net/tftp.c

   1 /*
   2  * Copyright 1994, 1995, 2000 Neil Russell.
   3  * (See License)
   4  * Copyright 2000, 2001 DENX Software Engineering, Wolfgang Denk, wd@denx.de
   5  * Copyright 2011 Comelit Group SpA,
   6  *                Luca Ceresoli <luca.ceresoli@comelit.it>
   7  */
   8 #include <common.h>
   9 #include <command.h>
  10 #include <efi_loader.h>
  11 #include <env.h>
  12 #include <image.h>
  13 #include <lmb.h>
  14 #include <log.h>
  15 #include <mapmem.h>
  16 #include <net.h>
  17 #include <net/tftp.h>
  18 #include "bootp.h"
  19 #ifdef CONFIG_SYS_DIRECT_FLASH_TFTP
  20 #include <flash.h>
  21 #endif
  22
  23 DECLARE_GLOBAL_DATA_PTR;
  24
  25 /* Well known TFTP port # */
  26 #define WELL_KNOWN_PORT 69
  27 /* Millisecs to timeout for lost pkt */
  28 #define TIMEOUT         5000UL
  29 #ifndef CONFIG_NET_RETRY_COUNT
  30 /* # of timeouts before giving up */
  31 # define TIMEOUT_COUNT  10
  32 #else
  33 # define TIMEOUT_COUNT  (CONFIG_NET_RETRY_COUNT * 2)
  34 #endif
  35 /* Number of "loading" hashes per line (for checking the image size) */
  36 #define HASHES_PER_LINE 65
  37
  38 /*
  39  *      TFTP operations.
  40  */
  41 #define TFTP_RRQ        1
  42 #define TFTP_WRQ        2
  43 #define TFTP_DATA       3
  44 #define TFTP_ACK        4
  45 #define TFTP_ERROR      5
  46 #define TFTP_OACK       6
  47
  48 static ulong timeout_ms = TIMEOUT;
  49 static int timeout_count_max = TIMEOUT_COUNT;
  50 static ulong time_start;   /* Record time we started tftp */
  51
  52 /*
  53  * These globals govern the timeout behavior when attempting a connection to a
  54  * TFTP server. tftp_timeout_ms specifies the number of milliseconds to
  55  * wait for the server to respond to initial connection. Second global,
  56  * tftp_timeout_count_max, gives the number of such connection retries.
  57  * tftp_timeout_count_max must be non-negative and tftp_timeout_ms must be
  58  * positive. The globals are meant to be set (and restored) by code needing
  59  * non-standard timeout behavior when initiating a TFTP transfer.
  60  */
  61 ulong tftp_timeout_ms = TIMEOUT;
  62 int tftp_timeout_count_max = TIMEOUT_COUNT;
  63
  64 enum {
  65         TFTP_ERR_UNDEFINED           = 0,
  66         TFTP_ERR_FILE_NOT_FOUND      = 1,
  67         TFTP_ERR_ACCESS_DENIED       = 2,
  68         TFTP_ERR_DISK_FULL           = 3,
  69         TFTP_ERR_UNEXPECTED_OPCODE   = 4,
  70         TFTP_ERR_UNKNOWN_TRANSFER_ID  = 5,
  71         TFTP_ERR_FILE_ALREADY_EXISTS = 6,
  72         TFTP_ERR_OPTION_NEGOTIATION = 8,
  73 };
  74
  75 static struct in_addr tftp_remote_ip;
  76 /* The UDP port at their end */
  77 static int      tftp_remote_port;
  78 /* The UDP port at our end */
  79 static int      tftp_our_port;
  80 static int      timeout_count;
  81 /* packet sequence number */
  82 static ulong    tftp_cur_block;
  83 /* last packet sequence number received */
  84 static ulong    tftp_prev_block;
  85 /* count of sequence number wraparounds */
  86 static ulong    tftp_block_wrap;
  87 /* memory offset due to wrapping */
  88 static ulong    tftp_block_wrap_offset;
  89 static int      tftp_state;
  90 static ulong    tftp_load_addr;
  91 #ifdef CONFIG_LMB
  92 static ulong    tftp_load_size;
  93 #endif
  94 #ifdef CONFIG_TFTP_TSIZE
  95 /* The file size reported by the server */
  96 static int      tftp_tsize;
  97 /* The number of hashes we printed */
  98 static short    tftp_tsize_num_hash;
  99 #endif
 100 /* The window size negotiated */
 101 static ushort   tftp_windowsize;
 102 /* Next block to send ack to */
 103 static ushort   tftp_next_ack;
 104 /* Last nack block we send */
 105 static ushort   tftp_last_nack;
 106 #ifdef CONFIG_CMD_TFTPPUT
 107 /* 1 if writing, else 0 */
 108 static int      tftp_put_active;
 109 /* 1 if we have sent the last block */
 110 static int      tftp_put_final_block_sent;
 111 #else
 112 #define tftp_put_active 0
 113 #endif
 114
 115 #define STATE_SEND_RRQ  1
 116 #define STATE_DATA      2
 117 #define STATE_TOO_LARGE 3
 118 #define STATE_BAD_MAGIC 4
 119 #define STATE_OACK      5
 120 #define STATE_RECV_WRQ  6
 121 #define STATE_SEND_WRQ  7
 122 #define STATE_INVALID_OPTION    8
 123
 124 /* default TFTP block size */
 125 #define TFTP_BLOCK_SIZE         512
 126 /* sequence number is 16 bit */
 127 #define TFTP_SEQUENCE_SIZE      ((ulong)(1<<16))
 128
 129 #define DEFAULT_NAME_LEN        (8 + 4 + 1)
 130 static char default_filename[DEFAULT_NAME_LEN];
 131
 132 #ifndef CONFIG_TFTP_FILE_NAME_MAX_LEN
 133 #define MAX_LEN 128
 134 #else
 135 #define MAX_LEN CONFIG_TFTP_FILE_NAME_MAX_LEN
 136 #endif
 137
 138 static char tftp_filename[MAX_LEN];
 139
 140 /* 512 is poor choice for ethernet, MTU is typically 1500.
