net/tftp.c

   1 /*
   2  * Copyright 1994, 1995, 2000 Neil Russell.
   3  * (See License)
   4  * Copyright 2000, 2001 DENX Software Engineering, Wolfgang Denk, wd@denx.de
   5  * Copyright 2011 Comelit Group SpA,
   6  *                Luca Ceresoli <luca.ceresoli@comelit.it>
   7  */
   8 #include <common.h>
   9 #include <command.h>
  10 #include <display_options.h>
  11 #include <efi_loader.h>
  12 #include <env.h>
  13 #include <image.h>
  14 #include <lmb.h>
  15 #include <log.h>
  16 #include <mapmem.h>
  17 #include <net.h>
  18 #include <asm/global_data.h>
  19 #include <net/tftp.h>
  20 #include "bootp.h"
  21
  22 DECLARE_GLOBAL_DATA_PTR;
  23
  24 /* Well known TFTP port # */
  25 #define WELL_KNOWN_PORT 69
  26 /* Millisecs to timeout for lost pkt */
  27 #define TIMEOUT         5000UL
  28 /* Number of "loading" hashes per line (for checking the image size) */
  29 #define HASHES_PER_LINE 65
  30
  31 /*
  32  *      TFTP operations.
  33  */
  34 #define TFTP_RRQ        1
  35 #define TFTP_WRQ        2
  36 #define TFTP_DATA       3
  37 #define TFTP_ACK        4
  38 #define TFTP_ERROR      5
  39 #define TFTP_OACK       6
  40
  41 static ulong timeout_ms = TIMEOUT;
  42 static int timeout_count_max = (CONFIG_NET_RETRY_COUNT * 2);
  43 static ulong time_start;   /* Record time we started tftp */
  44
  45 /*
  46  * These globals govern the timeout behavior when attempting a connection to a
  47  * TFTP server. tftp_timeout_ms specifies the number of milliseconds to
  48  * wait for the server to respond to initial connection. Second global,
  49  * tftp_timeout_count_max, gives the number of such connection retries.
  50  * tftp_timeout_count_max must be non-negative and tftp_timeout_ms must be
  51  * positive. The globals are meant to be set (and restored) by code needing
  52  * non-standard timeout behavior when initiating a TFTP transfer.
  53  */
  54 ulong tftp_timeout_ms = TIMEOUT;
  55 int tftp_timeout_count_max = (CONFIG_NET_RETRY_COUNT * 2);
  56
  57 enum {
  58         TFTP_ERR_UNDEFINED           = 0,
  59         TFTP_ERR_FILE_NOT_FOUND      = 1,
  60         TFTP_ERR_ACCESS_DENIED       = 2,
  61         TFTP_ERR_DISK_FULL           = 3,
  62         TFTP_ERR_UNEXPECTED_OPCODE   = 4,
  63         TFTP_ERR_UNKNOWN_TRANSFER_ID  = 5,
  64         TFTP_ERR_FILE_ALREADY_EXISTS = 6,
  65         TFTP_ERR_OPTION_NEGOTIATION = 8,
  66 };
  67
  68 static struct in_addr tftp_remote_ip;
  69 /* The UDP port at their end */
  70 static int      tftp_remote_port;
  71 /* The UDP port at our end */
  72 static int      tftp_our_port;
  73 static int      timeout_count;
  74 /* packet sequence number */
  75 static ulong    tftp_cur_block;
  76 /* last packet sequence number received */
  77 static ulong    tftp_prev_block;
  78 /* count of sequence number wraparounds */
  79 static ulong    tftp_block_wrap;
  80 /* memory offset due to wrapping */
  81 static ulong    tftp_block_wrap_offset;
  82 static int      tftp_state;
  83 static ulong    tftp_load_addr;
  84 #ifdef CONFIG_LMB
  85 static ulong    tftp_load_size;
  86 #endif
  87 #ifdef CONFIG_TFTP_TSIZE
  88 /* The file size reported by the server */
  89 static int      tftp_tsize;
  90 /* The number of hashes we printed */
  91 static short    tftp_tsize_num_hash;
  92 #endif
  93 /* The window size negotiated */
  94 static ushort   tftp_windowsize;
  95 /* Next block to send ack to */
  96 static ushort   tftp_next_ack;
  97 /* Last nack block we send */
  98 static ushort   tftp_last_nack;
  99 #ifdef CONFIG_CMD_TFTPPUT
 100 /* 1 if writing, else 0 */
 101 static int      tftp_put_active;
 102 /* 1 if we have sent the last block */
 103 static int      tftp_put_final_block_sent;
 104 #else
 105 #define tftp_put_active 0
 106 #endif
 107
 108 #define STATE_SEND_RRQ  1
 109 #define STATE_DATA      2
 110 #define STATE_TOO_LARGE 3
 111 #define STATE_BAD_MAGIC 4
 112 #define STATE_OACK      5
 113 #define STATE_RECV_WRQ  6
 114 #define STATE_SEND_WRQ  7
 115 #define STATE_INVALID_OPTION    8
 116
 117 /* default TFTP block size */
 118 #define TFTP_BLOCK_SIZE         512
 119 /* sequence number is 16 bit */
 120 #define TFTP_SEQUENCE_SIZE      ((ulong)(1<<16))
 121
 122 #define DEFAULT_NAME_LEN        (8 + 4 + 1)
 123 static char default_filename[DEFAULT_NAME_LEN];
 124
 125 #ifndef CONFIG_TFTP_FILE_NAME_MAX_LEN
 126 #define MAX_LEN 128
 127 #else
 128 #define MAX_LEN CONFIG_TFTP_FILE_NAME_MAX_LEN
 129 #endif
 130
 131 static char tftp_filename[MAX_LEN];
 132
 133 /* 512 is poor choice for ethernet, MTU is typically 1500.
