2 * Copyright (C) 2012 Lothar Waßmann <LW@KARO-electronics.de>
3 * based on: code from RedBoot (C) Uwe Steinkohl <US@KARO-electronics.de>
5 * See file CREDITS for list of people who contributed to this
8 * This program is free software; you can redistribute it and/or
9 * modify it under the terms of the GNU General Public License as
10 * published by the Free Software Foundation; either version 2 of
11 * the License, or (at your option) any later version.
13 * This program is distributed in the hope that it will be useful,
14 * but WITHOUT ANY WARRANTY; without even the implied warranty of
15 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
16 * GNU General Public License for more details.
18 * You should have received a copy of the GNU General Public License
19 * along with this program; if not, write to the Free Software
20 * Foundation, Inc., 59 Temple Place, Suite 330, Boston,
30 #include <asm/errno.h>
31 #include <jffs2/load_kernel.h>
33 DECLARE_GLOBAL_DATA_PTR;
35 #define WINCE_VRAM_BASE 0x80000000
36 #define CE_FIX_ADDRESS(a) ((void *)((a) - WINCE_VRAM_BASE + CONFIG_SYS_SDRAM_BASE))
39 #define INT_MAX ((int)(~0U >> 1))
42 /* Bin image parse states */
43 #define CE_PS_RTI_ADDR 0
44 #define CE_PS_RTI_LEN 1
45 #define CE_PS_E_ADDR 2
47 #define CE_PS_E_CHKSUM 4
48 #define CE_PS_E_DATA 5
50 #define CE_MIN(a, b) (((a) < (b)) ? (a) : (b))
51 #define CE_MAX(a, b) (((a) > (b)) ? (a) : (b))
54 #define STRMAC(s) _STRMAC(s)
56 static ce_bin __attribute__ ((aligned (32))) g_bin;
57 static ce_net __attribute__ ((aligned (32))) g_net;
58 static IPaddr_t server_ip;
60 static void ce_init_bin(ce_bin *bin, unsigned char *dataBuffer)
62 memset(bin, 0, sizeof(*bin));
64 bin->data = dataBuffer;
65 bin->parseState = CE_PS_RTI_ADDR;
66 bin->parsePtr = (unsigned char *)bin;
69 static int ce_is_bin_image(void *image, int imglen)
71 if (imglen < CE_BIN_SIGN_LEN) {
75 return memcmp(image, CE_BIN_SIGN, CE_BIN_SIGN_LEN) == 0;
78 static const struct ce_magic {
81 ce_std_driver_globals drv_glb;
82 } ce_magic_template = {
84 .size = sizeof(ce_std_driver_globals),
87 .signature = STD_DRV_GLB_SIGNATURE,
95 static void __attribute__((unused)) ce_dump_block(void *ptr, int length)
101 for (i = 0; i < length; i++) {
103 printf("\n%p: ", ptr + i);
106 printf("%02x ", p[i]);
107 if (!((i + 1) % 16)){
109 for (j = i - 15; j <= i; j++){
110 if((p[j] > 0x1f) && (p[j] < 0x7f)) {
121 static inline void ce_dump_block(void *ptr, int length)
126 static void ce_setup_std_drv_globals(ce_std_driver_globals *std_drv_glb)
128 char *mtdparts = getenv("mtdparts");
129 size_t max_len = ALIGN((unsigned long)std_drv_glb, SZ_4K) -
130 (unsigned long)&std_drv_glb->mtdparts;
133 memcpy(&std_drv_glb->kitl.mac, eth_get_dev()->enetaddr,
134 sizeof(std_drv_glb->kitl.mac));
136 snprintf(std_drv_glb->deviceId, sizeof(std_drv_glb->deviceId),
137 "Triton%02X", eth_get_dev()->enetaddr[5]);
139 NetCopyIP(&std_drv_glb->kitl.ipAddress, &NetOurIP);
140 std_drv_glb->kitl.ipMask = getenv_IPaddr("netmask");
141 std_drv_glb->kitl.ipRoute = getenv_IPaddr("gatewayip");
144 strncpy(std_drv_glb->mtdparts, mtdparts, max_len);
145 std_drv_glb->mtdparts[max_len - 1] = '\0';
147 printf("Failed to get mtdparts environment variable\n");
