common/cmd_usbd.c

   1 /*
   2  * USB Downloader for SAMSUNG Platform
   3  *
   4  * Copyright (C) 2007-2008 Samsung Electronics
   5  * Minkyu Kang <mk7.kang@samsung.com>
   6  *
   7  */
   8
   9 #include <common.h>
  10 #include <usbd.h>
  11 #include <asm/errno.h>
  12 #include <malloc.h>
  13
  14 /* version of USB Downloader Application */
  15 #define APP_VERSION     "1.6.0"
  16
  17 #define OPS_READ        0
  18 #define OPS_WRITE       1
  19
  20 #ifdef CONFIG_CMD_MTDPARTS
  21 #include <jffs2/load_kernel.h>
  22 static struct part_info *parts[16];
  23 #endif
  24
  25 #ifdef CONFIG_UBIFS_MK
  26 #include <mkfs.ubifs.h>
  27 #endif
  28
  29 #ifdef CONFIG_UBINIZE
  30 #include <ubinize.h>
  31 #endif
  32
  33 #include <mbr.h>
  34
  35 static const char pszMe[] = "usbd: ";
  36
  37 static struct usbd_ops usbd_ops;
  38
  39 static unsigned int part_id;
  40 static unsigned int write_part = 0;
  41 static unsigned int fs_offset = 0x0;
  42
  43 #define NAND_PAGE_SIZE 2048
  44
  45 static unsigned long down_ram_addr;
  46
  47 static int down_mode;
  48
  49 /* common commands */
  50 extern int do_run(cmd_tbl_t * cmdtp, int flag, int argc, char *argv[]);
  51
  52 #ifdef CONFIG_CMD_UBI
  53 static int check_ubi_mode(void)
  54 {
  55         char *env_ubifs;
  56         int ubi_mode;
  57
  58         env_ubifs = getenv("ubi");
  59         ubi_mode = !strcmp(env_ubifs, "enabled");
  60
  61         return ubi_mode;
  62 }
  63 #else
  64 #define check_ubi_mode()                0
  65 #endif
  66
  67 #ifdef CONFIG_CMD_MTDPARTS
  68 int mtdparts_init(void);
  69 int find_dev_and_part(const char*, struct mtd_device**, u8*, struct part_info**);
  70
  71 /* common/cmd_jffs2.c */
  72 extern struct list_head devices;
  73
  74 static u8 count_mtdparts(void)
  75 {
  76         struct list_head *dentry, *pentry;
  77         struct mtd_device *dev;
  78         u8 part_num = 0;
  79
  80         list_for_each(dentry, &devices) {
  81                 dev = list_entry(dentry, struct mtd_device, link);
  82
  83                 /* list partitions for given device */
  84                 list_for_each(pentry, &dev->parts)
  85                         part_num++;
  86         }
  87
  88         return part_num;
  89 }
  90
  91 static int get_part_info(void)
  92 {
  93         struct mtd_device *dev;
  94         u8 out_partnum;
  95         char part_name[12];
  96         char nand_name[12];
  97         int i;
  98         int part_num;
  99         int ubi_mode = 0;
 100
 101 #if defined(CONFIG_CMD_NAND)
 102         sprintf(nand_name, "nand0");
 103 #elif defined(CONFIG_CMD_ONENAND)
 104         sprintf(nand_name, "onenand0");
 105 #else
 106         printf("Configure your NAND sub-system\n");
 107         return 0;
 108 #endif
 109
 110         if (mtdparts_init())
 111                 return 0;
 112
 113         ubi_mode = check_ubi_mode();
 114
 115         part_num = count_mtdparts();
 116         for (i = 0; i < part_num; i++) {
 117                 sprintf(part_name, "%s,%d", nand_name, i);
 118
 119                 if (find_dev_and_part(part_name, &dev, &out_partnum, &parts[i]))
 120                         return -EINVAL;
 121         }
 122
 123         return 0;
 124 }
 125
 126 static int get_part_id(char *name)
 127 {
 128         int nparts = count_mtdparts();
 129         int i;
 130
 131         for (i = 0; i < nparts; i++) {
 132                 if (strcmp(parts[i]->name, name) == 0)
 133                         return i;
 134         }
 135
 136         printf("Error: Unknown partition -> %s\n", name);
 137         return -1;
 138 }
 139 #else
 140 static int get_part_info(void)
 141 {
 142         printf("Error: Can't get patition information\n");
 143         return -EINVAL;
 144 }
 145
 146 static int get_part_id(char *name)
 147 {
 148         return 0;
 149 }
 150 #endif
 151
 152 static void boot_cmd(char *addr)
 153 {
 154         char *argv[] = { "bootm", addr };
 155         do_bootm(NULL, 0, 2, argv);
 156 }
 157
 158 #if defined(CONFIG_CMD_NAND)
 159 extern int do_nand(cmd_tbl_t *cmdtp, int flag, int argc, char *argv[]);
 160 #elif defined(CONFIG_CMD_ONENAND)
 161 extern int do_onenand(cmd_tbl_t *cmdtp, int flag, int argc, char *argv[]);
 162 #endif
 163
 164 /* NAND erase and write using nand command */
 165 static int nand_cmd(int type, char *p1, char *p2, char *p3)
 166 {
 167         int ret = 1;
 168         char nand_name[12];
 169         int (*nand_func) (cmd_tbl_t *, int, int, char **);
 170
 171 #if defined(CONFIG_CMD_NAND)
 172         sprintf(nand_name, "nand");
 173         nand_func = do_nand;
 174 #elif defined(CONFIG_CMD_ONENAND)
 175         sprintf(nand_name, "onenand");
 176         nand_func = do_onenand;
 177 #else
 178         printf("Configure your NAND sub-system\n");
 179         return 0;
 180 #endif
 181
 182         if (type == 0) {
 183                 char *argv[] = {nand_name, "erase", p1, p2};
 184                 printf("%s %s %s %s\n", argv[0], argv[1], argv[2], argv[3]);
 185                 ret = nand_func(NULL, 0, 4, argv);
 186         } else if (type == 1) {
 187                 char *argv[] = {nand_name, "write", p1, p2, p3};
 188                 printf("%s %s %s %s %s\n", argv[0], argv[1], argv[2],
 189                                 argv[3], argv[4]);
 190                 ret = nand_func(NULL, 0, 5, argv);
 191         } else if (type == 2) {
 192                 char *argv[] = {nand_name, "write.yaffs", p1, p2, p3};
 193                 printf("%s %s %s %s %s\n", argv[0], argv[1], argv[2],
 194                                 argv[3], argv[4]);
 195                 ret = nand_func(NULL, 0, 5, argv);
 196         } else if (type == 3) {
 197                 char *argv[] = {nand_name, "lock", p1, p2};
 198                 printf("%s %s %s %s\n", argv[0], argv[1], argv[2], argv[3]);
 199                 ret = nand_func(NULL, 0, 4, argv);
 200         }
 201
 202         if (ret)
 203                 printf("Error: NAND Command\n");
 204
 205         return ret;
 206 }
 207
 208 #ifdef CONFIG_CMD_UBI
 209 int do_ubi(cmd_tbl_t *cmdtp, int flag, int argc, char *argv[]);
 210
 211 int ubi_cmd(int part, char *p1, char *p2, char *p3)
 212 {
 213         int ret = 1;
 214
 215         if (part == RAMDISK_PART_ID) {
 216                 char *argv[] = {"ubi", "write", p1, "rootfs.cramfs", p2, p3};
 217                 printf("%s %s %s %s %s %s\n", argv[0], argv[1], argv[2],
 218                                 argv[3], argv[4], argv[5]);
 219                 ret = do_ubi(NULL, 0, 6, argv);
 220         } else if (part == FILESYSTEM_PART_ID) {
