mirror of
https://github.com/ARM-software/arm-trusted-firmware.git
synced 2025-04-28 08:08:45 +00:00

This patch is to add size checking to make sure that each certificate and encryption/decryption request are 4-byte align as this driver is expecting. Unaligned size may indicate invalid/corrupted request hence will be rejected. Signed-off-by: Abdul Halim, Muhammad Hadi Asyrafi <muhammad.hadi.asyrafi.abdul.halim@intel.com> Signed-off-by: Sieu Mun Tang <sieu.mun.tang@intel.com> Change-Id: Ib6f97849ec470e45679c5adc4fbfa3afd10eda90
167 lines
3.6 KiB
C
167 lines
3.6 KiB
C
/*
|
|
* Copyright (c) 2020-2022, Intel Corporation. All rights reserved.
|
|
*
|
|
* SPDX-License-Identifier: BSD-3-Clause
|
|
*/
|
|
|
|
#include <arch_helpers.h>
|
|
#include <lib/mmio.h>
|
|
|
|
#include "socfpga_fcs.h"
|
|
#include "socfpga_mailbox.h"
|
|
#include "socfpga_sip_svc.h"
|
|
|
|
static bool is_size_4_bytes_aligned(uint32_t size)
|
|
{
|
|
if ((size % MBOX_WORD_BYTE) != 0U) {
|
|
return false;
|
|
} else {
|
|
return true;
|
|
}
|
|
}
|
|
|
|
uint32_t intel_fcs_random_number_gen(uint64_t addr, uint64_t *ret_size,
|
|
uint32_t *mbox_error)
|
|
{
|
|
int status;
|
|
unsigned int i;
|
|
unsigned int resp_len = FCS_RANDOM_WORD_SIZE;
|
|
uint32_t random_data[FCS_RANDOM_WORD_SIZE] = {0U};
|
|
|
|
if (!is_address_in_ddr_range(addr, FCS_RANDOM_BYTE_SIZE)) {
|
|
return INTEL_SIP_SMC_STATUS_REJECTED;
|
|
}
|
|
|
|
status = mailbox_send_cmd(MBOX_JOB_ID, MBOX_FCS_RANDOM_GEN, NULL, 0U,
|
|
CMD_CASUAL, random_data, &resp_len);
|
|
|
|
if (status < 0) {
|
|
*mbox_error = -status;
|
|
return INTEL_SIP_SMC_STATUS_ERROR;
|
|
}
|
|
|
|
if (resp_len != FCS_RANDOM_WORD_SIZE) {
|
|
*mbox_error = GENERIC_RESPONSE_ERROR;
|
|
return INTEL_SIP_SMC_STATUS_ERROR;
|
|
}
|
|
|
|
*ret_size = FCS_RANDOM_BYTE_SIZE;
|
|
|
|
for (i = 0U; i < FCS_RANDOM_WORD_SIZE; i++) {
|
|
mmio_write_32(addr, random_data[i]);
|
|
addr += MBOX_WORD_BYTE;
|
|
}
|
|
|
|
flush_dcache_range(addr - *ret_size, *ret_size);
|
|
|
|
return INTEL_SIP_SMC_STATUS_OK;
|
|
}
|
|
|
|
uint32_t intel_fcs_send_cert(uint64_t addr, uint64_t size,
|
|
uint32_t *send_id)
|
|
{
|
|
int status;
|
|
|
|
if (!is_address_in_ddr_range(addr, size)) {
|
|
return INTEL_SIP_SMC_STATUS_REJECTED;
|
|
}
|
|
|
|
if (!is_size_4_bytes_aligned(size)) {
|
|
return INTEL_SIP_SMC_STATUS_REJECTED;
|
|
}
|
|
|
|
