xref: /openbmc/u-boot/net/tftp.c (revision 05512517)
1 /*
2  * Copyright 1994, 1995, 2000 Neil Russell.
3  * (See License)
4  * Copyright 2000, 2001 DENX Software Engineering, Wolfgang Denk, wd@denx.de
5  * Copyright 2011 Comelit Group SpA,
6  *                Luca Ceresoli <luca.ceresoli@comelit.it>
7  */
8 
9 #include <common.h>
10 #include <command.h>
11 #include <efi_loader.h>
12 #include <mapmem.h>
13 #include <net.h>
14 #include <net/tftp.h>
15 #include "bootp.h"
16 #ifdef CONFIG_SYS_DIRECT_FLASH_TFTP
17 #include <flash.h>
18 #endif
19 
20 DECLARE_GLOBAL_DATA_PTR;
21 
22 /* Well known TFTP port # */
23 #define WELL_KNOWN_PORT	69
24 /* Millisecs to timeout for lost pkt */
25 #define TIMEOUT		5000UL
26 #ifndef	CONFIG_NET_RETRY_COUNT
27 /* # of timeouts before giving up */
28 # define TIMEOUT_COUNT	10
29 #else
30 # define TIMEOUT_COUNT  (CONFIG_NET_RETRY_COUNT * 2)
31 #endif
32 /* Number of "loading" hashes per line (for checking the image size) */
33 #define HASHES_PER_LINE	65
34 
35 /*
36  *	TFTP operations.
37  */
38 #define TFTP_RRQ	1
39 #define TFTP_WRQ	2
40 #define TFTP_DATA	3
41 #define TFTP_ACK	4
42 #define TFTP_ERROR	5
43 #define TFTP_OACK	6
44 
45 static ulong timeout_ms = TIMEOUT;
46 static int timeout_count_max = TIMEOUT_COUNT;
47 static ulong time_start;   /* Record time we started tftp */
48 
49 /*
50  * These globals govern the timeout behavior when attempting a connection to a
51  * TFTP server. tftp_timeout_ms specifies the number of milliseconds to
52  * wait for the server to respond to initial connection. Second global,
53  * tftp_timeout_count_max, gives the number of such connection retries.
54  * tftp_timeout_count_max must be non-negative and tftp_timeout_ms must be
55  * positive. The globals are meant to be set (and restored) by code needing
56  * non-standard timeout behavior when initiating a TFTP transfer.
57  */
58 ulong tftp_timeout_ms = TIMEOUT;
59 int tftp_timeout_count_max = TIMEOUT_COUNT;
60 
61 enum {
62 	TFTP_ERR_UNDEFINED           = 0,
63 	TFTP_ERR_FILE_NOT_FOUND      = 1,
64 	TFTP_ERR_ACCESS_DENIED       = 2,
65 	TFTP_ERR_DISK_FULL           = 3,
66 	TFTP_ERR_UNEXPECTED_OPCODE   = 4,
67 	TFTP_ERR_UNKNOWN_TRANSFER_ID  = 5,
68 	TFTP_ERR_FILE_ALREADY_EXISTS = 6,
69 };
70 
71 static struct in_addr tftp_remote_ip;
72 /* The UDP port at their end */
73 static int	tftp_remote_port;
74 /* The UDP port at our end */
75 static int	tftp_our_port;
76 static int	timeout_count;
77 /* packet sequence number */
78 static ulong	tftp_cur_block;
79 /* last packet sequence number received */
80 static ulong	tftp_prev_block;
81 /* count of sequence number wraparounds */
82 static ulong	tftp_block_wrap;
83 /* memory offset due to wrapping */
84 static ulong	tftp_block_wrap_offset;
85 static int	tftp_state;
86 static ulong	tftp_load_addr;
87 #ifdef CONFIG_LMB
88 static ulong	tftp_load_size;
89 #endif
90 #ifdef CONFIG_TFTP_TSIZE
91 /* The file size reported by the server */
92 static int	tftp_tsize;
93 /* The number of hashes we printed */
94 static short	tftp_tsize_num_hash;
95 #endif
96 #ifdef CONFIG_CMD_TFTPPUT
97 /* 1 if writing, else 0 */
98 static int	tftp_put_active;
99 /* 1 if we have sent the last block */
100 static int	tftp_put_final_block_sent;
101 #else
102 #define tftp_put_active	0
103 #endif
104 
105 #define STATE_SEND_RRQ	1
106 #define STATE_DATA	2
107 #define STATE_TOO_LARGE	3
108 #define STATE_BAD_MAGIC	4
109 #define STATE_OACK	5
110 #define STATE_RECV_WRQ	6
111 #define STATE_SEND_WRQ	7
112 
113 /* default TFTP block size */
114 #define TFTP_BLOCK_SIZE		512
115 /* sequence number is 16 bit */
116 #define TFTP_SEQUENCE_SIZE	((ulong)(1<<16))
117 
118 #define DEFAULT_NAME_LEN	(8 + 4 + 1)
119 static char default_filename[DEFAULT_NAME_LEN];
120 
121 #ifndef CONFIG_TFTP_FILE_NAME_MAX_LEN
122 #define MAX_LEN 128
123 #else
124 #define MAX_LEN CONFIG_TFTP_FILE_NAME_MAX_LEN
125 #endif
126 
127 static char tftp_filename[MAX_LEN];
128 
129 /* 512 is poor choice for ethernet, MTU is typically 1500.
