mirror of
https://github.com/ARM-software/arm-trusted-firmware.git
synced 2025-09-07 14:51:10 +02:00
Since Trusted OS firmware may have extra images, need to assign new uuid and image id for them. The TBBR chain of trust has been extended to add support for the new images within the existing Trusted OS firmware content certificate. Change-Id: I678dac7ba1137e85c5779b05e0c4331134c10e06 Signed-off-by: Summer Qin <summer.qin@arm.com>
319 lines
6.9 KiB
C
319 lines
6.9 KiB
C
/*
|
|
* Copyright (c) 2015-2017, ARM Limited and Contributors. All rights reserved.
|
|
*
|
|
* SPDX-License-Identifier: BSD-3-Clause
|
|
*/
|
|
#include <assert.h>
|
|
#include <debug.h>
|
|
#include <firmware_image_package.h>
|
|
#include <io_driver.h>
|
|
#include <io_fip.h>
|
|
#include <io_memmap.h>
|
|
#include <io_storage.h>
|
|
#include <platform_def.h>
|
|
#include <string.h>
|
|
#include <utils.h>
|
|
|
|
/* IO devices */
|
|
static const io_dev_connector_t *fip_dev_con;
|
|
static uintptr_t fip_dev_handle;
|
|
static const io_dev_connector_t *memmap_dev_con;
|
|
static uintptr_t memmap_dev_handle;
|
|
|
|
static const io_block_spec_t fip_block_spec = {
|
|
.offset = PLAT_ARM_FIP_BASE,
|
|
.length = PLAT_ARM_FIP_MAX_SIZE
|
|
};
|
|
|
|
static const io_uuid_spec_t bl2_uuid_spec = {
|
|
.uuid = UUID_TRUSTED_BOOT_FIRMWARE_BL2,
|
|
};
|
|
|
|
static const io_uuid_spec_t scp_bl2_uuid_spec = {
|
|
.uuid = UUID_SCP_FIRMWARE_SCP_BL2,
|
|
};
|
|
|
|
static const io_uuid_spec_t bl31_uuid_spec = {
|
|
.uuid = UUID_EL3_RUNTIME_FIRMWARE_BL31,
|
|
};
|
|
|
|
static const io_uuid_spec_t bl32_uuid_spec = {
|
|
.uuid = UUID_SECURE_PAYLOAD_BL32,
|
|
};
|
|
|
|
static const io_uuid_spec_t bl32_extra1_uuid_spec = {
|
|
.uuid = UUID_SECURE_PAYLOAD_BL32_EXTRA1,
|
|
};
|
|
|
|
static const io_uuid_spec_t bl32_extra2_uuid_spec = {
|
|
.uuid = UUID_SECURE_PAYLOAD_BL32_EXTRA2,
|
|
};
|
|
|
|
static const io_uuid_spec_t bl33_uuid_spec = {
|
|
.uuid = UUID_NON_TRUSTED_FIRMWARE_BL33,
|
|
};
|
|
|
|
#if TRUSTED_BOARD_BOOT
|
|
static const io_uuid_spec_t tb_fw_cert_uuid_spec = {
|
|
.uuid = UUID_TRUSTED_BOOT_FW_CERT,
|
|
};
|
|
|
|
static const io_uuid_spec_t trusted_key_cert_uuid_spec = {
|
|
.uuid = UUID_TRUSTED_KEY_CERT,
|
|
};
|
|
|
|
static const io_uuid_spec_t scp_fw_key_cert_uuid_spec = {
|
|
.uuid = UUID_SCP_FW_KEY_CERT,
|
|
};
|
|
|
|
static const io_uuid_spec_t soc_fw_key_cert_uuid_spec = {
|
|
.uuid = UUID_SOC_FW_KEY_CERT,
|
|
};
|
|
|
|
static const io_uuid_spec_t tos_fw_key_cert_uuid_spec = {
|
|
.uuid = UUID_TRUSTED_OS_FW_KEY_CERT,
|
|
};
|
|
|
|
static const io_uuid_spec_t nt_fw_key_cert_uuid_spec = {
|
|
.uuid = UUID_NON_TRUSTED_FW_KEY_CERT,
|
|
};
|
|
|
|
static const io_uuid_spec_t scp_fw_cert_uuid_spec = {
|
|
.uuid = UUID_SCP_FW_CONTENT_CERT,
|
|
};
|
|
|
|
static const io_uuid_spec_t soc_fw_cert_uuid_spec = {
