1 // SPDX-License-Identifier: (GPL-2.0-or-later OR BSD-2-Clause)
2 /*
3  * libfdt - Flat Device Tree manipulation
4  * Copyright (C) 2006 David Gibson, IBM Corporation.
5  */
6 #include "libfdt_env.h"
7 
8 #include <fdt.h>
9 #include <libfdt.h>
10 
11 #include "libfdt_internal.h"
12 
fdt_sw_probe_(void * fdt)13 static int fdt_sw_probe_(void *fdt)
14 {
15     if (!can_assume(VALID_INPUT)) {
16         if (fdt_magic(fdt) == FDT_MAGIC)
17             return -FDT_ERR_BADSTATE;
18         else if (fdt_magic(fdt) != FDT_SW_MAGIC)
19             return -FDT_ERR_BADMAGIC;
20     }
21 
22     return 0;
23 }
24 
25 #define FDT_SW_PROBE(fdt) \
26     { \
27         int err; \
28         if ((err = fdt_sw_probe_(fdt)) != 0) \
29             return err; \
30     }
31 
32 /* 'memrsv' state:  Initial state after fdt_create()
33  *
34  * Allowed functions:
35  *  fdt_add_reservemap_entry()
36  *  fdt_finish_reservemap()     [moves to 'struct' state]
37  */
fdt_sw_probe_memrsv_(void * fdt)38 static int fdt_sw_probe_memrsv_(void *fdt)
39 {
40     int err = fdt_sw_probe_(fdt);
41     if (err)
42         return err;
43 
44     if (!can_assume(VALID_INPUT) && fdt_off_dt_strings(fdt) != 0)
45         return -FDT_ERR_BADSTATE;
46     return 0;
47 }
48 
49 #define FDT_SW_PROBE_MEMRSV(fdt) \
50     { \
51         int err; \
52         if ((err = fdt_sw_probe_memrsv_(fdt)) != 0) \
53             return err; \
54     }
55 
56 /* 'struct' state:  Enter this state after fdt_finish_reservemap()
57  *
58  * Allowed functions:
59  *  fdt_begin_node()
60  *  fdt_end_node()
61  *  fdt_property*()
62  *  fdt_finish()            [moves to 'complete' state]
63  */
fdt_sw_probe_struct_(void * fdt)64 static int fdt_sw_probe_struct_(void *fdt)
65 {
66     int err = fdt_sw_probe_(fdt);
67     if (err)
68         return err;
69 
70     if (!can_assume(VALID_INPUT) &&
71         fdt_off_dt_strings(fdt) != fdt_totalsize(fdt))
72         return -FDT_ERR_BADSTATE;
73     return 0;
74 }
75 
76 #define FDT_SW_PROBE_STRUCT(fdt) \
77     { \
78         int err; \
79         if ((err = fdt_sw_probe_struct_(fdt)) != 0) \
80             return err; \
81     }
82 
sw_flags(void * fdt)83 static inline uint32_t sw_flags(void *fdt)
84 {
85     /* assert: (fdt_magic(fdt) == FDT_SW_MAGIC) */
86     return fdt_last_comp_version(fdt);
87 }
88 
89 /* 'complete' state:    Enter this state after fdt_finish()
90  *
91  * Allowed functions: none
92  */
93 
fdt_grab_space_(void * fdt,size_t len)94 static void *fdt_grab_space_(void *fdt, size_t len)
95 {
96     unsigned int offset = fdt_size_dt_struct(fdt);
97     unsigned int spaceleft;
98 
99     spaceleft = fdt_totalsize(fdt) - fdt_off_dt_struct(fdt)
100         - fdt_size_dt_strings(fdt);
101 
102     if ((offset + len < offset) || (offset + len > spaceleft))
103         return NULL;
104 
105     fdt_set_size_dt_struct(fdt, offset + len);
106     return fdt_offset_ptr_w_(fdt, offset);
107 }
108 
fdt_create_with_flags(void * buf,int bufsize,uint32_t flags)109 int fdt_create_with_flags(void *buf, int bufsize, uint32_t flags)
110 {
111     const int hdrsize = FDT_ALIGN(sizeof(struct fdt_header),
112                       sizeof(struct fdt_reserve_entry));
113     void *fdt = buf;
114 
115     if (bufsize < hdrsize)
116         return -FDT_ERR_NOSPACE;
117 
118     if (flags & ~FDT_CREATE_FLAGS_ALL)
119         return -FDT_ERR_BADFLAGS;
120 
121     memset(buf, 0, bufsize);
122 
123     /*
124      * magic and last_comp_version keep intermediate state during the fdt
125      * creation process, which is replaced with the proper FDT format by
126      * fdt_finish().
127      *
128      * flags should be accessed with sw_flags().
