board/karo/tx6/flash.c

   1 /*
   2  * Copyright (C) 2012-2014 Lothar Waßmann <LW@KARO-electronics.de>
   3  *
   4  * See file CREDITS for list of people who contributed to this
   5  * project.
   6  *
   7  * This program is free software; you can redistribute it and/or
   8  * modify it under the terms of the GNU General Public License
   9  * version 2 as published by the Free Software Foundation.
  10  *
  11  * This program is distributed in the hope that it will be useful,
  12  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  13  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  14  * GNU General Public License for more details.
  15  *
  16  */
  17
  18 #include <common.h>
  19 #include <malloc.h>
  20 #include <nand.h>
  21 #include <errno.h>
  22
  23 #include <linux/err.h>
  24 #include <jffs2/load_kernel.h>
  25
  26 #include <asm/io.h>
  27 #include <asm/sizes.h>
  28 #include <asm/arch/imx-regs.h>
  29 #include <asm/imx-common/regs-gpmi.h>
  30 #include <asm/imx-common/regs-bch.h>
  31
  32 struct mx6_nand_timing {
  33         u8 data_setup;
  34         u8 data_hold;
  35         u8 address_setup;
  36         u8 dsample_time;
  37         u8 nand_timing_state;
  38         u8 tREA;
  39         u8 tRLOH;
  40         u8 tRHOH;
  41 };
  42
  43 struct mx6_fcb {
  44         u32 checksum;
  45         u32 fingerprint;
  46         u32 version;
  47         struct mx6_nand_timing timing;
  48         u32 page_data_size;
  49         u32 total_page_size;
  50         u32 sectors_per_block;
  51         u32 number_of_nands;    /* not used by ROM code */
  52         u32 total_internal_die; /* not used by ROM code */
  53         u32 cell_type;          /* not used by ROM code */
  54         u32 ecc_blockn_type;
  55         u32 ecc_block0_size;
  56         u32 ecc_blockn_size;
  57         u32 ecc_block0_type;
  58         u32 metadata_size;
  59         u32 ecc_blocks_per_page;
  60         u32 rsrvd1[6];          /* not used by ROM code */
  61         u32 bch_mode;           /* erase_threshold */
  62         u32 rsrvd2[2];
  63         u32 fw1_start_page;
  64         u32 fw2_start_page;
  65         u32 fw1_sectors;
  66         u32 fw2_sectors;
  67         u32 dbbt_search_area;
  68         u32 bb_mark_byte;
  69         u32 bb_mark_startbit;
  70         u32 bb_mark_phys_offset;
  71         u32 bch_type;
  72         u32 rsrvd3[8]; /* Toggle NAND timing parameters */
  73         u32 disbbm;
  74         u32 bb_mark_spare_offset;
  75         u32 rsrvd4[9]; /* ONFI NAND parameters */
  76         u32 disbb_search;
  77 };
  78
  79 struct mx6_dbbt_header {
  80         u32 checksum;
  81         u32 fingerprint;
  82         u32 version;
  83         u32 number_bb;
  84         u32 number_pages;
  85         u8 spare[492];
  86 };
  87
  88 struct mx6_dbbt {
  89         u32 nand_number;
  90         u32 number_bb;
  91         u32 bb_num[2040 / 4];
  92 };
  93
  94 #define BF_VAL(v, bf)           (((v) & bf##_MASK) >> bf##_OFFSET)
  95
  96 static nand_info_t *mtd = &nand_info[0];
  97
  98 extern void *_start;
  99
 100 #define BIT(v,n)        (((v) >> (n)) & 0x1)
 101
 102 static u8 calculate_parity_13_8(u8 d)
 103 {
 104         u8 p = 0;
 105
 106         p |= (BIT(d, 6) ^ BIT(d, 5) ^ BIT(d, 3) ^ BIT(d, 2))             << 0;
 107         p |= (BIT(d, 7) ^ BIT(d, 5) ^ BIT(d, 4) ^ BIT(d, 2) ^ BIT(d, 1)) << 1;
 108         p |= (BIT(d, 7) ^ BIT(d, 6) ^ BIT(d, 5) ^ BIT(d, 1) ^ BIT(d, 0)) << 2;
 109         p |= (BIT(d, 7) ^ BIT(d, 4) ^ BIT(d, 3) ^ BIT(d, 0))             << 3;
 110         p |= (BIT(d, 6) ^ BIT(d, 4) ^ BIT(d, 3) ^ BIT(d, 2) ^ BIT(d, 1) ^ BIT(d, 0)) << 4;
 111         return p;
 112 }
 113