151 static void ce_prepare_run_bin(ce_bin *bin)
153 ce_driver_globals *drv_glb;
154 struct ce_magic *ce_magic = (void *)CONFIG_SYS_SDRAM_BASE + 0x160;
155 ce_std_driver_globals *std_drv_glb = &ce_magic->drv_glb;
157 /* Clear os RAM area (if needed) */
158 if (bin->edbgConfig.flags & EDBG_FL_CLEANBOOT) {
159 debug("cleaning memory from %p to %p\n",
160 bin->eRamStart, bin->eRamStart + bin->eRamLen);
162 printf("Preparing clean boot ... ");
163 memset(bin->eRamStart, 0, bin->eRamLen);
167 /* Prepare driver globals (if needed) */
169 debug("Copying CE MAGIC from %p to %p..%p\n",
170 &ce_magic_template, ce_magic,
171 (void *)ce_magic + sizeof(*ce_magic) - 1);
172 memcpy(ce_magic, &ce_magic_template, sizeof(*ce_magic));
174 ce_setup_std_drv_globals(std_drv_glb);
175 ce_magic->size = sizeof(*std_drv_glb) +
176 strlen(std_drv_glb->mtdparts) + 1;
177 ce_dump_block(ce_magic, offsetof(struct ce_magic, drv_glb) +
180 drv_glb = bin->eDrvGlb;
181 memset(drv_glb, 0, sizeof(*drv_glb));
183 drv_glb->signature = DRV_GLB_SIGNATURE;
185 /* Local ethernet MAC address */
186 memcpy(drv_glb->macAddr, std_drv_glb->kitl.mac,
187 sizeof(drv_glb->macAddr));
188 debug("got MAC address %02x:%02x:%02x:%02x:%02x:%02x from environment\n",
189 drv_glb->macAddr[0], drv_glb->macAddr[1],
190 drv_glb->macAddr[2], drv_glb->macAddr[3],
191 drv_glb->macAddr[4], drv_glb->macAddr[5]);
193 /* Local IP address */
194 drv_glb->ipAddr = getenv_IPaddr("ipaddr");
197 drv_glb->ipMask = getenv_IPaddr("netmask");
200 drv_glb->ipGate = getenv_IPaddr("gatewayip");
202 debug("got IP address %pI4 from environment\n", &drv_glb->ipAddr);
203 debug("got IP mask %pI4 from environment\n", &drv_glb->ipMask);
204 debug("got gateway address %pI4 from environment\n", &drv_glb->ipGate);
206 /* EDBG services config */
207 memcpy(&drv_glb->edbgConfig, &bin->edbgConfig,
208 sizeof(bin->edbgConfig));
212 * Make sure, all the above makes it into SDRAM because
213 * WinCE switches the cache & MMU off, obviously without
219 static int ce_lookup_ep_bin(ce_bin *bin)
222 ce_toc_entry *tentry;
225 uint32_t *sig = (uint32_t *)(bin->rtiPhysAddr + ROM_SIGNATURE_OFFSET);
227 debug("Looking for TOC signature at %p\n", sig);
229 /* Check image Table Of Contents (TOC) signature */
230 if (*sig != ROM_SIGNATURE) {
231 printf("Error: Did not find image TOC signature!\n");
232 printf("Expected %08x at address %p; found %08x instead\n",
233 ROM_SIGNATURE, sig, *sig);
237 /* Lookup entry point */
238 header = CE_FIX_ADDRESS(*(unsigned int *)(bin->rtiPhysAddr +
239 ROM_SIGNATURE_OFFSET +
240 sizeof(unsigned int)));
241 tentry = (ce_toc_entry *)(header + 1);
243 for (i = 0; i < header->nummods; i++) {
244 // Look for 'nk.exe' module
245 if (strcmp(CE_FIX_ADDRESS(tentry[i].fileName), "nk.exe") == 0) {
246 // Save entry point and RAM addresses
248 e32 = CE_FIX_ADDRESS(tentry[i].e32Offset);
250 bin->eEntryPoint = CE_FIX_ADDRESS(tentry[i].loadOffset) +
252 bin->eRamStart = CE_FIX_ADDRESS(header->ramStart);
253 bin->eRamLen = header->ramEnd - header->ramStart;
254 // Save driver_globals address
255 // Must follow RAM section in CE config.bib file
259 // RAM 80900000 03200000 RAM
260 // DRV_GLB 83B00000 00001000 RESERVED
262 bin->eDrvGlb = CE_FIX_ADDRESS(header->ramEnd);
