mirror of
https://github.com/ARM-software/arm-trusted-firmware.git
synced 2025-05-02 08:49:28 +00:00

OP-TEE may have extra images to be loaded. Load them one by one and do the parsing. In this patch, ARM TF need to load up to 3 images for OP-TEE: header, pager and pages images. Header image is the info about optee os and images. Pager image include pager code and data. Paged image include the paging parts using virtual memory. Signed-off-by: Jens Wiklander <jens.wiklander@linaro.org>
382 lines
8.6 KiB
C
382 lines
8.6 KiB
C
/*
|
|
* Copyright (c) 2015-2016, ARM Limited and Contributors. All rights reserved.
|
|
*
|
|
* SPDX-License-Identifier: BSD-3-Clause
|
|
*/
|
|
|
|
#include <assert.h>
|
|
#include <bl_common.h> /* For ARRAY_SIZE */
|
|
#include <debug.h>
|
|
#include <firmware_image_package.h>
|
|
#include <io_driver.h>
|
|
#include <io_fip.h>
|
|
#include <io_memmap.h>
|
|
#include <io_semihosting.h>
|
|
#include <io_storage.h>
|
|
#include <platform_def.h>
|
|
#include <semihosting.h>
|
|
#include <string.h>
|
|
|
|
/* Semihosting filenames */
|
|
#define BL2_IMAGE_NAME "bl2.bin"
|
|
#define BL31_IMAGE_NAME "bl31.bin"
|
|
#define BL32_IMAGE_NAME "bl32.bin"
|
|
#define BL32_EXTRA1_IMAGE_NAME "bl32_extra1.bin"
|
|
#define BL32_EXTRA2_IMAGE_NAME "bl32_extra2.bin"
|
|
#define BL33_IMAGE_NAME "bl33.bin"
|
|
|
|
#if TRUSTED_BOARD_BOOT
|
|
#define BL2_CERT_NAME "bl2.crt"
|
|
#define TRUSTED_KEY_CERT_NAME "trusted_key.crt"
|
|
#define BL31_KEY_CERT_NAME "bl31_key.crt"
|
|
#define BL32_KEY_CERT_NAME "bl32_key.crt"
|
|
#define BL33_KEY_CERT_NAME "bl33_key.crt"
|
|
#define BL31_CERT_NAME "bl31.crt"
|
|
#define BL32_CERT_NAME "bl32.crt"
|
|
#define BL33_CERT_NAME "bl33.crt"
|
|
#endif /* TRUSTED_BOARD_BOOT */
|
|
|
|
|
|
|
|
/* IO devices */
|
|
static const io_dev_connector_t *fip_dev_con;
|
|
static uintptr_t fip_dev_handle;
|
|
static const io_dev_connector_t *memmap_dev_con;
|
|
static uintptr_t memmap_dev_handle;
|
|
static const io_dev_connector_t *sh_dev_con;
|
|
static uintptr_t sh_dev_handle;
|
|
|
|
static const io_block_spec_t fip_block_spec = {
|
|
.offset = PLAT_QEMU_FIP_BASE,
|
|
.length = PLAT_QEMU_FIP_MAX_SIZE
|
|
};
|
|
|
|
static const io_uuid_spec_t bl2_uuid_spec = {
|
|
.uuid = UUID_TRUSTED_BOOT_FIRMWARE_BL2,
|
|
};
|
|
|
|
static const io_uuid_spec_t bl31_uuid_spec = {
|
|
.uuid = UUID_EL3_RUNTIME_FIRMWARE_BL31,
|
|
};
|
|
|
|
static const io_uuid_spec_t bl32_uuid_spec = {
|
|
.uuid = UUID_SECURE_PAYLOAD_BL32,
|
|
};
|
|
|
|
static const io_uuid_spec_t bl32_extra1_uuid_spec = {
|
|
.uuid = UUID_SECURE_PAYLOAD_BL32_EXTRA1,
|
|
};
|
|
|
|