 141  * Minus eth.hdrs thats 1468.  Can get 2x better throughput with
 142  * almost-MTU block sizes.  At least try... fall back to 512 if need be.
 143  * (but those using CONFIG_IP_DEFRAG may want to set a larger block in cfg file)
 144  */
 145
 146 /* When windowsize is defined to 1,
 147  * tftp behaves the same way as it was
 148  * never declared
 149  */
 150 #ifdef CONFIG_TFTP_WINDOWSIZE
 151 #define TFTP_WINDOWSIZE CONFIG_TFTP_WINDOWSIZE
 152 #else
 153 #define TFTP_WINDOWSIZE 1
 154 #endif
 155
 156 static unsigned short tftp_block_size = TFTP_BLOCK_SIZE;
 157 static unsigned short tftp_block_size_option = CONFIG_TFTP_BLOCKSIZE;
 158 static unsigned short tftp_window_size_option = TFTP_WINDOWSIZE;
 159
 160 static inline int store_block(int block, uchar *src, unsigned int len)
 161 {
 162         ulong offset = block * tftp_block_size + tftp_block_wrap_offset -
 163                         tftp_block_size;
 164         ulong newsize = offset + len;
 165         ulong store_addr = tftp_load_addr + offset;
 166 #ifdef CONFIG_SYS_DIRECT_FLASH_TFTP
 167         int i, rc = 0;
 168
 169         for (i = 0; i < CONFIG_SYS_MAX_FLASH_BANKS; i++) {
 170                 /* start address in flash? */
 171                 if (flash_info[i].flash_id == FLASH_UNKNOWN)
 172                         continue;
 173                 if (store_addr >= flash_info[i].start[0]) {
 174                         rc = 1;
 175                         break;
 176                 }
 177         }
 178
 179         if (rc) { /* Flash is destination for this packet */
 180                 rc = flash_write((char *)src, store_addr, len);
 181                 if (rc) {
 182                         flash_perror(rc);
 183                         return rc;
 184                 }
 185         } else
 186 #endif /* CONFIG_SYS_DIRECT_FLASH_TFTP */
 187         {
 188                 void *ptr;
 189
 190 #ifdef CONFIG_LMB
 191                 ulong end_addr = tftp_load_addr + tftp_load_size;
 192
 193                 if (!end_addr)
 194                         end_addr = ULONG_MAX;
 195
 196                 if (store_addr < tftp_load_addr ||
 197                     store_addr + len > end_addr) {
 198                         puts("\nTFTP error: ");
 199                         puts("trying to overwrite reserved memory...\n");
 200                         return -1;
 201                 }
 202 #endif
 203                 ptr = map_sysmem(store_addr, len);
 204                 memcpy(ptr, src, len);
 205                 unmap_sysmem(ptr);
 206         }
 207
 208         if (net_boot_file_size < newsize)
 209                 net_boot_file_size = newsize;
 210
 211         return 0;
 212 }
 213
 214 /* Clear our state ready for a new transfer */
 215 static void new_transfer(void)
 216 {
 217         tftp_prev_block = 0;
 218         tftp_block_wrap = 0;
 219         tftp_block_wrap_offset = 0;
 220 #ifdef CONFIG_CMD_TFTPPUT
 221         tftp_put_final_block_sent = 0;
 222 #endif
 223 }
 224
 225 #ifdef CONFIG_CMD_TFTPPUT
 226 /**
 227  * Load the next block from memory to be sent over tftp.