 134  * Minus eth.hdrs thats 1468.  Can get 2x better throughput with
 135  * almost-MTU block sizes.  At least try... fall back to 512 if need be.
 136  * (but those using CONFIG_IP_DEFRAG may want to set a larger block in cfg file)
 137  */
 138
 139 /* When windowsize is defined to 1,
 140  * tftp behaves the same way as it was
 141  * never declared
 142  */
 143 #ifdef CONFIG_TFTP_WINDOWSIZE
 144 #define TFTP_WINDOWSIZE CONFIG_TFTP_WINDOWSIZE
 145 #else
 146 #define TFTP_WINDOWSIZE 1
 147 #endif
 148
 149 static unsigned short tftp_block_size = TFTP_BLOCK_SIZE;
 150 static unsigned short tftp_block_size_option = CONFIG_TFTP_BLOCKSIZE;
 151 static unsigned short tftp_window_size_option = TFTP_WINDOWSIZE;
 152
 153 static inline int store_block(int block, uchar *src, unsigned int len)
 154 {
 155         ulong offset = block * tftp_block_size + tftp_block_wrap_offset -
 156                         tftp_block_size;
 157         ulong newsize = offset + len;
 158         ulong store_addr = tftp_load_addr + offset;
 159         void *ptr;
 160
 161 #ifdef CONFIG_LMB
 162         ulong end_addr = tftp_load_addr + tftp_load_size;
 163
 164         if (!end_addr)
 165                 end_addr = ULONG_MAX;
 166
 167         if (store_addr < tftp_load_addr ||
 168             store_addr + len > end_addr) {
 169                 puts("\nTFTP error: ");
 170                 puts("trying to overwrite reserved memory...\n");
 171                 return -1;
 172         }
 173 #endif
 174         ptr = map_sysmem(store_addr, len);
 175         memcpy(ptr, src, len);
 176         unmap_sysmem(ptr);
 177
 178         if (net_boot_file_size < newsize)
 179                 net_boot_file_size = newsize;
 180
 181         return 0;
 182 }
 183
 184 /* Clear our state ready for a new transfer */
 185 static void new_transfer(void)
 186 {
 187         tftp_prev_block = 0;
 188         tftp_block_wrap = 0;
 189         tftp_block_wrap_offset = 0;
 190 #ifdef CONFIG_CMD_TFTPPUT
 191         tftp_put_final_block_sent = 0;
 192 #endif
 193 }
 194
 195 #ifdef CONFIG_CMD_TFTPPUT
 196 /**
 197  * Load the next block from memory to be sent over tftp.
