210 lines
5.3 KiB
C
210 lines
5.3 KiB
C
/*
|
|
* This file is part of the flashrom project.
|
|
*
|
|
* Copyright (C) 2008 coresystems GmbH
|
|
*
|
|
* This program is free software; you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation; either version 2 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with this program; if not, write to the Free Software
|
|
* Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
|
|
*/
|
|
|
|
#include <stdio.h>
|
|
#include "flash.h"
|
|
|
|
int probe_winbond_fwhub(struct flashchip *flash)
|
|
{
|
|
volatile uint8_t *bios = flash->virtual_memory;
|
|
uint8_t vid, did;
|
|
|
|
/* Product Identification Entry */
|
|
*(volatile uint8_t *)(bios + 0x5555) = 0xAA;
|
|
*(volatile uint8_t *)(bios + 0x2AAA) = 0x55;
|
|
*(volatile uint8_t *)(bios + 0x5555) = 0x90;
|
|
myusec_delay(10);
|
|
|
|
/* Read product ID */
|
|
vid = *(volatile uint8_t *)bios;
|
|
did = *(volatile uint8_t *)(bios + 0x01);
|
|
|
|
/* Product Identifixation Exit */
|
|
*(volatile uint8_t *)(bios + 0x5555) = 0xAA;
|
|
*(volatile uint8_t *)(bios + 0x2AAA) = 0x55;
|
|
*(volatile uint8_t *)(bios + 0x5555) = 0xF0;
|
|
myusec_delay(10);
|
|
|
|
printf_debug("%s: vid 0x%x, did 0x%x\n", __FUNCTION__, vid, did);
|
|
|
|
if (vid != flash->manufacture_id || did != flash->model_id)
|
|
return 0;
|
|
|
|
map_flash_registers(flash);
|
|
|
|
return 1;
|
|
}
|
|
|
|
static int unlock_block_winbond_fwhub(struct flashchip *flash, int offset)
|
|
{
|
|
volatile uint8_t *wrprotect = flash->virtual_registers + offset + 2;
|
|
uint8_t locking;
|
|
|
|
printf_debug("Trying to unlock block @0x%08x = 0x%02x\n", offset,
|
|
*wrprotect);
|
|
|
|
locking = *wrprotect;
|
|
switch (locking & 0x7) {
|
|
case 0:
|
|
printf_debug("Full Access.\n");
|
|
return 0;
|
|
case 1:
|
|
printf_debug("Write Lock (Default State).\n");
|
|
*wrprotect = 0;
|
|
return 0;
|
|
case 2:
|
|
printf_debug("Locked Open (Full Access, Lock Down).\n");
|
|
return 0;
|
|
case 3:
|
|
fprintf(stderr, "Error: Write Lock, Locked Down.\n");
|
|
return -1;
|
|
case 4:
|
|
printf_debug("Read Lock.\n");
|
|
*wrprotect = 0;
|
|
return 0;
|
|
case 5:
|
|
printf_debug("Read/Write Lock.\n");
|
|
*wrprotect = 0;
|
|
return 0;
|
|
case 6:
|
|
fprintf(stderr, "Error: Read Lock, Locked Down.\n");
|
|
return -1;
|
|
case 7:
|
|
fprintf(stderr, "Error: Read/Write Lock, Locked Down.\n");
|
|
return -1;
|
|
}
|
|
|
|
/* We will never reach this point, but GCC doesn't know */
|
|
return -1;
|
|
}
|
|
|
|
int unlock_winbond_fwhub(struct flashchip *flash)
|
|
{
|
|
int i, total_size = flash->total_size * 1024;
|
|
volatile uint8_t *bios = flash->virtual_memory;
|
|
uint8_t locking;
|
|
|
|
/* Are there any hardware restrictions that we can't overcome?
|
|
* If flashrom fail here, someone's got to check all those GPIOs.
