diff options
Diffstat (limited to 'sys/geom/part/g_part_gpt.c')
| -rw-r--r-- | sys/geom/part/g_part_gpt.c | 1497 |
1 files changed, 1497 insertions, 0 deletions
diff --git a/sys/geom/part/g_part_gpt.c b/sys/geom/part/g_part_gpt.c new file mode 100644 index 000000000000..4733631c4b20 --- /dev/null +++ b/sys/geom/part/g_part_gpt.c @@ -0,0 +1,1497 @@ +/*- + * SPDX-License-Identifier: BSD-2-Clause + * + * Copyright (c) 2002, 2005-2007, 2011 Marcel Moolenaar + * All rights reserved. + * + * Redistribution and use in source and binary forms, with or without + * modification, are permitted provided that the following conditions + * are met: + * + * 1. Redistributions of source code must retain the above copyright + * notice, this list of conditions and the following disclaimer. + * 2. Redistributions in binary form must reproduce the above copyright + * notice, this list of conditions and the following disclaimer in the + * documentation and/or other materials provided with the distribution. + * + * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR + * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES + * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. + * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, + * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT + * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, + * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY + * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT + * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF + * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. + */ + +#include <sys/param.h> +#include <sys/bio.h> +#include <sys/diskmbr.h> +#include <sys/gsb_crc32.h> +#include <sys/endian.h> +#include <sys/gpt.h> +#include <sys/kernel.h> +#include <sys/kobj.h> +#include <sys/limits.h> +#include <sys/lock.h> +#include <sys/malloc.h> +#include <sys/mutex.h> +#include <sys/queue.h> +#include <sys/sbuf.h> +#include <sys/systm.h> +#include <sys/sysctl.h> +#include <sys/uuid.h> +#include <geom/geom.h> +#include <geom/geom_int.h> +#include <geom/part/g_part.h> + +#include "g_part_if.h" + +FEATURE(geom_part_gpt, "GEOM partitioning class for GPT partitions support"); + +SYSCTL_DECL(_kern_geom_part); +static SYSCTL_NODE(_kern_geom_part, OID_AUTO, gpt, + CTLFLAG_RW | CTLFLAG_MPSAFE, 0, + "GEOM_PART_GPT GUID Partition Table"); + +static u_int allow_nesting = 0; +SYSCTL_UINT(_kern_geom_part_gpt, OID_AUTO, allow_nesting, + CTLFLAG_RWTUN, &allow_nesting, 0, "Allow GPT to be nested inside other schemes"); + +CTASSERT(offsetof(struct gpt_hdr, padding) == 92); +CTASSERT(sizeof(struct gpt_ent) == 128); + +extern u_int geom_part_check_integrity; + +#define EQUUID(a,b) (memcmp(a, b, sizeof(struct uuid)) == 0) + +#define MBRSIZE 512 + +enum gpt_elt { + GPT_ELT_PRIHDR, + GPT_ELT_PRITBL, + GPT_ELT_SECHDR, + GPT_ELT_SECTBL, + GPT_ELT_COUNT +}; + +enum gpt_state { + GPT_STATE_UNKNOWN, /* Not determined. */ + GPT_STATE_MISSING, /* No signature found. */ + GPT_STATE_CORRUPT, /* Checksum mismatch. */ + GPT_STATE_INVALID, /* Nonconformant/invalid. */ + GPT_STATE_UNSUPPORTED, /* Not supported. */ + GPT_STATE_OK /* Perfectly fine. */ +}; + +struct g_part_gpt_table { + struct g_part_table base; + u_char mbr[MBRSIZE]; + struct gpt_hdr *hdr; + quad_t lba[GPT_ELT_COUNT]; + enum gpt_state state[GPT_ELT_COUNT]; + int bootcamp; +}; + +struct g_part_gpt_entry { + struct g_part_entry base; + struct gpt_ent ent; +}; + +static void g_gpt_printf_utf16(struct sbuf *, uint16_t *, size_t); +static void g_gpt_utf8_to_utf16(const uint8_t *, uint16_t *, size_t); +static void g_gpt_set_defaults(struct g_part_table *, struct g_provider *, + struct g_part_parms *); + +static int g_part_gpt_add(struct g_part_table *, struct g_part_entry *, + struct g_part_parms *); +static int g_part_gpt_bootcode(struct g_part_table *, struct g_part_parms *); +static int g_part_gpt_create(struct g_part_table *, struct g_part_parms *); +static int g_part_gpt_destroy(struct g_part_table *, struct g_part_parms *); +static void g_part_gpt_dumpconf(struct g_part_table *, struct g_part_entry *, + struct sbuf *, const char *); +static int g_part_gpt_dumpto(struct g_part_table *, struct g_part_entry *); +static int g_part_gpt_modify(struct g_part_table *, struct g_part_entry *, + struct g_part_parms *); +static const char *g_part_gpt_name(struct g_part_table *, struct g_part_entry *, + char *, size_t); +static int g_part_gpt_probe(struct g_part_table *, struct g_consumer *); +static int g_part_gpt_read(struct g_part_table *, struct g_consumer *); +static int g_part_gpt_setunset(struct g_part_table *table, + struct g_part_entry *baseentry, const char *attrib, unsigned int set); +static const char *g_part_gpt_type(struct g_part_table *, struct g_part_entry *, + char *, size_t); +static int g_part_gpt_write(struct g_part_table *, struct g_consumer *); +static int g_part_gpt_resize(struct g_part_table *, struct g_part_entry *, + struct g_part_parms *); +static int g_part_gpt_recover(struct g_part_table *); + +static kobj_method_t g_part_gpt_methods[] = { + KOBJMETHOD(g_part_add, g_part_gpt_add), + KOBJMETHOD(g_part_bootcode, g_part_gpt_bootcode), + KOBJMETHOD(g_part_create, g_part_gpt_create), + KOBJMETHOD(g_part_destroy, g_part_gpt_destroy), + KOBJMETHOD(g_part_dumpconf, g_part_gpt_dumpconf), + KOBJMETHOD(g_part_dumpto, g_part_gpt_dumpto), + KOBJMETHOD(g_part_modify, g_part_gpt_modify), + KOBJMETHOD(g_part_resize, g_part_gpt_resize), + KOBJMETHOD(g_part_name, g_part_gpt_name), + KOBJMETHOD(g_part_probe, g_part_gpt_probe), + KOBJMETHOD(g_part_read, g_part_gpt_read), + KOBJMETHOD(g_part_recover, g_part_gpt_recover), + KOBJMETHOD(g_part_setunset, g_part_gpt_setunset), + KOBJMETHOD(g_part_type, g_part_gpt_type), + KOBJMETHOD(g_part_write, g_part_gpt_write), + { 0, 0 } +}; + +#define MAXENTSIZE 1024 + +static struct g_part_scheme g_part_gpt_scheme = { + "GPT", + g_part_gpt_methods, + sizeof(struct g_part_gpt_table), + .gps_entrysz = sizeof(struct g_part_gpt_entry), + .gps_minent = 1, + .gps_defent = 128, + .gps_maxent = 4096, + .gps_bootcodesz = MBRSIZE, +}; +G_PART_SCHEME_DECLARE(g_part_gpt); +MODULE_VERSION(geom_part_gpt, 0); + +static struct uuid gpt_uuid_apple_apfs = GPT_ENT_TYPE_APPLE_APFS; +static struct uuid gpt_uuid_apple_boot = GPT_ENT_TYPE_APPLE_BOOT; +static struct uuid gpt_uuid_apple_core_storage = + GPT_ENT_TYPE_APPLE_CORE_STORAGE; +static struct uuid gpt_uuid_apple_hfs = GPT_ENT_TYPE_APPLE_HFS; +static struct uuid gpt_uuid_apple_label = GPT_ENT_TYPE_APPLE_LABEL; +static struct uuid gpt_uuid_apple_raid = GPT_ENT_TYPE_APPLE_RAID; +static struct uuid gpt_uuid_apple_raid_offline = GPT_ENT_TYPE_APPLE_RAID_OFFLINE; +static struct uuid gpt_uuid_apple_tv_recovery = GPT_ENT_TYPE_APPLE_TV_RECOVERY; +static struct uuid gpt_uuid_apple_ufs = GPT_ENT_TYPE_APPLE_UFS; +static struct uuid gpt_uuid_apple_zfs = GPT_ENT_TYPE_APPLE_ZFS; +static struct uuid gpt_uuid_bios_boot = GPT_ENT_TYPE_BIOS_BOOT; +static struct uuid gpt_uuid_chromeos_firmware = GPT_ENT_TYPE_CHROMEOS_FIRMWARE; +static struct uuid gpt_uuid_chromeos_kernel = GPT_ENT_TYPE_CHROMEOS_KERNEL; +static struct uuid gpt_uuid_chromeos_reserved = GPT_ENT_TYPE_CHROMEOS_RESERVED; +static struct uuid gpt_uuid_chromeos_root = GPT_ENT_TYPE_CHROMEOS_ROOT; +static struct uuid gpt_uuid_dfbsd_ccd = GPT_ENT_TYPE_DRAGONFLY_CCD; +static struct uuid gpt_uuid_dfbsd_hammer = GPT_ENT_TYPE_DRAGONFLY_HAMMER; +static struct uuid gpt_uuid_dfbsd_hammer2 = GPT_ENT_TYPE_DRAGONFLY_HAMMER2; +static struct uuid gpt_uuid_dfbsd_label32 = GPT_ENT_TYPE_DRAGONFLY_LABEL32; +static struct uuid gpt_uuid_dfbsd_label64 = GPT_ENT_TYPE_DRAGONFLY_LABEL64; +static struct uuid gpt_uuid_dfbsd_legacy = GPT_ENT_TYPE_DRAGONFLY_LEGACY; +static struct uuid gpt_uuid_dfbsd_swap = GPT_ENT_TYPE_DRAGONFLY_SWAP; +static struct uuid gpt_uuid_dfbsd_ufs1 = GPT_ENT_TYPE_DRAGONFLY_UFS1; +static struct uuid gpt_uuid_dfbsd_vinum = GPT_ENT_TYPE_DRAGONFLY_VINUM; +static struct uuid gpt_uuid_efi = GPT_ENT_TYPE_EFI; +static struct uuid gpt_uuid_freebsd = GPT_ENT_TYPE_FREEBSD; +static struct uuid gpt_uuid_freebsd_boot = GPT_ENT_TYPE_FREEBSD_BOOT; +static struct uuid gpt_uuid_freebsd_nandfs = GPT_ENT_TYPE_FREEBSD_NANDFS; +static struct uuid gpt_uuid_freebsd_swap = GPT_ENT_TYPE_FREEBSD_SWAP; +static struct uuid gpt_uuid_freebsd_ufs = GPT_ENT_TYPE_FREEBSD_UFS; +static struct uuid gpt_uuid_freebsd_vinum = GPT_ENT_TYPE_FREEBSD_VINUM; +static struct uuid gpt_uuid_freebsd_zfs = GPT_ENT_TYPE_FREEBSD_ZFS; +static struct uuid gpt_uuid_hifive_fsbl = GPT_ENT_TYPE_HIFIVE_FSBL; +static struct uuid gpt_uuid_hifive_bbl = GPT_ENT_TYPE_HIFIVE_BBL; +static struct uuid gpt_uuid_linux_data = GPT_ENT_TYPE_LINUX_DATA; +static struct uuid gpt_uuid_linux_lvm = GPT_ENT_TYPE_LINUX_LVM; +static struct uuid gpt_uuid_linux_raid = GPT_ENT_TYPE_LINUX_RAID; +static struct uuid gpt_uuid_linux_swap = GPT_ENT_TYPE_LINUX_SWAP; +static struct uuid gpt_uuid_mbr = GPT_ENT_TYPE_MBR; +static struct uuid gpt_uuid_ms_basic_data = GPT_ENT_TYPE_MS_BASIC_DATA; +static struct uuid gpt_uuid_ms_ldm_data = GPT_ENT_TYPE_MS_LDM_DATA; +static struct uuid gpt_uuid_ms_ldm_metadata = GPT_ENT_TYPE_MS_LDM_METADATA; +static struct uuid gpt_uuid_ms_recovery = GPT_ENT_TYPE_MS_RECOVERY; +static struct uuid gpt_uuid_ms_reserved = GPT_ENT_TYPE_MS_RESERVED; +static struct uuid gpt_uuid_ms_spaces = GPT_ENT_TYPE_MS_SPACES; +static struct uuid gpt_uuid_netbsd_ccd = GPT_ENT_TYPE_NETBSD_CCD; +static struct uuid gpt_uuid_netbsd_cgd = GPT_ENT_TYPE_NETBSD_CGD; +static struct uuid gpt_uuid_netbsd_ffs = GPT_ENT_TYPE_NETBSD_FFS; +static struct uuid gpt_uuid_netbsd_lfs = GPT_ENT_TYPE_NETBSD_LFS; +static struct uuid gpt_uuid_netbsd_raid = GPT_ENT_TYPE_NETBSD_RAID; +static struct uuid gpt_uuid_netbsd_swap = GPT_ENT_TYPE_NETBSD_SWAP; +static struct uuid gpt_uuid_openbsd_data = GPT_ENT_TYPE_OPENBSD_DATA; +static struct uuid gpt_uuid_prep_boot = GPT_ENT_TYPE_PREP_BOOT; +static struct uuid gpt_uuid_solaris_boot = GPT_ENT_TYPE_SOLARIS_BOOT; +static struct uuid gpt_uuid_solaris_root = GPT_ENT_TYPE_SOLARIS_ROOT; +static struct uuid gpt_uuid_solaris_swap = GPT_ENT_TYPE_SOLARIS_SWAP; +static struct uuid gpt_uuid_solaris_backup = GPT_ENT_TYPE_SOLARIS_BACKUP; +static struct uuid gpt_uuid_solaris_var = GPT_ENT_TYPE_SOLARIS_VAR; +static struct uuid gpt_uuid_solaris_home = GPT_ENT_TYPE_SOLARIS_HOME; +static struct uuid gpt_uuid_solaris_altsec = GPT_ENT_TYPE_SOLARIS_ALTSEC; +static struct uuid gpt_uuid_solaris_reserved = GPT_ENT_TYPE_SOLARIS_RESERVED; +static struct uuid gpt_uuid_u_boot_env = GPT_ENT_TYPE_U_BOOT_ENV; +static struct uuid gpt_uuid_unused = GPT_ENT_TYPE_UNUSED; +static struct uuid gpt_uuid_vmfs = GPT_ENT_TYPE_VMFS; +static struct uuid gpt_uuid_vmkdiag = GPT_ENT_TYPE_VMKDIAG; +static struct uuid gpt_uuid_vmreserved = GPT_ENT_TYPE_VMRESERVED; +static struct uuid gpt_uuid_vmvsanhdr = GPT_ENT_TYPE_VMVSANHDR; + +static struct g_part_uuid_alias { + struct uuid *uuid; + int alias; + int mbrtype; +} gpt_uuid_alias_match[] = { + { &gpt_uuid_apple_apfs, G_PART_ALIAS_APPLE_APFS, 0 }, + { &gpt_uuid_apple_boot, G_PART_ALIAS_APPLE_BOOT, 0xab }, + { &gpt_uuid_apple_core_storage, G_PART_ALIAS_APPLE_CORE_STORAGE, 0 }, + { &gpt_uuid_apple_hfs, G_PART_ALIAS_APPLE_HFS, 0xaf }, + { &gpt_uuid_apple_label, G_PART_ALIAS_APPLE_LABEL, 0 }, + { &gpt_uuid_apple_raid, G_PART_ALIAS_APPLE_RAID, 0 }, + { &gpt_uuid_apple_raid_offline, G_PART_ALIAS_APPLE_RAID_OFFLINE, 0 }, + { &gpt_uuid_apple_tv_recovery, G_PART_ALIAS_APPLE_TV_RECOVERY, 0 }, + { &gpt_uuid_apple_ufs, G_PART_ALIAS_APPLE_UFS, 0 }, + { &gpt_uuid_apple_zfs, G_PART_ALIAS_APPLE_ZFS, 0 }, + { &gpt_uuid_bios_boot, G_PART_ALIAS_BIOS_BOOT, 0 }, + { &gpt_uuid_chromeos_firmware, G_PART_ALIAS_CHROMEOS_FIRMWARE, 0 }, + { &gpt_uuid_chromeos_kernel, G_PART_ALIAS_CHROMEOS_KERNEL, 0 }, + { &gpt_uuid_chromeos_reserved, G_PART_ALIAS_CHROMEOS_RESERVED, 0 }, + { &gpt_uuid_chromeos_root, G_PART_ALIAS_CHROMEOS_ROOT, 0 }, + { &gpt_uuid_dfbsd_ccd, G_PART_ALIAS_DFBSD_CCD, 0 }, + { &gpt_uuid_dfbsd_hammer, G_PART_ALIAS_DFBSD_HAMMER, 0 }, + { &gpt_uuid_dfbsd_hammer2, G_PART_ALIAS_DFBSD_HAMMER2, 0 }, + { &gpt_uuid_dfbsd_label32, G_PART_ALIAS_DFBSD, 0xa5 }, + { &gpt_uuid_dfbsd_label64, G_PART_ALIAS_DFBSD64, 0xa5 }, + { &gpt_uuid_dfbsd_legacy, G_PART_ALIAS_DFBSD_LEGACY, 0 }, + { &gpt_uuid_dfbsd_swap, G_PART_ALIAS_DFBSD_SWAP, 0 }, + { &gpt_uuid_dfbsd_ufs1, G_PART_ALIAS_DFBSD_UFS, 0 }, + { &gpt_uuid_dfbsd_vinum, G_PART_ALIAS_DFBSD_VINUM, 0 }, + { &gpt_uuid_efi, G_PART_ALIAS_EFI, 0xee }, + { &gpt_uuid_freebsd, G_PART_ALIAS_FREEBSD, 0xa5 }, + { &gpt_uuid_freebsd_boot, G_PART_ALIAS_FREEBSD_BOOT, 0 }, + { &gpt_uuid_freebsd_nandfs, G_PART_ALIAS_FREEBSD_NANDFS, 0 }, + { &gpt_uuid_freebsd_swap, G_PART_ALIAS_FREEBSD_SWAP, 0 }, + { &gpt_uuid_freebsd_ufs, G_PART_ALIAS_FREEBSD_UFS, 0 }, + { &gpt_uuid_freebsd_vinum, G_PART_ALIAS_FREEBSD_VINUM, 0 }, + { &gpt_uuid_freebsd_zfs, G_PART_ALIAS_FREEBSD_ZFS, 0 }, + { &gpt_uuid_hifive_fsbl, G_PART_ALIAS_HIFIVE_FSBL, 0 }, + { &gpt_uuid_hifive_bbl, G_PART_ALIAS_HIFIVE_BBL, 0 }, + { &gpt_uuid_linux_data, G_PART_ALIAS_LINUX_DATA, 0x0b }, + { &gpt_uuid_linux_lvm, G_PART_ALIAS_LINUX_LVM, 0 }, + { &gpt_uuid_linux_raid, G_PART_ALIAS_LINUX_RAID, 0 }, + { &gpt_uuid_linux_swap, G_PART_ALIAS_LINUX_SWAP, 0 }, + { &gpt_uuid_mbr, G_PART_ALIAS_MBR, 0 }, + { &gpt_uuid_ms_basic_data, G_PART_ALIAS_MS_BASIC_DATA, 0x0b }, + { &gpt_uuid_ms_ldm_data, G_PART_ALIAS_MS_LDM_DATA, 0 }, + { &gpt_uuid_ms_ldm_metadata, G_PART_ALIAS_MS_LDM_METADATA, 0 }, + { &gpt_uuid_ms_recovery, G_PART_ALIAS_MS_RECOVERY, 0 }, + { &gpt_uuid_ms_reserved, G_PART_ALIAS_MS_RESERVED, 0 }, + { &gpt_uuid_ms_spaces, G_PART_ALIAS_MS_SPACES, 0 }, + { &gpt_uuid_netbsd_ccd, G_PART_ALIAS_NETBSD_CCD, 0 }, + { &gpt_uuid_netbsd_cgd, G_PART_ALIAS_NETBSD_CGD, 0 }, + { &gpt_uuid_netbsd_ffs, G_PART_ALIAS_NETBSD_FFS, 0 }, + { &gpt_uuid_netbsd_lfs, G_PART_ALIAS_NETBSD_LFS, 0 }, + { &gpt_uuid_netbsd_raid, G_PART_ALIAS_NETBSD_RAID, 0 }, + { &gpt_uuid_netbsd_swap, G_PART_ALIAS_NETBSD_SWAP, 0 }, + { &gpt_uuid_openbsd_data, G_PART_ALIAS_OPENBSD_DATA, 0 }, + { &gpt_uuid_prep_boot, G_PART_ALIAS_PREP_BOOT, 0x41 }, + { &gpt_uuid_solaris_boot, G_PART_ALIAS_SOLARIS_BOOT, 0 }, + { &gpt_uuid_solaris_root, G_PART_ALIAS_SOLARIS_ROOT, 0 }, + { &gpt_uuid_solaris_swap, G_PART_ALIAS_SOLARIS_SWAP, 0 }, + { &gpt_uuid_solaris_backup, G_PART_ALIAS_SOLARIS_BACKUP, 0 }, + { &gpt_uuid_solaris_var, G_PART_ALIAS_SOLARIS_VAR, 0 }, + { &gpt_uuid_solaris_home, G_PART_ALIAS_SOLARIS_HOME, 0 }, + { &gpt_uuid_solaris_altsec, G_PART_ALIAS_SOLARIS_ALTSEC, 0 }, + { &gpt_uuid_solaris_reserved, G_PART_ALIAS_SOLARIS_RESERVED, 0 }, + { &gpt_uuid_u_boot_env, G_PART_ALIAS_U_BOOT_ENV, 0 }, + { &gpt_uuid_vmfs, G_PART_ALIAS_VMFS, 0 }, + { &gpt_uuid_vmkdiag, G_PART_ALIAS_VMKDIAG, 0 }, + { &gpt_uuid_vmreserved, G_PART_ALIAS_VMRESERVED, 0 }, + { &gpt_uuid_vmvsanhdr, G_PART_ALIAS_VMVSANHDR, 0 }, + { NULL, 0, 0 } +}; + +static int +gpt_write_mbr_entry(u_char *mbr, int idx, int typ, quad_t start, + quad_t end) +{ + + if (typ == 0 || start > UINT32_MAX || end > UINT32_MAX) + return (EINVAL); + + mbr += DOSPARTOFF + idx * DOSPARTSIZE; + mbr[0] = 0; + if (start == 1) { + /* + * Treat the PMBR partition specially to maximize + * interoperability with BIOSes. + */ + mbr[1] = mbr[3] = 0; + mbr[2] = 2; + } else + mbr[1] = mbr[2] = mbr[3] = 0xff; + mbr[4] = typ; + mbr[5] = mbr[6] = mbr[7] = 0xff; + le32enc(mbr + 8, (uint32_t)start); + le32enc(mbr + 12, (uint32_t)(end - start + 1)); + return (0); +} + +static int +gpt_map_type(struct uuid *t) +{ + struct g_part_uuid_alias *uap; + + for (uap = &gpt_uuid_alias_match[0]; uap->uuid; uap++) { + if (EQUUID(t, uap->uuid)) + return (uap->mbrtype); + } + return (0); +} + +static void +gpt_create_pmbr(struct g_part_gpt_table *table, struct g_provider *pp) +{ + + bzero(table->mbr + DOSPARTOFF, DOSPARTSIZE * NDOSPART); + gpt_write_mbr_entry(table->mbr, 0, 0xee, 1, + MIN(pp->mediasize / pp->sectorsize - 1, UINT32_MAX)); + le16enc(table->mbr + DOSMAGICOFFSET, DOSMAGIC); +} + +/* + * Under Boot Camp the PMBR partition (type 0xEE) doesn't cover the + * whole disk anymore. Rather, it covers the GPT table and the EFI + * system partition only. This way the HFS+ partition and any FAT + * partitions can be added to the MBR without creating an overlap. + */ +static int +gpt_is_bootcamp(struct g_part_gpt_table *table, const char *provname) +{ + uint8_t *p; + + p = table->mbr + DOSPARTOFF; + if (p[4] != 0xee || le32dec(p + 8) != 1) + return (0); + + p += DOSPARTSIZE; + if (p[4] != 0xaf) + return (0); + + printf("GEOM: %s: enabling Boot Camp\n", provname); + return (1); +} + +static void +gpt_update_bootcamp(struct g_part_table *basetable, struct g_provider *pp) +{ + struct g_part_entry *baseentry; + struct g_part_gpt_entry *entry; + struct g_part_gpt_table *table; + int bootable, error, index, slices, typ; + + table = (struct g_part_gpt_table *)basetable; + + bootable = -1; + for (index = 0; index < NDOSPART; index++) { + if (table->mbr[DOSPARTOFF + DOSPARTSIZE * index]) + bootable = index; + } + + bzero(table->mbr + DOSPARTOFF, DOSPARTSIZE * NDOSPART); + slices = 0; + LIST_FOREACH(baseentry, &basetable->gpt_entry, gpe_entry) { + if (baseentry->gpe_deleted) + continue; + index = baseentry->gpe_index - 1; + if (index >= NDOSPART) + continue; + + entry = (struct g_part_gpt_entry *)baseentry; + + switch (index) { + case 0: /* This must be the EFI system partition. */ + if (!EQUUID(&entry->ent.ent_type, &gpt_uuid_efi)) + goto disable; + error = gpt_write_mbr_entry(table->mbr, index, 0xee, + 1ull, entry->ent.ent_lba_end); + break; + case 1: /* This must be the HFS+ partition. */ + if (!EQUUID(&entry->ent.ent_type, &gpt_uuid_apple_hfs)) + goto disable; + error = gpt_write_mbr_entry(table->mbr, index, 0xaf, + entry->ent.ent_lba_start, entry->ent.ent_lba_end); + break; + default: + typ = gpt_map_type(&entry->ent.ent_type); + error = gpt_write_mbr_entry(table->mbr, index, typ, + entry->ent.ent_lba_start, entry->ent.ent_lba_end); + break; + } + if (error) + continue; + + if (index == bootable) + table->mbr[DOSPARTOFF + DOSPARTSIZE * index] = 0x80; + slices |= 1 << index; + } + if ((slices & 3) == 3) + return; + + disable: + table->bootcamp = 0; + gpt_create_pmbr(table, pp); +} + +static struct gpt_hdr * +gpt_read_hdr(struct g_part_gpt_table *table, struct g_consumer *cp, + enum gpt_elt elt) +{ + struct gpt_hdr *buf, *hdr; + struct g_provider *pp; + quad_t lba, last; + int error; + uint32_t crc, sz; + + pp = cp->provider; + last = (pp->mediasize / pp->sectorsize) - 1; + table->state[elt] = GPT_STATE_MISSING; + /* + * If the primary header is valid look for secondary + * header in AlternateLBA, otherwise