 228  *
 229  * @param block Block number to send
 230  * @param dst   Destination buffer for data
 231  * @param len   Number of bytes in block (this one and every other)
 232  * @return number of bytes loaded
 233  */
 234 static int load_block(unsigned block, uchar *dst, unsigned len)
 235 {
 236         /* We may want to get the final block from the previous set */
 237         ulong offset = block * tftp_block_size + tftp_block_wrap_offset -
 238                        tftp_block_size;
 239         ulong tosend = len;
 240
 241         tosend = min(net_boot_file_size - offset, tosend);
 242         (void)memcpy(dst, (void *)(image_save_addr + offset), tosend);
 243         debug("%s: block=%u, offset=%lu, len=%u, tosend=%lu\n", __func__,
 244               block, offset, len, tosend);
 245         return tosend;
 246 }
 247 #endif
 248
 249 static void tftp_send(void);
 250 static void tftp_timeout_handler(void);
 251
 252 /**********************************************************************/
 253
 254 static void show_block_marker(void)
 255 {
 256         ulong pos;
 257
 258 #ifdef CONFIG_TFTP_TSIZE
 259         if (tftp_tsize) {
 260                 pos = tftp_cur_block * tftp_block_size +
 261                         tftp_block_wrap_offset;
 262                 if (pos > tftp_tsize)
 263                         pos = tftp_tsize;
 264
 265                 while (tftp_tsize_num_hash < pos * 50 / tftp_tsize) {
 266                         putc('#');
 267                         tftp_tsize_num_hash++;
 268                 }
 269         } else
 270 #endif
 271         {
 272                 pos = (tftp_cur_block - 1) +
 273                         (tftp_block_wrap * TFTP_SEQUENCE_SIZE);
 274                 if ((pos % 10) == 0)
 275                         putc('#');
 276                 else if (((pos + 1) % (10 * HASHES_PER_LINE)) == 0)
 277                         puts("\n\t ");
 278         }
 279 }
 280
 281 /**
 282  * restart the current transfer due to an error
 283  *
 284  * @param msg   Message to print for user
 285  */
 286 static void restart(const char *msg)
 287 {
 288         printf("\n%s; starting again\n", msg);
 289         net_start_again();
 290 }
 291
 292 /*
 293  * Check if the block number has wrapped, and update progress
 294  *
 295  * TODO: The egregious use of global variables in this file should be tidied.
 296  */
 297 static void update_block_number(void)
 298 {
 299         /*
 300          * RFC1350 specifies that the first data packet will
 301          * have sequence number 1. If we receive a sequence
 302          * number of 0 this means that there was a wrap
 303          * around of the (16 bit) counter.
 304          */
 305         if (tftp_cur_block == 0 && tftp_prev_block != 0) {
 306                 tftp_block_wrap++;
 307                 tftp_block_wrap_offset += tftp_block_size * TFTP_SEQUENCE_SIZE;
 308                 timeout_count = 0; /* we've done well, reset the timeout */
 309         }
 310         show_block_marker();
 311 }
 312
 313 /* The TFTP get or put is complete */
 314 static void tftp_complete(void)
 315 {
 316 #ifdef CONFIG_TFTP_TSIZE
 317         /* Print hash marks for the last packet received */
 318         while (tftp_tsize && tftp_tsize_num_hash < 49) {
 319                 putc('#');
 320                 tftp_tsize_num_hash++;
 321         }
 322         puts("  ");
 323         print_size(tftp_tsize, "");
 324 #endif
 325         time_start = get_timer(time_start);
 326         if (time_start > 0) {
 327                 puts("\n\t ");  /* Line up with "Loading: " */
 328                 print_size(net_boot_file_size /
 329                         time_start * 1000, "/s");
 330         }
 331         puts("\ndone\n");
 332         if (IS_ENABLED(CONFIG_CMD_BOOTEFI)) {
 333                 if (!tftp_put_active)
 334                         efi_set_bootdev("Net", "", tftp_filename,
 335                                         map_sysmem(tftp_load_addr, 0),
 336                                         net_boot_file_size);
 337         }
 338         net_set_state(NETLOOP_SUCCESS);
 339 }
 340
 341 static void tftp_send(void)
 342 {
 343         uchar *pkt;
 344         uchar *xp;
 345         int len = 0;
 346         ushort *s;
 347         bool err_pkt = false;
 348
 349         /*
 350          *      We will always be sending some sort of packet, so
 351          *      cobble together the packet headers now.
