common/cmd_usbd.c

   1 /*
   2  * USB Downloader for SAMSUNG Platform
   3  *
   4  * Copyright (C) 2007-2008 Samsung Electronics
   5  * Minkyu Kang <mk7.kang@samsung.com>
   6  *
   7  */
   8
   9 #include <common.h>
  10 #include <usbd.h>
  11 #include <asm/errno.h>
  12 #include <malloc.h>
  13
  14 /* version of USB Downloader Application */
  15 #define APP_VERSION     "1.6.0"
  16
  17 #define OPS_READ        0
  18 #define OPS_WRITE       1
  19
  20 #ifdef CONFIG_CMD_MTDPARTS
  21 #include <jffs2/load_kernel.h>
  22 static struct part_info *parts[16];
  23 #endif
  24
  25 #ifdef CONFIG_UBIFS_MK
  26 #include <mkfs.ubifs.h>
  27 #endif
  28
  29 #ifdef CONFIG_UBINIZE
  30 #include <ubinize.h>
  31 #endif
  32
  33 #include <mbr.h>
  34
  35 static const char pszMe[] = "usbd: ";
  36
  37 static struct usbd_ops usbd_ops;
  38
  39 static unsigned int part_id;
  40 static unsigned int write_part = 0;
  41 static unsigned int fs_offset = 0x0;
  42
  43 #define NAND_PAGE_SIZE 2048
  44
  45 static unsigned long down_ram_addr;
  46
  47 static int down_mode;
  48
  49 /* common commands */
  50 extern int do_run(cmd_tbl_t * cmdtp, int flag, int argc, char *argv[]);
  51
  52 #ifdef CONFIG_CMD_UBI
  53 static int check_ubi_mode(void)
  54 {
  55         char *env_ubifs;
  56         int ubi_mode;
  57
  58         env_ubifs = getenv("ubi");
  59         ubi_mode = !strcmp(env_ubifs, "enabled");
  60
  61         return ubi_mode;
  62 }
  63 #else
  64 #define check_ubi_mode()                0
  65 #endif
  66
  67 #ifdef CONFIG_CMD_MTDPARTS
  68 int mtdparts_init(void);
  69 int find_dev_and_part(const char*, struct mtd_device**, u8*, struct part_info**);
  70
  71 /* common/cmd_jffs2.c */
  72 extern struct list_head devices;
  73
  74 static u8 count_mtdparts(void)
  75 {
  76         struct list_head *dentry, *pentry;
  77         struct mtd_device *dev;
  78         u8 part_num = 0;
  79
  80         list_for_each(dentry, &devices) {
  81                 dev = list_entry(dentry, struct mtd_device, link);
  82
  83                 /* list partitions for given device */
  84                 list_for_each(pentry, &dev->parts)
  85                         part_num++;
  86         }
  87
  88         return part_num;
  89 }
  90
  91 static int get_part_info(void)
  92 {
  93         struct mtd_device *dev;
  94         u8 out_partnum;
  95         char part_name[12];
  96         char nand_name[12];
  97         int i;
  98         int part_num;
  99         int ubi_mode = 0;
 100
 101 #if defined(CONFIG_CMD_NAND)
 102         sprintf(nand_name, "nand0");
 103 #elif defined(CONFIG_CMD_ONENAND)
 104         sprintf(nand_name, "onenand0");
 105 #else
 106         printf("Configure your NAND sub-system\n");
 107         return 0;
 108 #endif
 109
 110         if (mtdparts_init())
 111                 return 0;
 112
 113         ubi_mode = check_ubi_mode();
 114
 115         part_num = count_mtdparts();
 116         for (i = 0; i < part_num; i++) {
 117                 sprintf(part_name, "%s,%d", nand_name, i);
 118
 119                 if (find_dev_and_part(part_name, &dev, &out_partnum, &parts[i]))
 120                         return -EINVAL;
 121         }
 122
 123         return 0;
 124 }
 125
 126 static int get_part_id(char *name)
 127 {
 128         int nparts = count_mtdparts();
 129         int i;
 130
 131         for (i = 0; i < nparts; i++) {
 132                 if (strcmp(parts[i]->name, name) == 0)
 133                         return i;
 134         }
 135
 136         printf("Error: Unknown partition -> %s\n", name);
 137         return -1;
 138 }
 139 #else
 140 static int get_part_info(void)
 141 {
 142         printf("Error: Can't get patition information\n");
 143         return -EINVAL;
 144 }
 145
 146 static int get_part_id(char *name)
 147 {
 148         return 0;
 149 }
 150 #endif
 151
 152 static void boot_cmd(char *addr)
 153 {
 154         char *argv[] = { "bootm", addr };
 155         do_bootm(NULL, 0, 2, argv);
 156 }
 157
 158 #if defined(CONFIG_CMD_NAND)
 159 extern int do_nand(cmd_tbl_t *cmdtp, int flag, int argc, char *argv[]);
 160 #elif defined(CONFIG_CMD_ONENAND)
 161 extern int do_onenand(cmd_tbl_t *cmdtp, int flag, int argc, char *argv[]);
 162 #endif
 163
 164 /* NAND erase and write using nand command */
 165 static int nand_cmd(int type, char *p1, char *p2, char *p3)
 166 {
 167         int ret = 1;
 168         char nand_name[12];
 169         int (*nand_func) (cmd_tbl_t *, int, int, char **);
 170
 171 #if defined(CONFIG_CMD_NAND)
 172         sprintf(nand_name, "nand");
 173         nand_func = do_nand;
 174 #elif defined(CONFIG_CMD_ONENAND)
 175         sprintf(nand_name, "onenand");
 176         nand_func = do_onenand;
 177 #else
 178         printf("Configure your NAND sub-system\n");
 179         return 0;
 180 #endif
 181
 182         if (type == 0) {
 183                 char *argv[] = {nand_name, "erase", p1, p2};
 184                 printf("%s %s %s %s\n", argv[0], argv[1], argv[2], argv[3]);
 185                 ret = nand_func(NULL, 0, 4, argv);
 186         } else if (type == 1) {
 187                 char *argv[] = {nand_name, "write", p1, p2, p3};
 188                 printf("%s %s %s %s %s\n", argv[0], argv[1], argv[2],
 189                                 argv[3], argv[4]);
 190                 ret = nand_func(NULL, 0, 5, argv);
 191         } else if (type == 2) {
 192                 char *argv[] = {nand_name, "write.yaffs", p1, p2, p3};
 193                 printf("%s %s %s %s %s\n", argv[0], argv[1], argv[2],
 194                                 argv[3], argv[4]);
 195                 ret = nand_func(NULL, 0, 5, argv);
 196         } else if (type == 3) {
 197                 char *argv[] = {nand_name, "lock", p1, p2};
 198                 printf("%s %s %s %s\n", argv[0], argv[1], argv[2], argv[3]);
 199                 ret = nand_func(NULL, 0, 4, argv);
 200         }
 201
 202         if (ret)
 203                 printf("Error: NAND Command\n");
 204
 205         return ret;
 206 }
 207
 208 #ifdef CONFIG_CMD_UBI
 209 int do_ubi(cmd_tbl_t *cmdtp, int flag, int argc, char *argv[]);
 210
 211 int ubi_cmd(int part, char *p1, char *p2, char *p3)
 212 {
 213         int ret = 1;
 214
 215         if (part == RAMDISK_PART_ID) {
 216                 char *argv[] = {"ubi", "write", p1, "rootfs.cramfs", p2, p3};
 217                 printf("%s %s %s %s %s %s\n", argv[0], argv[1], argv[2],
 218                                 argv[3], argv[4], argv[5]);
 219                 ret = do_ubi(NULL, 0, 6, argv);
 220         } else if (part == FILESYSTEM_PART_ID) {
 221                 char *argv[] = {"ubi", "write", p1, "factoryfs.cramfs", p2, p3};
 222                 printf("%s %s %s %s %s %s\n", argv[0], argv[1], argv[2],
 223                                 argv[3], argv[4], argv[5]);
 224                 ret = do_ubi(NULL, 0, 6, argv);
