common/cmd_usbd.c

   1 /*
   2  * USB Downloader for SAMSUNG Platform
   3  *
   4  * Copyright (C) 2007-2008 Samsung Electronics
   5  * Minkyu Kang <mk7.kang@samsung.com>
   6  *
   7  */
   8
   9 #include <common.h>
  10 #include <usbd.h>
  11 #include <asm/errno.h>
  12 #include <malloc.h>
  13
  14 /* version of USB Downloader Application */
  15 #define APP_VERSION     "1.6.0"
  16
  17 #define OPS_READ        0
  18 #define OPS_WRITE       1
  19
  20 #ifdef CONFIG_CMD_MTDPARTS
  21 #include <jffs2/load_kernel.h>
  22 static struct part_info *parts[16];
  23 #endif
  24
  25 #ifdef CONFIG_UBIFS_MK
  26 #include <mkfs.ubifs.h>
  27 #endif
  28
  29 #ifdef CONFIG_UBINIZE
  30 #include <ubinize.h>
  31 #endif
  32
  33 #include <mbr.h>
  34
  35 static const char pszMe[] = "usbd: ";
  36
  37 static struct usbd_ops usbd_ops;
  38
  39 static unsigned int part_id;
  40 static unsigned int write_part = 0;
  41 static unsigned int fs_offset = 0x0;
  42
  43 #ifdef CONFIG_USE_YAFFS
  44 static unsigned int yaffs_len = 0;
  45 static unsigned char yaffs_data[2112];
  46 #define YAFFS_PAGE 2112
  47 #endif
  48
  49 #define NAND_PAGE_SIZE 2048
  50
  51 static unsigned long down_ram_addr;
  52
  53 static int down_mode;
  54
  55 /* cpu/${CPU} dependent */
  56 extern void do_reset(void);
  57
  58 /* common commands */
  59 extern int do_bootm(cmd_tbl_t *cmdtp, int flag, int argc, char *argv[]);
  60 extern int do_run(cmd_tbl_t * cmdtp, int flag, int argc, char *argv[]);
  61
  62 int mtdparts_init(void);
  63 int find_dev_and_part(const char*, struct mtd_device**, u8*, struct part_info**);
  64
  65 /* common/cmd_jffs2.c */
  66 extern struct list_head devices;
  67
  68 static u8 count_mtdparts(void)
  69 {
  70         struct list_head *dentry, *pentry;
  71         struct mtd_device *dev;
  72         u8 part_num = 0;
  73
  74         list_for_each(dentry, &devices) {
  75                 dev = list_entry(dentry, struct mtd_device, link);
  76
  77                 /* list partitions for given device */
  78                 list_for_each(pentry, &dev->parts)
  79                         part_num++;
  80         }
  81
  82         return part_num;
  83 }
  84
  85 #ifdef CONFIG_CMD_UBI
  86 static int check_ubi_mode(void)
  87 {
  88         char *env_ubifs;
  89         int ubi_mode;
  90
  91         env_ubifs = getenv("ubi");
  92         ubi_mode = !strcmp(env_ubifs, "enabled");
  93
  94         return ubi_mode;
  95 }
  96 #else
  97 #define check_ubi_mode()                0
  98 #endif
  99
 100 #ifdef CONFIG_MTD_PARTITIONS
 101 static int get_part_info(void)
 102 {
 103         struct mtd_device *dev;
 104         u8 out_partnum;
 105         char part_name[12];
 106         char nand_name[12];
 107         int i;
 108         int part_num;
 109         int ubi_mode = 0;
 110
 111 #if defined(CONFIG_CMD_NAND)
 112         sprintf(nand_name, "nand0");
 113 #elif defined(CONFIG_CMD_ONENAND)
 114         sprintf(nand_name, "onenand0");
 115 #else
 116         printf("Configure your NAND sub-system\n");
 117         return 0;
 118 #endif
 119
 120         if (mtdparts_init())
 121                 return 0;
 122
 123         ubi_mode = check_ubi_mode();
 124
 125         part_num = count_mtdparts();
 126         for (i = 0; i < part_num; i++) {
 127                 sprintf(part_name, "%s,%d", nand_name, i);
 128
 129                 if (find_dev_and_part(part_name, &dev, &out_partnum, &parts[i]))
 130                         return -EINVAL;
 131         }
 132
 133         return 0;
 134 }
 135
 136 static int get_part_id(char *name)
 137 {
 138         int nparts = count_mtdparts();
 139         int i;
 140
 141         for (i = 0; i < nparts; i++) {
 142                 if (strcmp(parts[i]->name, name) == 0)
 143                         return i;
 144         }
 145
 146         printf("Error: Unknown partition -> %s\n", name);
 147         return -1;
 148 }
 149 #else
 150 static int get_part_info(void)
 151 {
 152         printf("Error: Can't get patition information\n");
 153         return -EINVAL;
 154 }
 155
 156 static int get_part_id(char *name)
 157 {
 158         return 0;
 159 }
 160 #endif
 161
 162 static void boot_cmd(char *addr)
 163 {
 164         char *argv[] = { "bootm", addr };
 165         do_bootm(NULL, 0, 2, argv);
 166 }
 167
 168 static void run_cmd(char *cmd)
 169 {
 170         char *argv[] = { "run", cmd };
 171         do_run(NULL, 0, 2, argv);
 172 }
 173
 174 #if defined(CONFIG_CMD_NAND)
 175 extern int do_nand(cmd_tbl_t *cmdtp, int flag, int argc, char *argv[]);
 176 #elif defined(CONFIG_CMD_ONENAND)
 177 extern int do_onenand(cmd_tbl_t *cmdtp, int flag, int argc, char *argv[]);
 178 #endif
 179
 180 /* NAND erase and write using nand command */
 181 static int nand_cmd(int type, char *p1, char *p2, char *p3)
 182 {
 183         int ret = 1;
 184         char nand_name[12];
 185         int (*nand_func) (cmd_tbl_t *, int, int, char **);
 186
 187 #if defined(CONFIG_CMD_NAND)
 188         sprintf(nand_name, "nand");
 189         nand_func = do_nand;
 190 #elif defined(CONFIG_CMD_ONENAND)
 191         sprintf(nand_name, "onenand");
 192         nand_func = do_onenand;
 193 #else
 194         printf("Configure your NAND sub-system\n");
 195         return 0;
 196 #endif
 197
 198         if (type == 0) {
 199                 char *argv[] = {nand_name, "erase", p1, p2};
 200                 printf("%s %s %s %s\n", argv[0], argv[1], argv[2], argv[3]);
 201                 ret = nand_func(NULL, 0, 4, argv);
 202         } else if (type == 1) {
 203                 char *argv[] = {nand_name, "write", p1, p2, p3};
 204                 printf("%s %s %s %s %s\n", argv[0], argv[1], argv[2],
 205                                 argv[3], argv[4]);
 206                 ret = nand_func(NULL, 0, 5, argv);
 207         } else if (type == 2) {
 208                 char *argv[] = {nand_name, "write.yaffs", p1, p2, p3};
 209                 printf("%s %s %s %s %s\n", argv[0], argv[1], argv[2],
 210                                 argv[3], argv[4]);
 211                 ret = nand_func(NULL, 0, 5, argv);
 212         } else if (type == 3) {
 213                 char *argv[] = {nand_name, "lock", p1, p2};
 214                 printf("%s %s %s %s\n", argv[0], argv[1], argv[2], argv[3]);
 215                 ret = nand_func(NULL, 0, 4, argv);
 216         }
 217
 218         if (ret)
 219                 printf("Error: NAND Command\n");
 220
 221         return ret;
 222 }
 223
 224 #ifdef CONFIG_CMD_UBI
 225 int do_ubi(cmd_tbl_t *cmdtp, int flag, int argc, char *argv[]);
 226
 227 int ubi_cmd(int part, char *p1, char *p2, char *p3)
 228 {
 229         int ret = 1;
 230
 231         if (part == RAMDISK_PART_ID) {
 232                 char *argv[] = {"ubi", "write", p1, "rootfs.cramfs", p2, p3};
