Loading drivers/firmware/sigma.c +58 −23 Original line number Diff line number Diff line Loading @@ -14,13 +14,34 @@ #include <linux/module.h> #include <linux/sigma.h> /* Return: 0==OK, <0==error, =1 ==no more actions */ static size_t sigma_action_size(struct sigma_action *sa) { size_t payload = 0; switch (sa->instr) { case SIGMA_ACTION_WRITEXBYTES: case SIGMA_ACTION_WRITESINGLE: case SIGMA_ACTION_WRITESAFELOAD: payload = sigma_action_len(sa); break; default: break; } payload = ALIGN(payload, 2); return payload + sizeof(struct sigma_action); } /* * Returns a negative error value in case of an error, 0 if processing of * the firmware should be stopped after this action, 1 otherwise. */ static int process_sigma_action(struct i2c_client *client, struct sigma_firmware *ssfw) process_sigma_action(struct i2c_client *client, struct sigma_action *sa) { struct sigma_action *sa = (void *)(ssfw->fw->data + ssfw->pos); size_t len = sigma_action_len(sa); int ret = 0; int ret; pr_debug("%s: instr:%i addr:%#x len:%zu\n", __func__, sa->instr, sa->addr, len); Loading @@ -29,44 +50,50 @@ process_sigma_action(struct i2c_client *client, struct sigma_firmware *ssfw) case SIGMA_ACTION_WRITEXBYTES: case SIGMA_ACTION_WRITESINGLE: case SIGMA_ACTION_WRITESAFELOAD: if (ssfw->fw->size < ssfw->pos + len) return -EINVAL; ret = i2c_master_send(client, (void *)&sa->addr, len); if (ret < 0) return -EINVAL; break; case SIGMA_ACTION_DELAY: ret = 0; udelay(len); len = 0; break; case SIGMA_ACTION_END: return 1; return 0; default: return -EINVAL; } /* when arrive here ret=0 or sent data */ ssfw->pos += sigma_action_size(sa, len); return ssfw->pos == ssfw->fw->size; return 1; } static int process_sigma_actions(struct i2c_client *client, struct sigma_firmware *ssfw) { pr_debug("%s: processing %p\n", __func__, ssfw); struct sigma_action *sa; size_t size; int ret; while (ssfw->pos + sizeof(*sa) <= ssfw->fw->size) { sa = (struct sigma_action *)(ssfw->fw->data + ssfw->pos); size = sigma_action_size(sa); ssfw->pos += size; if (ssfw->pos > ssfw->fw->size || size == 0) break; ret = process_sigma_action(client, sa); while (1) { int ret = process_sigma_action(client, ssfw); pr_debug("%s: action returned %i\n", __func__, ret); if (ret == 1) return 0; else if (ret) if (ret <= 0) return ret; } if (ssfw->pos != ssfw->fw->size) return -EINVAL; return 0; } int process_sigma_firmware(struct i2c_client *client, const char *name) Loading @@ -89,16 +116,24 @@ int process_sigma_firmware(struct i2c_client *client, const char *name) /* then verify the header */ ret = -EINVAL; if (fw->size < sizeof(*ssfw_head)) /* * Reject too small or unreasonable large files. The upper limit has been * chosen a bit arbitrarily, but it should be enough for all practical * purposes and having the limit makes it easier to avoid integer * overflows later in the loading process. */ if (fw->size < sizeof(*ssfw_head) || fw->size >= 0x4000000) goto done; ssfw_head = (void *)fw->data; if (memcmp(ssfw_head->magic, SIGMA_MAGIC, ARRAY_SIZE(ssfw_head->magic))) goto done; crc = crc32(0, fw->data, fw->size); crc = crc32(0, fw->data + sizeof(*ssfw_head), fw->size - sizeof(*ssfw_head)); pr_debug("%s: crc=%x\n", __func__, crc); if (crc != ssfw_head->crc) if (crc != le32_to_cpu(ssfw_head->crc)) goto done; ssfw.pos = sizeof(*ssfw_head); Loading include/linux/sigma.h +4 −9 Original line number Diff line number Diff line Loading @@ -24,7 +24,7 @@ struct sigma_firmware { struct sigma_firmware_header { unsigned char magic[7]; u8 version; u32 crc; __le32 crc; }; enum { Loading @@ -40,19 +40,14 @@ enum { struct sigma_action { u8 instr; u8 len_hi; u16 len; u16 addr; __le16 len; __be16 addr; unsigned char payload[]; }; static inline u32 sigma_action_len(struct sigma_action *sa) { return (sa->len_hi << 16) | sa->len; } static inline size_t sigma_action_size(struct sigma_action *sa, u32 payload_len) { return sizeof(*sa) + payload_len + (payload_len % 2); return (sa->len_hi << 16) | le16_to_cpu(sa->len); } extern int process_sigma_firmware(struct i2c_client *client, const char *name); Loading Loading
