[PATCH 2/5] mkeficapsule: add support for multiple payloads inside capsule
Heinrich Schuchardt
xypron.glpk at gmx.de
Fri Jun 16 20:21:42 CEST 2023
On 6/16/23 13:34, Stefan Herbrechtsmeier wrote:
> From: Malte Schmidt <malte.schmidt at weidmueller.com>
>
> The UEFI [1] specification allows multiple payloads inside the capsule
> body. Add support for this. The command line arguments are kept
> backwards-compatible.
>
> [1] https://uefi.org/specs/UEFI/2.10/index.html
>
> Signed-off-by: Malte Schmidt <malte.schmidt at weidmueller.com>
> Signed-off-by: Stefan Herbrechtsmeier <stefan.herbrechtsmeier at weidmueller.com>
> ---
>
> tools/eficapsule.h | 5 -
> tools/mkeficapsule.c | 636 ++++++++++++++++++++++++++++++++-----------
> 2 files changed, 475 insertions(+), 166 deletions(-)
>
> diff --git a/tools/eficapsule.h b/tools/eficapsule.h
> index 753fb73313..001af3217c 100644
> --- a/tools/eficapsule.h
> +++ b/tools/eficapsule.h
> @@ -138,9 +138,4 @@ struct fmp_payload_header {
> uint32_t lowest_supported_version;
> };
>
> -struct fmp_payload_header_params {
> - bool have_header;
> - uint32_t fw_version;
> -};
> -
> #endif /* _EFI_CAPSULE_H */
> diff --git a/tools/mkeficapsule.c b/tools/mkeficapsule.c
> index b8db00b16b..1a4de0f092 100644
> --- a/tools/mkeficapsule.c
> +++ b/tools/mkeficapsule.c
> @@ -29,7 +29,7 @@ static const char *tool_name = "mkeficapsule";
> efi_guid_t efi_guid_fm_capsule = EFI_FIRMWARE_MANAGEMENT_CAPSULE_ID_GUID;
> efi_guid_t efi_guid_cert_type_pkcs7 = EFI_CERT_TYPE_PKCS7_GUID;
>
> -static const char *opts_short = "g:i:I:v:p:c:m:o:dhAR";
> +static const char *opts_short = "g:i:b:I:v:p:c:m:o:dhAR";
>
> enum {
> CAPSULE_NORMAL_BLOB = 0,
> @@ -40,6 +40,7 @@ enum {
> static struct option options[] = {
> {"guid", required_argument, NULL, 'g'},
> {"index", required_argument, NULL, 'i'},
> + {"image_blob", required_argument, NULL, 'b'},
> {"instance", required_argument, NULL, 'I'},
> {"fw-version", required_argument, NULL, 'v'},
> {"private-key", required_argument, NULL, 'p'},
> @@ -55,21 +56,22 @@ static struct option options[] = {
>
> static void print_usage(void)
> {
> - fprintf(stderr, "Usage: %s [options] <image blob> <output file>\n"
> + fprintf(stderr, "Usage: %s [options] [<image blob>] <output file>\n"
> "Options:\n"
>
> - "\t-g, --guid <guid string> guid for image blob type\n"
> - "\t-i, --index <index> update image index\n"
> - "\t-I, --instance <instance> update hardware instance\n"
> - "\t-v, --fw-version <version> firmware version\n"
> - "\t-p, --private-key <privkey file> private key file\n"
> - "\t-c, --certificate <cert file> signer's certificate file\n"
> - "\t-m, --monotonic-count <count> monotonic count\n"
> - "\t-d, --dump_sig dump signature (*.p7)\n"
> - "\t-A, --fw-accept firmware accept capsule, requires GUID, no image blob\n"
A later patch in the series mentions the lowest supported version. Why
can't we set it?