 233                 printf("%s %s %s %s %s %s\n", argv[0], argv[1], argv[2],
 234                                 argv[3], argv[4], argv[5]);
 235                 ret = do_ubi(NULL, 0, 6, argv);
 236         } else if (part == FILESYSTEM_PART_ID) {
 237                 char *argv[] = {"ubi", "write", p1, "factoryfs.cramfs", p2, p3};
 238                 printf("%s %s %s %s %s %s\n", argv[0], argv[1], argv[2],
 239                                 argv[3], argv[4], argv[5]);
 240                 ret = do_ubi(NULL, 0, 6, argv);
 241         } else if (part == FILESYSTEM2_PART_ID) {
 242                 char *argv[] = {"ubi", "write", p1, "datafs.ubifs", p2, p3};
 243                 printf("%s %s %s %s %s %s\n", argv[0], argv[1], argv[2],
 244                                 argv[3], argv[4], argv[5]);
 245                 ret = do_ubi(NULL, 0, 6, argv);
 246         }
 247
 248         return ret;
 249 }
 250 #endif
 251
 252 #ifdef CONFIG_CMD_MMC
 253 #include <fat.h>
 254
 255 extern int do_mmcops(cmd_tbl_t *cmdtp, int flag, int argc, char *argv[]);
 256
 257 static int mmc_cmd(int ops, char *p1, char *p2, char *p3)
 258 {
 259         int ret;
 260
 261         if (ops) {
 262                 char *argv[] = {"mmc", "write", "0", p1, p2, p3};
 263                 ret = do_mmcops(NULL, 0, 6, argv);
 264         } else {
 265                 char *argv[] = {"mmc", "read", "0", p1, p2, p3};
 266                 ret = do_mmcops(NULL, 0, 6, argv);
 267         }
 268
 269         return ret;
 270 }
 271
 272 #define NORMAL_PARTITION        0
 273 #define EXTEND_PARTITION        1
 274
 275 #define EXTEND_PART_TYPE        5
 276
 277 #define EXTEND_MAX_PART         32
 278
 279 static unsigned int cur_blk_offset;
 280 static unsigned int cur_part_size;
 281 static unsigned int cur_part;
 282
 283 static unsigned int mmc_parts;
 284 static unsigned int mmc_part_write;
 285
 286 static u8 part_mode = 0;
 287
 288 struct partition_info {
 289         u32 size;
 290         u32 checksum;
 291         u32 res;
 292 } __attribute__((packed));
 293
 294 struct partition_header {
 295         u8                      fat32head[16];  /* RFSHEAD identifier */
 296         struct partition_info   partition[EXTEND_MAX_PART];
 297         u8                      res[112];       /* only data (without MBR) */
 298 } __attribute__((packed));
 299
 300 struct mul_partition_info {
 301         u32 lba_begin;          /* absolute address from 0 block */
 302         u32 num_sectors;
 303 } __attribute__((packed));
 304
 305 #define MBR_OFFSET      0x10
 306
 307 struct partition_header part_info;
 308 struct mbr mbr_info;
 309 struct mul_partition_info mul_info[EXTEND_MAX_PART];
 310
 311 static int write_mmc_partition(struct usbd_ops *usbd, u32 *ram_addr, u32 len)
 312 {
 313         unsigned int blocks;
 314         char offset[12], length[12], ramaddr[12];
 315         int i;
 316         int loop;
 317         u32 cnt;
 318         int ret;
 319
 320         if (cur_part_size > len) {
 321                 blocks = len / usbd->mmc_blk;
 322                 ret = -1;
 323         } else {
 324                 blocks = cur_part_size / usbd->mmc_blk;
 325                 ret = len - cur_part_size;
 326         }
 327
 328         if (len % usbd->mmc_blk)
 329                 blocks++;
 330
 331         loop = blocks / usbd->mmc_max;
 332         if (blocks % usbd->mmc_max)
 333                 loop++;
 334
 335         for (i = 0; i < loop; i++) {
 336                 if (i == 0) {
 337                         cnt = blocks % usbd->mmc_max;
 338                         if (cnt == 0)
 339                                 cnt = usbd->mmc_max;
 340                 } else {
 341                         cnt = usbd->mmc_max;
 342                 }
 343
 344                 sprintf(length, "%x", cnt);
 345                 sprintf(offset, "%x", cur_blk_offset);
 346                 sprintf(ramaddr, "0x%x", *ram_addr);
 347                 mmc_cmd(OPS_WRITE, ramaddr, offset, length);
 348
 349                 cur_blk_offset += cnt;
 350
 351                 *ram_addr += (cnt * usbd->mmc_blk);
 352         }
 353
 354         return ret;
 355 }
 356
 357 static int write_file_mmc(struct usbd_ops *usbd, char *ramaddr, u32 len,
 358                 char *offset, char *length)
 359 {
 360         u32 ram_addr;
 361         int i;
 362         int ret;
 363         struct mbr *mbr;
 364
 365         if (!usbd->mmc_total) {
 366                 printf("MMC is not supported!\n");
 367                 return 0;
 368         }
 369
 370         ram_addr = (u32)down_ram_addr;
 371
 372         if (cur_blk_offset == 0) {
 373                 boot_sector *bs;
 374                 u32 mbr_blk_size;
 375
 376                 memcpy(&part_info, (void *)ram_addr,
 377                                 sizeof(struct partition_header));
 378
 379                 ram_addr += sizeof(struct partition_header);
 380                 len -= sizeof(struct partition_header);
 381                 mbr = (struct mbr *)ram_addr;
 382                 mbr_blk_size = mbr->parts[0].lba;
 383
 384                 if (mbr->parts[0].partition_type != EXTEND_PART_TYPE) {
 385                         part_mode = NORMAL_PARTITION;
 386
 387                         /* modify sectors of p1 */
 388                         mbr->parts[0].nsectors = usbd->mmc_total -
 389                                         (mbr_blk_size +
 390                                         mbr->parts[1].nsectors +
 391                                         mbr->parts[2].nsectors +
 392                                         mbr->parts[3].nsectors);
 393
 394                         mmc_parts++;
 395
 396                         /* modify lba_begin of p2 and p3 and p4 */
 397                         for (i = 1; i < 4; i++) {
 398                                 if (part_info.partition[i].size == 0)
 399                                         break;
 400
 401                                 mmc_parts++;
 402                                 mbr->parts[i].lba =
 403                                         mbr->parts[i - 1].lba +
 404                                         mbr->parts[i - 1].nsectors;
 405                         }
 406
 407                         /* copy MBR */
 408                         memcpy(&mbr_info, mbr, sizeof(struct mbr));
 409
 410                         printf("Total Size: 0x%08x #parts %d\n",
 411                                         (unsigned int)usbd->mmc_total,
 412                                         mmc_parts);
 413                         for (i = 0; i < mmc_parts; i++) {
 414                                 printf("p%d\t0x%08x\t0x%08x\n", i + 1,
 415                                         mbr_info.parts[i].lba,
 416                                         mbr_info.parts[i].nsectors);
