2013-10-25 09:08:21 +01:00
|
|
|
/*
|
2016-02-01 11:04:46 +00:00
|
|
|
* Copyright (c) 2013-2016, ARM Limited and Contributors. All rights reserved.
|
2013-10-25 09:08:21 +01:00
|
|
|
*
|
|
|
|
|
* Redistribution and use in source and binary forms, with or without
|
|
|
|
|
* modification, are permitted provided that the following conditions are met:
|
|
|
|
|
*
|
|
|
|
|
* Redistributions of source code must retain the above copyright notice, this
|
|
|
|
|
* list of conditions and the following disclaimer.
|
|
|
|
|
*
|
|
|
|
|
* Redistributions in binary form must reproduce the above copyright notice,
|
|
|
|
|
* this list of conditions and the following disclaimer in the documentation
|
|
|
|
|
* and/or other materials provided with the distribution.
|
|
|
|
|
*
|
|
|
|
|
* Neither the name of ARM nor the names of its contributors may be used
|
|
|
|
|
* to endorse or promote products derived from this software without specific
|
|
|
|
|
* prior written permission.
|
|
|
|
|
*
|
|
|
|
|
* THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
|
|
|
|
|
* AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
|
|
|
|
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
|
|
|
|
|
* ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE
|
|
|
|
|
* LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
|
|
|
|
* CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
|
|
|
|
* SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
|
|
|
|
|
* INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
|
|
|
|
|
* CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
|
|
|
|
|
* ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
|
|
|
|
|
* POSSIBILITY OF SUCH DAMAGE.
|
|
|
|
|
*/
|
|
|
|
|
|
|
|
|
|
#ifndef __BL_COMMON_H__
|
|
|
|
|
#define __BL_COMMON_H__
|
|
|
|
|
|
2014-04-15 18:08:08 +01:00
|
|
|
#define SECURE 0x0
|
|
|
|
|
#define NON_SECURE 0x1
|
2014-06-05 09:45:36 +01:00
|
|
|
#define sec_state_is_valid(s) (((s) == SECURE) || ((s) == NON_SECURE))
|
2013-10-25 09:08:21 +01:00
|
|
|
|
|
|
|
|
#define UP 1
|
|
|
|
|
#define DOWN 0
|
|
|
|
|
|
|
|
|
|
/*******************************************************************************
|
2014-06-24 14:02:34 +01:00
|
|
|
* Constants to identify the location of a memory region in a given memory
|
|
|
|
|
* layout.
|
|
|
|
|
******************************************************************************/
|
|
|
|
|
#define TOP 0x1
|
|
|
|
|
#define BOTTOM !TOP
|
2013-10-25 09:08:21 +01:00
|
|
|
|
2014-05-15 18:27:15 +01:00
|
|
|
/*******************************************************************************
|
|
|
|
|
* Constants that allow assembler code to access members of and the
|
2014-04-15 18:08:08 +01:00
|
|
|
* 'entry_point_info' structure at their correct offsets.
|
2014-05-15 18:27:15 +01:00
|
|
|
******************************************************************************/
|
2014-04-15 18:08:08 +01:00
|
|
|
#define ENTRY_POINT_INFO_PC_OFFSET 0x08
|
|
|
|
|
#define ENTRY_POINT_INFO_ARGS_OFFSET 0x18
|
2013-12-02 15:41:25 +00:00
|
|
|
|
Add descriptor based image management support in BL1
As of now BL1 loads and execute BL2 based on hard coded information
provided in BL1. But due to addition of support for upcoming Firmware
Update feature, BL1 now require more flexible approach to load and
run different images using information provided by the platform.
This patch adds new mechanism to load and execute images based on
platform provided image id's. BL1 now queries the platform to fetch
the image id of the next image to be loaded and executed. In order
to achieve this, a new struct image_desc_t was added which holds the
information about images, such as: ep_info and image_info.
This patch introduces following platform porting functions:
unsigned int bl1_plat_get_next_image_id(void);
This is used to identify the next image to be loaded
and executed by BL1.
struct image_desc *bl1_plat_get_image_desc(unsigned int image_id);
This is used to retrieve the image_desc for given image_id.
void bl1_plat_set_ep_info(unsigned int image_id,
struct entry_point_info *ep_info);
This function allows platforms to update ep_info for given
image_id.
The plat_bl1_common.c file provides default weak implementations of
all above functions, the `bl1_plat_get_image_desc()` always return
BL2 image descriptor, the `bl1_plat_get_next_image_id()` always return
BL2 image ID and `bl1_plat_set_ep_info()` is empty and just returns.
These functions gets compiled into all BL1 platforms by default.
Platform setup in BL1, using `bl1_platform_setup()`, is now done
_after_ the initialization of authentication module. This change
provides the opportunity to use authentication while doing the
platform setup in BL1.