 198  *
 199  * @param block Block number to send
 200  * @param dst   Destination buffer for data
 201  * @param len   Number of bytes in block (this one and every other)
 202  * Return: number of bytes loaded
 203  */
 204 static int load_block(unsigned block, uchar *dst, unsigned len)
 205 {
 206         /* We may want to get the final block from the previous set */
 207         ulong offset = block * tftp_block_size + tftp_block_wrap_offset -
 208                        tftp_block_size;
 209         ulong tosend = len;
 210
 211         tosend = min(net_boot_file_size - offset, tosend);
 212         (void)memcpy(dst, (void *)(image_save_addr + offset), tosend);
 213         debug("%s: block=%u, offset=%lu, len=%u, tosend=%lu\n", __func__,
 214               block, offset, len, tosend);
 215         return tosend;
 216 }
 217 #endif
 218
 219 static void tftp_send(void);
 220 static void tftp_timeout_handler(void);
 221
 222 /**********************************************************************/
 223
 224 static void show_block_marker(void)
 225 {
 226         ulong pos;
 227
 228 #ifdef CONFIG_TFTP_TSIZE
 229         if (tftp_tsize) {
 230                 pos = tftp_cur_block * tftp_block_size +
 231                         tftp_block_wrap_offset;
 232                 if (pos > tftp_tsize)
 233                         pos = tftp_tsize;
 234
 235                 while (tftp_tsize_num_hash < pos * 50 / tftp_tsize) {
 236                         putc('#');
 237                         tftp_tsize_num_hash++;
 238                 }
 239         } else
 240 #endif
 241         {
 242                 pos = (tftp_cur_block - 1) +
 243                         (tftp_block_wrap * TFTP_SEQUENCE_SIZE);
 244                 if ((pos % 10) == 0)
 245                         putc('#');
 246                 else if (((pos + 1) % (10 * HASHES_PER_LINE)) == 0)
 247                         puts("\n\t ");
 248         }
 249 }
 250
 251 /**
 252  * restart the current transfer due to an error
 253  *
 254  * @param msg   Message to print for user
 255  */
 256 static void restart(const char *msg)
 257 {
 258         printf("\n%s; starting again\n", msg);
 259         net_start_again();
 260 }
 261
 262 /*
 263  * Check if the block number has wrapped, and update progress
 264  *
 265  * TODO: The egregious use of global variables in this file should be tidied.
 266  */
 267 static void update_block_number(void)
 268 {
 269         /*
 270          * RFC1350 specifies that the first data packet will
 271          * have sequence number 1. If we receive a sequence
 272          * number of 0 this means that there was a wrap
 273          * around of the (16 bit) counter.
 274          */
 275         if (tftp_cur_block == 0 && tftp_prev_block != 0) {
 276                 tftp_block_wrap++;
 277                 tftp_block_wrap_offset += tftp_block_size * TFTP_SEQUENCE_SIZE;
 278                 timeout_count = 0; /* we've done well, reset the timeout */
 279         }
 280         show_block_marker();
 281 }
 282
 283 /* The TFTP get or put is complete */
 284 static void tftp_complete(void)
 285 {
 286 #ifdef CONFIG_TFTP_TSIZE
 287         /* Print hash marks for the last packet received */
 288         while (tftp_tsize && tftp_tsize_num_hash < 49) {
 289                 putc('#');
 290                 tftp_tsize_num_hash++;
 291         }
 292         puts("  ");
 293         print_size(tftp_tsize, "");
 294 #endif
 295         time_start = get_timer(time_start);
 296         if (time_start > 0) {
 297                 puts("\n\t ");  /* Line up with "Loading: " */
 298                 print_size(net_boot_file_size /
 299                         time_start * 1000, "/s");
 300         }
 301         puts("\ndone\n");
 302         if (IS_ENABLED(CONFIG_CMD_BOOTEFI)) {
 303                 if (!tftp_put_active)
 304                         efi_set_bootdev("Net", "", tftp_filename,
 305                                         map_sysmem(tftp_load_addr, 0),
 306                                         net_boot_file_size);
 307         }
 308         net_set_state(NETLOOP_SUCCESS);
 309 }
 310
 311 static void tftp_send(void)
 312 {
 313         uchar *pkt;
 314         uchar *xp;
 315         int len = 0;
 316         ushort *s;
 317         bool err_pkt = false;
 318
 319         /*
 320          *      We will always be sending some sort of packet, so
 321          *      cobble together the packet headers now.
 322          */
 323         pkt = net_tx_packet + net_eth_hdr_size() + IP_UDP_HDR_SIZE;
 324
 325         switch (tftp_state) {
 326         case STATE_SEND_RRQ:
 327         case STATE_SEND_WRQ:
 328                 xp = pkt;
 329                 s = (ushort *)pkt;
 330 #ifdef CONFIG_CMD_TFTPPUT
 331                 *s++ = htons(tftp_state == STATE_SEND_RRQ ? TFTP_RRQ :
 332                         TFTP_WRQ);
 333 #else
 334                 *s++ = htons(TFTP_RRQ);
 335 #endif
 336                 pkt = (uchar *)s;
 337                 strcpy((char *)pkt, tftp_filename);
 338                 pkt += strlen(tftp_filename) + 1;
 339                 strcpy((char *)pkt, "octet");
 340                 pkt += 5 /*strlen("octet")*/ + 1;
 341                 strcpy((char *)pkt, "timeout");
 342                 pkt += 7 /*strlen("timeout")*/ + 1;
 343                 sprintf((char *)pkt, "%lu", timeout_ms / 1000);
 344                 debug("send option \"timeout %s\"\n", (char *)pkt);
 345                 pkt += strlen((char *)pkt) + 1;
 346 #ifdef CONFIG_TFTP_TSIZE
 347                 pkt += sprintf((char *)pkt, "tsize%c%u%c",
 348                                 0, net_boot_file_size, 0);
 349 #endif
 350                 /* try for more effic. blk size */
 351                 pkt += sprintf((char *)pkt, "blksize%c%d%c",
 352                                 0, tftp_block_size_option, 0);
 353
 354                 /* try for more effic. window size.