 221                 char *argv[] = {"ubi", "write", p1, "factoryfs.cramfs", p2, p3};
 222                 printf("%s %s %s %s %s %s\n", argv[0], argv[1], argv[2],
 223                                 argv[3], argv[4], argv[5]);
 224                 ret = do_ubi(NULL, 0, 6, argv);
 225         } else if (part == FILESYSTEM2_PART_ID) {
 226                 char *argv[] = {"ubi", "write", p1, "datafs.ubifs", p2, p3};
 227                 printf("%s %s %s %s %s %s\n", argv[0], argv[1], argv[2],
 228                                 argv[3], argv[4], argv[5]);
 229                 ret = do_ubi(NULL, 0, 6, argv);
 230         }
 231
 232         return ret;
 233 }
 234 #endif
 235
 236 #ifdef CONFIG_CMD_MMC
 237 #include <mmc.h>
 238 #include <fat.h>
 239
 240 static struct mmc *mmc;
 241
 242 static int mmc_cmd(int ops, int dev_num, ulong start, lbaint_t cnt, void *addr)
 243 {
 244         int ret;
 245
 246         if (ops) {
 247                 printf("mmc write 0x%x 0x%x\n", start, cnt);
 248                 ret = mmc->block_dev.block_write(dev_num, start, cnt, addr);
 249         } else {
 250                 printf("mmc read 0x%x 0x%x\n", start, cnt);
 251                 ret = mmc->block_dev.block_read(dev_num, start, cnt, addr);
 252         }
 253
 254         if (ret > 0)
 255                 ret = 0;
 256         else
 257                 ret = 1;
 258
 259         return ret;
 260 }
 261
 262 #define NORMAL_PARTITION        0
 263 #define EXTEND_PARTITION        1
 264
 265 #define EXTEND_PART_TYPE        5
 266
 267 #define EXTEND_MAX_PART         32
 268
 269 static unsigned int cur_blk_offset;
 270 static unsigned int cur_part_size;
 271 static unsigned int cur_part;
 272
 273 static unsigned int mmc_parts;
 274 static unsigned int mmc_part_write;
 275
 276 static u8 part_mode = 0;
 277
 278 struct partition_info {
 279         u32 size;
 280         u32 checksum;
 281         u32 res;
 282 } __attribute__((packed));
 283
 284 struct partition_header {
 285         u8                      fat32head[16];  /* RFSHEAD identifier */
 286         struct partition_info   partition[EXTEND_MAX_PART];
 287         u8                      res[112];       /* only data (without MBR) */
 288 } __attribute__((packed));
 289
 290 struct mul_partition_info {
 291         u32 lba_begin;          /* absolute address from 0 block */
 292         u32 num_sectors;
 293 } __attribute__((packed));
 294
 295 #define MBR_OFFSET      0x10
 296
 297 struct partition_header part_info;
 298 struct mbr mbr_info;
 299 struct mul_partition_info mul_info[EXTEND_MAX_PART];
 300
 301 static int write_mmc_partition(struct usbd_ops *usbd, u32 *ram_addr, u32 len)
 302 {
 303         unsigned int blocks;
 304         int i;
 305         int loop;
 306         u32 cnt;
 307         int ret;
 308
 309         if (cur_part_size > len) {
 310                 blocks = len / usbd->mmc_blk;
 311                 ret = -1;
 312         } else {
 313                 blocks = cur_part_size / usbd->mmc_blk;
 314                 ret = len - cur_part_size;
 315         }
 316
 317         if (len % usbd->mmc_blk)
 318                 blocks++;
 319
 320         loop = blocks / usbd->mmc_max;
 321         if (blocks % usbd->mmc_max)
 322                 loop++;
 323
 324         for (i = 0; i < loop; i++) {
 325                 if (i == 0) {
 326                         cnt = blocks % usbd->mmc_max;
 327                         if (cnt == 0)
 328                                 cnt = usbd->mmc_max;
 329                 } else {
 330                         cnt = usbd->mmc_max;
 331                 }
 332
 333                 mmc_cmd(OPS_WRITE, usbd->mmc_dev, cur_blk_offset,
 334                                 cnt, (void *)*ram_addr);
 335
 336                 cur_blk_offset += cnt;
 337
 338                 *ram_addr += (cnt * usbd->mmc_blk);
 339         }
 340
 341         return ret;
 342 }
 343
 344 static int write_file_mmc(struct usbd_ops *usbd, u32 len)
 345 {
 346         u32 ram_addr;
 347         int i;
 348         int ret;
 349         struct mbr *mbr;
 350
 351         if (!usbd->mmc_total) {
 352                 printf("MMC is not supported!\n");
 353                 return 0;
 354         }
 355
 356         ram_addr = (u32)down_ram_addr;
 357
 358         if (cur_blk_offset == 0) {
 359                 boot_sector *bs;
 360                 u32 mbr_blk_size;
 361
 362                 memcpy(&part_info, (void *)ram_addr,
 363                                 sizeof(struct partition_header));
 364
 365                 ram_addr += sizeof(struct partition_header);
 366                 len -= sizeof(struct partition_header);
 367                 mbr = (struct mbr *)ram_addr;
 368                 mbr_blk_size = mbr->parts[0].lba;
 369
 370                 if (mbr->parts[0].partition_type != EXTEND_PART_TYPE) {
 371                         part_mode = NORMAL_PARTITION;
 372
 373                         /* modify sectors of p1 */
 374                         mbr->parts[0].nsectors = usbd->mmc_total -
 375                                         (mbr_blk_size +
 376                                         mbr->parts[1].nsectors +
 377                                         mbr->parts[2].nsectors +
 378                                         mbr->parts[3].nsectors);
 379
 380                         mmc_parts++;
 381
 382                         /* modify lba_begin of p2 and p3 and p4 */
 383                         for (i = 1; i < 4; i++) {
 384                                 if (part_info.partition[i].size == 0)
 385                                         break;
 386
 387                                 mmc_parts++;
 388                                 mbr->parts[i].lba =
 389                                         mbr->parts[i - 1].lba +
 390                                         mbr->parts[i - 1].nsectors;
 391                         }
 392
 393                         /* copy MBR */
 394                         memcpy(&mbr_info, mbr, sizeof(struct mbr));
 395
 396                         printf("Total Size: 0x%08x #parts %d\n",
 397                                         (unsigned int)usbd->mmc_total,
 398                                         mmc_parts);
 399                         for (i = 0; i < mmc_parts; i++) {
 400                                 printf("p%d\t0x%08x\t0x%08x\n", i + 1,
 401                                         mbr_info.parts[i].lba,
 402                                         mbr_info.parts[i].nsectors);
 403                         }
 404
 405                         /* write MBR */
 406                         mmc_cmd(OPS_WRITE, usbd->mmc_dev, 0,