 225         } else if (part == FILESYSTEM2_PART_ID) {
 226                 char *argv[] = {"ubi", "write", p1, "datafs.ubifs", p2, p3};
 227                 printf("%s %s %s %s %s %s\n", argv[0], argv[1], argv[2],
 228                                 argv[3], argv[4], argv[5]);
 229                 ret = do_ubi(NULL, 0, 6, argv);
 230         }
 231
 232         return ret;
 233 }
 234 #endif
 235
 236 #ifdef CONFIG_CMD_MMC
 237 #include <mmc.h>
 238 #include <fat.h>
 239
 240 static struct mmc *mmc;
 241
 242 static int mmc_cmd(int ops, int dev_num, ulong start, lbaint_t cnt, void *addr)
 243 {
 244         int ret;
 245
 246         if (ops) {
 247                 printf("mmc write 0x%x 0x%x\n", start, cnt);
 248                 ret = mmc->block_dev.block_write(dev_num, start, cnt, addr);
 249         } else {
 250                 printf("mmc read 0x%x 0x%x\n", start, cnt);
 251                 ret = mmc->block_dev.block_read(dev_num, start, cnt, addr);
 252         }
 253
 254         if (ret > 0)
 255                 ret = 0;
 256         else
 257                 ret = 1;
 258
 259         return ret;
 260 }
 261
 262 #define NORMAL_PARTITION        0
 263 #define EXTEND_PARTITION        1
 264
 265 #define EXTEND_PART_TYPE        5
 266
 267 #define EXTEND_MAX_PART         32
 268
 269 static unsigned int cur_blk_offset;
 270 static unsigned int cur_part_size;
 271 static unsigned int cur_part;
 272
 273 static unsigned int mmc_parts;
 274 static unsigned int mmc_part_write;
 275
 276 static u8 part_mode = 0;
 277
 278 struct partition_info {
 279         u32 size;
 280         u32 checksum;
 281         u32 res;
 282 } __attribute__((packed));
 283
 284 struct partition_header {
 285         u8                      fat32head[16];  /* RFSHEAD identifier */
 286         struct partition_info   partition[EXTEND_MAX_PART];
 287         u8                      res[112];       /* only data (without MBR) */
 288 } __attribute__((packed));
 289
 290 struct mul_partition_info {
 291         u32 lba_begin;          /* absolute address from 0 block */
 292         u32 num_sectors;
 293 } __attribute__((packed));
 294
 295 #define MBR_OFFSET      0x10
 296
 297 struct partition_header part_info;
 298 struct mbr mbr_info;
 299 struct mul_partition_info mul_info[EXTEND_MAX_PART];
 300
 301 static int write_mmc_partition(struct usbd_ops *usbd, u32 *ram_addr, u32 len)
 302 {
 303         unsigned int blocks;
 304         int i;
 305         int loop;
 306         u32 cnt;
 307         int ret;
 308
 309         if (cur_part_size > len) {
 310                 blocks = len / usbd->mmc_blk;
 311                 ret = -1;
 312         } else {
 313                 blocks = cur_part_size / usbd->mmc_blk;
 314                 ret = len - cur_part_size;
 315         }
 316
 317         if (len % usbd->mmc_blk)
 318                 blocks++;
 319
 320         loop = blocks / usbd->mmc_max;
 321         if (blocks % usbd->mmc_max)
 322                 loop++;
 323
 324         for (i = 0; i < loop; i++) {
 325                 if (i == 0) {
 326                         cnt = blocks % usbd->mmc_max;
 327                         if (cnt == 0)
 328                                 cnt = usbd->mmc_max;
 329                 } else {
 330                         cnt = usbd->mmc_max;
 331                 }
 332
 333                 mmc_cmd(OPS_WRITE, usbd->mmc_dev, cur_blk_offset,
 334                                 cnt, (void *)*ram_addr);
 335
 336                 cur_blk_offset += cnt;
 337
 338                 *ram_addr += (cnt * usbd->mmc_blk);
 339         }
 340
 341         return ret;
 342 }
 343
 344 static int write_file_mmc(struct usbd_ops *usbd, u32 len)
 345 {
 346         u32 ram_addr;
 347         int i;
 348         int ret;
 349         struct mbr *mbr;
 350
 351         if (!usbd->mmc_total) {
 352                 printf("MMC is not supported!\n");
 353                 return 0;
 354         }
 355
 356         ram_addr = (u32)down_ram_addr;
 357
 358         if (cur_blk_offset == 0) {
 359                 boot_sector *bs;
 360                 u32 mbr_blk_size;
 361
 362                 memcpy(&part_info, (void *)ram_addr,
 363                                 sizeof(struct partition_header));
 364
 365                 ram_addr += sizeof(struct partition_header);
 366                 len -= sizeof(struct partition_header);
 367                 mbr = (struct mbr *)ram_addr;
 368                 mbr_blk_size = mbr->parts[0].lba;
 369
 370                 if (mbr->parts[0].partition_type != EXTEND_PART_TYPE) {
 371                         part_mode = NORMAL_PARTITION;
 372
 373                         /* modify sectors of p1 */
 374                         mbr->parts[0].nsectors = usbd->mmc_total -
 375                                         (mbr_blk_size +
 376                                         mbr->parts[1].nsectors +
 377                                         mbr->parts[2].nsectors +
 378                                         mbr->parts[3].nsectors);
 379
 380                         mmc_parts++;
 381
 382                         /* modify lba_begin of p2 and p3 and p4 */
 383                         for (i = 1; i < 4; i++) {
 384                                 if (part_info.partition[i].size == 0)
 385                                         break;
 386
 387                                 mmc_parts++;
 388                                 mbr->parts[i].lba =
 389                                         mbr->parts[i - 1].lba +
 390                                         mbr->parts[i - 1].nsectors;
 391                         }
 392
 393                         /* copy MBR */
 394                         memcpy(&mbr_info, mbr, sizeof(struct mbr));
 395
 396                         printf("Total Size: 0x%08x #parts %d\n",
 397                                         (unsigned int)usbd->mmc_total,
 398                                         mmc_parts);
 399                         for (i = 0; i < mmc_parts; i++) {
 400                                 printf("p%d\t0x%08x\t0x%08x\n", i + 1,
 401                                         mbr_info.parts[i].lba,
 402                                         mbr_info.parts[i].nsectors);
 403                         }
 404
 405                         /* write MBR */
 406                         mmc_cmd(OPS_WRITE, usbd->mmc_dev, 0,
 407                                         mbr_blk_size, (void *)ram_addr);
 408
 409                         ram_addr += mbr_blk_size * usbd->mmc_blk;
 410                         len -= mbr_blk_size * usbd->mmc_blk;
 411
 412                         cur_blk_offset = mbr_blk_size;
 413                         cur_part = 0;
 414                         cur_part_size = part_info.partition[0].size;
 415
 416                         /* modify p1's total sector */
