mirror of
				https://github.com/eledio-devices/thirdparty-littlefs.git
				synced 2025-10-31 16:14:16 +01:00 
			
		
		
		
	This change is necessary to handle out-of-order writes found by pjsg's fuzzing work. The problem is that it is possible for (non-NOR) block devices to write pages in any order, or to even write random data in the case of a power-loss. This breaks littlefs's use of the first bit in a page to indicate the erase-state. pjsg notes this behavior is documented in the W25Q here: https://community.cypress.com/docs/DOC-10507 --- The basic idea here is to CRC the next page, and use this "erase-state CRC" to check if the next page is erased and ready to accept programs. .------------------. \ commit | metadata | | | | +---. | | | | |------------------| | | | erase-state CRC -----. | |------------------| | | | | commit CRC ---|-|-' |------------------| / | | padding | | padding (doesn't need CRC) | | | |------------------| \ | next prog | erased? | +-' | | | | | v | / | | | | '------------------' This is made a bit annoying since littlefs doesn't actually store the page (prog_size) in the superblock, since it doesn't need to know the size for any other operation. We can work around this by storing both the CRC and size of the next page when necessary. Another interesting note is that we don't need to any bit tweaking information, since we read the next page every time we would need to know how to clobber the erase-state CRC. And since we only read prog_size, this works really well with our caching, since the caches must be a multiple of prog_size. This also brings back the internal lfs_bd_crc function, in which we can use some optimizations added to lfs_bd_cmp. Needs some cleanup but the idea is passing most relevant tests.
		
			
				
	
	
		
			138 lines
		
	
	
		
			4.7 KiB
		
	
	
	
		
			C
		
	
	
	
	
	
			
		
		
	
	
			138 lines
		
	
	
		
			4.7 KiB
		
	
	
	
		
			C
		
	
	
	
	
