1 // SPDX-License-Identifier: GPL-2.0
3 * drivers/mtd/nand/nand_util.c
5 * Copyright (C) 2006 by Weiss-Electronic GmbH.
8 * @author: Guido Classen <clagix@gmail.com>
9 * @descr: NAND Flash support
10 * @references: borrowed heavily from Linux mtd-utils code:
11 * flash_eraseall.c by Arcom Control System Ltd
12 * nandwrite.c by Steven J. Hill (sjhill@realitydiluted.com)
13 * and Thomas Gleixner (tglx@linutronix.de)
15 * Copyright (C) 2008 Nokia Corporation: drop_ffs() function by
16 * Artem Bityutskiy <dedekind1@gmail.com> from mtd-utils
18 * Copyright 2010 Freescale Semiconductor
28 #include <linux/errno.h>
29 #include <linux/mtd/mtd.h>
31 #include <jffs2/jffs2.h>
33 typedef struct erase_info erase_info_t
;
34 typedef struct mtd_info mtd_info_t
;
36 /* support only for native endian JFFS2 */
37 #define cpu_to_je16(x) (x)
38 #define cpu_to_je32(x) (x)
41 * nand_erase_opts: - erase NAND flash with support for various options
44 * @param mtd nand mtd instance to erase
45 * @param opts options, @see struct nand_erase_options
46 * @return 0 in case of success
48 * This code is ported from flash_eraseall.c from Linux mtd utils by
49 * Arcom Control System Ltd.
51 int nand_erase_opts(struct mtd_info
*mtd
,
52 const nand_erase_options_t
*opts
)
54 struct jffs2_unknown_node cleanmarker
;
56 unsigned long erase_length
, erased_length
; /* in blocks */
58 int percent_complete
= -1;
59 const char *mtd_device
= mtd
->name
;
60 struct mtd_oob_ops oob_opts
;
61 struct nand_chip
*chip
= mtd_to_nand(mtd
);
63 if ((opts
->offset
& (mtd
->erasesize
- 1)) != 0) {
64 printf("Attempt to erase non block-aligned data\n");
68 memset(&erase
, 0, sizeof(erase
));
69 memset(&oob_opts
, 0, sizeof(oob_opts
));
72 erase
.len
= mtd
->erasesize
;
73 erase
.addr
= opts
->offset
;
74 erase_length
= lldiv(opts
->length
+ mtd
->erasesize
- 1,
77 cleanmarker
.magic
= cpu_to_je16(JFFS2_MAGIC_BITMASK
);
78 cleanmarker
.nodetype
= cpu_to_je16(JFFS2_NODETYPE_CLEANMARKER
);
79 cleanmarker
.totlen
= cpu_to_je32(8);
81 /* scrub option allows to erase badblock. To prevent internal
82 * check from erase() method, set block check method to dummy
83 * and disable bad block table while erasing.
86 erase
.scrub
= opts
->scrub
;
88 * We don't need the bad block table anymore...
89 * after scrub, there are no bad blocks left!