 417                         bs = (boot_sector *)ram_addr;
 418                         bs->total_sect = mbr_info.parts[0].nsectors;
 419
 420                         printf("\nWrite Partition %d.. %d blocks\n",
 421                                 cur_part + 1,
 422                                 part_info.partition[cur_part].size /
 423                                 (int)usbd->mmc_blk);
 424                 } else {
 425                         part_mode = EXTEND_PARTITION;
 426
 427                         for (i = 0; i < EXTEND_MAX_PART; i++) {
 428                                 if (part_info.partition[i].size == 0)
 429                                         break;
 430                                 mmc_parts++;
 431                         }
 432
 433                         if (mmc_parts == 0)
 434                                 return -1;
 435                         else
 436                                 printf("found %d partitions\n", mmc_parts);
 437
 438                         /* build partition table */
 439
 440                         mul_info[0].num_sectors =
 441                                 usbd->mmc_total - mbr_blk_size;
 442                         for (i = 1; i < mmc_parts; i++) {
 443                                 mul_info[i].num_sectors =
 444                                         part_info.partition[i].res +
 445                                         mbr_blk_size; /* add MBR */
 446                         }
 447
 448                         for (i = 1; i < mmc_parts; i++) {
 449                                 mul_info[0].num_sectors -=
 450                                         mul_info[i].num_sectors;
 451                         }
 452
 453                         mul_info[0].lba_begin = mbr_blk_size;
 454                         for (i = 1; i < mmc_parts; i++) {
 455                                 mul_info[i].lba_begin =
 456                                         mul_info[i-1].lba_begin +
 457                                         mul_info[i-1].num_sectors;
 458                         }
 459
 460                         /* modify MBR of extended partition: p1 */
 461                         mbr->parts[0].nsectors =
 462                                 usbd->mmc_total - mbr_blk_size;
 463
 464                         /* modify MBR of first logical partition: p5 */
 465                         mbr = (struct mbr *)
 466                                 (ram_addr + mbr_blk_size * usbd->mmc_blk);
 467
 468                         mbr->parts[0].nsectors =
 469                                 mul_info[0].num_sectors - mbr_blk_size;
 470                         mbr->parts[1].lba=
 471                                 mul_info[1].lba_begin - mbr_blk_size;
 472
 473                         /* modify BPB data of p5 */
 474                         bs = (boot_sector *)
 475                                 ((u32)mbr + mbr_blk_size * usbd->mmc_blk);
 476                         memset(&bs->sectors, 0, 2);
 477                         bs->total_sect = mbr->parts[0].nsectors;
 478
 479                         printf("Total Size: 0x%08x #parts %d\n",
 480                                         (unsigned int)usbd->mmc_total,
 481                                         mmc_parts);
 482                         for (i = 0; i < mmc_parts; i++) {
 483                                 printf("p%d\t0x%08x\t0x%08x\n", i + 1,
 484                                         mul_info[i].lba_begin,
 485                                         mul_info[i].num_sectors);
 486                         }
 487
 488                         cur_blk_offset = 0;
 489                         cur_part = 0;
 490                         cur_part_size = part_info.partition[0].size;
 491
 492                         printf("\nWrite Partition %d.. %d blocks\n",
 493                                 cur_part + 1,
 494                                 part_info.partition[cur_part].size /
 495                                 (int)usbd->mmc_blk);
 496                 }
 497         }
 498
 499         for (i = cur_part; i < mmc_parts; i++) {
 500                 ret = write_mmc_partition(usbd, &ram_addr, len);
 501
 502                 if (ret < 0) {
 503                         cur_part_size -= len;
 504                         break;
 505                 } else {
 506                         cur_part++;
 507                         cur_part_size =
 508                                 part_info.partition[cur_part].size;
 509
 510                         if (part_mode == NORMAL_PARTITION) {
 511                                 cur_blk_offset =
 512                                         mbr_info.parts[cur_part].lba;
 513                         } else {
 514                                 cur_blk_offset =
 515                                         mul_info[cur_part].lba_begin;
 516                                 /* modify MBR */
 517                                 if (cur_part < mmc_parts) {
 518                                         mbr = (struct mbr *)ram_addr;
 519                                         mbr->parts[1].lba=
 520                                                 mul_info[cur_part+1].lba_begin -
 521                                                 mbr->parts[0].lba;
 522                                 }
 523                         }
 524
 525                         if (ret == 0)
 526                                 break;
 527                         else
 528                                 len = ret;
 529
 530                         printf("\nWrite Partition %d.. %d blocks\n",
 531                                 cur_part + 1,
 532                                 part_info.partition[cur_part].size /
 533                                 (int)usbd->mmc_blk);
 534                 }
 535         }
 536
 537         return 0;
 538 }
 539
 540 static int write_file_mmc_part(struct usbd_ops *usbd, u32 len)
 541 {
 542         u32 ram_addr;
 543         u32 ofs;
 544         int i;
 545         struct mbr *mbr;
 546         u32 mbr_blk_size;
 547
 548         ram_addr = (u32)down_ram_addr;
 549         mbr = &mbr_info;
 550
 551         if (cur_blk_offset == 0) {
 552                 /* read MBR */
 553                 mmc_cmd(OPS_READ, usbd->mmc_dev, 0,
 554                         sizeof(struct mbr)/usbd->mmc_blk, (void *)mbr);
 555
 556                 mbr_blk_size = mbr->parts[0].lba;
 557
 558                 if (mbr->parts[0].partition_type != EXTEND_PART_TYPE) {
 559                         part_mode = NORMAL_PARTITION;
 560
 561                         for (i = 0; i < 4; i++) {
 562                                 printf("p%d\t0x%08x\t0x%08x\n", i + 1,
 563                                         mbr_info.parts[i].lba,
 564                                         mbr_info.parts[i].nsectors);
 565                         }
 566
 567                         cur_blk_offset =