in the last medium's LBA. + */ + if (elt == GPT_ELT_SECHDR) { + if (table->state[GPT_ELT_PRIHDR] != GPT_STATE_OK) + table->lba[elt] = last; + } else + table->lba[elt] = 1; + buf = g_read_data(cp, table->lba[elt] * pp->sectorsize, pp->sectorsize, + &error); + if (buf == NULL) + return (NULL); + hdr = NULL; + if (memcmp(buf->hdr_sig, GPT_HDR_SIG, sizeof(buf->hdr_sig)) != 0) + goto fail; + + table->state[elt] = GPT_STATE_CORRUPT; + sz = le32toh(buf->hdr_size); + if (sz < 92 || sz > pp->sectorsize) + goto fail; + + hdr = g_malloc(sz, M_WAITOK | M_ZERO); + bcopy(buf, hdr, sz); + hdr->hdr_size = sz; + + crc = le32toh(buf->hdr_crc_self); + buf->hdr_crc_self = 0; + if (crc32(buf, sz) != crc) + goto fail; + hdr->hdr_crc_self = crc; + + table->state[elt] = GPT_STATE_INVALID; + hdr->hdr_revision = le32toh(buf->hdr_revision); + if (hdr->hdr_revision < GPT_HDR_REVISION) + goto fail; + hdr->hdr_lba_self = le64toh(buf->hdr_lba_self); + if (hdr->hdr_lba_self != table->lba[elt]) + goto fail; + hdr->hdr_lba_alt = le64toh(buf->hdr_lba_alt); + if (hdr->hdr_lba_alt == hdr->hdr_lba_self) + goto fail; + if (hdr->hdr_lba_alt > last && geom_part_check_integrity) + goto fail; + + /* Check the managed area. */ + hdr->hdr_lba_start = le64toh(buf->hdr_lba_start); + if (hdr->hdr_lba_start < 2 || hdr->hdr_lba_start >= last) + goto fail; + hdr->hdr_lba_end = le64toh(buf->hdr_lba_end); + if (hdr->hdr_lba_end < hdr->hdr_lba_start || hdr->hdr_lba_end >= last) + goto fail; + + /* Check the table location and size of the table. */ + hdr->hdr_entries = le32toh(buf->hdr_entries); + hdr->hdr_entsz = le32toh(buf->hdr_entsz); + if (hdr->hdr_entries == 0 || hdr->hdr_entsz < 128 || + (hdr->hdr_entsz & 7) != 0) + goto fail; + hdr->hdr_lba_table = le64toh(buf->hdr_lba_table); + if (hdr->hdr_lba_table < 2 || hdr->hdr_lba_table >= last) + goto fail; + if (hdr->hdr_lba_table >= hdr->hdr_lba_start && + hdr->hdr_lba_table <= hdr->hdr_lba_end) + goto fail; + lba = hdr->hdr_lba_table + + howmany((uint64_t)hdr->hdr_entries * hdr->hdr_entsz, + pp->sectorsize) - 1; + if (lba >= last) + goto fail; + if (lba >= hdr->hdr_lba_start && lba <= hdr->hdr_lba_end) + goto fail; + + table->state[elt] = GPT_STATE_OK; + le_uuid_dec(&buf->hdr_uuid, &hdr->hdr_uuid); + hdr->hdr_crc_table = le32toh(buf->hdr_crc_table); + + /* save LBA for secondary header */ + if (elt == GPT_ELT_PRIHDR) + table->lba[GPT_ELT_SECHDR] = hdr->hdr_lba_alt; + + g_free(buf); + return (hdr); + + fail: + g_free(hdr); + g_free(buf); + return (NULL); +} + +static struct gpt_ent * +gpt_read_tbl(struct g_part_gpt_table *table, struct g_consumer *cp, + enum gpt_elt elt, struct gpt_hdr *hdr) +{ + struct g_provider *pp; + struct gpt_ent *ent, *tbl; + char *buf, *p; + unsigned int idx, sectors, tblsz, size; + int error; + + if (hdr == NULL) + return (NULL); + if (hdr->hdr_entries > g_part_gpt_scheme.gps_maxent || + hdr->hdr_entsz > MAXENTSIZE) { + table->state[elt] = GPT_STATE_UNSUPPORTED; + return (NULL); + } + + pp = cp->provider; + table->lba[elt] = hdr->hdr_lba_table; + + table->state[elt] = GPT_STATE_MISSING; + tblsz = hdr->hdr_entries * hdr->hdr_entsz; + sectors = howmany(tblsz, pp->sectorsize); + buf = g_malloc(sectors * pp->sectorsize, M_WAITOK | M_ZERO); + for (idx = 0; idx < sectors; idx += maxphys / pp->sectorsize) { + size = (sectors - idx > maxphys / pp->sectorsize) ? maxphys: + (sectors - idx) * pp->sectorsize; + p = g_read_data(cp, (table->lba[elt] + idx) * pp->sectorsize, + size, &error); + if (p == NULL) { + g_free(buf); + return (NULL); + } + bcopy(p, buf + idx * pp->sectorsize, size); + g_free(p); + } + table->state[elt] = GPT_STATE_CORRUPT; + if (crc32(buf, tblsz) != hdr->hdr_crc_table) { + g_free(buf); + return (NULL); + } + + table->state[elt] = GPT_STATE_OK; + tbl = g_malloc(hdr->hdr_entries * sizeof(struct gpt_ent), + M_WAITOK | M_ZERO); + + for (idx = 0, ent = tbl, p = buf; + idx < hdr->hdr_entries; + idx++, ent++, p += hdr->hdr_entsz) { + le_uuid_dec(p, &ent->ent_type); + le_uuid_dec(p + 16, &ent->ent_uuid); + ent->ent_lba_start = le64dec(p + 32); + ent->ent_lba_end = le64dec(p + 40); + ent->ent_attr = le64dec(p + 48); + /* Keep UTF-16 in little-endian. */ + bcopy(p + 56, ent->ent_name, sizeof(ent->ent_name)); + } + + g_free(buf); + return (tbl); +} + +static int +gpt_matched_hdrs(struct gpt_hdr *pri, struct gpt_hdr *sec) +{ + + if (pri == NULL || sec == NULL) + return (0); + + if (!EQUUID(&pri->hdr_uuid, &sec->hdr_uuid)) + return (0); + return ((pri->hdr_revision == sec->hdr_revision && + pri->hdr_size == sec->hdr_size && + pri->hdr_lba_start == sec->hdr_lba_start && + pri->hdr_lba_end == sec->hdr_lba_end && + pri->hdr_entries == sec->hdr_entries && + pri->hdr_entsz == sec->hdr_entsz && + pri->hdr_crc_table == sec->hdr_crc_table) ? 1 : 0); +} + +static int +gpt_parse_type(const char *type, struct uuid *uuid) +{ + struct uuid tmp; + const char *alias; + int error; + struct g_part_uuid_alias *uap; + + if (type[0] == '!') { + error = parse_uuid(type + 1, &tmp); + if (error) + return (error); + if (EQUUID(&tmp, &gpt_uuid_unused)) + return (EINVAL); + *uuid = tmp; + return (0); + } + for (uap = &gpt_uuid_alias_match[0]; uap->uuid; uap++) { + alias = g_part_alias_name(uap->alias); + if (!strcasecmp(type, alias)) { + *uuid = *uap->uuid; + return (0); + } + } + return (EINVAL); +} + +static int +g_part_gpt_add(struct g_part_table *basetable, struct g_part_entry *baseentry, + struct g_part_parms *gpp) +{ + struct g_part_gpt_entry *entry; + int error; + + entry = (struct g_part_gpt_entry *)baseentry; + error = gpt_parse_type(gpp->gpp_type, &entry->ent.ent_type); + if (error) + return (error); + kern_uuidgen(&entry->ent.ent_uuid, 1); + entry->ent.ent_lba_start = baseentry->gpe_start; + entry->ent.ent_lba_end = baseentry->gpe_end; + if (baseentry->gpe_deleted) { + entry->ent.ent_attr = 0; + bzero(entry->ent.ent_name, sizeof(entry->ent.ent_name)); + } + if (gpp->gpp_parms & G_PART_PARM_LABEL) + g_gpt_utf8_to_utf16(gpp->gpp_label, entry->ent.ent_name, + sizeof(entry->ent.ent_name) / + sizeof(entry->ent.ent_name[0])); + return (0); +} + +static int +g_part_gpt_bootcode(struct g_part_table *basetable, struct g_part_parms *gpp) +{ + struct g_part_gpt_table *table; + size_t