 417                         }
 418
 419                         /* write MBR */
 420                         sprintf(length, "%x", mbr_blk_size);
 421                         sprintf(offset, "%x", 0);
 422                         sprintf(ramaddr, "0x%x", (u32)ram_addr);
 423                         ret = mmc_cmd(OPS_WRITE, ramaddr, offset, length);
 424
 425                         ram_addr += mbr_blk_size * usbd->mmc_blk;
 426                         len -= mbr_blk_size * usbd->mmc_blk;
 427
 428                         cur_blk_offset = mbr_blk_size;
 429                         cur_part = 0;
 430                         cur_part_size = part_info.partition[0].size;
 431
 432                         /* modify p1's total sector */
 433                         bs = (boot_sector *)ram_addr;
 434                         bs->total_sect = mbr_info.parts[0].nsectors;
 435
 436                         printf("\nWrite Partition %d.. %d blocks\n",
 437                                 cur_part + 1,
 438                                 part_info.partition[cur_part].size /
 439                                 (int)usbd->mmc_blk);
 440                 } else {
 441                         part_mode = EXTEND_PARTITION;
 442
 443                         for (i = 0; i < EXTEND_MAX_PART; i++) {
 444                                 if (part_info.partition[i].size == 0)
 445                                         break;
 446                                 mmc_parts++;
 447                         }
 448
 449                         if (mmc_parts == 0)
 450                                 return -1;
 451                         else
 452                                 printf("found %d partitions\n", mmc_parts);
 453
 454                         /* build partition table */
 455
 456                         mul_info[0].num_sectors =
 457                                 usbd->mmc_total - mbr_blk_size;
 458                         for (i = 1; i < mmc_parts; i++) {
 459                                 mul_info[i].num_sectors =
 460                                         part_info.partition[i].res +
 461                                         mbr_blk_size; /* add MBR */
 462                         }
 463
 464                         for (i = 1; i < mmc_parts; i++) {
 465                                 mul_info[0].num_sectors -=
 466                                         mul_info[i].num_sectors;
 467                         }
 468
 469                         mul_info[0].lba_begin = mbr_blk_size;
 470                         for (i = 1; i < mmc_parts; i++) {
 471                                 mul_info[i].lba_begin =
 472                                         mul_info[i-1].lba_begin +
 473                                         mul_info[i-1].num_sectors;
 474                         }
 475
 476                         /* modify MBR of extended partition: p1 */
 477                         mbr->parts[0].nsectors =
 478                                 usbd->mmc_total - mbr_blk_size;
 479
 480                         /* modify MBR of first logical partition: p5 */
 481                         mbr = (struct mbr *)
 482                                 (ram_addr + mbr_blk_size * usbd->mmc_blk);
 483
 484                         mbr->parts[0].nsectors =
 485                                 mul_info[0].num_sectors - mbr_blk_size;
 486                         mbr->parts[1].lba=
 487                                 mul_info[1].lba_begin - mbr_blk_size;
 488
 489                         /* modify BPB data of p5 */
 490                         bs = (boot_sector *)
 491                                 ((u32)mbr + mbr_blk_size * usbd->mmc_blk);
 492                         memset(&bs->sectors, 0, 2);
 493                         bs->total_sect = mbr->parts[0].nsectors;
 494
 495                         printf("Total Size: 0x%08x #parts %d\n",
 496                                         (unsigned int)usbd->mmc_total,
 497                                         mmc_parts);
 498                         for (i = 0; i < mmc_parts; i++) {
 499                                 printf("p%d\t0x%08x\t0x%08x\n", i + 1,
 500                                         mul_info[i].lba_begin,
 501                                         mul_info[i].num_sectors);
 502                         }
 503
 504                         cur_blk_offset = 0;
 505                         cur_part = 0;
 506                         cur_part_size = part_info.partition[0].size;
 507
 508                         printf("\nWrite Partition %d.. %d blocks\n",
 509                                 cur_part + 1,
 510                                 part_info.partition[cur_part].size /
 511                                 (int)usbd->mmc_blk);
 512                 }
 513         }
 514
 515         for (i = cur_part; i < mmc_parts; i++) {
 516                 ret = write_mmc_partition(usbd, &ram_addr, len);
 517
 518                 if (ret < 0) {
 519                         cur_part_size -= len;
 520                         break;
 521                 } else {
 522                         cur_part++;
 523                         cur_part_size =
 524                                 part_info.partition[cur_part].size;
 525
 526                         if (part_mode == NORMAL_PARTITION) {
 527                                 cur_blk_offset =
 528                                         mbr_info.parts[cur_part].lba;
 529                         } else {
 530                                 cur_blk_offset =
 531                                         mul_info[cur_part].lba_begin;
 532                                 /* modify MBR */
 533                                 if (cur_part < mmc_parts) {
 534                                         mbr = (struct mbr *)ram_addr;
 535                                         mbr->parts[1].lba=
 536                                                 mul_info[cur_part+1].lba_begin -
 537                                                 mbr->parts[0].lba;
 538                                 }
 539                         }
 540
 541                         if (ret == 0)
 542                                 break;
 543                         else
 544                                 len = ret;
 545
 546                         printf("\nWrite Partition %d.. %d blocks\n",
 547                                 cur_part + 1,
 548                                 part_info.partition[cur_part].size /
 549                                 (int)usbd->mmc_blk);
 550                 }
 551         }
 552
 553         return 0;
 554 }
 555
 556 static int write_file_mmc_part(struct usbd_ops *usbd, char *ramaddr, u32 len,
 557                 char *offset, char *length)
 558 {
 559         u32 ram_addr;
 560         u32 ofs;
 561         int i;
