MochaPayload/source/ios_kernel/source/fsa.c

/***************************************************************************
 * Copyright (C) 2016
 * by Dimok
 *
 * This software is provided 'as-is', without any express or implied
 * warranty. In no event will the authors be held liable for any
 * damages arising from the use of this software.
 *
 * Permission is granted to anyone to use this software for any
 * purpose, including commercial applications, and to alter it and
 * redistribute it freely, subject to the following restrictions:
 *
 * 1. The origin of this software must not be misrepresented; you
 * must not claim that you wrote the original software. If you use
 * this software in a product, an acknowledgment in the product
 * documentation would be appreciated but is not required.
 *
 * 2. Altered source versions must be plainly marked as such, and
 * must not be misrepresented as being the original software.
 *
 * 3. This notice may not be removed or altered from any source
 * distribution.
 ***************************************************************************/
#include "types.h"
#include "utils.h"

#define svcAlloc      ((void *(*) (u32 heapid, u32 size)) 0x081234E4)
#define svcAllocAlign ((void *(*) (u32 heapid, u32 size, u32 align)) 0x08123464)
#define svcFree       ((void *(*) (u32 heapid, void *ptr)) 0x08123830)
#define svcOpen       ((int (*)(const char *name, int mode)) 0x0812940C)
#define svcClose      ((int (*)(int fd)) 0x08129368)
#define svcIoctl      ((int (*)(int fd, u32 request, void *input_buffer, u32 input_buffer_len, void *output_buffer, u32 output_buffer_len)) 0x081290E0)
#define svcIoctlv     ((int (*)(int fd, u32 request, u32 vector_count_in, u32 vector_count_out, iovec_s *vector)) 0x0812903C)

typedef struct {
    void *ptr;
    u32 len;
    u32 unk;
} iovec_s;

static void *allocIobuf() {
    void *ptr = svcAlloc(0xCAFF, 0x828);
    kernel_memset(ptr, 0x00, 0x828);

    return ptr;
}

static void freeIobuf(void *ptr) {
    svcFree(0xCAFF, ptr);
}

static int IOS_Open(const char *dev, int mode) {
    // put string into a good location
    char *devStr = (char *) svcAlloc(0xCAFF, 0x20);
    if (!devStr)
        return -3;

    kernel_strncpy(devStr, dev, 0x20);

    int res = svcOpen(devStr, 0);

    svcFree(0xCAFF, devStr);

    return res;
}

static int FSA_Open(void) {
    return IOS_Open("/dev/fsa", 0);
}

static int FSA_Close(int fd) {
    return svcClose(fd);
}

static int FSA_RawOpen(int fd, const char *device_path, int *outHandle) {
    u8 *iobuf   = allocIobuf();
    u32 *inbuf  = (u32 *) iobuf;
    u32 *outbuf = (u32 *) &iobuf[0x520];

    kernel_strncpy((char *) &inbuf[0x01], device_path, 0x27F);

    int ret = svcIoctl(fd, 0x6A, inbuf, 0x520, outbuf, 0x293);

    if (outHandle) *outHandle = outbuf[1];

    freeIobuf(iobuf);
    return ret;
}

static int FSA_RawClose(int fd, int device_handle) {
    u8 *iobuf   = allocIobuf();
    u32 *inbuf  = (u32 *) iobuf;
    u32 *outbuf = (u32 *) &iobuf[0x520];

    inbuf[1] = device_handle;

    int ret = svcIoctl(fd, 0x6D, inbuf, 0x520, outbuf, 0x293);

    freeIobuf(iobuf);
    return ret;
}

static int FSA_RawRead(int fd, void *data, u32 size_bytes, u32 cnt, u64 blocks_offset, int device_handle) {
    u8 *iobuf      = allocIobuf();
    u8 *inbuf8     = iobuf;
    u8 *outbuf8    = &iobuf[0x520];
    iovec_s *iovec = (iovec_s *) &iobuf[0x7C0];
    u32 *inbuf     = (u32 *) inbuf8;
    u32 *outbuf    = (u32 *) outbuf8;

