mirror of
https://github.com/ARM-software/arm-trusted-firmware.git
synced 2025-04-17 18:14:24 +00:00

Introduces support for the Test Secure Payload (TSP) for AMD-Xilinx Versal platform. TSP is a component for testing and validating secure OS and trusted execution environments. If a BL32 image is present, then there must be a matching Secure- EL1 Payload Dispatcher (SPD) service called TSPD, this service is responsible for Initializing the TSP. During initialization that service must register a function to carry out initialization of BL32 once the runtime services are fully initialized. BL31 invokes such a registered function to initialize BL32 before running BL33. The GICv3 driver is initialized in EL3 and does not need to be initialized again in SEL1 GICv3 driver is initialized in EL3 This is because the S-EL1 can use GIC system registers to manage interrupts and does not need GIC interface base addresses to be configured. The secure code load address is initially being pointed to 0x0 in the handoff parameters, which is different from the default or user-provided load address of 0x60000000. In this case, set up the PC to the requested BL32_BASE address to ensure that the secure code is loaded and executed from the correct location. Change-Id: Ida0fc6467a10bfde8927ff9b3755a83f3e16f068 Signed-off-by: Prasad Kummari <prasad.kummari@amd.com>
236 lines
6.8 KiB
C
236 lines
6.8 KiB
C
/*
|
|
* Copyright (c) 2018-2021, Arm Limited and Contributors. All rights reserved.
|
|
* Copyright (c) 2018-2022, Xilinx, Inc. All rights reserved.
|
|
* Copyright (c) 2022-2023, Advanced Micro Devices, Inc. All rights reserved.
|
|
*
|
|
* SPDX-License-Identifier: BSD-3-Clause
|
|
*/
|
|
|
|
#include <assert.h>
|
|
#include <errno.h>
|
|
|
|
#include <bl31/bl31.h>
|
|
#include <common/bl_common.h>
|
|
#include <common/debug.h>
|
|
#include <lib/mmio.h>
|
|
#include <lib/xlat_tables/xlat_tables_v2.h>
|
|
#include <plat/common/platform.h>
|
|
#include <plat_arm.h>
|
|
#include <plat_console.h>
|
|
|
|
#include <plat_fdt.h>
|
|
#include <plat_private.h>
|
|
#include <plat_startup.h>
|
|
#include "pm_api_sys.h"
|
|
#include "pm_client.h"
|
|
#include <pm_ipi.h>
|
|
#include <versal_def.h>
|
|
|
|
static entry_point_info_t bl32_image_ep_info;
|
|
static entry_point_info_t bl33_image_ep_info;
|
|
|
|
/*
|
|
* Return a pointer to the 'entry_point_info' structure of the next image for
|
|
* the security state specified. BL33 corresponds to the non-secure image type
|
|
* while BL32 corresponds to the secure image type. A NULL pointer is returned
|
|
* if the image does not exist.
|
|
*/
|
|
entry_point_info_t *bl31_plat_get_next_image_ep_info(uint32_t type)
|
|
{
|
|
assert(sec_state_is_valid(type));
|
|
|
|
if (type == NON_SECURE) {
|
|
return &bl33_image_ep_info;
|
|
}
|
|
|
|
return &bl32_image_ep_info;
|
|
}
|
|
|
|
/*
|
|
* Set the build time defaults,if we can't find any config data.
|
|
*/
|
|
static inline void bl31_set_default_config(void)
|
|
{
|
|
bl32_image_ep_info.pc = (uintptr_t)BL32_BASE;
|
|
bl32_image_ep_info.spsr = (uint32_t)arm_get_spsr_for_bl32_entry();
|
|
bl33_image_ep_info.pc = (uintptr_t)plat_get_ns_image_entrypoint();
|
|
bl33_image_ep_info.spsr = (uint32_t)SPSR_64(MODE_EL2, MODE_SP_ELX,
|
|
DISABLE_ALL_EXCEPTIONS);
|
|
}
|
|
|
|
/*
|
|
* Perform any BL31 specific platform actions. Here is an opportunity to copy
|
|
* parameters passed by the calling EL (S-EL1 in BL2 & S-EL3 in BL1) before they
|
|
* are lost (potentially). This needs to be done before the MMU is initialized
|
|
* so that the memory layout can be used while creating page tables.