|
|
.uuid = UUID_SOC_FW_CONTENT_CERT,
|
|
};
|
|
|
|
static const io_uuid_spec_t tos_fw_cert_uuid_spec = {
|
|
.uuid = UUID_TRUSTED_OS_FW_CONTENT_CERT,
|
|
};
|
|
|
|
static const io_uuid_spec_t nt_fw_cert_uuid_spec = {
|
|
.uuid = UUID_NON_TRUSTED_FW_CONTENT_CERT,
|
|
};
|
|
#endif /* TRUSTED_BOARD_BOOT */
|
|
|
|
|
|
static int open_fip(const uintptr_t spec);
|
|
static int open_memmap(const uintptr_t spec);
|
|
|
|
struct plat_io_policy {
|
|
uintptr_t *dev_handle;
|
|
uintptr_t image_spec;
|
|
int (*check)(const uintptr_t spec);
|
|
};
|
|
|
|
/* By default, ARM platforms load images from the FIP */
|
|
static const struct plat_io_policy policies[] = {
|
|
[FIP_IMAGE_ID] = {
|
|
&memmap_dev_handle,
|
|
(uintptr_t)&fip_block_spec,
|
|
open_memmap
|
|
},
|
|
[BL2_IMAGE_ID] = {
|
|
&fip_dev_handle,
|
|
(uintptr_t)&bl2_uuid_spec,
|
|
open_fip
|
|
},
|
|
[SCP_BL2_IMAGE_ID] = {
|
|
&fip_dev_handle,
|
|
(uintptr_t)&scp_bl2_uuid_spec,
|
|
open_fip
|
|
},
|
|
[BL31_IMAGE_ID] = {
|
|
&fip_dev_handle,
|
|
(uintptr_t)&bl31_uuid_spec,
|
|
open_fip
|
|
},
|
|
[BL32_IMAGE_ID] = {
|
|
&fip_dev_handle,
|
|
(uintptr_t)&bl32_uuid_spec,
|
|
open_fip
|
|
},
|
|
[BL32_EXTRA1_IMAGE_ID] = {
|
|
&fip_dev_handle,
|
|
(uintptr_t)&bl32_extra1_uuid_spec,
|
|
open_fip
|
|
},
|
|
[BL32_EXTRA2_IMAGE_ID] = {
|
|
&fip_dev_handle,
|
|
(uintptr_t)&bl32_extra2_uuid_spec,
|
|
open_fip
|
|
},
|
|
[BL33_IMAGE_ID] = {
|
|
&fip_dev_handle,
|
|
(uintptr_t)&bl33_uuid_spec,
|
|
open_fip
|
|
},
|
|
#if TRUSTED_BOARD_BOOT
|
|
[TRUSTED_BOOT_FW_CERT_ID] = {
|
|
&fip_dev_handle,
|
|
(uintptr_t)&tb_fw_cert_uuid_spec,
|
|
open_fip
|
|
},
|
|
[TRUSTED_KEY_CERT_ID] = {
|
|
&fip_dev_handle,
|
|
(uintptr_t)&trusted_key_cert_uuid_spec,
|
|
open_fip
|
|
},
|
|
[SCP_FW_KEY_CERT_ID] = {
|
|
&fip_dev_handle,
|
|
(uintptr_t)&scp_fw_key_cert_uuid_spec,
|
|
open_fip
|
|
},
|
|
[SOC_FW_KEY_CERT_ID] = {
|
|
&fip_dev_handle,
|
|
(uintptr_t)&soc_fw_key_cert_uuid_spec,
|
|
open_fip
|
|
},
|
|
[TRUSTED_OS_FW_KEY_CERT_ID] = {
|
|
&fip_dev_handle,
|
|
(uintptr_t)&tos_fw_key_cert_uuid_spec,
|
|
open_fip
|
|
},
|
|
[NON_TRUSTED_FW_KEY_CERT_ID] = {
|
|
&fip_dev_handle,
|
|
(uintptr_t)&nt_fw_key_cert_uuid_spec,
|
|
open_fip
|
|
},
|
|
[SCP_FW_CONTENT_CERT_ID] = {
|
|
&fip_dev_handle,
|
|
(uintptr_t)&scp_fw_cert_uuid_spec,
|
|
open_fip
|
|
},
|
|
[SOC_FW_CONTENT_CERT_ID] = {
|
|
&fip_dev_handle,
|
|
(uintptr_t)&soc_fw_cert_uuid_spec,
|
|
open_fip
|
|
},
|
|
[TRUSTED_OS_FW_CONTENT_CERT_ID] = {
|
|
&fip_dev_handle,
|
|
(uintptr_t)&tos_fw_cert_uuid_spec,
|
|
open_fip
|
|
},
|
|
[NON_TRUSTED_FW_CONTENT_CERT_ID] = {
|
|
&fip_dev_handle,
|
|
(uintptr_t)&nt_fw_cert_uuid_spec,
|
|
open_fip
|
|
},
|
|
#endif /* TRUSTED_BOARD_BOOT */
|
|
};
|
|
|
|
|
|
/* Weak definitions may be overridden in specific ARM standard platform */
|
|