 568                                 mbr->parts[mmc_part_write - 1].lba;
 569                         cur_part = mmc_part_write - 1;
 570                         cur_part_size =
 571                                 usbd->mmc_blk *
 572                                 mbr->parts[mmc_part_write - 1].nsectors;
 573
 574                         if (mmc_part_write == 1) {
 575                                 ram_addr += sizeof(struct mbr);
 576                                 cur_blk_offset += sizeof(struct mbr) /
 577                                         usbd->mmc_blk;
 578                                 len -= sizeof(struct mbr);
 579                         }
 580                 } else {
 581                         part_mode = EXTEND_PARTITION;
 582
 583                         for (i = 1; i < mmc_part_write; i++) {
 584                                 ofs = mbr->parts[0].lba + mbr->parts[1].lba;
 585                                 printf("P%d start blk: 0x%x, size: 0x%x\n", i,
 586                                         ofs, mbr->parts[1].nsectors);
 587                                 mmc_cmd(OPS_READ, usbd->mmc_dev, ofs,
 588                                         (sizeof(struct mbr) / usbd->mmc_blk),
 589                                         (void *)mbr);
 590                         }
 591
 592                         ofs = mbr->parts[0].lba + mbr->parts[1].lba;
 593                         printf("P%d start blk: 0x%x, size: 0x%x\n", i,
 594                                 ofs, mbr->parts[1].nsectors);
 595
 596                         ofs += mbr_blk_size; /* skip MBR */
 597                         cur_blk_offset = ofs;
 598                         cur_part = mmc_part_write - 1;
 599                         cur_part_size =
 600                                 usbd->mmc_blk *
 601                                 mbr->parts[1].nsectors;
 602
 603                         if (mmc_part_write == 1) {
 604                                 boot_sector *bs;
 605                                 u32 total_sect;
 606                                 /* modify BPB data of p1 */
 607                                 mmc_cmd(OPS_READ, usbd->mmc_dev, cur_blk_offset,
 608                                         (sizeof(struct mbr) / usbd->mmc_blk),
 609                                         mbr);
 610
 611                                 bs = (boot_sector *)mbr;
 612                                 total_sect = bs->total_sect;
 613
 614                                 bs = (boot_sector *)ram_addr;
 615                                 memset(&bs->sectors, 0, 2);
 616                                 bs->total_sect = total_sect;
 617                         }
 618                 }
 619         }
 620
 621         printf("\nWrite Partition %d.. %d blocks\n",
 622                 cur_part + 1,
 623                 len / (int)usbd->mmc_blk);
 624
 625         write_mmc_partition(usbd, &ram_addr, len);
 626
 627         return 0;
 628 }
 629 #endif
 630
 631 static unsigned int mbr_offset[16];
 632 static int mbr_parts = 0;
 633
 634 static unsigned long memsize_parse (const char *const ptr, const char **retptr)
 635 {
 636         unsigned long ret = simple_strtoul(ptr, (char **)retptr, 0);
 637
 638         switch (**retptr) {
 639                 case 'G':
 640                 case 'g':
 641                         ret <<= 10;
 642                 case 'M':
 643                 case 'm':
 644                         ret <<= 10;
 645                 case 'K':
 646                 case 'k':
 647                         ret <<= 10;
 648                         (*retptr)++;
 649                 default:
 650                         break;
 651         }
 652
 653         return ret;
 654 }
 655
 656 static void set_mbr_info(struct usbd_ops *usbd, char *ramaddr, u32 len)
 657 {
 658         char mbr_str[256];
 659         char save[16][16];
 660         char *p;
 661         char *tok;
 662         unsigned int size[16];
 663         int i = 0;
 664
 665         strncpy(mbr_str, ramaddr, len);
 666         p = mbr_str;
 667
 668         for (i = 0; ; i++, p = NULL) {
 669                 tok = strtok(p, ",");
 670                 if (tok == NULL)
 671                         break;
 672                 strcpy(save[i], tok);
 673                 printf("part%d: %s\n", i, save[i]);
 674         }
 675
 676         mbr_parts = i;
 677         printf("find %d partitions\n", mbr_parts);
 678
 679         for (i = 0; i < mbr_parts; i++) {
 680                 p = save[i];
 681                 size[i] = memsize_parse(p, (const char **)&p) / 512;
 682         }
 683
 684         puts("save the MBR Table...\n");
 685         set_mbr_table(0x800, mbr_parts, size, mbr_offset);
 686 }
 687
 688 static int write_mmc_image(struct usbd_ops *usbd, unsigned int len, int part_num)
 689 {
 690         int ret = 0;
 691
 692         if (mbr_parts <= part_num) {
 693                 printf("Error: MBR table have %d partitions (request %d)\n",
 694                                 mbr_parts, part_num);
 695                 return 1;
 696         }
 697
 698 #if 0
 699         /* modify size of UMS partition */
 700         if (part_num == 4 && fs_offset == 0) {
 701                 boot_sector *bs;
 702                 bs = (boot_sector *)down_ram_addr;
 703                 memset(&bs->sectors, 0, 2);
 704                 bs->total_sect = usbd->mmc_total - mbr_offset[part_num];
 705         }
 706 #endif
 707         ret = mmc_cmd(OPS_WRITE, usbd->mmc_dev,
 708                         mbr_offset[part_num] + fs_offset,
 709                         len / usbd->mmc_blk,
 710                         (void *)down_ram_addr);
 711
 712         fs_offset += (len / usbd->mmc_blk);
 713
 714         return ret;
 715 }
 716
 717 static int write_fat_file(struct usbd_ops *usbd, char *file_name,
 718                         int part_id, int len)
 719 {
 720 #ifdef CONFIG_FAT_WRITE
 721         int ret;
 722
 723         ret = fat_register_device(&mmc->block_dev, part_id);
 724         if (ret < 0) {
 725                 printf("error : fat_register_divce\n");
 726                 return 0;
 727         }
 728
 729         ret = file_fat_write(file_name, (void *)down_ram_addr, len);
 730
 731         /* format and write again */
 732         if (ret == 1) {
 733                 printf("formatting\n");
 734                 if (mkfs_vfat(&mmc->block_dev, part_id)) {
 735                         printf("error : format device\n");
 736                         return 0;
 737                 }
 738                 ret = file_fat_write(file_name, (void *)down_ram_addr, len);
 739         }
 740
 741         if (ret < 0) {
 742                 printf("error : writing uImage\n");
 743                 return 0;
 744         }
 745 #else
 746         printf("error: doesn't support fat_write\n");
 747 #endif
 748         return 0;