In order to store secure/non-secure context, BL31 uses percpu_data[]
to store context pointer for each core. In case of BL1 only the
primary CPU will be active hence percpu_data[] is not required to
store the context pointer.
This patch introduce bl1_cpu_context[] and bl1_cpu_context_ptr[] to
store the context and context pointers respectively. It also also
re-defines cm_get_context() and cm_set_context() for BL1 in
bl1/bl1_context_mgmt.c.
BL1 now follows the BL31 pattern of using SP_EL0 for the C runtime
environment, to support resuming execution from a previously saved
context.
NOTE: THE `bl1_plat_set_bl2_ep_info()` PLATFORM PORTING FUNCTION IS
NO LONGER CALLED BY BL1 COMMON CODE. PLATFORMS THAT OVERRIDE
THIS FUNCTION MAY NEED TO IMPLEMENT `bl1_plat_set_ep_info()`
INSTEAD TO MAINTAIN EXISTING BEHAVIOUR.
Change-Id: Ieee4c124b951c2e9bc1c1013fa2073221195d881
2015-10-09 18:06:13 +01:00
|
|
|
/* The following are used to set/get image attributes. */
|
|
|
|
|
#define PARAM_EP_SECURITY_MASK (0x1)
|
|
|
|
|
|
2014-04-15 18:08:08 +01:00
|
|
|
#define GET_SECURITY_STATE(x) (x & PARAM_EP_SECURITY_MASK)
|
|
|
|
|
#define SET_SECURITY_STATE(x, security) \
|
|
|
|
|
((x) = ((x) & ~PARAM_EP_SECURITY_MASK) | (security))
|
|
|
|
|
|
Add descriptor based image management support in BL1
As of now BL1 loads and execute BL2 based on hard coded information
provided in BL1. But due to addition of support for upcoming Firmware
Update feature, BL1 now require more flexible approach to load and
run different images using information provided by the platform.
This patch adds new mechanism to load and execute images based on
platform provided image id's. BL1 now queries the platform to fetch
the image id of the next image to be loaded and executed. In order
to achieve this, a new struct image_desc_t was added which holds the
information about images, such as: ep_info and image_info.
This patch introduces following platform porting functions:
unsigned int bl1_plat_get_next_image_id(void);
This is used to identify the next image to be loaded
and executed by BL1.
struct image_desc *bl1_plat_get_image_desc(unsigned int image_id);
This is used to retrieve the image_desc for given image_id.
void bl1_plat_set_ep_info(unsigned int image_id,
struct entry_point_info *ep_info);
This function allows platforms to update ep_info for given
image_id.
The plat_bl1_common.c file provides default weak implementations of
all above functions, the `bl1_plat_get_image_desc()` always return
BL2 image descriptor, the `bl1_plat_get_next_image_id()` always return
BL2 image ID and `bl1_plat_set_ep_info()` is empty and just returns.
These functions gets compiled into all BL1 platforms by default.
Platform setup in BL1, using `bl1_platform_setup()`, is now done
_after_ the initialization of authentication module. This change
provides the opportunity to use authentication while doing the
platform setup in BL1.
In order to store secure/non-secure context, BL31 uses percpu_data[]
to store context pointer for each core. In case of BL1 only the
primary CPU will be active hence percpu_data[] is not required to
store the context pointer.
This patch introduce bl1_cpu_context[] and bl1_cpu_context_ptr[] to
store the context and context pointers respectively. It also also
re-defines cm_get_context() and cm_set_context() for BL1 in
bl1/bl1_context_mgmt.c.
BL1 now follows the BL31 pattern of using SP_EL0 for the C runtime
environment, to support resuming execution from a previously saved
context.
NOTE: THE `bl1_plat_set_bl2_ep_info()` PLATFORM PORTING FUNCTION IS
NO LONGER CALLED BY BL1 COMMON CODE. PLATFORMS THAT OVERRIDE
THIS FUNCTION MAY NEED TO IMPLEMENT `bl1_plat_set_ep_info()`
INSTEAD TO MAINTAIN EXISTING BEHAVIOUR.
Change-Id: Ieee4c124b951c2e9bc1c1013fa2073221195d881
2015-10-09 18:06:13 +01:00
|
|
|
|
|
|
|
|
/*
|
|
|
|
|
* The following are used for image state attributes.
|
|
|
|
|
* Image can only be in one of the following state.