267 // Error: Did not find 'nk.exe' module
271 static int ce_parse_bin(ce_bin *bin)
273 unsigned char *pbData = bin->data;
274 int len = bin->dataLen;
277 debug("starting ce image parsing:\n\tbin->binLen: 0x%08X\n", bin->binLen);
280 if (bin->binLen == 0) {
281 // Check for the .BIN signature first
282 if (!ce_is_bin_image(pbData, len)) {
283 printf("Error: Invalid or corrupted .BIN image!\n");
287 printf("Loading Windows CE .BIN image ...\n");
289 len -= CE_BIN_SIGN_LEN;
290 pbData += CE_BIN_SIGN_LEN;
294 switch (bin->parseState) {
300 copyLen = CE_MIN(sizeof(unsigned int) - bin->parseLen, len);
301 memcpy(&bin->parsePtr[bin->parseLen], pbData, copyLen);
303 bin->parseLen += copyLen;
307 if (bin->parseLen == sizeof(unsigned int)) {
308 if (bin->parseState == CE_PS_RTI_ADDR)
309 bin->rtiPhysAddr = CE_FIX_ADDRESS(bin->rtiPhysAddr);
310 else if (bin->parseState == CE_PS_E_ADDR &&
312 bin->ePhysAddr = CE_FIX_ADDRESS(bin->ePhysAddr);
316 bin->parsePtr += sizeof(unsigned int);
318 if (bin->parseState == CE_PS_E_DATA) {
319 if (bin->ePhysAddr) {
320 bin->parsePtr = bin->ePhysAddr;
321 bin->parseChkSum = 0;
332 debug("ePhysAddr=%p physlen=%08x parselen=%08x\n",
333 bin->ePhysAddr, bin->ePhysLen, bin->parseLen);
334 if (bin->ePhysAddr) {
335 copyLen = CE_MIN(bin->ePhysLen - bin->parseLen, len);
336 bin->parseLen += copyLen;
340 bin->parseChkSum += *pbData;
341 *bin->parsePtr++ = *pbData++;
344 if (bin->parseLen == bin->ePhysLen) {
345 printf("Section [%02d]: address %p, size 0x%08X, checksum %s\n",
349 (bin->eChkSum == bin->parseChkSum) ? "ok" : "fail");
351 if (bin->eChkSum != bin->parseChkSum) {
352 printf("Error: Checksum error, corrupted .BIN file!\n");
353 printf("checksum calculated: 0x%08x from file: 0x%08x\n",
354 bin->parseChkSum, bin->eChkSum);
360 bin->parseState = CE_PS_E_ADDR;
362 bin->parsePtr = (unsigned char *)&bin->ePhysAddr;
375 if (!ce_lookup_ep_bin(bin)) {
376 printf("Error: entry point not found!\n");
381 printf("Entry point: %p, address range: %p-%p\n",
384 bin->rtiPhysAddr + bin->rtiPhysLen);
390 bin->binLen += bin->dataLen;
394 static int ce_bin_load(void *image, int imglen)
396 ce_init_bin(&g_bin, image);
397 g_bin.dataLen = imglen;
398 if (ce_parse_bin(&g_bin) == CE_PR_EOF) {
399 ce_prepare_run_bin(&g_bin);
406 static void ce_run_bin(void (*entry)(void))
408 printf("Launching Windows CE ...\n");
415 static int do_bootce(cmd_tbl_t *cmdtp, int flag, int argc, char *const argv[])
421 addr = (void *)simple_strtoul(argv[1], NULL, 16);
422 image_size = INT_MAX; /* actually we do not know the image size */
423 } else if (getenv("fileaddr") != NULL) {
424 addr = (void *)getenv_ulong("fileaddr", 16, 0);
425 image_size = getenv_ulong("filesize", 16, INT_MAX);
427 return CMD_RET_USAGE;
430 printf ("## Booting Windows CE Image from address %p ...\n", addr);
432 /* check if there is a valid windows CE image */
433 if (ce_is_bin_image(addr, image_size)) {
434 if (!ce_bin_load(addr, image_size)) {
435 /* Ops! Corrupted .BIN image! */
436 /* Handle error here ... */
437 printf("corrupted .BIN image !!!\n");
438 return CMD_RET_FAILURE;
440 if (getenv_yesno("autostart") != 1) {
442 * just use bootce to load the image to SDRAM;
443 * Do not start it automatically.