130  * Minus eth.hdrs thats 1468.  Can get 2x better throughput with
131  * almost-MTU block sizes.  At least try... fall back to 512 if need be.
132  * (but those using CONFIG_IP_DEFRAG may want to set a larger block in cfg file)
133  */
134 #ifdef CONFIG_TFTP_BLOCKSIZE
135 #define TFTP_MTU_BLOCKSIZE CONFIG_TFTP_BLOCKSIZE
136 #else
137 #define TFTP_MTU_BLOCKSIZE 1468
138 #endif
139 
140 static unsigned short tftp_block_size = TFTP_BLOCK_SIZE;
141 static unsigned short tftp_block_size_option = TFTP_MTU_BLOCKSIZE;
142 
143 #ifdef CONFIG_MCAST_TFTP
144 #include <malloc.h>
145 #define MTFTP_BITMAPSIZE	0x1000
146 static unsigned *tftp_mcast_bitmap;
147 static int tftp_mcast_prev_hole;
148 static int tftp_mcast_bitmap_size = MTFTP_BITMAPSIZE;
149 static int tftp_mcast_disabled;
150 static int tftp_mcast_master_client;
151 static int tftp_mcast_active;
152 static int tftp_mcast_port;
153 /* can get 'last' block before done..*/
154 static ulong tftp_mcast_ending_block;
155 
156 static void parse_multicast_oack(char *pkt, int len);
157 
158 static void mcast_cleanup(void)
159 {
160 	if (net_mcast_addr)
161 		eth_mcast_join(net_mcast_addr, 0);
162 	if (tftp_mcast_bitmap)
163 		free(tftp_mcast_bitmap);
164 	tftp_mcast_bitmap = NULL;
165 	net_mcast_addr.s_addr = 0;
166 	tftp_mcast_active = 0;
167 	tftp_mcast_port = 0;
168 	tftp_mcast_ending_block = -1;
169 }
170 
171 #endif	/* CONFIG_MCAST_TFTP */
172 
173 static inline int store_block(int block, uchar *src, unsigned int len)
174 {
175 	ulong offset = block * tftp_block_size + tftp_block_wrap_offset;
176 	ulong newsize = offset + len;
177 	ulong store_addr = tftp_load_addr + offset;
178 #ifdef CONFIG_SYS_DIRECT_FLASH_TFTP
179 	int i, rc = 0;
180 
181 	for (i = 0; i < CONFIG_SYS_MAX_FLASH_BANKS; i++) {
182 		/* start address in flash? */
183 		if (flash_info[i].flash_id == FLASH_UNKNOWN)
184 			continue;
185 		if (store_addr >= flash_info[i].start[0]) {
186 			rc = 1;
187 			break;
188 		}
189 	}
190 
191 	if (rc) { /* Flash is destination for this packet */
192 		rc = flash_write((char *)src, store_addr, len);
193 		if (rc) {
194 			flash_perror(rc);
195 			return rc;
196 		}
197 	} else
198 #endif /* CONFIG_SYS_DIRECT_FLASH_TFTP */
199 	{
200 		void *ptr;
201 
202 #ifdef CONFIG_LMB
203 		if (store_addr < tftp_load_addr ||
204 		    store_addr + len > tftp_load_addr + tftp_load_size) {
205 			puts("\nTFTP error: ");
206 			puts("trying to overwrite reserved memory...\n");
207 			return -1;
208 		}
209 #endif
210 		ptr = map_sysmem(store_addr, len);
211 		memcpy(ptr, src, len);
212 		unmap_sysmem(ptr);
213 	}
214 #ifdef CONFIG_MCAST_TFTP
215 	if (tftp_mcast_active)
216 		ext2_set_bit(block, tftp_mcast_bitmap);
217 #endif
218 
219 	if (net_boot_file_size < newsize)
220 		net_boot_file_size = newsize;
221 
222 	return 0;
223 }
224 
225 /* Clear our state ready for a new transfer */
226 static void new_transfer(void)
227 {
228 	tftp_prev_block = 0;
229 	tftp_block_wrap = 0;
230 	tftp_block_wrap_offset = 0;
231 #ifdef CONFIG_CMD_TFTPPUT
232 	tftp_put_final_block_sent = 0;
233 #endif
234 }
235 
236 #ifdef CONFIG_CMD_TFTPPUT
237 /**
238  * Load the next block from memory to be sent over tftp.
