1 // SPDX-License-Identifier: (GPL-2.0-or-later OR BSD-2-Clause)
3 * libfdt - Flat Device Tree manipulation
4 * Copyright (C) 2006 David Gibson, IBM Corporation.
6 #include "libfdt_env.h"
11 #include "libfdt_internal.h"
14 * Minimal sanity check for a read-only tree. fdt_ro_probe_() checks
15 * that the given buffer contains what appears to be a flattened
16 * device tree with sane information in its header.
18 int32_t fdt_ro_probe_(const void *fdt)
20 uint32_t totalsize = fdt_totalsize(fdt);
22 if (fdt_magic(fdt) == FDT_MAGIC) {
24 if (fdt_chk_version()) {
25 if (fdt_version(fdt) < FDT_FIRST_SUPPORTED_VERSION)
26 return -FDT_ERR_BADVERSION;
27 if (fdt_last_comp_version(fdt) >
28 FDT_LAST_SUPPORTED_VERSION)
29 return -FDT_ERR_BADVERSION;
31 } else if (fdt_magic(fdt) == FDT_SW_MAGIC) {
32 /* Unfinished sequential-write blob */
33 if (fdt_size_dt_struct(fdt) == 0)
34 return -FDT_ERR_BADSTATE;
36 return -FDT_ERR_BADMAGIC;
39 if (totalsize < INT32_MAX)
42 return -FDT_ERR_TRUNCATED;
45 static int check_off_(uint32_t hdrsize, uint32_t totalsize, uint32_t off)
47 return (off >= hdrsize) && (off <= totalsize);
50 static int check_block_(uint32_t hdrsize, uint32_t totalsize,
51 uint32_t base, uint32_t size)
53 if (!check_off_(hdrsize, totalsize, base))
54 return 0; /* block start out of bounds */
55 if ((base + size) < base)
56 return 0; /* overflow */
57 if (!check_off_(hdrsize, totalsize, base + size))
58 return 0; /* block end out of bounds */
62 size_t fdt_header_size_(uint32_t version)
66 else if (version <= 2)
68 else if (version <= 3)
70 else if (version <= 16)
76 size_t fdt_header_size(const void *fdt)
78 return fdt_chk_version() ? fdt_header_size_(fdt_version(fdt)) :
82 int fdt_check_header(const void *fdt)
86 if (fdt_magic(fdt) != FDT_MAGIC)
87 return -FDT_ERR_BADMAGIC;
88 if (fdt_chk_version()) {
89 if ((fdt_version(fdt) < FDT_FIRST_SUPPORTED_VERSION)
90 || (fdt_last_comp_version(fdt) >
91 FDT_LAST_SUPPORTED_VERSION))
92 return -FDT_ERR_BADVERSION;
93 if (fdt_version(fdt) < fdt_last_comp_version(fdt))
94 return -FDT_ERR_BADVERSION;
96 hdrsize = fdt_header_size(fdt);
97 if (fdt_chk_basic()) {
99 if ((fdt_totalsize(fdt) < hdrsize)
100 || (fdt_totalsize(fdt) > INT_MAX))
101 return -FDT_ERR_TRUNCATED;
103 /* Bounds check memrsv block */
104 if (!check_off_(hdrsize, fdt_totalsize(fdt),
105 fdt_off_mem_rsvmap(fdt)))
106 return -FDT_ERR_TRUNCATED;
109 if (fdt_chk_extra()) {
110 /* Bounds check structure block */
111 if (fdt_chk_version() && fdt_version(fdt) < 17) {
112 if (!check_off_(hdrsize, fdt_totalsize(fdt),
113 fdt_off_dt_struct(fdt)))
114 return -FDT_ERR_TRUNCATED;
116 if (!check_block_(hdrsize, fdt_totalsize(fdt),
117 fdt_off_dt_struct(fdt),
118 fdt_size_dt_struct(fdt)))
119 return -FDT_ERR_TRUNCATED;
122 /* Bounds check strings block */
123 if (!check_block_(hdrsize, fdt_totalsize(fdt),
124 fdt_off_dt_strings(fdt),
125 fdt_size_dt_strings(fdt)))
126 return -FDT_ERR_TRUNCATED;
132 const void *fdt_offset_ptr(const void *fdt, int offset, unsigned int len)