 355                  * Implemented only for tftp get.
 356                  * Don't bother sending if it's 1
 357                  */
 358                 if (tftp_state == STATE_SEND_RRQ && tftp_window_size_option > 1)
 359                         pkt += sprintf((char *)pkt, "windowsize%c%d%c",
 360                                         0, tftp_window_size_option, 0);
 361                 len = pkt - xp;
 362                 break;
 363
 364         case STATE_OACK:
 365
 366         case STATE_RECV_WRQ:
 367         case STATE_DATA:
 368                 xp = pkt;
 369                 s = (ushort *)pkt;
 370                 s[0] = htons(TFTP_ACK);
 371                 s[1] = htons(tftp_cur_block);
 372                 pkt = (uchar *)(s + 2);
 373 #ifdef CONFIG_CMD_TFTPPUT
 374                 if (tftp_put_active) {
 375                         int toload = tftp_block_size;
 376                         int loaded = load_block(tftp_cur_block, pkt, toload);
 377
 378                         s[0] = htons(TFTP_DATA);
 379                         pkt += loaded;
 380                         tftp_put_final_block_sent = (loaded < toload);
 381                 }
 382 #endif
 383                 len = pkt - xp;
 384                 break;
 385
 386         case STATE_TOO_LARGE:
 387                 xp = pkt;
 388                 s = (ushort *)pkt;
 389                 *s++ = htons(TFTP_ERROR);
 390                         *s++ = htons(3);
 391
 392                 pkt = (uchar *)s;
 393                 strcpy((char *)pkt, "File too large");
 394                 pkt += 14 /*strlen("File too large")*/ + 1;
 395                 len = pkt - xp;
 396                 err_pkt = true;
 397                 break;
 398
 399         case STATE_BAD_MAGIC:
 400                 xp = pkt;
 401                 s = (ushort *)pkt;
 402                 *s++ = htons(TFTP_ERROR);
 403                 *s++ = htons(2);
 404                 pkt = (uchar *)s;
 405                 strcpy((char *)pkt, "File has bad magic");
 406                 pkt += 18 /*strlen("File has bad magic")*/ + 1;
 407                 len = pkt - xp;
 408                 err_pkt = true;
 409                 break;
 410
 411         case STATE_INVALID_OPTION:
 412                 xp = pkt;
 413                 s = (ushort *)pkt;
 414                 *s++ = htons(TFTP_ERROR);
 415                 *s++ = htons(TFTP_ERR_OPTION_NEGOTIATION);
 416                 pkt = (uchar *)s;
 417                 strcpy((char *)pkt, "Option Negotiation Failed");
 418                 /* strlen("Option Negotiation Failed") + NULL*/
 419                 pkt += 25 + 1;
 420                 len = pkt - xp;
 421                 err_pkt = true;
 422                 break;
 423         }
 424
 425         net_send_udp_packet(net_server_ethaddr, tftp_remote_ip,
 426                             tftp_remote_port, tftp_our_port, len);
 427
 428         if (err_pkt)
 429                 net_set_state(NETLOOP_FAIL);
 430 }
 431
 432 #ifdef CONFIG_CMD_TFTPPUT
 433 static void icmp_handler(unsigned type, unsigned code, unsigned dest,
 434                          struct in_addr sip, unsigned src, uchar *pkt,
 435                          unsigned len)
 436 {
 437         if (type == ICMP_NOT_REACH && code == ICMP_NOT_REACH_PORT) {
 438                 /* Oh dear the other end has gone away */
 439                 restart("TFTP server died");
 440         }
 441 }
 442 #endif
 443
 444 static void tftp_handler(uchar *pkt, unsigned dest, struct in_addr sip,
 445                          unsigned src, unsigned len)
 446 {
 447         __be16 proto;
 448         __be16 *s;
 449         int i;
 450         u16 timeout_val_rcvd;
 451
 452         if (dest != tftp_our_port) {
 453                         return;
 454         }
 455         if (tftp_state != STATE_SEND_RRQ && src != tftp_remote_port &&
 456             tftp_state != STATE_RECV_WRQ && tftp_state != STATE_SEND_WRQ)
 457                 return;
 458
 459         if (len < 2)
 460                 return;
 461         len -= 2;
 462         /* warning: don't use increment (++) in ntohs() macros!! */
 463         s = (__be16 *)pkt;
 464         proto = *s++;
 465         pkt = (uchar *)s;
 466         switch (ntohs(proto)) {
 467         case TFTP_RRQ:
 468                 break;
 469
 470         case TFTP_ACK:
 471 #ifdef CONFIG_CMD_TFTPPUT
 472                 if (tftp_put_active) {
 473                         if (tftp_put_final_block_sent) {
 474                                 tftp_complete();
 475                         } else {
 476                                 /*
 477                                  * Move to the next block. We want our block
 478                                  * count to wrap just like the other end!