 352          */
 353         pkt = net_tx_packet + net_eth_hdr_size() + IP_UDP_HDR_SIZE;
 354
 355         switch (tftp_state) {
 356         case STATE_SEND_RRQ:
 357         case STATE_SEND_WRQ:
 358                 xp = pkt;
 359                 s = (ushort *)pkt;
 360 #ifdef CONFIG_CMD_TFTPPUT
 361                 *s++ = htons(tftp_state == STATE_SEND_RRQ ? TFTP_RRQ :
 362                         TFTP_WRQ);
 363 #else
 364                 *s++ = htons(TFTP_RRQ);
 365 #endif
 366                 pkt = (uchar *)s;
 367                 strcpy((char *)pkt, tftp_filename);
 368                 pkt += strlen(tftp_filename) + 1;
 369                 strcpy((char *)pkt, "octet");
 370                 pkt += 5 /*strlen("octet")*/ + 1;
 371                 strcpy((char *)pkt, "timeout");
 372                 pkt += 7 /*strlen("timeout")*/ + 1;
 373                 sprintf((char *)pkt, "%lu", timeout_ms / 1000);
 374                 debug("send option \"timeout %s\"\n", (char *)pkt);
 375                 pkt += strlen((char *)pkt) + 1;
 376 #ifdef CONFIG_TFTP_TSIZE
 377                 pkt += sprintf((char *)pkt, "tsize%c%u%c",
 378                                 0, net_boot_file_size, 0);
 379 #endif
 380                 /* try for more effic. blk size */
 381                 pkt += sprintf((char *)pkt, "blksize%c%d%c",
 382                                 0, tftp_block_size_option, 0);
 383
 384                 /* try for more effic. window size.
 385                  * Implemented only for tftp get.
 386                  * Don't bother sending if it's 1
 387                  */
 388                 if (tftp_state == STATE_SEND_RRQ && tftp_window_size_option > 1)
 389                         pkt += sprintf((char *)pkt, "windowsize%c%d%c",
 390                                         0, tftp_window_size_option, 0);
 391                 len = pkt - xp;
 392                 break;
 393
 394         case STATE_OACK:
 395
 396         case STATE_RECV_WRQ:
 397         case STATE_DATA:
 398                 xp = pkt;
 399                 s = (ushort *)pkt;
 400                 s[0] = htons(TFTP_ACK);
 401                 s[1] = htons(tftp_cur_block);
 402                 pkt = (uchar *)(s + 2);
 403 #ifdef CONFIG_CMD_TFTPPUT
 404                 if (tftp_put_active) {
 405                         int toload = tftp_block_size;
 406                         int loaded = load_block(tftp_cur_block, pkt, toload);
 407
 408                         s[0] = htons(TFTP_DATA);
 409                         pkt += loaded;
 410                         tftp_put_final_block_sent = (loaded < toload);
 411                 }
 412 #endif
 413                 len = pkt - xp;
 414                 break;
 415
 416         case STATE_TOO_LARGE:
 417                 xp = pkt;
 418                 s = (ushort *)pkt;
 419                 *s++ = htons(TFTP_ERROR);
 420                         *s++ = htons(3);
 421
 422                 pkt = (uchar *)s;
 423                 strcpy((char *)pkt, "File too large");
 424                 pkt += 14 /*strlen("File too large")*/ + 1;
 425                 len = pkt - xp;
 426                 err_pkt = true;
 427                 break;
 428
 429         case STATE_BAD_MAGIC:
 430                 xp = pkt;
 431                 s = (ushort *)pkt;
 432                 *s++ = htons(TFTP_ERROR);
 433                 *s++ = htons(2);
 434                 pkt = (uchar *)s;
 435                 strcpy((char *)pkt, "File has bad magic");
 436                 pkt += 18 /*strlen("File has bad magic")*/ + 1;
 437                 len = pkt - xp;
 438                 err_pkt = true;
 439                 break;
 440
 441         case STATE_INVALID_OPTION:
 442                 xp = pkt;
 443                 s = (ushort *)pkt;
 444                 *s++ = htons(TFTP_ERROR);
 445                 *s++ = htons(TFTP_ERR_OPTION_NEGOTIATION);
 446                 pkt = (uchar *)s;
 447                 strcpy((char *)pkt, "Option Negotiation Failed");
 448                 /* strlen("Option Negotiation Failed") + NULL*/
 449                 pkt += 25 + 1;
 450                 len = pkt - xp;
 451                 err_pkt = true;
 452                 break;
 453         }
 454
 455         net_send_udp_packet(net_server_ethaddr, tftp_remote_ip,
 456                             tftp_remote_port, tftp_our_port, len);
 457
 458         if (err_pkt)
 459                 net_set_state(NETLOOP_FAIL);
 460 }
 461
 462 #ifdef CONFIG_CMD_TFTPPUT
 463 static void icmp_handler(unsigned type, unsigned code, unsigned dest,
 464                          struct in_addr sip, unsigned src, uchar *pkt,
 465                          unsigned len)
 466 {
 467         if (type == ICMP_NOT_REACH && code == ICMP_NOT_REACH_PORT) {
 468                 /* Oh dear the other end has gone away */