Best regards
Heinrich
> - "\t-R, --fw-revert firmware revert capsule, takes no GUID, no image blob\n"
> - "\t-o, --capoemflag Capsule OEM Flag, an integer between 0x0000 and 0xffff\n"
> - "\t-h, --help print a help message\n",
> + "\t-g, --guid <guid list> comma-separated list of guids for image blob types\n"
> + "\t-i, --index <index list> comma-separated list of update image indices\n"
> + "\t-b, --image_blob <blob list> comma-separated list of image blobs\n"
> + "\t-I, --instance <instance list> comma-separated list of update hardware instances\n"
> + "\t-v, --fw-version <version list> comma-separated list of firmware versions\n"
> + "\t-p, --private-key <privkey file> private key file\n"
> + "\t-c, --certificate <cert file> signer's certificate file\n"
> + "\t-m, --monotonic-count <monotonic-count list> comma-separated list of monotonic counts\n"
> + "\t-d, --dump_sig dump signature (*.p7)\n"
> + "\t-A, --fw-accept firmware accept capsule, requires GUID, no image blob\n"
> + "\t-R, --fw-revert firmware revert capsule, takes no GUID, no image blob\n"
> + "\t-o, --capoemflag capsule OEM Flag, an integer between 0x0000 and 0xffff\n"
> + "\t-h, --help print a help message\n",
> tool_name);
> }
>
> @@ -336,16 +338,18 @@ static int create_auth_data(struct auth_context *ctx)
> * @path: Path to a capsule file
> * @signature: Signature data
> * @sig_size: Size of signature data
> + * @index: The payload index the signature belongs to
> *
> * Signature data pointed to by @signature will be saved into
> - * a file whose file name is @path with ".p7" suffix.
> + * a file whose file name is @path with "_<index>.p7" suffix.
> + * If index is negative the suffix is ".p7" (for backwards compatibility).
> *
> * Return:
> * * 0 - on success
> * * -1 - on failure
> */
> static int dump_signature(const char *path, const uint8_t *signature,
> - size_t sig_size)
> + size_t sig_size, int index)
> {
> char *sig_path;
> FILE *f;
> @@ -356,7 +360,11 @@ static int dump_signature(const char *path, const uint8_t *signature,
> if (!sig_path)
> return ret;
>
> - sprintf(sig_path, "%s.p7", path);
> + if (index < 0)
> + sprintf(sig_path, "%s.p7", path);
> + else
> + sprintf(sig_path, "%s_%d.p7", path, index);
> +
> f = fopen(sig_path, "w");
> if (!f)
> goto err;
> @@ -386,14 +394,15 @@ static void free_sig_data(struct auth_context *ctx)
> /**
> * create_fwbin - create an uefi capsule file
> * @path: Path to a created capsule file
> - * @bin: Path to a firmware binary to encapsulate
> - * @guid: GUID of related FMP driver
> - * @index: Index number in capsule
> + * @bins: Paths to firmware binaries to encapsulate, an array
> + * @guids: GUIDs of related FMP drivers, an array
> + * @indices: Index numbers in capsule, an array
> * @instance: Instance number in capsule
> * @mcount: Monotonic count in authentication information
> + * @size: Size of the arrays
> * @private_file: Path to a private key file
> * @cert_file: Path to a certificate file
> - * @oemflags: Capsule OEM Flags, bits 0-15
> + * @oemflags: Capsule OEM Flags, bits 0-15
> *
> * This function actually does the job of creating an uefi capsule file.
> * All the arguments must be supplied.
