160b2f9e7SIgor Opaniuk
260b2f9e7SIgor Opaniuk /*
360b2f9e7SIgor Opaniuk * (C) Copyright 2018, Linaro Limited
460b2f9e7SIgor Opaniuk *
560b2f9e7SIgor Opaniuk * SPDX-License-Identifier: GPL-2.0+
660b2f9e7SIgor Opaniuk */
760b2f9e7SIgor Opaniuk
860b2f9e7SIgor Opaniuk #include <avb_verify.h>
960b2f9e7SIgor Opaniuk #include <command.h>
1060b2f9e7SIgor Opaniuk #include <image.h>
1160b2f9e7SIgor Opaniuk #include <malloc.h>
1260b2f9e7SIgor Opaniuk #include <mmc.h>
1360b2f9e7SIgor Opaniuk
1460b2f9e7SIgor Opaniuk #define AVB_BOOTARGS "avb_bootargs"
1560b2f9e7SIgor Opaniuk static struct AvbOps *avb_ops;
1660b2f9e7SIgor Opaniuk
1760b2f9e7SIgor Opaniuk static const char * const requested_partitions[] = {"boot",
1860b2f9e7SIgor Opaniuk "system",
1960b2f9e7SIgor Opaniuk "vendor",
2060b2f9e7SIgor Opaniuk NULL};
2160b2f9e7SIgor Opaniuk
do_avb_init(cmd_tbl_t * cmdtp,int flag,int argc,char * const argv[])2260b2f9e7SIgor Opaniuk int do_avb_init(cmd_tbl_t *cmdtp, int flag, int argc, char * const argv[])
2360b2f9e7SIgor Opaniuk {
2460b2f9e7SIgor Opaniuk unsigned long mmc_dev;
2560b2f9e7SIgor Opaniuk
2660b2f9e7SIgor Opaniuk if (argc != 2)
2760b2f9e7SIgor Opaniuk return CMD_RET_USAGE;
2860b2f9e7SIgor Opaniuk
2960b2f9e7SIgor Opaniuk mmc_dev = simple_strtoul(argv[1], NULL, 16);
3060b2f9e7SIgor Opaniuk
3160b2f9e7SIgor Opaniuk if (avb_ops)
3260b2f9e7SIgor Opaniuk avb_ops_free(avb_ops);
3360b2f9e7SIgor Opaniuk
3460b2f9e7SIgor Opaniuk avb_ops = avb_ops_alloc(mmc_dev);
3560b2f9e7SIgor Opaniuk if (avb_ops)
3660b2f9e7SIgor Opaniuk return CMD_RET_SUCCESS;
3760b2f9e7SIgor Opaniuk
38*6d89902dSJens Wiklander printf("Failed to initialize avb2\n");
39*6d89902dSJens Wiklander
4060b2f9e7SIgor Opaniuk return CMD_RET_FAILURE;
4160b2f9e7SIgor Opaniuk }
4260b2f9e7SIgor Opaniuk
do_avb_read_part(cmd_tbl_t * cmdtp,int flag,int argc,char * const argv[])4360b2f9e7SIgor Opaniuk int do_avb_read_part(cmd_tbl_t *cmdtp, int flag, int argc, char * const argv[])
4460b2f9e7SIgor Opaniuk {
4560b2f9e7SIgor Opaniuk const char *part;
4660b2f9e7SIgor Opaniuk s64 offset;
4760b2f9e7SIgor Opaniuk size_t bytes, bytes_read = 0;
4860b2f9e7SIgor Opaniuk void *buffer;
4960b2f9e7SIgor Opaniuk
5060b2f9e7SIgor Opaniuk if (!avb_ops) {
5160b2f9e7SIgor Opaniuk printf("AVB 2.0 is not initialized, please run 'avb init'\n");
5260b2f9e7SIgor Opaniuk return CMD_RET_USAGE;
5360b2f9e7SIgor Opaniuk }
5460b2f9e7SIgor Opaniuk
5560b2f9e7SIgor Opaniuk if (argc != 5)
5660b2f9e7SIgor Opaniuk return CMD_RET_USAGE;
5760b2f9e7SIgor Opaniuk
5860b2f9e7SIgor Opaniuk part = argv[1];
5960b2f9e7SIgor Opaniuk offset = simple_strtoul(argv[2], NULL, 16);
6060b2f9e7SIgor Opaniuk bytes = simple_strtoul(argv[3], NULL, 16);
6160b2f9e7SIgor Opaniuk buffer = (void *)simple_strtoul(argv[4], NULL, 16);
