mirror of
https://github.com/ARM-software/arm-trusted-firmware.git
synced 2025-05-06 02:58:42 +00:00

The Trusted firmware code identifies BL images by name. The platform port defines a name for each image e.g. the IO framework uses this mechanism in the platform function plat_get_image_source(). For a given image name, it returns the handle to the image file which involves comparing images names. In addition, if the image is packaged in a FIP, a name comparison is required to find the UUID for the image. This method is not optimal. This patch changes the interface between the generic and platform code with regard to identifying images. The platform port must now allocate a unique number (ID) for every image. The generic code will use the image ID instead of the name to access its attributes. As a result, the plat_get_image_source() function now takes an image ID as an input parameter. The organisation of data structures within the IO framework has been rationalised to use an image ID as an index into an array which contains attributes of the image such as UUID and name. This prevents the name comparisons. A new type 'io_uuid_spec_t' has been introduced in the IO framework to specify images identified by UUID (i.e. when the image is contained in a FIP file). There is no longer need to maintain a look-up table [iname_name --> uuid] in the io_fip driver code. Because image names are no longer mandatory in the platform port, the debug messages in the generic code will show the image identifier instead of the file name. The platforms that support semihosting to load images (i.e. FVP) must provide the file names as definitions private to the platform. The ARM platform ports and documentation have been updated accordingly. All ARM platforms reuse the image IDs defined in the platform common code. These IDs will be used to access other attributes of an image in subsequent patches. IMPORTANT: applying this patch breaks compatibility for platforms that use TF BL1 or BL2 images or the image loading code. The platform port must be updated to match the new interface. Change-Id: I9c1b04cb1a0684c6ee65dee66146dd6731751ea5
310 lines
7.7 KiB
C
310 lines
7.7 KiB
C
/*
|
|
* Copyright (c) 2015, ARM Limited and Contributors. All rights reserved.
|
|
*
|
|
* Redistribution and use in source and binary forms, with or without
|
|
* modification, are permitted provided that the following conditions are met:
|
|
*
|
|
* Redistributions of source code must retain the above copyright notice, this
|
|
* list of conditions and the following disclaimer.
|
|
*
|
|
* Redistributions in binary form must reproduce the above copyright notice,
|
|
* this list of conditions and the following disclaimer in the documentation
|
|
* and/or other materials provided with the distribution.
|
|
*
|
|
* Neither the name of ARM nor the names of its contributors may be used
|
|
* to endorse or promote products derived from this software without specific
|
|
* prior written permission.
|
|
*
|
|
* THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
|
|
* AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
|
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
|
|
* ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE
|
|
* LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
|
* CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
|
* SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
|
|
* INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
|
|
* CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
|
|
* ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
|
|