 114 static void encode_hamming_13_8(void *_src, void *_ecc, size_t size)
 115 {
 116         int i;
 117         u8 *src = _src;
 118         u8 *ecc = _ecc;
 119
 120         for (i = 0; i < size; i++)
 121                 ecc[i] = calculate_parity_13_8(src[i]);
 122 }
 123
 124 static u32 calc_chksum(void *buf, size_t size)
 125 {
 126         u32 chksum = 0;
 127         u8 *bp = buf;
 128         size_t i;
 129
 130         for (i = 0; i < size; i++) {
 131                 chksum += bp[i];
 132         }
 133         return ~chksum;
 134 }
 135
 136 /*
 137   Physical organisation of data in NAND flash:
 138   metadata
 139   payload chunk 0 (may be empty)
 140   ecc for metadata + payload chunk 0
 141   payload chunk 1
 142   ecc for payload chunk 1
 143 ...
 144   payload chunk n
 145   ecc for payload chunk n
 146  */
 147
 148 static inline int calc_bb_offset(nand_info_t *mtd, struct mx6_fcb *fcb)
 149 {
 150         int bb_mark_offset;
 151         int chunk_data_size = fcb->ecc_blockn_size * 8;
 152         int chunk_ecc_size = (fcb->ecc_blockn_type << 1) * 13;
 153         int chunk_total_size = chunk_data_size + chunk_ecc_size;
 154         int bb_mark_chunk, bb_mark_chunk_offs;
 155
 156         bb_mark_offset = (mtd->writesize - fcb->metadata_size) * 8;
 157         if (fcb->ecc_block0_size == 0)
 158                 bb_mark_offset -= (fcb->ecc_block0_type << 1) * 13;
 159
 160         bb_mark_chunk = bb_mark_offset / chunk_total_size;
 161         bb_mark_chunk_offs = bb_mark_offset - (bb_mark_chunk * chunk_total_size);
 162         if (bb_mark_chunk_offs > chunk_data_size) {
 163                 printf("Unsupported ECC layout; BB mark resides in ECC data: %u\n",
 164                         bb_mark_chunk_offs);
 165                 return -EINVAL;
 166         }
 167         bb_mark_offset -= bb_mark_chunk * chunk_ecc_size;
 168         return bb_mark_offset;
 169 }
 170
 171 /*
 172  * return number of blocks to skip for a contiguous partition
 173  * of given # blocks
 174  */
 175 static int find_contig_space(int block, int num_blocks, int max_blocks)
 176 {
 177         int skip = 0;
 178         int found = 0;
 179         int last = block + max_blocks;
 180
 181         debug("Searching %u contiguous blocks from %d..%d\n",
 182                 num_blocks, block, block + max_blocks - 1);
 183         for (; block < last; block++) {
 184                 if (nand_block_isbad(mtd, block * mtd->erasesize)) {
 185                         skip += found + 1;
 186                         found = 0;
 187                         debug("Skipping %u blocks to %u\n",
 188                                 skip, block + 1);
 189                 } else {
 190                         found++;
 191                         if (found >= num_blocks) {
 192                                 debug("Found %u good blocks from %d..%d\n",
 193                                         found, block - found + 1, block);
 194                                 return skip;
 195                         }
 196                 }
 197         }
 198         return -ENOSPC;
 199 }
 200
 201 #define pr_fcb_val(p, n)        debug("%s=%08x(%d)\n", #n, (p)->n, (p)->n)
 202
 203 static struct mx6_fcb *create_fcb(void *buf, int fw1_start_block,
 204                                 int fw2_start_block, int fw_num_blocks)
 205 {
 206         struct gpmi_regs *gpmi_base = (void *)GPMI_BASE_ADDRESS;
 207         struct bch_regs *bch_base = (void *)BCH_BASE_ADDRESS;
 208         u32 fl0, fl1;
 209         u32 t0;
 210         int metadata_size;
 211         int bb_mark_bit_offs;
 212         struct mx6_fcb *fcb;
 213         int fcb_offs;
 214
 215         if (gpmi_base == NULL || bch_base == NULL) {
 216                 return ERR_PTR(-ENOMEM);