6260b2f9e7SIgor Opaniuk
6360b2f9e7SIgor Opaniuk if (avb_ops->read_from_partition(avb_ops, part, offset, bytes,
6460b2f9e7SIgor Opaniuk buffer, &bytes_read) ==
6560b2f9e7SIgor Opaniuk AVB_IO_RESULT_OK) {
6660b2f9e7SIgor Opaniuk printf("Read %zu bytes\n", bytes_read);
6760b2f9e7SIgor Opaniuk return CMD_RET_SUCCESS;
6860b2f9e7SIgor Opaniuk }
6960b2f9e7SIgor Opaniuk
70*6d89902dSJens Wiklander printf("Failed to read from partition\n");
71*6d89902dSJens Wiklander
7260b2f9e7SIgor Opaniuk return CMD_RET_FAILURE;
7360b2f9e7SIgor Opaniuk }
7460b2f9e7SIgor Opaniuk
do_avb_read_part_hex(cmd_tbl_t * cmdtp,int flag,int argc,char * const argv[])7560b2f9e7SIgor Opaniuk int do_avb_read_part_hex(cmd_tbl_t *cmdtp, int flag, int argc,
7660b2f9e7SIgor Opaniuk char *const argv[])
7760b2f9e7SIgor Opaniuk {
7860b2f9e7SIgor Opaniuk const char *part;
7960b2f9e7SIgor Opaniuk s64 offset;
8060b2f9e7SIgor Opaniuk size_t bytes, bytes_read = 0;
8160b2f9e7SIgor Opaniuk char *buffer;
8260b2f9e7SIgor Opaniuk
8360b2f9e7SIgor Opaniuk if (!avb_ops) {
8460b2f9e7SIgor Opaniuk printf("AVB 2.0 is not initialized, please run 'avb init'\n");
8560b2f9e7SIgor Opaniuk return CMD_RET_USAGE;
8660b2f9e7SIgor Opaniuk }
8760b2f9e7SIgor Opaniuk
8860b2f9e7SIgor Opaniuk if (argc != 4)
8960b2f9e7SIgor Opaniuk return CMD_RET_USAGE;
9060b2f9e7SIgor Opaniuk
9160b2f9e7SIgor Opaniuk part = argv[1];
9260b2f9e7SIgor Opaniuk offset = simple_strtoul(argv[2], NULL, 16);
9360b2f9e7SIgor Opaniuk bytes = simple_strtoul(argv[3], NULL, 16);
9460b2f9e7SIgor Opaniuk
9560b2f9e7SIgor Opaniuk buffer = malloc(bytes);
9660b2f9e7SIgor Opaniuk if (!buffer) {
9760b2f9e7SIgor Opaniuk printf("Failed to tlb_allocate buffer for data\n");
9860b2f9e7SIgor Opaniuk return CMD_RET_FAILURE;
9960b2f9e7SIgor Opaniuk }
10060b2f9e7SIgor Opaniuk memset(buffer, 0, bytes);
10160b2f9e7SIgor Opaniuk
10260b2f9e7SIgor Opaniuk if (avb_ops->read_from_partition(avb_ops, part, offset, bytes, buffer,
10360b2f9e7SIgor Opaniuk &bytes_read) == AVB_IO_RESULT_OK) {
10460b2f9e7SIgor Opaniuk printf("Requested %zu, read %zu bytes\n", bytes, bytes_read);
10560b2f9e7SIgor Opaniuk printf("Data: ");
10660b2f9e7SIgor Opaniuk for (int i = 0; i < bytes_read; i++)
10760b2f9e7SIgor Opaniuk printf("%02X", buffer[i]);
10860b2f9e7SIgor Opaniuk
10960b2f9e7SIgor Opaniuk printf("\n");
11060b2f9e7SIgor Opaniuk
11160b2f9e7SIgor Opaniuk free(buffer);
11260b2f9e7SIgor Opaniuk return CMD_RET_SUCCESS;
11360b2f9e7SIgor Opaniuk }
11460b2f9e7SIgor Opaniuk
115*6d89902dSJens Wiklander printf("Failed to read from partition\n");
116*6d89902dSJens Wiklander
11760b2f9e7SIgor Opaniuk free(buffer);
11860b2f9e7SIgor Opaniuk return CMD_RET_FAILURE;
11960b2f9e7SIgor Opaniuk }
12060b2f9e7SIgor Opaniuk