codesz; + + codesz = DOSPARTOFF; + table = (struct g_part_gpt_table *)basetable; + bzero(table->mbr, codesz); + codesz = MIN(codesz, gpp->gpp_codesize); + if (codesz > 0) + bcopy(gpp->gpp_codeptr, table->mbr, codesz); + return (0); +} + +static int +g_part_gpt_create(struct g_part_table *basetable, struct g_part_parms *gpp) +{ + struct g_provider *pp; + struct g_part_gpt_table *table; + size_t tblsz; + + /* Our depth should be 0 unless nesting was explicitly enabled. */ + if (!allow_nesting && basetable->gpt_depth != 0) + return (ENXIO); + + table = (struct g_part_gpt_table *)basetable; + pp = gpp->gpp_provider; + tblsz = howmany(basetable->gpt_entries * sizeof(struct gpt_ent), + pp->sectorsize); + if (pp->sectorsize < MBRSIZE || + pp->mediasize < (3 + 2 * tblsz + basetable->gpt_entries) * + pp->sectorsize) + return (ENOSPC); + + gpt_create_pmbr(table, pp); + + /* Allocate space for the header */ + table->hdr = g_malloc(sizeof(struct gpt_hdr), M_WAITOK | M_ZERO); + + bcopy(GPT_HDR_SIG, table->hdr->hdr_sig, sizeof(table->hdr->hdr_sig)); + table->hdr->hdr_revision = GPT_HDR_REVISION; + table->hdr->hdr_size = offsetof(struct gpt_hdr, padding); + kern_uuidgen(&table->hdr->hdr_uuid, 1); + table->hdr->hdr_entries = basetable->gpt_entries; + table->hdr->hdr_entsz = sizeof(struct gpt_ent); + + g_gpt_set_defaults(basetable, pp, gpp); + return (0); +} + +static int +g_part_gpt_destroy(struct g_part_table *basetable, struct g_part_parms *gpp) +{ + struct g_part_gpt_table *table; + struct g_provider *pp; + + table = (struct g_part_gpt_table *)basetable; + pp = LIST_FIRST(&basetable->gpt_gp->consumer)->provider; + g_free(table->hdr); + table->hdr = NULL; + + /* + * Wipe the first 2 sectors and last one to clear the partitioning. + * Wipe sectors only if they have valid metadata. + */ + if (table->state[GPT_ELT_PRIHDR] == GPT_STATE_OK) + basetable->gpt_smhead |= 3; + if (table->state[GPT_ELT_SECHDR] == GPT_STATE_OK && + table->lba[GPT_ELT_SECHDR] == pp->mediasize / pp->sectorsize - 1) + basetable->gpt_smtail |= 1; + return (0); +} + +static void +g_part_gpt_efimedia(struct g_part_gpt_entry *entry, struct sbuf *sb) +{ + sbuf_printf(sb, "HD(%d,GPT,", entry->base.gpe_index); + sbuf_printf_uuid(sb, &entry->ent.ent_uuid); + sbuf_printf(sb, ",%#jx,%#jx)", (intmax_t)entry->base.gpe_start, + (intmax_t)(entry->base.gpe_end - entry->base.gpe_start + 1)); +} + +static void +g_part_gpt_dumpconf(struct g_part_table *table, struct g_part_entry *baseentry, + struct sbuf *sb, const char *indent) +{ + struct g_part_gpt_entry *entry; + + entry = (struct g_part_gpt_entry *)baseentry; + if (indent == NULL) { + /* conftxt: libdisk compatibility */ + sbuf_cat(sb, " xs GPT xt "); + sbuf_printf_uuid(sb, &entry->ent.ent_type); + } else if (entry != NULL) { + /* confxml: partition entry information */ + sbuf_printf(sb, "%s<label>", indent); + g_gpt_printf_utf16(sb, entry->ent.ent_name, + sizeof(entry->ent.ent_name) >> 1); + sbuf_cat(sb, "</label>\n"); + if (entry->ent.ent_attr & GPT_ENT_ATTR_BOOTME) + sbuf_printf(sb, "%s<attrib>bootme</attrib>\n", indent); + if (entry->ent.ent_attr & GPT_ENT_ATTR_BOOTONCE) { + sbuf_printf(sb, "%s<attrib>bootonce</attrib>\n", + indent); + } + if (entry->ent.ent_attr & GPT_ENT_ATTR_BOOTFAILED) { + sbuf_printf(sb, "%s<attrib>bootfailed</attrib>\n", + indent); + } + sbuf_printf(sb, "%s<rawtype>", indent); + sbuf_printf_uuid(sb, &entry->ent.ent_type); + sbuf_cat(sb, "</rawtype>\n"); + sbuf_printf(sb, "%s<rawuuid>", indent); + sbuf_printf_uuid(sb, &entry->ent.ent_uuid); + sbuf_cat(sb, "</rawuuid>\n"); + sbuf_printf(sb, "%s<efimedia>", indent); + g_part_gpt_efimedia(entry, sb); + sbuf_cat(sb, "</efimedia>\n"); + } else { + /* confxml: scheme information */ + } +} + +static int +g_part_gpt_dumpto(struct g_part_table *table, struct g_part_entry *baseentry) +{ + struct g_part_gpt_entry *entry; + + entry = (struct g_part_gpt_entry *)baseentry; + return ((EQUUID(&entry->ent.ent_type, &gpt_uuid_freebsd_swap) || + EQUUID(&entry->ent.ent_type, &gpt_uuid_linux_swap) || + EQUUID(&entry->ent.ent_type, &gpt_uuid_dfbsd_swap)) ? 1 : 0); +} + +static int +g_part_gpt_modify(struct g_part_table *basetable, + struct g_part_entry *baseentry, struct g_part_parms *gpp) +{ + struct g_part_gpt_entry *entry; + int error; + + entry = (struct g_part_gpt_entry *)baseentry; + if (gpp->gpp_parms & G_PART_PARM_TYPE) { + error = gpt_parse_type(gpp->gpp_type, &entry->ent.ent_type); + if (error) + return (error); + } + if (gpp->gpp_parms & G_PART_PARM_LABEL) + g_gpt_utf8_to_utf16(gpp->gpp_label, entry->ent.ent_name, + sizeof(entry->ent.ent_name) / + sizeof(entry->ent.ent_name[0])); + return (0); +} + +static int +g_part_gpt_resize(struct g_part_table *basetable, + struct g_part_entry *baseentry, struct g_part_parms *gpp) +{ + struct g_part_gpt_entry *entry; + + if (baseentry == NULL) + return (g_part_gpt_recover(basetable)); + + entry = (struct g_part_gpt_entry *)baseentry; + baseentry->gpe_end = baseentry->gpe_start + gpp->gpp_size - 1; + entry->ent.ent_lba_end = baseentry->gpe_end; + + return (0); +} + +static const char * +g_part_gpt_name(struct g_part_table *table, struct g_part_entry *baseentry, + char *buf, size_t bufsz) +{ + struct g_part_gpt_entry *entry; + char c; + + entry = (struct g_part_gpt_entry *)baseentry; + c = (EQUUID(&entry->ent.ent_type, &gpt_uuid_freebsd)) ? 