|
|
|
|
|
*/
|
|
|
|
|
#define IMAGE_STATE_RESET 0
|
|
|
|
|
#define IMAGE_STATE_COPIED 1
|
|
|
|
|
#define IMAGE_STATE_COPYING 2
|
|
|
|
|
#define IMAGE_STATE_AUTHENTICATED 3
|
|
|
|
|
#define IMAGE_STATE_EXECUTED 4
|
|
|
|
|
#define IMAGE_STATE_INTERRUPTED 5
|
|
|
|
|
|
2014-06-04 21:10:52 +01:00
|
|
|
#define EP_EE_MASK 0x2
|
|
|
|
|
#define EP_EE_LITTLE 0x0
|
|
|
|
|
#define EP_EE_BIG 0x2
|
|
|
|
|
#define EP_GET_EE(x) (x & EP_EE_MASK)
|
|
|
|
|
#define EP_SET_EE(x, ee) ((x) = ((x) & ~EP_EE_MASK) | (ee))
|
|
|
|
|
|
|
|
|
|
#define EP_ST_MASK 0x4
|
|
|
|
|
#define EP_ST_DISABLE 0x0
|
|
|
|
|
#define EP_ST_ENABLE 0x4
|
|
|
|
|
#define EP_GET_ST(x) (x & EP_ST_MASK)
|
|
|
|
|
#define EP_SET_ST(x, ee) ((x) = ((x) & ~EP_ST_MASK) | (ee))
|
|
|
|
|
|
2016-02-01 11:04:46 +00:00
|
|
|
#define EP_EXE_MASK 0x8
|
|
|
|
|
#define NON_EXECUTABLE 0x0
|
|
|
|
|
#define EXECUTABLE 0x8
|
|
|
|
|
#define EP_GET_EXE(x) (x & EP_EXE_MASK)
|
|
|
|
|
#define EP_SET_EXE(x, ee) ((x) = ((x) & ~EP_EXE_MASK) | (ee))
|
|
|
|
|
|
|
|
|
|
#define PARAM_EP 0x01
|
|
|
|
|
#define PARAM_IMAGE_BINARY 0x02
|
|
|
|
|
#define PARAM_BL31 0x03
|
2014-04-15 18:08:08 +01:00
|
|
|
|
2016-02-01 11:04:46 +00:00
|
|
|
#define VERSION_1 0x01
|
2014-04-09 13:14:54 +01:00
|
|
|
|
Add descriptor based image management support in BL1
As of now BL1 loads and execute BL2 based on hard coded information
provided in BL1. But due to addition of support for upcoming Firmware
Update feature, BL1 now require more flexible approach to load and
run different images using information provided by the platform.
This patch adds new mechanism to load and execute images based on
platform provided image id's. BL1 now queries the platform to fetch
the image id of the next image to be loaded and executed. In order
to achieve this, a new struct image_desc_t was added which holds the
information about images, such as: ep_info and image_info.
This patch introduces following platform porting functions:
unsigned int bl1_plat_get_next_image_id(void);
This is used to identify the next image to be loaded
and executed by BL1.
struct image_desc *bl1_plat_get_image_desc(unsigned int image_id);
This is used to retrieve the image_desc for given image_id.
void bl1_plat_set_ep_info(unsigned int image_id,
struct entry_point_info *ep_info);
This function allows platforms to update ep_info for given
image_id.
The plat_bl1_common.c file provides default weak implementations of
all above functions, the `bl1_plat_get_image_desc()` always return
BL2 image descriptor, the `bl1_plat_get_next_image_id()` always return
BL2 image ID and `bl1_plat_set_ep_info()` is empty and just returns.
These functions gets compiled into all BL1 platforms by default.
Platform setup in BL1, using `bl1_platform_setup()`, is now done
_after_ the initialization of authentication module. This change
provides the opportunity to use authentication while doing the
platform setup in BL1.
In order to store secure/non-secure context, BL31 uses percpu_data[]
to store context pointer for each core. In case of BL1 only the
primary CPU will be active hence percpu_data[] is not required to
store the context pointer.
This patch introduce bl1_cpu_context[] and bl1_cpu_context_ptr[] to
store the context and context pointers respectively. It also also
re-defines cm_get_context() and cm_set_context() for BL1 in
bl1/bl1_context_mgmt.c.
BL1 now follows the BL31 pattern of using SP_EL0 for the C runtime
environment, to support resuming execution from a previously saved
context.
NOTE: THE `bl1_plat_set_bl2_ep_info()` PLATFORM PORTING FUNCTION IS
NO LONGER CALLED BY BL1 COMMON CODE. PLATFORMS THAT OVERRIDE
THIS FUNCTION MAY NEED TO IMPLEMENT `bl1_plat_set_ep_info()`
INSTEAD TO MAINTAIN EXISTING BEHAVIOUR.