 562         struct mbr *mbr;
 563         u32 mbr_blk_size;
 564
 565         ram_addr = (u32)down_ram_addr;
 566         mbr = &mbr_info;
 567
 568         if (cur_blk_offset == 0) {
 569                 /* read MBR */
 570                 sprintf(length, "%x", (unsigned int)
 571                         (sizeof(struct mbr)/usbd->mmc_blk));
 572                 sprintf(offset, "%x", 0);
 573                 sprintf(ramaddr, "0x%x", (u32)mbr);
 574                 mmc_cmd(OPS_READ, ramaddr, offset, length);
 575
 576                 mbr_blk_size = mbr->parts[0].lba;
 577
 578                 if (mbr->parts[0].partition_type != EXTEND_PART_TYPE) {
 579                         part_mode = NORMAL_PARTITION;
 580
 581                         for (i = 0; i < 4; i++) {
 582                                 printf("p%d\t0x%08x\t0x%08x\n", i + 1,
 583                                         mbr_info.parts[i].lba,
 584                                         mbr_info.parts[i].nsectors);
 585                         }
 586
 587                         cur_blk_offset =
 588                                 mbr->parts[mmc_part_write - 1].lba;
 589                         cur_part = mmc_part_write - 1;
 590                         cur_part_size =
 591                                 usbd->mmc_blk *
 592                                 mbr->parts[mmc_part_write - 1].nsectors;
 593
 594                         if (mmc_part_write == 1) {
 595                                 ram_addr += sizeof(struct mbr);
 596                                 cur_blk_offset += sizeof(struct mbr) /
 597                                         usbd->mmc_blk;
 598                                 len -= sizeof(struct mbr);
 599                         }
 600                 } else {
 601                         part_mode = EXTEND_PARTITION;
 602
 603                         for (i = 1; i < mmc_part_write; i++) {
 604                                 ofs = mbr->parts[0].lba + mbr->parts[1].lba;
 605                                 printf("P%d start blk: 0x%x, size: 0x%x\n", i,
 606                                         ofs, mbr->parts[1].nsectors);
 607                                 sprintf(length, "%x", (unsigned int)
 608                                         (sizeof(struct mbr) /
 609                                         usbd->mmc_blk));
 610                                 sprintf(offset, "%x", ofs);
 611                                 sprintf(ramaddr, "0x%x", (u32)mbr);
 612                                 mmc_cmd(OPS_READ, ramaddr, offset, length);
 613                         }
 614
 615                         ofs = mbr->parts[0].lba + mbr->parts[1].lba;
 616                         printf("P%d start blk: 0x%x, size: 0x%x\n", i,
 617                                 ofs, mbr->parts[1].nsectors);
 618
 619                         ofs += mbr_blk_size; /* skip MBR */
 620                         cur_blk_offset = ofs;
 621                         cur_part = mmc_part_write - 1;
 622                         cur_part_size =
 623                                 usbd->mmc_blk *
 624                                 mbr->parts[1].nsectors;
 625
 626                         if (mmc_part_write == 1) {
 627                                 boot_sector *bs;
 628                                 u32 total_sect;
 629                                 /* modify BPB data of p1 */
 630                                 sprintf(length, "%x", (unsigned int)
 631                                         (sizeof(struct mbr) /
 632                                         usbd->mmc_blk));
 633                                 sprintf(offset, "%x", cur_blk_offset);
 634                                 sprintf(ramaddr, "0x%x", (u32)mbr);
 635                                 mmc_cmd(OPS_READ, ramaddr, offset, length);
 636
 637                                 bs = (boot_sector *)mbr;
 638                                 total_sect = bs->total_sect;
 639
 640                                 bs = (boot_sector *)ram_addr;
 641                                 memset(&bs->sectors, 0, 2);
 642                                 bs->total_sect = total_sect;
 643                         }
 644                 }
 645         }
 646
 647         printf("\nWrite Partition %d.. %d blocks\n",
 648                 cur_part + 1,
 649                 len / (int)usbd->mmc_blk);
 650
 651         write_mmc_partition(usbd, &ram_addr, len);
 652
 653         return 0;
 654 }
 655 #endif
 656
 657 static unsigned int mbr_offset[16];
 658 static int mbr_parts = 0;
 659
 660 static unsigned long memsize_parse (const char *const ptr, const char **retptr)
 661 {
 662         unsigned long ret = simple_strtoul(ptr, (char **)retptr, 0);
 663
 664         switch (**retptr) {
 665                 case 'G':
 666                 case 'g':
 667                         ret <<= 10;
 668                 case 'M':
 669                 case 'm':
 670                         ret <<= 10;
 671                 case 'K':
 672                 case 'k':
 673                         ret <<= 10;
 674                         (*retptr)++;
 675                 default:
 676                         break;
 677         }
 678
 679         return ret;
 680 }
 681
 682 static void set_mbr_info(struct usbd_ops *usbd, char *ramaddr, u32 len)
 683 {
 684         char mbr_str[256];
 685         char save[16][16];
 686         char *p;
 687         char *tok;
 688         unsigned int size[16];
 689         int i = 0;
 690
 691         strncpy(mbr_str, ramaddr, len);
 692         p = mbr_str;
 693
 694         for (i = 0; ; i++, p = NULL) {
 695                 tok = strtok(p, ",");
 696                 if (tok == NULL)
 697                         break;
 698                 strcpy(save[i], tok);
 699                 printf("part%d: %s\n", i, save[i]);
 700         }
 701
 702         mbr_parts = i;
 703         printf("find %d partitions\n", mbr_parts);
 704
 705         for (i = 0; i < mbr_parts; i++) {
 706                 p = save[i];
 707                 size[i] = memsize_parse(p, (const char **)&p) / 512;
 708         }
 709
 710         puts("save the MBR Table...\n");
 711         set_mbr_table(0x800, mbr_parts, size, mbr_offset);
 712 }
 713
 714 static int write_mmc_image(struct usbd_ops *usbd, char *ramaddr,
 715                 unsigned int len, char *offset, char *length, int part_num)
 716 {
 717         int ret = 0;
 718
 719         if (mbr_parts <= part_num) {
 720                 printf("Error: MBR table have %d partitions (request %d)\n",
 721                                 mbr_parts, part_num);
 722                 return 1;
 723         }
 724
 725         sprintf(offset, "0x%x", mbr_offset[part_num] + fs_offset);
 726         sprintf(length, "0x%x", len / usbd->mmc_blk);
 727
 728 #if 0
 729         /* modify size of UMS partition */
