// Copyright (c) 1996-2009 Nokia Corporation and/or its subsidiary(-ies).
// All rights reserved.
// This component and the accompanying materials are made available
// under the terms of the License "Eclipse Public License v1.0"
// which accompanies this distribution, and is available
// at the URL "http://www.eclipse.org/legal/epl-v10.html".
//
// Initial Contributors:
// Nokia Corporation - initial contribution.
//
// Contributors:
//
// Description:
// ubootldr\flash_nor.cpp
// 
//

#define FILE_ID	0x464C5348

#include "bootldr.h"
#include "ubootldrldd.h"
#include <e32std.h>
#include <e32std_private.h>
#include <e32svr.h>
#include <e32cons.h>
#include <f32file.h>
#include <hal.h>
#include <u32hal.h>
#include "flash_nor.h"

const TUint KFlashRetries = 1000000;

#ifdef __SUPPORT_FLASH_REPRO__
_LIT(KLitThreadName,"Flash");

TLinAddr FlashImageAddr;
TUint32 FlashImageSize;
TUint32 * FlashAddress;

volatile TUint32 Available;
volatile TBool Complete;

#define addr_to_page(a) (a&~(0x1000-1))
#define addr_pageoff(a) (a&(0x1000-1))

// Memory
RUBootldrLdd LddFlash;
RChunk TheFlashChunk;

TUint FlashId = FLASH_TYPE_UNKNOWN;


#define PRINTF(x)
#define SPANSION_PRINTF(x)
#define TYAX_PRINTF(x)
#define WRITE_PRINTF(x)

// Reset prototypes
TInt cfiReset (TUint32 flashId, TUint32 address);
TInt tyaxReset(TUint32 flashId, TUint32 address);

// Erase prototypes
TInt spansionErase(TUint32 flashId, TUint32 aBase,  TUint32 anAddr, TUint32 aSize);
TInt tyaxErase    (TUint32 flashId, TUint32 aBase,  TUint32 anAddr, TUint32 aSize);

// Write prototypes
TInt spansionWrite(TUint32 flashId, TUint32 anAddr, TUint32 aSize, const TUint32* aPS);
TInt tyaxWrite    (TUint32 flashId, TUint32 anAddr, TUint32 aSize, const TUint32* aPS);

///////////////////////////////////////////////////////////////////////////////
//
// FLASH INFO
//
// This table holds all the information we have about supported flash devices
//
///////////////////////////////////////////////////////////////////////////////
const TFlashInfo flashInfo [] =
	{
//	Description                Manufacturer ID     Device ID           Reset fn   Erase fn       Write fn       Comments
	{_L(""),                   CFI_MANUF_ANY,      CFI_DEV_ANY,        cfiReset,  NULL,          NULL,          }, // This is the catch-all entry in case we aren't initialised

//	{_L("Spansion xyz"),       CFI_MANUF_SPANSION, CFI_DEV_xyz,        xyzReset,  xyzErase,      xyzWrite,      }, // Put new Spansion flash types here, before the CFI_DEV_ANY, or they won't get detected
	{_L("Spansion S29GL512N"), CFI_MANUF_SPANSION, CFI_DEV_S29GL512N,  cfiReset,  spansionErase, spansionWrite, }, // NaviEngine Rev B & C
	{_L("Spansion Generic"),   CFI_MANUF_SPANSION, CFI_DEV_ANY,        cfiReset,  spansionErase, spansionWrite, }, // Generic Spansion flash types

//	{_L("Intel xyz"),          CFI_MANUF_INTEL,    CFI_DEV_xyz,        xyzReset,  xyzErase,      xyzWrite,      }, // Put new Intel flash types here, before the CFI_DEV_ANY, or they won't get detected
	{_L("Intel Sibley"),       CFI_MANUF_INTEL,    CFI_DEV_SIBLEY,     tyaxReset, tyaxErase,     tyaxWrite,     }, // H4 with Intel Tyax flash parts
	{_L("Intel 28F256L18T"),   CFI_MANUF_INTEL,    CFI_DEV_28F256L18T, tyaxReset, tyaxErase,     tyaxWrite,     }, // H4 with Intel Tyax flash parts
	{_L("Intel Tyax"),         CFI_MANUF_INTEL,    CFI_DEV_ANY,        tyaxReset, tyaxErase,     tyaxWrite,     }, // Generic Intel Tyax flash support