95 chip
->options
&= ~NAND_BBT_SCANNED
;
98 for (erased_length
= 0;
99 erased_length
< erase_length
;
100 erase
.addr
+= mtd
->erasesize
) {
104 if (opts
->lim
&& (erase
.addr
>= (opts
->offset
+ opts
->lim
))) {
105 puts("Size of erase exceeds limit\n");
109 int ret
= mtd_block_isbad(mtd
, erase
.addr
);
112 printf("\rSkipping bad block at "
122 } else if (ret
< 0) {
123 printf("\n%s: MTD get bad block failed: %d\n",
132 result
= mtd_erase(mtd
, &erase
);
134 printf("\n%s: MTD Erase failure: %d\n",
139 /* format for JFFS2 ? */
140 if (opts
->jffs2
&& chip
->ecc
.layout
->oobavail
>= 8) {
141 struct mtd_oob_ops ops
;
144 ops
.oobbuf
= (uint8_t *)&cleanmarker
;
146 ops
.mode
= MTD_OPS_AUTO_OOB
;
148 result
= mtd_write_oob(mtd
, erase
.addr
, &ops
);
150 printf("\n%s: MTD writeoob failure: %d\n",
157 unsigned long long n
= erased_length
* 100ULL;
160 do_div(n
, erase_length
);
163 /* output progress message only at whole percent
164 * steps to reduce the number of messages printed
165 * on (slow) serial consoles
167 if (percent
!= percent_complete
) {
168 percent_complete
= percent
;
170 printf("\rErasing at 0x%llx -- %3d%% complete.",
171 erase
.addr
, percent
);
173 if (opts
->jffs2
&& result
== 0)
174 printf(" Cleanmarker written at 0x%llx.",
185 #ifdef CONFIG_CMD_NAND_LOCK_UNLOCK
187 #define NAND_CMD_LOCK_TIGHT 0x2c
188 #define NAND_CMD_LOCK_STATUS 0x7a
190 /******************************************************************************
191 * Support for locking / unlocking operations of some NAND devices
192 *****************************************************************************/
195 * nand_lock: Set all pages of NAND flash chip to the LOCK or LOCK-TIGHT
198 * @param mtd nand mtd instance
199 * @param tight bring device in lock tight mode
201 * @return 0 on success, -1 in case of error
203 * The lock / lock-tight command only applies to the whole chip. To get some
204 * parts of the chip lock and others unlocked use the following sequence:
206 * - Lock all pages of the chip using nand_lock(mtd, 0) (or the lockpre pin)
207 * - Call nand_unlock() once for each consecutive area to be unlocked
208 * - If desired: Bring the chip to the lock-tight state using nand_lock(mtd, 1)
210 * If the device is in lock-tight state software can't change the
211 * current active lock/unlock state of all pages. nand_lock() / nand_unlock()
212 * calls will fail. It is only posible to leave lock-tight state by
213 * an hardware signal (low pulse on _WP pin) or by power down.
215 int nand_lock(struct mtd_info
*mtd
, int tight
)
219 struct nand_chip
*chip
= mtd_to_nand(mtd
);
221 /* select the NAND device */
222 chip
->select_chip(mtd
, 0);
224 /* check the Lock Tight Status */
225 chip
->cmdfunc(mtd
, NAND_CMD_LOCK_STATUS
, -1, 0);
226 if (chip
->read_byte(mtd
) & NAND_LOCK_STATUS_TIGHT
) {
227 printf("nand_lock: Device is locked tight!\n");
233 (tight
? NAND_CMD_LOCK_TIGHT
: NAND_CMD_LOCK
),
236 /* call wait ready function */
237 status
= chip
->waitfunc(mtd
, chip
);
239 /* see if device thinks it succeeded */
245 /* de-select the NAND device */
246 chip
->select_chip(mtd
, -1);
251 * nand_get_lock_status: - query current lock state from one page of NAND
254 * @param mtd nand mtd instance
255 * @param offset page address to query (must be page-aligned!)
257 * @return -1 in case of error
259 * bitfield with the following combinations:
260 * NAND_LOCK_STATUS_TIGHT: page in tight state
261 * NAND_LOCK_STATUS_UNLOCK: page unlocked
264 int nand_get_lock_status(struct mtd_info
*mtd
, loff_t offset
)
269 struct nand_chip
*chip
= mtd_to_nand(mtd
);
271 /* select the NAND device */
272 chipnr
= (int)(offset
>> chip
->chip_shift
);
273 chip
->select_chip(mtd
, chipnr
);
276 if ((offset
& (mtd
->writesize
- 1)) != 0) {
277 printf("nand_get_lock_status: "
278 "Start address must be beginning of "
284 /* check the Lock Status */
285 page
= (int)(offset
>> chip
->page_shift
);
286 chip
->cmdfunc(mtd
, NAND_CMD_LOCK_STATUS
, -1, page
& chip
->pagemask
);
288 ret
= chip
->read_byte(mtd
) & (NAND_LOCK_STATUS_TIGHT
289 | NAND_LOCK_STATUS_UNLOCK
);
292 /* de-select the NAND device */
293 chip
->select_chip(mtd
, -1);
298 * nand_unlock: - Unlock area of NAND pages
299 * only one consecutive area can be unlocked at one time!