 217         }
 218
 219         fl0 = readl(&bch_base->hw_bch_flash0layout0);
 220         fl1 = readl(&bch_base->hw_bch_flash0layout1);
 221         t0 = readl(&gpmi_base->hw_gpmi_timing0);
 222
 223         metadata_size = BF_VAL(fl0, BCH_FLASHLAYOUT0_META_SIZE);
 224
 225         fcb = buf + ALIGN(metadata_size, 4);
 226         fcb_offs = (void *)fcb - buf;
 227
 228         memset(buf, 0xff, fcb_offs);
 229         memset(fcb, 0x00, sizeof(*fcb));
 230         memset(fcb + 1, 0xff, mtd->erasesize - fcb_offs - sizeof(*fcb));
 231
 232         strncpy((char *)&fcb->fingerprint, "FCB ", 4);
 233         fcb->version = cpu_to_be32(1);
 234
 235         fcb->disbb_search = 0;
 236         fcb->disbbm = 1;
 237
 238         /* ROM code assumes GPMI clock of 25 MHz */
 239         fcb->timing.data_setup = BF_VAL(t0, GPMI_TIMING0_DATA_SETUP) * 40;
 240         fcb->timing.data_hold = BF_VAL(t0, GPMI_TIMING0_DATA_HOLD) * 40;
 241         fcb->timing.address_setup = BF_VAL(t0, GPMI_TIMING0_ADDRESS_SETUP) * 40;
 242
 243         fcb->page_data_size = mtd->writesize;
 244         fcb->total_page_size = mtd->writesize + mtd->oobsize;
 245         fcb->sectors_per_block = mtd->erasesize / mtd->writesize;
 246
 247         fcb->ecc_block0_type = BF_VAL(fl0, BCH_FLASHLAYOUT0_ECC0);
 248         fcb->ecc_block0_size = BF_VAL(fl0, BCH_FLASHLAYOUT0_DATA0_SIZE) * 4;
 249         fcb->ecc_blockn_type = BF_VAL(fl1, BCH_FLASHLAYOUT1_ECCN);
 250         fcb->ecc_blockn_size = BF_VAL(fl1, BCH_FLASHLAYOUT1_DATAN_SIZE) * 4;
 251
 252         pr_fcb_val(fcb, ecc_block0_type);
 253         pr_fcb_val(fcb, ecc_blockn_type);
 254         pr_fcb_val(fcb, ecc_block0_size);
 255         pr_fcb_val(fcb, ecc_blockn_size);
 256
 257         fcb->metadata_size = BF_VAL(fl0, BCH_FLASHLAYOUT0_META_SIZE);
 258         fcb->ecc_blocks_per_page = BF_VAL(fl0, BCH_FLASHLAYOUT0_NBLOCKS);
 259         fcb->bch_mode = readl(&bch_base->hw_bch_mode);
 260         fcb->bch_type = 0; /* BCH20 */
 261
 262         fcb->fw1_start_page = fw1_start_block * fcb->sectors_per_block;
 263         fcb->fw1_sectors = fw_num_blocks * fcb->sectors_per_block;
 264         pr_fcb_val(fcb, fw1_start_page);
 265         pr_fcb_val(fcb, fw1_sectors);
 266
 267         if (fw2_start_block != 0 && fw2_start_block < mtd->size / mtd->erasesize) {
 268                 fcb->fw2_start_page = fw2_start_block * fcb->sectors_per_block;
 269                 fcb->fw2_sectors = fcb->fw1_sectors;
 270                 pr_fcb_val(fcb, fw2_start_page);
 271                 pr_fcb_val(fcb, fw2_sectors);
 272         }
 273
 274         fcb->dbbt_search_area = 0;
 275
 276         bb_mark_bit_offs = calc_bb_offset(mtd, fcb);
 277         if (bb_mark_bit_offs < 0)
 278                 return ERR_PTR(bb_mark_bit_offs);
 279         fcb->bb_mark_byte = bb_mark_bit_offs / 8;
 280         fcb->bb_mark_startbit = bb_mark_bit_offs % 8;
 281         fcb->bb_mark_phys_offset = mtd->writesize;
 282
 283         pr_fcb_val(fcb, bb_mark_byte);
 284         pr_fcb_val(fcb, bb_mark_startbit);
 285         pr_fcb_val(fcb, bb_mark_phys_offset);
 286
 287         fcb->checksum = calc_chksum(&fcb->fingerprint, 512 - 4);
 288         return fcb;
 289 }
 290
 291 static int find_fcb(void *ref, int page)
 292 {
 293         int ret = 0;
 294         struct nand_chip *chip = mtd->priv;
 295         void *buf = malloc(mtd->erasesize);
 296
 297         if (buf == NULL) {
 298                 return -ENOMEM;
 299         }
 300         chip->select_chip(mtd, 0);
 301         chip->cmdfunc(mtd, NAND_CMD_READ0, 0x00, page);
 302         ret = chip->ecc.read_page_raw(mtd, chip, buf, 1, page);
 303         if (ret) {
 304                 printf("Failed to read FCB from page %u: %d\n", page, ret);