do_avb_write_part(cmd_tbl_t * cmdtp,int flag,int argc,char * const argv[])12160b2f9e7SIgor Opaniuk int do_avb_write_part(cmd_tbl_t *cmdtp, int flag, int argc, char * const argv[])
12260b2f9e7SIgor Opaniuk {
12360b2f9e7SIgor Opaniuk const char *part;
12460b2f9e7SIgor Opaniuk s64 offset;
12560b2f9e7SIgor Opaniuk size_t bytes;
12660b2f9e7SIgor Opaniuk void *buffer;
12760b2f9e7SIgor Opaniuk
12860b2f9e7SIgor Opaniuk if (!avb_ops) {
12960b2f9e7SIgor Opaniuk printf("AVB 2.0 is not initialized, run 'avb init' first\n");
13060b2f9e7SIgor Opaniuk return CMD_RET_FAILURE;
13160b2f9e7SIgor Opaniuk }
13260b2f9e7SIgor Opaniuk
13360b2f9e7SIgor Opaniuk if (argc != 5)
13460b2f9e7SIgor Opaniuk return CMD_RET_USAGE;
13560b2f9e7SIgor Opaniuk
13660b2f9e7SIgor Opaniuk part = argv[1];
13760b2f9e7SIgor Opaniuk offset = simple_strtoul(argv[2], NULL, 16);
13860b2f9e7SIgor Opaniuk bytes = simple_strtoul(argv[3], NULL, 16);
13960b2f9e7SIgor Opaniuk buffer = (void *)simple_strtoul(argv[4], NULL, 16);
14060b2f9e7SIgor Opaniuk
14160b2f9e7SIgor Opaniuk if (avb_ops->write_to_partition(avb_ops, part, offset, bytes, buffer) ==
14260b2f9e7SIgor Opaniuk AVB_IO_RESULT_OK) {
14360b2f9e7SIgor Opaniuk printf("Wrote %zu bytes\n", bytes);
14460b2f9e7SIgor Opaniuk return CMD_RET_SUCCESS;
14560b2f9e7SIgor Opaniuk }
14660b2f9e7SIgor Opaniuk
147*6d89902dSJens Wiklander printf("Failed to write in partition\n");
148*6d89902dSJens Wiklander
14960b2f9e7SIgor Opaniuk return CMD_RET_FAILURE;
15060b2f9e7SIgor Opaniuk }
15160b2f9e7SIgor Opaniuk
do_avb_read_rb(cmd_tbl_t * cmdtp,int flag,int argc,char * const argv[])15260b2f9e7SIgor Opaniuk int do_avb_read_rb(cmd_tbl_t *cmdtp, int flag, int argc, char * const argv[])
15360b2f9e7SIgor Opaniuk {
15460b2f9e7SIgor Opaniuk size_t index;
15560b2f9e7SIgor Opaniuk u64 rb_idx;
15660b2f9e7SIgor Opaniuk
15760b2f9e7SIgor Opaniuk if (!avb_ops) {
15860b2f9e7SIgor Opaniuk printf("AVB 2.0 is not initialized, run 'avb init' first\n");
15960b2f9e7SIgor Opaniuk return CMD_RET_FAILURE;
16060b2f9e7SIgor Opaniuk }
16160b2f9e7SIgor Opaniuk
16260b2f9e7SIgor Opaniuk if (argc != 2)
16360b2f9e7SIgor Opaniuk return CMD_RET_USAGE;
16460b2f9e7SIgor Opaniuk
16560b2f9e7SIgor Opaniuk index = (size_t)simple_strtoul(argv[1], NULL, 16);
16660b2f9e7SIgor Opaniuk
16760b2f9e7SIgor Opaniuk if (avb_ops->read_rollback_index(avb_ops, index, &rb_idx) ==
16860b2f9e7SIgor Opaniuk AVB_IO_RESULT_OK) {
169ab2d7382SJens Wiklander printf("Rollback index: %llx\n", rb_idx);
17060b2f9e7SIgor Opaniuk return CMD_RET_SUCCESS;
17160b2f9e7SIgor Opaniuk }
172*6d89902dSJens Wiklander
173*6d89902dSJens Wiklander printf("Failed to read rollback index\n");
174*6d89902dSJens Wiklander
17560b2f9e7SIgor Opaniuk return CMD_RET_FAILURE;
17660b2f9e7SIgor Opaniuk }
17760b2f9e7SIgor Opaniuk