 407                                         mbr_blk_size, (void *)ram_addr);
 408
 409                         ram_addr += mbr_blk_size * usbd->mmc_blk;
 410                         len -= mbr_blk_size * usbd->mmc_blk;
 411
 412                         cur_blk_offset = mbr_blk_size;
 413                         cur_part = 0;
 414                         cur_part_size = part_info.partition[0].size;
 415
 416                         /* modify p1's total sector */
 417                         bs = (boot_sector *)ram_addr;
 418                         bs->total_sect = mbr_info.parts[0].nsectors;
 419
 420                         printf("\nWrite Partition %d.. %d blocks\n",
 421                                 cur_part + 1,
 422                                 part_info.partition[cur_part].size /
 423                                 (int)usbd->mmc_blk);
 424                 } else {
 425                         part_mode = EXTEND_PARTITION;
 426
 427                         for (i = 0; i < EXTEND_MAX_PART; i++) {
 428                                 if (part_info.partition[i].size == 0)
 429                                         break;
 430                                 mmc_parts++;
 431                         }
 432
 433                         if (mmc_parts == 0)
 434                                 return -1;
 435                         else
 436                                 printf("found %d partitions\n", mmc_parts);
 437
 438                         /* build partition table */
 439
 440                         mul_info[0].num_sectors =
 441                                 usbd->mmc_total - mbr_blk_size;
 442                         for (i = 1; i < mmc_parts; i++) {
 443                                 mul_info[i].num_sectors =
 444                                         part_info.partition[i].res +
 445                                         mbr_blk_size; /* add MBR */
 446                         }
 447
 448                         for (i = 1; i < mmc_parts; i++) {
 449                                 mul_info[0].num_sectors -=
 450                                         mul_info[i].num_sectors;
 451                         }
 452
 453                         mul_info[0].lba_begin = mbr_blk_size;
 454                         for (i = 1; i < mmc_parts; i++) {
 455                                 mul_info[i].lba_begin =
 456                                         mul_info[i-1].lba_begin +
 457                                         mul_info[i-1].num_sectors;
 458                         }
 459
 460                         /* modify MBR of extended partition: p1 */
 461                         mbr->parts[0].nsectors =
 462                                 usbd->mmc_total - mbr_blk_size;
 463
 464                         /* modify MBR of first logical partition: p5 */
 465                         mbr = (struct mbr *)
 466                                 (ram_addr + mbr_blk_size * usbd->mmc_blk);
 467
 468                         mbr->parts[0].nsectors =
 469                                 mul_info[0].num_sectors - mbr_blk_size;
 470                         mbr->parts[1].lba=
 471                                 mul_info[1].lba_begin - mbr_blk_size;
 472
 473                         /* modify BPB data of p5 */
 474                         bs = (boot_sector *)
 475                                 ((u32)mbr + mbr_blk_size * usbd->mmc_blk);
 476                         memset(&bs->sectors, 0, 2);
 477                         bs->total_sect = mbr->parts[0].nsectors;
 478
 479                         printf("Total Size: 0x%08x #parts %d\n",
 480                                         (unsigned int)usbd->mmc_total,
 481                                         mmc_parts);
 482                         for (i = 0; i < mmc_parts; i++) {
 483                                 printf("p%d\t0x%08x\t0x%08x\n", i + 1,
 484                                         mul_info[i].lba_begin,
 485                                         mul_info[i].num_sectors);
 486                         }
 487
 488                         cur_blk_offset = 0;
 489                         cur_part = 0;
 490                         cur_part_size = part_info.partition[0].size;
 491
 492                         printf("\nWrite Partition %d.. %d blocks\n",
 493                                 cur_part + 1,
 494                                 part_info.partition[cur_part].size /
 495                                 (int)usbd->mmc_blk);
 496                 }
 497         }
 498
 499         for (i = cur_part; i < mmc_parts; i++) {
 500                 ret = write_mmc_partition(usbd, &ram_addr, len);
 501
 502                 if (ret < 0) {
 503                         cur_part_size -= len;
 504                         break;
 505                 } else {
 506                         cur_part++;
 507                         cur_part_size =
 508                                 part_info.partition[cur_part].size;
 509
 510                         if (part_mode == NORMAL_PARTITION) {
 511                                 cur_blk_offset =
 512                                         mbr_info.parts[cur_part].lba;
 513                         } else {
 514                                 cur_blk_offset =
 515                                         mul_info[cur_part].lba_begin;
 516                                 /* modify MBR */
 517                                 if (cur_part < mmc_parts) {
 518                                         mbr = (struct mbr *)ram_addr;
 519                                         mbr->parts[1].lba=
 520                                                 mul_info[cur_part+1].lba_begin -
 521                                                 mbr->parts[0].lba;
 522                                 }
 523                         }
 524
 525                         if (ret == 0)
 526                                 break;
 527                         else
 528                                 len = ret;
 529
 530                         printf("\nWrite Partition %d.. %d blocks\n",
 531                                 cur_part + 1,
 532                                 part_info.partition[cur_part].size /
 533                                 (int)usbd->mmc_blk);
 534                 }
 535         }
 536
 537         return 0;
 538 }
 539
 540 static int write_file_mmc_part(struct usbd_ops *usbd, u32 len)
 541 {
 542         u32 ram_addr;
 543         u32 ofs;
 544         int i;
 545         struct mbr *mbr;
 546         u32 mbr_blk_size;
 547
 548         ram_addr = (u32)down_ram_addr;
 549         mbr = &mbr_info;
 550
 551         if (cur_blk_offset == 0) {