 305                 goto out;
 306         }
 307         if (memcmp(buf, ref, mtd->writesize) == 0) {
 308                 debug("Found FCB in page %u (%08x)\n",
 309                         page, page * mtd->writesize);
 310                 ret = 1;
 311         }
 312 out:
 313         chip->select_chip(mtd, -1);
 314         free(buf);
 315         return ret;
 316 }
 317
 318 static int write_fcb(void *buf, int block)
 319 {
 320         int ret;
 321         struct nand_chip *chip = mtd->priv;
 322         int page = block * mtd->erasesize / mtd->writesize;
 323
 324         ret = find_fcb(buf, page);
 325         if (ret > 0) {
 326                 printf("FCB at block %d is up to date\n", block);
 327                 return 0;
 328         }
 329
 330         ret = nand_erase(mtd, block * mtd->erasesize, mtd->erasesize);
 331         if (ret) {
 332                 printf("Failed to erase FCB block %u\n", block);
 333                 return ret;
 334         }
 335
 336         printf("Writing FCB to block %d @ %08llx\n", block,
 337                 (u64)block * mtd->erasesize);
 338         chip->select_chip(mtd, 0);
 339         ret = chip->write_page(mtd, chip, buf, 1, page, 0, 1);
 340         if (ret) {
 341                 printf("Failed to write FCB to block %u: %d\n", block, ret);
 342         }
 343         chip->select_chip(mtd, -1);
 344         return ret;
 345 }
 346
 347 struct mx6_ivt {
 348         u32 magic;
 349         u32 entry;
 350         u32 rsrvd1;
 351         void *dcd;
 352         void *boot_data;
 353         void *self;
 354         void *csf;
 355         u32 rsrvd2;
 356 };
 357
 358 struct mx6_boot_data {
 359         u32 start;
 360         u32 length;
 361         u32 plugin;
 362 };
 363
 364 static int find_ivt(void *buf)
 365 {
 366         struct mx6_ivt *ivt_hdr = buf + 0x400;
 367
 368         if ((ivt_hdr->magic & 0xff0000ff) != 0x400000d1)
 369                 return 0;
 370
 371         return 1;
 372 }
 373
 374 static inline void *reloc(void *dst, void *base, void *ptr)
 375 {
 376         return dst + (ptr - base);
 377 }
 378
 379 static int patch_ivt(void *buf, size_t fsize)
 380 {
 381         struct mx6_ivt *ivt_hdr = buf + 0x400;
 382         struct mx6_boot_data *boot_data;
 383
 384         if (!find_ivt(buf)) {
 385                 printf("No IVT found in image at %p\n", buf);
 386                 return -EINVAL;
 387         }
 388         boot_data = reloc(ivt_hdr, ivt_hdr->self, ivt_hdr->boot_data);
 389         boot_data->length = fsize;
 390
 391         return 0;
 392 }
 393
 394 #define chk_overlap(a,b)                                \
 395         ((a##_start_block <= b##_end_block &&           \
 396                 a##_end_block >= b##_start_block) ||    \
 397         (b##_start_block <= a##_end_block &&            \
 398                 b##_end_block >= a##_start_block))
 399
 400 #define fail_if_overlap(a,b,m1,m2) do {                         \
 401         if (chk_overlap(a, b)) {                                \
 402                 printf("%s blocks %lu..%lu overlap %s in blocks %lu..%lu!\n", \
 403                         m1, a##_start_block, a##_end_block,     \
 404                         m2, b##_start_block, b##_end_block);    \
 405                 return -EINVAL;                                 \
 406         }                                                       \
 407 } while (0)
 408
 409 static int tx6_prog_uboot(void *addr, int start_block, int skip,
 410                         size_t size, size_t max_len)
 411 {
 412         int ret;
 413         nand_erase_options_t erase_opts = { 0, };
 414         size_t actual;
 415         size_t prg_length = max_len - skip * mtd->erasesize;