|
|
*/
|
|
|
|
/* Product Identification Entry */
|
|
*(volatile uint8_t *)(bios + 0x5555) = 0xAA;
|
|
*(volatile uint8_t *)(bios + 0x2AAA) = 0x55;
|
|
*(volatile uint8_t *)(bios + 0x5555) = 0x90;
|
|
myusec_delay(10);
|
|
|
|
/* Read Hardware Lock Bits */
|
|
locking = *(volatile uint8_t *)(bios + 0xffff2);
|
|
|
|
/* Product Identification Exit */
|
|
*(volatile uint8_t *)(bios + 0x5555) = 0xAA;
|
|
*(volatile uint8_t *)(bios + 0x2AAA) = 0x55;
|
|
*(volatile uint8_t *)(bios + 0x5555) = 0xF0;
|
|
myusec_delay(10);
|
|
|
|
printf_debug("Lockout bits:\n");
|
|
|
|
if (locking & (1 << 2))
|
|
fprintf(stderr, "Error: hardware bootblock locking (#TBL).\n");
|
|
else
|
|
printf_debug("No hardware bootblock locking (good!)\n");
|
|
|
|
if (locking & (1 << 3))
|
|
fprintf(stderr, "Error: hardware block locking (#WP).\n");
|
|
else
|
|
printf_debug("No hardware block locking (good!)\n");
|
|
|
|
if (locking & ((1 << 2) | (1 << 3)))
|
|
return -1;
|
|
|
|
/* Unlock the complete chip */
|
|
for (i = 0; i < total_size; i += flash->page_size)
|
|
if (unlock_block_winbond_fwhub(flash, i))
|
|
return -1;
|
|
|
|
return 0;
|
|
}
|
|
|
|
static int erase_sector_winbond_fwhub(volatile uint8_t *bios,
|
|
unsigned int sector)
|
|
{
|
|
/* Remember: too much sleep can waste your day. */
|
|
|
|
printf("0x%08x\b\b\b\b\b\b\b\b\b\b", sector);
|
|
|
|
/* Sector Erase */
|
|
*(volatile uint8_t *)(bios + 0x5555) = 0xAA;
|
|
*(volatile uint8_t *)(bios + 0x2AAA) = 0x55;
|
|
*(volatile uint8_t *)(bios + 0x5555) = 0x80;
|
|
|
|
*(volatile uint8_t *)(bios + 0x5555) = 0xAA;
|
|
*(volatile uint8_t *)(bios + 0x2AAA) = 0x55;
|
|
*(volatile uint8_t *)(bios + sector) = 0x30;
|
|
|
|
/* wait for Toggle bit ready */
|
|
toggle_ready_jedec(bios);
|
|
|
|
return 0;
|
|
}
|
|
|
|
int erase_winbond_fwhub(struct flashchip *flash)
|
|
{
|
|
int i, total_size = flash->total_size * 1024;
|
|
volatile uint8_t *bios = flash->virtual_memory;
|
|
|
|
unlock_winbond_fwhub(flash);
|
|
|
|
printf("Erasing: ");
|
|
|
|
for (i = 0; i < total_size; i += flash->page_size)
|
|
erase_sector_winbond_fwhub(bios, i);
|
|
|
|
printf("\n");
|
|
|
|
for (i = 0; i < total_size; i++) {
|
|
if (bios[i] != 0xff) {
|
|
fprintf(stderr, "Error: Flash chip erase failed at 0x%08x(0x%02x)\n", i, bios[i]);
|
|
return -1;
|
|
}
|
|
}
|
|
|
|
return 0;
|
|
}
|
|
|
|
int write_winbond_fwhub(struct flashchip *flash, uint8_t *buf)
|
|
{
|
|
int i;
|
|
int total_size = flash->total_size * 1024;
|
|
volatile uint8_t *bios = flash->virtual_memory;
|
|
|
|
if (erase_winbond_fwhub(flash))
|
|
return -1;
|
|
|
|
printf("Programming: ");
|
|
for (i = 0; i < total_size; i += flash->page_size) {
|
|
printf("0x%08x\b\b\b\b\b\b\b\b\b\b", i);
|
|
write_sector_jedec(bios, buf + i, bios + i, flash->page_size);
|
|
}
|
|
printf("\n");
|
|
|
|
return 0;
|
|
}
|