239  *
240  * @param block	Block number to send
241  * @param dst	Destination buffer for data
242  * @param len	Number of bytes in block (this one and every other)
243  * @return number of bytes loaded
244  */
245 static int load_block(unsigned block, uchar *dst, unsigned len)
246 {
247 	/* We may want to get the final block from the previous set */
248 	ulong offset = ((int)block - 1) * len + tftp_block_wrap_offset;
249 	ulong tosend = len;
250 
251 	tosend = min(net_boot_file_size - offset, tosend);
252 	(void)memcpy(dst, (void *)(save_addr + offset), tosend);
253 	debug("%s: block=%d, offset=%ld, len=%d, tosend=%ld\n", __func__,
254 	      block, offset, len, tosend);
255 	return tosend;
256 }
257 #endif
258 
259 static void tftp_send(void);
260 static void tftp_timeout_handler(void);
261 
262 /**********************************************************************/
263 
264 static void show_block_marker(void)
265 {
266 #ifdef CONFIG_TFTP_TSIZE
267 	if (tftp_tsize) {
268 		ulong pos = tftp_cur_block * tftp_block_size +
269 			tftp_block_wrap_offset;
270 		if (pos > tftp_tsize)
271 			pos = tftp_tsize;
272 
273 		while (tftp_tsize_num_hash < pos * 50 / tftp_tsize) {
274 			putc('#');
275 			tftp_tsize_num_hash++;
276 		}
277 	} else
278 #endif
279 	{
280 		if (((tftp_cur_block - 1) % 10) == 0)
281 			putc('#');
282 		else if ((tftp_cur_block % (10 * HASHES_PER_LINE)) == 0)
283 			puts("\n\t ");
284 	}
285 }
286 
287 /**
288  * restart the current transfer due to an error
289  *
290  * @param msg	Message to print for user
291  */
292 static void restart(const char *msg)
293 {
294 	printf("\n%s; starting again\n", msg);
295 #ifdef CONFIG_MCAST_TFTP
296 	mcast_cleanup();
297 #endif
298 	net_start_again();
299 }
300 
301 /*
302  * Check if the block number has wrapped, and update progress
303  *
304  * TODO: The egregious use of global variables in this file should be tidied.
305  */
306 static void update_block_number(void)
307 {
308 	/*
309 	 * RFC1350 specifies that the first data packet will
310 	 * have sequence number 1. If we receive a sequence
311 	 * number of 0 this means that there was a wrap
312 	 * around of the (16 bit) counter.
313 	 */
314 	if (tftp_cur_block == 0 && tftp_prev_block != 0) {
315 		tftp_block_wrap++;
316 		tftp_block_wrap_offset += tftp_block_size * TFTP_SEQUENCE_SIZE;
317 		timeout_count = 0; /* we've done well, reset the timeout */
318 	} else {
319 		show_block_marker();
320 	}
321 }
322 
323 /* The TFTP get or put is complete */
324 static void tftp_complete(void)
325 {
326 #ifdef CONFIG_TFTP_TSIZE
327 	/* Print hash marks for the last packet received */
328 	while (tftp_tsize && tftp_tsize_num_hash < 49) {
329 		putc('#');
330 		tftp_tsize_num_hash++;
331 	}
332 	puts("  ");
333 	print_size(tftp_tsize, "");
334 #endif
335 	time_start = get_timer(time_start);
336 	if (time_start > 0) {
337 		puts("\n\t ");	/* Line up with "Loading: " */
338 		print_size(net_boot_file_size /
339 			time_start * 1000, "/s");
340 	}
341 	puts("\ndone\n");
342 	net_set_state(NETLOOP_SUCCESS);
343 }
344 
345 static void tftp_send(void)
346 {
347 	uchar *pkt;
348 	uchar *xp;
349 	int len = 0;
350 	ushort *s;
351 
352 #ifdef CONFIG_MCAST_TFTP
353 	/* Multicast TFTP.. non-MasterClients do not ACK data. */
354 	if (tftp_mcast_active && tftp_state == STATE_DATA &&
355 	    tftp_mcast_master_client == 0)
356 		return;
357 #endif
358 	/*
359 	 *	We will always be sending some sort of packet, so
360 	 *	cobble together the packet headers now.