* POSSIBILITY OF SUCH DAMAGE.
|
|
*/
|
|
#include <assert.h>
|
|
#include <bl_common.h> /* For ARRAY_SIZE */
|
|
#include <debug.h>
|
|
#include <firmware_image_package.h>
|
|
#include <io_driver.h>
|
|
#include <io_fip.h>
|
|
#include <io_memmap.h>
|
|
#include <io_storage.h>
|
|
#include <platform_def.h>
|
|
#include <string.h>
|
|
|
|
/* IO devices */
|
|
static const io_dev_connector_t *fip_dev_con;
|
|
static uintptr_t fip_dev_handle;
|
|
static const io_dev_connector_t *memmap_dev_con;
|
|
static uintptr_t memmap_dev_handle;
|
|
|
|
static const io_block_spec_t fip_block_spec = {
|
|
.offset = PLAT_ARM_FIP_BASE,
|
|
.length = PLAT_ARM_FIP_MAX_SIZE
|
|
};
|
|
|
|
static const io_uuid_spec_t bl2_uuid_spec = {
|
|
.uuid = UUID_TRUSTED_BOOT_FIRMWARE_BL2,
|
|
};
|
|
|
|
static const io_uuid_spec_t bl30_uuid_spec = {
|
|
.uuid = UUID_SCP_FIRMWARE_BL30,
|
|
};
|
|
|
|
static const io_uuid_spec_t bl31_uuid_spec = {
|
|
.uuid = UUID_EL3_RUNTIME_FIRMWARE_BL31,
|
|
};
|
|
|
|
static const io_uuid_spec_t bl32_uuid_spec = {
|
|
.uuid = UUID_SECURE_PAYLOAD_BL32,
|
|
};
|
|
|
|
static const io_uuid_spec_t bl33_uuid_spec = {
|
|
.uuid = UUID_NON_TRUSTED_FIRMWARE_BL33,
|
|
};
|
|
|
|
#if TRUSTED_BOARD_BOOT
|
|
static const io_uuid_spec_t bl2_cert_uuid_spec = {
|
|
.uuid = UUID_TRUSTED_BOOT_FIRMWARE_BL2_CERT,
|
|
};
|
|
|
|
static const io_uuid_spec_t trusted_key_cert_uuid_spec = {
|
|
.uuid = UUID_TRUSTED_KEY_CERT,
|
|
};
|
|
|
|
static const io_uuid_spec_t bl30_key_cert_uuid_spec = {
|
|
.uuid = UUID_SCP_FIRMWARE_BL30_KEY_CERT,
|
|
};
|
|
|
|
static const io_uuid_spec_t bl31_key_cert_uuid_spec = {
|
|
.uuid = UUID_EL3_RUNTIME_FIRMWARE_BL31_KEY_CERT,
|
|
};
|
|
|
|
static const io_uuid_spec_t bl32_key_cert_uuid_spec = {
|
|
.uuid = UUID_SECURE_PAYLOAD_BL32_KEY_CERT,
|
|
};
|
|
|
|
static const io_uuid_spec_t bl33_key_cert_uuid_spec = {
|
|
.uuid = UUID_NON_TRUSTED_FIRMWARE_BL33_KEY_CERT,
|
|
};
|
|
|
|
static const io_uuid_spec_t bl30_cert_uuid_spec = {
|
|
.uuid = UUID_SCP_FIRMWARE_BL30_CERT,
|
|
};
|
|
|
|
static const io_uuid_spec_t bl31_cert_uuid_spec = {
|
|
.uuid = UUID_EL3_RUNTIME_FIRMWARE_BL31_CERT,
|
|
};
|
|
|
|
static const io_uuid_spec_t bl32_cert_uuid_spec = {
|
|
.uuid = UUID_SECURE_PAYLOAD_BL32_CERT,
|
|
};
|
|
|
|
static const io_uuid_spec_t bl33_cert_uuid_spec = {
|
|
.uuid = UUID_NON_TRUSTED_FIRMWARE_BL33_CERT,
|
|
};
|
|
#endif /* TRUSTED_BOARD_BOOT */
|
|
|
|
|
|
static int open_fip(const uintptr_t spec);
|
|
static int open_memmap(const uintptr_t spec);
|
|
|
|
struct plat_io_policy {
|
|
uintptr_t *dev_handle;
|
|
uintptr_t image_spec;
|
|
int (*check)(const uintptr_t spec);
|
|
};
|
|
|
|
/* By default, ARM platforms load images from the FIP */
|
|
static const struct plat_io_policy policies[] = {
|
|
[FIP_IMAGE_ID] = {
|
|
&memmap_dev_handle,
|
|
(uintptr_t)&fip_block_spec,
|
|
open_memmap
|
|
},
|
|
[BL2_IMAGE_ID] = {
|
|
&fip_dev_handle,
|
|
(uintptr_t)&bl2_uuid_spec,
|
|
open_fip
|
|
},
|
|
[BL30_IMAGE_ID] = {
|
|
&fip_dev_handle,
|
|
(uintptr_t)&bl30_uuid_spec,
|
|
open_fip
|
|
},
|
|
[BL31_IMAGE_ID] = {
|
|
&fip_dev_handle,
|
|
(uintptr_t)&bl31_uuid_spec,
|
|
open_fip
|
|
},
|
|
[BL32_IMAGE_ID] = {
|
|
&fip_dev_handle,
|
|
(uintptr_t)&bl32_uuid_spec,
|
|
open_fip
|
|
},
|
|
[BL33_IMAGE_ID] = {
|
|
&fip_dev_handle,
|
|
(uintptr_t)&bl33_uuid_spec,
|
|
open_fip
|
|
},
|
|
#if TRUSTED_BOARD_BOOT
|
|
[BL2_CERT_ID] = {
|
|
&fip_dev_handle,
|
|
(uintptr_t)&bl2_cert_uuid_spec,
|
|
open_fip
|
|
},
|
|
[TRUSTED_KEY_CERT_ID] = {
|
|
&fip_dev_handle,
|
|
(uintptr_t)&trusted_key_cert_uuid_spec,
|
|
open_fip
|
|
},
|
|
[BL30_KEY_CERT_ID] = {
|
|