129      */
130     fdt_set_magic(fdt, FDT_SW_MAGIC);
131     fdt_set_version(fdt, FDT_LAST_SUPPORTED_VERSION);
132     fdt_set_last_comp_version(fdt, flags);
133 
134     fdt_set_totalsize(fdt,  bufsize);
135 
136     fdt_set_off_mem_rsvmap(fdt, hdrsize);
137     fdt_set_off_dt_struct(fdt, fdt_off_mem_rsvmap(fdt));
138     fdt_set_off_dt_strings(fdt, 0);
139 
140     return 0;
141 }
142 
fdt_create(void * buf,int bufsize)143 int fdt_create(void *buf, int bufsize)
144 {
145     return fdt_create_with_flags(buf, bufsize, 0);
146 }
147 
fdt_resize(void * fdt,void * buf,int bufsize)148 int fdt_resize(void *fdt, void *buf, int bufsize)
149 {
150     size_t headsize, tailsize;
151     char *oldtail, *newtail;
152 
153     FDT_SW_PROBE(fdt);
154 
155     if (bufsize < 0)
156         return -FDT_ERR_NOSPACE;
157 
158     headsize = fdt_off_dt_struct(fdt) + fdt_size_dt_struct(fdt);
159     tailsize = fdt_size_dt_strings(fdt);
160 
161     if (!can_assume(VALID_DTB) &&
162         headsize + tailsize > fdt_totalsize(fdt))
163         return -FDT_ERR_INTERNAL;
164 
165     if ((headsize + tailsize) > (unsigned)bufsize)
166         return -FDT_ERR_NOSPACE;
167 
168     oldtail = (char *)fdt + fdt_totalsize(fdt) - tailsize;
169     newtail = (char *)buf + bufsize - tailsize;
170 
171     /* Two cases to avoid clobbering data if the old and new
172      * buffers partially overlap */
173     if (buf <= fdt) {
174         memmove(buf, fdt, headsize);
175         memmove(newtail, oldtail, tailsize);
176     } else {
177         memmove(newtail, oldtail, tailsize);
178         memmove(buf, fdt, headsize);
179     }
180 
181     fdt_set_totalsize(buf, bufsize);
182     if (fdt_off_dt_strings(buf))
183         fdt_set_off_dt_strings(buf, bufsize);
184 
185     return 0;
186 }
187 
fdt_add_reservemap_entry(void * fdt,uint64_t addr,uint64_t size)188 int fdt_add_reservemap_entry(void *fdt, uint64_t addr, uint64_t size)
189 {
190     struct fdt_reserve_entry *re;
191     int offset;
192 
193     FDT_SW_PROBE_MEMRSV(fdt);
194 
195     offset = fdt_off_dt_struct(fdt);
196     if ((offset + sizeof(*re)) > fdt_totalsize(fdt))
197         return -FDT_ERR_NOSPACE;
198 
199     re = (struct fdt_reserve_entry *)((char *)fdt + offset);
200     re->address = cpu_to_fdt64(addr);
201     re->size = cpu_to_fdt64(size);
202 
203     fdt_set_off_dt_struct(fdt, offset + sizeof(*re));
204 
205     return 0;
206 }
207 
fdt_finish_reservemap(void * fdt)208 int fdt_finish_reservemap(void *fdt)
209 {
210     int err = fdt_add_reservemap_entry(fdt, 0, 0);
211 
212     if (err)
213         return err;
214 
215     fdt_set_off_dt_strings(fdt, fdt_totalsize(fdt));
216     return 0;
217 }
218 
fdt_begin_node(void * fdt,const char * name)219 int fdt_begin_node(void *fdt, const char *name)
220 {
221     struct fdt_node_header *nh;
222     int namelen;
223 
224     FDT_SW_PROBE_STRUCT(fdt);
225 
226     namelen = strlen(name) + 1;
227     nh = fdt_grab_space_(fdt, sizeof(*nh) + FDT_TAGALIGN(namelen));
228     if (! nh)
229         return -FDT_ERR_NOSPACE;
230 
231     nh->tag = cpu_to_fdt32(FDT_BEGIN_NODE);
232     memcpy(nh->name, name, namelen);
233     return 0;
234 }
235 
fdt_end_node(void * fdt)236 int fdt_end_node(void *fdt)
237 {
238     fdt32_t *en;
239 
240     FDT_SW_PROBE_STRUCT(fdt);
241 
242     en = fdt_grab_space_(fdt, FDT_TAGSIZE);
243     if (! en)
244         return -FDT_ERR_NOSPACE;
245 
246     *en = cpu_to_fdt32(FDT_END_NODE);
247     return 0;
248 }
249 
fdt_add_string_(void * fdt,const char * s)250 static int fdt_add_string_(void *fdt, const char *s)
251 {
252     char *strtab = (char *)fdt + fdt_totalsize(fdt);
253     unsigned int strtabsize = fdt_size_dt_strings(fdt);
254     unsigned int len = strlen(s) + 1;
255     unsigned int struct_top, offset;
256 
257     offset = strtabsize + len;
258     struct_top = fdt_off_dt_struct(fdt) + fdt_size_dt_struct(fdt);
259     if (fdt_totalsize(fdt) - offset < struct_top)
260         return 0; /* no more room :( */
261 
262     memcpy(strtab - offset, s, len);