Change-Id: Ieee4c124b951c2e9bc1c1013fa2073221195d881
2015-10-09 18:06:13 +01:00
|
|
|
#define INVALID_IMAGE_ID (0xFFFFFFFF)
|
|
|
|
|
|
2014-04-15 18:08:08 +01:00
|
|
|
#define SET_PARAM_HEAD(_p, _type, _ver, _attr) do { \
|
|
|
|
|
(_p)->h.type = (uint8_t)(_type); \
|
|
|
|
|
(_p)->h.version = (uint8_t)(_ver); \
|
|
|
|
|
(_p)->h.size = (uint16_t)sizeof(*_p); \
|
|
|
|
|
(_p)->h.attr = (uint32_t)(_attr) ; \
|
|
|
|
|
} while (0)
|
|
|
|
|
|
2016-02-01 11:04:46 +00:00
|
|
|
/* Following is used for populating structure members statically. */
|
|
|
|
|
#define SET_STATIC_PARAM_HEAD(_p, _type, _ver, _p_type, _attr) \
|
|
|
|
|
._p.h.type = (uint8_t)(_type), \
|
|
|
|
|
._p.h.version = (uint8_t)(_ver), \
|
|
|
|
|
._p.h.size = (uint16_t)sizeof(_p_type), \
|
|
|
|
|
._p.h.attr = (uint32_t)(_attr)
|
|
|
|
|
|
|
|
|
|
|
2015-10-02 17:56:48 +01:00
|
|
|
/*******************************************************************************
|
|
|
|
|
* Constants to indicate type of exception to the common exception handler.
|
|
|
|
|
******************************************************************************/
|
|
|
|
|
#define SYNC_EXCEPTION_SP_EL0 0x0
|
|
|
|
|
#define IRQ_SP_EL0 0x1
|
|
|
|
|
#define FIQ_SP_EL0 0x2
|
|
|
|
|
#define SERROR_SP_EL0 0x3
|
|
|
|
|
#define SYNC_EXCEPTION_SP_ELX 0x4
|
|
|
|
|
#define IRQ_SP_ELX 0x5
|
|
|
|
|
#define FIQ_SP_ELX 0x6
|
|
|
|
|
#define SERROR_SP_ELX 0x7
|
|
|
|
|
#define SYNC_EXCEPTION_AARCH64 0x8
|
|
|
|
|
#define IRQ_AARCH64 0x9
|
|
|
|
|
#define FIQ_AARCH64 0xa
|
|
|
|
|
#define SERROR_AARCH64 0xb
|
|
|
|
|
#define SYNC_EXCEPTION_AARCH32 0xc
|
|
|
|
|
#define IRQ_AARCH32 0xd
|
|
|
|
|
#define FIQ_AARCH32 0xe
|
|
|
|
|
#define SERROR_AARCH32 0xf
|
|
|
|
|
|
2014-04-15 18:08:08 +01:00
|
|
|
#ifndef __ASSEMBLY__
|
2014-04-09 13:14:54 +01:00
|
|
|
#include <cdefs.h> /* For __dead2 */
|
2014-05-15 18:27:15 +01:00
|
|
|
#include <cassert.h>
|
2014-04-15 18:08:08 +01:00
|
|
|
#include <stdint.h>
|
2014-06-24 14:02:34 +01:00
|
|
|
#include <stddef.h>
|
2016-07-05 09:55:03 +01:00
|
|
|
#include <utils.h> /* To retain compatibility */
|
2015-03-04 10:34:27 +00:00
|
|
|
|
2015-04-27 11:49:22 +01:00
|
|
|
/*
|
|
|
|
|
* Declarations of linker defined symbols to help determine memory layout of
|
|
|
|
|
* BL images
|
|
|
|
|
*/
|
Introduce SEPARATE_CODE_AND_RODATA build flag
At the moment, all BL images share a similar memory layout: they start
with their code section, followed by their read-only data section.
The two sections are contiguous in memory. Therefore, the end of the
code section and the beginning of the read-only data one might share
a memory page. This forces both to be mapped with the same memory
attributes. As the code needs to be executable, this means that the
read-only data stored on the same memory page as the code are
executable as well. This could potentially be exploited as part of
a security attack.
This patch introduces a new build flag called
SEPARATE_CODE_AND_RODATA, which isolates the code and read-only data
on separate memory pages. This in turn allows independent control of
the access permissions for the code and read-only data.
This has an impact on memory footprint, as padding bytes need to be
introduced between the code and read-only data to ensure the
segragation of the two. To limit the memory cost, the memory layout
of the read-only section has been changed in this case.
- When SEPARATE_CODE_AND_RODATA=0, the layout is unchanged, i.e.
the read-only section still looks like this (padding omitted):
| ... |
+-------------------+
| Exception vectors |
+-------------------+
| Read-only data |
+-------------------+
| Code |
+-------------------+ BLx_BASE
In this case, the linker script provides the limits of the whole
read-only section.
- When SEPARATE_CODE_AND_RODATA=1, the exception vectors and
read-only data are swapped, such that the code and exception
vectors are contiguous, followed by the read-only data. This
gives the following new layout (padding omitted):
| ... |
+-------------------+
| Read-only data |
+-------------------+
| Exception vectors |
+-------------------+
| Code |
+-------------------+ BLx_BASE
In this case, the linker script now exports 2 sets of addresses
instead: the limits of the code and the limits of the read-only
data. Refer to the Firmware Design guide for more details. This
provides platform code with a finer-grained view of the image
layout and allows it to map these 2 regions with the appropriate
access permissions.