 469                 restart("TFTP server died");
 470         }
 471 }
 472 #endif
 473
 474 static void tftp_handler(uchar *pkt, unsigned dest, struct in_addr sip,
 475                          unsigned src, unsigned len)
 476 {
 477         __be16 proto;
 478         __be16 *s;
 479         int i;
 480         u16 timeout_val_rcvd;
 481
 482         if (dest != tftp_our_port) {
 483                         return;
 484         }
 485         if (tftp_state != STATE_SEND_RRQ && src != tftp_remote_port &&
 486             tftp_state != STATE_RECV_WRQ && tftp_state != STATE_SEND_WRQ)
 487                 return;
 488
 489         if (len < 2)
 490                 return;
 491         len -= 2;
 492         /* warning: don't use increment (++) in ntohs() macros!! */
 493         s = (__be16 *)pkt;
 494         proto = *s++;
 495         pkt = (uchar *)s;
 496         switch (ntohs(proto)) {
 497         case TFTP_RRQ:
 498                 break;
 499
 500         case TFTP_ACK:
 501 #ifdef CONFIG_CMD_TFTPPUT
 502                 if (tftp_put_active) {
 503                         if (tftp_put_final_block_sent) {
 504                                 tftp_complete();
 505                         } else {
 506                                 /*
 507                                  * Move to the next block. We want our block
 508                                  * count to wrap just like the other end!
 509                                  */
 510                                 int block = ntohs(*s);
 511                                 int ack_ok = (tftp_cur_block == block);
 512
 513                                 tftp_prev_block = tftp_cur_block;
 514                                 tftp_cur_block = (unsigned short)(block + 1);
 515                                 update_block_number();
 516                                 if (ack_ok)
 517                                         tftp_send(); /* Send next data block */
 518                         }
 519                 }
 520 #endif
 521                 break;
 522
 523         default:
 524                 break;
 525
 526 #ifdef CONFIG_CMD_TFTPSRV
 527         case TFTP_WRQ:
 528                 debug("Got WRQ\n");
 529                 tftp_remote_ip = sip;
 530                 tftp_remote_port = src;
 531                 tftp_our_port = 1024 + (get_timer(0) % 3072);
 532                 new_transfer();
 533                 tftp_send(); /* Send ACK(0) */
 534                 break;
 535 #endif
 536
 537         case TFTP_OACK:
 538                 debug("Got OACK: ");
 539                 for (i = 0; i < len; i++) {
 540                         if (pkt[i] == '\0')
 541                                 debug(" ");
 542                         else
 543                                 debug("%c", pkt[i]);
 544                 }
 545                 debug("\n");
 546                 tftp_state = STATE_OACK;
 547                 tftp_remote_port = src;
 548                 /*
 549                  * Check for 'blksize' option.
 550                  * Careful: "i" is signed, "len" is unsigned, thus
 551                  * something like "len-8" may give a *huge* number
 552                  */
 553                 for (i = 0; i+8 < len; i++) {
 554                         if (strcasecmp((char *)pkt + i, "blksize") == 0) {
 555                                 tftp_block_size = (unsigned short)
 556                                         simple_strtoul((char *)pkt + i + 8,
 557                                                        NULL, 10);
 558                                 debug("Blocksize oack: %s, %d\n",
 559                                       (char *)pkt + i + 8, tftp_block_size);
 560                                 if (tftp_block_size > tftp_block_size_option) {
 561                                         printf("Invalid blk size(=%d)\n",
 562                                                tftp_block_size);
 563                                         tftp_state = STATE_INVALID_OPTION;
 564                                 }
 565                         }
 566                         if (strcasecmp((char *)pkt + i, "timeout") == 0) {
 567                                 timeout_val_rcvd = (unsigned short)
 568                                         simple_strtoul((char *)pkt + i + 8,
 569                                                        NULL, 10);
 570                                 debug("Timeout oack: %s, %d\n",
 571                                       (char *)pkt + i + 8, timeout_val_rcvd);
 572                                 if (timeout_val_rcvd != (timeout_ms / 1000)) {
 573                                         printf("Invalid timeout val(=%d s)\n",
 574                                                timeout_val_rcvd);
