1 /*- 2 * SPDX-License-Identifier: BSD-2-Clause 3 * 4 * Copyright (c) 2013 EMC Corp. 5 * All rights reserved. 6 * 7 * Copyright (C) 2012-2013 Intel Corporation 8 * All rights reserved. 9 * 10 * Redistribution and use in source and binary forms, with or without 11 * modification, are permitted provided that the following conditions 12 * are met: 13 * 1. Redistributions of source code must retain the above copyright 14 * notice, this list of conditions and the following disclaimer. 15 * 2. Redistributions in binary form must reproduce the above copyright 16 * notice, this list of conditions and the following disclaimer in the 17 * documentation and/or other materials provided with the distribution. 18 * 19 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND 20 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 21 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 22 * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE 23 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 24 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 25 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 26 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 27 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 28 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 29 * SUCH DAMAGE. 30 */ 31 32 #include <sys/param.h> 33 #include <sys/ioccom.h> 34 #include <sys/stat.h> 35 #include <sys/types.h> 36 37 #include <ctype.h> 38 #include <err.h> 39 #include <fcntl.h> 40 #include <inttypes.h> 41 #include <stdbool.h> 42 #include <stddef.h> 43 #include <stdio.h> 44 #include <stdlib.h> 45 #include <string.h> 46 #include <sysexits.h> 47 #include <unistd.h> 48 49 #include "nvmecontrol.h" 50 51 /* Tables for command line parsing */ 52 53 static cmd_fn_t firmware; 54 55 #define NONE 0xffffffffu 56 static struct options { 57 bool activate; 58 uint32_t slot; 59 const char *fw_img; 60 const char *dev; 61 } opt = { 62 .activate = false, 63 .slot = NONE, 64 .fw_img = NULL, 65 .dev = NULL, 66 }; 67 68 static const struct opts firmware_opts[] = { 69 #define OPT(l, s, t, opt, addr, desc) { l, s, t, &opt.addr, desc } 70 OPT("activate", 'a', arg_none, opt, activate, 71 "Attempt to activate firmware"), 72 OPT("slot", 's', arg_uint32, opt, slot, 73 "Slot to activate and/or download firmware to"), 74 OPT("firmware", 'f', arg_path, opt, fw_img, 75 "Firmware image to download"), 76 { NULL, 0, arg_none, NULL, NULL } 77 }; 78 #undef OPT 79 80 static const struct args firmware_args[] = { 81 { arg_string, &opt.dev, "controller-id|namespace-id" }, 82 { arg_none, NULL, NULL }, 83 }; 84 85 static struct cmd firmware_cmd = { 86 .name = "firmware", 87 .fn = firmware, 88 .descr = "Download firmware image to controller", 89 .ctx_size = sizeof(opt), 90 .opts = firmware_opts, 91 .args = firmware_args, 92 }; 93 94 CMD_COMMAND(firmware_cmd); 95 96 /* End of tables for command line parsing */ 97 98 static int 99 slot_has_valid_firmware(int fd, int slot) 100 { 101 struct nvme_firmware_page fw; 102 int has_fw = false; 103 104 read_logpage(fd, NVME_LOG_FIRMWARE_SLOT, 105 NVME_GLOBAL_NAMESPACE_TAG, 0, 0, 0, &fw, sizeof(fw)); 106 107 if (fw.revision[slot-1][0] != '\0') 108 has_fw = true; 109 110 return (has_fw); 111 } 112 113 static void 114 read_image_file(const char *path, void **buf, int32_t *size) 115 { 116 struct stat sb; 117 int32_t filesize; 118 int fd; 119 120 *size = 0; 121 *buf = NULL; 122 123 if ((fd = open(path, O_RDONLY)) < 0) 124 err(EX_NOINPUT, "unable to open '%s'", path); 125 if (fstat(fd, &sb) < 0) 126 err(EX_NOINPUT, "unable to stat '%s'", path); 127 128 /* 129 * The NVMe spec does not explicitly state a maximum firmware image 130 * size, although one can be inferred from the dword size limitation 131 * for the size and offset fields in the Firmware Image Download 132 * command. 