 749 }
 750
 751
 752 static int ubi_update = 0;
 753
 754 static int write_file_system(char *ramaddr, ulong len, char *offset,
 755                 char *length, int part_num)
 756 {
 757         int ret = 0;
 758
 759 #ifdef CONFIG_CMD_MTDPARTS
 760 #ifdef CONFIG_CMD_UBI
 761         /* UBI Update */
 762         if (ubi_update) {
 763                 sprintf(length, "0x%x", (uint)len);
 764                 ret = ubi_cmd(part_id, ramaddr, length, "cont");
 765                 return ret;
 766         }
 767 #endif
 768
 769         /* Erase entire partition at the first writing */
 770         if (write_part == 0 && ubi_update == 0) {
 771                 sprintf(offset, "0x%x", (uint)parts[part_num]->offset);
 772                 sprintf(length, "0x%x", (uint)parts[part_num]->size);
 773                 nand_cmd(0, offset, length, NULL);
 774         }
 775
 776         sprintf(offset, "0x%x", (uint)(parts[part_num]->offset + fs_offset));
 777         sprintf(length, "0x%x", (uint)len);
 778
 779         fs_offset += len;
 780         ret = nand_cmd(1, ramaddr, offset, length);
 781 #endif
 782
 783         return ret;
 784 }
 785
 786 static int qboot_erase = 0;
 787
 788 /* Erase the qboot */
 789 static void erase_qboot_area(void)
 790 {
 791 #ifdef CONFIG_CMD_MTDPARTS
 792         char offset[12], length[12];
 793         int qboot_id;
 794
 795         if (qboot_erase)
 796                 return;
 797
 798         qboot_id = get_part_id("qboot");
 799
 800         if (qboot_id != -1) {
 801                 printf("\nCOMMAND_ERASE_QBOOT\n");
 802                 sprintf(offset, "%x", parts[qboot_id]->offset);
 803                 sprintf(length, "%x", parts[qboot_id]->size);
 804                 nand_cmd(0, offset, length, NULL);
 805                 qboot_erase = 1;
 806         }
 807 #endif
 808 }
 809
 810 /* Erase the environment */
 811 static void erase_env_area(struct usbd_ops *usbd)
 812 {
 813 #if defined(CONFIG_ENV_IS_IN_NAND) || defined(CONFIG_ENV_IS_IN_ONENAND)
 814         int param_id;
 815         char offset[12], length[12];
 816
 817         param_id = get_part_id("params");
 818
 819         if (param_id == -1) {
 820                 sprintf(offset, "%x", CONFIG_ENV_ADDR);
 821                 sprintf(length, "%x", CONFIG_ENV_SIZE);
 822         } else {
 823                 sprintf(offset, "%x", parts[param_id]->offset);
 824                 sprintf(length, "%x", parts[param_id]->size);
 825         }
 826         nand_cmd(0, offset, length, NULL);
 827 #elif defined(CONFIG_ENV_IS_IN_MMC)
 828         char buf[usbd->mmc_blk];
 829
 830         memset(buf, 0x0, usbd->mmc_blk);
 831         mmc_cmd(OPS_WRITE, CONFIG_SYS_MMC_ENV_DEV,
 832                         CONFIG_ENV_OFFSET / usbd->mmc_blk,
 833                         1, (void *)buf);
 834 #endif
 835 }
 836
 837 static inline void send_ack(struct usbd_ops *usbd, int data)
 838 {
 839         *((ulong *) usbd->tx_data) = data;
 840         usbd->send_data(usbd->tx_data, usbd->tx_len);
 841 }
 842
 843 static inline int check_mmc_device(struct usbd_ops *usbd)
 844 {
 845         if (usbd->mmc_total)
 846                 return 0;
 847
 848         printf("\nError: Couldn't find the MMC device\n");
 849         return 1;
 850 }
 851
 852 static int write_mtd_image(struct usbd_ops *usbd, int img_type,
 853                 unsigned int len, unsigned int arg)
 854 {
 855         int ret = -1;
 856 #ifdef CONFIG_CMD_MTDPARTS
 857         unsigned int ofs = 0;
 858         char offset[12], length[12], ramaddr[12];
 859
 860         sprintf(ramaddr, "0x%x", (uint) down_ram_addr);
 861
 862         /* Erase and Write to NAND */
 863         switch (img_type) {
 864         case IMG_BOOT:
 865                 ofs = parts[part_id]->offset;
 866 #ifdef CONFIG_S5PC1XX
 867                 /* Workaround: for prevent revision mismatch */
 868                 if (cpu_is_s5pc110() && (down_mode != MODE_FORCE)) {
 869                         int img_rev = 1;
 870                         long *img_header = (long *)down_ram_addr;
 871
 872                         if (*img_header == 0xea000012)
 873                                 img_rev = 0;
 874                         else if (*(img_header + 0x400) == 0xea000012)
 875                                 img_rev = 2;
 876
 877                         if (img_rev != s5p_get_cpu_rev()) {
 878                                 printf("CPU revision mismatch!\n"
 879                                         "bootloader is %s%s\n"
 880                                         "download image is %s%s\n",
 881                                         s5p_get_cpu_rev() ? "EVT1" : "EVT0",
 882                                         s5p_get_cpu_rev() == 2 ? "-Fused" : "",
 883                                         img_rev ? "EVT1" : "EVT0",
 884                                         img_rev == 2 ? "-Fused" : "");
 885                                 return -1;
 886                         }
 887                 }
 888 #endif
 889
 890                 erase_env_area(usbd);
 891
 892                 sprintf(offset, "%x", (uint)ofs);
 893                 if (ofs != 0)
 894                         sprintf(length, "%x", parts[part_id]->size - (uint)ofs);
 895                 else
 896                         sprintf(length, "%x", parts[part_id]->size);
 897
 898                 /* Erase */
 899                 nand_cmd(0, offset, length, NULL);
 900                 /* Write */
 901                 sprintf(length, "%x", (unsigned int) len);
 902                 ret = nand_cmd(1, ramaddr, offset, length);
 903                 break;
 904
 905         case IMG_KERNEL:
 906                 sprintf(offset, "%x", parts[part_id]->offset);
 907                 sprintf(length, "%x", parts[part_id]->size);
 908
 909                 /* Erase */
 910                 nand_cmd(0, offset, length, NULL);
 911                 /* Write */
 912                 sprintf(length, "%x", (unsigned int) len);
 913                 ret = nand_cmd(1, ramaddr, offset, length);
 914
 915                 erase_qboot_area();
 916                 break;
 917
 918         /* File Systems */
 919         case IMG_FILESYSTEM:
 920                 ret = write_file_system(ramaddr, len, offset, length, part_id);
 921
 922                 erase_qboot_area();
 923                 break;
 924
 925         case IMG_MODEM:
 926                 sprintf(offset, "%x", parts[part_id]->offset);
 927                 sprintf(length, "%x", parts[part_id]->size);
 928
 929                 /* Erase */
 930                 if (!arg)
 931                         nand_cmd(0, offset, length, NULL);
 932                 else
 933                         printf("CSA Clear will be skipped temporary\n");
 934
 935                 /* Check ubi image, 0x23494255 is UBI# */
 936                 {
 937                         long *img_header = (long *)down_ram_addr;