 575                                         tftp_state = STATE_INVALID_OPTION;
 576                                 }
 577                         }
 578 #ifdef CONFIG_TFTP_TSIZE
 579                         if (strcasecmp((char *)pkt + i, "tsize") == 0) {
 580                                 tftp_tsize = simple_strtoul((char *)pkt + i + 6,
 581                                                            NULL, 10);
 582                                 debug("size = %s, %d\n",
 583                                       (char *)pkt + i + 6, tftp_tsize);
 584                         }
 585 #endif
 586                         if (strcasecmp((char *)pkt + i,  "windowsize") == 0) {
 587                                 tftp_windowsize =
 588                                         simple_strtoul((char *)pkt + i + 11,
 589                                                        NULL, 10);
 590                                 debug("windowsize = %s, %d\n",
 591                                       (char *)pkt + i + 11, tftp_windowsize);
 592                         }
 593                 }
 594
 595                 tftp_next_ack = tftp_windowsize;
 596
 597 #ifdef CONFIG_CMD_TFTPPUT
 598                 if (tftp_put_active && tftp_state == STATE_OACK) {
 599                         /* Get ready to send the first block */
 600                         tftp_state = STATE_DATA;
 601                         tftp_cur_block++;
 602                 }
 603 #endif
 604                 tftp_send(); /* Send ACK or first data block */
 605                 break;
 606         case TFTP_DATA:
 607                 if (len < 2)
 608                         return;
 609                 len -= 2;
 610
 611                 if (ntohs(*(__be16 *)pkt) != (ushort)(tftp_cur_block + 1)) {
 612                         debug("Received unexpected block: %d, expected: %d\n",
 613                               ntohs(*(__be16 *)pkt),
 614                               (ushort)(tftp_cur_block + 1));
 615                         /*
 616                          * If one packet is dropped most likely
 617                          * all other buffers in the window
 618                          * that will arrive will cause a sending NACK.
 619                          * This just overwellms the server, let's just send one.
 620                          */
 621                         if (tftp_last_nack != tftp_cur_block) {
 622                                 tftp_send();
 623                                 tftp_last_nack = tftp_cur_block;
 624                                 tftp_next_ack = (ushort)(tftp_cur_block +
 625                                                          tftp_windowsize);
 626                         }
 627                         break;
 628                 }
 629
 630                 tftp_cur_block++;
 631                 tftp_cur_block %= TFTP_SEQUENCE_SIZE;
 632
 633                 if (tftp_state == STATE_SEND_RRQ) {
 634                         debug("Server did not acknowledge any options!\n");
 635                         tftp_next_ack = tftp_windowsize;
 636                 }
 637
 638                 if (tftp_state == STATE_SEND_RRQ || tftp_state == STATE_OACK ||
 639                     tftp_state == STATE_RECV_WRQ) {
 640                         /* first block received */
 641                         tftp_state = STATE_DATA;
 642                         tftp_remote_port = src;
 643                         new_transfer();
 644
 645                         if (tftp_cur_block != 1) {      /* Assertion */
 646                                 puts("\nTFTP error: ");
 647                                 printf("First block is not block 1 (%ld)\n",
 648                                        tftp_cur_block);
 649                                 puts("Starting again\n\n");
 650                                 net_start_again();
 651                                 break;
 652                         }
 653                 }
 654
 655                 if (tftp_cur_block == tftp_prev_block) {
 656                         /* Same block again; ignore it. */
 657                         break;
 658                 }
 659
 660                 update_block_number();
 661                 tftp_prev_block = tftp_cur_block;
 662                 timeout_count_max = tftp_timeout_count_max;
 663                 net_set_timeout_handler(timeout_ms, tftp_timeout_handler);
 664
 665                 if (store_block(tftp_cur_block, pkt + 2, len)) {
 666                         eth_halt();
 667                         net_set_state(NETLOOP_FAIL);
 668                         break;
 669                 }
 670
 671                 /*
 672                  *      Acknowledge the block just received, which will prompt
 673                  *      the remote for the next one.