301 * @param mtd nand mtd instance
302 * @param start start byte address
303 * @param length number of bytes to unlock (must be a multiple of
304 * page size mtd->writesize)
305 * @param allexcept if set, unlock everything not selected
307 * @return 0 on success, -1 in case of error
309 int nand_unlock(struct mtd_info
*mtd
, loff_t start
, size_t length
,
316 struct nand_chip
*chip
= mtd_to_nand(mtd
);
318 debug("nand_unlock%s: start: %08llx, length: %zd!\n",
319 allexcept
? " (allexcept)" : "", start
, length
);
321 /* select the NAND device */
322 chipnr
= (int)(start
>> chip
->chip_shift
);
323 chip
->select_chip(mtd
, chipnr
);
325 /* check the WP bit */
326 chip
->cmdfunc(mtd
, NAND_CMD_STATUS
, -1, -1);
327 if (!(chip
->read_byte(mtd
) & NAND_STATUS_WP
)) {
328 printf("nand_unlock: Device is write protected!\n");
333 /* check the Lock Tight Status */
334 page
= (int)(start
>> chip
->page_shift
);
335 chip
->cmdfunc(mtd
, NAND_CMD_LOCK_STATUS
, -1, page
& chip
->pagemask
);
336 if (chip
->read_byte(mtd
) & NAND_LOCK_STATUS_TIGHT
) {
337 printf("nand_unlock: Device is locked tight!\n");
342 if ((start
& (mtd
->erasesize
- 1)) != 0) {
343 printf("nand_unlock: Start address must be beginning of "
349 if (length
== 0 || (length
& (mtd
->erasesize
- 1)) != 0) {
350 printf("nand_unlock: Length must be a multiple of nand block "
351 "size %08x!\n", mtd
->erasesize
);
357 * Set length so that the last address is set to the
358 * starting address of the last block
360 length
-= mtd
->erasesize
;
362 /* submit address of first page to unlock */
363 chip
->cmdfunc(mtd
, NAND_CMD_UNLOCK1
, -1, page
& chip
->pagemask
);
365 /* submit ADDRESS of LAST page to unlock */
366 page
+= (int)(length
>> chip
->page_shift
);
369 * Page addresses for unlocking are supposed to be block-aligned.
370 * At least some NAND chips use the low bit to indicate that the
371 * page range should be inverted.
376 chip
->cmdfunc(mtd
, NAND_CMD_UNLOCK2
, -1, page
& chip
->pagemask
);
378 /* call wait ready function */
379 status
= chip
->waitfunc(mtd
, chip
);
380 /* see if device thinks it succeeded */
382 /* there was an error */
388 /* de-select the NAND device */
389 chip
->select_chip(mtd
, -1);
397 * Check if there are any bad blocks, and whether length including bad
398 * blocks fits into device
400 * @param mtd nand mtd instance
401 * @param offset offset in flash
402 * @param length image length
403 * @param used length of flash needed for the requested length
404 * @return 0 if the image fits and there are no bad blocks
405 * 1 if the image fits, but there are bad blocks
406 * -1 if the image does not fit
408 static int check_skip_len(struct mtd_info
*mtd
, loff_t offset
, size_t length
,
411 size_t len_excl_bad
= 0;
414 while (len_excl_bad
< length
) {
415 size_t block_len
, block_off
;
418 if (offset
>= mtd
->size
)
421 block_start
= offset
& ~(loff_t
)(mtd
->erasesize
- 1);
422 block_off
= offset
& (mtd
->erasesize
- 1);
423 block_len
= mtd
->erasesize
- block_off
;
425 if (!nand_block_isbad(mtd
, block_start
))
426 len_excl_bad
+= block_len
;
434 /* If the length is not a multiple of block_len, adjust. */
435 if (len_excl_bad
> length
)
436 *used
-= (len_excl_bad
- length
);
441 #ifdef CONFIG_CMD_NAND_TRIMFFS
442 static size_t drop_ffs(const struct mtd_info
*mtd
, const u_char
*buf
,
448 for (i
= l
- 1; i
>= 0; i
--)
452 /* The resulting length must be aligned to the minimum flash I/O size */
454 l
= (l
+ mtd
->writesize
- 1) / mtd
->writesize
;
458 * since the input length may be unaligned, prevent access past the end
466 * nand_verify_page_oob:
468 * Verify a page of NAND flash, including the OOB.
