feat(spmc): add FF-A secure partition manager core
This patch introduces the core support for enabling an SPMC in EL3 as per the FF-A spec. The current implemented functionality is targeted to enable initialization of the SPMC itself and initial support for bringing up a single S-EL1 SP. This includes initialization of the SPMC's internal state, parsing of an SP's manifest, preparing the cpu contexts and appropriate system registers for the Secure Partition. The spmc_smc_handler is the main handler for all incoming SMCs to the SPMC, FF-A ABI handlers and functionality will be implemented in subsequent patches. Signed-off-by: Marc Bonnici <marc.bonnici@arm.com> Change-Id: Ib33c240b91e54cbd018a69fec880d02adfbe12b9
This commit is contained in:
parent
70d986ddbb
commit
5096aeb2ba
|
@ -1,5 +1,5 @@
|
||||||
/*
|
/*
|
||||||
* Copyright (c) 2020-2021, Arm Limited. All rights reserved.
|
* Copyright (c) 2020-2022, Arm Limited. All rights reserved.
|
||||||
*
|
*
|
||||||
* SPDX-License-Identifier: BSD-3-Clause
|
* SPDX-License-Identifier: BSD-3-Clause
|
||||||
*/
|
*/
|
||||||
|
@ -7,6 +7,8 @@
|
||||||
#ifndef FFA_SVC_H
|
#ifndef FFA_SVC_H
|
||||||
#define FFA_SVC_H
|
#define FFA_SVC_H
|
||||||
|
|
||||||
|
#include <stdbool.h>
|
||||||
|
|
||||||
#include <lib/smccc.h>
|
#include <lib/smccc.h>
|
||||||
#include <lib/utils_def.h>
|
#include <lib/utils_def.h>
|
||||||
#include <tools_share/uuid.h>
|
#include <tools_share/uuid.h>
|
||||||
|
@ -175,6 +177,15 @@
|
||||||
*/
|
*/
|
||||||
#define FFA_ENDPOINT_ID_MAX U(1 << 16)
|
#define FFA_ENDPOINT_ID_MAX U(1 << 16)
|
||||||
|
|
||||||
|
/*
|
||||||
|
* Reserve endpoint id for the SPMD.
|
||||||
|
*/
|
||||||
|
#define SPMD_DIRECT_MSG_ENDPOINT_ID U(FFA_ENDPOINT_ID_MAX - 1)
|
||||||
|
|
||||||
|
/* Mask and shift to check valid secure FF-A Endpoint ID. */
|
||||||
|
#define SPMC_SECURE_ID_MASK U(1)
|
||||||
|
#define SPMC_SECURE_ID_SHIFT U(15)
|
||||||
|
|
||||||
/*
|
/*
|
||||||
* Mask for source and destination endpoint id in
|
* Mask for source and destination endpoint id in
|
||||||
* a direct message request/response.
|
* a direct message request/response.
|
||||||
|
@ -209,4 +220,24 @@ static inline uint16_t ffa_endpoint_source(unsigned int ep)
|
||||||
FFA_DIRECT_MSG_ENDPOINT_ID_MASK;
|
FFA_DIRECT_MSG_ENDPOINT_ID_MASK;
|
||||||
}
|
}
|
||||||
|
|
||||||
|
/******************************************************************************
|
||||||
|
* FF-A helper functions to determine partition ID world.
|
||||||
|
*****************************************************************************/
|
||||||
|
|
||||||
|
/*
|
||||||
|
* Determine if provided ID is in the secure world.
|
||||||
|
*/
|
||||||
|
static inline bool ffa_is_secure_world_id(uint16_t id)
|
||||||
|
{
|
||||||
|
return ((id >> SPMC_SECURE_ID_SHIFT) & SPMC_SECURE_ID_MASK) == 1;
|
||||||
|
}
|
||||||
|
|
||||||
|
/*
|
||||||
|
* Determine if provided ID is in the normal world.