> @@ -404,78 +413,87 @@ static void free_sig_data(struct auth_context *ctx)
> * * 0 - on success
> * * -1 - on failure
> */
> -static int create_fwbin(const char *path, const char *bin,
> - const efi_guid_t *guid, unsigned long index,
> - unsigned long instance,
> - const struct fmp_payload_header_params *fmp_ph_params,
> - uint64_t mcount,
> - const char *privkey_file, const char *cert_file,
> - uint16_t oemflags)
> +static int create_fwbin(const char *path, const char **bins,
> + const efi_guid_t *guids, const unsigned long *indices,
> + const unsigned long *instances,
> + const unsigned long *fw_versions, const unsigned long *mcounts,
> + int size, const char *privkey_file,
> + const char *cert_file, uint16_t oemflags)
> {
> struct efi_capsule_header header;
> struct efi_firmware_management_capsule_header capsule;
> - struct efi_firmware_management_capsule_image_header image;
> - struct auth_context auth_context;
> + struct efi_firmware_management_capsule_image_header images[size];
> + struct auth_context auth_contexts[size];
> FILE *f;
> - uint8_t *data, *new_data, *buf;
> - off_t bin_size;
> - uint64_t offset;
> + uint8_t *data_list[size], *new_data_list[size], *buf_list[size];
> + off_t bin_sizes[size];
> + uint64_t offsets[size];
> int ret;
> - struct fmp_payload_header payload_header;
> + struct fmp_payload_header payload_headers[size];
>
> #ifdef DEBUG
> fprintf(stderr, "For output: %s\n", path);
> - fprintf(stderr, "\tbin: %s\n\ttype: %pUl\n", bin, guid);
> - fprintf(stderr, "\tindex: %lu\n\tinstance: %lu\n", index, instance);
> + for (int i = 0; i < size; i++) {
> + fprintf(stderr, "\tpayload no: %d\n", i);
> + fprintf(stderr, "\t\tbin: %s\n\t\ttype: %pUl\n", bins[i], guids[i]);
> + fprintf(stderr, "\t\tindex: %lu\n\t\tinstance: %lu\n", indices[i], instances[i]);
> + }
> #endif
> - auth_context.sig_size = 0;
> f = NULL;
> - data = NULL;
> - new_data = NULL;
> ret = -1;
>
> - /*
> - * read a firmware binary
> - */
> - if (read_bin_file(bin, &data, &bin_size))
> - goto err;
> + for (int i = 0; i < size; i++) {
> + auth_contexts[i].sig_size = 0;
> + data_list[i] = NULL;
> + new_data_list[i] = NULL;
> + }
>
> - buf = data;
> + for (int i = 0; i < size; i++) {
> + int dump_index = (size == 1) ? -1 : i;
>
> - /* insert fmp payload header right before the payload */
> - if (fmp_ph_params->have_header) {
> - new_data = malloc(bin_size + sizeof(payload_header));
> - if (!new_data)
> + /*
> + * read a firmware binary
> + */
> + if (read_bin_file(bins[i], &data_list[i], &bin_sizes[i]))
> goto err;
>
> - payload_header.signature = FMP_PAYLOAD_HDR_SIGNATURE;
> - payload_header.header_size = sizeof(payload_header);
> - payload_header.fw_version = fmp_ph_params->fw_version;
> - payload_header.lowest_supported_version = 0; /* not used */
> - memcpy(new_data, &payload_header, sizeof(payload_header));
> - memcpy(new_data + sizeof(payload_header), data, bin_size);
> - buf = new_data;
> - bin_size += sizeof(payload_header);
> - }
> -
> - /* first, calculate signature to determine its size */
> - if (privkey_file && cert_file) {
> - auth_context.key_file = privkey_file;
> - auth_context.cert_file = cert_file;
> - auth_context.auth.monotonic_count = mcount;
> - auth_context.image_data = buf;
> - auth_context.image_size = bin_size;
> -
> - if (create_auth_data(&auth_context)) {
> - fprintf(stderr, "Signing firmware image failed\n");
> - goto err;
> + buf_list[i] = data_list[i];
> + /* insert fmp payload header right before the payload */
> + if (fw_versions) {
> + new_data_list[i] = malloc(bin_sizes[i] + sizeof(payload_headers[i]));
> + if (!new_data_list[i])
> + goto err;
> +