Note that SEPARATE_CODE_AND_RODATA applies to all BL images.
Change-Id: I936cf80164f6b66b6ad52b8edacadc532c935a49
2016-07-08 14:37:40 +01:00
|
|
|
#if SEPARATE_CODE_AND_RODATA
|
|
|
|
|
extern unsigned long __TEXT_START__;
|
|
|
|
|
extern unsigned long __TEXT_END__;
|
|
|
|
|
extern unsigned long __RODATA_START__;
|
|
|
|
|
extern unsigned long __RODATA_END__;
|
|
|
|
|
#else
|
2015-04-27 11:49:22 +01:00
|
|
|
extern unsigned long __RO_START__;
|
|
|
|
|
extern unsigned long __RO_END__;
|
Introduce SEPARATE_CODE_AND_RODATA build flag
At the moment, all BL images share a similar memory layout: they start
with their code section, followed by their read-only data section.
The two sections are contiguous in memory. Therefore, the end of the
code section and the beginning of the read-only data one might share
a memory page. This forces both to be mapped with the same memory
attributes. As the code needs to be executable, this means that the
read-only data stored on the same memory page as the code are
executable as well. This could potentially be exploited as part of
a security attack.
This patch introduces a new build flag called
SEPARATE_CODE_AND_RODATA, which isolates the code and read-only data
on separate memory pages. This in turn allows independent control of
the access permissions for the code and read-only data.
This has an impact on memory footprint, as padding bytes need to be
introduced between the code and read-only data to ensure the
segragation of the two. To limit the memory cost, the memory layout
of the read-only section has been changed in this case.
- When SEPARATE_CODE_AND_RODATA=0, the layout is unchanged, i.e.
the read-only section still looks like this (padding omitted):
| ... |
+-------------------+
| Exception vectors |
+-------------------+
| Read-only data |
+-------------------+
| Code |
+-------------------+ BLx_BASE
In this case, the linker script provides the limits of the whole
read-only section.
- When SEPARATE_CODE_AND_RODATA=1, the exception vectors and
read-only data are swapped, such that the code and exception
vectors are contiguous, followed by the read-only data. This
gives the following new layout (padding omitted):
| ... |
+-------------------+
| Read-only data |
+-------------------+
| Exception vectors |
+-------------------+
| Code |
+-------------------+ BLx_BASE
In this case, the linker script now exports 2 sets of addresses
instead: the limits of the code and the limits of the read-only
data. Refer to the Firmware Design guide for more details. This
provides platform code with a finer-grained view of the image
layout and allows it to map these 2 regions with the appropriate
access permissions.
Note that SEPARATE_CODE_AND_RODATA applies to all BL images.
Change-Id: I936cf80164f6b66b6ad52b8edacadc532c935a49
2016-07-08 14:37:40 +01:00
|
|
|
#endif
|
|
|
|
|
|
2015-04-27 11:49:22 +01:00
|
|
|
#if IMAGE_BL2
|
|
|
|
|
extern unsigned long __BL2_END__;
|
2015-10-14 15:27:24 +01:00
|
|
|
#elif IMAGE_BL2U
|
|
|
|
|
extern unsigned long __BL2U_END__;
|
2015-04-27 11:49:22 +01:00
|
|
|
#elif IMAGE_BL31
|
|
|
|
|
extern unsigned long __BL31_END__;
|
|
|
|
|
#elif IMAGE_BL32
|
|
|
|
|
extern unsigned long __BL32_END__;
|
|
|
|
|
#endif /* IMAGE_BLX */
|
|
|
|
|
|
|
|
|
|
#if USE_COHERENT_MEM
|
|
|
|
|
extern unsigned long __COHERENT_RAM_START__;
|
|
|
|
|
extern unsigned long __COHERENT_RAM_END__;
|
|
|
|
|
#endif
|
|
|
|
|
|
|
|
|
|
|
2013-10-25 09:08:21 +01:00
|
|
|
/*******************************************************************************
|
|
|
|
|
* Structure used for telling the next BL how much of a particular type of
|
|
|
|
|
* memory is available for its use and how much is already used.