	// End Of Table - no more entries after here
	{_L(""),                   0,                  0,                  NULL,          NULL,          NULL           }  // NULL entry used to mark end of table
	};





///////////////////////////////////////////////////////////////////////////////
// CFI Commands
///////////////////////////////////////////////////////////////////////////////
// Query
const TCfiCommands CfiQuery [] =
	{
		{CFI_BASE8,   0xAAA,   0xAA},
		{CFI_BASE8,   0x555,   0x55},
		{CFI_BASE8,   0xAAA,   0x90},

		{CFI_END,     CFI_END, CFI_END} // Termination of command sequence - this entry is not a command
	};

// Erase
const TCfiCommands CfiErase [] =
	{
		{CFI_BASE8,   0xAAA,   0xAA},
		{CFI_BASE8,   0x555,   0x55},
		{CFI_BASE8,   0xAAA,   0x80},
		{CFI_BASE8,   0xAAA,   0xAA},
		{CFI_BASE8,   0x555,   0x55},
		{CFI_SECTOR8, 0x000,   0x30},

		{CFI_END,     CFI_END, CFI_END} // Termination of command sequence - this entry is not a command
	};

// Write
const TCfiCommands CfiWrite [] =
	{
		{CFI_BASE8,   0xAAA,   0xAA},
		{CFI_BASE8,   0x555,   0x55},
		{CFI_BASE8,   0xAAA,   0xA0},

		{CFI_END,     CFI_END, CFI_END} // Termination of command sequence - this entry is not a command
	};






///////////////////////////////////////////////////////////////////////////////
//
// CFI Command execution
//
// CFI implements a generic set of commands that can be used on all CFI flash
// parts.
//
// The commands usually write to the base address of the device + an offset,
// or to the sector/block address for some commands.
//
///////////////////////////////////////////////////////////////////////////////
TInt CfiCommand(TUint32 base, TUint32 sector, const TCfiCommands * commands)
	{
	if (commands != NULL)
		{
		const TCfiCommands * pCmd = commands;
		while (pCmd->location != CFI_END)
			{
			switch (pCmd->location)
				{
				case CFI_BASE8:
					{
					*(volatile TUint8*)(base   + pCmd->offset) = pCmd->command;
					}
					break;
				case CFI_SECTOR8:
					{
					*(volatile TUint8*)(sector + pCmd->offset) = pCmd->command;
					}
					break;
				default:
					return KErrNotSupported;
				}
			pCmd++;
			}
		}
	return KErrNone;
	}




///////////////////////////////////////////////////////////////////////////////
//
// TYAX specific routines
//
///////////////////////////////////////////////////////////////////////////////
// Clear the status register
///////////////////////////////////////////////////////////////////////////////
void tyaxClearStatus(TUint32 address)
	{
	volatile TUint16 *p = (TUint16 *)address;
	*p=KCmdClearStatus;	// clear status reg
	}

///////////////////////////////////////////////////////////////////////////////
// Wait until cmd completes
///////////////////////////////////////////////////////////////////////////////
void tyaxWaitUntilReady(TUint32 address, TUint16 cmd)
	{
	volatile TUint16 *pF = (TUint16 *)address;
	TUint16 s=0;
	TInt i=KFlashRetries;

	for (; i>0 && ((s&KStatusBusy)!=KStatusBusy); --i)	// check ready bit
		{
		*pF=cmd;
		s=*pF;
		}
	if (i==0)
		{
		PrintToScreen(_L("Write timed out"));
		BOOT_FAULT();
		}
	if (s&KStatusCmdSeqError)
		{
		PrintToScreen(_L("Write error s=%x pF=0x%x\n"), s, pF);
		}
	}

///////////////////////////////////////////////////////////////////////////////
// Unlock Flash
///////////////////////////////////////////////////////////////////////////////
void tyaxUnlock(TUint32 address)
	{
	TYAX_PRINTF(RDebug::Printf("tyaxUnlock(0x%08x)", address));
	TUint16 * pF = (TUint16*)address;
	// Unlock
	*pF=KCmdClearBlockLockBit1;
	*pF=KCmdClearBlockLockBit2;
	}