445 setenv_addr("fileaddr", g_bin.eEntryPoint);
446 return CMD_RET_SUCCESS;
448 ce_run_bin(g_bin.eEntryPoint); /* start the image */
450 printf("Image does not seem to be a valid Windows CE image!\n");
451 return CMD_RET_FAILURE;
453 return CMD_RET_FAILURE; /* never reached - just to keep compiler happy */
456 bootce, 2, 0, do_bootce,
457 "bootce [addr]\t- Boot a Windows CE image from memory\n",
459 "\taddr\t\t-boot image from address addr\n"
462 static int ce_nand_load(ce_bin *bin, size_t offset, void *buf, size_t max_len)
465 size_t len = max_len;
467 ret = nand_read_skip_bad(&nand_info[0], offset, &len, buf);
469 printf("NBOOTCE - aborted\n");
476 #define CE_NAND_BUF_SIZE 2048
478 static int do_nbootce(cmd_tbl_t *cmdtp, int flag, int argc, char *const argv[])
481 struct mtd_device *dev;
482 struct part_info *part_info;
487 size_t len = CE_NAND_BUF_SIZE;
489 if (argc < 2 || argc > 3)
490 return CMD_RET_USAGE;
492 offset = simple_strtoul(argv[1], &end, 16);
494 ret = find_dev_and_part(argv[1], &dev, &part_num,
497 offset = part_info->offset;
498 printf ("## Booting Windows CE Image from NAND partition %s at offset %08x\n",
501 printf ("## Booting Windows CE Image from NAND offset %08x\n",
506 ret = mtdparts_init();
508 return CMD_RET_FAILURE;
510 buffer = malloc(CE_NAND_BUF_SIZE);
511 if (buffer == NULL) {
512 printf("Failed to allocate %u byte buffer\n", CE_NAND_BUF_SIZE);
513 return CMD_RET_FAILURE;
516 ce_init_bin(&g_bin, buffer);
518 ret = ce_nand_load(&g_bin, offset, buffer,
521 printf("Failed to read NAND: %d\n", ret);
525 /* check if there is a valid windows CE image header */
526 if (ce_is_bin_image(buffer, len)) {
527 while (ce_parse_bin(&g_bin) == CE_PR_MORE) {
529 printf("NBOOTCE - canceled by user\n");
533 ret = ce_nand_load(&g_bin, offset, buffer,
540 if (getenv_yesno("autostart") != 1) {
542 * just use bootce to load the image to SDRAM;
543 * Do not start it automatically.
545 setenv_addr("fileaddr", g_bin.eEntryPoint);
546 return CMD_RET_SUCCESS;
548 ce_run_bin(g_bin.eEntryPoint); /* start the image */
550 printf("Image does not seem to be a valid Windows CE image!\n");
554 return CMD_RET_FAILURE;
557 nbootce, 2, 0, do_nbootce,
558 "Boot a Windows CE image from NAND\n",
560 "\toff\t\t- flash offset (hex)\n"
561 "\tpartition\t- partition name\n"
564 static int ce_send_write_ack(ce_net *net)
567 unsigned short wdata[2];
570 wdata[0] = htons(EDBG_CMD_WRITE_ACK);
571 wdata[1] = htons(net->blockNum);
572 net->dataLen = sizeof(wdata);
573 memcpy(net->data, wdata, net->dataLen);
576 ret = bootme_send_frame(net->data, net->dataLen);
578 printf("Failed to send write ack %d; retries=%d\n",
581 } while (ret != 0 && retries-- > 0);
585 static enum bootme_state ce_process_download(ce_net *net, ce_bin *bin)
587 int ret = net->state;
589 if (net->dataLen >= 4) {
590 unsigned short command;
591 unsigned short blknum;
593 memcpy(&command, net->data, sizeof(command));
594 command = ntohs(command);
595 debug("command found: 0x%04X\n", command);
597 if (net->state == BOOTME_DOWNLOAD) {
598 unsigned short nxt = net->blockNum + 1;
600 memcpy(&blknum, &net->data[2], sizeof(blknum));
601 blknum = ntohs(blknum);
603 net->blockNum = blknum;
605 int rc = ce_send_write_ack(net);