 552                 /* read MBR */
 553                 mmc_cmd(OPS_READ, usbd->mmc_dev, 0,
 554                         sizeof(struct mbr)/usbd->mmc_blk, (void *)mbr);
 555
 556                 mbr_blk_size = mbr->parts[0].lba;
 557
 558                 if (mbr->parts[0].partition_type != EXTEND_PART_TYPE) {
 559                         part_mode = NORMAL_PARTITION;
 560
 561                         for (i = 0; i < 4; i++) {
 562                                 printf("p%d\t0x%08x\t0x%08x\n", i + 1,
 563                                         mbr_info.parts[i].lba,
 564                                         mbr_info.parts[i].nsectors);
 565                         }
 566
 567                         cur_blk_offset =
 568                                 mbr->parts[mmc_part_write - 1].lba;
 569                         cur_part = mmc_part_write - 1;
 570                         cur_part_size =
 571                                 usbd->mmc_blk *
 572                                 mbr->parts[mmc_part_write - 1].nsectors;
 573
 574                         if (mmc_part_write == 1) {
 575                                 ram_addr += sizeof(struct mbr);
 576                                 cur_blk_offset += sizeof(struct mbr) /
 577                                         usbd->mmc_blk;
 578                                 len -= sizeof(struct mbr);
 579                         }
 580                 } else {
 581                         part_mode = EXTEND_PARTITION;
 582
 583                         for (i = 1; i < mmc_part_write; i++) {
 584                                 ofs = mbr->parts[0].lba + mbr->parts[1].lba;
 585                                 printf("P%d start blk: 0x%x, size: 0x%x\n", i,
 586                                         ofs, mbr->parts[1].nsectors);
 587                                 mmc_cmd(OPS_READ, usbd->mmc_dev, ofs,
 588                                         (sizeof(struct mbr) / usbd->mmc_blk),
 589                                         (void *)mbr);
 590                         }
 591
 592                         ofs = mbr->parts[0].lba + mbr->parts[1].lba;
 593                         printf("P%d start blk: 0x%x, size: 0x%x\n", i,
 594                                 ofs, mbr->parts[1].nsectors);
 595
 596                         ofs += mbr_blk_size; /* skip MBR */
 597                         cur_blk_offset = ofs;
 598                         cur_part = mmc_part_write - 1;
 599                         cur_part_size =
 600                                 usbd->mmc_blk *
 601                                 mbr->parts[1].nsectors;
 602
 603                         if (mmc_part_write == 1) {
 604                                 boot_sector *bs;
 605                                 u32 total_sect;
 606                                 /* modify BPB data of p1 */
 607                                 mmc_cmd(OPS_READ, usbd->mmc_dev, cur_blk_offset,
 608                                         (sizeof(struct mbr) / usbd->mmc_blk),
 609                                         mbr);
 610
 611                                 bs = (boot_sector *)mbr;
 612                                 total_sect = bs->total_sect;
 613
 614                                 bs = (boot_sector *)ram_addr;
 615                                 memset(&bs->sectors, 0, 2);
 616                                 bs->total_sect = total_sect;
 617                         }
 618                 }
 619         }
 620
 621         printf("\nWrite Partition %d.. %d blocks\n",
 622                 cur_part + 1,
 623                 len / (int)usbd->mmc_blk);
 624
 625         write_mmc_partition(usbd, &ram_addr, len);
 626
 627         return 0;
 628 }
 629 #endif
 630
 631 static int write_mmc_image(struct usbd_ops *usbd, unsigned int len, int part_num)
 632 {
 633         int ret = 0;
 634
 635         if (mbr_parts <= part_num) {
 636                 printf("Error: MBR table have %d partitions (request %d)\n",
 637                                 mbr_parts, part_num);
 638                 return 1;
 639         }
 640
 641 #if 0
 642         /* modify size of UMS partition */
 643         if (part_num == 4 && fs_offset == 0) {
 644                 boot_sector *bs;
 645                 bs = (boot_sector *)down_ram_addr;
 646                 memset(&bs->sectors, 0, 2);
 647                 bs->total_sect = usbd->mmc_total - mbr_offset[part_num];
 648         }
 649 #endif
 650         ret = mmc_cmd(OPS_WRITE, usbd->mmc_dev,
 651                         mbr_offset[part_num] + fs_offset,
 652                         len / usbd->mmc_blk,
 653                         (void *)down_ram_addr);
 654
 655         fs_offset += (len / usbd->mmc_blk);
 656
 657         return ret;
 658 }
 659
 660 static int write_fat_file(struct usbd_ops *usbd, char *file_name,
 661                         int part_id, int len)
 662 {
 663 #ifdef CONFIG_FAT_WRITE
 664         int ret;
 665
 666         ret = fat_register_device(&mmc->block_dev, part_id);
 667         if (ret < 0) {
 668                 printf("error : fat_register_divce\n");
 669                 return 0;
 670         }
 671
 672         ret = file_fat_write(file_name, (void *)down_ram_addr, len);
 673
 674         /* format and write again */
 675         if (ret == 1) {
 676                 printf("formatting\n");
 677                 if (mkfs_vfat(&mmc->block_dev, part_id)) {
 678                         printf("error : format device\n");
 679                         return 0;
 680                 }
 681                 ret = file_fat_write(file_name, (void *)down_ram_addr, len);
 682         }
 683
 684         if (ret < 0) {
 685                 printf("error : writing uImage\n");
 686                 return 0;
 687         }
 688 #else
 689         printf("error: doesn't support fat_write\n");
 690 #endif
 691         return 0;
 692 }
 693
 694
 695 static int ubi_update = 0;
 696
 697 static int write_file_system(char *ramaddr, ulong len, char *offset,
 698                 char *length, int part_num)
 699 {
 700         int ret = 0;
 701
 702 #ifdef CONFIG_CMD_MTDPARTS
 703 #ifdef CONFIG_CMD_UBI
 704         /* UBI Update */
 705         if (ubi_update) {
 706                 sprintf(length, "0x%x", (uint)len);
 707                 ret = ubi_cmd(part_id, ramaddr, length, "cont");
 708                 return ret;
 709         }
 710 #endif
 711
 712         /* Erase entire partition at the first writing */
 713         if (write_part == 0 && ubi_update == 0) {
 714                 sprintf(offset, "0x%x", (uint)parts[part_num]->offset);
 715                 sprintf(length, "0x%x", (uint)parts[part_num]->size);