 416         int prg_start = (start_block + skip) * mtd->erasesize;
 417
 418         erase_opts.offset = start_block * mtd->erasesize;
 419         erase_opts.length = max_len;
 420         erase_opts.quiet = 1;
 421
 422         printf("Erasing flash @ %08llx..%08llx\n", erase_opts.offset,
 423                 erase_opts.offset + erase_opts.length - 1);
 424         ret = nand_erase_opts(mtd, &erase_opts);
 425         if (ret) {
 426                 printf("Failed to erase flash: %d\n", ret);
 427                 return ret;
 428         }
 429
 430         printf("Programming flash @ %08llx..%08llx from %p\n",
 431                 (u64)start_block * mtd->erasesize,
 432                 (u64)start_block * mtd->erasesize + size - 1, addr);
 433         actual = size;
 434         ret = nand_write_skip_bad(mtd, prg_start, &actual, NULL,
 435                                 prg_length, addr, WITH_DROP_FFS);
 436         if (ret) {
 437                 printf("Failed to program flash: %d\n", ret);
 438                 return ret;
 439         }
 440         if (actual < size) {
 441                 printf("Could only write %u of %u bytes\n", actual, size);
 442                 return -EIO;
 443         }
 444         return 0;
 445 }
 446
 447 #ifdef CONFIG_ENV_IS_IN_NAND
 448 #ifndef CONFIG_ENV_OFFSET_REDUND
 449 #define TOTAL_ENV_SIZE CONFIG_ENV_RANGE
 450 #else
 451 #define TOTAL_ENV_SIZE (CONFIG_ENV_RANGE * 2)
 452 #endif
 453 #endif
 454
 455 int do_update(cmd_tbl_t *cmdtp, int flag, int argc, char *const argv[])
 456 {
 457         int ret;
 458         const unsigned long fcb_start_block = 0, fcb_end_block = 0;
 459         int erase_size = mtd->erasesize;
 460         int page_size = mtd->writesize;
 461         void *buf;
 462         char *load_addr;
 463         char *file_size;
 464         size_t size = 0;
 465         void *addr = NULL;
 466         struct mx6_fcb *fcb;
 467         unsigned long mtd_num_blocks = mtd->size / mtd->erasesize;
 468 #ifdef CONFIG_ENV_IS_IN_NAND
 469         unsigned long env_start_block = CONFIG_ENV_OFFSET / mtd->erasesize;
 470         unsigned long env_end_block = env_start_block +
 471                 DIV_ROUND_UP(TOTAL_ENV_SIZE, mtd->erasesize) - 1;
 472 #endif
 473         int optind;
 474         int fw2_set = 0;
 475         unsigned long fw1_start_block = 0, fw1_end_block;
 476         unsigned long fw2_start_block = 0, fw2_end_block;
 477         unsigned long fw_num_blocks;
 478         int fw1_skip, fw2_skip;
 479         unsigned long extra_blocks = 0;
 480         size_t max_len1, max_len2;
 481         struct mtd_device *dev;
 482         struct part_info *part_info;
 483         struct part_info *redund_part_info;
 484         const char *uboot_part = "u-boot";
 485         const char *redund_part = NULL;
 486         u8 part_num;
 487         u8 redund_part_num;
 488
 489         ret = mtdparts_init();
 490         if (ret)
 491                 return ret;
 492
 493         for (optind = 1; optind < argc; optind++) {
 494                 char *endp;
 495
 496                 if (strcmp(argv[optind], "-f") == 0) {
 497                         if (optind >= argc - 1) {
 498                                 printf("Option %s requires an argument\n",
 499                                         argv[optind]);
 500                                 return -EINVAL;
 501                         }
 502                         optind++;
 503                         fw1_start_block = simple_strtoul(argv[optind], &endp, 0);
 504                         if (*endp != '\0') {
 505                                 uboot_part = argv[optind];
 506                                 continue;
 507                         }