 938
 939                         if (*img_header == 0x23494255)
 940                                 goto ubi_img;
 941                 }
 942
 943 #ifdef CONFIG_UBIFS_MK
 944                 void *dest_addr = (void *) down_ram_addr + 0xc00000;
 945                 void *src_addr = (void *) down_ram_addr;
 946                 int leb_size, max_leb_cnt, mkfs_min_io_size;
 947                 unsigned long ubifs_dest_size, ubi_dest_size;
 948 #ifdef CONFIG_S5PC110
 949                 mkfs_min_io_size = 4096;
 950                 leb_size = 248 * 1024;
 951                 max_leb_cnt = 4096;
 952 #elif CONFIG_S5PC210
 953                 mkfs_min_io_size = 2048;
 954                 leb_size = 126 * 1024;
 955                 max_leb_cnt = 4096;
 956 #endif
 957                 printf("Start making ubifs\n");
 958                 ret = mkfs(src_addr, len, dest_addr, &ubifs_dest_size,
 959                            mkfs_min_io_size, leb_size, max_leb_cnt);
 960                 if (ret) {
 961                         printf("Error : making ubifs failed\n");
 962                         goto out;
 963                 }
 964                 printf("Complete making ubifs\n");
 965 #endif
 966
 967 #ifdef CONFIG_UBINIZE
 968                 int peb_size, ubi_min_io_size, subpage_size, vid_hdr_offs;
 969 #ifdef CONFIG_S5PC110
 970                 ubi_min_io_size = 4096;
 971                 peb_size = 256 * 1024;
 972                 subpage_size = 4096;
 973                 vid_hdr_offs = 0;
 974 #elif CONFIG_S5PC210
 975                 ubi_min_io_size = 2048;
 976                 peb_size = 128 * 1024;
 977                 subpage_size = 512;
 978                 vid_hdr_offs = 512;
 979 #endif
 980                 printf("Start ubinizing\n");
 981                 ret = ubinize(dest_addr, ubifs_dest_size,
 982                               src_addr, &ubi_dest_size,
 983                               peb_size, ubi_min_io_size,
 984                               subpage_size, vid_hdr_offs);
 985                 if (ret) {
 986                         printf("Error : ubinizing failed\n");
 987                         goto out;
 988                 }
 989                 printf("Complete ubinizing\n");
 990
 991                 len = (unsigned int) ubi_dest_size;
 992 #endif
 993
 994 ubi_img:
 995                 /* Write : arg (0 Modem) / (1 CSA) */
 996                 if (!arg) {
 997                         sprintf(length, "%x", (unsigned int) len);
 998                         ret = nand_cmd(1, ramaddr, offset, length);
 999                 }
1000 out:
1001                 break;
1002
1003 #ifdef CONFIG_CMD_MMC
1004         case IMG_MMC:
1005                 if (check_mmc_device(usbd))
1006                         return -1;
1007
1008                 if (mmc_part_write)
1009                         ret = write_file_mmc_part(usbd, len);
1010                 else
1011                         ret = write_file_mmc(usbd, len);
1012
1013                 erase_qboot_area();
1014                 break;
1015 #endif
1016         default:
1017                 /* Retry? */
1018                 write_part--;
1019         }
1020 #endif
1021         return ret;
1022 }
1023
1024 static int write_v2_image(struct usbd_ops *usbd, int img_type,
1025                 unsigned int len, unsigned int arg)
1026 {
1027         int ret;
1028
1029         if (check_mmc_device(usbd))
1030                 return -1;
1031
1032         switch (img_type) {
1033         case IMG_V2:
1034                 ret = write_mmc_image(usbd, len, part_id);
1035                 break;
1036
1037         case IMG_MBR:
1038 #ifdef CONFIG_CMD_MBR
1039                 set_mbr_info(usbd, (char *)down_ram_addr, len);
1040 #endif
1041                 break;
1042
1043         case IMG_BOOTLOADER:
1044 #ifdef CONFIG_BOOTLOADER_SECTOR
1045                 erase_env_area(usbd);
1046
1047                 ret = mmc_cmd(OPS_WRITE, usbd->mmc_dev,
1048                                 CONFIG_BOOTLOADER_SECTOR,
1049                                 len / usbd->mmc_blk + 1,
1050                                 (void *)down_ram_addr);
1051 #endif
1052                 break;
1053
1054         case IMG_KERNEL_V2:
1055                 ret = write_fat_file(usbd, "uImage", part_id, len);
1056                 break;
1057
1058         case IMG_MODEM_V2:
1059                 ret = write_fat_file(usbd, "modem.bin", part_id, len);
1060                 break;
1061
1062         default:
1063                 /* Retry? */
1064                 write_part--;
1065         }
1066
1067         return ret;
1068 }
1069
1070 /* Parsing received data packet and Process data */
1071 static int process_data(struct usbd_ops *usbd)
1072 {
1073         unsigned int cmd = 0, arg = 0, len = 0, flag = 0;
1074         char ramaddr[12];
1075         int recvlen = 0;
1076         unsigned int blocks = 0;
1077         int ret = 0;
1078         int ubi_mode = 0;
1079         int img_type = -1;
1080
1081         sprintf(ramaddr, "0x%x", (uint) down_ram_addr);
1082
1083         /* Parse command */
1084         cmd  = *((ulong *) usbd->rx_data + 0);
1085         arg  = *((ulong *) usbd->rx_data + 1);
1086         len  = *((ulong *) usbd->rx_data + 2);
1087         flag = *((ulong *) usbd->rx_data + 3);
1088
1089         /* Reset tx buffer */
1090         memset(usbd->tx_data, 0, sizeof(usbd->tx_data));
1091
1092         ubi_mode = check_ubi_mode();
1093
1094         switch (cmd) {
1095         case COMMAND_DOWNLOAD_IMAGE:
1096                 printf("\nCOMMAND_DOWNLOAD_IMAGE\n");
1097
1098                 if (arg)
1099                         down_ram_addr = usbd->ram_addr + 0x1000000;
1100                 else
1101                         down_ram_addr = usbd->ram_addr;
1102
1103                 usbd->recv_setup((char *)down_ram_addr, (int)len);
1104                 printf("Download to 0x%08x, %d bytes\n",
1105                                 (uint)down_ram_addr, (int)len);
1106
1107                 /* response */
1108                 send_ack(usbd, STATUS_DONE);
1109
1110                 /* Receive image by using dma */
1111                 recvlen = usbd->recv_data();
1112                 if (recvlen < 0) {
1113                         send_ack(usbd, STATUS_ERROR);
1114                         return -1;
1115                 } else if (recvlen < len) {
1116                         printf("Error: wrong image size -> %d/%d\n",
1117                                         (int)recvlen, (int)len);
1118
1119                         /* Retry this commad */
1120                         send_ack(usbd, STATUS_RETRY);
1121                 } else
1122                         send_ack(usbd, STATUS_DONE);
1123
1124                 return 1;
1125
1126         case COMMAND_DOWNLOAD_SPMODE:
1127                 printf("\nCOMMAND_DOWNLOAD_SPMODE\n");
1128