///////////////////////////////////////////////////////////////////////////////
//
// GENERIC - implementations of the generic routines
//
// - reset
// - erase
// - write
//
///////////////////////////////////////////////////////////////////////////////
// Reset Flash
///////////////////////////////////////////////////////////////////////////////
TInt cfiReset(TUint32 flashId, TUint32 address)
	{
	SPANSION_PRINTF(RDebug::Printf("cfiReset(0x%08x)", address));

	volatile TUint8 * p = (TUint8*)address;
	*(p)=0xF0;			// reset spansion flash
	return KErrNone;
	}

///////////////////////////////////////////////////////////////////////////////
// Reset Flash
///////////////////////////////////////////////////////////////////////////////
TInt tyaxReset(TUint32 flashId, TUint32 address)
	{
	TYAX_PRINTF(RDebug::Printf("tyaxReset(0x%08x)", address));

	TUint16 * p = (TUint16*)address;

	// clear the status register
	tyaxClearStatus((TUint32)address);

	// write to linear base and set strataflash into readarray mode
	*p=KCmdReadArrayMode;
	return KErrNone;
	}




///////////////////////////////////////////////////////////////////////////////
// Erase a block of flash
///////////////////////////////////////////////////////////////////////////////
TInt spansionErase(TUint32 flashId, TUint32 aBase, TUint32 anAddr, TUint32 aSize)
	{
	SPANSION_PRINTF(RDebug::Printf("spansionErase 0x%08x", anAddr));

	volatile TUint32 base=anAddr&~(KFlashEraseBlockSize-1);	// round base address down to block
	volatile TUint32 end=anAddr+aSize;
	end=(end+KFlashEraseBlockSize-1)&~(KFlashEraseBlockSize-1);	// round end address up to block
	TUint32 size=end-base;
	volatile TUint8* p=(volatile TUint8*)base;

	SPANSION_PRINTF(RDebug::Printf("Erase anAddr=0x%08x, aSize=0x%08x, base=0x%08x, end=0x%08x, size=0x%08x, p=0x%08x", anAddr, aSize, base, end, size, p));

	cfiReset(flashId, aBase);
	for (; size; size-=KFlashEraseBlockSize, p+=(KFlashEraseBlockSize>>1))
		{
		CfiCommand(aBase, base, CfiErase);

		TUint retries = KFlashRetries;
		while ((*(volatile TUint8*)anAddr != 0xFF) && (retries != 0))
			{
			retries--;
			}
		if (retries==0)
			{
			RDebug::Printf("Erase Failed anAddr=0x%08x, aSize=0x%08x, base=0x%08x, end=0x%08x, size=0x%08x, p=0x%08x", anAddr, aSize, base, end, size, p);
			}
		cfiReset(flashId, aBase);
		}
	return 0;
	}


///////////////////////////////////////////////////////////////////////////////
// Erase a block of flash
///////////////////////////////////////////////////////////////////////////////
TInt tyaxErase(TUint32 flashId, TUint32 aBase, TUint32 anAddr, TUint32 aSize)
	{
	TUint32 base=anAddr&~(KFlashEraseBlockSize-1);	// round base address down to block
	TUint32 end=anAddr+aSize;
	end=(end+KFlashEraseBlockSize-1)&~(KFlashEraseBlockSize-1);	// round end address up to block
	TUint32 size=end-base;
	volatile TUint16* p=(volatile TUint16*)base;

	// write to linear base and set strataflash into readarray mode
	*p=KCmdReadArrayMode;
	// clear the status register
	*p=KCmdClearStatus;
	for (; size; size-=KFlashEraseBlockSize, p+=(KFlashEraseBlockSize>>1))
		{
		// Unlock
		*p=KCmdClearBlockLockBit1;
		*p=KCmdClearBlockLockBit2;
		// Erase
		*p=KCmdBlockErase1;	// block erase
		*p=KCmdBlockErase2;	// block erase confirm

		// wait for the erase to finish
		while ((*p & KStatusBusy)!=KStatusBusy);