133 * 134 * Technically, the max is UINT32_MAX * sizeof(uint32_t), since the 135 * size and offsets are specified in terms of dwords (not bytes), but 136 * realistically INT32_MAX is sufficient here and simplifies matters 137 * a bit. 138 */ 139 if (sb.st_size > INT32_MAX) 140 errx(EX_USAGE, "size of file '%s' is too large (%jd bytes)", 141 path, (intmax_t)sb.st_size); 142 filesize = (int32_t)sb.st_size; 143 if ((*buf = malloc(filesize)) == NULL) 144 errx(EX_OSERR, "unable to malloc %d bytes", filesize); 145 if ((*size = read(fd, *buf, filesize)) < 0) 146 err(EX_IOERR, "error reading '%s'", path); 147 /* XXX assuming no short reads */ 148 if (*size != filesize) 149 errx(EX_IOERR, 150 "error reading '%s' (read %d bytes, requested %d bytes)", 151 path, *size, filesize); 152 close(fd); 153 } 154 155 static void 156 update_firmware(int fd, uint8_t *payload, int32_t payload_size, uint8_t fwug) 157 { 158 struct nvme_pt_command pt; 159 uint64_t max_xfer_size; 160 int32_t off; 161 uint32_t resid, size; 162 void *chunk; 163 164 off = 0; 165 resid = payload_size; 166 167 if (ioctl(fd, NVME_GET_MAX_XFER_SIZE, &max_xfer_size) < 0) 168 err(EX_IOERR, "query max transfer size failed"); 169 if (fwug != 0 && fwug != 0xFF) 170 max_xfer_size = MIN(max_xfer_size, (uint64_t)fwug << 12); 171 172 if ((chunk = aligned_alloc(PAGE_SIZE, max_xfer_size)) == NULL) 173 errx(EX_OSERR, "unable to malloc %zd bytes", (size_t)max_xfer_size); 174 175 while (resid > 0) { 176 size = (resid >= max_xfer_size) ? max_xfer_size : resid; 177 memcpy(chunk, payload + off, size); 178 179 memset(&pt, 0, sizeof(pt)); 180 pt.cmd.opc = NVME_OPC_FIRMWARE_IMAGE_DOWNLOAD; 181 pt.cmd.cdw10 = htole32((size / sizeof(uint32_t)) - 1); 182 pt.cmd.cdw11 = htole32(off / sizeof(uint32_t)); 183 pt.buf = chunk; 184 pt.len = size; 185 pt.is_read = 0; 186 187 if (ioctl(fd, NVME_PASSTHROUGH_CMD, &pt) < 0) 188 err(EX_IOERR, "firmware download request failed"); 189 190 if (nvme_completion_is_error(&pt.cpl)) 191 errx(EX_IOERR, "firmware download request returned error"); 192 193 resid -= size; 194 off += size; 195 } 196 free(chunk); 197 } 198 199 static int 200 activate_firmware(int fd, int slot, int activate_action) 201 { 202 struct nvme_pt_command pt; 203 uint16_t sct, sc; 204 205 memset(&pt, 0, sizeof(pt)); 206 pt.cmd.opc = NVME_OPC_FIRMWARE_ACTIVATE; 207 pt.cmd.cdw10 = htole32((activate_action << 3) | slot); 208 pt.is_read = 0; 209 210 if (ioctl(fd, NVME_PASSTHROUGH_CMD, &pt) < 0) 211 err(EX_IOERR, "firmware activate request failed"); 212 213 sct = NVME_STATUS_GET_SCT(pt.cpl.status); 214 sc = NVME_STATUS_GET_SC(pt.cpl.status); 215 216 if (sct == NVME_SCT_COMMAND_SPECIFIC && 217 sc == NVME_SC_FIRMWARE_REQUIRES_RESET) 218 return 1; 219 220 if (nvme_completion_is_error(&pt.cpl)) 221 errx(EX_IOERR, "firmware activate request returned error"); 222 223 return 0; 224 } 225 226 static void 227 firmware(const struct cmd *f, int argc, char *argv[]) 228 { 229 int fd = -1; 230 int activate_action, reboot_required; 231 char prompt[64]; 232 void *buf = NULL; 233 char *path; 234 int32_t size = 0, nsid; 235 uint16_t oacs_fw; 236 uint8_t fw_slot1_ro, fw_num_slots; 237 struct nvme_controller_data cdata; 238 239 if (arg_parse(argc, argv, f)) 240 return; 241 242 if (opt.slot == 0) { 243 fprintf(stderr, 244 "0 is not a valid slot number. " 245 "Slot numbers start at 1.