|
||||||
|
*/
|
||||||
|
static inline bool ffa_is_normal_world_id(uint16_t id)
|
||||||
|
{
|
||||||
|
return !ffa_is_secure_world_id(id);
|
||||||
|
}
|
||||||
|
|
||||||
#endif /* FFA_SVC_H */
|
#endif /* FFA_SVC_H */
|
||||||
|
|
|
@ -0,0 +1,38 @@
|
||||||
|
/*
|
||||||
|
* Copyright (c) 2022, ARM Limited and Contributors. All rights reserved.
|
||||||
|
*
|
||||||
|
* SPDX-License-Identifier: BSD-3-Clause
|
||||||
|
*/
|
||||||
|
|
||||||
|
#ifndef SPMC_SVC_H
|
||||||
|
#define SPMC_SVC_H
|
||||||
|
|
||||||
|
#ifndef __ASSEMBLER__
|
||||||
|
#include <stdint.h>
|
||||||
|
|
||||||
|
#include <lib/utils_def.h>
|
||||||
|
#include <services/ffa_svc.h>
|
||||||
|
|
||||||
|
int spmc_setup(void);
|
||||||
|
void *spmc_get_config_addr(void);
|
||||||
|
|
||||||
|
void spmc_set_config_addr(uintptr_t soc_fw_config);
|
||||||
|
|
||||||
|
uint64_t spmc_smc_handler(uint32_t smc_fid,
|
||||||
|
bool secure_origin,
|
||||||
|
uint64_t x1,
|
||||||
|
uint64_t x2,
|
||||||
|
uint64_t x3,
|
||||||
|
uint64_t x4,
|
||||||
|
void *cookie,
|
||||||
|
void *handle,
|
||||||
|
uint64_t flags);
|
||||||
|
|
||||||
|
static inline bool is_spmc_at_el3(void)
|
||||||
|
{
|
||||||
|
return SPMC_AT_EL3 == 1;
|
||||||
|
}
|
||||||
|
|
||||||
|
#endif /* __ASSEMBLER__ */
|
||||||
|
|
||||||
|
#endif /* SPMC_SVC_H */
|
|
@ -0,0 +1,185 @@
|
||||||
|
/*
|
||||||
|
* Copyright (c) 2022, ARM Limited and Contributors. All rights reserved.
|
||||||
|
*
|
||||||
|
* SPDX-License-Identifier: BSD-3-Clause
|
||||||
|
*/
|
||||||
|
|
||||||
|
#ifndef SPMC_H
|
||||||
|
#define SPMC_H
|
||||||
|
|
||||||
|
#include <stdint.h>
|
||||||
|
|
||||||
|
#include <lib/psci/psci.h>
|
||||||
|
#include <lib/spinlock.h>
|
||||||
|
#include "spm_common.h"
|
||||||
|
|
||||||
|
/*
|
||||||
|
* Ranges of FF-A IDs for Normal world and Secure world components. The
|
||||||
|
* convention matches that used by other SPMCs i.e. Hafnium and OP-TEE.
|
||||||
|
*/
|
||||||
|
#define FFA_NWD_ID_BASE 0x0
|
||||||
|
#define FFA_NWD_ID_LIMIT 0x7FFF
|
||||||
|
#define FFA_SWD_ID_BASE 0x8000
|
||||||
|
#define FFA_SWD_ID_LIMIT SPMD_DIRECT_MSG_ENDPOINT_ID - 1
|
||||||
|
#define FFA_SWD_ID_MASK 0x8000
|
||||||
|
|
||||||
|
/* First ID is reserved for the SPMC */
|
||||||
|
#define FFA_SPMC_ID U(FFA_SWD_ID_BASE)
|
||||||
|
/* SP IDs are allocated after the SPMC ID */
|
||||||
|
#define FFA_SP_ID_BASE (FFA_SPMC_ID + 1)
|
||||||
|
/* Align with Hafnium implementation */
|
||||||
|
#define INV_SP_ID 0x7FFF
|
||||||
|
|
||||||
|
/* FF-A warm boot types. */
|
||||||
|
#define FFA_WB_TYPE_S2RAM 0
|
||||||
|
#define FFA_WB_TYPE_NOTS2RAM 1
|
||||||
|
|
||||||
|
/*
|
||||||
|
* Runtime states of an execution context as per the FF-A v1.1 specification.