 730         if (part_num == 4 && fs_offset == 0) {
 731                 boot_sector *bs;
 732                 bs = (boot_sector *)down_ram_addr;
 733                 memset(&bs->sectors, 0, 2);
 734                 bs->total_sect = usbd->mmc_total - mbr_offset[part_num];
 735         }
 736 #endif
 737         ret = mmc_cmd(OPS_WRITE, ramaddr, offset, length);
 738
 739         fs_offset += (len / usbd->mmc_blk);
 740
 741         return ret;
 742 }
 743
 744 static int write_file_system(char *ramaddr, ulong len, char *offset,
 745                 char *length, int part_num, int ubi_update)
 746 {
 747 #ifdef CONFIG_USE_YAFFS
 748         int actual_len = 0;
 749         int yaffs_write = 0;
 750 #endif
 751         int ret = 0;
 752
 753 #ifdef CONFIG_CMD_UBI
 754         /* UBI Update */
 755         if (ubi_update) {
 756                 sprintf(length, "0x%x", (uint)len);
 757                 ret = ubi_cmd(part_id, ramaddr, length, "cont");
 758                 return ret;
 759         }
 760 #endif
 761
 762         /* Erase entire partition at the first writing */
 763         if (write_part == 0 && ubi_update == 0) {
 764                 sprintf(offset, "0x%x", (uint)parts[part_num]->offset);
 765                 sprintf(length, "0x%x", (uint)parts[part_num]->size);
 766                 nand_cmd(0, offset, length, NULL);
 767         }
 768
 769 #ifdef CONFIG_USE_YAFFS
 770         /* if using yaffs, wirte size must be 2112*X
 771          * so, must have to realloc, and writing */
 772         if (!strcmp("yaffs", getenv(parts[part_num]->name))) {
 773                 yaffs_write = 1;
 774
 775                 memcpy((void *)down_ram_addr, yaffs_data, yaffs_len);
 776
 777                 actual_len = len + yaffs_len;
 778                 yaffs_len = actual_len % YAFFS_PAGE;
 779                 len = actual_len - yaffs_len;
 780
 781                 memset(yaffs_data, 0x00, YAFFS_PAGE);
 782                 memcpy(yaffs_data, (char *)down_ram_addr + len, yaffs_len);
 783         }
 784 #endif
 785
 786         sprintf(offset, "0x%x", (uint)(parts[part_num]->offset + fs_offset));
 787         sprintf(length, "0x%x", (uint)len);
 788
 789 #ifdef CONFIG_USE_YAFFS
 790         if (yaffs_write)
 791                 ret = nand_cmd(2, ramaddr, offset, length);
 792         else
 793                 ret = nand_cmd(1, ramaddr, offset, length);
 794
 795         if (!strcmp("yaffs", getenv(parts[part_num]->name)))
 796                 fs_offset += len / YAFFS_PAGE * NAND_PAGE_SIZE;
 797         else
 798                 fs_offset += len;
 799
 800 #else
 801         fs_offset += len;
 802         ret = nand_cmd(1, ramaddr, offset, length);
 803 #endif
 804
 805         return ret;
 806 }
 807
 808 static int qboot_erase = 0;
 809
 810 /* Erase the qboot */
 811 static void erase_qboot_area(void)
 812 {
 813         char offset[12], length[12];
 814         int qboot_id;
 815
 816         if (qboot_erase)
 817                 return;
 818
 819         qboot_id = get_part_id("qboot");
 820
 821         if (qboot_id != -1) {
 822                 printf("\nCOMMAND_ERASE_QBOOT\n");
 823                 sprintf(offset, "%x", parts[qboot_id]->offset);
 824                 sprintf(length, "%x", parts[qboot_id]->size);
 825                 nand_cmd(0, offset, length, NULL);
 826                 qboot_erase = 1;
 827         }
 828 }
 829
 830 /* Parsing received data packet and Process data */
 831 static int process_data(struct usbd_ops *usbd)
 832 {
 833         unsigned int cmd = 0, arg = 0, ofs = 0, len = 0, flag = 0;
 834         char offset[12], length[12], ramaddr[12];
 835         int recvlen = 0;
 836         unsigned int blocks = 0;
 837         int ret = 0;
 838         int ubi_update = 0;
 839         int ubi_mode = 0;
 840         int img_type;
 841
 842         sprintf(ramaddr, "0x%x", (uint) down_ram_addr);
 843
 844         /* Parse command */
 845         cmd  = *((ulong *) usbd->rx_data + 0);
 846         arg  = *((ulong *) usbd->rx_data + 1);
 847         len  = *((ulong *) usbd->rx_data + 2);
 848         flag = *((ulong *) usbd->rx_data + 3);
 849
 850         /* Reset tx buffer */
 851         memset(usbd->tx_data, 0, sizeof(usbd->tx_data));
 852
 853         ubi_mode = check_ubi_mode();
 854
 855         switch (cmd) {
 856         case COMMAND_DOWNLOAD_IMAGE:
 857                 printf("\nCOMMAND_DOWNLOAD_IMAGE\n");
 858
 859 #ifdef CONFIG_USE_YAFFS
 860                 usbd->recv_setup((char *)down_ram_addr + yaffs_len, (int)len);
 861                 printf("Download to 0x%08x, %d bytes\n",
 862                                 (uint)down_ram_addr + yaffs_len, (int)len);
 863 #else
 864                 if (arg)
 865                         down_ram_addr = usbd->ram_addr + 0x1000000;
 866                 else
 867                         down_ram_addr = usbd->ram_addr;
 868
 869                 usbd->recv_setup((char *)down_ram_addr, (int)len);
 870                 printf("Download to 0x%08x, %d bytes\n",
 871                                 (uint)down_ram_addr, (int)len);
 872 #endif
 873                 /* response */
 874                 usbd->send_data(usbd->tx_data, usbd->tx_len);
 875
 876                 /* Receive image by using dma */
 877                 recvlen = usbd->recv_data();
 878                 if (recvlen < len) {
 879                         printf("Error: wrong image size -> %d/%d\n",
 880                                         (int)recvlen, (int)len);
 881
 882                         /* Retry this commad */
 883                         *((ulong *) usbd->tx_data) = STATUS_RETRY;
 884                 } else
 885                         *((ulong *) usbd->tx_data) = STATUS_DONE;
 886
 887                 usbd->send_data(usbd->tx_data, usbd->tx_len);
 888                 return 1;
 889
 890         /* Report partition info */
 891         case COMMAND_PARTITION_SYNC:
 892                 part_id = arg;
 893
 894 #ifdef CONFIG_CMD_UBI
 895                 if (ubi_mode) {
 896                         if (part_id == RAMDISK_PART_ID ||
 897                             part_id == FILESYSTEM_PART_ID ||
 898                             part_id == FILESYSTEM2_PART_ID) {
 899                                 /* change to yaffs style */
 900                                 get_part_info();
 901                         }
 902                 } else {
 903                         if (part_id == FILESYSTEM3_PART_ID) {
 904                                 /* change ubi style */
 905                                 get_part_info();
 906                         }
 907                 }
 908 #endif
 909
 910                 if (part_id == FILESYSTEM3_PART_ID)
 911                         part_id = get_part_id("UBI");
 912                 else if (part_id == MODEM_PART_ID)