 674                  */
 675                 if (tftp_cur_block == tftp_next_ack) {
 676                         tftp_send();
 677                         tftp_next_ack += tftp_windowsize;
 678                 }
 679
 680                 if (len < tftp_block_size) {
 681                         tftp_send();
 682                         tftp_complete();
 683                 }
 684                 break;
 685
 686         case TFTP_ERROR:
 687                 printf("\nTFTP error: '%s' (%d)\n",
 688                        pkt + 2, ntohs(*(__be16 *)pkt));
 689
 690                 switch (ntohs(*(__be16 *)pkt)) {
 691                 case TFTP_ERR_FILE_NOT_FOUND:
 692                 case TFTP_ERR_ACCESS_DENIED:
 693                         puts("Not retrying...\n");
 694                         eth_halt();
 695                         net_set_state(NETLOOP_FAIL);
 696                         break;
 697                 case TFTP_ERR_UNDEFINED:
 698                 case TFTP_ERR_DISK_FULL:
 699                 case TFTP_ERR_UNEXPECTED_OPCODE:
 700                 case TFTP_ERR_UNKNOWN_TRANSFER_ID:
 701                 case TFTP_ERR_FILE_ALREADY_EXISTS:
 702                 default:
 703                         puts("Starting again\n\n");
 704                         net_start_again();
 705                         break;
 706                 }
 707                 break;
 708         }
 709 }
 710
 711
 712 static void tftp_timeout_handler(void)
 713 {
 714         if (++timeout_count > timeout_count_max) {
 715                 restart("Retry count exceeded");
 716         } else {
 717                 puts("T ");
 718                 net_set_timeout_handler(timeout_ms, tftp_timeout_handler);
 719                 if (tftp_state != STATE_RECV_WRQ)
 720                         tftp_send();
 721         }
 722 }
 723
 724 /* Initialize tftp_load_addr and tftp_load_size from image_load_addr and lmb */
 725 static int tftp_init_load_addr(void)
 726 {
 727 #ifdef CONFIG_LMB
 728         struct lmb lmb;
 729         phys_size_t max_size;
 730
 731         lmb_init_and_reserve(&lmb, gd->bd, (void *)gd->fdt_blob);
 732
 733         max_size = lmb_get_free_size(&lmb, image_load_addr);
 734         if (!max_size)
 735                 return -1;
 736
 737         tftp_load_size = max_size;
 738 #endif
 739         tftp_load_addr = image_load_addr;
 740         return 0;
 741 }
 742
 743 void tftp_start(enum proto_t protocol)
 744 {
 745 #if CONFIG_NET_TFTP_VARS
 746         char *ep;             /* Environment pointer */
 747
 748         /*
 749          * Allow the user to choose TFTP blocksize and timeout.
 750          * TFTP protocol has a minimal timeout of 1 second.
 751          */
 752
 753         ep = env_get("tftpblocksize");
 754         if (ep != NULL)
 755                 tftp_block_size_option = simple_strtol(ep, NULL, 10);
 756
 757         ep = env_get("tftpwindowsize");
 758         if (ep != NULL)
 759                 tftp_window_size_option = simple_strtol(ep, NULL, 10);
 760
 761         ep = env_get("tftptimeout");
 762         if (ep != NULL)
 763                 timeout_ms = simple_strtol(ep, NULL, 10);
 764
 765         if (timeout_ms < 1000) {
 766                 printf("TFTP timeout (%ld ms) too low, set min = 1000 ms\n",
 767                        timeout_ms);
 768                 timeout_ms = 1000;
 769         }
 770
 771         ep = env_get("tftptimeoutcountmax");
 772         if (ep != NULL)
 773                 tftp_timeout_count_max = simple_strtol(ep, NULL, 10);
 774
 775         if (tftp_timeout_count_max < 0) {
 776                 printf("TFTP timeout count max (%d ms) negative, set to 0\n",
 777                        tftp_timeout_count_max);
 778                 tftp_timeout_count_max = 0;
 779         }
 780 #endif
 781
 782         debug("TFTP blocksize = %i, TFTP windowsize = %d timeout = %ld ms\n",
 783               tftp_block_size_option, tftp_window_size_option, timeout_ms);
 784
 785         tftp_remote_ip = net_server_ip;
 786         if (!net_parse_bootfile(&tftp_remote_ip, tftp_filename, MAX_LEN)) {
 787                 sprintf(default_filename, "%02X%02X%02X%02X.img",
 788                         net_ip.s_addr & 0xFF,
 789                         (net_ip.s_addr >>  8) & 0xFF,
 790                         (net_ip.s_addr >> 16) & 0xFF,
 791                         (net_ip.s_addr >> 24) & 0xFF);
 792
 793                 strncpy(tftp_filename, default_filename, DEFAULT_NAME_LEN);
 794                 tftp_filename[DEFAULT_NAME_LEN - 1] = 0;
 795
 796                 printf("*** Warning: no boot file name; using '%s'\n",
 797                        tftp_filename);
 798         }
 799
 800         printf("Using %s device\n", eth_get_name());
 801         printf("TFTP %s server %pI4; our IP address is %pI4",