		// put the flash block back to normal
		TUint32 s=*p;
		*p=KCmdClearStatus;	// clear status reg
		*p=KCmdReadArrayMode;
		
		if (s & KStatusLockBitError)
			{
			// error
			RDebug::Printf("Erase Failed: addr:0x%x status: 0x%x", p, s);
			return (TUint32)p-anAddr+1;
			}
		}
	return 0;
	}


///////////////////////////////////////////////////////////////////////////////
// Write a block of flash
///////////////////////////////////////////////////////////////////////////////
TInt spansionWrite(TUint32 flashId, TUint32 anAddr, TUint32 aSize, const TUint32* aPS)
// Assume aSize <= KFlashWriteBufSize
	{
	SPANSION_PRINTF(WRITE_PRINTF(RDebug::Printf("spansionWrite anAddr=0x%08x, aSize=0x%08x", anAddr, aSize)));

	volatile TUint8  * base  = (TUint8 *)FlashAddress;
	volatile TUint16 * pDest = (TUint16*)anAddr;
	volatile TUint16 * pSrc  = (TUint16*)aPS;
	volatile TUint16 * pEnd  = (TUint16*)(anAddr+aSize);

	for (; pDest < pEnd; pDest++, pSrc++)
		{
		CfiCommand((TUint32)base, (TUint32)base, CfiWrite);
		*pDest = *pSrc;

		TUint retries = KFlashRetries;
		while ((*pDest != *pSrc) && (retries != 0))
			{
			retries--;
			}

		if (*pDest != *pSrc)
			{
			RDebug::Printf("Write failed 0x%x=0x%x == 0x%x", pDest, *pSrc, *pDest);
			return 1;
			}
		}
	return 0;
	}

///////////////////////////////////////////////////////////////////////////////
// Write a block of flash
///////////////////////////////////////////////////////////////////////////////
// Assume aSize <= KFlashWriteBufSize
TInt tyaxWrite(TUint32 flashId, TUint32 anAddr, TUint32 aSize, const TUint32* aPS)
	{
	TYAX_PRINTF(WRITE_PRINTF(RDebug::Printf("tyaxWrite anAddr=0x%08x, aSize=0x%08x", anAddr, aSize)));

	volatile TUint16* pF=(volatile TUint16*)anAddr;

	tyaxUnlock(anAddr);
	tyaxClearStatus(anAddr);

	if (flashInfo[flashId].deviceId == CFI_DEV_SIBLEY)
		{
		tyaxWaitUntilReady(anAddr, KCmdWriteStatusSibley);
		}
		else
		{
		tyaxWaitUntilReady(anAddr, KCmdWriteStatus);
		}

	// convert to words - 1
	TInt16 l=(aSize>>1)-1;
	*pF=l;										// Write no of words
	const TUint16* pS=(const TUint16*)aPS;
	for (;l>=0;l--)
		{
		*pF++=*pS++;
		}
	pF=(volatile TUint16*)anAddr;
	*pF=0xD0;									// Confirm
		
	tyaxWaitUntilReady(anAddr, KCmdReadStatus);
	tyaxReset(flashId, anAddr);

	return 0;
	}












///////////////////////////////////////////////////////////////////////////////
//
// WRAPPERS
//
// A top level routine to prevent each function checking the flash type
//
///////////////////////////////////////////////////////////////////////////////
TInt flashReset(TUint32 flashId, TUint32 address)
	{
	PRINTF(RDebug::Printf("flashReset()"));

	TInt retVal = KErrNotSupported;

	if (flashInfo[flashId].reset != NULL)
		{
		retVal = flashInfo[flashId].reset(flashId, address);
		}

	return retVal;
	}

TInt flashErase(TUint32 flashId, TUint32 base, TUint32 address, TUint32 size)
	{
	PRINTF(RDebug::Printf("flashErase()"));

	TInt retVal = KErrNone;

	if (flashInfo[flashId].erase != NULL)
		{
		retVal = flashInfo[flashId].erase(flashId, base, address, size);
		}

	return retVal;
	}

TInt flashWrite(TUint32 flashId, TUint32 anAddr, TUint32 aSize, const TUint32* aPS)
	{
	WRITE_PRINTF(RDebug::Printf("flashWrite()"));