|
|
*/
|
|
void bl31_early_platform_setup2(u_register_t arg0, u_register_t arg1,
|
|
u_register_t arg2, u_register_t arg3)
|
|
{
|
|
uint64_t tfa_handoff_addr;
|
|
uint32_t payload[PAYLOAD_ARG_CNT], max_size = HANDOFF_PARAMS_MAX_SIZE;
|
|
enum pm_ret_status ret_status;
|
|
uint64_t addr[HANDOFF_PARAMS_MAX_SIZE];
|
|
|
|
setup_console();
|
|
|
|
/* Initialize the platform config for future decision making */
|
|
versal_config_setup();
|
|
|
|
/* Get platform related information */
|
|
board_detection();
|
|
|
|
/*
|
|
* Do initial security configuration to allow DRAM/device access. On
|
|
* Base VERSAL only DRAM security is programmable (via TrustZone), but
|
|
* other platforms might have more programmable security devices
|
|
* present.
|
|
*/
|
|
|
|
/* Populate common information for BL32 and BL33 */
|
|
SET_PARAM_HEAD(&bl32_image_ep_info, PARAM_EP, VERSION_1, 0);
|
|
SET_SECURITY_STATE(bl32_image_ep_info.h.attr, SECURE);
|
|
SET_PARAM_HEAD(&bl33_image_ep_info, PARAM_EP, VERSION_1, 0);
|
|
SET_SECURITY_STATE(bl33_image_ep_info.h.attr, NON_SECURE);
|
|
|
|
PM_PACK_PAYLOAD4(payload, LOADER_MODULE_ID, 1, PM_LOAD_GET_HANDOFF_PARAMS,
|
|
(uintptr_t)addr >> 32U, (uintptr_t)addr, max_size);
|
|
ret_status = pm_ipi_send_sync(primary_proc, payload, NULL, 0);
|
|
if (ret_status == PM_RET_SUCCESS) {
|
|
INFO("BL31: GET_HANDOFF_PARAMS call success=%d\n", ret_status);
|
|
tfa_handoff_addr = (uintptr_t)&addr;
|
|
} else {
|
|
ERROR("BL31: GET_HANDOFF_PARAMS Failed, read tfa_handoff_addr from reg\n");
|
|
tfa_handoff_addr = mmio_read_32(PMC_GLOBAL_GLOB_GEN_STORAGE4);
|
|
}
|
|
|
|
enum xbl_handoff ret = xbl_handover(&bl32_image_ep_info,
|
|
&bl33_image_ep_info,
|
|
tfa_handoff_addr);
|
|
if (ret == XBL_HANDOFF_NO_STRUCT || ret == XBL_HANDOFF_INVAL_STRUCT) {
|
|
bl31_set_default_config();
|
|
} else if (ret == XBL_HANDOFF_TOO_MANY_PARTS) {
|
|
ERROR("BL31: Error too many partitions %u\n", ret);
|
|
} else if (ret != XBL_HANDOFF_SUCCESS) {
|
|
panic();
|
|
} else {
|
|
INFO("BL31: PLM to TF-A handover success %u\n", ret);
|
|
|
|
/*
|
|
* The BL32 load address is indicated as 0x0 in the handoff
|
|
* parameters, which is different from the default/user-provided
|
|
* load address of 0x60000000 but the flags are correctly
|
|
* configured. Consequently, in this scenario, set the PC
|
|
* to the requested BL32_BASE address.