drivers/firmware/sigma.c +58 −23 Original line number Diff line number Diff line Loading @@ -14,13 +14,34 @@ #include <linux/module.h> #include <linux/sigma.h> /* Return: 0==OK, <0==error, =1 ==no more actions */ static size_t sigma_action_size(struct sigma_action *sa) { size_t payload = 0; switch (sa->instr) { case SIGMA_ACTION_WRITEXBYTES: case SIGMA_ACTION_WRITESINGLE: case SIGMA_ACTION_WRITESAFELOAD: payload = sigma_action_len(sa); break; default: break; } payload = ALIGN(payload, 2); return payload + sizeof(struct sigma_action); } /* * Returns a negative error value in case of an error, 0 if processing of * the firmware should be stopped after this action, 1 otherwise. */ static int process_sigma_action(struct i2c_client *client, struct sigma_firmware *ssfw) process_sigma_action(struct i2c_client *client, struct sigma_action *sa) { struct sigma_action *sa = (void *)(ssfw->fw->data + ssfw->pos); size_t len = sigma_action_len(sa); int ret = 0; int ret; pr_debug("%s: instr:%i addr:%#x len:%zu\n", __func__, sa->instr, sa->addr, len); Loading @@ -29,44 +50,50 @@ process_sigma_action(struct i2c_client *client, struct sigma_firmware *ssfw) case SIGMA_ACTION_WRITEXBYTES: case SIGMA_ACTION_WRITESINGLE: case SIGMA_ACTION_WRITESAFELOAD: if (ssfw->fw->size < ssfw->pos + len) return -EINVAL; ret = i2c_master_send(client, (void *)&sa->addr, len); if (ret < 0) return -EINVAL; break; case SIGMA_ACTION_DELAY: ret = 0; udelay(len); len = 0; break; case SIGMA_ACTION_END: return 1; return 0; default: return -EINVAL; } /* when arrive here ret=0 or sent data */ ssfw->pos += sigma_action_size(sa, len); return ssfw->pos == ssfw->fw->size; return 1; } static int process_sigma_actions(struct i2c_client *client, struct sigma_firmware *ssfw) { pr_debug("%s: processing %p\n", __func__, ssfw); struct sigma_action *sa; size_t size; int ret; while (ssfw->pos + sizeof(*sa) <= ssfw->fw->size) { sa = (struct sigma_action *)(ssfw->fw->data + ssfw->pos); size = sigma_action_size(sa); ssfw->pos += size; if (ssfw->pos > ssfw->fw->size || size == 0) break; ret = process_sigma_action(client, sa); while (1) { int ret = process_sigma_action(client, ssfw); pr_debug("%s: action returned %i\n", __func__, ret); if (ret == 1) return 0; else if (ret) if (ret <= 0) return ret; } if (ssfw->pos != ssfw->fw->size) return -EINVAL; return 0; } int process_sigma_firmware(struct i2c_client *client, const char *name) Loading @@ -89,16 +116,24 @@ int process_sigma_firmware(struct i2c_client *client, const char *name) /* then verify the header */ ret = -EINVAL; if (fw->size < sizeof(*ssfw_head)) /* * Reject too small or unreasonable large files. The upper limit has been * chosen a bit arbitrarily, but it should be enough for all practical * purposes and having the limit makes it easier to avoid integer * overflows later in the loading process. */ if (fw->size < sizeof(*ssfw_head) || fw->size >= 0x4000000) goto done; ssfw_head = (void *)fw->data; if (memcmp(ssfw_head->magic, SIGMA_MAGIC, ARRAY_SIZE(ssfw_head->magic))) goto done; crc = crc32(0, fw->data, fw->size); crc = crc32(0, fw->data + sizeof(*ssfw_head), fw->size - sizeof(*ssfw_head)); pr_debug("%s: crc=%x\n", __func__, crc); if (crc != ssfw_head->crc) if (crc != le32_to_cpu(ssfw_head->crc)) goto done; ssfw.pos = sizeof(*ssfw_head); Loading
include/linux/sigma.h +4 −9 Original line number Diff line number Diff line Loading @@ -24,7 +24,7 @@ struct sigma_firmware { struct sigma_firmware_header { unsigned char magic[7]; u8 version; u32 crc; __le32 crc; }; enum { Loading @@ -40,19 +40,14 @@ enum { struct sigma_action { u8 instr; u8 len_hi; u16 len; u16 addr; __le16 len; __be16 addr; unsigned char payload[]; }; static inline u32 sigma_action_len(struct sigma_action *sa) { return (sa->len_hi << 16) | sa->len; } static inline size_t sigma_action_size(struct sigma_action *sa, u32 payload_len) { return sizeof(*sa) + payload_len + (payload_len % 2); return (sa->len_hi << 16) | le16_to_cpu(sa->len); } extern int process_sigma_firmware(struct i2c_client *client, const char *name); Loading