 508                         uboot_part = NULL;
 509                         if (fw1_start_block >= mtd_num_blocks) {
 510                                 printf("Block number %lu is out of range: 0..%lu\n",
 511                                         fw1_start_block, mtd_num_blocks - 1);
 512                                 return -EINVAL;
 513                         }
 514                 } else if (strcmp(argv[optind], "-r") == 0) {
 515                         fw2_set = 1;
 516                         if (optind < argc - 1 && argv[optind + 1][0] != '-') {
 517                                 optind++;
 518                                 fw2_start_block = simple_strtoul(argv[optind],
 519                                                                 &endp, 0);
 520                                 if (*endp != '\0') {
 521                                         redund_part = argv[optind];
 522                                         continue;
 523                                 }
 524                                 if (fw2_start_block >= mtd_num_blocks) {
 525                                         printf("Block number %lu is out of range: 0..%lu\n",
 526                                                 fw2_start_block,
 527                                                 mtd_num_blocks - 1);
 528                                         return -EINVAL;
 529                                 }
 530                         }
 531                 } else if (strcmp(argv[optind], "-e") == 0) {
 532                         if (optind >= argc - 1) {
 533                                 printf("Option %s requires an argument\n",
 534                                         argv[optind]);
 535                                 return -EINVAL;
 536                         }
 537                         optind++;
 538                         extra_blocks = simple_strtoul(argv[optind], NULL, 0);
 539                         if (extra_blocks >= mtd_num_blocks) {
 540                                 printf("Extra block count %lu is out of range: 0..%lu\n",
 541                                         extra_blocks,
 542                                         mtd_num_blocks - 1);
 543                                 return -EINVAL;
 544                         }
 545                 } else if (argv[optind][0] == '-') {
 546                         printf("Unrecognized option %s\n", argv[optind]);
 547                         return -EINVAL;
 548                 } else {
 549                         break;
 550                 }
 551         }
 552
 553         load_addr = getenv("fileaddr");
 554         file_size = getenv("filesize");
 555
 556         if (argc - optind < 1 && load_addr == NULL) {
 557                 printf("Load address not specified\n");
 558                 return -EINVAL;
 559         }
 560         if (argc - optind < 2 && file_size == NULL) {
 561                 printf("WARNING: Image size not specified; overwriting whole uboot partition\n");
 562         }
 563         if (argc > optind) {
 564                 load_addr = NULL;
 565                 addr = (void *)simple_strtoul(argv[optind], NULL, 16);
 566                 optind++;
 567         }
 568         if (argc > optind) {
 569                 file_size = NULL;
 570                 size = simple_strtoul(argv[optind], NULL, 16);
 571                 optind++;
 572         }
 573         if (load_addr != NULL) {
 574                 addr = (void *)simple_strtoul(load_addr, NULL, 16);
 575                 printf("Using default load address %p\n", addr);
 576         }
 577         if (file_size != NULL) {
 578                 size = simple_strtoul(file_size, NULL, 16);