do_avb_write_rb(cmd_tbl_t * cmdtp,int flag,int argc,char * const argv[])17860b2f9e7SIgor Opaniuk int do_avb_write_rb(cmd_tbl_t *cmdtp, int flag, int argc, char * const argv[])
17960b2f9e7SIgor Opaniuk {
18060b2f9e7SIgor Opaniuk size_t index;
18160b2f9e7SIgor Opaniuk u64 rb_idx;
18260b2f9e7SIgor Opaniuk
18360b2f9e7SIgor Opaniuk if (!avb_ops) {
18460b2f9e7SIgor Opaniuk printf("AVB 2.0 is not initialized, run 'avb init' first\n");
18560b2f9e7SIgor Opaniuk return CMD_RET_FAILURE;
18660b2f9e7SIgor Opaniuk }
18760b2f9e7SIgor Opaniuk
18860b2f9e7SIgor Opaniuk if (argc != 3)
18960b2f9e7SIgor Opaniuk return CMD_RET_USAGE;
19060b2f9e7SIgor Opaniuk
19160b2f9e7SIgor Opaniuk index = (size_t)simple_strtoul(argv[1], NULL, 16);
19260b2f9e7SIgor Opaniuk rb_idx = simple_strtoul(argv[2], NULL, 16);
19360b2f9e7SIgor Opaniuk
19460b2f9e7SIgor Opaniuk if (avb_ops->write_rollback_index(avb_ops, index, rb_idx) ==
19560b2f9e7SIgor Opaniuk AVB_IO_RESULT_OK)
19660b2f9e7SIgor Opaniuk return CMD_RET_SUCCESS;
19760b2f9e7SIgor Opaniuk
198*6d89902dSJens Wiklander printf("Failed to write rollback index\n");
199*6d89902dSJens Wiklander
20060b2f9e7SIgor Opaniuk return CMD_RET_FAILURE;
20160b2f9e7SIgor Opaniuk }
20260b2f9e7SIgor Opaniuk
do_avb_get_uuid(cmd_tbl_t * cmdtp,int flag,int argc,char * const argv[])20360b2f9e7SIgor Opaniuk int do_avb_get_uuid(cmd_tbl_t *cmdtp, int flag,
20460b2f9e7SIgor Opaniuk int argc, char * const argv[])
20560b2f9e7SIgor Opaniuk {
20660b2f9e7SIgor Opaniuk const char *part;
20760b2f9e7SIgor Opaniuk char buffer[UUID_STR_LEN + 1];
20860b2f9e7SIgor Opaniuk
20960b2f9e7SIgor Opaniuk if (!avb_ops) {
21060b2f9e7SIgor Opaniuk printf("AVB 2.0 is not initialized, run 'avb init' first\n");
21160b2f9e7SIgor Opaniuk return CMD_RET_FAILURE;
21260b2f9e7SIgor Opaniuk }
21360b2f9e7SIgor Opaniuk
21460b2f9e7SIgor Opaniuk if (argc != 2)
21560b2f9e7SIgor Opaniuk return CMD_RET_USAGE;
21660b2f9e7SIgor Opaniuk
21760b2f9e7SIgor Opaniuk part = argv[1];
21860b2f9e7SIgor Opaniuk
21960b2f9e7SIgor Opaniuk if (avb_ops->get_unique_guid_for_partition(avb_ops, part, buffer,
22060b2f9e7SIgor Opaniuk UUID_STR_LEN + 1) ==
22160b2f9e7SIgor Opaniuk AVB_IO_RESULT_OK) {
22260b2f9e7SIgor Opaniuk printf("'%s' UUID: %s\n", part, buffer);
22360b2f9e7SIgor Opaniuk return CMD_RET_SUCCESS;
22460b2f9e7SIgor Opaniuk }
22560b2f9e7SIgor Opaniuk
226*6d89902dSJens Wiklander printf("Failed to read UUID\n");
227*6d89902dSJens Wiklander
22860b2f9e7SIgor Opaniuk return CMD_RET_FAILURE;
22960b2f9e7SIgor Opaniuk }
23060b2f9e7SIgor Opaniuk
do_avb_verify_part(cmd_tbl_t * cmdtp,int flag,int argc,char * const argv[])23160b2f9e7SIgor Opaniuk int do_avb_verify_part(cmd_tbl_t *cmdtp, int flag,
23260b2f9e7SIgor Opaniuk int argc, char *const argv[])
23360b2f9e7SIgor Opaniuk {
23460b2f9e7SIgor Opaniuk AvbSlotVerifyResult slot_result;