 913                         part_id = get_part_id("modem");
 914                 else if (part_id == KERNEL_PART_ID)
 915                         part_id = get_part_id("kernel");
 916                 else if (part_id == BOOT_PART_ID)
 917                         part_id = get_part_id("bootloader");
 918 #ifdef CONFIG_MIRAGE
 919                 if (part_id)
 920                         part_id--;
 921 #endif
 922                 printf("COMMAND_PARTITION_SYNC - Part%d\n", part_id);
 923
 924                 blocks = parts[part_id]->size / 1024 / 128;
 925                 printf("COMMAND_PARTITION_SYNC - Part%d, %d blocks\n",
 926                                 part_id, blocks);
 927
 928                 *((ulong *) usbd->tx_data) = blocks;
 929                 usbd->send_data(usbd->tx_data, usbd->tx_len);
 930                 return 1;
 931
 932         case COMMAND_WRITE_PART_0:
 933                 /* Do nothing */
 934                 printf("COMMAND_WRITE_PART_0\n");
 935                 return 1;
 936
 937         case COMMAND_WRITE_PART_1:
 938                 printf("COMMAND_WRITE_PART_BOOT\n");
 939                 part_id = get_part_id("bootloader");
 940                 img_type = IMG_BOOT;
 941                 break;
 942
 943         case COMMAND_WRITE_PART_2:
 944         case COMMAND_ERASE_PARAMETER:
 945                 printf("COMMAND_PARAMETER - not support!\n");
 946                 break;
 947
 948         case COMMAND_WRITE_PART_3:
 949                 printf("COMMAND_WRITE_KERNEL\n");
 950                 part_id = get_part_id("kernel");
 951                 img_type = IMG_KERNEL;
 952                 break;
 953
 954         case COMMAND_WRITE_PART_4:
 955                 printf("COMMAND_WRITE_ROOTFS\n");
 956                 part_id = get_part_id("Root");
 957                 img_type = IMG_FILESYSTEM;
 958                 ubi_update = arg;
 959                 break;
 960
 961         case COMMAND_WRITE_PART_5:
 962                 printf("COMMAND_WRITE_FACTORYFS\n");
 963                 part_id = get_part_id("Fact");
 964                 img_type = IMG_FILESYSTEM;
 965                 ubi_update = arg;
 966                 break;
 967
 968         case COMMAND_WRITE_PART_6:
 969                 printf("COMMAND_WRITE_DATAFS\n");
 970                 part_id = get_part_id("Data");
 971                 img_type = IMG_FILESYSTEM;
 972                 ubi_update = arg;
 973                 break;
 974
 975         case COMMAND_WRITE_PART_7:
 976                 printf("COMMAND_WRITE_UBI\n");
 977                 part_id = get_part_id("UBI");
 978                 img_type = IMG_FILESYSTEM;
 979                 ubi_update = 0;
 980                 /* someday, it will be deleted */
 981                 get_part_info();
 982                 break;
 983
 984         case COMMAND_WRITE_PART_8:
 985                 printf("COMMAND_WRITE_MODEM\n");
 986                 part_id = get_part_id("modem");
 987                 img_type = IMG_MODEM;
 988                 break;
 989
 990 #ifdef CONFIG_CMD_MMC
 991         case COMMAND_WRITE_PART_9:
 992                 printf("COMMAND_WRITE_MMC\n");
 993                 img_type = IMG_MMC;
 994                 mmc_part_write = arg;
 995                 break;
 996 #endif
 997
 998         case COMMAND_WRITE_IMG_0:
 999                 printf("COMMAND_WRITE_MBR\n");
1000                 img_type = IMG_MBR;
1001                 break;
1002
1003         case COMMAND_WRITE_IMG_1:
1004                 printf("COMMAND_WRITE_BOOTLOADER\n");
1005                 img_type = IMG_BOOTLOADER;
1006                 break;
1007
1008         case COMMAND_WRITE_IMG_2:
1009                 printf("COMMAND_WRITE_KERNEL\n");
1010                 /* TODO: Not support yet, just return */
1011                 *((ulong *) usbd->tx_data) = STATUS_DONE;
1012                 usbd->send_data(usbd->tx_data, usbd->tx_len);
1013                 return 1;
1014
1015         case COMMAND_WRITE_IMG_3:
1016                 printf("COMMAND_WRITE_MODEM\n");
1017                 /* TODO: Not support yet, just return */
1018                 *((ulong *) usbd->tx_data) = STATUS_DONE;
1019                 usbd->send_data(usbd->tx_data, usbd->tx_len);
1020                 return 1;
1021
1022         case COMMAND_WRITE_IMG_4:
1023                 printf("COMMAND_WRITE_BOOT_PART\n");
1024                 part_id = 1;
1025                 img_type = IMG_V2;
1026                 break;
1027
1028         case COMMAND_WRITE_IMG_5:
1029                 printf("COMMAND_WRITE_SYSTEM_PART\n");
1030                 part_id = 2;
1031                 img_type = IMG_V2;
1032                 break;
1033
1034         case COMMAND_WRITE_IMG_6:
1035                 printf("COMMAND_WRITE_UMS_PART\n");
1036                 part_id = 4;
1037                 img_type = IMG_V2;
1038                 break;
1039
1040         case COMMAND_WRITE_UBI_INFO:
1041                 printf("COMMAND_WRITE_UBI_INFO\n");
1042
1043                 if (ubi_mode) {
1044 #ifdef CONFIG_CMD_UBI
1045                         part_id = arg-1;
1046                         sprintf(length, "0x%x", (uint)len);
1047                         ret = ubi_cmd(part_id, ramaddr, length, "begin");
1048                 } else {
1049 #endif
1050                         printf("Error: Not UBI mode\n");
1051                         ret = 1;
1052                 }
1053
1054                 *((ulong *) usbd->tx_data) = ret;
1055                 /* Write image success -> Report status */
1056                 usbd->send_data(usbd->tx_data, usbd->tx_len);
1057
1058                 return !ret;
1059         /* Download complete -> reset */
1060         case COMMAND_RESET_PDA:
1061                 printf("\nDownload finished and Auto reset!\nWait........\n");
1062
1063                 /* Stop USB */
1064                 usbd->usb_stop();
1065
1066                 if (usbd->cpu_reset)
1067                         usbd->cpu_reset();
1068                 else
1069                         do_reset();
1070
1071                 return 0;
1072
1073         /* Error */
1074         case COMMAND_RESET_USB:
1075                 printf("\nError is occured!(maybe previous step)->\
1076                                 Turn off and restart!\n");
1077
1078                 /* Stop USB */
1079                 usbd->usb_stop();
1080                 return 0;
1081
1082         case COMMAND_RAM_BOOT:
1083                 usbd->usb_stop();
1084                 boot_cmd(ramaddr);
1085                 return 0;
1086
1087         case COMMAND_RAMDISK_MODE:
1088                 printf("COMMAND_RAMDISK_MODE\n");
1089 #ifdef CONFIG_RAMDISK_ADDR
1090                 if (arg) {
1091                         down_ram_addr = usbd->ram_addr;
1092                 } else {
1093                         down_ram_addr = CONFIG_RAMDISK_ADDR;