's' : 'p'; + snprintf(buf, bufsz, "%c%d", c, baseentry->gpe_index); + return (buf); +} + +static int +g_part_gpt_probe(struct g_part_table *table, struct g_consumer *cp) +{ + struct g_provider *pp; + u_char *buf; + int error, index, pri, res; + + /* Our depth should be 0 unless nesting was explicitly enabled. */ + if (!allow_nesting && table->gpt_depth != 0) + return (ENXIO); + + pp = cp->provider; + + /* + * Sanity-check the provider. Since the first sector on the provider + * must be a PMBR and a PMBR is 512 bytes large, the sector size + * must be at least 512 bytes. Also, since the theoretical minimum + * number of sectors needed by GPT is 6, any medium that has less + * than 6 sectors is never going to be able to hold a GPT. The + * number 6 comes from: + * 1 sector for the PMBR + * 2 sectors for the GPT headers (each 1 sector) + * 2 sectors for the GPT tables (each 1 sector) + * 1 sector for an actual partition + * It's better to catch this pathological case early than behaving + * pathologically later on... + */ + if (pp->sectorsize < MBRSIZE || pp->mediasize < 6 * pp->sectorsize) + return (ENOSPC); + + /* + * Check that there's a MBR or a PMBR. If it's a PMBR, we return + * as the highest priority on a match, otherwise we assume some + * GPT-unaware tool has destroyed the GPT by recreating a MBR and + * we really want the MBR scheme to take precedence. + */ + buf = g_read_data(cp, 0L, pp->sectorsize, &error); + if (buf == NULL) + return (error); + res = le16dec(buf + DOSMAGICOFFSET); + pri = G_PART_PROBE_PRI_LOW; + if (res == DOSMAGIC) { + for (index = 0; index < NDOSPART; index++) { + if (buf[DOSPARTOFF + DOSPARTSIZE * index + 4] == 0xee) + pri = G_PART_PROBE_PRI_HIGH; + } + g_free(buf); + + /* Check that there's a primary header. */ + buf = g_read_data(cp, pp->sectorsize, pp->sectorsize, &error); + if (buf == NULL) + return (error); + res = memcmp(buf, GPT_HDR_SIG, 8); + g_free(buf); + if (res == 0) + return (pri); + } else + g_free(buf); + + /* No primary? Check that there's a secondary. */ + buf = g_read_data(cp, pp->mediasize - pp->sectorsize, pp->sectorsize, + &error); + if (buf == NULL) + return (error); + res = memcmp(buf, GPT_HDR_SIG, 8); + g_free(buf); + return ((res == 0) ? pri : ENXIO); +} + +static int +g_part_gpt_read(struct g_part_table *basetable, struct g_consumer *cp) +{ + struct gpt_hdr *prihdr, *sechdr; + struct gpt_ent *tbl, *pritbl, *sectbl; + struct g_provider *pp; + struct g_part_gpt_table *table; + struct g_part_gpt_entry *entry; + u_char *buf; + uint64_t last; + int error, index; + + table = (struct g_part_gpt_table *)basetable; + pp = cp->provider; + last = (pp->mediasize / pp->sectorsize) - 1; + + /* Read the PMBR */ + buf = g_read_data(cp, 0, pp->sectorsize, &error); + if (buf == NULL) + return (error); + bcopy(buf, table->mbr, MBRSIZE); + g_free(buf); + + /* Read the primary header and table. */ + prihdr = gpt_read_hdr(table, cp, GPT_ELT_PRIHDR); + if (table->state[GPT_ELT_PRIHDR] == GPT_STATE_OK) { + pritbl = gpt_read_tbl(table, cp, GPT_ELT_PRITBL, prihdr); + } else { + table->state[GPT_ELT_PRITBL] = GPT_STATE_MISSING; + pritbl = NULL; + } + + /* Read the secondary header and table. */ + sechdr = gpt_read_hdr(table, cp, GPT_ELT_SECHDR); + if (table->state[GPT_ELT_SECHDR] == GPT_STATE_OK) { + sectbl = gpt_read_tbl(table, cp, GPT_ELT_SECTBL, sechdr); + } else { + table->state[GPT_ELT_SECTBL] = GPT_STATE_MISSING; + sectbl = NULL; + } + + /* Fail if we haven't got any good tables at all. */ + if (table->state[GPT_ELT_PRITBL] != GPT_STATE_OK && + table->state[GPT_ELT_SECTBL] != GPT_STATE_OK) { + if (table->state[GPT_ELT_PRITBL] == GPT_STATE_UNSUPPORTED && + table->state[GPT_ELT_SECTBL] == GPT_STATE_UNSUPPORTED && + gpt_matched_hdrs(prihdr, sechdr)) { + printf("GEOM: %s: unsupported GPT detected.\n", + pp->name); + printf( + "GEOM: %s: number of GPT entries: %u, entry size: %uB.\n", + pp->name, prihdr->hdr_entries, prihdr->hdr_entsz); + printf( + "GEOM: %s: maximum supported number of GPT entries: %u, entry size: %uB.\n", + pp->name, g_part_gpt_scheme.gps_maxent, MAXENTSIZE); + printf("GEOM: %s: GPT rejected.\n", pp->name); + } else { + printf("GEOM: %s: corrupt or invalid GPT detected.\n", + pp->name); + printf( + "GEOM: %s: GPT rejected -- may not be recoverable.\n", + pp->name); + } + g_free(prihdr); + g_free(pritbl); + g_free(sechdr); + g_free(sectbl); + return (EINVAL); + } + + /* + * If both headers are good but they disagree with each other, + * then invalidate one. We prefer to keep the primary header, + * unless the primary table is corrupt. + */ + if (table->state[GPT_ELT_PRIHDR] == GPT_STATE_OK && + table->state[GPT_ELT_SECHDR] == GPT_STATE_OK && + !gpt_matched_hdrs(prihdr, sechdr)) { + if (table->state[GPT_ELT_PRITBL] == GPT_STATE_OK) { + table->state[GPT_ELT_SECHDR] = GPT_STATE_INVALID; + table->state[GPT_ELT_SECTBL] = GPT_STATE_MISSING; + g_free(sechdr); + sechdr = NULL; + } else { + table->state[GPT_ELT_PRIHDR] = GPT_STATE_INVALID; + table->state[GPT_ELT_PRITBL] = GPT_STATE_MISSING; + g_free(prihdr); + prihdr = NULL; + } + } + + if (table->state[GPT_ELT_PRITBL] != GPT_STATE_OK) { + printf("GEOM: %s: the primary GPT table is corrupt or " + "invalid.\n", pp->name); + printf("GEOM: %s: using the secondary instead -- recovery " + "strongly advised.\n", pp->name); + table->hdr = sechdr; + basetable->gpt_corrupt = 1; + g_free(prihdr); + tbl = sectbl; + g_free(pritbl); + } else { + if (table->state[GPT_ELT_SECTBL] != GPT_STATE_OK) { + printf("GEOM: %s: the secondary GPT table is corrupt " + "or invalid.\n", pp->name); + printf("GEOM: %s: using the primary only -- recovery " + "suggested.\n", pp->name); + basetable->gpt_corrupt = 1; + } else if (table->lba[GPT_ELT_SECHDR] != last) { + printf( "GEOM: %s: the secondary GPT header is not in " + "the last LBA.\n", pp->name); + basetable->gpt_corrupt = 1; + } + table->hdr = prihdr; + g_free(sechdr); + tbl = pritbl; + g_free(sectbl); + } + + /* + * The reserved area preceeds the valid area for partitions. Warn when + * the lba_start doesn't meet the standard's minimum size for the gpt + * entry array. UEFI 2.10 section 5.3 specifies that the LBA must be 32 + * (for 512 byte sectors) or 6 (4k sectors) or larger. This is different + * than the number of valid entries in the GPT entry array, which can be + * smaller. + */ + if (table->hdr->hdr_lba_start < GPT_MIN_RESERVED / pp->sectorsize + 2) { + printf("GEOM: warning: %s lba_start %llu < required min %d\n", + pp->name, (unsigned long long)table->hdr->hdr_lba_start, + GPT_MIN_RESERVED / pp->sectorsize + 2); + } + + basetable->gpt_first = table->hdr->hdr_lba_start; + basetable->gpt_last = table->hdr->hdr_lba_end; + basetable->gpt_entries = table->hdr->hdr_entries; + + for (index = basetable->gpt_entries - 1; index >= 0; index--) { + if (EQUUID(&tbl[index].ent_type, &gpt_uuid_unused)) + continue; + entry = (struct g_part_gpt_entry *)g_part_new_entry( + basetable, index + 1, tbl[index].ent_lba_start, + tbl[index].ent_lba_end); + entry->ent = tbl[index]; + } + + g_free(tbl); + + /* + * Under Mac OS X, the