	
| /*
 | |
|  * Block device emulated in RAM
 | |
|  *
 | |
|  * Copyright (c) 2017, Arm Limited. All rights reserved.
 | |
|  * SPDX-License-Identifier: BSD-3-Clause
 | |
|  */
 | |
| #include "bd/lfs_rambd.h"
 | |
| 
 | |
| int lfs_rambd_createcfg(const struct lfs_config *cfg,
 | |
|         const struct lfs_rambd_config *bdcfg) {
 | |
|     LFS_RAMBD_TRACE("lfs_rambd_createcfg(%p {.context=%p, "
 | |
|                 ".read=%p, .prog=%p, .erase=%p, .sync=%p, "
 | |
|                 ".read_size=%"PRIu32", .prog_size=%"PRIu32", "
 | |
|                 ".block_size=%"PRIu32", .block_count=%"PRIu32"}, "
 | |
|                 "%p {.erase_value=%"PRId32", .buffer=%p})",
 | |
|             (void*)cfg, cfg->context,
 | |
|             (void*)(uintptr_t)cfg->read, (void*)(uintptr_t)cfg->prog,
 | |
|             (void*)(uintptr_t)cfg->erase, (void*)(uintptr_t)cfg->sync,
 | |
|             cfg->read_size, cfg->prog_size, cfg->block_size, cfg->block_count,
 | |
|             (void*)bdcfg, bdcfg->erase_value, bdcfg->buffer);
 | |
|     lfs_rambd_t *bd = cfg->context;
 | |
|     bd->cfg = bdcfg;
 | |
| 
 | |
|     // allocate buffer?
 | |
|     if (bd->cfg->buffer) {
 | |
|         bd->buffer = bd->cfg->buffer;
 | |
|     } else {
 | |
|         bd->buffer = lfs_malloc(cfg->block_size * cfg->block_count);
 | |
|         if (!bd->buffer) {
 | |
|             LFS_RAMBD_TRACE("lfs_rambd_createcfg -> %d", LFS_ERR_NOMEM);
 | |
|             return LFS_ERR_NOMEM;
 | |
|         }
 | |
|     }
 | |
| 
 | |
|     // zero for reproducability (this matches filebd)
 | |
|     memset(bd->buffer, 0, cfg->block_size * cfg->block_count);
 | |
| 
 | |
|     LFS_RAMBD_TRACE("lfs_rambd_createcfg -> %d", 0);
 | |
|     return 0;
 | |
| }
 | |
| 
 | |
| int lfs_rambd_create(const struct lfs_config *cfg) {
 | |
|     LFS_RAMBD_TRACE("lfs_rambd_create(%p {.context=%p, "
 | |
|                 ".read=%p, .prog=%p, .erase=%p, .sync=%p, "
 | |
|                 ".read_size=%"PRIu32", .prog_size=%"PRIu32", "
 | |
|                 ".block_size=%"PRIu32", .block_count=%"PRIu32"})",
 | |
|             (void*)cfg, cfg->context,
 | |
|             (void*)(uintptr_t)cfg->read, (void*)(uintptr_t)cfg->prog,
 | |
|             (void*)(uintptr_t)cfg->erase, (void*)(uintptr_t)cfg->sync,
 | |
|             cfg->read_size, cfg->prog_size, cfg->block_size, cfg->block_count);
 | |
|     static const struct lfs_rambd_config defaults = {.erase_value=-1};
 | |
|     int err = lfs_rambd_createcfg(cfg, &defaults);
 | |
|     LFS_RAMBD_TRACE("lfs_rambd_create -> %d", err);
 | |
|     return err;
 | |
| }
 | |
| 
 | |
| int lfs_rambd_destroy(const struct lfs_config *cfg) {
 | |
|     LFS_RAMBD_TRACE("lfs_rambd_destroy(%p)", (void*)cfg);
 | |
|     // clean up memory
 | |
|     lfs_rambd_t *bd = cfg->context;
 | |
|     if (!bd->cfg->buffer) {
 | |
|         lfs_free(bd->buffer);
 | |
|     }
 | |
|     LFS_RAMBD_TRACE("lfs_rambd_destroy -> %d", 0);
 | |
|     return 0;
 | |
| }
 | |
| 
 | |
| int lfs_rambd_read(const struct lfs_config *cfg, lfs_block_t block,
 | |
|         lfs_off_t off, void *buffer, lfs_size_t size) {
 | |
|     LFS_RAMBD_TRACE("lfs_rambd_read(%p, "
 | |
|                 "0x%"PRIx32", %"PRIu32", %p, %"PRIu32")",
 | |
|             (void*)cfg, block, off, buffer, size);
 | |
|     lfs_rambd_t *bd = cfg->context;
 | |
| 
 | |
|     // check if read is valid
 | |
|     LFS_ASSERT(off  % cfg->read_size == 0);
 | |
|     LFS_ASSERT(size % cfg->read_size == 0);
 | |
|     LFS_ASSERT(block < cfg->block_count);
 | |
| 
 | |
|     // read data
 | |
|     memcpy(buffer, &bd->buffer[block*cfg->block_size + off], size);
 | |
| 
 | |
|     LFS_RAMBD_TRACE("lfs_rambd_read -> %d", 0);
 | |
|     return 0;
 | |
| }
 | |
| 
 | |
| int lfs_rambd_prog(const struct lfs_config *cfg, lfs_block_t block,
 | |
|         lfs_off_t off, const void *buffer, lfs_size_t size) {
 | |
|     LFS_RAMBD_TRACE("lfs_rambd_prog(%p, "
 | |
|                 "0x%"PRIx32", %"PRIu32", %p, %"PRIu32")",
 | |
|             (void*)cfg, block, off, buffer, size);
 | |
|     lfs_rambd_t *bd = cfg->context;
 | |
| 
 | |
|     // check if write is valid
 | |
|     LFS_ASSERT(off  % cfg->prog_size == 0);
 | |
|     LFS_ASSERT(size % cfg->prog_size == 0);
 | |
|     LFS_ASSERT(block < cfg->block_count);
 | |
| 
 | |
|     // check that data was erased? only needed for testing
 | |
|     if (bd->cfg->erase_value != -1) {
 | |
|         for (lfs_off_t i = 0; i < size; i++) {
 | |
|             LFS_ASSERT(bd->buffer[block*cfg->block_size + off + i] ==
 | |
|                     bd->cfg->erase_value);
 | |
|         }
 | |
|     }
 | |
| 
 | |
|     // program data
 | |
|     memcpy(&bd->buffer[block*cfg->block_size + off], buffer, size);
 | |
| 
 | |
|     LFS_RAMBD_TRACE("lfs_rambd_prog -> %d", 0);
 | |
|     return 0;
 | |
| }
 | |
| 
 | |
| int lfs_rambd_erase(const struct lfs_config *cfg, lfs_block_t block) {
 | |
|     LFS_RAMBD_TRACE("lfs_rambd_erase(%p, 0x%"PRIx32")", (void*)cfg, block);
 | |
|     lfs_rambd_t *bd = cfg->context;
 | |
| 
 | |
|     // check if erase is valid
 | |
|     LFS_ASSERT(block < cfg->block_count);
 | |
| 
 | |
|     // erase, only needed for testing
 | |
|     if (bd->cfg->erase_value != -1) {
 | |
|         memset(&bd->buffer[block*cfg->block_size],
 | |
|                 bd->cfg->erase_value, cfg->block_size);
 | |
|     }
 | |
| 
 | |
|     LFS_RAMBD_TRACE("lfs_rambd_erase -> %d", 0);
 | |
|     return 0;
 | |
| }
 | |
| 
 | |
| int lfs_rambd_sync(const struct lfs_config *cfg) {
 | |
|     LFS_RAMBD_TRACE("lfs_rambd_sync(%p)", (void*)cfg);
 | |
|     // sync does nothing because we aren't backed by anything real
 | |
|     (void)cfg;
 | |
|     LFS_RAMBD_TRACE("lfs_rambd_sync -> %d", 0);
 | |
|     return 0;
 | |
| }
 |