	TInt retVal = KErrNone;

	if (flashInfo[flashId].write != NULL)
		{
		retVal = flashInfo[flashId].write(flashId, anAddr, aSize, aPS);
		}
	
	return retVal;
	}


///////////////////////////////////////////////////////////////////////////////
//
// Flash ID
//
// Identify the flash part at the given address
// returns an index into the flashInfo structure
///////////////////////////////////////////////////////////////////////////////
TInt flashId(TUint32 address)
	{
	TUint deviceIndex = FLASH_TYPE_UNKNOWN;

	volatile TUint16* p16=(volatile TUint16*)address; // used for 16 bit read/write to the flash

	// Put flash into CFI query mode using 8 bit writes
	CfiCommand(address, address, CfiQuery);

	// Read ID codes using 16 bit reads
	// if we ever need to support 8 bit devices, we may need to change this to 2 x 8 bit reads per attribute
	TUint16 manufacturerId = *(p16  );
	TUint16 deviceId       = *(p16+1);

	for (TUint32 i=0; flashInfo[i].manufacturerId !=0; i++)
		{
		PRINTF(RDebug::Printf("Check device: M 0x%04x D 0x%04x", flashInfo[i].manufacturerId, flashInfo[i].deviceId));

		if (  (  flashInfo[i].manufacturerId == manufacturerId)
		   && ( (flashInfo[i].deviceId       == CFI_DEV_ANY   ) // support generic flash devices
		      ||(flashInfo[i].deviceId       == deviceId      )
			  )
		   )
			{
			PRINTF(RDebug::Print(_L("Found device: %s (Manufacturer=%x Device=%x)"), flashInfo[i].name.Ptr(), flashInfo[i].manufacturerId, flashInfo[i].deviceId));
			deviceIndex = i;
			break;
			}
		}
	if (deviceIndex == FLASH_TYPE_UNKNOWN)
		{
		RDebug::Printf("Flash type unknown: Manufacturer ID = %04x, Device ID = %04x", manufacturerId, deviceId );
		}
	flashReset(deviceIndex, (TUint32)FlashAddress);
	return deviceIndex;
	}


///////////////////////////////////////////////////////////////////////////////
///////////////////////////////////////////////////////////////////////////////





GLDEF_C TUint32 * GetFlashChunk()
	{
	// return if already initialised
	if (FlashAddress != NULL)
		return FlashAddress;

	TInt r = User::LoadLogicalDevice(KBootldrLddName);

	r = LddFlash.Open();
	if (r!=KErrNone)
			{
			PrintToScreen(_L("FAULT due to LddFlash open\r\n"));
			BOOT_FAULT();
			}

	TUint8* kernelAddress;
	r=LddFlash.CreateChunk(KNORFlashTargetSize,(TAny**)&kernelAddress);
	if (r!=KErrNone)
			{
			PrintToScreen(_L("FAULT due to chunk create\r\n"));
			BOOT_FAULT();
			}

	// If we're running from RAM flash will be in a different place...
	r = LddFlash.CommitMemory(KNORFlashTargetSize,addr_to_page(KNORFlashTargetAddr));
	if (r!=KErrNone)
			{
			PrintToScreen(_L("FAULT due to commit\r\n"));
			BOOT_FAULT();
			}

	r = LddFlash.GetChunkHandle(TheFlashChunk);
	if (r!=KErrNone)
			{
			PrintToScreen(_L("FAULT due to handle\r\n"));
			BOOT_FAULT();
			}

	TUint8* Base = TheFlashChunk.Base();
	FlashAddress = (TUint32*)Base;
	FlashId      = flashId((TUint32)FlashAddress);

	return FlashAddress;
	}

GLDEF_C void NotifyDataAvailable(TInt aTotalAmount)
	{
	Available=(TUint32)aTotalAmount;
	}

GLDEF_C void NotifyDownloadComplete()
	{
	Complete=ETrue;
	}

GLDEF_C TBool BlankCheck(TUint32 anAddr, TUint32 aSize)
	{
	const TUint16* p=(const TUint16*)anAddr;
	const TUint16* pE=p+(aSize>>1);
	TBool rv=ETrue;

	while(p<pE)
		{
		if (*p!=0xffff)
			{
			PRINTF(RDebug::Printf("BlankCheck %x is not blank! anAddr=0x%08x, aSize=0x%08x, p=0x%08x, *p=0x%08x", anAddr, anAddr, aSize, (TUint32)p, (TUint32)*p));
			rv=EFalse;
			break;
			}
		p++;
		}
	if (rv)
		{
		PRINTF(RDebug::Printf("BlankCheck: %x is blank", anAddr));
		}
	return rv;
	}