361 	 */
362 	pkt = net_tx_packet + net_eth_hdr_size() + IP_UDP_HDR_SIZE;
363 
364 	switch (tftp_state) {
365 	case STATE_SEND_RRQ:
366 	case STATE_SEND_WRQ:
367 		xp = pkt;
368 		s = (ushort *)pkt;
369 #ifdef CONFIG_CMD_TFTPPUT
370 		*s++ = htons(tftp_state == STATE_SEND_RRQ ? TFTP_RRQ :
371 			TFTP_WRQ);
372 #else
373 		*s++ = htons(TFTP_RRQ);
374 #endif
375 		pkt = (uchar *)s;
376 		strcpy((char *)pkt, tftp_filename);
377 		pkt += strlen(tftp_filename) + 1;
378 		strcpy((char *)pkt, "octet");
379 		pkt += 5 /*strlen("octet")*/ + 1;
380 		strcpy((char *)pkt, "timeout");
381 		pkt += 7 /*strlen("timeout")*/ + 1;
382 		sprintf((char *)pkt, "%lu", timeout_ms / 1000);
383 		debug("send option \"timeout %s\"\n", (char *)pkt);
384 		pkt += strlen((char *)pkt) + 1;
385 #ifdef CONFIG_TFTP_TSIZE
386 		pkt += sprintf((char *)pkt, "tsize%c%u%c",
387 				0, net_boot_file_size, 0);
388 #endif
389 		/* try for more effic. blk size */
390 		pkt += sprintf((char *)pkt, "blksize%c%d%c",
391 				0, tftp_block_size_option, 0);
392 #ifdef CONFIG_MCAST_TFTP
393 		/* Check all preconditions before even trying the option */
394 		if (!tftp_mcast_disabled) {
395 			tftp_mcast_bitmap = malloc(tftp_mcast_bitmap_size);
396 			if (tftp_mcast_bitmap && eth_get_dev()->mcast) {
397 				free(tftp_mcast_bitmap);
398 				tftp_mcast_bitmap = NULL;
399 				pkt += sprintf((char *)pkt, "multicast%c%c",
400 					0, 0);
401 			}
402 		}
403 #endif /* CONFIG_MCAST_TFTP */
404 		len = pkt - xp;
405 		break;
406 
407 	case STATE_OACK:
408 #ifdef CONFIG_MCAST_TFTP
409 		/* My turn!  Start at where I need blocks I missed. */
410 		if (tftp_mcast_active)
411 			tftp_cur_block = ext2_find_next_zero_bit(
412 				tftp_mcast_bitmap,
413 				tftp_mcast_bitmap_size * 8, 0);
414 		/* fall through */
415 #endif
416 
417 	case STATE_RECV_WRQ:
418 	case STATE_DATA:
419 		xp = pkt;
420 		s = (ushort *)pkt;
421 		s[0] = htons(TFTP_ACK);
422 		s[1] = htons(tftp_cur_block);
423 		pkt = (uchar *)(s + 2);
424 #ifdef CONFIG_CMD_TFTPPUT
425 		if (tftp_put_active) {
426 			int toload = tftp_block_size;
427 			int loaded = load_block(tftp_cur_block, pkt, toload);
428 
429 			s[0] = htons(TFTP_DATA);
430 			pkt += loaded;
431 			tftp_put_final_block_sent = (loaded < toload);
432 		}
433 #endif
434 		len = pkt - xp;
435 		break;
436 
437 	case STATE_TOO_LARGE:
438 		xp = pkt;
439 		s = (ushort *)pkt;
440 		*s++ = htons(TFTP_ERROR);
441 			*s++ = htons(3);
442 
443 		pkt = (uchar *)s;
444 		strcpy((char *)pkt, "File too large");
445 		pkt += 14 /*strlen("File too large")*/ + 1;
446 		len = pkt - xp;
447 		break;
448 
449 	case STATE_BAD_MAGIC:
450 		xp = pkt;
451 		s = (ushort *)pkt;
452 		*s++ = htons(TFTP_ERROR);
453 		*s++ = htons(2);
454 		pkt = (uchar *)s;
455 		strcpy((char *)pkt, "File has bad magic");
456 		pkt += 18 /*strlen("File has bad magic")*/ + 1;
457 		len = pkt - xp;
458 		break;
459 	}
460 
461 	net_send_udp_packet(net_server_ethaddr, tftp_remote_ip,
462 			    tftp_remote_port, tftp_our_port, len);
463 }
464 
465 #ifdef CONFIG_CMD_TFTPPUT
466 static void icmp_handler(unsigned type, unsigned code, unsigned dest,
467 			 struct in_addr sip, unsigned src, uchar *pkt,
468 			 unsigned len)
469 {
470 	if (type == ICMP_NOT_REACH && code == ICMP_NOT_REACH_PORT) {
471 		/* Oh dear the other end has gone away */
472 		restart("TFTP server died");
473 	}
474 }
475 #endif
476 
477 static void tftp_handler(uchar *pkt, unsigned dest, struct in_addr sip,
478 			 unsigned src, unsigned len)
479 {
480 	__be16 proto;
481 	__be16 *s;
482 	int i;
483 
484 	if (dest != tftp_our_port) {
485 #ifdef CONFIG_MCAST_TFTP
486 		if (tftp_mcast_active &&
487 		    (!tftp_mcast_port || dest != tftp_mcast_port))
488 #endif
489 			return;
490 	}
491 	if (tftp_state != STATE_SEND_RRQ && src != tftp_remote_port &&
492 	    tftp_state != STATE_RECV_WRQ && tftp_state != STATE_SEND_WRQ)
493 		return;
494 
495 	if (len < 2)
496 		return;
497 	len -= 2;
498 	/* warning: don't use increment (++) in ntohs() macros!! */
499 	s = (__be16 *)pkt;
500 	proto = *s++;
501 	pkt = (uchar *)s;
502 	switch (ntohs(proto)) {
503 	case TFTP_RRQ:
504 		break;
505 
506 	case TFTP_ACK:
507 #ifdef CONFIG_CMD_TFTPPUT
508 		if (tftp_put_active) {
509 			if (tftp_put_final_block_sent) {
510 				tftp_complete();
511 			} else {
512 				/*
513 				 * Move to the next block. We want our block
514 				 * count to wrap just like the other end!