23560b2f9e7SIgor Opaniuk AvbSlotVerifyData *out_data;
2365d4fd877SIgor Opaniuk char *cmdline;
2375d4fd877SIgor Opaniuk char *extra_args;
23860b2f9e7SIgor Opaniuk
23960b2f9e7SIgor Opaniuk bool unlocked = false;
24060b2f9e7SIgor Opaniuk int res = CMD_RET_FAILURE;
24160b2f9e7SIgor Opaniuk
24260b2f9e7SIgor Opaniuk if (!avb_ops) {
24360b2f9e7SIgor Opaniuk printf("AVB 2.0 is not initialized, run 'avb init' first\n");
24460b2f9e7SIgor Opaniuk return CMD_RET_FAILURE;
24560b2f9e7SIgor Opaniuk }
24660b2f9e7SIgor Opaniuk
24760b2f9e7SIgor Opaniuk if (argc != 1)
24860b2f9e7SIgor Opaniuk return CMD_RET_USAGE;
24960b2f9e7SIgor Opaniuk
25060b2f9e7SIgor Opaniuk printf("## Android Verified Boot 2.0 version %s\n",
25160b2f9e7SIgor Opaniuk avb_version_string());
25260b2f9e7SIgor Opaniuk
25360b2f9e7SIgor Opaniuk if (avb_ops->read_is_device_unlocked(avb_ops, &unlocked) !=
25460b2f9e7SIgor Opaniuk AVB_IO_RESULT_OK) {
25560b2f9e7SIgor Opaniuk printf("Can't determine device lock state.\n");
25660b2f9e7SIgor Opaniuk return CMD_RET_FAILURE;
25760b2f9e7SIgor Opaniuk }
25860b2f9e7SIgor Opaniuk
25960b2f9e7SIgor Opaniuk slot_result =
26060b2f9e7SIgor Opaniuk avb_slot_verify(avb_ops,
26160b2f9e7SIgor Opaniuk requested_partitions,
26260b2f9e7SIgor Opaniuk "",
26360b2f9e7SIgor Opaniuk unlocked,
26460b2f9e7SIgor Opaniuk AVB_HASHTREE_ERROR_MODE_RESTART_AND_INVALIDATE,
26560b2f9e7SIgor Opaniuk &out_data);
26660b2f9e7SIgor Opaniuk
26760b2f9e7SIgor Opaniuk switch (slot_result) {
26860b2f9e7SIgor Opaniuk case AVB_SLOT_VERIFY_RESULT_OK:
2695d4fd877SIgor Opaniuk /* Until we don't have support of changing unlock states, we
2705d4fd877SIgor Opaniuk * assume that we are by default in locked state.
2715d4fd877SIgor Opaniuk * So in this case we can boot only when verification is
2725d4fd877SIgor Opaniuk * successful; we also supply in cmdline GREEN boot state
2735d4fd877SIgor Opaniuk */
27460b2f9e7SIgor Opaniuk printf("Verification passed successfully\n");
27560b2f9e7SIgor Opaniuk
27660b2f9e7SIgor Opaniuk /* export additional bootargs to AVB_BOOTARGS env var */
2775d4fd877SIgor Opaniuk
2785d4fd877SIgor Opaniuk extra_args = avb_set_state(avb_ops, AVB_GREEN);
2795d4fd877SIgor Opaniuk if (extra_args)
2805d4fd877SIgor Opaniuk cmdline = append_cmd_line(out_data->cmdline,
2815d4fd877SIgor Opaniuk extra_args);
2825d4fd877SIgor Opaniuk else
2835d4fd877SIgor Opaniuk cmdline = out_data->cmdline;
2845d4fd877SIgor Opaniuk
2855d4fd877SIgor Opaniuk env_set(AVB_BOOTARGS, cmdline);
28660b2f9e7SIgor Opaniuk
28760b2f9e7SIgor Opaniuk res = CMD_RET_SUCCESS;
28860b2f9e7SIgor Opaniuk break;
28960b2f9e7SIgor Opaniuk case AVB_SLOT_VERIFY_RESULT_ERROR_VERIFICATION:
29060b2f9e7SIgor Opaniuk printf("Verification failed\n");
29160b2f9e7SIgor Opaniuk break;