|
||||||
|
*/
|
||||||
|
enum sp_runtime_states {
|
||||||
|
RT_STATE_WAITING,
|
||||||
|
RT_STATE_RUNNING,
|
||||||
|
RT_STATE_PREEMPTED,
|
||||||
|
RT_STATE_BLOCKED
|
||||||
|
};
|
||||||
|
|
||||||
|
/*
|
||||||
|
* Runtime model of an execution context as per the FF-A v1.1 specification. Its
|
||||||
|
* value is valid only if the execution context is not in the waiting state.
|
||||||
|
*/
|
||||||
|
enum sp_runtime_model {
|
||||||
|
RT_MODEL_DIR_REQ,
|
||||||
|
RT_MODEL_RUN,
|
||||||
|
RT_MODEL_INIT,
|
||||||
|
RT_MODEL_INTR
|
||||||
|
};
|
||||||
|
|
||||||
|
enum sp_runtime_el {
|
||||||
|
EL1 = 0,
|
||||||
|
S_EL0,
|
||||||
|
S_EL1
|
||||||
|
};
|
||||||
|
|
||||||
|
enum sp_execution_state {
|
||||||
|
SP_STATE_AARCH64 = 0,
|
||||||
|
SP_STATE_AARCH32
|
||||||
|
};
|
||||||
|
|
||||||
|
/*
|
||||||
|
* Execution context members for an SP. This is a bit like struct
|
||||||
|
* vcpu in a hypervisor.
|
||||||
|
*/
|
||||||
|
struct sp_exec_ctx {
|
||||||
|
/*
|
||||||
|
* Store the stack address to restore C runtime context from after
|
||||||
|
* returning from a synchronous entry into the SP.
|
||||||
|
*/
|
||||||
|
uint64_t c_rt_ctx;
|
||||||
|
|
||||||
|
/* Space to maintain the architectural state of an SP. */
|
||||||
|
cpu_context_t cpu_ctx;
|
||||||
|
|
||||||
|
/* Track the current runtime state of the SP. */
|
||||||
|
enum sp_runtime_states rt_state;
|
||||||
|
|
||||||
|
/* Track the current runtime model of the SP. */
|
||||||
|
enum sp_runtime_model rt_model;
|
||||||
|
};
|
||||||
|
|
||||||
|
/*
|
||||||
|
* Structure to describe the cumulative properties of an SP.
|
||||||
|
*/
|
||||||
|
struct secure_partition_desc {
|
||||||
|
/*
|
||||||
|
* Execution contexts allocated to this endpoint. Ideally,
|
||||||
|
* we need as many contexts as there are physical cpus only
|
||||||
|
* for a S-EL1 SP which is MP-pinned.
|
||||||
|
*/
|
||||||
|
struct sp_exec_ctx ec[PLATFORM_CORE_COUNT];
|
||||||
|
|
||||||
|
/* ID of the Secure Partition. */
|
||||||
|
uint16_t sp_id;
|
||||||
|
|
||||||
|
/* Runtime EL. */
|
||||||
|
enum sp_runtime_el runtime_el;
|
||||||
|
|
||||||
|
/* Partition UUID. */
|
||||||
|
uint32_t uuid[4];
|
||||||
|
|
||||||
|
/* Partition Properties. */
|
||||||
|
uint32_t properties;
|
||||||
|
|
||||||
|
/* Supported FF-A Version. */
|
||||||
|
uint32_t ffa_version;
|
||||||
|
|
||||||
|
/* Execution State. */
|
||||||
|
enum sp_execution_state execution_state;
|
||||||
|
|
||||||
|
/* Secondary entrypoint. Only valid for a S-EL1 SP. */
|
||||||
|
uintptr_t secondary_ep;
|
||||||
|
};
|
||||||
|
|
||||||
|
/*
|
||||||
|
* This define identifies the only SP that will be initialised and participate
|
||||||
|
* in FF-A communication. The implementation leaves the door open for more SPs
|
||||||
|
* to be managed in future but for now it is reasonable to assume that either a
|
||||||
|
* single S-EL0 or a single S-EL1 SP will be supported. This define will be used
|
||||||
|
* to identify which SP descriptor to initialise and manage during SP runtime.