MBR mirrors the first 4 GPT partitions + * if (and only if) any FAT32 or FAT16 partitions have been + * created. This happens irrespective of whether Boot Camp is + * used/enabled, though it's generally understood to be done + * to support legacy Windows under Boot Camp. We refer to this + * mirroring simply as Boot Camp. We try to detect Boot Camp + * so that we can update the MBR if and when GPT changes have + * been made. Note that we do not enable Boot Camp if not + * previously enabled because we can't assume that we're on a + * Mac alongside Mac OS X. + */ + table->bootcamp = gpt_is_bootcamp(table, pp->name); + + return (0); +} + +static int +g_part_gpt_recover(struct g_part_table *basetable) +{ + struct g_part_gpt_table *table; + struct g_provider *pp; + + table = (struct g_part_gpt_table *)basetable; + pp = LIST_FIRST(&basetable->gpt_gp->consumer)->provider; + gpt_create_pmbr(table, pp); + g_gpt_set_defaults(basetable, pp, NULL); + basetable->gpt_corrupt = 0; + return (0); +} + +static int +g_part_gpt_setunset(struct g_part_table *basetable, + struct g_part_entry *baseentry, const char *attrib, unsigned int set) +{ + struct g_part_gpt_entry *entry; + struct g_part_gpt_table *table; + struct g_provider *pp; + uint8_t *p; + uint64_t attr; + int i; + + table = (struct g_part_gpt_table *)basetable; + entry = (struct g_part_gpt_entry *)baseentry; + + if (strcasecmp(attrib, "active") == 0) { + if (table->bootcamp) { + /* The active flag must be set on a valid entry. */ + if (entry == NULL) + return (ENXIO); + if (baseentry->gpe_index > NDOSPART) + return (EINVAL); + for (i = 0; i < NDOSPART; i++) { + p = &table->mbr[DOSPARTOFF + i * DOSPARTSIZE]; + p[0] = (i == baseentry->gpe_index - 1) + ? ((set) ? 0x80 : 0) : 0; + } + } else { + /* The PMBR is marked as active without an entry. */ + if (entry != NULL) + return (ENXIO); + for (i = 0; i < NDOSPART; i++) { + p = &table->mbr[DOSPARTOFF + i * DOSPARTSIZE]; + p[0] = (p[4] == 0xee) ? ((set) ? 0x80 : 0) : 0; + } + } + return (0); + } else if (strcasecmp(attrib, "lenovofix") == 0) { + /* + * Write the 0xee GPT entry to slot #1 (2nd slot) in the pMBR. + * This workaround allows Lenovo X220, T420, T520, etc to boot + * from GPT Partitions in BIOS mode. + */ + + if (entry != NULL) + return (ENXIO); + + pp = LIST_FIRST(&basetable->gpt_gp->consumer)->provider; + bzero(table->mbr + DOSPARTOFF, DOSPARTSIZE * NDOSPART); + gpt_write_mbr_entry(table->mbr, ((set) ? 1 : 0), 0xee, 1, + MIN(pp->mediasize / pp->sectorsize - 1, UINT32_MAX)); + return (0); + } + + if (entry == NULL) + return (ENODEV); + + attr = 0; + if (strcasecmp(attrib, "bootme") == 0) { + attr |= GPT_ENT_ATTR_BOOTME; + } else if (strcasecmp(attrib, "bootonce") == 0) { + attr |= GPT_ENT_ATTR_BOOTONCE; + if (set) + attr |= GPT_ENT_ATTR_BOOTME; + } else if (strcasecmp(attrib, "bootfailed") == 0) { + /* + * It should only be possible to unset BOOTFAILED, but it might + * be useful for test purposes to also be able to set it. + */ + attr |= GPT_ENT_ATTR_BOOTFAILED; + } + if (attr == 0) + return (EINVAL); + + if (set) + attr = entry->ent.ent_attr | attr; + else + attr = entry->ent.ent_attr & ~attr; + if (attr != entry->ent.ent_attr) { + entry->ent.ent_attr = attr; + if (!baseentry->gpe_created) + baseentry->gpe_modified = 1; + } + return (0); +} + +static const char * +g_part_gpt_type(struct g_part_table *basetable, struct g_part_entry *baseentry, + char *buf, size_t bufsz) +{ + struct g_part_gpt_entry *entry; + struct uuid *type; + struct g_part_uuid_alias *uap; + + entry = (struct g_part_gpt_entry *)baseentry; + type = &entry->ent.ent_type; + for (uap = &gpt_uuid_alias_match[0]; uap->uuid; uap++) + if (EQUUID(type, uap->uuid)) + return (g_part_alias_name(uap->alias)); + buf[0] = '!'; + snprintf_uuid(buf + 1, bufsz - 1, type); + + return (buf); +} + +static int +g_part_gpt_write(struct g_part_table *basetable, struct g_consumer *cp) +{ + unsigned char *buf, *bp; + struct g_provider *pp; + struct g_part_entry *baseentry; + struct g_part_gpt_entry *entry; + struct g_part_gpt_table *table; + size_t tblsz; + uint32_t crc; + int error, index; + + pp = cp->provider; + table = (struct g_part_gpt_table *)basetable; + tblsz = howmany(table->hdr->hdr_entries * table->hdr->hdr_entsz, + pp->sectorsize); + + /* Reconstruct the MBR from the GPT if under Boot Camp. */ + if (table->bootcamp) + gpt_update_bootcamp(basetable, pp); + + /* Write the PMBR */ + buf = g_malloc(pp->sectorsize, M_WAITOK | M_ZERO); + bcopy(table->mbr, buf, MBRSIZE); + error = g_write_data(cp, 0, buf, pp->sectorsize); + g_free(buf); + if (error) + return (error); + + /* Allocate space for the header and entries. */ + buf = g_malloc((tblsz + 1) * pp->sectorsize, M_WAITOK | M_ZERO); + + memcpy(buf, table->hdr->hdr_sig, sizeof(table->hdr->hdr_sig)); + le32enc(buf + 8, table->hdr->hdr_revision); + le32enc(buf + 12, table->hdr->hdr_size); + le64enc(buf + 40, table->hdr->hdr_lba_start); + le64enc(buf + 48, table->hdr->hdr_lba_end); + le_uuid_enc(buf + 56, &table->hdr->hdr_uuid); + le32enc(buf + 80, table->hdr->hdr_entries); + le32enc(buf + 84, table->hdr->hdr_entsz); + + LIST_FOREACH(baseentry, &basetable->gpt_entry, gpe_entry) { + if (baseentry->gpe_deleted) + continue; + entry = (struct g_part_gpt_entry *)baseentry; + index = baseentry->gpe_index - 1; + bp = buf + pp->sectorsize + table->hdr->hdr_entsz * index; + le_uuid_enc(bp, &entry->ent.ent_type); + le_uuid_enc(bp + 16, &entry->ent.ent_uuid); + le64enc(bp + 32, entry->ent.ent_lba_start); + le64enc(bp + 40, entry->ent.ent_lba_end); + le64enc(bp + 48, entry->ent.ent_attr); + memcpy(bp + 56, entry->ent.ent_name, + sizeof(entry->ent.ent_name)); + } + + crc = crc32(buf + pp->sectorsize, + table->hdr->hdr_entries * table->hdr->hdr_entsz); + le32enc(buf + 88, crc); + + /* Write primary meta-data. */ + le32enc(buf + 16, 0); /* hdr_crc_self. */ + le64enc(buf + 24, table->lba[GPT_ELT_PRIHDR]); /* hdr_lba_self. */ + le64enc(buf + 32, table->lba[GPT_ELT_SECHDR]); /* hdr_lba_alt. */ + le64enc(buf + 72, table->lba[GPT_ELT_PRITBL]); /* hdr_lba_table. */ + crc = crc32(buf, table->hdr->hdr_size); + le32enc(buf + 16, crc); + + for (index = 0; index < tblsz; index += maxphys / pp->sectorsize) { + error = g_write_data(cp, + (table->lba[GPT_ELT_PRITBL] + index) * pp->sectorsize, + buf + (index + 1) * pp->sectorsize, + (tblsz - index > maxphys / pp->sectorsize) ? maxphys : + (tblsz - index) * pp->sectorsize); + if (error) + goto out; + } + error = g_write_data(cp, table->lba[GPT_ELT_PRIHDR] * pp->sectorsize, + buf, pp->sectorsize); + if (error) + goto out; + + /* Write secondary meta-data. */ + le32enc(buf + 16, 0); /* hdr_crc_self. */ + le64enc(buf + 24, table->lba[GPT_ELT_SECHDR]); /* hdr_lba_self. */ + le64enc(buf + 32, table->lba[GPT_ELT_PRIHDR]); /* hdr_lba_alt. */ + le64enc(buf + 72, table->lba[GPT_ELT_SECTBL]); /* hdr_lba_table. */ + crc = crc32(buf, table->hdr->hdr_size); + le32enc(buf + 16, crc); + + for (index = 0; index < tblsz; index += maxphys / pp->sectorsize) { + error = g_write_data(cp, + (table->lba[GPT_ELT_SECTBL] + index) * pp->sectorsize, + buf + (index + 1) * pp->sectorsize, + (tblsz - index > maxphys / pp->sectorsize) ? maxphys : + (tblsz - index) * pp->sectorsize); + if (error) + goto out; + } + error = g_write_data(cp, table->lba[GPT_ELT_SECHDR] * pp->sectorsize, + buf, pp->sectorsize); + + out: + g_free(buf); + return (error); +} + +static void +g_gpt_set_defaults(struct g_part_table *basetable, struct g_provider *pp, + struct g_part_parms *gpp) +{ + struct g_part_entry *baseentry; + struct g_part_gpt_entry *entry; + struct g_part_gpt_table *table; + quad_t start, end, min, max; + quad_t lba, last; + size_t spb, tblsz; + + table = (struct g_part_gpt_table *)basetable; + last = pp->mediasize / pp->sectorsize - 1; + tblsz = howmany(basetable->gpt_entries * sizeof(struct gpt_ent), + pp->sectorsize); + + table->lba[GPT_ELT_PRIHDR] = 1; + table->lba[GPT_ELT_PRITBL] = 2; + table->lba[GPT_ELT_SECHDR] = last; + table->lba[GPT_ELT_SECTBL] = last - tblsz; + table->state[GPT_ELT_PRIHDR] = GPT_STATE_OK; + table->state[GPT_ELT_PRITBL] = GPT_STATE_OK; + table->state[GPT_ELT_SECHDR] = GPT_STATE_OK; + table->state[GPT_ELT_SECTBL] = GPT_STATE_OK; + + max = start = 2 + tblsz; + min = end = last - tblsz - 1; + LIST_FOREACH(baseentry, &basetable->gpt_entry, gpe_entry) { + if (baseentry->gpe_deleted) + continue; + entry = (struct g_part_gpt_entry *)baseentry; + if (entry->ent.ent_lba_start < min) + min = entry->ent.ent_lba_start; + if (entry->ent.ent_lba_end > max) + max = entry->ent.ent_lba_end; + } + /* + * Don't force alignment of any kind whatsoever on resize, restore or + * recover. resize doesn't go through this path, recover has a NULL gpp + * and restore has flags == restore (maybe with an appended 'C' to + * commit the operation). For these operations, we have to trust the + * user knows what they are doing. + * + * Otherwise it some flavor of creation of a new partition, so we align + * to a 4k offset on the drive, to make 512e/4kn drives more performant + * by default. + */ + if (gpp == NULL || + (gpp->gpp_parms & G_PART_PARM_FLAGS) == 0 || + strstr(gpp->gpp_flags, "restore") == NULL) { + spb = 4096 / pp->sectorsize; + if (spb > 1) { + lba = start + ((start % spb) ? spb - start % spb : 0); + if (lba <= min) + start = lba; + lba = end - (end + 1) % spb; + if (max <= lba) + end = lba; + } + } + table->hdr->hdr_lba_start = start; + table->hdr->hdr_lba_end = end; + + basetable->gpt_first = start; + basetable->gpt_last = end; +} + +static void +g_gpt_printf_utf16(struct sbuf *sb, uint16_t *str, size_t len) +{ + u_int bo; + uint32_t ch; + uint16_t c; + + bo = LITTLE_ENDIAN; /* GPT is little-endian */ + while (len > 0 && *str != 0) { + ch = (bo == BIG_ENDIAN) ? be16toh(*str) : le16toh(*str); + str++, len--; + if ((ch & 0xf800) == 0xd800) { + if (len > 0) { + c = (bo == BIG_ENDIAN) ? be16toh(*str) + : le16toh(*str); + str++, len--; + } else + c = 0xfffd; + if ((ch & 0x400) == 0 && (c & 0xfc00) == 0xdc00) { + ch = ((ch & 0x3ff) << 10) + (c & 0x3ff); + ch += 0x10000; + } else + ch = 0xfffd; + } else if (ch == 0xfffe) { /* BOM (U+FEFF) swapped. */ + bo = (bo == BIG_ENDIAN) ? LITTLE_ENDIAN : BIG_ENDIAN; + continue; + } else if (ch == 0xfeff) /* BOM (U+FEFF) unswapped. */ + continue; + + /* Write the Unicode character in UTF-8 */ + if (ch < 0x80) + g_conf_printf_escaped(sb, "%c", ch); + else if (ch < 0x800) + g_conf_printf_escaped(sb, "%c%c", 0xc0 | (ch >> 6), + 0x80 | (ch & 0x3f)); + else if (ch < 0x10000) + g_conf_printf_escaped(sb, "%c%c%c", 0xe0 | (ch >> 12), + 0x80 | ((ch >> 6) & 0x3f), 0x80 | (ch & 0x3f)); + else if (ch < 0x200000) + g_conf_printf_escaped(sb, "%c%c%c%c", 0xf0 | + (ch >> 18), 0x80 | ((ch >> 12) & 0x3f), + 0x80 | ((ch >> 6) & 0x3f), 0x80 | (ch & 0x3f)); + } +} + +static void +g_gpt_utf8_to_utf16(const uint8_t *s8, uint16_t *s16, size_t s16len) +{ + size_t s16idx, s8idx; + uint32_t utfchar; + unsigned int c, utfbytes; + + s8idx = s16idx = 0; + utfchar = 0; + utfbytes = 0; + bzero(s16, s16len << 1); + while (s8[s8idx] != 0 && s16idx < s16len) { + c = s8[s8idx++]; + if ((c & 0xc0) != 0x80) { + /* Initial characters. */ + if (utfbytes != 0) { + /* Incomplete encoding of previous char. */ + s16[s16idx++] = htole16(0xfffd); + } + if ((c & 0xf8) == 0xf0) { + utfchar = c & 0x07; + utfbytes = 3; + } else if ((c & 0xf0) == 0xe0) { + utfchar = c & 0x0f; + utfbytes = 2; + } else if ((c & 0xe0) == 0xc0) { + utfchar = c & 0x1f; + utfbytes = 1; + } else { + utfchar = c & 0x7f; + utfbytes = 0; + } + } else { + /* Followup characters. */ + if (utfbytes > 0) { + utfchar = (utfchar << 6) + (c & 0x3f); + utfbytes--; + } else if (utfbytes == 0) + utfbytes = ~0; + } + /* + * Write the complete Unicode character as UTF-16 when we + * have all the UTF-8 charactars collected. + */ + if (utfbytes == 0) { + /* + * If we need to write 2 UTF-16 characters, but + * we only have room for 1, then we truncate the + * string by writing a 0 instead. + */ + if (utfchar >= 0x10000 && s16idx < s16len - 1) { + s16[s16idx++] = + htole16(0xd800 | ((utfchar >> 10) - 0x40)); + s16[s16idx++] = + htole16(0xdc00 | (utfchar & 0x3ff)); + } else + s16[s16idx++] = (utfchar >= 0x10000) ? 0 : + htole16(utfchar); + } + } + /* + * If our input string was truncated, append an invalid encoding + * character to the output string. + */ + if (utfbytes != 0 && s16idx < s16len) + s16[s16idx++] = htole16(0xfffd); +} |