607 printf("Dropping out of sequence packet with ID %d (expected %d)\n",
617 case EDBG_CMD_WRITE_REQ:
618 if (net->state == BOOTME_INIT) {
619 // Check file name for WRITE request
620 // CE EShell uses "boot.bin" file name
621 if (strncmp((char *)&net->data[2],
622 "boot.bin", 8) == 0) {
625 printf("Locked Down download link, IP: %pI4\n",
627 printf("Sending BOOTME request [%d] to %pI4\n",
628 net->seqNum, &NetServerIP);
631 // Lock down EShell download link
632 ret = BOOTME_DOWNLOAD;
635 printf("Unknown link\n");
638 if (ret == BOOTME_DOWNLOAD) {
639 int rc = ce_send_write_ack(net);
648 bin->data = &net->data[4];
649 bin->dataLen = net->dataLen - 4;
650 ret = ce_parse_bin(bin);
651 if (ret != CE_PR_ERROR) {
652 int rc = ce_send_write_ack(net);
655 if (ret == CE_PR_EOF)
662 case EDBG_CMD_READ_REQ:
663 printf("Ignoring EDBG_CMD_READ_REQ\n");
664 /* Read requests are not supported
670 printf("Error: unknown error on the host side\n");
677 printf("unknown command 0x%04X\n", command);
678 net->state = BOOTME_ERROR;
684 static enum bootme_state ce_process_edbg(ce_net *net, ce_bin *bin)
686 enum bootme_state ret = net->state;
689 if (net->dataLen < sizeof(header)) {
691 printf("Invalid packet size %u\n", net->dataLen);
695 memcpy(&header, net->data, sizeof(header));
696 if (header.id != EDBG_ID) {
698 printf("Bad EDBG ID %08x\n", header.id);
703 if (header.service != EDBG_SVC_ADMIN) {
704 /* Unknown service */
705 printf("Bad EDBG service %02x\n", header.service);
710 if (net->state == BOOTME_INIT) {
711 /* Some diag output */
713 printf("Locked Down EDBG service link, IP: %pI4\n",
717 /* Lock down EDBG link */
718 net->state = BOOTME_DEBUG;
721 debug("%s@%d\n", __func__, __LINE__);
722 switch (header.cmd) {
723 case EDBG_CMD_JUMPIMG:
724 debug("%s@%d\n", __func__, __LINE__);
725 net->gotJumpingRequest = 1;
728 printf("Received JUMPING command\n");
730 /* Just pass through and copy CONFIG structure */
731 case EDBG_CMD_OS_CONFIG:
732 debug("%s@%d\n", __func__, __LINE__);
733 /* Copy config structure */
734 memcpy(&bin->edbgConfig, header.data,
735 sizeof(edbg_os_config_data));
737 printf("Received CONFIG command\n");
738 if (bin->edbgConfig.flags & EDBG_FL_DBGMSG) {
739 printf("--> Enabling DBGMSG service, IP: %d.%d.%d.%d, port: %d\n",
740 (bin->edbgConfig.dbgMsgIPAddr >> 0) & 0xFF,
741 (bin->edbgConfig.dbgMsgIPAddr >> 8) & 0xFF,
742 (bin->edbgConfig.dbgMsgIPAddr >> 16) & 0xFF,
743 (bin->edbgConfig.dbgMsgIPAddr >> 24) & 0xFF,
744 ntohs(bin->edbgConfig.dbgMsgPort));
747 if (bin->edbgConfig.flags & EDBG_FL_PPSH) {
748 printf("--> Enabling PPSH service, IP: %d.%d.%d.%d, port: %d\n",
749 (bin->edbgConfig.ppshIPAddr >> 0) & 0xFF,
750 (bin->edbgConfig.ppshIPAddr >> 8) & 0xFF,
751 (bin->edbgConfig.ppshIPAddr >> 16) & 0xFF,
752 (bin->edbgConfig.ppshIPAddr >> 24) & 0xFF,
753 ntohs(bin->edbgConfig.ppshPort));
756 if (bin->edbgConfig.flags & EDBG_FL_KDBG) {
757 printf("--> Enabling KDBG service, IP: %d.%d.%d.%d, port: %d\n",
758 (bin->edbgConfig.kdbgIPAddr >> 0) & 0xFF,
759 (bin->edbgConfig.kdbgIPAddr >> 8) & 0xFF,
760 (bin->edbgConfig.kdbgIPAddr >> 16) & 0xFF,
761 (bin->edbgConfig.kdbgIPAddr >> 24) & 0xFF,
762 ntohs(bin->edbgConfig.kdbgPort));
765 if (bin->edbgConfig.flags & EDBG_FL_CLEANBOOT) {
