97 lines
2.9 KiB
Bash
Executable File
97 lines
2.9 KiB
Bash
Executable File
#!/bin/sh
|
|
#===============================================================================
|
|
#
|
|
# Copyright (C) 2022 by Digi International Inc.
|
|
# All rights reserved.
|
|
#
|
|
# This program is free software; you can redistribute it and/or modify it
|
|
# under the terms of the GNU General Public License version 2 as published by
|
|
# the Free Software Foundation.
|
|
#
|
|
#
|
|
# Description:
|
|
# Script will be called by swupdate to install a new u-boot within linux.
|
|
#===============================================================================
|
|
|
|
UBOOT_FILE="$1"
|
|
UBOOT_ENC="$2"
|
|
|
|
echo "**** Start U-Boot update process *****"
|
|
|
|
# need to mount debufs to remove some kobs-ng warnings
|
|
if ! grep -qs debugfs /proc/mounts; then
|
|
mount -t debugfs debugfs /sys/kernel/debug/
|
|
fi
|
|
|
|
dump_dek ()
|
|
{
|
|
echo "**** Get DEK and append to the new u-boot *****"
|
|
UBOOT_MTD_DEV="/dev/mtd0"
|
|
OUTPUT_FILE="/tmp/dek.bin"
|
|
KEY_SIZE_BYTES="32"
|
|
ENCRYPTED_UBOOT_DEK="u-boot-encrypted-with-dek.imx"
|
|
|
|
#(The last byte lacks one digit on purpose, to match 40, 41 and 42; all HAB versions)
|
|
UBOOT_HEADER="d1 00 20 4"
|
|
DEK_BLOB_HEADER="81 00 58 4"
|
|
|
|
uboot_start="0x$(nanddump ${UBOOT_MTD_DEV} | hexdump -C | grep -m 1 "${UBOOT_HEADER}" | head -1 | cut -c -8)"
|
|
if [ "${uboot_start}" = "0x" ]; then
|
|
echo "Could not find U-Boot on NAND"
|
|
return 78
|
|
fi
|
|
|
|
uboot_size_offset=$((uboot_start + 36))
|
|
uboot_size=$(hexdump -n 4 -s ${uboot_size_offset} -e '/4 "0x%08x\t" "\n"' ${UBOOT_MTD_DEV})
|
|
# dump start needs to be aligned (U-Boot always leaves 0x400 for DOS table)
|
|
dump_start=$((uboot_start - 0x400))
|
|
# DEK blobs have an overhead of 56 bytes.
|
|
dek_blob_size=$((KEY_SIZE_BYTES + 56))
|
|
|
|
# remove the output DEK file before creating it.
|
|
# Since this function is called twice.
|
|
# For the actual upgrade and then for the validation after the upgrade.
|
|
rm -f ${OUTPUT_FILE}
|
|
# read the complete U-Boot (to skip alignment issues) and keep the dek_blob (which is at the end)
|
|
nanddump -s ${dump_start} -l ${uboot_size} ${UBOOT_MTD_DEV} | tail -c ${dek_blob_size} > ${OUTPUT_FILE}
|
|
rc=$?
|
|
if [ $rc -ne 0 ]; then
|
|
echo "DEK dump to the output file failed."
|
|
return $rc
|
|
fi
|
|
echo "dump_dek: output file has been created."
|
|
# Validate DEK blob
|
|
if [ -z "$(dd if=${OUTPUT_FILE} bs=1 count=4 2>/dev/null | hexdump -C | grep "${DEK_BLOB_HEADER}")" ]; then
|
|
echo "Could not find DEK blob"
|
|
rm -rf ${OUTPUT_FILE}
|
|
return 60
|
|
fi
|
|
echo "DEK blob correctly dumped"
|
|
return 0
|
|
}
|
|
|
|
if [ "${UBOOT_ENC}" = "enc" ]; then
|
|
dump_dek
|
|
rc=$?
|
|
if [ "$rc" -ne 0 ]; then
|
|
echo "u-boot: DEK dump failed"
|
|
exit $rc
|
|
fi
|
|
cat $UBOOT_FILE $OUTPUT_FILE > /tmp/$ENCRYPTED_UBOOT_DEK
|
|
rc=$?
|
|
if [ "$rc" -ne 0 ]; then
|
|
echo "u-boot: Merging DEK with U-Boot image failed (DEV/FILE = $UBOOT_FILE)"
|
|
exit $rc
|
|
fi
|
|
UBOOT_FILE="${ENCRYPTED_UBOOT_DEK}"
|
|
fi
|
|
|
|
# install U-Boot onto the Nand Flash
|
|
kobs-ng init -x -v /mnt/update/${UBOOT_FILE}
|
|
rc=$?
|
|
if [ "$rc" -ne 0 ]; then
|
|
echo "u-Boot: Updating U-Boot partition failed"
|
|
else
|
|
echo "u-Boot: Updating U-Boot partition successful"
|
|
fi
|