134 unsigned absoffset = offset + fdt_off_dt_struct(fdt);
137 if ((absoffset < offset)
138 || ((absoffset + len) < absoffset)
139 || (absoffset + len) > fdt_totalsize(fdt))
142 if (!fdt_chk_version() || fdt_version(fdt) >= 0x11)
143 if (((offset + len) < offset)
144 || ((offset + len) > fdt_size_dt_struct(fdt)))
147 return fdt_offset_ptr_(fdt, offset);
150 uint32_t fdt_next_tag(const void *fdt, int startoffset, int *nextoffset)
152 const fdt32_t *tagp, *lenp;
154 int offset = startoffset;
157 *nextoffset = -FDT_ERR_TRUNCATED;
158 tagp = fdt_offset_ptr(fdt, offset, FDT_TAGSIZE);
159 if (fdt_chk_basic() && !tagp)
160 return FDT_END; /* premature end */
161 tag = fdt32_to_cpu(*tagp);
162 offset += FDT_TAGSIZE;
164 *nextoffset = -FDT_ERR_BADSTRUCTURE;
169 p = fdt_offset_ptr(fdt, offset++, 1);
170 } while (p && (*p != '\0'));
171 if (fdt_chk_basic() && !p)
172 return FDT_END; /* premature end */
176 lenp = fdt_offset_ptr(fdt, offset, sizeof(*lenp));
177 if (fdt_chk_basic() && !lenp)
178 return FDT_END; /* premature end */
179 /* skip-name offset, length and value */
180 offset += sizeof(struct fdt_property) - FDT_TAGSIZE
181 + fdt32_to_cpu(*lenp);
182 if (fdt_chk_version() &&
183 fdt_version(fdt) < 0x10 && fdt32_to_cpu(*lenp) >= 8 &&
184 ((offset - fdt32_to_cpu(*lenp)) % 8) != 0)
197 if (fdt_chk_basic() &&
198 !fdt_offset_ptr(fdt, startoffset, offset - startoffset))
199 return FDT_END; /* premature end */
201 *nextoffset = FDT_TAGALIGN(offset);
205 int fdt_check_node_offset_(const void *fdt, int offset)
207 if ((offset < 0) || (offset % FDT_TAGSIZE)
208 || (fdt_next_tag(fdt, offset, &offset) != FDT_BEGIN_NODE))
209 return -FDT_ERR_BADOFFSET;
214 int fdt_check_prop_offset_(const void *fdt, int offset)
216 if ((offset < 0) || (offset % FDT_TAGSIZE)
217 || (fdt_next_tag(fdt, offset, &offset) != FDT_PROP))
218 return -FDT_ERR_BADOFFSET;
223 int fdt_next_node(const void *fdt, int offset, int *depth)
229 if ((nextoffset = fdt_check_node_offset_(fdt, offset)) < 0)
234 tag = fdt_next_tag(fdt, offset, &nextoffset);
247 if (depth && ((--(*depth)) < 0))
252 if ((nextoffset >= 0)
253 || ((nextoffset == -FDT_ERR_TRUNCATED) && !depth))
254 return -FDT_ERR_NOTFOUND;
258 } while (tag != FDT_BEGIN_NODE);
263 int fdt_first_subnode(const void *fdt, int offset)
267 offset = fdt_next_node(fdt, offset, &depth);
268 if (offset < 0 || depth != 1)
269 return -FDT_ERR_NOTFOUND;
274 int fdt_next_subnode(const void *fdt, int offset)
279 * With respect to the parent, the depth of the next subnode will be
280 * the same as the last.
283 offset = fdt_next_node(fdt, offset, &depth);
284 if (offset < 0 || depth < 1)
285 return -FDT_ERR_NOTFOUND;
291 const char *fdt_find_string_(const char *strtab, int tabsize, const char *s)
293 int len = strlen(s) + 1;
294 const char *last = strtab + tabsize - len;
297 for (p = strtab; p <= last; p++)
298 if (memcmp(p, s, len) == 0)
303 int fdt_move(const void *fdt, void *buf, int bufsize)
307 if (fdt_totalsize(fdt) > bufsize)
308 return -FDT_ERR_NOSPACE;
310 memmove(buf, fdt, fdt_totalsize(fdt));