                 return 1;
1611         }
1612 #endif
1613
1614         /* See README.plan9 */
1615         s = getenv("confaddr");
1616         if (s != NULL) {
1617                 char *confaddr = (char *)simple_strtoul(s, NULL, 16);
1618
1619                 if (argc > 0) {
1620                         copy_args(confaddr, argc, argv, '\n');
1621                 } else {
1622                         s = getenv("bootargs");
1623                         if (s != NULL)
1624                                 strcpy(confaddr, s);
1625                 }
1626         }
1627
1628         entry_point = (void (*)(void))images->ep;
1629
1630         printf("## Transferring control to Plan 9 (at address %08lx) ...\n",
1631                 (ulong)entry_point);
1632
1633         bootstage_mark(BOOTSTAGE_ID_RUN_OS);
1634
1635         /*
1636          * Plan 9 Parameters:
1637          *   None
1638          */
1639         (*entry_point)();
1640
1641         return 1;
1642 }
1643 #endif /* CONFIG_BOOTM_PLAN9 */
1644
1645 #if defined(CONFIG_CMD_ELF)
1646 static int do_bootm_vxworks(int flag, int argc, char * const argv[],
1647                              bootm_headers_t *images)
1648 {
1649         char str[80];
1650
1651         if ((flag != 0) && (flag != BOOTM_STATE_OS_GO))
1652                 return 1;
1653
1654 #if defined(CONFIG_FIT)
1655         if (!images->legacy_hdr_valid) {
1656                 fit_unsupported_reset("VxWorks");
1657                 return 1;
1658         }
1659 #endif
1660
1661         sprintf(str, "%lx", images->ep); /* write entry-point into string */
1662         setenv("loadaddr", str);
1663         do_bootvx(NULL, 0, 0, NULL);
1664
1665         return 1;
1666 }
1667
1668 static int do_bootm_qnxelf(int flag, int argc, char * const argv[],
1669                             bootm_headers_t *images)
1670 {
1671         char *local_args[2];
1672         char str[16];
1673
1674         if ((flag != 0) && (flag != BOOTM_STATE_OS_GO))
1675                 return 1;
1676
1677 #if defined(CONFIG_FIT)
1678         if (!images->legacy_hdr_valid) {
1679                 fit_unsupported_reset("QNX");
1680                 return 1;
1681         }
1682 #endif
1683
1684         sprintf(str, "%lx", images->ep); /* write entry-point into string */
1685         local_args[0] = argv[0];
1686         local_args[1] = str;    /* and provide it via the arguments */
1687         do_bootelf(NULL, 0, 2, local_args);
1688
1689         return 1;
1690 }
1691 #endif
1692
1693 #ifdef CONFIG_INTEGRITY
1694 static int do_bootm_integrity(int flag, int argc, char * const argv[],
1695                            bootm_headers_t *images)
1696 {
1697         void (*entry_point)(void);
1698
1699         if ((flag != 0) && (flag != BOOTM_STATE_OS_GO))
1700                 return 1;
1701
1702 #if defined(CONFIG_FIT)
1703         if (!images->legacy_hdr_valid) {
1704                 fit_unsupported_reset("INTEGRITY");
1705                 return 1;
1706         }
1707 #endif
1708
1709         entry_point = (void (*)(void))images->ep;
1710
1711         printf("## Transferring control to INTEGRITY (at address %08lx) ...\n",
1712                 (ulong)entry_point);
1713
1714         bootstage_mark(BOOTSTAGE_ID_RUN_OS);
1715
1716         /*
1717          * INTEGRITY Parameters:
1718          *   None
1719          */
1720         (*entry_point)();
1721
1722         return 1;
1723 }
1724 #endif
1725
1726 #ifdef CONFIG_CMD_BOOTZ
1727
1728 static int __bootz_setup(void *image, void **start, void **end)
1729 {
1730         /* Please define bootz_setup() for your platform */
1731
1732         puts("Your platform's zImage format isn't supported yet!\n");
1733         return -1;
1734 }
1735 int bootz_setup(void *image, void **start, void **end)
1736         __attribute__((weak, alias("__bootz_setup")));
1737
1738 /*
1739  * zImage booting support
1740  */
1741 static int bootz_start(cmd_tbl_t *cmdtp, int flag, int argc,
1742                         char * const argv[], bootm_headers_t *images)
1743 {
1744         int ret;
1745         void *zi_start, *zi_end;
1746
1747         ret = do_bootm_states(cmdtp, flag, argc, argv, BOOTM_STATE_START,
1748                               images, 1);
1749
1750         /* Setup Linux kernel zImage entry point */
1751         if (argc < 2) {
1752                 images->ep = load_addr;
1753                 debug("*  kernel: default image load address = 0x%08lx\n",
1754                                 load_addr);
1755         } else {
1756                 images->ep = simple_strtoul(argv[1], NULL, 16);
1757                 debug("*  kernel: cmdline image address = 0x%08lx\n",
1758                         images->ep);
1759         }
1760
1761         ret = bootz_setup((void *)images->ep, &zi_start, &zi_end);
1762         if (ret != 0)
1763                 return 1;
1764
1765         lmb_reserve(&images->lmb, images->ep, zi_end - zi_start);
1766
1767         ret = do_bootm_states(cmdtp, flag, argc, argv, BOOTM_STATE_FINDOTHER,
1768                               images, 1);
1769
1770         return ret;
1771 }
1772
1773 int do_bootz(cmd_tbl_t *cmdtp, int flag, int argc, char * const argv[])
1774 {
1775         bootm_headers_t images;
1776         int ret;
1777
1778         if (bootz_start(cmdtp, flag, argc, argv, &images))
1779                 return 1;
1780
1781         ret = do_bootm_states(cmdtp, flag, argc, argv,
1782                               BOOTM_STATE_OS_FAKE_GO | BOOTM_STATE_OS_GO,
1783                               &images, 1);
1784
1785         return ret;
1786 }
1787
1788 #ifdef CONFIG_SYS_LONGHELP
1789 static char bootz_help_text[] =
1790         "[addr [initrd[:size]] [fdt]]\n"
1791         "    - boot Linux zImage stored in memory\n"
1792         "\tThe argument 'initrd' is optional and specifies the address\n"
1793         "\tof the initrd in memory. The optional argument ':size' allows\n"
1794         "\tspecifying the size of RAW initrd.\n"
1795 #if defined(CONFIG_OF_LIBFDT)
1796         "\tWhen booting a Linux kernel which requires a flat device-tree\n"
1797         "\ta third argument is required which is the address of the\n"
1798         "\tdevice-tree blob. To boot that kernel without an initrd image,\n"
1799         "\tuse a '-' for the second argument. If you do not pass a third\n"
1800         "\ta bd_info struct will be passed instead\n"
1801 #endif
1802         "";
1803 #endif
1804
1805 U_BOOT_CMD(
1806         bootz,  CONFIG_SYS_MAXARGS,     1,      do_bootz,
1807         "boot Linux zImage image from memory", bootz_help_text
1808 );
1809 #endif  /* CONFIG_CMD_BOOTZ */