static const io_uuid_spec_t bl32_extra2_uuid_spec = {
|
|
.uuid = UUID_SECURE_PAYLOAD_BL32_EXTRA2,
|
|
};
|
|
|
|
static const io_uuid_spec_t bl33_uuid_spec = {
|
|
.uuid = UUID_NON_TRUSTED_FIRMWARE_BL33,
|
|
};
|
|
|
|
#if TRUSTED_BOARD_BOOT
|
|
static const io_uuid_spec_t bl2_cert_uuid_spec = {
|
|
.uuid = UUID_TRUSTED_BOOT_FIRMWARE_BL2_CERT,
|
|
};
|
|
|
|
static const io_uuid_spec_t trusted_key_cert_uuid_spec = {
|
|
.uuid = UUID_TRUSTED_KEY_CERT,
|
|
};
|
|
|
|
static const io_uuid_spec_t bl31_key_cert_uuid_spec = {
|
|
.uuid = UUID_EL3_RUNTIME_FIRMWARE_BL31_KEY_CERT,
|
|
};
|
|
|
|
static const io_uuid_spec_t bl32_key_cert_uuid_spec = {
|
|
.uuid = UUID_SECURE_PAYLOAD_BL32_KEY_CERT,
|
|
};
|
|
|
|
static const io_uuid_spec_t bl33_key_cert_uuid_spec = {
|
|
.uuid = UUID_NON_TRUSTED_FIRMWARE_BL33_KEY_CERT,
|
|
};
|
|
|
|
static const io_uuid_spec_t bl31_cert_uuid_spec = {
|
|
.uuid = UUID_EL3_RUNTIME_FIRMWARE_BL31_CERT,
|
|
};
|
|
|
|
static const io_uuid_spec_t bl32_cert_uuid_spec = {
|
|
.uuid = UUID_SECURE_PAYLOAD_BL32_CERT,
|
|
};
|
|
|
|
static const io_uuid_spec_t bl33_cert_uuid_spec = {
|
|
.uuid = UUID_NON_TRUSTED_FIRMWARE_BL33_CERT,
|
|
};
|
|
#endif /* TRUSTED_BOARD_BOOT */
|
|
|
|
static const io_file_spec_t sh_file_spec[] = {
|
|
[BL2_IMAGE_ID] = {
|
|
.path = BL2_IMAGE_NAME,
|
|
.mode = FOPEN_MODE_RB
|
|
},
|
|
[BL31_IMAGE_ID] = {
|
|
.path = BL31_IMAGE_NAME,
|
|
.mode = FOPEN_MODE_RB
|
|
},
|
|
[BL32_IMAGE_ID] = {
|
|
.path = BL32_IMAGE_NAME,
|
|
.mode = FOPEN_MODE_RB
|
|
},
|
|
[BL32_EXTRA1_IMAGE_ID] = {
|
|
.path = BL32_EXTRA1_IMAGE_NAME,
|
|
.mode = FOPEN_MODE_RB
|
|
},
|
|
[BL32_EXTRA2_IMAGE_ID] = {
|
|
.path = BL32_EXTRA2_IMAGE_NAME,
|
|
.mode = FOPEN_MODE_RB
|
|
},
|
|
[BL33_IMAGE_ID] = {
|
|
.path = BL33_IMAGE_NAME,
|
|
.mode = FOPEN_MODE_RB
|
|
},
|
|
#if TRUSTED_BOARD_BOOT
|
|
[BL2_CERT_ID] = {
|
|
.path = BL2_CERT_NAME,
|
|
.mode = FOPEN_MODE_RB
|
|
},
|
|
[TRUSTED_KEY_CERT_ID] = {
|
|
.path = TRUSTED_KEY_CERT_NAME,
|
|
.mode = FOPEN_MODE_RB
|
|
},
|
|
[BL31_KEY_CERT_ID] = {
|
|
.path = BL31_KEY_CERT_NAME,
|
|
.mode = FOPEN_MODE_RB
|
|
},
|
|
[BL32_KEY_CERT_ID] = {
|
|
.path = BL32_KEY_CERT_NAME,
|
|
.mode = FOPEN_MODE_RB
|
|
},
|
|
[BL33_KEY_CERT_ID] = {
|
|
.path = BL33_KEY_CERT_NAME,
|
|
.mode = FOPEN_MODE_RB
|
|
},
|
|
[BL31_CERT_ID] = {
|
|
.path = BL31_CERT_NAME,
|
|
.mode = FOPEN_MODE_RB
|
|
},
|
|
[BL32_CERT_ID] = {
|
|
.path = BL32_CERT_NAME,
|
|
.mode = FOPEN_MODE_RB
|
|
},
|
|
[BL33_CERT_ID] = {
|
|
.path = BL33_CERT_NAME,
|
|
.mode = FOPEN_MODE_RB
|
|
},
|
|
#endif /* TRUSTED_BOARD_BOOT */
|
|
};
|
|
|
|
|
|
|
|