 716                 nand_cmd(0, offset, length, NULL);
 717         }
 718
 719         sprintf(offset, "0x%x", (uint)(parts[part_num]->offset + fs_offset));
 720         sprintf(length, "0x%x", (uint)len);
 721
 722         fs_offset += len;
 723         ret = nand_cmd(1, ramaddr, offset, length);
 724 #endif
 725
 726         return ret;
 727 }
 728
 729 static int qboot_erase = 0;
 730
 731 /* Erase the qboot */
 732 static void erase_qboot_area(void)
 733 {
 734 #ifdef CONFIG_CMD_MTDPARTS
 735         char offset[12], length[12];
 736         int qboot_id;
 737
 738         if (qboot_erase)
 739                 return;
 740
 741         qboot_id = get_part_id("qboot");
 742
 743         if (qboot_id != -1) {
 744                 printf("\nCOMMAND_ERASE_QBOOT\n");
 745                 sprintf(offset, "%x", parts[qboot_id]->offset);
 746                 sprintf(length, "%x", parts[qboot_id]->size);
 747                 nand_cmd(0, offset, length, NULL);
 748                 qboot_erase = 1;
 749         }
 750 #endif
 751 }
 752
 753 /* Erase the environment */
 754 static void erase_env_area(struct usbd_ops *usbd)
 755 {
 756 #if defined(CONFIG_ENV_IS_IN_NAND) || defined(CONFIG_ENV_IS_IN_ONENAND)
 757         int param_id;
 758         char offset[12], length[12];
 759
 760         param_id = get_part_id("params");
 761
 762         if (param_id == -1) {
 763                 sprintf(offset, "%x", CONFIG_ENV_ADDR);
 764                 sprintf(length, "%x", CONFIG_ENV_SIZE);
 765         } else {
 766                 sprintf(offset, "%x", parts[param_id]->offset);
 767                 sprintf(length, "%x", parts[param_id]->size);
 768         }
 769         nand_cmd(0, offset, length, NULL);
 770 #elif defined(CONFIG_ENV_IS_IN_MMC)
 771         char buf[usbd->mmc_blk];
 772
 773         memset(buf, 0x0, usbd->mmc_blk);
 774         mmc_cmd(OPS_WRITE, CONFIG_SYS_MMC_ENV_DEV,
 775                         CONFIG_ENV_OFFSET / usbd->mmc_blk,
 776                         1, (void *)buf);
 777 #endif
 778 }
 779
 780 static inline void send_ack(struct usbd_ops *usbd, int data)
 781 {
 782         *((ulong *) usbd->tx_data) = data;
 783         usbd->send_data(usbd->tx_data, usbd->tx_len);
 784 }
 785
 786 static inline int check_mmc_device(struct usbd_ops *usbd)
 787 {
 788         if (usbd->mmc_total)
 789                 return 0;
 790
 791         printf("\nError: Couldn't find the MMC device\n");
 792         return 1;
 793 }
 794
 795 static int write_mtd_image(struct usbd_ops *usbd, int img_type,
 796                 unsigned int len, unsigned int arg)
 797 {
 798         int ret = -1;
 799 #ifdef CONFIG_CMD_MTDPARTS
 800         unsigned int ofs = 0;
 801         char offset[12], length[12], ramaddr[12];
 802
 803         sprintf(ramaddr, "0x%x", (uint) down_ram_addr);
 804
 805         /* Erase and Write to NAND */
 806         switch (img_type) {
 807         case IMG_BOOT:
 808                 ofs = parts[part_id]->offset;
 809 #ifdef CONFIG_S5PC1XX
 810                 /* Workaround: for prevent revision mismatch */
 811                 if (cpu_is_s5pc110() && (down_mode != MODE_FORCE)) {
 812                         int img_rev = 1;
 813                         long *img_header = (long *)down_ram_addr;
 814
 815                         if (*img_header == 0xea000012)
 816                                 img_rev = 0;
 817                         else if (*(img_header + 0x400) == 0xea000012)
 818                                 img_rev = 2;
 819
 820                         if (img_rev != s5p_get_cpu_rev()) {
 821                                 printf("CPU revision mismatch!\n"
 822                                         "bootloader is %s%s\n"
 823                                         "download image is %s%s\n",
 824                                         s5p_get_cpu_rev() ? "EVT1" : "EVT0",
 825                                         s5p_get_cpu_rev() == 2 ? "-Fused" : "",
 826                                         img_rev ? "EVT1" : "EVT0",
 827                                         img_rev == 2 ? "-Fused" : "");
 828                                 return -1;
 829                         }
 830                 }
 831 #endif
 832
 833                 erase_env_area(usbd);
 834
 835                 sprintf(offset, "%x", (uint)ofs);
 836                 if (ofs != 0)
 837                         sprintf(length, "%x", parts[part_id]->size - (uint)ofs);
 838                 else
 839                         sprintf(length, "%x", parts[part_id]->size);
 840
 841                 /* Erase */
 842                 nand_cmd(0, offset, length, NULL);
 843                 /* Write */
 844                 sprintf(length, "%x", (unsigned int) len);
 845                 ret = nand_cmd(1, ramaddr, offset, length);
 846                 break;
 847
 848         case IMG_KERNEL:
 849                 sprintf(offset, "%x", parts[part_id]->offset);
 850                 sprintf(length, "%x", parts[part_id]->size);
 851
 852                 /* Erase */
 853                 nand_cmd(0, offset, length, NULL);
 854                 /* Write */
 855                 sprintf(length, "%x", (unsigned int) len);
 856                 ret = nand_cmd(1, ramaddr, offset, length);
 857
 858                 erase_qboot_area();
 859                 break;
 860
 861         /* File Systems */
 862         case IMG_FILESYSTEM:
 863                 ret = write_file_system(ramaddr, len, offset, length, part_id);
 864
 865                 erase_qboot_area();
 866                 break;
 867
 868         case IMG_MODEM:
 869                 sprintf(offset, "%x", parts[part_id]->offset);
 870                 sprintf(length, "%x", parts[part_id]->size);
 871
 872                 /* Erase */
 873                 if (!arg)
 874                         nand_cmd(0, offset, length, NULL);
 875                 else
 876                         printf("CSA Clear will be skipped temporary\n");
 877
 878                 /* Check ubi image, 0x23494255 is UBI# */
 879                 {
 880                         long *img_header = (long *)down_ram_addr;
 881
 882                         if (*img_header == 0x23494255)
 883                                 goto ubi_img;
 884                 }
 885
 886 #ifdef CONFIG_UBIFS_MK
 887                 void *dest_addr = (void *) down_ram_addr + 0xc00000;
 888                 void *src_addr = (void *) down_ram_addr;
 889                 int leb_size, max_leb_cnt, mkfs_min_io_size;
 890                 unsigned long ubifs_dest_size, ubi_dest_size;
 891 #ifdef CONFIG_S5PC110
 892                 mkfs_min_io_size = 4096;