&fip_dev_handle,
|
|
(uintptr_t)&bl30_key_cert_uuid_spec,
|
|
open_fip
|
|
},
|
|
[BL31_KEY_CERT_ID] = {
|
|
&fip_dev_handle,
|
|
(uintptr_t)&bl31_key_cert_uuid_spec,
|
|
open_fip
|
|
},
|
|
[BL32_KEY_CERT_ID] = {
|
|
&fip_dev_handle,
|
|
(uintptr_t)&bl32_key_cert_uuid_spec,
|
|
open_fip
|
|
},
|
|
[BL33_KEY_CERT_ID] = {
|
|
&fip_dev_handle,
|
|
(uintptr_t)&bl33_key_cert_uuid_spec,
|
|
open_fip
|
|
},
|
|
[BL30_CERT_ID] = {
|
|
&fip_dev_handle,
|
|
(uintptr_t)&bl30_cert_uuid_spec,
|
|
open_fip
|
|
},
|
|
[BL31_CERT_ID] = {
|
|
&fip_dev_handle,
|
|
(uintptr_t)&bl31_cert_uuid_spec,
|
|
open_fip
|
|
},
|
|
[BL32_CERT_ID] = {
|
|
&fip_dev_handle,
|
|
(uintptr_t)&bl32_cert_uuid_spec,
|
|
open_fip
|
|
},
|
|
[BL33_CERT_ID] = {
|
|
&fip_dev_handle,
|
|
(uintptr_t)&bl33_cert_uuid_spec,
|
|
open_fip
|
|
},
|
|
#endif /* TRUSTED_BOARD_BOOT */
|
|
};
|
|
|
|
|
|
/* Weak definitions may be overridden in specific ARM standard platform */
|
|
#pragma weak plat_arm_io_setup
|
|
#pragma weak plat_arm_get_alt_image_source
|
|
|
|
|
|
static int open_fip(const uintptr_t spec)
|
|
{
|
|
int result;
|
|
uintptr_t local_image_handle;
|
|
|
|
/* See if a Firmware Image Package is available */
|
|
result = io_dev_init(fip_dev_handle, (uintptr_t)FIP_IMAGE_ID);
|
|
if (result == IO_SUCCESS) {
|
|
result = io_open(fip_dev_handle, spec, &local_image_handle);
|
|
if (result == IO_SUCCESS) {
|
|
VERBOSE("Using FIP\n");
|
|
io_close(local_image_handle);
|
|
}
|
|
}
|
|
return result;
|
|
}
|
|
|
|
|
|
static int open_memmap(const uintptr_t spec)
|
|
{
|
|
int result;
|
|
uintptr_t local_image_handle;
|
|
|
|
result = io_dev_init(memmap_dev_handle, (uintptr_t)NULL);
|
|
if (result == IO_SUCCESS) {
|
|
result = io_open(memmap_dev_handle, spec, &local_image_handle);
|
|
if (result == IO_SUCCESS) {
|
|
VERBOSE("Using Memmap\n");
|
|
io_close(local_image_handle);
|
|
}
|
|
}
|
|
return result;
|
|
}
|
|
|
|
|
|
void arm_io_setup(void)
|
|
{
|
|
int io_result;
|
|
|
|
io_result = register_io_dev_fip(&fip_dev_con);
|
|
assert(io_result == IO_SUCCESS);
|
|
|
|
io_result = register_io_dev_memmap(&memmap_dev_con);
|
|
assert(io_result == IO_SUCCESS);
|
|
|
|
/* Open connections to devices and cache the handles */
|
|
io_result = io_dev_open(fip_dev_con, (uintptr_t)NULL,
|
|
&fip_dev_handle);
|
|
assert(io_result == IO_SUCCESS);
|
|
|
|
io_result = io_dev_open(memmap_dev_con, (uintptr_t)NULL,
|
|
&memmap_dev_handle);
|
|
assert(io_result == IO_SUCCESS);
|
|
|
|
/* Ignore improbable errors in release builds */
|
|
(void)io_result;
|
|
}
|
|
|
|
void plat_arm_io_setup(void)
|
|
{
|
|
arm_io_setup();
|
|
}
|
|
|
|
int plat_arm_get_alt_image_source(
|
|
unsigned int image_id __attribute__((unused)),
|
|
uintptr_t *dev_handle __attribute__((unused)),
|
|
uintptr_t *image_spec __attribute__((unused)))
|
|
{
|
|
/* By default do not try an alternative */
|
|
return IO_FAIL;
|
|
}
|
|
|
|
/* Return an IO device handle and specification which can be used to access
|
|
* an image. Use this to enforce platform load policy */
|
|
int plat_get_image_source(unsigned int image_id, uintptr_t *dev_handle,
|
|
uintptr_t *image_spec)
|
|
{
|
|
int result = IO_FAIL;
|
|
const struct plat_io_policy *policy;
|
|
|
|
assert(image_id < ARRAY_SIZE(policies));
|
|
|
|
policy = &policies[image_id];
|
|
result = policy->check(policy->image_spec);
|
|
if (result == IO_SUCCESS) {
|
|
*image_spec = policy->image_spec;
|
|
*dev_handle = *(policy->dev_handle);
|
|
} else {
|
|
VERBOSE("Trying alternative IO\n");
|
|
result = plat_arm_get_alt_image_source(image_id, dev_handle,
|
|
image_spec);
|
|
}
|
|
|
|
return result;
|
|
}
|