static int open_fip(const uintptr_t spec);
|
|
static int open_memmap(const uintptr_t spec);
|
|
|
|
struct plat_io_policy {
|
|
uintptr_t *dev_handle;
|
|
uintptr_t image_spec;
|
|
int (*check)(const uintptr_t spec);
|
|
};
|
|
|
|
/* By default, ARM platforms load images from the FIP */
|
|
static const struct plat_io_policy policies[] = {
|
|
[FIP_IMAGE_ID] = {
|
|
&memmap_dev_handle,
|
|
(uintptr_t)&fip_block_spec,
|
|
open_memmap
|
|
},
|
|
[BL2_IMAGE_ID] = {
|
|
&fip_dev_handle,
|
|
(uintptr_t)&bl2_uuid_spec,
|
|
open_fip
|
|
},
|
|
[BL31_IMAGE_ID] = {
|
|
&fip_dev_handle,
|
|
(uintptr_t)&bl31_uuid_spec,
|
|
open_fip
|
|
},
|
|
[BL32_IMAGE_ID] = {
|
|
&fip_dev_handle,
|
|
(uintptr_t)&bl32_uuid_spec,
|
|
open_fip
|
|
},
|
|
[BL32_EXTRA1_IMAGE_ID] = {
|
|
&fip_dev_handle,
|
|
(uintptr_t)&bl32_extra1_uuid_spec,
|
|
open_fip
|
|
},
|
|
[BL32_EXTRA2_IMAGE_ID] = {
|
|
&fip_dev_handle,
|
|
(uintptr_t)&bl32_extra2_uuid_spec,
|
|
open_fip
|
|
},
|
|
[BL33_IMAGE_ID] = {
|
|
&fip_dev_handle,
|
|
(uintptr_t)&bl33_uuid_spec,
|
|
open_fip
|
|
},
|
|
#if TRUSTED_BOARD_BOOT
|
|
[BL2_CERT_ID] = {
|
|
&fip_dev_handle,
|
|
(uintptr_t)&bl2_cert_uuid_spec,
|
|
open_fip
|
|
},
|
|
[TRUSTED_KEY_CERT_ID] = {
|
|
&fip_dev_handle,
|
|
(uintptr_t)&trusted_key_cert_uuid_spec,
|
|
open_fip
|
|
},
|
|
[BL31_KEY_CERT_ID] = {
|
|
&fip_dev_handle,
|
|
(uintptr_t)&bl31_key_cert_uuid_spec,
|
|
open_fip
|
|
},
|
|
[BL32_KEY_CERT_ID] = {
|
|
&fip_dev_handle,
|
|
(uintptr_t)&bl32_key_cert_uuid_spec,
|
|
open_fip
|
|
},
|
|
[BL33_KEY_CERT_ID] = {
|
|
&fip_dev_handle,
|
|
(uintptr_t)&bl33_key_cert_uuid_spec,
|
|
open_fip
|
|
},
|
|
[BL31_CERT_ID] = {
|
|
&fip_dev_handle,
|
|
(uintptr_t)&bl31_cert_uuid_spec,
|
|
open_fip
|
|
},
|
|
[BL32_CERT_ID] = {
|
|
&fip_dev_handle,
|
|
(uintptr_t)&bl32_cert_uuid_spec,
|
|
open_fip
|
|
},
|
|
[BL33_CERT_ID] = {
|
|
&fip_dev_handle,
|
|
(uintptr_t)&bl33_cert_uuid_spec,
|
|
open_fip
|
|
},
|
|
#endif /* TRUSTED_BOARD_BOOT */
|
|
};
|
|
|
|
static int open_fip(const uintptr_t spec)
|
|
{
|
|
int result;
|
|
uintptr_t local_image_handle;
|
|
|
|
/* See if a Firmware Image Package is available */
|
|
result = io_dev_init(fip_dev_handle, (uintptr_t)FIP_IMAGE_ID);
|
|
if (result == 0) {
|
|
result = io_open(fip_dev_handle, spec, &local_image_handle);
|
|
if (result == 0) {
|
|
VERBOSE("Using FIP\n");
|
|
io_close(local_image_handle);
|
|
}
|
|
}
|
|
return result;
|
|
}
|
|
|
|
static int open_memmap(const uintptr_t spec)
|
|
{
|
|
int result;
|
|
uintptr_t local_image_handle;
|
|
|
|
result = io_dev_init(memmap_dev_handle, (uintptr_t)NULL);
|
|
if (result == 0) {
|
|