 893                 leb_size = 248 * 1024;
 894                 max_leb_cnt = 4096;
 895 #elif CONFIG_S5PC210
 896                 mkfs_min_io_size = 2048;
 897                 leb_size = 126 * 1024;
 898                 max_leb_cnt = 4096;
 899 #endif
 900                 printf("Start making ubifs\n");
 901                 ret = mkfs(src_addr, len, dest_addr, &ubifs_dest_size,
 902                            mkfs_min_io_size, leb_size, max_leb_cnt);
 903                 if (ret) {
 904                         printf("Error : making ubifs failed\n");
 905                         goto out;
 906                 }
 907                 printf("Complete making ubifs\n");
 908 #endif
 909
 910 #ifdef CONFIG_UBINIZE
 911                 int peb_size, ubi_min_io_size, subpage_size, vid_hdr_offs;
 912 #ifdef CONFIG_S5PC110
 913                 ubi_min_io_size = 4096;
 914                 peb_size = 256 * 1024;
 915                 subpage_size = 4096;
 916                 vid_hdr_offs = 0;
 917 #elif CONFIG_S5PC210
 918                 ubi_min_io_size = 2048;
 919                 peb_size = 128 * 1024;
 920                 subpage_size = 512;
 921                 vid_hdr_offs = 512;
 922 #endif
 923                 printf("Start ubinizing\n");
 924                 ret = ubinize(dest_addr, ubifs_dest_size,
 925                               src_addr, &ubi_dest_size,
 926                               peb_size, ubi_min_io_size,
 927                               subpage_size, vid_hdr_offs);
 928                 if (ret) {
 929                         printf("Error : ubinizing failed\n");
 930                         goto out;
 931                 }
 932                 printf("Complete ubinizing\n");
 933
 934                 len = (unsigned int) ubi_dest_size;
 935 #endif
 936
 937 ubi_img:
 938                 /* Write : arg (0 Modem) / (1 CSA) */
 939                 if (!arg) {
 940                         sprintf(length, "%x", (unsigned int) len);
 941                         ret = nand_cmd(1, ramaddr, offset, length);
 942                 }
 943 out:
 944                 break;
 945
 946 #ifdef CONFIG_CMD_MMC
 947         case IMG_MMC:
 948                 if (check_mmc_device(usbd))
 949                         return -1;
 950
 951                 if (mmc_part_write)
 952                         ret = write_file_mmc_part(usbd, len);
 953                 else
 954                         ret = write_file_mmc(usbd, len);
 955
 956                 erase_qboot_area();
 957                 break;
 958 #endif
 959         default:
 960                 /* Retry? */
 961                 write_part--;
 962         }
 963 #endif
 964         return ret;
 965 }
 966
 967 static int write_v2_image(struct usbd_ops *usbd, int img_type,
 968                 unsigned int len, unsigned int arg)
 969 {
 970         int ret;
 971
 972         if (check_mmc_device(usbd))
 973                 return -1;
 974
 975         switch (img_type) {
 976         case IMG_V2:
 977                 ret = write_mmc_image(usbd, len, part_id);
 978                 break;
 979
 980         case IMG_MBR:
 981 #ifdef CONFIG_CMD_MBR
 982                 set_mbr_info((char *)down_ram_addr, len);
 983 #endif
 984                 break;
 985
 986         case IMG_BOOTLOADER:
 987 #ifdef CONFIG_BOOTLOADER_SECTOR
 988                 erase_env_area(usbd);
 989
 990                 ret = mmc_cmd(OPS_WRITE, usbd->mmc_dev,
 991                                 CONFIG_BOOTLOADER_SECTOR,
 992                                 len / usbd->mmc_blk + 1,
 993                                 (void *)down_ram_addr);
 994 #endif
 995                 break;
 996
 997         case IMG_KERNEL_V2:
 998                 ret = write_fat_file(usbd, "uImage", part_id, len);
 999                 break;
1000
1001         case IMG_MODEM_V2:
1002                 ret = write_fat_file(usbd, "modem.bin", part_id, len);
1003                 break;
1004
1005         default:
1006                 /* Retry? */
1007                 write_part--;
1008         }
1009
1010         return ret;
1011 }
1012
1013 /* Parsing received data packet and Process data */
1014 static int process_data(struct usbd_ops *usbd)
1015 {
1016         unsigned int cmd = 0, arg = 0, len = 0, flag = 0;
1017         char ramaddr[12];
1018         int recvlen = 0;
1019         unsigned int blocks = 0;
1020         int ret = 0;
1021         int ubi_mode = 0;
1022         int img_type = -1;
1023
1024         sprintf(ramaddr, "0x%x", (uint) down_ram_addr);
1025
1026         /* Parse command */
1027         cmd  = *((ulong *) usbd->rx_data + 0);
1028         arg  = *((ulong *) usbd->rx_data + 1);
1029         len  = *((ulong *) usbd->rx_data + 2);
1030         flag = *((ulong *) usbd->rx_data + 3);
1031
1032         /* Reset tx buffer */
1033         memset(usbd->tx_data, 0, sizeof(usbd->tx_data));
1034
1035         ubi_mode = check_ubi_mode();
1036
1037         switch (cmd) {
1038         case COMMAND_DOWNLOAD_IMAGE:
1039                 printf("\nCOMMAND_DOWNLOAD_IMAGE\n");
1040
1041                 if (arg)
1042                         down_ram_addr = usbd->ram_addr + 0x1000000;
1043                 else
1044                         down_ram_addr = usbd->ram_addr;
1045
1046                 usbd->recv_setup((char *)down_ram_addr, (int)len);
1047                 printf("Download to 0x%08x, %d bytes\n",
1048                                 (uint)down_ram_addr, (int)len);
1049
1050                 /* response */
1051                 send_ack(usbd, STATUS_DONE);
1052
1053                 /* Receive image by using dma */
1054                 recvlen = usbd->recv_data();
1055                 if (recvlen < 0) {
1056                         send_ack(usbd, STATUS_ERROR);
1057                         return -1;
1058                 } else if (recvlen < len) {
1059                         printf("Error: wrong image size -> %d/%d\n",
1060                                         (int)recvlen, (int)len);
1061
1062                         /* Retry this commad */
1063                         send_ack(usbd, STATUS_RETRY);
1064                 } else
1065                         send_ack(usbd, STATUS_DONE);
1066
1067                 return 1;
1068
1069         case COMMAND_DOWNLOAD_SPMODE:
1070                 printf("\nCOMMAND_DOWNLOAD_SPMODE\n");
1071
1072                 down_ram_addr = usbd->ram_addr + 0x2008000;
1073
1074                 usbd->recv_setup((char *)down_ram_addr, (int)len);
1075                 printf("Download to 0x%08x, %d bytes\n",
1076                                 (uint)down_ram_addr, (int)len);
1077
1078                 /* response */