> + payload_headers[i].signature = FMP_PAYLOAD_HDR_SIGNATURE;
> + payload_headers[i].header_size = sizeof(payload_headers[i]);
> + payload_headers[i].fw_version = fw_versions[i];
> + payload_headers[i].lowest_supported_version = 0; /* not used */
> + memcpy(new_data_list[i], (payload_headers + i), sizeof(payload_headers[i]));
> + memcpy(new_data_list[i] + sizeof(payload_headers[i]), data_list[i],
> + bin_sizes[i]);
> + buf_list[i] = new_data_list[i];
> + bin_sizes[i] += sizeof(payload_headers[i]);
> }
>
> - if (dump_sig &&
> - dump_signature(path, auth_context.sig_data,
> - auth_context.sig_size)) {
> - fprintf(stderr, "Creating signature file failed\n");
> - goto err;
> + /* calculate signature to determine its size */
> + if (privkey_file && cert_file) {
> + auth_contexts[i].key_file = privkey_file;
> + auth_contexts[i].cert_file = cert_file;
> + auth_contexts[i].auth.monotonic_count = mcounts[i];
> + auth_contexts[i].image_data = buf_list[i];
> + auth_contexts[i].image_size = bin_sizes[i];
> +
> + if (create_auth_data(&auth_contexts[i])) {
> + fprintf(stderr, "Signing firmware image failed\n");
> + goto err;
> + }
> +
> + if (dump_sig &&
> + dump_signature(path, auth_contexts[i].sig_data,
> + auth_contexts[i].sig_size, dump_index)) {
> + fprintf(stderr, "Creating signature file failed\n");
> + goto err;
> + }
> }
> }
>
> @@ -498,81 +516,87 @@ static int create_fwbin(const char *path, const char *bin,
> if (oemflags)
> header.flags |= oemflags;
> header.capsule_image_size = sizeof(header)
> - + sizeof(capsule) + sizeof(uint64_t)
> - + sizeof(image)
> - + bin_size;
> - if (auth_context.sig_size)
> - header.capsule_image_size += sizeof(auth_context.auth)
> - + auth_context.sig_size;
> + + sizeof(capsule)
> + + size * sizeof(uint64_t); /* size of item_offset_list */
> + for (int i = 0; i < size; i++) {
> + offsets[i] = header.capsule_image_size - sizeof(header);
> + header.capsule_image_size += sizeof(images[i])
> + + bin_sizes[i];
> + if (auth_contexts[i].sig_size)
> + header.capsule_image_size += sizeof(auth_contexts[i].auth)
> + + auth_contexts[i].sig_size;
> + }
> if (write_capsule_file(f, &header, sizeof(header),
> "Capsule header"))
> goto err;
>
> /*
> * firmware capsule header
> - * This capsule has only one firmware capsule image.
> */
> capsule.version = 0x00000001;
> capsule.embedded_driver_count = 0;
> - capsule.payload_item_count = 1;
> + capsule.payload_item_count = size;
> if (write_capsule_file(f, &capsule, sizeof(capsule),
> "Firmware capsule header"))
> goto err;
>
> - offset = sizeof(capsule) + sizeof(uint64_t);
> - if (write_capsule_file(f, &offset, sizeof(offset),
> - "Offset to capsule image"))
> + if (write_capsule_file(f, &offsets, size * sizeof(uint64_t),
> + "Offsets to capsule images"))
> goto err;
>
> - /*
> - * firmware capsule image header
> - */
> - image.version = 0x00000003;
> - memcpy(&image.update_image_type_id, guid, sizeof(*guid));
> - image.update_image_index = index;
> - image.reserved[0] = 0;
> - image.reserved[1] = 0;
> - image.reserved[2] = 0;
> - image.update_image_size = bin_size;
> - if (auth_context.sig_size)
> - image.update_image_size += sizeof(auth_context.auth)
> - + auth_context.sig_size;
> - image.update_vendor_code_size = 0; /* none */
> - image.update_hardware_instance = instance;
> - image.image_capsule_support = 0;
> - if (auth_context.sig_size)
> - image.image_capsule_support |= CAPSULE_SUPPORT_AUTHENTICATION;
> - if (write_capsule_file(f, &image, sizeof(image),
> - "Firmware capsule image header"))
> - goto err;
> -
> - /*
> - * signature
> - */
> - if (auth_context.sig_size) {
> - if (write_capsule_file(f, &auth_context.auth,