515 				 */
516 				int block = ntohs(*s);
517 				int ack_ok = (tftp_cur_block == block);
518 
519 				tftp_cur_block = (unsigned short)(block + 1);
520 				update_block_number();
521 				if (ack_ok)
522 					tftp_send(); /* Send next data block */
523 			}
524 		}
525 #endif
526 		break;
527 
528 	default:
529 		break;
530 
531 #ifdef CONFIG_CMD_TFTPSRV
532 	case TFTP_WRQ:
533 		debug("Got WRQ\n");
534 		tftp_remote_ip = sip;
535 		tftp_remote_port = src;
536 		tftp_our_port = 1024 + (get_timer(0) % 3072);
537 		new_transfer();
538 		tftp_send(); /* Send ACK(0) */
539 		break;
540 #endif
541 
542 	case TFTP_OACK:
543 		debug("Got OACK: %s %s\n",
544 		      pkt, pkt + strlen((char *)pkt) + 1);
545 		tftp_state = STATE_OACK;
546 		tftp_remote_port = src;
547 		/*
548 		 * Check for 'blksize' option.
549 		 * Careful: "i" is signed, "len" is unsigned, thus
550 		 * something like "len-8" may give a *huge* number
551 		 */
552 		for (i = 0; i+8 < len; i++) {
553 			if (strcmp((char *)pkt + i, "blksize") == 0) {
554 				tftp_block_size = (unsigned short)
555 					simple_strtoul((char *)pkt + i + 8,
556 						       NULL, 10);
557 				debug("Blocksize ack: %s, %d\n",
558 				      (char *)pkt + i + 8, tftp_block_size);
559 			}
560 #ifdef CONFIG_TFTP_TSIZE
561 			if (strcmp((char *)pkt+i, "tsize") == 0) {
562 				tftp_tsize = simple_strtoul((char *)pkt + i + 6,
563 							   NULL, 10);
564 				debug("size = %s, %d\n",
565 				      (char *)pkt + i + 6, tftp_tsize);
566 			}
567 #endif
568 		}
569 #ifdef CONFIG_MCAST_TFTP
570 		parse_multicast_oack((char *)pkt, len - 1);
571 		if ((tftp_mcast_active) && (!tftp_mcast_master_client))
572 			tftp_state = STATE_DATA;	/* passive.. */
573 		else
574 #endif
575 #ifdef CONFIG_CMD_TFTPPUT
576 		if (tftp_put_active) {
577 			/* Get ready to send the first block */
578 			tftp_state = STATE_DATA;
579 			tftp_cur_block++;
580 		}
581 #endif
582 		tftp_send(); /* Send ACK or first data block */
583 		break;
584 	case TFTP_DATA:
585 		if (len < 2)
586 			return;
587 		len -= 2;
588 		tftp_cur_block = ntohs(*(__be16 *)pkt);
589 
590 		update_block_number();
591 
592 		if (tftp_state == STATE_SEND_RRQ)
593 			debug("Server did not acknowledge timeout option!\n");
594 
595 		if (tftp_state == STATE_SEND_RRQ || tftp_state == STATE_OACK ||
596 		    tftp_state == STATE_RECV_WRQ) {
597 			/* first block received */
598 			tftp_state = STATE_DATA;
599 			tftp_remote_port = src;
600 			new_transfer();
601 
602 #ifdef CONFIG_MCAST_TFTP
603 			if (tftp_mcast_active) { /* start!=1 common if mcast */
604 				tftp_prev_block = tftp_cur_block - 1;
605 			} else
606 #endif
607 			if (tftp_cur_block != 1) {	/* Assertion */
608 				puts("\nTFTP error: ");
609 				printf("First block is not block 1 (%ld)\n",
610 				       tftp_cur_block);
611 				puts("Starting again\n\n");
612 				net_start_again();
613 				break;
614 			}
615 		}
616 
617 		if (tftp_cur_block == tftp_prev_block) {
618 			/* Same block again; ignore it. */
619 			break;
620 		}
621 
622 		tftp_prev_block = tftp_cur_block;
623 		timeout_count_max = tftp_timeout_count_max;
624 		net_set_timeout_handler(timeout_ms, tftp_timeout_handler);
625 
626 		if (store_block(tftp_cur_block - 1, pkt + 2, len)) {
627 			eth_halt();
628 			net_set_state(NETLOOP_FAIL);
629 			break;
630 		}
631 
632 		/*
633 		 *	Acknowledge the block just received, which will prompt
634 		 *	the remote for the next one.