 579                 printf("Using default file size %08x\n", size);
 580         }
 581         if (size > 0) {
 582                 fw_num_blocks = DIV_ROUND_UP(size, mtd->erasesize);
 583         } else {
 584                 fw_num_blocks = part_info->size / mtd->erasesize -
 585                         extra_blocks;
 586                 size = fw_num_blocks * mtd->erasesize;
 587         }
 588
 589         if (uboot_part) {
 590                 ret = find_dev_and_part(uboot_part, &dev, &part_num,
 591                                         &part_info);
 592                 if (ret) {
 593                         printf("Failed to find '%s' partition: %d\n",
 594                                 uboot_part, ret);
 595                         return ret;
 596                 }
 597                 fw1_start_block = part_info->offset / mtd->erasesize;
 598                 max_len1 = part_info->size;
 599         } else {
 600                 max_len1 = (fw_num_blocks + extra_blocks) * mtd->erasesize;
 601         }
 602
 603         if (redund_part) {
 604                 ret = find_dev_and_part(redund_part, &dev, &redund_part_num,
 605                                         &redund_part_info);
 606                 if (ret) {
 607                         printf("Failed to find '%s' partition: %d\n",
 608                                 redund_part, ret);
 609                         return ret;
 610                 }
 611                 fw2_start_block = redund_part_info->offset / mtd->erasesize;
 612                 max_len2 = redund_part_info->size;
 613         } else if (fw2_set) {
 614                 max_len2 = (fw_num_blocks + extra_blocks) * mtd->erasesize;
 615         } else {
 616                 max_len2 = 0;
 617         }
 618
 619         fw1_skip = find_contig_space(fw1_start_block, fw_num_blocks,
 620                                 max_len1 / mtd->erasesize);
 621         if (fw1_skip < 0) {
 622                 printf("Could not find %lu contiguous good blocks for fw image\n",
 623                         fw_num_blocks);
 624                 if (uboot_part) {
 625 #ifdef CONFIG_ENV_IS_IN_NAND
 626                         if (part_info->offset <= CONFIG_ENV_OFFSET + TOTAL_ENV_SIZE) {
 627                                 printf("Use a different partition\n");
 628                         } else {
 629                                 printf("Increase the size of the '%s' partition\n",
 630                                         uboot_part);
 631                         }
 632 #else
 633                         printf("Increase the size of the '%s' partition\n",
 634                                 uboot_part);
 635 #endif
 636                 } else {
 637                         printf("Increase the number of spare blocks to use with the '-e' option\n");
 638                 }
 639                 return -ENOSPC;
 640         }
 641         fw1_end_block = fw1_start_block + fw1_skip + fw_num_blocks - 1;
 642
 643         if (fw2_set && fw2_start_block == 0)
 644                 fw2_start_block = fw1_end_block + 1;
 645         if (fw2_start_block > 0) {
 646                 fw2_skip = find_contig_space(fw2_start_block, fw_num_blocks,
 647                                         max_len2 / mtd->erasesize);
 648                 if (fw2_skip < 0) {
 649                         printf("Could not find %lu contiguous good blocks for redundant fw image\n",
 650                                 fw_num_blocks);
 651                         if (redund_part) {
 652                                 printf("Increase the size of the '%s' partition or use a different partition\n",
 653                                         redund_part);
 654                         } else {