> - sizeof(auth_context.auth),
> - "Authentication header"))
> + for (int i = 0; i < size; i++) {
> + /*
> + * firmware capsule image header
> + */
> + images[i].version = 0x00000003;
> + memcpy(&images[i].update_image_type_id, &guids[i], sizeof(guids[i]));
> + images[i].update_image_index = indices[i];
> + images[i].reserved[0] = 0;
> + images[i].reserved[1] = 0;
> + images[i].reserved[2] = 0;
> + images[i].update_image_size = bin_sizes[i];
> + if (auth_contexts[i].sig_size)
> + images[i].update_image_size += sizeof(auth_contexts[i].auth)
> + + auth_contexts[i].sig_size;
> + images[i].update_vendor_code_size = 0; /* none */
> + images[i].update_hardware_instance = instances[i];
> + images[i].image_capsule_support = 0;
> + if (auth_contexts[i].sig_size)
> + images[i].image_capsule_support |= CAPSULE_SUPPORT_AUTHENTICATION;
> + if (write_capsule_file(f, &images[i], sizeof(images[i]),
> + "Firmware capsule image header"))
> goto err;
>
> - if (write_capsule_file(f, auth_context.sig_data,
> - auth_context.sig_size, "Signature"))
> + /*
> + * signature
> + */
> + if (auth_contexts[i].sig_size) {
> + if (write_capsule_file(f, &auth_contexts[i].auth,
> + sizeof(auth_contexts[i].auth),
> + "Authentication header"))
> + goto err;
> +
> + if (write_capsule_file(f, auth_contexts[i].sig_data,
> + auth_contexts[i].sig_size, "Signature"))
> + goto err;
> + }
> +
> + /*
> + * firmware binary
> + */
> + if (write_capsule_file(f, buf_list[i], bin_sizes[i], "Firmware binary"))
> goto err;
> }
>
> - /*
> - * firmware binary
> - */
> - if (write_capsule_file(f, buf, bin_size, "Firmware binary"))
> - goto err;
> -
> ret = 0;
> err:
> if (f)
> fclose(f);
> - free_sig_data(&auth_context);
> - free(data);
> - free(new_data);
> + for (int i = 0; i < size; i++) {
> + free_sig_data(&auth_contexts[i]);
> + free(data_list[i]);
> + free(new_data_list[i]);
> + }
>
> return ret;
> }
> @@ -652,6 +676,228 @@ err:
> return ret;
> }
>
> +/**
> + * count_items - count number of items in list
> + * @list: Pointer to a string
> + * @separator: Separator used to separate list items
> + *
> + * Count the number of items in a list. The list items
> + * are separated by a separator character inside the string.
> + * Trailing white spaces are not allowed except if it is the separator.
> + *
> + * Return:
> + * The item count.
> + */
> +int count_items(const char *list, char separator)
> +{
> + const char *c;
> + int count = 0;
> +
> + if (!*list)
> + return 0;
> +
> + for (c = list; *c; c++) {
> + if (*c == separator)
> + count++;
> + }
> + /* correct count if no trailing separator present */
> + if (*(c - 1) != separator)
> + count++;
> +
> + return count;
> +}
> +
> +/**
> + * update_itemcount - update item count
> + * @count: The count to be updated
> + * @list: The item list
> + * @separator: List separator
> + *
> + * Initialize the count if it is uninitialized (negative value).
> + * Check that the list contains at least one item.
> + * Check if an already initialized count is consistent with the list count.
> + *
> + * Return:
> + * * 0 - on success
> + * * -1 - if a check fails
> + */
> +int update_itemcount(int *count, const char *list, char separator)
> +{
> + int current_count = count_items(list, separator);
> +
> + if (*count < 0)
> + *count = current_count;
> +
> + if (*count == 0 ||
> + *count != current_count)
> + return -1;
> +
> + return 0;
> +}
> +
> +/**
> + * split_list - split list into elements
> + * @elements: Pointer to string array
> + * @size: The array size
> + * @list: The item list
> + * @separator: List separator
> + *
> + * Split a comma-separated list into its elements.