#pragma weak plat_arm_io_setup
|
|
#pragma weak plat_arm_get_alt_image_source
|
|
|
|
|
|
static int open_fip(const uintptr_t spec)
|
|
{
|
|
int result;
|
|
uintptr_t local_image_handle;
|
|
|
|
/* See if a Firmware Image Package is available */
|
|
result = io_dev_init(fip_dev_handle, (uintptr_t)FIP_IMAGE_ID);
|
|
if (result == 0) {
|
|
result = io_open(fip_dev_handle, spec, &local_image_handle);
|
|
if (result == 0) {
|
|
VERBOSE("Using FIP\n");
|
|
io_close(local_image_handle);
|
|
}
|
|
}
|
|
return result;
|
|
}
|
|
|
|
|
|
static int open_memmap(const uintptr_t spec)
|
|
{
|
|
int result;
|
|
uintptr_t local_image_handle;
|
|
|
|
result = io_dev_init(memmap_dev_handle, (uintptr_t)NULL);
|
|
if (result == 0) {
|
|
result = io_open(memmap_dev_handle, spec, &local_image_handle);
|
|
if (result == 0) {
|
|
VERBOSE("Using Memmap\n");
|
|
io_close(local_image_handle);
|
|
}
|
|
}
|
|
return result;
|
|
}
|
|
|
|
|
|
void arm_io_setup(void)
|
|
{
|
|
int io_result;
|
|
|
|
io_result = register_io_dev_fip(&fip_dev_con);
|
|
assert(io_result == 0);
|
|
|
|
io_result = register_io_dev_memmap(&memmap_dev_con);
|
|
assert(io_result == 0);
|
|
|
|
/* Open connections to devices and cache the handles */
|
|
io_result = io_dev_open(fip_dev_con, (uintptr_t)NULL,
|
|
&fip_dev_handle);
|
|
assert(io_result == 0);
|
|
|
|
io_result = io_dev_open(memmap_dev_con, (uintptr_t)NULL,
|
|
&memmap_dev_handle);
|
|
assert(io_result == 0);
|
|
|
|
/* Ignore improbable errors in release builds */
|
|
(void)io_result;
|
|
}
|
|
|
|
void plat_arm_io_setup(void)
|
|
{
|
|
arm_io_setup();
|
|
}
|
|
|
|
int plat_arm_get_alt_image_source(
|
|
unsigned int image_id __unused,
|
|
uintptr_t *dev_handle __unused,
|
|
uintptr_t *image_spec __unused)
|
|
{
|
|
/* By default do not try an alternative */
|
|
return -ENOENT;
|
|
}
|
|
|
|
/* Return an IO device handle and specification which can be used to access
|
|
* an image. Use this to enforce platform load policy */
|
|
int plat_get_image_source(unsigned int image_id, uintptr_t *dev_handle,
|
|
uintptr_t *image_spec)
|
|
{
|
|
int result;
|
|
const struct plat_io_policy *policy;
|
|
|
|
assert(image_id < ARRAY_SIZE(policies));
|
|
|
|
policy = &policies[image_id];
|
|
result = policy->check(policy->image_spec);
|
|
if (result == 0) {
|
|
*image_spec = policy->image_spec;
|
|
*dev_handle = *(policy->dev_handle);
|
|
} else {
|
|
VERBOSE("Trying alternative IO\n");
|
|
result = plat_arm_get_alt_image_source(image_id, dev_handle,
|
|
image_spec);
|
|
}
|
|
|
|
return result;
|
|
}
|
|
|
|
/*
|
|
* See if a Firmware Image Package is available,
|
|
* by checking if TOC is valid or not.
|
|
*/
|
|
int arm_io_is_toc_valid(void)
|
|
{
|
|
int result;
|
|
|
|
result = io_dev_init(fip_dev_handle, (uintptr_t)FIP_IMAGE_ID);
|
|
|
|
return (result == 0);
|
|
}
|
|
|