result = io_open(memmap_dev_handle, spec, &local_image_handle);
|
|
if (result == 0) {
|
|
VERBOSE("Using Memmap\n");
|
|
io_close(local_image_handle);
|
|
}
|
|
}
|
|
return result;
|
|
}
|
|
|
|
static int open_semihosting(const uintptr_t spec)
|
|
{
|
|
int result;
|
|
uintptr_t local_image_handle;
|
|
|
|
/* See if the file exists on semi-hosting.*/
|
|
result = io_dev_init(sh_dev_handle, (uintptr_t)NULL);
|
|
if (result == 0) {
|
|
result = io_open(sh_dev_handle, spec, &local_image_handle);
|
|
if (result == 0) {
|
|
VERBOSE("Using Semi-hosting IO\n");
|
|
io_close(local_image_handle);
|
|
}
|
|
}
|
|
return result;
|
|
}
|
|
|
|
void plat_qemu_io_setup(void)
|
|
{
|
|
int io_result;
|
|
|
|
io_result = register_io_dev_fip(&fip_dev_con);
|
|
assert(io_result == 0);
|
|
|
|
io_result = register_io_dev_memmap(&memmap_dev_con);
|
|
assert(io_result == 0);
|
|
|
|
/* Open connections to devices and cache the handles */
|
|
io_result = io_dev_open(fip_dev_con, (uintptr_t)NULL,
|
|
&fip_dev_handle);
|
|
assert(io_result == 0);
|
|
|
|
io_result = io_dev_open(memmap_dev_con, (uintptr_t)NULL,
|
|
&memmap_dev_handle);
|
|
assert(io_result == 0);
|
|
|
|
/* Register the additional IO devices on this platform */
|
|
io_result = register_io_dev_sh(&sh_dev_con);
|
|
assert(io_result == 0);
|
|
|
|
/* Open connections to devices and cache the handles */
|
|
io_result = io_dev_open(sh_dev_con, (uintptr_t)NULL, &sh_dev_handle);
|
|
assert(io_result == 0);
|
|
|
|
/* Ignore improbable errors in release builds */
|
|
(void)io_result;
|
|
}
|
|
|
|
static int get_alt_image_source(unsigned int image_id, uintptr_t *dev_handle,
|
|
uintptr_t *image_spec)
|
|
{
|
|
int result = open_semihosting((const uintptr_t)&sh_file_spec[image_id]);
|
|
|
|
if (result == 0) {
|
|
*dev_handle = sh_dev_handle;
|
|
*image_spec = (uintptr_t)&sh_file_spec[image_id];
|
|
}
|
|
|
|
return result;
|
|
}
|
|
|
|
/*
|
|
* Return an IO device handle and specification which can be used to access
|
|
* an image. Use this to enforce platform load policy
|
|
*/
|
|
int plat_get_image_source(unsigned int image_id, uintptr_t *dev_handle,
|
|
uintptr_t *image_spec)
|
|
{
|
|
int result;
|
|
const struct plat_io_policy *policy;
|
|
|
|
assert(image_id < ARRAY_SIZE(policies));
|
|
|
|
policy = &policies[image_id];
|
|
result = policy->check(policy->image_spec);
|
|
if (result == 0) {
|
|
*image_spec = policy->image_spec;
|
|
*dev_handle = *(policy->dev_handle);
|
|
} else {
|
|
VERBOSE("Trying alternative IO\n");
|
|
result = get_alt_image_source(image_id, dev_handle, image_spec);
|
|
}
|
|
|
|
return result;
|
|
}
|