 655                                 printf("Increase the number of spare blocks to use with the '-e' option\n");
 656                         }
 657                         return -ENOSPC;
 658                 }
 659         } else {
 660                 fw2_skip = 0;
 661         }
 662         fw2_end_block = fw2_start_block + fw2_skip + fw_num_blocks - 1;
 663
 664 #ifdef CONFIG_ENV_IS_IN_NAND
 665         fail_if_overlap(fcb, env, "FCB", "Environment");
 666         fail_if_overlap(fw1, env, "FW1", "Environment");
 667 #endif
 668         fail_if_overlap(fcb, fw1, "FCB", "FW1");
 669         if (fw2_set) {
 670                 fail_if_overlap(fcb, fw2, "FCB", "FW2");
 671 #ifdef CONFIG_ENV_IS_IN_NAND
 672                 fail_if_overlap(fw2, env, "FW2", "Environment");
 673 #endif
 674                 fail_if_overlap(fw1, fw2, "FW1", "FW2");
 675         }
 676
 677         buf = malloc(erase_size);
 678         if (buf == NULL) {
 679                 printf("Failed to allocate buffer\n");
 680                 return -ENOMEM;
 681         }
 682
 683         fcb = create_fcb(buf, fw1_start_block + fw1_skip,
 684                         fw2_start_block + fw2_skip, fw_num_blocks);
 685         if (IS_ERR(fcb)) {
 686                 printf("Failed to initialize FCB: %ld\n", PTR_ERR(fcb));
 687                 free(buf);
 688                 return PTR_ERR(fcb);
 689         }
 690         encode_hamming_13_8(fcb, (void *)fcb + 512, 512);
 691
 692         ret = write_fcb(buf, fcb_start_block);
 693         free(buf);
 694         if (ret) {
 695                 printf("Failed to write FCB to block %lu\n", fcb_start_block);
 696                 return ret;
 697         }
 698         ret = patch_ivt(addr, size);
 699         if (ret) {
 700                 return ret;
 701         }
 702
 703         if (size & (page_size - 1)) {
 704                 memset(addr + size, 0xff, size & (page_size - 1));
 705                 size = ALIGN(size, page_size);
 706         }
 707
 708         printf("Programming U-Boot image from %p to block %lu @ %08llx\n",
 709                 addr, fw1_start_block + fw1_skip,
 710                 (u64)(fw1_start_block + fw1_skip) * mtd->erasesize);
 711         ret = tx6_prog_uboot(addr, fw1_start_block, fw1_skip, size,
 712                         max_len1);
 713
 714         if (fw2_start_block == 0) {
 715                 return ret;
 716         }
 717
 718         printf("Programming redundant U-Boot image to block %lu @ %08llx\n",
 719                 fw2_start_block + fw2_skip,
 720                 (u64)(fw2_start_block + fw2_skip) * mtd->erasesize);
 721         ret = tx6_prog_uboot(addr, fw2_start_block, fw2_skip, fw_num_blocks,
 722                         max_len2);
 723         return ret;
 724 }
 725
 726 U_BOOT_CMD(romupdate, 11, 0, do_update,
 727         "Creates an FCB data structure and writes an U-Boot image to flash",
 728         "[-f {<part>|block#}] [-r [{<part>|block#}]] [-e #] [<address>] [<length>]\n"
 729         "\t-f <part>\twrite bootloader image to partition <part>\n"
 730         "\t-f #\twrite bootloader image at block # (decimal)\n"
 731         "\t-r\twrite redundant bootloader image at next free block after first image\n"
 732         "\t-r <part>\twrite redundant bootloader image to partition <part>\n"
 733         "\t-r #\twrite redundant bootloader image at block # (decimal)\n"
 734         "\t-e #\tspecify number of redundant blocks per boot loader image\n"
 735         "\t\tonly valid if -f or -r specify a flash address rather than a partition name\n"
 736         "\t<address>\tRAM address of bootloader image (default: ${fileaddr}\n"
 737         "\t<length>\tlength of bootloader image in RAM (default: ${filesize}"
 738         );