1079                 send_ack(usbd, STATUS_DONE);
1080
1081                 /* Receive image by using dma */
1082                 recvlen = usbd->recv_data();
1083                 send_ack(usbd, STATUS_DONE);
1084
1085                 return 0;
1086
1087         /* Report partition info */
1088         case COMMAND_PARTITION_SYNC:
1089                 part_id = arg;
1090
1091 #ifdef CONFIG_CMD_UBI
1092                 if (ubi_mode) {
1093                         if (part_id == RAMDISK_PART_ID ||
1094                             part_id == FILESYSTEM_PART_ID ||
1095                             part_id == FILESYSTEM2_PART_ID) {
1096                                 /* change to yaffs style */
1097                                 get_part_info();
1098                         }
1099                 } else {
1100                         if (part_id == FILESYSTEM3_PART_ID) {
1101                                 /* change ubi style */
1102                                 get_part_info();
1103                         }
1104                 }
1105 #endif
1106
1107                 if (part_id == FILESYSTEM3_PART_ID)
1108                         part_id = get_part_id("UBI");
1109                 else if (part_id == MODEM_PART_ID)
1110                         part_id = get_part_id("modem");
1111                 else if (part_id == KERNEL_PART_ID)
1112                         part_id = get_part_id("kernel");
1113                 else if (part_id == BOOT_PART_ID)
1114                         part_id = get_part_id("bootloader");
1115 #ifdef CONFIG_MIRAGE
1116                 if (part_id)
1117                         part_id--;
1118 #endif
1119                 printf("COMMAND_PARTITION_SYNC - Part%d\n", part_id);
1120
1121 #ifdef CONFIG_CMD_MTDPARTS
1122                 blocks = parts[part_id]->size / 1024 / 128;
1123 #endif
1124                 printf("COMMAND_PARTITION_SYNC - Part%d, %d blocks\n",
1125                                 part_id, blocks);
1126
1127                 send_ack(usbd, blocks);
1128                 return 1;
1129
1130         case COMMAND_WRITE_PART_0:
1131                 /* Do nothing */
1132                 printf("COMMAND_WRITE_PART_0\n");
1133                 return 1;
1134
1135         case COMMAND_WRITE_PART_1:
1136                 printf("COMMAND_WRITE_PART_BOOT\n");
1137                 part_id = get_part_id("bootloader");
1138                 img_type = IMG_BOOT;
1139                 break;
1140
1141         case COMMAND_WRITE_PART_2:
1142         case COMMAND_ERASE_PARAMETER:
1143                 printf("COMMAND_PARAMETER - not support!\n");
1144                 break;
1145
1146         case COMMAND_WRITE_PART_3:
1147                 printf("COMMAND_WRITE_KERNEL\n");
1148                 part_id = get_part_id("kernel");
1149                 img_type = IMG_KERNEL;
1150                 break;
1151
1152         case COMMAND_WRITE_PART_4:
1153                 printf("COMMAND_WRITE_ROOTFS\n");
1154                 part_id = get_part_id("Root");
1155                 img_type = IMG_FILESYSTEM;
1156                 ubi_update = arg;
1157                 break;
1158
1159         case COMMAND_WRITE_PART_5:
1160                 printf("COMMAND_WRITE_FACTORYFS\n");
1161                 part_id = get_part_id("Fact");
1162                 img_type = IMG_FILESYSTEM;
1163                 ubi_update = arg;
1164                 break;
1165
1166         case COMMAND_WRITE_PART_6:
1167                 printf("COMMAND_WRITE_DATAFS\n");
1168                 part_id = get_part_id("Data");
1169                 img_type = IMG_FILESYSTEM;
1170                 ubi_update = arg;
1171                 break;
1172
1173         case COMMAND_WRITE_PART_7:
1174                 printf("COMMAND_WRITE_UBI\n");
1175                 part_id = get_part_id("UBI");
1176                 img_type = IMG_FILESYSTEM;
1177                 ubi_update = 0;
1178                 /* someday, it will be deleted */
1179                 get_part_info();
1180                 break;
1181
1182         case COMMAND_WRITE_PART_8:
1183                 printf("COMMAND_WRITE_MODEM\n");
1184                 part_id = get_part_id("modem");
1185                 img_type = IMG_MODEM;
1186                 break;
1187
1188 #ifdef CONFIG_CMD_MMC
1189         case COMMAND_WRITE_PART_9:
1190                 printf("COMMAND_WRITE_MMC\n");
1191                 img_type = IMG_MMC;
1192                 mmc_part_write = arg;
1193                 break;
1194 #endif
1195
1196         case COMMAND_WRITE_IMG_0:
1197                 printf("COMMAND_WRITE_MBR\n");
1198                 img_type = IMG_MBR;
1199                 break;
1200
1201         case COMMAND_WRITE_IMG_1:
1202                 printf("COMMAND_WRITE_BOOTLOADER\n");
1203                 img_type = IMG_BOOTLOADER;
1204                 break;
1205
1206         case COMMAND_WRITE_IMG_2:
1207                 printf("COMMAND_WRITE_KERNEL\n");
1208                 img_type = IMG_KERNEL_V2;
1209                 part_id = 2;
1210                 break;
1211
1212         case COMMAND_WRITE_IMG_3:
1213                 printf("COMMAND_WRITE_MODEM\n");
1214                 img_type = IMG_MODEM_V2;
1215                 part_id = 2;
1216                 break;
1217
1218         case COMMAND_WRITE_IMG_4:
1219                 printf("COMMAND_WRITE_BOOT_PART\n");
1220                 part_id = 1;
1221                 img_type = IMG_V2;
1222                 break;
1223
1224         case COMMAND_WRITE_IMG_5:
1225                 printf("COMMAND_WRITE_SYSTEM_PART\n");
1226                 part_id = 2;
1227                 img_type = IMG_V2;
1228                 break;
1229
1230         case COMMAND_WRITE_IMG_6:
1231                 printf("COMMAND_WRITE_UMS_PART\n");
1232                 part_id = 4;
1233                 img_type = IMG_V2;
1234                 break;
1235
1236         case COMMAND_WRITE_UBI_INFO:
1237                 printf("COMMAND_WRITE_UBI_INFO\n");
1238
1239                 if (ubi_mode) {
1240 #ifdef CONFIG_CMD_UBI
1241                         part_id = arg-1;
1242                         sprintf(length, "0x%x", (uint)len);
1243                         ret = ubi_cmd(part_id, ramaddr, length, "begin");
1244                 } else {
1245 #endif
1246                         printf("Error: Not UBI mode\n");
1247                         ret = 1;
1248                 }
1249
1250                 /* Write image success -> Report status */
1251                 send_ack(usbd, ret);
1252
1253                 return !ret;
1254         /* Download complete -> reset */
1255         case COMMAND_RESET_PDA:
1256                 printf("\nDownload finished and Auto reset!\nWait........\n");
1257
1258                 /* Stop USB */
1259                 usbd->usb_stop();
1260
1261                 if (usbd->cpu_reset)
1262                         usbd->cpu_reset();
1263                 else
1264                         run_command("reset", 0);
1265
1266                 return 0;
1267
1268         /* Error */
1269         case COMMAND_RESET_USB:
1270                 printf("\nError is occured!(maybe previous step)->\
1271                                 Turn off and restart!\n");
1272
1273                 /* Stop USB */
1274                 usbd->usb_stop();
1275                 return -1;
1276
1277         case COMMAND_RAM_BOOT:
1278                 usbd->usb_stop();
1279                 boot_cmd(ramaddr);
1280                 return 0;
1281
1282         case COMMAND_RAMDISK_MODE:
1283                 printf("COMMAND_RAMDISK_MODE\n");
1284 #ifdef CONFIG_RAMDISK_ADDR
1285                 if (arg) {
1286                         down_ram_addr = usbd->ram_addr;
1287                 } else {
1288                         down_ram_addr = CONFIG_RAMDISK_ADDR;
1289                         run_command("run ramboot", 0);
1290                 }
1291 #endif
1292                 return 1;
1293
1294 #ifdef CONFIG_DOWN_PHONE
1295         case COMMAND_DOWN_PHONE:
1296                 printf("COMMAND_RESET_PHONE\n");
1297
1298                 usbd_phone_down();
1299
1300                 send_ack(usbd, STATUS_DONE);
1301                 return 1;
1302
1303         case COMMAND_CHANGE_USB:
1304                 printf("COMMAND_CHANGE_USB\n");
1305
1306                 /* Stop USB */
1307                 usbd->usb_stop();
1308
1309                 usbd_path_change();
1310
1311                 run_command("reset", 0);
1312                 return 0;
1313 #endif
1314         case COMMAND_CSA_CLEAR:
1315                 printf("COMMAND_CSA_CLEAR\n");
1316                 part_id = get_part_id("csa");
1317                 img_type = IMG_MODEM;
1318                 break;
1319
1320         case COMMAND_PROGRESS:
1321                 if (usbd->set_progress)
1322                         usbd->set_progress(arg);
1323                 return 1;
1324
1325         default:
1326                 printf("Error: Unknown command -> (%d)\n", (int)cmd);
1327                 return 1;
1328         }
1329
1330         if (img_type < IMG_V2)
1331                 ret = write_mtd_image(usbd, img_type, len, arg);
1332         else
1333                 ret = write_v2_image(usbd, img_type, len, arg);
1334
1335         if (ret < 0) {
1336                 send_ack(usbd, STATUS_ERROR);
1337                 return -1;
1338         } else if (ret) {
1339                 /* Retry this commad */
1340                 send_ack(usbd, STATUS_RETRY);
1341                 return 1;
1342         } else
1343                 send_ack(usbd, STATUS_DONE);
1344
1345         write_part++;
1346
1347         /* Reset write count for another image */
1348         if (flag) {
1349                 write_part = 0;
1350                 fs_offset = 0;
1351         }
1352
1353         return 1;
1354 }
1355
1356 static const char *recv_key = "SAMSUNG";
1357 static const char *tx_key = "MPL";
1358
1359 int do_usbd_down(cmd_tbl_t *cmdtp, int flag, int argc, char * const argv[])
1360 {
1361         struct usbd_ops *usbd;
1362         int err;
1363         int ret;
1364
1365         if (argc > 1)
1366                 down_mode = simple_strtoul(argv[1], NULL, 10);
1367         else
1368                 down_mode = MODE_NORMAL;
1369
1370         printf("USB Downloader v%s\n", APP_VERSION);
1371
1372         /* get partition info */
1373         err = get_part_info();
1374         if (err)
1375                 return err;
1376
1377         /* interface setting */
1378         usbd = usbd_set_interface(&usbd_ops);
1379         down_ram_addr = usbd->ram_addr;
1380
1381 #ifdef CONFIG_CMD_MBR
1382         /* get mbr info */
1383         mbr_parts = get_mbr_table(mbr_offset);
1384         if (!mbr_parts)
1385                 run_command("mbr default", 0);
1386 #endif
1387
1388         /* init the usb controller */
1389         if (!usbd->usb_init()) {
1390                 usbd->down_cancel(END_BOOT);
1391                 return 0;
1392         }
1393         mmc = find_mmc_device(usbd->mmc_dev);
1394         mmc_init(mmc);
1395
1396         /* receive setting */
1397         usbd->recv_setup(usbd->rx_data, usbd->rx_len);
1398
1399         /* detect the download request from Host PC */
1400         ret = usbd->recv_data();
1401         if (ret > 0) {
1402                 if (strncmp(usbd->rx_data, recv_key, strlen(recv_key)) == 0) {
1403                         printf("Download request from the Host PC\n");
1404                         msleep(30);
1405
1406                         strcpy(usbd->tx_data, tx_key);
1407                         usbd->send_data(usbd->tx_data, usbd->tx_len);
1408                 } else {
1409                         printf("No download request from the Host PC!! 1\n");
1410                         return 0;
1411                 }
1412         } else if (ret < 0) {
1413                 usbd->down_cancel(END_RETRY);
1414                 return 0;
1415         } else {
1416                 usbd->down_cancel(END_BOOT);
1417                 return 0;
1418         }
1419
1420         usbd->down_start();
1421         printf("Receive the packet\n");
1422
1423         /* receive the data from Host PC */
1424         while (1) {
1425                 usbd->recv_setup(usbd->rx_data, usbd->rx_len);
1426
1427                 ret = usbd->recv_data();
1428                 if (ret > 0) {
1429                         ret = process_data(usbd);
1430                         if (ret < 0) {
1431                                 usbd->down_cancel(END_RETRY);
1432                                 return 0;
1433                         } else if (ret == 0) {
1434                                 usbd->down_cancel(END_NORMAL);
1435                                 return 0;
1436                         }
1437                 } else if (ret < 0) {
1438                         usbd->down_cancel(END_RETRY);
1439                         return 0;
1440                 } else {
1441                         usbd->down_cancel(END_BOOT);
1442                         return 0;
1443                 }
1444         }
1445
1446         return 0;
1447 }
1448
1449 U_BOOT_CMD(usbdown, CONFIG_SYS_MAXARGS, 1, do_usbd_down,
1450         "Initialize USB device and Run USB Downloader (specific)",
1451         "- normal mode\n"
1452         "usbdown mode - specific mode (0: NORAML, 1: FORCE)"
1453 );