635 		 */
636 #ifdef CONFIG_MCAST_TFTP
637 		/* if I am the MasterClient, actively calculate what my next
638 		 * needed block is; else I'm passive; not ACKING
639 		 */
640 		if (tftp_mcast_active) {
641 			if (len < tftp_block_size)  {
642 				tftp_mcast_ending_block = tftp_cur_block;
643 			} else if (tftp_mcast_master_client) {
644 				tftp_mcast_prev_hole = ext2_find_next_zero_bit(
645 					tftp_mcast_bitmap,
646 					tftp_mcast_bitmap_size * 8,
647 					tftp_mcast_prev_hole);
648 				tftp_cur_block = tftp_mcast_prev_hole;
649 				if (tftp_cur_block >
650 				    ((tftp_mcast_bitmap_size * 8) - 1)) {
651 					debug("tftpfile too big\n");
652 					/* try to double it and retry */
653 					tftp_mcast_bitmap_size <<= 1;
654 					mcast_cleanup();
655 					net_start_again();
656 					return;
657 				}
658 				tftp_prev_block = tftp_cur_block;
659 			}
660 		}
661 #endif
662 		tftp_send();
663 
664 #ifdef CONFIG_MCAST_TFTP
665 		if (tftp_mcast_active) {
666 			if (tftp_mcast_master_client &&
667 			    (tftp_cur_block >= tftp_mcast_ending_block)) {
668 				puts("\nMulticast tftp done\n");
669 				mcast_cleanup();
670 				net_set_state(NETLOOP_SUCCESS);
671 			}
672 		} else
673 #endif
674 		if (len < tftp_block_size)
675 			tftp_complete();
676 		break;
677 
678 	case TFTP_ERROR:
679 		printf("\nTFTP error: '%s' (%d)\n",
680 		       pkt + 2, ntohs(*(__be16 *)pkt));
681 
682 		switch (ntohs(*(__be16 *)pkt)) {
683 		case TFTP_ERR_FILE_NOT_FOUND:
684 		case TFTP_ERR_ACCESS_DENIED:
685 			puts("Not retrying...\n");
686 			eth_halt();
687 			net_set_state(NETLOOP_FAIL);
688 			break;
689 		case TFTP_ERR_UNDEFINED:
690 		case TFTP_ERR_DISK_FULL:
691 		case TFTP_ERR_UNEXPECTED_OPCODE:
692 		case TFTP_ERR_UNKNOWN_TRANSFER_ID:
693 		case TFTP_ERR_FILE_ALREADY_EXISTS:
694 		default:
695 			puts("Starting again\n\n");
696 #ifdef CONFIG_MCAST_TFTP
697 			mcast_cleanup();
698 #endif
699 			net_start_again();
700 			break;
701 		}
702 		break;
703 	}
704 }
705 
706 
707 static void tftp_timeout_handler(void)
708 {
709 	if (++timeout_count > timeout_count_max) {
710 		restart("Retry count exceeded");
711 	} else {
712 		puts("T ");
713 		net_set_timeout_handler(timeout_ms, tftp_timeout_handler);
714 		if (tftp_state != STATE_RECV_WRQ)
715 			tftp_send();
716 	}
717 }
718 
719 /* Initialize tftp_load_addr and tftp_load_size from load_addr and lmb */
720 static int tftp_init_load_addr(void)
721 {
722 #ifdef CONFIG_LMB
723 	struct lmb lmb;
724 	phys_size_t max_size;
725 
726 	lmb_init_and_reserve(&lmb, gd->bd->bi_dram[0].start,
727 			     gd->bd->bi_dram[0].size, (void *)gd->fdt_blob);
728 
729 	max_size = lmb_get_unreserved_size(&lmb, load_addr);
730 	if (!max_size)
731 		return -1;
732 
733 	tftp_load_size = max_size;
734 #endif
735 	tftp_load_addr = load_addr;
736 	return 0;
737 }
738 
739 void tftp_start(enum proto_t protocol)
740 {
741 #if CONFIG_NET_TFTP_VARS
742 	char *ep;             /* Environment pointer */
743 
744 	/*
745 	 * Allow the user to choose TFTP blocksize and timeout.
746 	 * TFTP protocol has a minimal timeout of 1 second.