> + *
> + * Return:
> + * * 0 - on success
> + * * -1 - on failure
> + */
> +int split_list(char **elements, int size, char *list, char separator)
> +{
> + const char separator_str[] = {separator, '\0'};
> + char *end;
> +
> + for (int i = 0; i < size; i++) {
> + elements[i] = strsep(&list, separator_str);
> + if (!elements[i])
> + return -1;
> + }
> +
> + end = strsep(&list, separator_str); /* NULL or empty string expected */
> + if (end && *end)
> + return -1;
> +
> + return 0;
> +}
> +
> +/**
> + * alloc_array - allocate memory for array
> + * @count: The number of elements
> + * @obj_size: The size of a single element
> + * @name: The name of the array
> + *
> + * This is a wrapper for malloc which prints an error
> + * message on failure.
> + *
> + * Return:
> + * * Pointer to the allocated memory on success
> + * * NULL on failure
> + */
> +void *alloc_array(unsigned int count, size_t obj_size, const char *name)
> +{
> + void *array;
> +
> + array = malloc(count * obj_size);
> + if (!array)
> + fprintf(stderr, "Could not allocate memory for %s\n", name);
> +
> + return array;
> +}
> +
> +/**
> + * init_guids - populate guid array
> + * @elements: String array of elements to be converted
> + * @size: The array size
> + * @name: The name of the array
> + *
> + * Allocate and populate an array of guid structs. The list contains the UUIDs
> + * to convert and store in the array. Upon failure an error message is
> + * printed.
> + *
> + * Return:
> + * * The initialized GUID array on success
> + * * NULL on failure
> + */
> +efi_guid_t *init_guids(const char **elements, unsigned int size,
> + const char *name)
> +{
> + efi_guid_t *guids;
> +
> + guids = alloc_array(size, sizeof(efi_guid_t), name);
> + if (!guids)
> + return NULL;
> +
> + for (int i = 0; i < size; i++) {
> + if (uuid_parse(elements[i], (unsigned char *)(guids + i))) {
> + fprintf(stderr, "Wrong %s format\n", name);
> + free(guids);
> + return NULL;
> + }
> + convert_uuid_to_guid((unsigned char *)(guids + i));
> + }
> +
> + return guids;
> +}
> +
> +/**
> + * init_uls - populate unsigned long array
> + * @elements: String array of elements to be converted
> + * @size: The array size
> + * @name: The name of the array
> + *
> + * Allocate and populate an array of unsgined longs. Upon failure an
> + * error message is printed.
> + *
> + * Return:
> + * * The initialized array on success
> + * * NULL on failure
> + */
> +unsigned long *init_uls(const char **elements, unsigned int size,
> + const char *name)
> +{
> + unsigned long *array;
> +
> + array = alloc_array(size, sizeof(unsigned long), name);
> + if (!array)
> + return NULL;
> + for (int i = 0; i < size; i++)
> + array[i] = strtoul(elements[i], NULL, 0);
> +
> + return array;
> +}
> +
> +/**
> + * init_list - parse list and allocate elements
> + * @listcount: The list count to be checked and updated
> + * @list: The list to be parsed
> + * @separator: The list separator
> + * @name: The name of the list
> + * @multiple_times: List encountered multiple times
> + *
> + * Routine for command line argument lists.
> + * Parse the string list and count the list elements.
> + * Initialize the listcount if it is uninitialized (negative value).
> + * Check that the list contains at least one item.
> + * Check if an already initialized count is consistent with the list count.
> + * Allocate the string array and populate it with the list elements.
> + * The array should be freed in the calling function.
> + * Upon failure an error message is printed and the program exits.