|
|
|
|
|
******************************************************************************/
|
2014-04-10 15:37:22 +01:00
|
|
|
typedef struct meminfo {
|
2014-06-24 14:02:34 +01:00
|
|
|
uint64_t total_base;
|
|
|
|
|
size_t total_size;
|
|
|
|
|
uint64_t free_base;
|
|
|
|
|
size_t free_size;
|
2014-04-10 15:37:22 +01:00
|
|
|
} meminfo_t;
|
2013-10-25 09:08:21 +01:00
|
|
|
|
2014-04-10 15:37:22 +01:00
|
|
|
typedef struct aapcs64_params {
|
2013-10-25 09:08:21 +01:00
|
|
|
unsigned long arg0;
|
|
|
|
|
unsigned long arg1;
|
|
|
|
|
unsigned long arg2;
|
|
|
|
|
unsigned long arg3;
|
|
|
|
|
unsigned long arg4;
|
|
|
|
|
unsigned long arg5;
|
|
|
|
|
unsigned long arg6;
|
|
|
|
|
unsigned long arg7;
|
2014-04-10 15:37:22 +01:00
|
|
|
} aapcs64_params_t;
|
2013-10-25 09:08:21 +01:00
|
|
|
|
2014-04-15 18:08:08 +01:00
|
|
|
/***************************************************************************
|
|
|
|
|
* This structure provides version information and the size of the
|
|
|
|
|
* structure, attributes for the structure it represents
|
|
|
|
|
***************************************************************************/
|
|
|
|
|
typedef struct param_header {
|
|
|
|
|
uint8_t type; /* type of the structure */
|
|
|
|
|
uint8_t version; /* version of this structure */
|
|
|
|
|
uint16_t size; /* size of this structure in bytes */
|
|
|
|
|
uint32_t attr; /* attributes: unused bits SBZ */
|
|
|
|
|
} param_header_t;
|
|
|
|
|
|
|
|
|
|
/*****************************************************************************
|
|
|
|
|
* This structure represents the superset of information needed while
|
|
|
|
|
* switching exception levels. The only two mechanisms to do so are
|
|
|
|
|
* ERET & SMC. Security state is indicated using bit zero of header
|
|
|
|
|
* attribute
|
2016-01-12 10:30:59 +00:00
|
|
|
* NOTE: BL1 expects entrypoint followed by spsr at an offset from the start
|
|
|
|
|
* of this structure defined by the macro `ENTRY_POINT_INFO_PC_OFFSET` while
|
|
|
|
|
* processing SMC to jump to BL31.
|
2014-04-15 18:08:08 +01:00
|
|
|
*****************************************************************************/
|
|
|
|
|
typedef struct entry_point_info {
|
|
|
|
|
param_header_t h;
|
|
|
|
|
uintptr_t pc;
|
|
|
|
|
uint32_t spsr;
|
2014-04-10 15:37:22 +01:00
|
|
|
aapcs64_params_t args;
|
2014-04-15 18:08:08 +01:00
|
|
|
} entry_point_info_t;
|
|
|
|
|
|
|
|
|
|
/*****************************************************************************
|
|
|
|
|
* Image info binary provides information from the image loader that
|
|
|
|
|
* can be used by the firmware to manage available trusted RAM.
|
|
|
|
|
* More advanced firmware image formats can provide additional
|
|
|
|
|
* information that enables optimization or greater flexibility in the
|
|
|
|
|
* common firmware code
|
|
|
|
|
*****************************************************************************/
|
|
|
|
|
typedef struct image_info {
|
|
|
|
|
param_header_t h;
|
|
|
|
|
uintptr_t image_base; /* physical address of base of image */
|
|
|
|
|
uint32_t image_size; /* bytes read from image file */
|
|
|
|
|
} image_info_t;
|
2013-10-25 09:08:21 +01:00
|
|
|
|
Add descriptor based image management support in BL1
As of now BL1 loads and execute BL2 based on hard coded information
provided in BL1. But due to addition of support for upcoming Firmware
Update feature, BL1 now require more flexible approach to load and
run different images using information provided by the platform.
This patch adds new mechanism to load and execute images based on
platform provided image id's. BL1 now queries the platform to fetch
the image id of the next image to be loaded and executed. In order
to achieve this, a new struct image_desc_t was added which holds the
information about images, such as: ep_info and image_info.
This patch introduces following platform porting functions:
unsigned int bl1_plat_get_next_image_id(void);
This is used to identify the next image to be loaded
and executed by BL1.
struct image_desc *bl1_plat_get_image_desc(unsigned int image_id);
This is used to retrieve the image_desc for given image_id.
void bl1_plat_set_ep_info(unsigned int image_id,
struct entry_point_info *ep_info);
This function allows platforms to update ep_info for given
image_id.
The plat_bl1_common.c file provides default weak implementations of
all above functions, the `bl1_plat_get_image_desc()` always return
BL2 image descriptor, the `bl1_plat_get_next_image_id()` always return
BL2 image ID and `bl1_plat_set_ep_info()` is empty and just returns.
These functions gets compiled into all BL1 platforms by default.
Platform setup in BL1, using `bl1_platform_setup()`, is now done
_after_ the initialization of authentication module. This change
provides the opportunity to use authentication while doing the
platform setup in BL1.
In order to store secure/non-secure context, BL31 uses percpu_data[]
to store context pointer for each core. In case of BL1 only the
primary CPU will be active hence percpu_data[] is not required to
store the context pointer.
This patch introduce bl1_cpu_context[] and bl1_cpu_context_ptr[] to
store the context and context pointers respectively. It also also
re-defines cm_get_context() and cm_set_context() for BL1 in
bl1/bl1_context_mgmt.c.