 479                                  */
 480                                 int block = ntohs(*s);
 481                                 int ack_ok = (tftp_cur_block == block);
 482
 483                                 tftp_prev_block = tftp_cur_block;
 484                                 tftp_cur_block = (unsigned short)(block + 1);
 485                                 update_block_number();
 486                                 if (ack_ok)
 487                                         tftp_send(); /* Send next data block */
 488                         }
 489                 }
 490 #endif
 491                 break;
 492
 493         default:
 494                 break;
 495
 496 #ifdef CONFIG_CMD_TFTPSRV
 497         case TFTP_WRQ:
 498                 debug("Got WRQ\n");
 499                 tftp_remote_ip = sip;
 500                 tftp_remote_port = src;
 501                 tftp_our_port = 1024 + (get_timer(0) % 3072);
 502                 new_transfer();
 503                 tftp_send(); /* Send ACK(0) */
 504                 break;
 505 #endif
 506
 507         case TFTP_OACK:
 508                 debug("Got OACK: ");
 509                 for (i = 0; i < len; i++) {
 510                         if (pkt[i] == '\0')
 511                                 debug(" ");
 512                         else
 513                                 debug("%c", pkt[i]);
 514                 }
 515                 debug("\n");
 516                 tftp_state = STATE_OACK;
 517                 tftp_remote_port = src;
 518                 /*
 519                  * Check for 'blksize' option.
 520                  * Careful: "i" is signed, "len" is unsigned, thus
 521                  * something like "len-8" may give a *huge* number
 522                  */
 523                 for (i = 0; i+8 < len; i++) {
 524                         if (strcasecmp((char *)pkt + i, "blksize") == 0) {
 525                                 tftp_block_size = (unsigned short)
 526                                         dectoul((char *)pkt + i + 8, NULL);
 527                                 debug("Blocksize oack: %s, %d\n",
 528                                       (char *)pkt + i + 8, tftp_block_size);
 529                                 if (tftp_block_size > tftp_block_size_option) {
 530                                         printf("Invalid blk size(=%d)\n",
 531                                                tftp_block_size);
 532                                         tftp_state = STATE_INVALID_OPTION;
 533                                 }
 534                         }
 535                         if (strcasecmp((char *)pkt + i, "timeout") == 0) {
 536                                 timeout_val_rcvd = (unsigned short)
 537                                         dectoul((char *)pkt + i + 8, NULL);
 538                                 debug("Timeout oack: %s, %d\n",
 539                                       (char *)pkt + i + 8, timeout_val_rcvd);
 540                                 if (timeout_val_rcvd != (timeout_ms / 1000)) {
 541                                         printf("Invalid timeout val(=%d s)\n",
 542                                                timeout_val_rcvd);
 543                                         tftp_state = STATE_INVALID_OPTION;
 544                                 }
 545                         }
 546 #ifdef CONFIG_TFTP_TSIZE
 547                         if (strcasecmp((char *)pkt + i, "tsize") == 0) {
 548                                 tftp_tsize = dectoul((char *)pkt + i + 6,
 549                                                      NULL);
 550                                 debug("size = %s, %d\n",
 551                                       (char *)pkt + i + 6, tftp_tsize);
 552                         }
 553 #endif
 554                         if (strcasecmp((char *)pkt + i,  "windowsize") == 0) {
 555                                 tftp_windowsize =
 556                                         dectoul((char *)pkt + i + 11, NULL);
 557                                 debug("windowsize = %s, %d\n",
 558                                       (char *)pkt + i + 11, tftp_windowsize);
 559                         }
 560                 }
 561
 562                 tftp_next_ack = tftp_windowsize;
 563
 564 #ifdef CONFIG_CMD_TFTPPUT
 565                 if (tftp_put_active && tftp_state == STATE_OACK) {
 566                         /* Get ready to send the first block */
 567                         tftp_state = STATE_DATA;
 568                         tftp_cur_block++;
 569                 }
 570 #endif
 571                 tftp_send(); /* Send ACK or first data block */
 572                 break;
 573         case TFTP_DATA:
 574                 if (len < 2)
 575                         return;
 576                 len -= 2;
 577
 578                 if (ntohs(*(__be16 *)pkt) != (ushort)(tftp_cur_block + 1)) {
 579                         debug("Received unexpected block: %d, expected: %d\n",
 580                               ntohs(*(__be16 *)pkt),
 581                               (ushort)(tftp_cur_block + 1));
 582                         /*
 583                          * If one packet is dropped most likely
 584                          * all other buffers in the window
 585                          * that will arrive will cause a sending NACK.