|
|
*/
|
|
|
|
/* TODO: Remove the following check once this is fixed from PLM */
|
|
if (bl32_image_ep_info.pc == 0 && bl32_image_ep_info.spsr != 0) {
|
|
bl32_image_ep_info.pc = (uintptr_t)BL32_BASE;
|
|
}
|
|
}
|
|
|
|
NOTICE("BL31: Secure code at 0x%lx\n", bl32_image_ep_info.pc);
|
|
NOTICE("BL31: Non secure code at 0x%lx\n", bl33_image_ep_info.pc);
|
|
}
|
|
|
|
static versal_intr_info_type_el3_t type_el3_interrupt_table[MAX_INTR_EL3];
|
|
|
|
int request_intr_type_el3(uint32_t id, interrupt_type_handler_t handler)
|
|
{
|
|
static uint32_t index;
|
|
uint32_t i;
|
|
|
|
/* Validate 'handler' and 'id' parameters */
|
|
if (handler == NULL || index >= MAX_INTR_EL3) {
|
|
return -EINVAL;
|
|
}
|
|
|
|
/* Check if a handler has already been registered */
|
|
for (i = 0; i < index; i++) {
|
|
if (id == type_el3_interrupt_table[i].id) {
|
|
return -EALREADY;
|
|
}
|
|
}
|
|
|
|
type_el3_interrupt_table[index].id = id;
|
|
type_el3_interrupt_table[index].handler = handler;
|
|
|
|
index++;
|
|
|
|
return 0;
|
|
}
|
|
|
|
static uint64_t rdo_el3_interrupt_handler(uint32_t id, uint32_t flags,
|
|
void *handle, void *cookie)
|
|
{
|
|
uint32_t intr_id;
|
|
uint32_t i;
|
|
interrupt_type_handler_t handler = NULL;
|
|
|
|
intr_id = plat_ic_get_pending_interrupt_id();
|
|
|
|
for (i = 0; i < MAX_INTR_EL3; i++) {
|
|
if (intr_id == type_el3_interrupt_table[i].id) {
|
|
handler = type_el3_interrupt_table[i].handler;
|
|
}
|
|
}
|
|
|
|
if (handler != NULL) {
|
|
return handler(intr_id, flags, handle, cookie);
|
|
}
|
|
|
|
return 0;
|
|
}
|
|
|
|
void bl31_platform_setup(void)
|
|
{
|
|
prepare_dtb();
|
|
|
|
/* Initialize the gic cpu and distributor interfaces */
|
|
plat_versal_gic_driver_init();
|
|
plat_versal_gic_init();
|
|
}
|
|
|
|
void bl31_plat_runtime_setup(void)
|
|
{
|
|
uint64_t flags = 0;
|
|
int32_t rc;
|
|
|
|
set_interrupt_rm_flag(flags, NON_SECURE);
|
|
rc = register_interrupt_type_handler(INTR_TYPE_EL3,
|
|
rdo_el3_interrupt_handler, flags);
|
|
if (rc != 0) {
|
|
panic();
|
|
}
|
|
}
|
|
|
|
/*
|
|
* Perform the very early platform specific architectural setup here.
|
|
*/
|
|
void bl31_plat_arch_setup(void)
|
|
{
|
|
plat_arm_interconnect_init();
|
|
plat_arm_interconnect_enter_coherency();
|
|
|
|
const mmap_region_t bl_regions[] = {
|
|
#if (defined(XILINX_OF_BOARD_DTB_ADDR) && !IS_TFA_IN_OCM(BL31_BASE) && \
|
|
(!defined(PLAT_XLAT_TABLES_DYNAMIC)))
|
|
MAP_REGION_FLAT(XILINX_OF_BOARD_DTB_ADDR, XILINX_OF_BOARD_DTB_MAX_SIZE,
|
|
MT_MEMORY | MT_RW | MT_NS),
|
|
#endif
|
|
MAP_REGION_FLAT(BL31_BASE, BL31_END - BL31_BASE,
|
|
MT_MEMORY | MT_RW | MT_SECURE),
|
|
MAP_REGION_FLAT(BL_CODE_BASE, BL_CODE_END - BL_CODE_BASE,
|
|
MT_CODE | MT_SECURE),
|
|
MAP_REGION_FLAT(BL_RO_DATA_BASE, BL_RO_DATA_END - BL_RO_DATA_BASE,
|
|
MT_RO_DATA | MT_SECURE),
|
|
MAP_REGION_FLAT(BL_COHERENT_RAM_BASE,
|
|
BL_COHERENT_RAM_END - BL_COHERENT_RAM_BASE,
|
|
MT_DEVICE | MT_RW | MT_SECURE),
|
|
{0}
|
|
};
|
|
|
|
setup_page_tables(bl_regions, plat_get_mmap());
|
|
enable_mmu(0);
|
|
}
|