1129                 down_ram_addr = usbd->ram_addr + 0x2008000;
1130
1131                 usbd->recv_setup((char *)down_ram_addr, (int)len);
1132                 printf("Download to 0x%08x, %d bytes\n",
1133                                 (uint)down_ram_addr, (int)len);
1134
1135                 /* response */
1136                 send_ack(usbd, STATUS_DONE);
1137
1138                 /* Receive image by using dma */
1139                 recvlen = usbd->recv_data();
1140                 send_ack(usbd, STATUS_DONE);
1141
1142                 return 0;
1143
1144         /* Report partition info */
1145         case COMMAND_PARTITION_SYNC:
1146                 part_id = arg;
1147
1148 #ifdef CONFIG_CMD_UBI
1149                 if (ubi_mode) {
1150                         if (part_id == RAMDISK_PART_ID ||
1151                             part_id == FILESYSTEM_PART_ID ||
1152                             part_id == FILESYSTEM2_PART_ID) {
1153                                 /* change to yaffs style */
1154                                 get_part_info();
1155                         }
1156                 } else {
1157                         if (part_id == FILESYSTEM3_PART_ID) {
1158                                 /* change ubi style */
1159                                 get_part_info();
1160                         }
1161                 }
1162 #endif
1163
1164                 if (part_id == FILESYSTEM3_PART_ID)
1165                         part_id = get_part_id("UBI");
1166                 else if (part_id == MODEM_PART_ID)
1167                         part_id = get_part_id("modem");
1168                 else if (part_id == KERNEL_PART_ID)
1169                         part_id = get_part_id("kernel");
1170                 else if (part_id == BOOT_PART_ID)
1171                         part_id = get_part_id("bootloader");
1172 #ifdef CONFIG_MIRAGE
1173                 if (part_id)
1174                         part_id--;
1175 #endif
1176                 printf("COMMAND_PARTITION_SYNC - Part%d\n", part_id);
1177
1178 #ifdef CONFIG_CMD_MTDPARTS
1179                 blocks = parts[part_id]->size / 1024 / 128;
1180 #endif
1181                 printf("COMMAND_PARTITION_SYNC - Part%d, %d blocks\n",
1182                                 part_id, blocks);
1183
1184                 send_ack(usbd, blocks);
1185                 return 1;
1186
1187         case COMMAND_WRITE_PART_0:
1188                 /* Do nothing */
1189                 printf("COMMAND_WRITE_PART_0\n");
1190                 return 1;
1191
1192         case COMMAND_WRITE_PART_1:
1193                 printf("COMMAND_WRITE_PART_BOOT\n");
1194                 part_id = get_part_id("bootloader");
1195                 img_type = IMG_BOOT;
1196                 break;
1197
1198         case COMMAND_WRITE_PART_2:
1199         case COMMAND_ERASE_PARAMETER:
1200                 printf("COMMAND_PARAMETER - not support!\n");
1201                 break;
1202
1203         case COMMAND_WRITE_PART_3:
1204                 printf("COMMAND_WRITE_KERNEL\n");
1205                 part_id = get_part_id("kernel");
1206                 img_type = IMG_KERNEL;
1207                 break;
1208
1209         case COMMAND_WRITE_PART_4:
1210                 printf("COMMAND_WRITE_ROOTFS\n");
1211                 part_id = get_part_id("Root");
1212                 img_type = IMG_FILESYSTEM;
1213                 ubi_update = arg;
1214                 break;
1215
1216         case COMMAND_WRITE_PART_5:
1217                 printf("COMMAND_WRITE_FACTORYFS\n");
1218                 part_id = get_part_id("Fact");
1219                 img_type = IMG_FILESYSTEM;
1220                 ubi_update = arg;
1221                 break;
1222
1223         case COMMAND_WRITE_PART_6:
1224                 printf("COMMAND_WRITE_DATAFS\n");
1225                 part_id = get_part_id("Data");
1226                 img_type = IMG_FILESYSTEM;
1227                 ubi_update = arg;
1228                 break;
1229
1230         case COMMAND_WRITE_PART_7:
1231                 printf("COMMAND_WRITE_UBI\n");
1232                 part_id = get_part_id("UBI");
1233                 img_type = IMG_FILESYSTEM;
1234                 ubi_update = 0;
1235                 /* someday, it will be deleted */
1236                 get_part_info();
1237                 break;
1238
1239         case COMMAND_WRITE_PART_8:
1240                 printf("COMMAND_WRITE_MODEM\n");
1241                 part_id = get_part_id("modem");
1242                 img_type = IMG_MODEM;
1243                 break;
1244
1245 #ifdef CONFIG_CMD_MMC
1246         case COMMAND_WRITE_PART_9:
1247                 printf("COMMAND_WRITE_MMC\n");
1248                 img_type = IMG_MMC;
1249                 mmc_part_write = arg;
1250                 break;
1251 #endif
1252
1253         case COMMAND_WRITE_IMG_0:
1254                 printf("COMMAND_WRITE_MBR\n");
1255                 img_type = IMG_MBR;
1256                 break;
1257
1258         case COMMAND_WRITE_IMG_1:
1259                 printf("COMMAND_WRITE_BOOTLOADER\n");
1260                 img_type = IMG_BOOTLOADER;
1261                 break;
1262
1263         case COMMAND_WRITE_IMG_2:
1264                 printf("COMMAND_WRITE_KERNEL\n");
1265                 img_type = IMG_KERNEL_V2;
1266                 part_id = 2;
1267                 break;
1268
1269         case COMMAND_WRITE_IMG_3:
1270                 printf("COMMAND_WRITE_MODEM\n");
1271                 img_type = IMG_MODEM_V2;
1272                 part_id = 2;
1273                 break;
1274
1275         case COMMAND_WRITE_IMG_4:
1276                 printf("COMMAND_WRITE_BOOT_PART\n");
1277                 part_id = 1;
1278                 img_type = IMG_V2;
1279                 break;
1280
1281         case COMMAND_WRITE_IMG_5:
1282                 printf("COMMAND_WRITE_SYSTEM_PART\n");
1283                 part_id = 2;
1284                 img_type = IMG_V2;
1285                 break;
1286
1287         case COMMAND_WRITE_IMG_6:
1288                 printf("COMMAND_WRITE_UMS_PART\n");
1289                 part_id = 4;
1290                 img_type = IMG_V2;
1291                 break;
1292
1293         case COMMAND_WRITE_UBI_INFO:
1294                 printf("COMMAND_WRITE_UBI_INFO\n");
1295
1296                 if (ubi_mode) {
1297 #ifdef CONFIG_CMD_UBI
1298                         part_id = arg-1;
1299                         sprintf(length, "0x%x", (uint)len);
1300                         ret = ubi_cmd(part_id, ramaddr, length, "begin");
1301                 } else {
1302 #endif
1303                         printf("Error: Not UBI mode\n");
1304                         ret = 1;
1305                 }
1306
1307                 /* Write image success -> Report status */
1308                 send_ack(usbd, ret);
1309
1310                 return !ret;
1311         /* Download complete -> reset */