> + *
> + * Return:
> + * * The initialized array on success
> + * * NULL on failure
> + */
> +char **init_list(int *listcount, char *list, char separator,
> + bool multiple_times, char *name)
> +{
> + char **elements;
> +
> + if (multiple_times) {
> + fprintf(stderr, "%s specified multiple times\n", name);
> + return NULL;
> + }
> + if (update_itemcount(listcount, list, separator)) {
> + fprintf(stderr, "List count not consistent with previous or list not provided\n");
> + return NULL;
> + }
> + elements = alloc_array(*listcount, sizeof(char *), name);
> + if (!elements)
> + return NULL;
> + if (split_list(elements, *listcount, list, separator)) {
> + fprintf(stderr, "Could not parse %s list\n", name);
> + free(elements);
> + return NULL;
> + }
> +
> + return elements;
> +}
> +
> /**
> * main - main entry function of mkeficapsule
> * @argc: Number of arguments
> @@ -666,24 +912,27 @@ err:
> */
> int main(int argc, char **argv)
> {
> - efi_guid_t *guid;
> - unsigned char uuid_buf[16];
> - unsigned long index, instance;
> - uint64_t mcount;
> + const char separator = ',';
> + const efi_guid_t *guids; /* an array */
> + const unsigned long *indices, *instances, *mcounts, *fw_versions; /* arrays */
> unsigned long oemflags;
> + const char **blob_paths, **elements; /* string arrays */
> const char *privkey_file, *cert_file;
> - int c, idx;
> - struct fmp_payload_header_params fmp_ph_params = { 0 };
> + int listcount, c, idx;
>
> - guid = NULL;
> - index = 0;
> - instance = 0;
> - mcount = 0;
> + guids = NULL;
> + indices = NULL;
> + instances = NULL;
> + mcounts = NULL;
> + oemflags = 0;
> + blob_paths = NULL;
> privkey_file = NULL;
> cert_file = NULL;
> + elements = NULL;
> + listcount = -1;
> + fw_versions = NULL;
> dump_sig = 0;
> capsule_type = CAPSULE_NORMAL_BLOB;
> - oemflags = 0;
> for (;;) {
> c = getopt_long(argc, argv, opts_short, options, &idx);
> if (c == -1)
> @@ -691,27 +940,62 @@ int main(int argc, char **argv)
>
> switch (c) {
> case 'g':
> - if (guid) {
> - fprintf(stderr,
> - "Image type already specified\n");
> + elements = (const char **)init_list(&listcount, optarg, separator, !!guids,
> + "GUID");
> + if (!elements)
> exit(EXIT_FAILURE);
> - }
> - if (uuid_parse(optarg, uuid_buf)) {
> - fprintf(stderr, "Wrong guid format\n");
> +
> + guids = init_guids(elements, listcount, "GUID");
> + if (!guids)
> exit(EXIT_FAILURE);
> - }
> - convert_uuid_to_guid(uuid_buf);
> - guid = (efi_guid_t *)uuid_buf;
> +
> + free(elements);
> + elements = NULL;
> break;
> case 'i':
> - index = strtoul(optarg, NULL, 0);
> + elements = (const char **)init_list(&listcount, optarg, separator,
> + !!indices, "index");
> + if (!elements)
> + exit(EXIT_FAILURE);
> +
> + indices = init_uls(elements, listcount, "index");
> + if (!indices)
> + exit(EXIT_FAILURE);
> +
> + free(elements);
> + elements = NULL;
> + break;
> + case 'b':
> + blob_paths = (const char **)init_list(&listcount, optarg, separator,
> + !!blob_paths, "blob path");
> + if (!blob_paths)
> + exit(EXIT_FAILURE);
> break;
> case 'I':
> - instance = strtoul(optarg, NULL, 0);
> + elements = (const char **)init_list(&listcount, optarg, separator,
> + !!instances, "instance");
> + if (!elements)
> + exit(EXIT_FAILURE);
> +
> + instances = init_uls(elements, listcount, "instance");
