1*91f16700Schasinglulu /* 2*91f16700Schasinglulu * Copyright (c) 2015-2018, ARM Limited and Contributors. All rights reserved. 3*91f16700Schasinglulu * 4*91f16700Schasinglulu * SPDX-License-Identifier: BSD-3-Clause 5*91f16700Schasinglulu */ 6*91f16700Schasinglulu 7*91f16700Schasinglulu #include <assert.h> 8*91f16700Schasinglulu #include <string.h> 9*91f16700Schasinglulu 10*91f16700Schasinglulu #include <platform_def.h> 11*91f16700Schasinglulu 12*91f16700Schasinglulu #include <common/bl_common.h> 13*91f16700Schasinglulu #include <common/debug.h> 14*91f16700Schasinglulu #include <drivers/io/io_driver.h> 15*91f16700Schasinglulu #include <drivers/io/io_fip.h> 16*91f16700Schasinglulu #include <drivers/io/io_memmap.h> 17*91f16700Schasinglulu #include <tools_share/firmware_image_package.h> 18*91f16700Schasinglulu 19*91f16700Schasinglulu /* Semihosting filenames */ 20*91f16700Schasinglulu #define BL2_IMAGE_NAME "bl2.bin" 21*91f16700Schasinglulu #define BL31_IMAGE_NAME "bl31.bin" 22*91f16700Schasinglulu #define BL32_IMAGE_NAME "bl32.bin" 23*91f16700Schasinglulu #define BL33_IMAGE_NAME "bl33.bin" 24*91f16700Schasinglulu 25*91f16700Schasinglulu #if TRUSTED_BOARD_BOOT 26*91f16700Schasinglulu #define TRUSTED_BOOT_FW_CERT_NAME "tb_fw.crt" 27*91f16700Schasinglulu #define TRUSTED_KEY_CERT_NAME "trusted_key.crt" 28*91f16700Schasinglulu #define SOC_FW_KEY_CERT_NAME "soc_fw_key.crt" 29*91f16700Schasinglulu #define TOS_FW_KEY_CERT_NAME "tos_fw_key.crt" 30*91f16700Schasinglulu #define NT_FW_KEY_CERT_NAME "nt_fw_key.crt" 31*91f16700Schasinglulu #define SOC_FW_CONTENT_CERT_NAME "soc_fw_content.crt" 32*91f16700Schasinglulu #define TOS_FW_CONTENT_CERT_NAME "tos_fw_content.crt" 33*91f16700Schasinglulu #define NT_FW_CONTENT_CERT_NAME "nt_fw_content.crt" 34*91f16700Schasinglulu #endif /* TRUSTED_BOARD_BOOT */ 35*91f16700Schasinglulu 36*91f16700Schasinglulu /* IO devices */ 37*91f16700Schasinglulu static const io_dev_connector_t *fip_dev_con; 38*91f16700Schasinglulu static uintptr_t fip_dev_handle; 39*91f16700Schasinglulu static const io_dev_connector_t *memmap_dev_con; 40*91f16700Schasinglulu static uintptr_t memmap_dev_handle; 41*91f16700Schasinglulu 42*91f16700Schasinglulu static const io_block_spec_t fip_block_spec = { 43*91f16700Schasinglulu .offset = PLAT_RPI3_FIP_BASE, 44*91f16700Schasinglulu .length = PLAT_RPI3_FIP_MAX_SIZE 45*91f16700Schasinglulu }; 46*91f16700Schasinglulu 47*91f16700Schasinglulu static const io_uuid_spec_t bl2_uuid_spec = { 48*91f16700Schasinglulu .uuid = UUID_TRUSTED_BOOT_FIRMWARE_BL2, 49*91f16700Schasinglulu }; 50*91f16700Schasinglulu 51*91f16700Schasinglulu static const io_uuid_spec_t bl31_uuid_spec = { 52*91f16700Schasinglulu .uuid = UUID_EL3_RUNTIME_FIRMWARE_BL31, 53*91f16700Schasinglulu }; 54*91f16700Schasinglulu 55*91f16700Schasinglulu static const io_uuid_spec_t bl32_uuid_spec = { 56*91f16700Schasinglulu .uuid = UUID_SECURE_PAYLOAD_BL32, 57*91f16700Schasinglulu }; 58*91f16700Schasinglulu 59*91f16700Schasinglulu static const io_uuid_spec_t bl32_extra1_uuid_spec = { 60*91f16700Schasinglulu .uuid = UUID_SECURE_PAYLOAD_BL32_EXTRA1, 61*91f16700Schasinglulu }; 62*91f16700Schasinglulu 63*91f16700Schasinglulu static const io_uuid_spec_t