29260b2f9e7SIgor Opaniuk case AVB_SLOT_VERIFY_RESULT_ERROR_IO:
29360b2f9e7SIgor Opaniuk printf("I/O error occurred during verification\n");
29460b2f9e7SIgor Opaniuk break;
29560b2f9e7SIgor Opaniuk case AVB_SLOT_VERIFY_RESULT_ERROR_OOM:
29660b2f9e7SIgor Opaniuk printf("OOM error occurred during verification\n");
29760b2f9e7SIgor Opaniuk break;
29860b2f9e7SIgor Opaniuk case AVB_SLOT_VERIFY_RESULT_ERROR_INVALID_METADATA:
29960b2f9e7SIgor Opaniuk printf("Corrupted dm-verity metadata detected\n");
30060b2f9e7SIgor Opaniuk break;
30160b2f9e7SIgor Opaniuk case AVB_SLOT_VERIFY_RESULT_ERROR_UNSUPPORTED_VERSION:
30260b2f9e7SIgor Opaniuk printf("Unsupported version avbtool was used\n");
30360b2f9e7SIgor Opaniuk break;
30460b2f9e7SIgor Opaniuk case AVB_SLOT_VERIFY_RESULT_ERROR_ROLLBACK_INDEX:
30560b2f9e7SIgor Opaniuk printf("Checking rollback index failed\n");
30660b2f9e7SIgor Opaniuk break;
30760b2f9e7SIgor Opaniuk case AVB_SLOT_VERIFY_RESULT_ERROR_PUBLIC_KEY_REJECTED:
30860b2f9e7SIgor Opaniuk printf("Public key was rejected\n");
30960b2f9e7SIgor Opaniuk break;
31060b2f9e7SIgor Opaniuk default:
31160b2f9e7SIgor Opaniuk printf("Unknown error occurred\n");
31260b2f9e7SIgor Opaniuk }
31360b2f9e7SIgor Opaniuk
31460b2f9e7SIgor Opaniuk return res;
31560b2f9e7SIgor Opaniuk }
31660b2f9e7SIgor Opaniuk
do_avb_is_unlocked(cmd_tbl_t * cmdtp,int flag,int argc,char * const argv[])31760b2f9e7SIgor Opaniuk int do_avb_is_unlocked(cmd_tbl_t *cmdtp, int flag,
31860b2f9e7SIgor Opaniuk int argc, char * const argv[])
31960b2f9e7SIgor Opaniuk {
32060b2f9e7SIgor Opaniuk bool unlock;
32160b2f9e7SIgor Opaniuk
32260b2f9e7SIgor Opaniuk if (!avb_ops) {
32360b2f9e7SIgor Opaniuk printf("AVB not initialized, run 'avb init' first\n");
32460b2f9e7SIgor Opaniuk return CMD_RET_FAILURE;
32560b2f9e7SIgor Opaniuk }
32660b2f9e7SIgor Opaniuk
32760b2f9e7SIgor Opaniuk if (argc != 1) {
32860b2f9e7SIgor Opaniuk printf("--%s(-1)\n", __func__);
32960b2f9e7SIgor Opaniuk return CMD_RET_USAGE;
33060b2f9e7SIgor Opaniuk }
33160b2f9e7SIgor Opaniuk
33260b2f9e7SIgor Opaniuk if (avb_ops->read_is_device_unlocked(avb_ops, &unlock) ==
33360b2f9e7SIgor Opaniuk AVB_IO_RESULT_OK) {
33460b2f9e7SIgor Opaniuk printf("Unlocked = %d\n", unlock);
33560b2f9e7SIgor Opaniuk return CMD_RET_SUCCESS;
33660b2f9e7SIgor Opaniuk }
33760b2f9e7SIgor Opaniuk
338*6d89902dSJens Wiklander printf("Can't determine device lock state.\n");
339*6d89902dSJens Wiklander
34060b2f9e7SIgor Opaniuk return CMD_RET_FAILURE;
34160b2f9e7SIgor Opaniuk }
34260b2f9e7SIgor Opaniuk
34360b2f9e7SIgor Opaniuk static cmd_tbl_t cmd_avb[] = {
34460b2f9e7SIgor Opaniuk U_BOOT_CMD_MKENT(init, 2, 0, do_avb_init, "", ""),
34560b2f9e7SIgor Opaniuk U_BOOT_CMD_MKENT(read_rb, 2, 0, do_avb_read_rb, "", ""),