    // note : offset_bytes = blocks_offset * size_bytes
    inbuf[0x08 / 4] = (blocks_offset >> 32);
    inbuf[0x0C / 4] = (blocks_offset & 0xFFFFFFFF);
    inbuf[0x10 / 4] = cnt;
    inbuf[0x14 / 4] = size_bytes;
    inbuf[0x18 / 4] = device_handle;

    iovec[0].ptr = inbuf;
    iovec[0].len = 0x520;

    iovec[1].ptr = data;
    iovec[1].len = size_bytes * cnt;

    iovec[2].ptr = outbuf;
    iovec[2].len = 0x293;

    int ret = svcIoctlv(fd, 0x6B, 1, 2, iovec);

    freeIobuf(iobuf);
    return ret;
}

static int FSA_RawWrite(int fd, void *data, u32 size_bytes, u32 cnt, u64 blocks_offset, int device_handle) {
    u8 *iobuf      = allocIobuf();
    u8 *inbuf8     = iobuf;
    u8 *outbuf8    = &iobuf[0x520];
    iovec_s *iovec = (iovec_s *) &iobuf[0x7C0];
    u32 *inbuf     = (u32 *) inbuf8;
    u32 *outbuf    = (u32 *) outbuf8;

    inbuf[0x08 / 4] = (blocks_offset >> 32);
    inbuf[0x0C / 4] = (blocks_offset & 0xFFFFFFFF);
    inbuf[0x10 / 4] = cnt;
    inbuf[0x14 / 4] = size_bytes;
    inbuf[0x18 / 4] = device_handle;

    iovec[0].ptr = inbuf;
    iovec[0].len = 0x520;

    iovec[1].ptr = data;
    iovec[1].len = size_bytes * cnt;

    iovec[2].ptr = outbuf;
    iovec[2].len = 0x293;

    int ret = svcIoctlv(fd, 0x6C, 2, 1, iovec);

    freeIobuf(iobuf);
    return ret;
}

int FSA_SDReadRawSectors(void *buffer, u32 sector, u32 num_sectors) {
    int fsa = FSA_Open();
    if (fsa < 0)
        return fsa;

    int fd;
    int res = FSA_RawOpen(fsa, "/dev/sdcard01", &fd);
    if (res < 0) {
        FSA_Close(fsa);
        return res;
    }

    void *buf = svcAllocAlign(0xCAFF, num_sectors << 9, 0x40);
    if (!buf) {
        FSA_RawClose(fsa, fd);
        FSA_Close(fsa);
        return -2;
    }

    res = FSA_RawRead(fsa, buf, 0x200, num_sectors, sector, fd);

    kernel_memcpy(buffer, buf, num_sectors << 9);

    svcFree(0xCAFF, buf);
    FSA_RawClose(fsa, fd);
    FSA_Close(fsa);

    return res;
}

int FSA_SDWriteRawSectors(const void *buffer, u32 sector, u32 num_sectors) {
    int fsa = FSA_Open();
    if (fsa < 0)
        return fsa;

    int fd;
    int res = FSA_RawOpen(fsa, "/dev/sdcard01", &fd);
    if (res < 0) {
        FSA_Close(fsa);
        return res;
    }

    void *buf = svcAllocAlign(0xCAFF, num_sectors << 9, 0x40);
    if (!buf) {
        FSA_RawClose(fsa, fd);
        FSA_Close(fsa);
        return -2;
    }

    kernel_memcpy(buf, buffer, num_sectors << 9);

    res = FSA_RawWrite(fsa, buf, 0x200, num_sectors, sector, fd);

    svcFree(0xCAFF, buf);
    FSA_RawClose(fsa, fd);
    FSA_Close(fsa);

    return res;
}