747 	 */
748 
749 	ep = env_get("tftpblocksize");
750 	if (ep != NULL)
751 		tftp_block_size_option = simple_strtol(ep, NULL, 10);
752 
753 	ep = env_get("tftptimeout");
754 	if (ep != NULL)
755 		timeout_ms = simple_strtol(ep, NULL, 10);
756 
757 	if (timeout_ms < 1000) {
758 		printf("TFTP timeout (%ld ms) too low, set min = 1000 ms\n",
759 		       timeout_ms);
760 		timeout_ms = 1000;
761 	}
762 
763 	ep = env_get("tftptimeoutcountmax");
764 	if (ep != NULL)
765 		tftp_timeout_count_max = simple_strtol(ep, NULL, 10);
766 
767 	if (tftp_timeout_count_max < 0) {
768 		printf("TFTP timeout count max (%d ms) negative, set to 0\n",
769 		       tftp_timeout_count_max);
770 		tftp_timeout_count_max = 0;
771 	}
772 #endif
773 
774 	debug("TFTP blocksize = %i, timeout = %ld ms\n",
775 	      tftp_block_size_option, timeout_ms);
776 
777 	tftp_remote_ip = net_server_ip;
778 	if (!net_parse_bootfile(&tftp_remote_ip, tftp_filename, MAX_LEN)) {
779 		sprintf(default_filename, "%02X%02X%02X%02X.img",
780 			net_ip.s_addr & 0xFF,
781 			(net_ip.s_addr >>  8) & 0xFF,
782 			(net_ip.s_addr >> 16) & 0xFF,
783 			(net_ip.s_addr >> 24) & 0xFF);
784 
785 		strncpy(tftp_filename, default_filename, DEFAULT_NAME_LEN);
786 		tftp_filename[DEFAULT_NAME_LEN - 1] = 0;
787 
788 		printf("*** Warning: no boot file name; using '%s'\n",
789 		       tftp_filename);
790 	}
791 
792 	printf("Using %s device\n", eth_get_name());
793 	printf("TFTP %s server %pI4; our IP address is %pI4",
794 #ifdef CONFIG_CMD_TFTPPUT
795 	       protocol == TFTPPUT ? "to" : "from",
796 #else
797 	       "from",
798 #endif
799 	       &tftp_remote_ip, &net_ip);
800 
801 	/* Check if we need to send across this subnet */
802 	if (net_gateway.s_addr && net_netmask.s_addr) {
803 		struct in_addr our_net;
804 		struct in_addr remote_net;
805 
806 		our_net.s_addr = net_ip.s_addr & net_netmask.s_addr;
807 		remote_net.s_addr = tftp_remote_ip.s_addr & net_netmask.s_addr;
808 		if (our_net.s_addr != remote_net.s_addr)
809 			printf("; sending through gateway %pI4", &net_gateway);
810 	}
811 	putc('\n');
812 
813 	printf("Filename '%s'.", tftp_filename);
814 
815 	if (net_boot_file_expected_size_in_blocks) {
816 		printf(" Size is 0x%x Bytes = ",
817 		       net_boot_file_expected_size_in_blocks << 9);
818 		print_size(net_boot_file_expected_size_in_blocks << 9, "");
819 	}
820 
821 	putc('\n');
822 #ifdef CONFIG_CMD_TFTPPUT
823 	tftp_put_active = (protocol == TFTPPUT);
824 	if (tftp_put_active) {
825 		printf("Save address: 0x%lx\n", save_addr);
826 		printf("Save size:    0x%lx\n", save_size);
827 		net_boot_file_size = save_size;
828 		puts("Saving: *\b");
829 		tftp_state = STATE_SEND_WRQ;
830 		new_transfer();
831 	} else
832 #endif
833 	{
834 		if (tftp_init_load_addr()) {
835 			eth_halt();
836 			net_set_state(NETLOOP_FAIL);
837 			puts("\nTFTP error: ");
838 			puts("trying to overwrite reserved memory...\n");
839 			return;
840 		}
841 		printf("Load address: 0x%lx\n", tftp_load_addr);
842 		puts("Loading: *\b");
843 		tftp_state = STATE_SEND_RRQ;
844 #ifdef CONFIG_CMD_BOOTEFI
845 		efi_set_bootdev("Net", "", tftp_filename);
846 #endif
847 	}
848 
849 	time_start = get_timer(0);
850 	timeout_count_max = tftp_timeout_count_max;
851 
852 	net_set_timeout_handler(timeout_ms, tftp_timeout_handler);
853 	net_set_udp_handler(tftp_handler);
854 #ifdef CONFIG_CMD_TFTPPUT
855 	net_set_icmp_handler(icmp_handler);
856 #endif
857 	tftp_remote_port = WELL_KNOWN_PORT;
858 	timeout_count = 0;
859 	/* Use a pseudo-random port unless a specific port is set */
860 	tftp_our_port = 1024 + (get_timer(0) % 3072);
861 
862 #ifdef CONFIG_TFTP_PORT
863 	ep = env_get("tftpdstp");
864 	if (ep != NULL)
865 		tftp_remote_port = simple_strtol(ep, NULL, 10);
866 	ep = env_get("tftpsrcp");
867 	if (ep != NULL)
868 		tftp_our_port = simple_strtol(ep, NULL, 10);
869 #endif
870 	tftp_cur_block = 0;
871 
872 	/* zero out server ether in case the server ip has changed */
873 	memset(net_server_ethaddr, 0, 6);
874 	/* Revert tftp_block_size to dflt */
875 	tftp_block_size = TFTP_BLOCK_SIZE;
876 #ifdef CONFIG_MCAST_TFTP
877 	mcast_cleanup();
878 #endif
879 #ifdef CONFIG_TFTP_TSIZE
880 	tftp_tsize = 0;
881 	tftp_tsize_num_hash = 0;
882 #endif
883 
884 	tftp_send();
885 }
886 
887 #ifdef CONFIG_CMD_TFTPSRV
888 void tftp_start_server(void)
889 {
890 	tftp_filename[0] = 0;
891 
892 	if (tftp_init_load_addr()) {
893 		eth_halt();
894 		net_set_state(NETLOOP_FAIL);
895 		puts("\nTFTP error: trying to overwrite reserved memory...\n");
896 		return;
897 	}
898 	printf("Using %s device\n", eth_get_name());
899 	printf("Listening for TFTP transfer on %pI4\n", &net_ip);
900 	printf("Load address: 0x%lx\n", tftp_load_addr);
901 
902 	puts("Loading: *\b");
903 
904 	timeout_count_max = tftp_timeout_count_max;
905 	timeout_count = 0;
906 	timeout_ms = TIMEOUT;
907 	net_set_timeout_handler(timeout_ms, tftp_timeout_handler);
908 
909 	/* Revert tftp_block_size to dflt */
910 	tftp_block_size = TFTP_BLOCK_SIZE;
911 	tftp_cur_block = 0;
912 	tftp_our_port = WELL_KNOWN_PORT;
913 
914 #ifdef CONFIG_TFTP_TSIZE
915 	tftp_tsize = 0;
916 	tftp_tsize_num_hash = 0;
917 #endif
918 
919 	tftp_state = STATE_RECV_WRQ;
920 	net_set_udp_handler(tftp_handler);
921 
922 	/* zero out server ether in case the server ip has changed */
923 	memset(net_server_ethaddr, 0, 6);
924 }
925 #endif /* CONFIG_CMD_TFTPSRV */
926 
927 #ifdef CONFIG_MCAST_TFTP
928 /*
929  * Credits: atftp project.