BL1 now follows the BL31 pattern of using SP_EL0 for the C runtime
environment, to support resuming execution from a previously saved
context.
NOTE: THE `bl1_plat_set_bl2_ep_info()` PLATFORM PORTING FUNCTION IS
NO LONGER CALLED BY BL1 COMMON CODE. PLATFORMS THAT OVERRIDE
THIS FUNCTION MAY NEED TO IMPLEMENT `bl1_plat_set_ep_info()`
INSTEAD TO MAINTAIN EXISTING BEHAVIOUR.
Change-Id: Ieee4c124b951c2e9bc1c1013fa2073221195d881
2015-10-09 18:06:13 +01:00
|
|
|
/*****************************************************************************
|
|
|
|
|
* The image descriptor struct definition.
|
|
|
|
|
*****************************************************************************/
|
|
|
|
|
typedef struct image_desc {
|
|
|
|
|
/* Contains unique image id for the image. */
|
|
|
|
|
unsigned int image_id;
|
|
|
|
|
/*
|
|
|
|
|
* This member contains Image state information.
|
|
|
|
|
* Refer IMAGE_STATE_XXX defined above.
|
|
|
|
|
*/
|
|
|
|
|
unsigned int state;
|
2016-02-01 11:04:46 +00:00
|
|
|
uint32_t copied_size; /* image size copied in blocks */
|
2016-01-12 10:30:59 +00:00
|
|
|
image_info_t image_info;
|
|
|
|
|
entry_point_info_t ep_info;
|
Add descriptor based image management support in BL1
As of now BL1 loads and execute BL2 based on hard coded information
provided in BL1. But due to addition of support for upcoming Firmware
Update feature, BL1 now require more flexible approach to load and
run different images using information provided by the platform.
This patch adds new mechanism to load and execute images based on
platform provided image id's. BL1 now queries the platform to fetch
the image id of the next image to be loaded and executed. In order
to achieve this, a new struct image_desc_t was added which holds the
information about images, such as: ep_info and image_info.
This patch introduces following platform porting functions:
unsigned int bl1_plat_get_next_image_id(void);
This is used to identify the next image to be loaded
and executed by BL1.
struct image_desc *bl1_plat_get_image_desc(unsigned int image_id);
This is used to retrieve the image_desc for given image_id.
void bl1_plat_set_ep_info(unsigned int image_id,
struct entry_point_info *ep_info);
This function allows platforms to update ep_info for given
image_id.
The plat_bl1_common.c file provides default weak implementations of
all above functions, the `bl1_plat_get_image_desc()` always return
BL2 image descriptor, the `bl1_plat_get_next_image_id()` always return
BL2 image ID and `bl1_plat_set_ep_info()` is empty and just returns.
These functions gets compiled into all BL1 platforms by default.
Platform setup in BL1, using `bl1_platform_setup()`, is now done
_after_ the initialization of authentication module. This change
provides the opportunity to use authentication while doing the
platform setup in BL1.
In order to store secure/non-secure context, BL31 uses percpu_data[]
to store context pointer for each core. In case of BL1 only the
primary CPU will be active hence percpu_data[] is not required to
store the context pointer.
This patch introduce bl1_cpu_context[] and bl1_cpu_context_ptr[] to
store the context and context pointers respectively. It also also
re-defines cm_get_context() and cm_set_context() for BL1 in
bl1/bl1_context_mgmt.c.
BL1 now follows the BL31 pattern of using SP_EL0 for the C runtime
environment, to support resuming execution from a previously saved
context.
NOTE: THE `bl1_plat_set_bl2_ep_info()` PLATFORM PORTING FUNCTION IS
NO LONGER CALLED BY BL1 COMMON CODE. PLATFORMS THAT OVERRIDE
THIS FUNCTION MAY NEED TO IMPLEMENT `bl1_plat_set_ep_info()`
INSTEAD TO MAINTAIN EXISTING BEHAVIOUR.
Change-Id: Ieee4c124b951c2e9bc1c1013fa2073221195d881
2015-10-09 18:06:13 +01:00
|
|
|
} image_desc_t;
|
|
|
|
|
|
2014-02-19 17:18:23 +00:00
|
|
|
/*******************************************************************************
|
|
|
|
|
* This structure represents the superset of information that can be passed to
|
|
|
|
|
* BL31 e.g. while passing control to it from BL2. The BL32 parameters will be
|
2014-04-15 18:08:08 +01:00
|
|
|
* populated only if BL2 detects its presence. A pointer to a structure of this
|
2015-12-14 09:35:25 +00:00
|
|
|
* type should be passed in X0 to BL31's cold boot entrypoint.
|
2014-04-15 18:08:08 +01:00
|
|
|
*
|
2015-12-14 09:35:25 +00:00
|
|
|
* Use of this structure and the X0 parameter is not mandatory: the BL31
|
2014-04-15 18:08:08 +01:00
|
|
|
* platform code can use other mechanisms to provide the necessary information
|
2015-12-14 09:35:25 +00:00
|
|
|
* about BL32 and BL33 to the common and SPD code.