766 printf("--> Force clean boot\n");
774 printf("Received unknown command: %08X\n", header.cmd);
779 /* Respond with ack */
780 header.flags = EDBG_FL_FROM_DEV | EDBG_FL_ACK;
781 net->dataLen = EDBG_DATA_OFFSET;
782 debug("%s@%d: sending packet %p len %u\n", __func__, __LINE__,
783 net->data, net->dataLen);
784 bootme_send_frame(net->data, net->dataLen);
788 static enum bootme_state ce_edbg_handler(const void *buf, size_t len)
793 g_net.data = (void *)buf;
796 return ce_process_edbg(&g_net, &g_bin);
799 static void ce_init_edbg_link(ce_net *net)
801 /* Initialize EDBG link for commands */
802 net->state = BOOTME_INIT;
805 static enum bootme_state ce_download_handler(const void *buf, size_t len)
807 g_net.data = (void *)buf;
810 g_net.state = ce_process_download(&g_net, &g_bin);
814 static int ce_send_bootme(ce_net *net)
817 edbg_bootme_data *data;
818 unsigned char txbuf[PKTSIZE_ALIGN];
823 /* Fill out BOOTME packet */
826 memset(net->data, 0, PKTSIZE);
827 header = (eth_dbg_hdr *)net->data;
828 data = (edbg_bootme_data *)header->data;
830 header->id = EDBG_ID;
831 header->service = EDBG_SVC_ADMIN;
832 header->flags = EDBG_FL_FROM_DEV;
833 header->seqNum = net->seqNum++;
834 header->cmd = EDBG_CMD_BOOTME;
836 data->versionMajor = 0;
837 data->versionMinor = 0;
838 data->cpuId = EDBG_CPU_TYPE_ARM;
839 data->bootmeVer = EDBG_CURRENT_BOOTME_VERSION;
841 data->downloadPort = 0;
844 /* MAC address from environment*/
845 if (!eth_getenv_enetaddr("ethaddr", data->macAddr)) {
846 printf("'ethaddr' is not set or invalid\n");
847 memset(data->macAddr, 0, sizeof(data->macAddr));
850 /* IP address from active config */
851 NetCopyIP(&data->ipAddr, &NetOurIP);
853 // Device name string (NULL terminated). Should include
854 // platform and number based on Ether address (e.g. Odo42, CEPCLS2346, etc)
856 // We will use lower MAC address segment to create device name
857 // eg. MAC '00-0C-C6-69-09-05', device name 'Triton05'
859 strncpy(data->platformId, "Triton", sizeof(data->platformId));
860 snprintf(data->deviceName, sizeof(data->deviceName), "%s%02X",
861 data->platformId, data->macAddr[5]);
864 printf("header->id: %08X\r\n", header->id);
865 printf("header->service: %08X\r\n", header->service);
866 printf("header->flags: %08X\r\n", header->flags);
867 printf("header->seqNum: %08X\r\n", header->seqNum);
868 printf("header->cmd: %08X\r\n\r\n", header->cmd);
870 printf("data->versionMajor: %08X\r\n", data->versionMajor);
871 printf("data->versionMinor: %08X\r\n", data->versionMinor);
872 printf("data->cpuId: %08X\r\n", data->cpuId);
873 printf("data->bootmeVer: %08X\r\n", data->bootmeVer);
874 printf("data->bootFlags: %08X\r\n", data->bootFlags);
875 printf("data->svcPort: %08X\r\n\r\n", ntohs(data->svcPort));
877 printf("data->macAddr: %02X-%02X-%02X-%02X-%02X-%02X\r\n",
878 data->macAddr[0], data->macAddr[1],
879 data->macAddr[2], data->macAddr[3],
880 data->macAddr[4], data->macAddr[5]);
882 printf("data->ipAddr: %d.%d.%d.%d\r\n",
883 (data->ipAddr >> 0) & 0xFF,
884 (data->ipAddr >> 8) & 0xFF,
885 (data->ipAddr >> 16) & 0xFF,
886 (data->ipAddr >> 24) & 0xFF);
888 printf("data->platformId: %s\r\n", data->platformId);
890 printf("data->deviceName: %s\r\n", data->deviceName);
892 // Some diag output ...