34660b2f9e7SIgor Opaniuk U_BOOT_CMD_MKENT(write_rb, 3, 0, do_avb_write_rb, "", ""),
34760b2f9e7SIgor Opaniuk U_BOOT_CMD_MKENT(is_unlocked, 1, 0, do_avb_is_unlocked, "", ""),
34860b2f9e7SIgor Opaniuk U_BOOT_CMD_MKENT(get_uuid, 2, 0, do_avb_get_uuid, "", ""),
34960b2f9e7SIgor Opaniuk U_BOOT_CMD_MKENT(read_part, 5, 0, do_avb_read_part, "", ""),
35060b2f9e7SIgor Opaniuk U_BOOT_CMD_MKENT(read_part_hex, 4, 0, do_avb_read_part_hex, "", ""),
35160b2f9e7SIgor Opaniuk U_BOOT_CMD_MKENT(write_part, 5, 0, do_avb_write_part, "", ""),
35260b2f9e7SIgor Opaniuk U_BOOT_CMD_MKENT(verify, 1, 0, do_avb_verify_part, "", ""),
35360b2f9e7SIgor Opaniuk };
35460b2f9e7SIgor Opaniuk
do_avb(cmd_tbl_t * cmdtp,int flag,int argc,char * const argv[])35560b2f9e7SIgor Opaniuk static int do_avb(cmd_tbl_t *cmdtp, int flag, int argc, char * const argv[])
35660b2f9e7SIgor Opaniuk {
35760b2f9e7SIgor Opaniuk cmd_tbl_t *cp;
35860b2f9e7SIgor Opaniuk
35960b2f9e7SIgor Opaniuk cp = find_cmd_tbl(argv[1], cmd_avb, ARRAY_SIZE(cmd_avb));
36060b2f9e7SIgor Opaniuk
36160b2f9e7SIgor Opaniuk argc--;
36260b2f9e7SIgor Opaniuk argv++;
36360b2f9e7SIgor Opaniuk
36460b2f9e7SIgor Opaniuk if (!cp || argc > cp->maxargs)
36560b2f9e7SIgor Opaniuk return CMD_RET_USAGE;
36660b2f9e7SIgor Opaniuk
36760b2f9e7SIgor Opaniuk if (flag == CMD_FLAG_REPEAT)
36860b2f9e7SIgor Opaniuk return CMD_RET_FAILURE;
36960b2f9e7SIgor Opaniuk
37060b2f9e7SIgor Opaniuk return cp->cmd(cmdtp, flag, argc, argv);
37160b2f9e7SIgor Opaniuk }
37260b2f9e7SIgor Opaniuk
37360b2f9e7SIgor Opaniuk U_BOOT_CMD(
37460b2f9e7SIgor Opaniuk avb, 29, 0, do_avb,
37560b2f9e7SIgor Opaniuk "Provides commands for testing Android Verified Boot 2.0 functionality",
37660b2f9e7SIgor Opaniuk "init <dev> - initialize avb2 for <dev>\n"
37760b2f9e7SIgor Opaniuk "avb read_rb <num> - read rollback index at location <num>\n"
37860b2f9e7SIgor Opaniuk "avb write_rb <num> <rb> - write rollback index <rb> to <num>\n"
37960b2f9e7SIgor Opaniuk "avb is_unlocked - returns unlock status of the device\n"
38060b2f9e7SIgor Opaniuk "avb get_uuid <partname> - read and print uuid of partition <part>\n"
38160b2f9e7SIgor Opaniuk "avb read_part <partname> <offset> <num> <addr> - read <num> bytes from\n"
38260b2f9e7SIgor Opaniuk " partition <partname> to buffer <addr>\n"
38360b2f9e7SIgor Opaniuk "avb read_part_hex <partname> <offset> <num> - read <num> bytes from\n"
38460b2f9e7SIgor Opaniuk " partition <partname> and print to stdout\n"
38560b2f9e7SIgor Opaniuk "avb write_part <partname> <offset> <num> <addr> - write <num> bytes to\n"
38660b2f9e7SIgor Opaniuk " <partname> by <offset> using data from <addr>\n"
38760b2f9e7SIgor Opaniuk "avb verify - run verification process using hash data\n"
38860b2f9e7SIgor Opaniuk " from vbmeta structure\n"
38960b2f9e7SIgor Opaniuk );
390