|
2014-04-15 18:08:08 +01:00
|
|
|
*
|
2015-12-14 09:35:25 +00:00
|
|
|
* BL31 image information is mandatory if this structure is used. If either of
|
|
|
|
|
* the optional BL32 and BL33 image information is not provided, this is
|
2014-04-15 18:08:08 +01:00
|
|
|
* indicated by the respective image_info pointers being zero.
|
2014-02-19 17:18:23 +00:00
|
|
|
******************************************************************************/
|
2014-04-15 18:08:08 +01:00
|
|
|
typedef struct bl31_params {
|
|
|
|
|
param_header_t h;
|
|
|
|
|
image_info_t *bl31_image_info;
|
|
|
|
|
entry_point_info_t *bl32_ep_info;
|
|
|
|
|
image_info_t *bl32_image_info;
|
|
|
|
|
entry_point_info_t *bl33_ep_info;
|
|
|
|
|
image_info_t *bl33_image_info;
|
|
|
|
|
} bl31_params_t;
|
|
|
|
|
|
|
|
|
|
|
2014-05-15 18:27:15 +01:00
|
|
|
/*
|
2014-04-15 18:08:08 +01:00
|
|
|
* Compile time assertions related to the 'entry_point_info' structure to
|
2014-05-15 18:27:15 +01:00
|
|
|
* ensure that the assembler and the compiler view of the offsets of
|
|
|
|
|
* the structure members is the same.
|
|
|
|
|
*/
|
2014-04-15 18:08:08 +01:00
|
|
|
CASSERT(ENTRY_POINT_INFO_PC_OFFSET ==
|
|
|
|
|
__builtin_offsetof(entry_point_info_t, pc), \
|
|
|
|
|
assert_BL31_pc_offset_mismatch);
|
2014-05-15 18:27:15 +01:00
|
|
|
|
2014-04-15 18:08:08 +01:00
|
|
|
CASSERT(ENTRY_POINT_INFO_ARGS_OFFSET == \
|
|
|
|
|
__builtin_offsetof(entry_point_info_t, args), \
|
2014-05-15 18:27:15 +01:00
|
|
|
assert_BL31_args_offset_mismatch);
|
|
|
|
|
|
2014-04-15 18:08:08 +01:00
|
|
|
CASSERT(sizeof(unsigned long) ==
|
|
|
|
|
__builtin_offsetof(entry_point_info_t, spsr) - \
|
|
|
|
|
__builtin_offsetof(entry_point_info_t, pc), \
|
2014-05-15 18:27:15 +01:00
|
|
|
assert_entrypoint_and_spsr_should_be_adjacent);
|
|
|
|
|
|
2013-10-25 09:08:21 +01:00
|
|
|
/*******************************************************************************
|
|
|
|
|
* Function & variable prototypes
|
|
|
|
|
******************************************************************************/
|
2014-05-14 12:38:32 +01:00
|
|
|
unsigned long page_align(unsigned long, unsigned);
|
2015-04-13 17:36:19 +01:00
|
|
|
unsigned long image_size(unsigned int image_id);
|
2014-06-24 14:02:34 +01:00
|
|
|
int load_image(meminfo_t *mem_layout,
|
2015-04-13 17:36:19 +01:00
|
|
|
unsigned int image_id,
|
2015-05-19 11:54:12 +01:00
|
|
|
uintptr_t image_base,
|
2014-06-24 14:02:34 +01:00
|
|
|
image_info_t *image_data,
|
|
|
|
|
entry_point_info_t *entry_point_info);
|
2015-05-19 11:54:12 +01:00
|
|
|
int load_auth_image(meminfo_t *mem_layout,
|
|
|
|
|
unsigned int image_name,
|
|
|
|
|
uintptr_t image_base,
|
|
|
|
|
image_info_t *image_data,
|
|
|
|
|
entry_point_info_t *entry_point_info);
|
2014-02-17 12:18:24 +00:00
|
|
|
extern const char build_message[];
|
2014-06-30 11:41:46 +01:00
|
|
|
extern const char version_string[];
|
2013-10-25 09:08:21 +01:00
|
|
|
|
2014-06-24 14:02:34 +01:00
|
|
|
void reserve_mem(uint64_t *free_base, size_t *free_size,
|
|
|
|
|
uint64_t addr, size_t size);
|
|
|
|
|
|
2015-09-28 17:03:06 +01:00
|
|
|
void print_entry_point_info(const entry_point_info_t *ep_info);
|
|
|
|
|
|
2013-10-25 09:08:21 +01:00
|
|
|
#endif /*__ASSEMBLY__*/
|
|
|
|
|
|
|
|
|
|
#endif /* __BL_COMMON_H__ */
|