 586                          * This just overwellms the server, let's just send one.
 587                          */
 588                         if (tftp_last_nack != tftp_cur_block) {
 589                                 tftp_send();
 590                                 tftp_last_nack = tftp_cur_block;
 591                                 tftp_next_ack = (ushort)(tftp_cur_block +
 592                                                          tftp_windowsize);
 593                         }
 594                         break;
 595                 }
 596
 597                 tftp_cur_block++;
 598                 tftp_cur_block %= TFTP_SEQUENCE_SIZE;
 599
 600                 if (tftp_state == STATE_SEND_RRQ) {
 601                         debug("Server did not acknowledge any options!\n");
 602                         tftp_next_ack = tftp_windowsize;
 603                 }
 604
 605                 if (tftp_state == STATE_SEND_RRQ || tftp_state == STATE_OACK ||
 606                     tftp_state == STATE_RECV_WRQ) {
 607                         /* first block received */
 608                         tftp_state = STATE_DATA;
 609                         tftp_remote_port = src;
 610                         new_transfer();
 611
 612                         if (tftp_cur_block != 1) {      /* Assertion */
 613                                 puts("\nTFTP error: ");
 614                                 printf("First block is not block 1 (%ld)\n",
 615                                        tftp_cur_block);
 616                                 puts("Starting again\n\n");
 617                                 net_start_again();
 618                                 break;
 619                         }
 620                 }
 621
 622                 if (tftp_cur_block == tftp_prev_block) {
 623                         /* Same block again; ignore it. */
 624                         break;
 625                 }
 626
 627                 update_block_number();
 628                 tftp_prev_block = tftp_cur_block;
 629                 timeout_count_max = tftp_timeout_count_max;
 630                 net_set_timeout_handler(timeout_ms, tftp_timeout_handler);
 631
 632                 if (store_block(tftp_cur_block, pkt + 2, len)) {
 633                         eth_halt();
 634                         net_set_state(NETLOOP_FAIL);
 635                         break;
 636                 }
 637
 638                 if (len < tftp_block_size) {
 639                         tftp_send();
 640                         tftp_complete();
 641                         break;
 642                 }
 643
 644                 /*
 645                  *      Acknowledge the block just received, which will prompt
 646                  *      the remote for the next one.
 647                  */
 648                 if (tftp_cur_block == tftp_next_ack) {
 649                         tftp_send();
 650                         tftp_next_ack += tftp_windowsize;
 651                 }
 652                 break;
 653
 654         case TFTP_ERROR:
 655                 printf("\nTFTP error: '%s' (%d)\n",
 656                        pkt + 2, ntohs(*(__be16 *)pkt));
 657
 658                 switch (ntohs(*(__be16 *)pkt)) {
 659                 case TFTP_ERR_FILE_NOT_FOUND:
 660                 case TFTP_ERR_ACCESS_DENIED:
 661                         puts("Not retrying...\n");
 662                         eth_halt();
 663                         net_set_state(NETLOOP_FAIL);
 664                         break;
 665                 case TFTP_ERR_UNDEFINED:
 666                 case TFTP_ERR_DISK_FULL:
 667                 case TFTP_ERR_UNEXPECTED_OPCODE:
 668                 case TFTP_ERR_UNKNOWN_TRANSFER_ID:
 669                 case TFTP_ERR_FILE_ALREADY_EXISTS:
 670                 default:
 671                         puts("Starting again\n\n");
 672                         net_start_again();
 673                         break;
 674                 }
 675                 break;
 676         }
 677 }
 678
 679
 680 static void tftp_timeout_handler(void)
 681 {
 682         if (++timeout_count > timeout_count_max) {
 683                 restart("Retry count exceeded");
 684         } else {
 685                 puts("T ");
 686                 net_set_timeout_handler(timeout_ms, tftp_timeout_handler);
 687                 if (tftp_state != STATE_RECV_WRQ)
 688                         tftp_send();
 689         }
 690 }
 691
 692 /* Initialize tftp_load_addr and tftp_load_size from image_load_addr and lmb */
 693 static int tftp_init_load_addr(void)
 694 {
 695 #ifdef CONFIG_LMB
 696         struct lmb lmb;
 697         phys_size_t max_size;
 698
 699         lmb_init_and_reserve(&lmb, gd->bd, (void *)gd->fdt_blob);
 700
 701         max_size = lmb_get_free_size(&lmb, image_load_addr);
 702         if (!max_size)
 703                 return -1;
 704
 705         tftp_load_size = max_size;
 706 #endif
 707         tftp_load_addr = image_load_addr;
 708         return 0;
 709 }
 710
 711 void tftp_start(enum proto_t protocol)
 712 {
 713         __maybe_unused char *ep;             /* Environment pointer */
 714         if (IS_ENABLED(CONFIG_NET_TFTP_VARS)) {
 715
 716                 /*
 717                  * Allow the user to choose TFTP blocksize and timeout.