status = mailbox_send_cmd_async(send_id, MBOX_CMD_VAB_SRC_CERT,
|
|
(uint32_t *)addr, size / MBOX_WORD_BYTE,
|
|
CMD_DIRECT);
|
|
|
|
if (status < 0) {
|
|
return INTEL_SIP_SMC_STATUS_ERROR;
|
|
}
|
|
|
|
return INTEL_SIP_SMC_STATUS_OK;
|
|
}
|
|
|
|
uint32_t intel_fcs_get_provision_data(uint32_t *send_id)
|
|
{
|
|
int status;
|
|
|
|
status = mailbox_send_cmd_async(send_id, MBOX_FCS_GET_PROVISION,
|
|
NULL, 0U, CMD_DIRECT);
|
|
|
|
if (status < 0) {
|
|
return INTEL_SIP_SMC_STATUS_ERROR;
|
|
}
|
|
|
|
return INTEL_SIP_SMC_STATUS_OK;
|
|
}
|
|
|
|
uint32_t intel_fcs_cryption(uint32_t mode, uint32_t src_addr,
|
|
uint32_t src_size, uint32_t dst_addr,
|
|
uint32_t dst_size, uint32_t *send_id)
|
|
{
|
|
int status;
|
|
uint32_t cmd;
|
|
|
|
fcs_crypt_payload payload = {
|
|
FCS_CRYPTION_DATA_0,
|
|
src_addr,
|
|
src_size,
|
|
dst_addr,
|
|
dst_size };
|
|
|
|
if (!is_address_in_ddr_range(src_addr, src_size) ||
|
|
!is_address_in_ddr_range(dst_addr, dst_size)) {
|
|
return INTEL_SIP_SMC_STATUS_REJECTED;
|
|
}
|
|
|
|
if (!is_size_4_bytes_aligned(sizeof(fcs_crypt_payload))) {
|
|
return INTEL_SIP_SMC_STATUS_REJECTED;
|
|
}
|
|
|
|
if (mode != 0U) {
|
|
cmd = MBOX_FCS_ENCRYPT_REQ;
|
|
} else {
|
|
cmd = MBOX_FCS_DECRYPT_REQ;
|
|
}
|
|
|
|
status = mailbox_send_cmd_async(send_id, cmd, (uint32_t *) &payload,
|
|
sizeof(fcs_crypt_payload) / MBOX_WORD_BYTE,
|
|
CMD_INDIRECT);
|
|
inv_dcache_range(dst_addr, dst_size);
|
|
|
|
if (status < 0) {
|
|
return INTEL_SIP_SMC_STATUS_REJECTED;
|
|
}
|
|
|
|
return INTEL_SIP_SMC_STATUS_OK;
|
|
}
|
|
|
|
uint32_t intel_fcs_get_rom_patch_sha384(uint64_t addr, uint64_t *ret_size,
|
|
uint32_t *mbox_error)
|
|
{
|
|
int status;
|
|
unsigned int resp_len = FCS_SHA384_WORD_SIZE;
|
|
|
|
if (!is_address_in_ddr_range(addr, FCS_SHA384_BYTE_SIZE)) {
|
|
return INTEL_SIP_SMC_STATUS_REJECTED;
|
|
}
|
|
|
|
status = mailbox_send_cmd(MBOX_JOB_ID, MBOX_GET_ROM_PATCH_SHA384, NULL, 0U,
|
|
CMD_CASUAL, (uint32_t *) addr, &resp_len);
|
|
|
|
if (status < 0) {
|
|
*mbox_error = -status;
|
|
return INTEL_SIP_SMC_STATUS_ERROR;
|
|
}
|
|
|
|
if (resp_len != FCS_SHA384_WORD_SIZE) {
|
|
*mbox_error = GENERIC_RESPONSE_ERROR;
|
|
return INTEL_SIP_SMC_STATUS_ERROR;
|
|
}
|
|
|
|
*ret_size = FCS_SHA384_BYTE_SIZE;
|
|
|
|
flush_dcache_range(addr, *ret_size);
|
|
|
|
return INTEL_SIP_SMC_STATUS_OK;
|
|
}
|