894 printf("Sending BOOTME request [%d] to %pI4\n", net->seqNum,
898 net->dataLen = BOOTME_PKT_SIZE;
899 // net->status = CE_PR_MORE;
900 net->state = BOOTME_INIT;
902 debug("Start of buffer: %p\n", net->data);
903 debug("Start of ethernet buffer: %p\n", net->data);
904 debug("Start of CE header: %p\n", header);
905 debug("Start of CE data: %p\n", data);
908 debug("packet to send (ceconnect): \n");
909 for (i = 0; i < net->dataLen; i++) {
910 debug("0x%02X ", pkt[i]);
916 return BootMeRequest(server_ip, net->data, net->dataLen, 1);
919 static inline int ce_init_download_link(ce_net *net, ce_bin *bin, int verbose)
921 if (!eth_get_dev()) {
922 printf("No network interface available\n");
925 printf("Using device '%s'\n", eth_get_name());
927 /* Initialize EDBG link for download */
928 memset(net, 0, sizeof(*net));
930 net->verbose = verbose;
932 /* buffer will be dynamically assigned in ce_download_handler() */
933 ce_init_bin(bin, NULL);
937 #define UINT_MAX ~0UL
939 static inline int ce_download_file(ce_net *net, ulong timeout)
941 ulong start = get_timer_masked();
943 while (net->state == BOOTME_INIT) {
946 if (timeout && get_timer(start) > timeout) {
947 printf("CELOAD - Canceled, timeout\n");
952 printf("CELOAD - canceled by user\n");
956 if (ce_send_bootme(&g_net)) {
957 printf("CELOAD - error while sending BOOTME request\n");
962 printf("Waiting for connection, timeout %lu sec\n",
963 DIV_ROUND_UP(timeout - get_timer(start),
966 printf("Waiting for connection, enter ^C to abort\n");
970 ret = BootMeDownload(ce_download_handler);
971 if (ret == BOOTME_ERROR) {
972 printf("CELOAD - aborted\n");
979 static void ce_disconnect(void)
981 net_set_udp_handler(NULL);
985 static int do_ceconnect(cmd_tbl_t *cmdtp, int flag, int argc, char *const argv[])
994 for (i = 1; i < argc; i++){
997 if (argv[i][1] == 'v') {
999 } else if (argv[i][1] == 't') {
1002 timeout = simple_strtoul(argv[i],
1004 if (timeout >= UINT_MAX / CONFIG_SYS_HZ) {
1005 printf("Timeout value %lu out of range (max.: %lu)\n",
1006 timeout, UINT_MAX / CONFIG_SYS_HZ - 1);
1007 return CMD_RET_USAGE;
1009 timeout *= CONFIG_SYS_HZ;
1011 printf("Option requires an argument - t\n");
1012 return CMD_RET_USAGE;
1014 } else if (argv[i][1] == 'h') {
1017 server_ip = string_to_ip(argv[i]);
1018 printf("Using server %pI4\n", &server_ip);
1020 printf("Option requires an argument - t\n");
1021 return CMD_RET_USAGE;
1026 if (ce_init_download_link(&g_net, &g_bin, verbose) != 0)
1029 if (ce_download_file(&g_net, timeout))
1033 // Try to receive edbg commands from host
1034 ce_init_edbg_link(&g_net);
1036 printf("Waiting for EDBG commands ...\n");
1038 ret = BootMeDebugStart(ce_edbg_handler);
1039 if (ret != BOOTME_DONE)
1042 // Prepare WinCE image for execution
1043 ce_prepare_run_bin(&g_bin);
1045 // Launch WinCE, if necessary
1046 if (g_net.gotJumpingRequest)
1047 ce_run_bin(g_bin.eEntryPoint);
1052 return ret == 0 ? CMD_RET_SUCCESS : CMD_RET_FAILURE;
1055 ceconnect, 6, 1, do_ceconnect,
1056 "Set up a connection to the CE host PC over TCP/IP and download the run-time image\n",
1057 "[-v] [-t <timeout>] [-h host]\n"
1058 " -v - verbose operation\n"
1059 " -t <timeout> - max wait time (#sec) for the connection\n"
1060 " -h <host> - send BOOTME requests to <host> (default: broadcast address 255.255.255.255)"