469 * Reads page of NAND and verifies the contents and OOB against the
472 * @param mtd nand mtd instance
473 * @param ops MTD operations, including data to verify
474 * @param ofs offset in flash
475 * @return 0 in case of success
477 int nand_verify_page_oob(struct mtd_info
*mtd
, struct mtd_oob_ops
*ops
,
481 struct mtd_oob_ops vops
;
482 size_t verlen
= mtd
->writesize
+ mtd
->oobsize
;
484 memcpy(&vops
, ops
, sizeof(vops
));
486 vops
.datbuf
= memalign(ARCH_DMA_MINALIGN
, verlen
);
491 vops
.oobbuf
= vops
.datbuf
+ mtd
->writesize
;
493 rval
= mtd_read_oob(mtd
, ofs
, &vops
);
495 rval
= memcmp(ops
->datbuf
, vops
.datbuf
, vops
.len
);
497 rval
= memcmp(ops
->oobbuf
, vops
.oobbuf
, vops
.ooblen
);
501 return rval
? -EIO
: 0;
507 * Verify a region of NAND flash.
508 * Reads NAND in page-sized chunks and verifies the contents against
509 * the contents of a buffer. The offset into the NAND must be
510 * page-aligned, and the function doesn't handle skipping bad blocks.
512 * @param mtd nand mtd instance
513 * @param ofs offset in flash
514 * @param len buffer length
515 * @param buf buffer to read from
516 * @return 0 in case of success
518 int nand_verify(struct mtd_info
*mtd
, loff_t ofs
, size_t len
, u_char
*buf
)
522 size_t verlen
= mtd
->writesize
;
523 uint8_t *verbuf
= memalign(ARCH_DMA_MINALIGN
, verlen
);
528 /* Read the NAND back in page-size groups to limit malloc size */
529 for (verofs
= ofs
; verofs
< ofs
+ len
;
530 verofs
+= verlen
, buf
+= verlen
) {
531 verlen
= min(mtd
->writesize
, (uint32_t)(ofs
+ len
- verofs
));
532 rval
= nand_read(mtd
, verofs
, &verlen
, verbuf
);
533 if (!rval
|| (rval
== -EUCLEAN
))
534 rval
= memcmp(buf
, verbuf
, verlen
);
542 return rval
? -EIO
: 0;
548 * nand_write_skip_bad:
550 * Write image to NAND flash.
551 * Blocks that are marked bad are skipped and the is written to the next
552 * block instead as long as the image is short enough to fit even after
553 * skipping the bad blocks. Due to bad blocks we may not be able to
554 * perform the requested write. In the case where the write would
555 * extend beyond the end of the NAND device, both length and actual (if
556 * not NULL) are set to 0. In the case where the write would extend
557 * beyond the limit we are passed, length is set to 0 and actual is set
558 * to the required length.
560 * @param mtd nand mtd instance
561 * @param offset offset in flash
562 * @param length buffer length
563 * @param actual set to size required to write length worth of
564 * buffer or 0 on error, if not NULL
565 * @param lim maximum size that actual may be in order to not
567 * @param buffer buffer to read from
568 * @param flags flags modifying the behaviour of the write to NAND
569 * @return 0 in case of success
571 int nand_write_skip_bad(struct mtd_info
*mtd
, loff_t offset
, size_t *length
,
572 size_t *actual
, loff_t lim
, u_char
*buffer
, int flags
)
574 int rval
= 0, blocksize
;
575 size_t left_to_write
= *length
;
576 size_t used_for_write
= 0;
577 u_char
*p_buffer
= buffer
;
583 blocksize
= mtd
->erasesize
;
586 * nand_write() handles unaligned, partial page writes.
588 * We allow length to be unaligned, for convenience in
589 * using the $filesize variable.