1094                         run_cmd("ramboot");
1095                 }
1096 #endif
1097                 return 1;
1098
1099 #ifdef CONFIG_DOWN_PHONE
1100         case COMMAND_DOWN_PHONE:
1101                 printf("COMMAND_RESET_PHONE\n");
1102
1103                 usbd_phone_down();
1104
1105                 *((ulong *) usbd->tx_data) = STATUS_DONE;
1106                 usbd->send_data(usbd->tx_data, usbd->tx_len);
1107                 return 1;
1108
1109         case COMMAND_CHANGE_USB:
1110                 printf("COMMAND_CHANGE_USB\n");
1111
1112                 /* Stop USB */
1113                 usbd->usb_stop();
1114
1115                 usbd_path_change();
1116
1117                 do_reset();
1118                 return 0;
1119 #endif
1120         case COMMAND_CSA_CLEAR:
1121                 printf("COMMAND_CSA_CLEAR\n");
1122                 part_id = get_part_id("csa");
1123                 img_type = IMG_MODEM;
1124                 break;
1125
1126         case COMMAND_PROGRESS:
1127                 if (usbd->set_progress)
1128                         usbd->set_progress(arg);
1129                 return 1;
1130
1131         default:
1132                 printf("Error: Unknown command -> (%d)\n", (int)cmd);
1133                 return 1;
1134         }
1135
1136         /* Erase and Write to NAND */
1137         switch (img_type) {
1138         case IMG_BOOT:
1139                 ofs = parts[part_id]->offset;
1140 #ifdef CONFIG_S5PC1XX
1141                 /* Workaround: for prevent revision mismatch */
1142                 if (cpu_is_s5pc110() && (down_mode != MODE_FORCE)) {
1143                         int img_rev = 1;
1144                         long *img_header = (long *)down_ram_addr;
1145
1146                         if (*img_header == 0xea000012)
1147                                 img_rev = 0;
1148                         else if (*(img_header + 0x400) == 0xea000012)
1149                                 img_rev = 2;
1150
1151                         if (img_rev != s5p_get_cpu_rev()) {
1152                                 printf("CPU revision mismatch!\n"
1153                                         "bootloader is %s%s\n"
1154                                         "download image is %s%s\n",
1155                                         s5p_get_cpu_rev() ? "EVT1" : "EVT0",
1156                                         s5p_get_cpu_rev() == 2 ? "-Fused" : "",
1157                                         img_rev ? "EVT1" : "EVT0",
1158                                         img_rev == 2 ? "-Fused" : "");
1159                                 *((ulong *) usbd->tx_data) = STATUS_ERROR;
1160                                 usbd->send_data(usbd->tx_data, usbd->tx_len);
1161                                 return 0;
1162                         }
1163                 }
1164 #endif
1165 #ifdef CONFIG_SBOOT
1166                 /* Only u-boot.bin is allowed */
1167                 {
1168                         long *img_header = (long *)down_ram_addr;
1169
1170                         if (*img_header != 0xea000018) {
1171                                 printf("\n!!! ERROR !!!\n"
1172                                         "Please download the u-boot.bin.\n"
1173                                         "Other images are not allowed.\n\n");
1174                                 *((ulong *) usbd->tx_data) = STATUS_ERROR;
1175                                 usbd->send_data(usbd->tx_data, usbd->tx_len);
1176                                 return 0;
1177                         }
1178                 }
1179 #endif
1180 #if defined(CONFIG_ENV_IS_IN_NAND) || defined(CONFIG_ENV_IS_IN_ONENAND)
1181                 /* Erase the environment also when write bootloader */
1182                 {
1183                         int param_id;
1184                         param_id = get_part_id("params");
1185
1186                         if (param_id == -1) {
1187                                 sprintf(offset, "%x", CONFIG_ENV_ADDR);
1188                                 sprintf(length, "%x", CONFIG_ENV_SIZE);
1189                         } else {
1190                                 sprintf(offset, "%x", parts[param_id]->offset);
1191                                 sprintf(length, "%x", parts[param_id]->size);
1192                         }
1193                         nand_cmd(0, offset, length, NULL);
1194                 }
1195 #endif
1196                 sprintf(offset, "%x", (uint)ofs);
1197                 if (ofs != 0)
1198                         sprintf(length, "%x", parts[part_id]->size - (uint)ofs);
1199                 else
1200                         sprintf(length, "%x", parts[part_id]->size);
1201
1202                 /* Erase */
1203                 nand_cmd(0, offset, length, NULL);
1204                 /* Write */
1205                 sprintf(length, "%x", (unsigned int) len);
1206                 ret = nand_cmd(1, ramaddr, offset, length);
1207                 break;
1208
1209         case IMG_KERNEL:
1210                 sprintf(offset, "%x", parts[part_id]->offset);
1211                 sprintf(length, "%x", parts[part_id]->size);
1212
1213                 /* Erase */
1214                 nand_cmd(0, offset, length, NULL);
1215                 /* Write */
1216                 sprintf(length, "%x", (unsigned int) len);
1217                 ret = nand_cmd(1, ramaddr, offset, length);
1218
1219                 erase_qboot_area();
1220                 break;
1221
1222         /* File Systems */
1223         case IMG_FILESYSTEM:
1224                 ret = write_file_system(ramaddr, len, offset, length,
1225                                 part_id, ubi_update);
1226
1227                 erase_qboot_area();
1228                 break;
1229
1230         case IMG_MODEM:
1231                 sprintf(offset, "%x", parts[part_id]->offset);
1232                 sprintf(length, "%x", parts[part_id]->size);
1233
1234                 /* Erase */
1235                 if (!arg)
1236                         nand_cmd(0, offset, length, NULL);
1237                 else
1238                         printf("CSA Clear will be skipped temporary\n");
1239
1240                 /* Check ubi image, 0x23494255 is UBI# */
1241                 {
1242                         long *img_header = (long *)down_ram_addr;
1243
1244                         if (*img_header == 0x23494255)
1245                                 goto ubi_img;
1246                 }
1247
1248 #ifdef CONFIG_UBIFS_MK
1249                 void *dest_addr = (void *) down_ram_addr + 0xc00000;
1250                 void *src_addr = (void *) down_ram_addr;
1251                 int leb_size, max_leb_cnt, mkfs_min_io_size;
1252                 unsigned long ubifs_dest_size, ubi_dest_size;
1253 #ifdef CONFIG_S5PC110
1254                 mkfs_min_io_size = 4096;