///////////////////////////////////////////////////////////////////////////////
//
// Erase
//
// This function is used by the variant code.  The variant code shouldn't care
// about the Flash ID, so I've left this function here as a wrapper for the
// internal flashErase function, passing in a nasty global variable containing
// the Flash ID.
//
///////////////////////////////////////////////////////////////////////////////
GLDEF_C TInt Erase(TUint32 anAddr, TUint32 aSize)
	{
	flashErase(FlashId, (TUint32)FlashAddress, anAddr, aSize);
	return 0;
	}


///////////////////////////////////////////////////////////////////////////////
//
// Write
//
// This function is used by the variant code.  As well as the Flash ID comment
// from above (see Erase), the variant shouldn't have to care about internal
// buffer sizes, etc.
//
///////////////////////////////////////////////////////////////////////////////
GLDEF_C TInt Write(TUint32 anAddr, TUint32 aSize, const TUint32* aPS)
	{
	TInt rv=0;
	do
		{
		if ((rv=flashWrite(FlashId, anAddr, KFlashWriteBufSize, aPS))!=0)
			{
			break;
			}
		anAddr+=KFlashWriteBufSize;
		aPS+=KFlashWriteBufSize>>2;
		aSize-=KFlashWriteBufSize;
		} while(aSize);
	return rv;
	}

TInt FlashThread(TAny*)
	{
	// If this thread crashes we want it to take the system down
	User::SetCritical(User::ESystemPermanent);

	GetFlashChunk();
	if (FlashBootLoader)
		{
		PrintToScreen(_L("*** Reflashing bootloader ***\r\n"));
		FlashImageAddr=(TLinAddr)FlashAddress;
		// sanity check...
		if ((TUint32)ImageSize > KNORFlashMaxBootloaderSize)
			{
			PrintToScreen(_L("Image is larger than the flash area (%d > %d) bytes.\r\n"), ImageSize, KNORFlashMaxBootloaderSize);
			return KErrNotSupported;
			}
		}
	else
		{
		PrintToScreen(_L("*** Writing to NOR Flash ***\r\n"));
		FlashImageAddr=(TLinAddr)FlashAddress+KNORFlashMaxBootloaderSize;

		// sanity check...
		if ((TUint32)ImageSize > KNORFlashMaxImageSize)
			{
			PrintToScreen(_L("Image is larger than the flash area (%d > %d) bytes.\r\n"), ImageSize, KNORFlashMaxImageSize);
			return KErrNotSupported;
			}
		}

	FlashImageSize=(TUint32)ImageSize;
	Complete=EFalse;

	TUint32 imgSzMb=(FlashImageSize+0xfffff)&~0xfffff;	// round image size up to 1Mb

	InitProgressBar(1,imgSzMb,_L("ERASE"));
	TUint32 base=FlashImageAddr;
	TUint32 end=base+imgSzMb;
	TInt r=KErrNone;
	while(base<end)
		{
		if (!BlankCheck(base,KFlashEraseBlockSize))
			{
			r=Erase(base, KFlashEraseBlockSize);
			if (r!=KErrNone)
				{
				PrintToScreen(_L("Erase failed 0x%x\r\n"), r);
				RDebug::Printf("Erase failed 0x%x", r);
				// make this a rdebug
				BOOT_FAULT();
				}
			}
		if (!BlankCheck(base,KFlashEraseBlockSize))
			{
			PrintToScreen(_L("BlankCheck failed 0x%x\r\n"),base);
			RDebug::Printf("BlankCheck failed at adress 0x%08x with error code 0x%x",base,r);
			//BOOT_FAULT();	// why crash at this point, retry is better, surely?
			}
		else
			{
			// only move to next block and update progress if the block erase passed
			base+=KFlashEraseBlockSize;
			UpdateProgressBar(1,base-FlashImageAddr);
			}
		}

	base=FlashImageAddr;
	while(base<end)
		{

		if (!BlankCheck(base,KFlashEraseBlockSize))
			{
			PrintToScreen(_L("BlankCheck 2 failed 0x%x\r\n"),base);
			RDebug::Printf("BlankCheck 2 failed at adress 0x%08x with error code 0x%x",base,r);
			BOOT_FAULT();
			}
		base+=KFlashEraseBlockSize;
		}