 802 #ifdef CONFIG_CMD_TFTPPUT
 803                protocol == TFTPPUT ? "to" : "from",
 804 #else
 805                "from",
 806 #endif
 807                &tftp_remote_ip, &net_ip);
 808
 809         /* Check if we need to send across this subnet */
 810         if (net_gateway.s_addr && net_netmask.s_addr) {
 811                 struct in_addr our_net;
 812                 struct in_addr remote_net;
 813
 814                 our_net.s_addr = net_ip.s_addr & net_netmask.s_addr;
 815                 remote_net.s_addr = tftp_remote_ip.s_addr & net_netmask.s_addr;
 816                 if (our_net.s_addr != remote_net.s_addr)
 817                         printf("; sending through gateway %pI4", &net_gateway);
 818         }
 819         putc('\n');
 820
 821         printf("Filename '%s'.", tftp_filename);
 822
 823         if (net_boot_file_expected_size_in_blocks) {
 824                 printf(" Size is 0x%x Bytes = ",
 825                        net_boot_file_expected_size_in_blocks << 9);
 826                 print_size(net_boot_file_expected_size_in_blocks << 9, "");
 827         }
 828
 829         putc('\n');
 830 #ifdef CONFIG_CMD_TFTPPUT
 831         tftp_put_active = (protocol == TFTPPUT);
 832         if (tftp_put_active) {
 833                 printf("Save address: 0x%lx\n", image_save_addr);
 834                 printf("Save size:    0x%lx\n", image_save_size);
 835                 net_boot_file_size = image_save_size;
 836                 puts("Saving: *\b");
 837                 tftp_state = STATE_SEND_WRQ;
 838                 new_transfer();
 839         } else
 840 #endif
 841         {
 842                 if (tftp_init_load_addr()) {
 843                         eth_halt();
 844                         net_set_state(NETLOOP_FAIL);
 845                         puts("\nTFTP error: ");
 846                         puts("trying to overwrite reserved memory...\n");
 847                         return;
 848                 }
 849                 printf("Load address: 0x%lx\n", tftp_load_addr);
 850                 puts("Loading: *\b");
 851                 tftp_state = STATE_SEND_RRQ;
 852         }
 853
 854         time_start = get_timer(0);
 855         timeout_count_max = tftp_timeout_count_max;
 856
 857         net_set_timeout_handler(timeout_ms, tftp_timeout_handler);
 858         net_set_udp_handler(tftp_handler);
 859 #ifdef CONFIG_CMD_TFTPPUT
 860         net_set_icmp_handler(icmp_handler);
 861 #endif
 862         tftp_remote_port = WELL_KNOWN_PORT;
 863         timeout_count = 0;
 864         /* Use a pseudo-random port unless a specific port is set */
 865         tftp_our_port = 1024 + (get_timer(0) % 3072);
 866
 867 #ifdef CONFIG_TFTP_PORT
 868         ep = env_get("tftpdstp");
 869         if (ep != NULL)
 870                 tftp_remote_port = simple_strtol(ep, NULL, 10);
 871         ep = env_get("tftpsrcp");
 872         if (ep != NULL)
 873                 tftp_our_port = simple_strtol(ep, NULL, 10);
 874 #endif
 875         tftp_cur_block = 0;
 876         tftp_windowsize = 1;
 877         tftp_last_nack = 0;
 878         /* zero out server ether in case the server ip has changed */
 879         memset(net_server_ethaddr, 0, 6);
 880         /* Revert tftp_block_size to dflt */
 881         tftp_block_size = TFTP_BLOCK_SIZE;
 882 #ifdef CONFIG_TFTP_TSIZE
 883         tftp_tsize = 0;
 884         tftp_tsize_num_hash = 0;
 885 #endif
 886
 887         tftp_send();
 888 }
 889
 890 #ifdef CONFIG_CMD_TFTPSRV
 891 void tftp_start_server(void)
 892 {
 893         tftp_filename[0] = 0;
 894
 895         if (tftp_init_load_addr()) {
 896                 eth_halt();
 897                 net_set_state(NETLOOP_FAIL);
 898                 puts("\nTFTP error: trying to overwrite reserved memory...\n");
 899                 return;
 900         }
 901         printf("Using %s device\n", eth_get_name());
 902         printf("Listening for TFTP transfer on %pI4\n", &net_ip);
 903         printf("Load address: 0x%lx\n", tftp_load_addr);
 904
 905         puts("Loading: *\b");
 906
 907         timeout_count_max = tftp_timeout_count_max;
 908         timeout_count = 0;
 909         timeout_ms = TIMEOUT;
 910         net_set_timeout_handler(timeout_ms, tftp_timeout_handler);
 911
 912         /* Revert tftp_block_size to dflt */
 913         tftp_block_size = TFTP_BLOCK_SIZE;
 914         tftp_cur_block = 0;
 915         tftp_our_port = WELL_KNOWN_PORT;
 916
 917 #ifdef CONFIG_TFTP_TSIZE
 918         tftp_tsize = 0;
 919         tftp_tsize_num_hash = 0;
 920 #endif
 921
 922         tftp_state = STATE_RECV_WRQ;
 923         net_set_udp_handler(tftp_handler);
 924
 925         /* zero out server ether in case the server ip has changed */
 926         memset(net_server_ethaddr, 0, 6);
 927 }
 928 #endif /* CONFIG_CMD_TFTPSRV */
 929