591 * However, starting at an unaligned offset makes the
592 * semantics of bad block skipping ambiguous (really,
593 * you should only start a block skipping access at a
594 * partition boundary). So don't try to handle that.
596 if ((offset
& (mtd
->writesize
- 1)) != 0) {
597 printf("Attempt to write non page-aligned data\n");
602 need_skip
= check_skip_len(mtd
, offset
, *length
, &used_for_write
);
605 *actual
= used_for_write
;
608 printf("Attempt to write outside the flash area\n");
613 if (used_for_write
> lim
) {
614 puts("Size of write exceeds partition or device limit\n");
619 if (!need_skip
&& !(flags
& WITH_DROP_FFS
)) {
620 rval
= nand_write(mtd
, offset
, length
, buffer
);
622 if ((flags
& WITH_WR_VERIFY
) && !rval
)
623 rval
= nand_verify(mtd
, offset
, *length
, buffer
);
629 printf("NAND write to offset %llx failed %d\n",
634 while (left_to_write
> 0) {
635 size_t block_offset
= offset
& (mtd
->erasesize
- 1);
636 size_t write_size
, truncated_write_size
;
640 if (nand_block_isbad(mtd
, offset
& ~(mtd
->erasesize
- 1))) {
641 printf("Skip bad block 0x%08llx\n",
642 offset
& ~(mtd
->erasesize
- 1));
643 offset
+= mtd
->erasesize
- block_offset
;
647 if (left_to_write
< (blocksize
- block_offset
))
648 write_size
= left_to_write
;
650 write_size
= blocksize
- block_offset
;
652 truncated_write_size
= write_size
;
653 #ifdef CONFIG_CMD_NAND_TRIMFFS
654 if (flags
& WITH_DROP_FFS
)
655 truncated_write_size
= drop_ffs(mtd
, p_buffer
,
659 rval
= nand_write(mtd
, offset
, &truncated_write_size
,
662 if ((flags
& WITH_WR_VERIFY
) && !rval
)
663 rval
= nand_verify(mtd
, offset
,
664 truncated_write_size
, p_buffer
);
666 offset
+= write_size
;
667 p_buffer
+= write_size
;
670 printf("NAND write to offset %llx failed %d\n",
672 *length
-= left_to_write
;
676 left_to_write
-= write_size
;
683 * nand_read_skip_bad:
685 * Read image from NAND flash.
686 * Blocks that are marked bad are skipped and the next block is read
687 * instead as long as the image is short enough to fit even after
688 * skipping the bad blocks. Due to bad blocks we may not be able to
689 * perform the requested read. In the case where the read would extend
690 * beyond the end of the NAND device, both length and actual (if not
691 * NULL) are set to 0. In the case where the read would extend beyond
692 * the limit we are passed, length is set to 0 and actual is set to the
695 * @param mtd nand mtd instance
696 * @param offset offset in flash
697 * @param length buffer length, on return holds number of read bytes
698 * @param actual set to size required to read length worth of buffer or 0
699 * on error, if not NULL
700 * @param lim maximum size that actual may be in order to not exceed the
702 * @param buffer buffer to write to
703 * @return 0 in case of success
705 int nand_read_skip_bad(struct mtd_info
*mtd
, loff_t offset
, size_t *length
,
706 size_t *actual
, loff_t lim
, u_char
*buffer
)
709 size_t left_to_read
= *length
;
710 size_t used_for_read
= 0;
711 u_char
*p_buffer
= buffer
;
714 if ((offset
& (mtd
->writesize
- 1)) != 0) {
715 printf("Attempt to read non page-aligned data\n");
722 need_skip
= check_skip_len(mtd
, offset
, *length
, &used_for_read
);
725 *actual
= used_for_read
;
728 printf("Attempt to read outside the flash area\n");
733 if (used_for_read
> lim
) {
734 puts("Size of read exceeds partition or device limit\n");
740 rval
= nand_read(mtd
, offset
, length
, buffer
);
741 if (!rval
|| rval
== -EUCLEAN
)
745 printf("NAND read from offset %llx failed %d\n",
750 while (left_to_read
> 0) {
751 size_t block_offset
= offset
& (mtd
->erasesize
- 1);
756 if (nand_block_isbad(mtd
, offset
& ~(mtd
->erasesize
- 1))) {
757 printf("Skipping bad block 0x%08llx\n",
758 offset
& ~(mtd
->erasesize
- 1));
759 offset
+= mtd
->erasesize
- block_offset
;
763 if (left_to_read
< (mtd
->erasesize
- block_offset
))
764 read_length
= left_to_read
;
766 read_length
= mtd
->erasesize
- block_offset
;
768 rval
= nand_read(mtd
, offset
, &read_length
, p_buffer
);
769 if (rval
&& rval
!= -EUCLEAN
) {
770 printf("NAND read from offset %llx failed %d\n",
772 *length
-= left_to_read
;
776 left_to_read
-= read_length
;
777 offset
+= read_length
;
778 p_buffer
+= read_length
;
784 #ifdef CONFIG_CMD_NAND_TORTURE
789 * Check if buffer contains only a certain byte pattern.