263     fdt_set_size_dt_strings(fdt, strtabsize + len);
264     return -offset;
265 }
266 
267 /* Must only be used to roll back in case of error */
fdt_del_last_string_(void * fdt,const char * s)268 static void fdt_del_last_string_(void *fdt, const char *s)
269 {
270     int strtabsize = fdt_size_dt_strings(fdt);
271     int len = strlen(s) + 1;
272 
273     fdt_set_size_dt_strings(fdt, strtabsize - len);
274 }
275 
fdt_find_add_string_(void * fdt,const char * s,int * allocated)276 static int fdt_find_add_string_(void *fdt, const char *s, int *allocated)
277 {
278     char *strtab = (char *)fdt + fdt_totalsize(fdt);
279     int strtabsize = fdt_size_dt_strings(fdt);
280     const char *p;
281 
282     *allocated = 0;
283 
284     p = fdt_find_string_(strtab - strtabsize, strtabsize, s);
285     if (p)
286         return p - strtab;
287 
288     *allocated = 1;
289 
290     return fdt_add_string_(fdt, s);
291 }
292 
fdt_property_placeholder(void * fdt,const char * name,int len,void ** valp)293 int fdt_property_placeholder(void *fdt, const char *name, int len, void **valp)
294 {
295     struct fdt_property *prop;
296     int nameoff;
297     int allocated;
298 
299     FDT_SW_PROBE_STRUCT(fdt);
300 
301     /* String de-duplication can be slow, _NO_NAME_DEDUP skips it */
302     if (sw_flags(fdt) & FDT_CREATE_FLAG_NO_NAME_DEDUP) {
303         allocated = 1;
304         nameoff = fdt_add_string_(fdt, name);
305     } else {
306         nameoff = fdt_find_add_string_(fdt, name, &allocated);
307     }
308     if (nameoff == 0)
309         return -FDT_ERR_NOSPACE;
310 
311     prop = fdt_grab_space_(fdt, sizeof(*prop) + FDT_TAGALIGN(len));
312     if (! prop) {
313         if (allocated)
314             fdt_del_last_string_(fdt, name);
315         return -FDT_ERR_NOSPACE;
316     }
317 
318     prop->tag = cpu_to_fdt32(FDT_PROP);
319     prop->nameoff = cpu_to_fdt32(nameoff);
320     prop->len = cpu_to_fdt32(len);
321     *valp = prop->data;
322     return 0;
323 }
324 
fdt_property(void * fdt,const char * name,const void * val,int len)325 int fdt_property(void *fdt, const char *name, const void *val, int len)
326 {
327     void *ptr;
328     int ret;
329 
330     ret = fdt_property_placeholder(fdt, name, len, &ptr);
331     if (ret)
332         return ret;
333     memcpy(ptr, val, len);
334     return 0;
335 }
336 
fdt_finish(void * fdt)337 int fdt_finish(void *fdt)
338 {
339     char *p = (char *)fdt;
340     fdt32_t *end;
341     int oldstroffset, newstroffset;
342     uint32_t tag;
343     int offset, nextoffset;
344 
345     FDT_SW_PROBE_STRUCT(fdt);
346 
347     /* Add terminator */
348     end = fdt_grab_space_(fdt, sizeof(*end));
349     if (! end)
350         return -FDT_ERR_NOSPACE;
351     *end = cpu_to_fdt32(FDT_END);
352 
353     /* Relocate the string table */
354     oldstroffset = fdt_totalsize(fdt) - fdt_size_dt_strings(fdt);
355     newstroffset = fdt_off_dt_struct(fdt) + fdt_size_dt_struct(fdt);
356     memmove(p + newstroffset, p + oldstroffset, fdt_size_dt_strings(fdt));
357     fdt_set_off_dt_strings(fdt, newstroffset);
358 
359     /* Walk the structure, correcting string offsets */
360     offset = 0;
361     while ((tag = fdt_next_tag(fdt, offset, &nextoffset)) != FDT_END) {
362         if (tag == FDT_PROP) {
363             struct fdt_property *prop =
364                 fdt_offset_ptr_w_(fdt, offset);
365             int nameoff;
366 
367             nameoff = fdt32_to_cpu(prop->nameoff);
368             nameoff += fdt_size_dt_strings(fdt);
369             prop->nameoff = cpu_to_fdt32(nameoff);
370         }
371         offset = nextoffset;
372     }
373     if (nextoffset < 0)
374         return nextoffset;
375 
376     /* Finally, adjust the header */
377     fdt_set_totalsize(fdt, newstroffset + fdt_size_dt_strings(fdt));
378 
379     /* And fix up fields that were keeping intermediate state. */
380     fdt_set_last_comp_version(fdt, FDT_LAST_COMPATIBLE_VERSION);
381     fdt_set_magic(fdt, FDT_MAGIC);
382 
383     return 0;
384 }
385