	InitProgressBar(1,FlashImageSize,_L("WRITE"));
	TUint32 source=DestinationAddress();		// start of image in RAM
	if (ImageHeaderPresent)
		source+=256;							// skip header if present
	TUint32 target=FlashImageAddr;						// target in flash
	TBool complete=EFalse;
	TUint32 used_bytes=0;

	// while the image hasn't been written fully
	while ((target-FlashImageAddr) < FlashImageSize)
		{
		used_bytes=source-DestinationAddress();

		complete=Complete;					// must check Complete before Available

		// if there isn't anything ready, go back to the top
		if (Available<(used_bytes+256) && !complete)
			{
			continue;									// wait for 256 bytes more data
			}
		TUint32 write_block_size=Available-used_bytes;	// how much is ready
		write_block_size &= ~(KFlashWriteBufSize-1);	// only write whole buffers

		while (write_block_size)
			{
			TUint32 write_size=Min(write_block_size,(TUint32)0x400);	// update progress after each 1K
			r=Write(target,write_size,(const TUint32*)source);
			if (r!=KErrNone)
				{
				PrintToScreen(_L("Write failed 0x%x"),r);
				BOOT_FAULT();
				}

			target+=write_size;
			source+=write_size;
			write_block_size-=write_size;
			UpdateProgressBar(1,target-FlashImageAddr);
			}
		}

	PrintToScreen(_L("Verifying image...\r\n"));

	source=DestinationAddress();				// start of image in RAM
	if (ImageHeaderPresent)
		source+=256;							// skip header if present
	base=FlashImageAddr;
	volatile TUint16* pRam=(volatile TUint16*)source;
	volatile TUint16* pFlash=(volatile TUint16*)base;
	volatile TUint16* pFlashEnd=pFlash+(FlashImageSize>>1);

	InitProgressBar(1, FlashImageSize, _L("VERIFY"));
	while(pFlash<pFlashEnd)
		{
		if (*pFlash++ != *pRam++)
			{
			PrintToScreen(_L("Verify error at byte %d (0x%x != 0x%x)\r\n"),
				((pFlash-1) - (volatile TUint16*)base) * 2, (*(pFlash-1)), (*(pRam-1)));

			PrintToScreen(_L("VERIFY %d"),(TInt)(pFlash-1));
			BOOT_FAULT();
			}

		if (!((TUint32)pFlash % 0x400))
			UpdateProgressBar(1,(TUint32)pFlash-(TUint32)FlashImageAddr);
		}

	PrintToScreen(_L("Verify complete\r\n"));

	if (FlashBootLoader)
		{
		PrintToScreen(_L("Rebooting in %d Seconds...\r\n"), KRebootDelaySecs);

		InitProgressBar(1, KRebootDelaySecs, _L("DELAY "));
		for (TUint i=0 ; i<KRebootDelaySecs ; ++i)
			{
			User::After(1000000);	// Sleep in millisecs
			UpdateProgressBar(1, i);
			}
		UpdateProgressBar(1, KRebootDelaySecs);	// let it get to the end
		PrintToScreen(_L("Rebooting...\r\n"));
		User::After(10000);
		Restart(KtRestartReasonHardRestart);
		}

	PrintToScreen(_L("Booting Image...\r\n"));
	Restart(KtRestartReasonBootRestart | KtRestartReasonNORImage);

	// NOTREACHED
	return 0;
	}

GLDEF_C TInt InitFlashWrite()
	{
	// start thread
	RThread t;
	TInt r=t.Create(KLitThreadName,FlashThread,0x2000,NULL,NULL);
	if (r!=KErrNone)
		{
		return r;
		}
	t.SetPriority(EPriorityLess);
	t.Resume();
	return KErrNone;
	}
#endif	//__SUPPORT_FLASH_REPRO__