 718                  * TFTP protocol has a minimal timeout of 1 second.
 719                  */
 720
 721                 ep = env_get("tftpblocksize");
 722                 if (ep != NULL)
 723                         tftp_block_size_option = simple_strtol(ep, NULL, 10);
 724
 725                 ep = env_get("tftpwindowsize");
 726                 if (ep != NULL)
 727                         tftp_window_size_option = simple_strtol(ep, NULL, 10);
 728
 729                 ep = env_get("tftptimeout");
 730                 if (ep != NULL)
 731                         timeout_ms = simple_strtol(ep, NULL, 10);
 732
 733                 if (timeout_ms < 1000) {
 734                         printf("TFTP timeout (%ld ms) too low, set min = 1000 ms\n",
 735                                timeout_ms);
 736                         timeout_ms = 1000;
 737                 }
 738
 739                 ep = env_get("tftptimeoutcountmax");
 740                 if (ep != NULL)
 741                         tftp_timeout_count_max = simple_strtol(ep, NULL, 10);
 742
 743                 if (tftp_timeout_count_max < 0) {
 744                         printf("TFTP timeout count max (%d ms) negative, set to 0\n",
 745                                tftp_timeout_count_max);
 746                         tftp_timeout_count_max = 0;
 747                 }
 748         }
 749
 750         debug("TFTP blocksize = %i, TFTP windowsize = %d timeout = %ld ms\n",
 751               tftp_block_size_option, tftp_window_size_option, timeout_ms);
 752
 753         tftp_remote_ip = net_server_ip;
 754         if (!net_parse_bootfile(&tftp_remote_ip, tftp_filename, MAX_LEN)) {
 755                 sprintf(default_filename, "%02X%02X%02X%02X.img",
 756                         net_ip.s_addr & 0xFF,
 757                         (net_ip.s_addr >>  8) & 0xFF,
 758                         (net_ip.s_addr >> 16) & 0xFF,
 759                         (net_ip.s_addr >> 24) & 0xFF);
 760
 761                 strncpy(tftp_filename, default_filename, DEFAULT_NAME_LEN);
 762                 tftp_filename[DEFAULT_NAME_LEN - 1] = 0;
 763
 764                 printf("*** Warning: no boot file name; using '%s'\n",
 765                        tftp_filename);
 766         }
 767
 768         printf("Using %s device\n", eth_get_name());
 769         printf("TFTP %s server %pI4; our IP address is %pI4",
 770 #ifdef CONFIG_CMD_TFTPPUT
 771                protocol == TFTPPUT ? "to" : "from",
 772 #else
 773                "from",
 774 #endif
 775                &tftp_remote_ip, &net_ip);
 776
 777         /* Check if we need to send across this subnet */
 778         if (net_gateway.s_addr && net_netmask.s_addr) {
 779                 struct in_addr our_net;
 780                 struct in_addr remote_net;
 781
 782                 our_net.s_addr = net_ip.s_addr & net_netmask.s_addr;
 783                 remote_net.s_addr = tftp_remote_ip.s_addr & net_netmask.s_addr;
 784                 if (our_net.s_addr != remote_net.s_addr)
 785                         printf("; sending through gateway %pI4", &net_gateway);
 786         }
 787         putc('\n');
 788
 789         printf("Filename '%s'.", tftp_filename);
 790
 791         if (net_boot_file_expected_size_in_blocks) {
 792                 printf(" Size is 0x%x Bytes = ",
 793                        net_boot_file_expected_size_in_blocks << 9);
 794                 print_size(net_boot_file_expected_size_in_blocks << 9, "");
 795         }
 796
 797         putc('\n');
 798 #ifdef CONFIG_CMD_TFTPPUT
 799         tftp_put_active = (protocol == TFTPPUT);
 800         if (tftp_put_active) {