bl32_extra2_uuid_spec = { 64*91f16700Schasinglulu .uuid = UUID_SECURE_PAYLOAD_BL32_EXTRA2, 65*91f16700Schasinglulu }; 66*91f16700Schasinglulu 67*91f16700Schasinglulu static const io_uuid_spec_t bl33_uuid_spec = { 68*91f16700Schasinglulu .uuid = UUID_NON_TRUSTED_FIRMWARE_BL33, 69*91f16700Schasinglulu }; 70*91f16700Schasinglulu 71*91f16700Schasinglulu #if TRUSTED_BOARD_BOOT 72*91f16700Schasinglulu static const io_uuid_spec_t tb_fw_cert_uuid_spec = { 73*91f16700Schasinglulu .uuid = UUID_TRUSTED_BOOT_FW_CERT, 74*91f16700Schasinglulu }; 75*91f16700Schasinglulu 76*91f16700Schasinglulu static const io_uuid_spec_t trusted_key_cert_uuid_spec = { 77*91f16700Schasinglulu .uuid = UUID_TRUSTED_KEY_CERT, 78*91f16700Schasinglulu }; 79*91f16700Schasinglulu 80*91f16700Schasinglulu static const io_uuid_spec_t soc_fw_key_cert_uuid_spec = { 81*91f16700Schasinglulu .uuid = UUID_SOC_FW_KEY_CERT, 82*91f16700Schasinglulu }; 83*91f16700Schasinglulu 84*91f16700Schasinglulu static const io_uuid_spec_t tos_fw_key_cert_uuid_spec = { 85*91f16700Schasinglulu .uuid = UUID_TRUSTED_OS_FW_KEY_CERT, 86*91f16700Schasinglulu }; 87*91f16700Schasinglulu 88*91f16700Schasinglulu static const io_uuid_spec_t nt_fw_key_cert_uuid_spec = { 89*91f16700Schasinglulu .uuid = UUID_NON_TRUSTED_FW_KEY_CERT, 90*91f16700Schasinglulu }; 91*91f16700Schasinglulu 92*91f16700Schasinglulu static const io_uuid_spec_t soc_fw_cert_uuid_spec = { 93*91f16700Schasinglulu .uuid = UUID_SOC_FW_CONTENT_CERT, 94*91f16700Schasinglulu }; 95*91f16700Schasinglulu 96*91f16700Schasinglulu static const io_uuid_spec_t tos_fw_cert_uuid_spec = { 97*91f16700Schasinglulu .uuid = UUID_TRUSTED_OS_FW_CONTENT_CERT, 98*91f16700Schasinglulu }; 99*91f16700Schasinglulu 100*91f16700Schasinglulu static const io_uuid_spec_t nt_fw_cert_uuid_spec = { 101*91f16700Schasinglulu .uuid = UUID_NON_TRUSTED_FW_CONTENT_CERT, 102*91f16700Schasinglulu }; 103*91f16700Schasinglulu #endif /* TRUSTED_BOARD_BOOT */ 104*91f16700Schasinglulu 105*91f16700Schasinglulu static int open_fip(const uintptr_t spec); 106*91f16700Schasinglulu static int open_memmap(const uintptr_t spec); 107*91f16700Schasinglulu 108*91f16700Schasinglulu struct plat_io_policy { 109*91f16700Schasinglulu uintptr_t *dev_handle; 110*91f16700Schasinglulu uintptr_t image_spec; 111*91f16700Schasinglulu int (*check)(const uintptr_t spec); 112*91f16700Schasinglulu }; 113*91f16700Schasinglulu 114*91f16700Schasinglulu /* By default, load images from the FIP */ 115*91f16700Schasinglulu static const struct plat_io_policy policies[] = { 116*91f16700Schasinglulu [FIP_IMAGE_ID] = { 117*91f16700Schasinglulu &memmap_dev_handle, 118*91f16700Schasinglulu (uintptr_t)&fip_block_spec, 119*91f16700Schasinglulu open_memmap 120*91f16700Schasinglulu }, 121*91f16700Schasinglulu [BL2_IMAGE_ID] = { 122*91f16700Schasinglulu &fip_dev_handle, 123*91f16700Schasinglulu (uintptr_t)&bl2_uuid_spec, 124*91f16700Schasinglulu open_fip 125*91f16700Schasinglulu }, 126*91f16700Schasinglulu [BL31_IMAGE_ID] = { 127*91f16700Schasinglulu &fip_dev_handle, 128*91f16700Schasinglulu (uintptr_t)&bl31_uuid_spec, 129*91f16700Schasinglulu open_fip 130*91f16700Schasinglulu }, 131*91f16700Schasinglulu [BL32_IMAGE_ID] = { 