1312         case COMMAND_RESET_PDA:
1313                 printf("\nDownload finished and Auto reset!\nWait........\n");
1314
1315                 /* Stop USB */
1316                 usbd->usb_stop();
1317
1318                 if (usbd->cpu_reset)
1319                         usbd->cpu_reset();
1320                 else
1321                         run_command("reset", 0);
1322
1323                 return 0;
1324
1325         /* Error */
1326         case COMMAND_RESET_USB:
1327                 printf("\nError is occured!(maybe previous step)->\
1328                                 Turn off and restart!\n");
1329
1330                 /* Stop USB */
1331                 usbd->usb_stop();
1332                 return -1;
1333
1334         case COMMAND_RAM_BOOT:
1335                 usbd->usb_stop();
1336                 boot_cmd(ramaddr);
1337                 return 0;
1338
1339         case COMMAND_RAMDISK_MODE:
1340                 printf("COMMAND_RAMDISK_MODE\n");
1341 #ifdef CONFIG_RAMDISK_ADDR
1342                 if (arg) {
1343                         down_ram_addr = usbd->ram_addr;
1344                 } else {
1345                         down_ram_addr = CONFIG_RAMDISK_ADDR;
1346                         run_command("run ramboot", 0);
1347                 }
1348 #endif
1349                 return 1;
1350
1351 #ifdef CONFIG_DOWN_PHONE
1352         case COMMAND_DOWN_PHONE:
1353                 printf("COMMAND_RESET_PHONE\n");
1354
1355                 usbd_phone_down();
1356
1357                 send_ack(usbd, STATUS_DONE);
1358                 return 1;
1359
1360         case COMMAND_CHANGE_USB:
1361                 printf("COMMAND_CHANGE_USB\n");
1362
1363                 /* Stop USB */
1364                 usbd->usb_stop();
1365
1366                 usbd_path_change();
1367
1368                 run_command("reset", 0);
1369                 return 0;
1370 #endif
1371         case COMMAND_CSA_CLEAR:
1372                 printf("COMMAND_CSA_CLEAR\n");
1373                 part_id = get_part_id("csa");
1374                 img_type = IMG_MODEM;
1375                 break;
1376
1377         case COMMAND_PROGRESS:
1378                 if (usbd->set_progress)
1379                         usbd->set_progress(arg);
1380                 return 1;
1381
1382         default:
1383                 printf("Error: Unknown command -> (%d)\n", (int)cmd);
1384                 return 1;
1385         }
1386
1387         if (img_type < IMG_V2)
1388                 ret = write_mtd_image(usbd, img_type, len, arg);
1389         else
1390                 ret = write_v2_image(usbd, img_type, len, arg);
1391
1392         if (ret < 0) {
1393                 send_ack(usbd, STATUS_ERROR);
1394                 return -1;
1395         } else if (ret) {
1396                 /* Retry this commad */
1397                 send_ack(usbd, STATUS_RETRY);
1398                 return 1;
1399         } else
1400                 send_ack(usbd, STATUS_DONE);
1401
1402         write_part++;
1403
1404         /* Reset write count for another image */
1405         if (flag) {
1406                 write_part = 0;
1407                 fs_offset = 0;
1408         }
1409
1410         return 1;
1411 }
1412
1413 static const char *recv_key = "SAMSUNG";
1414 static const char *tx_key = "MPL";
1415
1416 int do_usbd_down(cmd_tbl_t *cmdtp, int flag, int argc, char * const argv[])
1417 {
1418         struct usbd_ops *usbd;
1419         int err;
1420         int ret;
1421
1422         if (argc > 1)
1423                 down_mode = simple_strtoul(argv[1], NULL, 10);
1424         else
1425                 down_mode = MODE_NORMAL;
1426
1427         printf("USB Downloader v%s\n", APP_VERSION);
1428
1429         /* get partition info */
1430         err = get_part_info();
1431         if (err)
1432                 return err;
1433
1434         /* interface setting */
1435         usbd = usbd_set_interface(&usbd_ops);
1436         down_ram_addr = usbd->ram_addr;
1437
1438 #ifdef CONFIG_CMD_MBR
1439         /* get mbr info */
1440         mbr_parts = get_mbr_table(mbr_offset);
1441         if (!mbr_parts) {
1442                 char *mbrparts;
1443
1444                 puts("using default MBR\n");
1445
1446                 mbrparts = getenv("mbrparts");
1447                 set_mbr_info(usbd, mbrparts, strlen(mbrparts));
1448         }
1449 #endif
1450
1451         /* init the usb controller */
1452         if (!usbd->usb_init()) {
1453                 usbd->down_cancel(END_BOOT);
1454                 return 0;
1455         }
1456         mmc = find_mmc_device(usbd->mmc_dev);
1457         mmc_init(mmc);
1458
1459         /* receive setting */
1460         usbd->recv_setup(usbd->rx_data, usbd->rx_len);
1461
1462         /* detect the download request from Host PC */
1463         ret = usbd->recv_data();
1464         if (ret > 0) {
1465                 if (strncmp(usbd->rx_data, recv_key, strlen(recv_key)) == 0) {
1466                         printf("Download request from the Host PC\n");
1467                         msleep(30);
1468
1469                         strcpy(usbd->tx_data, tx_key);
1470                         usbd->send_data(usbd->tx_data, usbd->tx_len);
1471                 } else {
1472                         printf("No download request from the Host PC!! 1\n");
1473                         return 0;
1474                 }
1475         } else if (ret < 0) {
1476                 usbd->down_cancel(END_RETRY);
1477                 return 0;
1478         } else {
1479                 usbd->down_cancel(END_BOOT);
1480                 return 0;
1481         }
1482
1483         usbd->down_start();
1484         printf("Receive the packet\n");
1485
1486         /* receive the data from Host PC */
1487         while (1) {
1488                 usbd->recv_setup(usbd->rx_data, usbd->rx_len);
1489
1490                 ret = usbd->recv_data();
1491                 if (ret > 0) {
1492                         ret = process_data(usbd);
1493                         if (ret < 0) {
1494                                 usbd->down_cancel(END_RETRY);
1495                                 return 0;
1496                         } else if (ret == 0) {
1497                                 usbd->down_cancel(END_NORMAL);
1498                                 return 0;
1499                         }
1500                 } else if (ret < 0) {
1501                         usbd->down_cancel(END_RETRY);
1502                         return 0;
1503                 } else {
1504                         usbd->down_cancel(END_BOOT);
1505                         return 0;
1506                 }
1507         }
1508
1509         return 0;
1510 }
1511
1512 U_BOOT_CMD(usbdown, CONFIG_SYS_MAXARGS, 1, do_usbd_down,
1513         "Initialize USB device and Run USB Downloader (specific)",
1514         "- normal mode\n"
1515         "usbdown mode - specific mode (0: NORAML, 1: FORCE)"
1516 );