791 * @param buf buffer to check
792 * @param patt the pattern to check
793 * @param size buffer size in bytes
794 * @return 1 if there are only patt bytes in buf
795 * 0 if something else was found
797 static int check_pattern(const u_char
*buf
, u_char patt
, int size
)
801 for (i
= 0; i
< size
; i
++)
810 * Torture a block of NAND flash.
811 * This is useful to determine if a block that caused a write error is still
812 * good or should be marked as bad.
814 * @param mtd nand mtd instance
815 * @param offset offset in flash
816 * @return 0 if the block is still good
818 int nand_torture(struct mtd_info
*mtd
, loff_t offset
)
820 u_char patterns
[] = {0xa5, 0x5a, 0x00};
821 struct erase_info instr
= {
824 .len
= mtd
->erasesize
,
827 int err
, ret
= -1, i
, patt_count
;
830 if ((offset
& (mtd
->erasesize
- 1)) != 0) {
831 puts("Attempt to torture a block at a non block-aligned offset\n");
835 if (offset
+ mtd
->erasesize
> mtd
->size
) {
836 puts("Attempt to torture a block outside the flash area\n");
840 patt_count
= ARRAY_SIZE(patterns
);
842 buf
= malloc_cache_aligned(mtd
->erasesize
);
844 puts("Out of memory for erase block buffer\n");
848 for (i
= 0; i
< patt_count
; i
++) {
849 err
= mtd_erase(mtd
, &instr
);
851 printf("%s: erase() failed for block at 0x%llx: %d\n",
852 mtd
->name
, instr
.addr
, err
);
856 /* Make sure the block contains only 0xff bytes */
857 err
= mtd_read(mtd
, offset
, mtd
->erasesize
, &retlen
, buf
);
858 if ((err
&& err
!= -EUCLEAN
) || retlen
!= mtd
->erasesize
) {
859 printf("%s: read() failed for block at 0x%llx: %d\n",
860 mtd
->name
, instr
.addr
, err
);
864 err
= check_pattern(buf
, 0xff, mtd
->erasesize
);
866 printf("Erased block at 0x%llx, but a non-0xff byte was found\n",
872 /* Write a pattern and check it */
873 memset(buf
, patterns
[i
], mtd
->erasesize
);
874 err
= mtd_write(mtd
, offset
, mtd
->erasesize
, &retlen
, buf
);
875 if (err
|| retlen
!= mtd
->erasesize
) {
876 printf("%s: write() failed for block at 0x%llx: %d\n",
877 mtd
->name
, instr
.addr
, err
);
881 err
= mtd_read(mtd
, offset
, mtd
->erasesize
, &retlen
, buf
);
882 if ((err
&& err
!= -EUCLEAN
) || retlen
!= mtd
->erasesize
) {
883 printf("%s: read() failed for block at 0x%llx: %d\n",
884 mtd
->name
, instr
.addr
, err
);
888 err
= check_pattern(buf
, patterns
[i
], mtd
->erasesize
);
890 printf("Pattern 0x%.2x checking failed for block at "
891 "0x%llx\n", patterns
[i
], offset
);