132*91f16700Schasinglulu &fip_dev_handle, 133*91f16700Schasinglulu (uintptr_t)&bl32_uuid_spec, 134*91f16700Schasinglulu open_fip 135*91f16700Schasinglulu }, 136*91f16700Schasinglulu [BL32_EXTRA1_IMAGE_ID] = { 137*91f16700Schasinglulu &fip_dev_handle, 138*91f16700Schasinglulu (uintptr_t)&bl32_extra1_uuid_spec, 139*91f16700Schasinglulu open_fip 140*91f16700Schasinglulu }, 141*91f16700Schasinglulu [BL32_EXTRA2_IMAGE_ID] = { 142*91f16700Schasinglulu &fip_dev_handle, 143*91f16700Schasinglulu (uintptr_t)&bl32_extra2_uuid_spec, 144*91f16700Schasinglulu open_fip 145*91f16700Schasinglulu }, 146*91f16700Schasinglulu [BL33_IMAGE_ID] = { 147*91f16700Schasinglulu &fip_dev_handle, 148*91f16700Schasinglulu (uintptr_t)&bl33_uuid_spec, 149*91f16700Schasinglulu open_fip 150*91f16700Schasinglulu }, 151*91f16700Schasinglulu #if TRUSTED_BOARD_BOOT 152*91f16700Schasinglulu [TRUSTED_BOOT_FW_CERT_ID] = { 153*91f16700Schasinglulu &fip_dev_handle, 154*91f16700Schasinglulu (uintptr_t)&tb_fw_cert_uuid_spec, 155*91f16700Schasinglulu open_fip 156*91f16700Schasinglulu }, 157*91f16700Schasinglulu [TRUSTED_KEY_CERT_ID] = { 158*91f16700Schasinglulu &fip_dev_handle, 159*91f16700Schasinglulu (uintptr_t)&trusted_key_cert_uuid_spec, 160*91f16700Schasinglulu open_fip 161*91f16700Schasinglulu }, 162*91f16700Schasinglulu [SOC_FW_KEY_CERT_ID] = { 163*91f16700Schasinglulu &fip_dev_handle, 164*91f16700Schasinglulu (uintptr_t)&soc_fw_key_cert_uuid_spec, 165*91f16700Schasinglulu open_fip 166*91f16700Schasinglulu }, 167*91f16700Schasinglulu [TRUSTED_OS_FW_KEY_CERT_ID] = { 168*91f16700Schasinglulu &fip_dev_handle, 169*91f16700Schasinglulu (uintptr_t)&tos_fw_key_cert_uuid_spec, 170*91f16700Schasinglulu open_fip 171*91f16700Schasinglulu }, 172*91f16700Schasinglulu [NON_TRUSTED_FW_KEY_CERT_ID] = { 173*91f16700Schasinglulu &fip_dev_handle, 174*91f16700Schasinglulu (uintptr_t)&nt_fw_key_cert_uuid_spec, 175*91f16700Schasinglulu open_fip 176*91f16700Schasinglulu }, 177*91f16700Schasinglulu [SOC_FW_CONTENT_CERT_ID] = { 178*91f16700Schasinglulu &fip_dev_handle, 179*91f16700Schasinglulu (uintptr_t)&soc_fw_cert_uuid_spec, 180*91f16700Schasinglulu open_fip 181*91f16700Schasinglulu }, 182*91f16700Schasinglulu [TRUSTED_OS_FW_CONTENT_CERT_ID] = { 183*91f16700Schasinglulu &fip_dev_handle, 184*91f16700Schasinglulu (uintptr_t)&tos_fw_cert_uuid_spec, 185*91f16700Schasinglulu open_fip 186*91f16700Schasinglulu }, 187*91f16700Schasinglulu [NON_TRUSTED_FW_CONTENT_CERT_ID] = { 188*91f16700Schasinglulu &fip_dev_handle, 189*91f16700Schasinglulu (uintptr_t)&nt_fw_cert_uuid_spec, 190*91f16700Schasinglulu open_fip 191*91f16700Schasinglulu }, 192*91f16700Schasinglulu #endif /* TRUSTED_BOARD_BOOT */ 193*91f16700Schasinglulu }; 194*91f16700Schasinglulu 195*91f16700Schasinglulu static int open_fip(const uintptr_t spec) 196*91f16700Schasinglulu { 197*91f16700Schasinglulu int result; 198*91f16700Schasinglulu uintptr_t local_image_handle; 199*91f16700Schasinglulu 200*91f16700Schasinglulu /* See if a Firmware Image Package is available */ 201*91f16700Schasinglulu result = io_dev_init(fip_dev_handle, (uintptr_t)FIP_IMAGE_ID); 202*91f16700Schasinglulu if (result == 0) { 203*91f16700Schasinglulu result = io_open(fip_dev_handle, spec, &local_image_handle); 204*91f16700Schasinglulu if (result == 0) { 205*91f16700Schasinglulu VERBOSE("Using FIP\n"); 206*91f16700Schasinglulu io_close(local_image_handle); 207*91f16700Schasinglulu } 208*91f16700Schasinglulu } 209*91f16700Schasinglulu return result; 210*91f16700Schasinglulu } 211*91f16700Schasinglulu 212*91f16700Schasinglulu static int open_memmap(const uintptr_t spec) 213*91f16700Schasinglulu { 214*91f16700Schasinglulu int result; 215*91f16700Schasinglulu uintptr_t local_image_handle; 216*91f16700Schasinglulu 217*91f16700Schasinglulu result = io_dev_init(memmap_dev_handle, (uintptr_t)NULL); 218*91f16700Schasinglulu if (result == 0) { 219*91f16700Schasinglulu result = io_open(memmap_dev_handle, spec, &local_image_handle); 220*91f16700Schasinglulu if (result == 0) { 221*91f16700Schasinglulu VERBOSE("Using Memmap\n"); 222*91f16700Schasinglulu io_close(local_image_handle); 223*91f16700Schasinglulu } 224*91f16700Schasinglulu } 225*91f16700Schasinglulu return result; 226*91f16700Schasinglulu } 227*91f16700Schasinglulu 228*91f16700Schasinglulu void plat_rpi3_io_setup(void) 229*91f16700Schasinglulu { 230*91f16700Schasinglulu int io_result; 231*91f16700Schasinglulu 232*91f16700Schasinglulu io_result = register_io_dev_fip(&fip_dev_con); 233*91f16700Schasinglulu assert(io_result == 0); 234*91f16700Schasinglulu 235*91f16700Schasinglulu io_result = register_io_dev_memmap(&memmap_dev_con); 236*91f16700Schasinglulu assert(io_result == 0); 237*91f16700Schasinglulu 238*91f16700Schasinglulu /* Open connections to devices and cache the handles */ 239*91f16700Schasinglulu io_result = io_dev_open(fip_dev_con, (uintptr_t)NULL, 240*91f16700Schasinglulu &fip_dev_handle); 241*91f16700Schasinglulu assert(io_result == 0); 242*91f16700Schasinglulu 243*91f16700Schasinglulu io_result = io_dev_open(memmap_dev_con, (uintptr_t)NULL, 244*91f16700Schasinglulu &memmap_dev_handle); 245*91f16700Schasinglulu assert(io_result == 0); 246*91f16700Schasinglulu 247*91f16700Schasinglulu /* Ignore improbable errors in release builds */ 248*91f16700Schasinglulu (void)io_result; 249*91f16700Schasinglulu } 250*91f16700Schasinglulu 251*91f16700Schasinglulu /* 252*91f16700Schasinglulu * Return an IO device handle and specification which can be used to access 253*91f16700Schasinglulu * an image. Use this to enforce platform load policy 254*91f16700Schasinglulu */ 255*91f16700Schasinglulu int plat_get_image_source(unsigned int image_id, uintptr_t *dev_handle, 256*91f16700Schasinglulu uintptr_t *image_spec) 257*91f16700Schasinglulu { 258*91f16700Schasinglulu int result; 259*91f16700Schasinglulu const struct plat_io_policy *policy; 260*91f16700Schasinglulu 261*91f16700Schasinglulu assert(image_id < ARRAY_SIZE(policies)); 262*91f16700Schasinglulu 263*91f16700Schasinglulu policy = &policies[image_id]; 264*91f16700Schasinglulu result = policy->check(policy->image_spec); 265*91f16700Schasinglulu if (result == 0) { 266*91f16700Schasinglulu *image_spec = policy->image_spec; 267*91f16700Schasinglulu *dev_handle = *(policy->dev_handle); 268*91f16700Schasinglulu } 269*91f16700Schasinglulu 270*91f16700Schasinglulu return result; 271*91f16700Schasinglulu } 272