930  */
931 
932 /*
933  * Pick up BcastAddr, Port, and whether I am [now] the master-client.
934  * Frame:
935  *    +-------+-----------+---+-------~~-------+---+
936  *    |  opc  | multicast | 0 | addr, port, mc | 0 |
937  *    +-------+-----------+---+-------~~-------+---+
938  * The multicast addr/port becomes what I listen to, and if 'mc' is '1' then
939  * I am the new master-client so must send ACKs to DataBlocks.  If I am not
940  * master-client, I'm a passive client, gathering what DataBlocks I may and
941  * making note of which ones I got in my bitmask.
942  * In theory, I never go from master->passive..
943  * .. this comes in with pkt already pointing just past opc
944  */
945 static void parse_multicast_oack(char *pkt, int len)
946 {
947 	int i;
948 	struct in_addr addr;
949 	char *mc_adr;
950 	char *port;
951 	char *mc;
952 
953 	mc_adr = NULL;
954 	port = NULL;
955 	mc = NULL;
956 	/* march along looking for 'multicast\0', which has to start at least
957 	 * 14 bytes back from the end.
958 	 */
959 	for (i = 0; i < len - 14; i++)
960 		if (strcmp(pkt + i, "multicast") == 0)
961 			break;
962 	if (i >= (len - 14)) /* non-Multicast OACK, ign. */
963 		return;
964 
965 	i += 10; /* strlen multicast */
966 	mc_adr = pkt + i;
967 	for (; i < len; i++) {
968 		if (*(pkt + i) == ',') {
969 			*(pkt + i) = '\0';
970 			if (port) {
971 				mc = pkt + i + 1;
972 				break;
973 			} else {
974 				port = pkt + i + 1;
975 			}
976 		}
977 	}
978 	if (!port || !mc_adr || !mc)
979 		return;
980 	if (tftp_mcast_active && tftp_mcast_master_client) {
981 		printf("I got a OACK as master Client, WRONG!\n");
982 		return;
983 	}
984 	/* ..I now accept packets destined for this MCAST addr, port */
985 	if (!tftp_mcast_active) {
986 		if (tftp_mcast_bitmap) {
987 			printf("Internal failure! no mcast.\n");
988 			free(tftp_mcast_bitmap);
989 			tftp_mcast_bitmap = NULL;
990 			tftp_mcast_disabled = 1;
991 			return;
992 		}
993 		/* I malloc instead of pre-declare; so that if the file ends
994 		 * up being too big for this bitmap I can retry
995 		 */
996 		tftp_mcast_bitmap = malloc(tftp_mcast_bitmap_size);
997 		if (!tftp_mcast_bitmap) {
998 			printf("No bitmap, no multicast. Sorry.\n");
999 			tftp_mcast_disabled = 1;
1000 			return;
1001 		}
1002 		memset(tftp_mcast_bitmap, 0, tftp_mcast_bitmap_size);
1003 		tftp_mcast_prev_hole = 0;
1004 		tftp_mcast_active = 1;
1005 	}
1006 	addr = string_to_ip(mc_adr);
1007 	if (net_mcast_addr.s_addr != addr.s_addr) {
1008 		if (net_mcast_addr.s_addr)
1009 			eth_mcast_join(net_mcast_addr, 0);
1010 		net_mcast_addr = addr;
1011 		if (eth_mcast_join(net_mcast_addr, 1)) {
1012 			printf("Fail to set mcast, revert to TFTP\n");
1013 			tftp_mcast_disabled = 1;
1014 			mcast_cleanup();
1015 			net_start_again();
1016 		}
1017 	}
1018 	tftp_mcast_master_client = simple_strtoul((char *)mc, NULL, 10);
1019 	tftp_mcast_port = (unsigned short)simple_strtoul(port, NULL, 10);
1020 	printf("Multicast: %s:%d [%d]\n", mc_adr, tftp_mcast_port,
1021 	       tftp_mcast_master_client);
1022 	return;
1023 }
1024 
1025 #endif /* Multicast TFTP */
1026