> + if (!instances)
> + exit(EXIT_FAILURE);
> +
> + free(elements);
> + elements = NULL;
> break;
> case 'v':
> - fmp_ph_params.fw_version = strtoul(optarg, NULL, 0);
> - fmp_ph_params.have_header = true;
> + elements = (const char **)init_list(&listcount, optarg, separator,
> + !!fw_versions, "firmware version");
> + if (!elements)
> + exit(EXIT_FAILURE);
> +
> + fw_versions = init_uls(elements, listcount, "firmware version");
> + if (!fw_versions)
> + exit(EXIT_FAILURE);
> +
> + free(elements);
> + elements = NULL;
> break;
> case 'p':
> if (privkey_file) {
> @@ -730,7 +1014,17 @@ int main(int argc, char **argv)
> cert_file = optarg;
> break;
> case 'm':
> - mcount = strtoul(optarg, NULL, 0);
> + elements = (const char **)init_list(&listcount, optarg, separator,
> + !!mcounts, "monotonic count");
> + if (!elements)
> + exit(EXIT_FAILURE);
> +
> + mcounts = init_uls(elements, listcount, "monotonic count");
> + if (!mcounts)
> + exit(EXIT_FAILURE);
> +
> + free(elements);
> + elements = NULL;
> break;
> case 'd':
> dump_sig = 1;
> @@ -767,26 +1061,46 @@ int main(int argc, char **argv)
>
> /* check necessary parameters */
> if ((capsule_type == CAPSULE_NORMAL_BLOB &&
> - ((argc != optind + 2) || !guid ||
> - ((privkey_file && !cert_file) ||
> - (!privkey_file && cert_file)))) ||
> + (!((argc != optind + 2) ^ !(blob_paths && argc == optind + 1)) || !guids ||
> + ((privkey_file && !cert_file) ||
> + (!privkey_file && cert_file)))) ||
> (capsule_type != CAPSULE_NORMAL_BLOB &&
> - ((argc != optind + 1) ||
> - ((capsule_type == CAPSULE_ACCEPT) && !guid) ||
> - ((capsule_type == CAPSULE_REVERT) && guid)))) {
> + ((argc != optind + 1) ||
> + ((capsule_type == CAPSULE_ACCEPT) && !guids) ||
> + ((capsule_type == CAPSULE_ACCEPT) && listcount != 1) ||
> + ((capsule_type == CAPSULE_REVERT) && guids)))) {
> print_usage();
> exit(EXIT_FAILURE);
> }
>
> + /* populate blob_paths if image blob was provided as positional argument */
> + if (capsule_type == CAPSULE_NORMAL_BLOB && !blob_paths) {
> + blob_paths = malloc(sizeof(char *));
> + if (!blob_paths) {
> + fprintf(stderr, "Could not allocate memory for blob paths\n");
> + exit(EXIT_FAILURE);
> + }
> + *blob_paths = argv[argc - 2];
> + }
> +
> + /* populate arrays with zeros if they are not provided */
> + if (!indices)
> + indices = calloc(listcount, sizeof(unsigned long));
> + if (!instances)
> + instances = calloc(listcount, sizeof(unsigned long));
> + if (!mcounts)
> + mcounts = calloc(listcount, sizeof(uint64_t));
> +
> if (capsule_type != CAPSULE_NORMAL_BLOB) {
> - if (create_empty_capsule(argv[argc - 1], guid,
> + if (create_empty_capsule(argv[argc - 1], guids,
> capsule_type == CAPSULE_ACCEPT) < 0) {
> fprintf(stderr, "Creating empty capsule failed\n");
> exit(EXIT_FAILURE);
> }
> - } else if (create_fwbin(argv[argc - 1], argv[argc - 2], guid,
> - index, instance, &fmp_ph_params, mcount, privkey_file,
> - cert_file, (uint16_t)oemflags) < 0) {
> + } else if (create_fwbin(argv[argc - 1], blob_paths, guids,
> + indices, instances, fw_versions,
> + mcounts, listcount, privkey_file,
> + cert_file, (uint16_t)oemflags) < 0) {
> fprintf(stderr, "Creating firmware capsule failed\n");
> exit(EXIT_FAILURE);
> }
More information about the U-Boot
mailing list