 801                 printf("Save address: 0x%lx\n", image_save_addr);
 802                 printf("Save size:    0x%lx\n", image_save_size);
 803                 net_boot_file_size = image_save_size;
 804                 puts("Saving: *\b");
 805                 tftp_state = STATE_SEND_WRQ;
 806                 new_transfer();
 807         } else
 808 #endif
 809         {
 810                 if (tftp_init_load_addr()) {
 811                         eth_halt();
 812                         net_set_state(NETLOOP_FAIL);
 813                         puts("\nTFTP error: ");
 814                         puts("trying to overwrite reserved memory...\n");
 815                         return;
 816                 }
 817                 printf("Load address: 0x%lx\n", tftp_load_addr);
 818                 puts("Loading: *\b");
 819                 tftp_state = STATE_SEND_RRQ;
 820         }
 821
 822         time_start = get_timer(0);
 823         timeout_count_max = tftp_timeout_count_max;
 824
 825         net_set_timeout_handler(timeout_ms, tftp_timeout_handler);
 826         net_set_udp_handler(tftp_handler);
 827 #ifdef CONFIG_CMD_TFTPPUT
 828         net_set_icmp_handler(icmp_handler);
 829 #endif
 830         tftp_remote_port = WELL_KNOWN_PORT;
 831         timeout_count = 0;
 832         /* Use a pseudo-random port unless a specific port is set */
 833         tftp_our_port = 1024 + (get_timer(0) % 3072);
 834
 835 #ifdef CONFIG_TFTP_PORT
 836         ep = env_get("tftpdstp");
 837         if (ep != NULL)
 838                 tftp_remote_port = simple_strtol(ep, NULL, 10);
 839         ep = env_get("tftpsrcp");
 840         if (ep != NULL)
 841                 tftp_our_port = simple_strtol(ep, NULL, 10);
 842 #endif
 843         tftp_cur_block = 0;
 844         tftp_windowsize = 1;
 845         tftp_last_nack = 0;
 846         /* zero out server ether in case the server ip has changed */
 847         memset(net_server_ethaddr, 0, 6);
 848         /* Revert tftp_block_size to dflt */
 849         tftp_block_size = TFTP_BLOCK_SIZE;
 850 #ifdef CONFIG_TFTP_TSIZE
 851         tftp_tsize = 0;
 852         tftp_tsize_num_hash = 0;
 853 #endif
 854
 855         tftp_send();
 856 }
 857
 858 #ifdef CONFIG_CMD_TFTPSRV
 859 void tftp_start_server(void)
 860 {
 861         tftp_filename[0] = 0;
 862
 863         if (tftp_init_load_addr()) {
 864                 eth_halt();
 865                 net_set_state(NETLOOP_FAIL);
 866                 puts("\nTFTP error: trying to overwrite reserved memory...\n");
 867                 return;
 868         }
 869         printf("Using %s device\n", eth_get_name());
 870         printf("Listening for TFTP transfer on %pI4\n", &net_ip);
 871         printf("Load address: 0x%lx\n", tftp_load_addr);
 872
 873         puts("Loading: *\b");
 874
 875         timeout_count_max = tftp_timeout_count_max;
 876         timeout_count = 0;
 877         timeout_ms = TIMEOUT;
 878         net_set_timeout_handler(timeout_ms, tftp_timeout_handler);
 879
 880         /* Revert tftp_block_size to dflt */
 881         tftp_block_size = TFTP_BLOCK_SIZE;
 882         tftp_cur_block = 0;
 883         tftp_our_port = WELL_KNOWN_PORT;
 884         tftp_windowsize = 1;
 885         tftp_next_ack = tftp_windowsize;
 886
 887 #ifdef CONFIG_TFTP_TSIZE
 888         tftp_tsize = 0;
 889         tftp_tsize_num_hash = 0;
 890 #endif
 891
 892         tftp_state = STATE_RECV_WRQ;
 893         net_set_udp_handler(tftp_handler);
 894
 895         /* zero out server ether in case the server ip has changed */
 896         memset(net_server_ethaddr, 0, 6);
 897 }
 898 #endif /* CONFIG_CMD_TFTPSRV */