\n"); 246 arg_help(argc, argv, f); 247 } else if (opt.slot > 7 && opt.slot != NONE) { 248 fprintf(stderr, 249 "Slot number %s specified which is " 250 "greater than max allowed slot number of " 251 "7.\n", optarg); 252 arg_help(argc, argv, f); 253 } 254 255 if (!opt.activate && opt.fw_img == NULL) { 256 fprintf(stderr, 257 "Neither a replace ([-f path_to_firmware]) nor " 258 "activate ([-a]) firmware image action\n" 259 "was specified.\n"); 260 arg_help(argc, argv, f); 261 } 262 263 if (opt.activate && opt.fw_img == NULL && opt.slot == 0) { 264 fprintf(stderr, 265 "Slot number to activate not specified.\n"); 266 arg_help(argc, argv, f); 267 } 268 269 open_dev(opt.dev, &fd, 1, 1); 270 get_nsid(fd, &path, &nsid); 271 if (nsid != 0) { 272 close(fd); 273 open_dev(path, &fd, 1, 1); 274 } 275 free(path); 276 277 if (read_controller_data(fd, &cdata)) 278 errx(EX_IOERR, "Identify request failed"); 279 280 oacs_fw = NVMEV(NVME_CTRLR_DATA_OACS_FIRMWARE, cdata.oacs); 281 282 if (oacs_fw == 0) 283 errx(EX_UNAVAILABLE, 284 "controller does not support firmware activate/download"); 285 286 fw_slot1_ro = NVMEV(NVME_CTRLR_DATA_FRMW_SLOT1_RO, cdata.frmw); 287 288 if (opt.fw_img && opt.slot == 1 && fw_slot1_ro) 289 errx(EX_UNAVAILABLE, "slot %d is marked as read only", opt.slot); 290 291 fw_num_slots = NVMEV(NVME_CTRLR_DATA_FRMW_NUM_SLOTS, cdata.frmw); 292 293 if (opt.slot > fw_num_slots) 294 errx(EX_UNAVAILABLE, 295 "slot %d specified but controller only supports %d slots", 296 opt.slot, fw_num_slots); 297 298 if (opt.activate && opt.fw_img == NULL && 299 !slot_has_valid_firmware(fd, opt.slot)) 300 errx(EX_UNAVAILABLE, 301 "slot %d does not contain valid firmware,\n" 302 "try 'nvmecontrol logpage -p 3 %s' to get a list " 303 "of available images\n", 304 opt.slot, opt.dev); 305 306 if (opt.fw_img) 307 read_image_file(opt.fw_img, &buf, &size); 308 309 if (opt.fw_img != NULL&& opt.activate) 310 printf("You are about to download and activate " 311 "firmware image (%s) to controller %s.\n" 312 "This may damage your controller and/or " 313 "overwrite an existing firmware image.\n", 314 opt.fw_img, opt.dev); 315 else if (opt.activate) 316 printf("You are about to activate a new firmware " 317 "image on controller %s.\n" 318 "This may damage your controller.\n", 319 opt.dev); 320 else if (opt.fw_img != NULL) 321 printf("You are about to download firmware image " 322 "(%s) to controller %s.\n" 323 "This may damage your controller and/or " 324 "overwrite an existing firmware image.\n", 325 opt.fw_img, opt.dev); 326 327 printf("Are you sure you want to continue? (yes/no) "); 328 while (1) { 329 fgets(prompt, sizeof(prompt), stdin); 330 if (strncasecmp(prompt, "yes", 3) == 0) 331 break; 332 if (strncasecmp(prompt, "no", 2) == 0) 333 exit(EX_DATAERR); 334 printf("Please answer \"yes\" or \"no\". "); 335 } 336 337 if (opt.fw_img != NULL) { 338 update_firmware(fd, buf, size, cdata.fwug); 339 if (opt.activate) 340 activate_action = NVME_AA_REPLACE_ACTIVATE; 341 else 342 activate_action = NVME_AA_REPLACE_NO_ACTIVATE; 343 } else { 344 activate_action = NVME_AA_ACTIVATE; 345 } 346 347 reboot_required = activate_firmware(fd, opt.slot, activate_action); 348 349 if (opt.activate) { 350 if (reboot_required) { 351 printf("New firmware image activated but requires " 352 "conventional reset (i.e. reboot) to " 353 "complete activation.\n"); 354 } else { 355 printf("New firmware image activated and will take " 356 "effect after next controller reset.\n" 357 "Controller reset can be initiated via " 358 "'nvmecontrol reset %s'\n", 359 opt.dev); 360 } 361 } 362 363 close(fd); 364 exit(0); 365 } 366