1255                 leb_size = 248 * 1024;
1256                 max_leb_cnt = 4096;
1257 #elif CONFIG_S5PC210
1258                 mkfs_min_io_size = 2048;
1259                 leb_size = 126 * 1024;
1260                 max_leb_cnt = 4096;
1261 #endif
1262                 printf("Start making ubifs\n");
1263                 ret = mkfs(src_addr, len, dest_addr, &ubifs_dest_size,
1264                            mkfs_min_io_size, leb_size, max_leb_cnt);
1265                 if (ret) {
1266                         printf("Error : making ubifs failed\n");
1267                         goto out;
1268                 }
1269                 printf("Complete making ubifs\n");
1270 #endif
1271
1272 #ifdef CONFIG_UBINIZE
1273                 int peb_size, ubi_min_io_size, subpage_size, vid_hdr_offs;
1274 #ifdef CONFIG_S5PC110
1275                 ubi_min_io_size = 4096;
1276                 peb_size = 256 * 1024;
1277                 subpage_size = 4096;
1278                 vid_hdr_offs = 0;
1279 #elif CONFIG_S5PC210
1280                 ubi_min_io_size = 2048;
1281                 peb_size = 128 * 1024;
1282                 subpage_size = 512;
1283                 vid_hdr_offs = 512;
1284 #endif
1285                 printf("Start ubinizing\n");
1286                 ret = ubinize(dest_addr, ubifs_dest_size,
1287                               src_addr, &ubi_dest_size,
1288                               peb_size, ubi_min_io_size,
1289                               subpage_size, vid_hdr_offs);
1290                 if (ret) {
1291                         printf("Error : ubinizing failed\n");
1292                         goto out;
1293                 }
1294                 printf("Complete ubinizing\n");
1295
1296                 len = (unsigned int) ubi_dest_size;
1297 #endif
1298
1299 ubi_img:
1300                 /* Write : arg (0 Modem) / (1 CSA) */
1301                 if (!arg) {
1302                         sprintf(length, "%x", (unsigned int) len);
1303                         ret = nand_cmd(1, ramaddr, offset, length);
1304                 }
1305 out:
1306                 break;
1307
1308 #ifdef CONFIG_CMD_MMC
1309         case IMG_MMC:
1310
1311                 if (mmc_part_write)
1312                         ret = write_file_mmc_part(usbd, ramaddr,
1313                                                 len, offset, length);
1314                 else
1315                         ret = write_file_mmc(usbd, ramaddr,
1316                                                 len, offset, length);
1317
1318                 erase_qboot_area();
1319                 break;
1320 #endif
1321         case IMG_V2:
1322                 ret = write_mmc_image(usbd, ramaddr, len, offset, length, part_id);
1323                 break;
1324
1325         case IMG_MBR:
1326                 set_mbr_info(usbd, (char *)down_ram_addr, len);
1327                 break;
1328
1329         case IMG_BOOTLOADER:
1330                 sprintf(offset, "0x%x", CONFIG_BOOTLOADER_SECTOR);
1331                 sprintf(length, "0x%x", len / usbd->mmc_blk + 1);
1332                 ret = mmc_cmd(OPS_WRITE, ramaddr, offset, length);
1333                 break;
1334
1335         default:
1336                 /* Retry? */
1337                 write_part--;
1338         }
1339
1340         if (ret) {
1341                 /* Retry this commad */
1342                 *((ulong *) usbd->tx_data) = STATUS_RETRY;
1343                 usbd->send_data(usbd->tx_data, usbd->tx_len);
1344                 return 1;
1345         } else
1346                 *((ulong *) usbd->tx_data) = STATUS_DONE;
1347
1348         /* Write image success -> Report status */
1349         usbd->send_data(usbd->tx_data, usbd->tx_len);
1350
1351         write_part++;
1352
1353         /* Reset write count for another image */
1354         if (flag) {
1355                 write_part = 0;
1356                 fs_offset = 0;
1357 #ifdef CONFIG_USE_YAFFS
1358                 yaffs_len = 0;
1359 #endif
1360         }
1361
1362         return 1;
1363 }
1364
1365 static const char *recv_key = "SAMSUNG";
1366 static const char *tx_key = "MPL";
1367
1368 int do_usbd_down(cmd_tbl_t *cmdtp, int flag, int argc, char * const argv[])
1369 {
1370         struct usbd_ops *usbd;
1371         int err;
1372
1373         if (argc > 1)
1374                 down_mode = simple_strtoul(argv[1], NULL, 10);
1375         else
1376                 down_mode = MODE_NORMAL;
1377
1378         printf("USB Downloader v%s\n", APP_VERSION);
1379
1380         /* get partition info */
1381         err = get_part_info();
1382         if (err)
1383                 return err;
1384
1385         /* interface setting */
1386         usbd = usbd_set_interface(&usbd_ops);
1387         down_ram_addr = usbd->ram_addr;
1388
1389         /* get mbr info */
1390         mbr_parts = get_mbr_table(mbr_offset);
1391         if (!mbr_parts) {
1392                 char *mbrparts;
1393
1394                 puts("using default MBR\n");
1395
1396                 mbrparts = getenv("mbrparts");
1397                 set_mbr_info(usbd, mbrparts, strlen(mbrparts));
1398         }
1399
1400         /* init the usb controller */
1401         if (!usbd->usb_init()) {
1402                 usbd->down_cancel();
1403                 return 0;
1404         }
1405
1406         /* receive setting */
1407         usbd->recv_setup(usbd->rx_data, usbd->rx_len);
1408
1409         /* detect the download request from Host PC */
1410         if (usbd->recv_data()) {
1411                 if (strncmp(usbd->rx_data, recv_key, strlen(recv_key)) == 0) {
1412                         printf("Download request from the Host PC\n");
1413                         msleep(30);
1414
1415                         strcpy(usbd->tx_data, tx_key);
1416                         usbd->send_data(usbd->tx_data, usbd->tx_len);
1417                 } else {
1418                         printf("No download request from the Host PC!! 1\n");
1419                         return 0;
1420                 }
1421         } else {
1422                 usbd->down_cancel();
1423                 return 0;
1424         }
1425
1426         usbd->down_start();
1427         printf("Receive the packet\n");
1428
1429         /* receive the data from Host PC */
1430         while (1) {
1431                 usbd->recv_setup(usbd->rx_data, usbd->rx_len);
1432
1433                 if (usbd->recv_data()) {
1434                         if (process_data(usbd) == 0)
1435                                 return 0;
1436                 }
1437         }
1438
1439         return 0;
1440 }
1441
1442 U_BOOT_CMD(usbdown, CONFIG_SYS_MAXARGS, 1, do_usbd_down,
1443         "Initialize USB device and Run USB Downloader (specific)",
1444         "- normal mode\n"
1445         "usbdown mode - specific mode (0: NORAML, 1: FORCE)"
1446 );