|
||||||
|
*/
|
||||||
|
#define ACTIVE_SP_DESC_INDEX 0
|
||||||
|
|
||||||
|
/*
|
||||||
|
* Structure to describe the cumulative properties of the Hypervisor and
|
||||||
|
* NS-Endpoints.
|
||||||
|
*/
|
||||||
|
struct ns_endpoint_desc {
|
||||||
|
/*
|
||||||
|
* ID of the NS-Endpoint or Hypervisor.
|
||||||
|
*/
|
||||||
|
uint16_t ns_ep_id;
|
||||||
|
|
||||||
|
/*
|
||||||
|
* Supported FF-A Version.
|
||||||
|
*/
|
||||||
|
uint32_t ffa_version;
|
||||||
|
};
|
||||||
|
|
||||||
|
/* Setup Function for different SP types. */
|
||||||
|
void spmc_sp_common_setup(struct secure_partition_desc *sp,
|
||||||
|
entry_point_info_t *ep_info);
|
||||||
|
void spmc_el1_sp_setup(struct secure_partition_desc *sp,
|
||||||
|
entry_point_info_t *ep_info);
|
||||||
|
void spmc_sp_common_ep_commit(struct secure_partition_desc *sp,
|
||||||
|
entry_point_info_t *ep_info);
|
||||||
|
|
||||||
|
/*
|
||||||
|
* Helper function to perform a synchronous entry into a SP.
|
||||||
|
*/
|
||||||
|
uint64_t spmc_sp_synchronous_entry(struct sp_exec_ctx *ec);
|
||||||
|
|
||||||
|
/*
|
||||||
|
* Helper function to obtain the descriptor of the current SP on a physical cpu.
|
||||||
|
*/
|
||||||
|
struct secure_partition_desc *spmc_get_current_sp_ctx(void);
|
||||||
|
|
||||||
|
/*
|
||||||
|
* Helper function to obtain the execution context of an SP on a
|
||||||
|
* physical cpu.
|
||||||
|
*/
|
||||||
|
struct sp_exec_ctx *spmc_get_sp_ec(struct secure_partition_desc *sp);
|
||||||
|
|
||||||
|
/*
|
||||||
|
* Helper function to obtain the index of the execution context of an SP on a
|
||||||
|
* physical cpu.
|
||||||
|
*/
|
||||||
|
unsigned int get_ec_index(struct secure_partition_desc *sp);
|
||||||
|
|
||||||
|
uint64_t spmc_ffa_error_return(void *handle, int error_code);
|
||||||
|
|
||||||
|
/*
|
||||||
|
* Ensure a partition ID does not clash and follows the secure world convention.
|
||||||
|
*/
|
||||||
|
bool is_ffa_secure_id_valid(uint16_t partition_id);
|
||||||
|
|
||||||
|
#endif /* SPMC_H */
|
|
@ -0,0 +1,17 @@
|
||||||
|
#
|
||||||
|
# Copyright (c) 2022, ARM Limited and Contributors. All rights reserved.
|
||||||
|
#
|
||||||
|
# SPDX-License-Identifier: BSD-3-Clause
|
||||||
|
#
|
||||||
|
|
||||||
|
ifneq (${ARCH},aarch64)
|
||||||
|
$(error "Error: SPMC is only supported on aarch64.")
|
||||||
|
endif
|
||||||
|
|
||||||
|
SPMC_SOURCES := $(addprefix services/std_svc/spm/el3_spmc/, \
|
||||||
|
spmc_main.c \
|
||||||
|
spmc_setup.c)
|
||||||
|
|
||||||
|
|
||||||
|
# Let the top-level Makefile know that we intend to include a BL32 image
|
||||||
|
NEED_BL32 := yes
|
|
@ -0,0 +1,438 @@
|
||||||
|
/*
|
||||||
|
* Copyright (c) 2022, ARM Limited and Contributors. All rights reserved.
|
||||||
|
*
|
||||||
|
* SPDX-License-Identifier: BSD-3-Clause
|
||||||
|
*/
|
||||||
|
|
||||||
|
#include <assert.h>
|
||||||
|
#include <errno.h>
|
||||||
|
|
||||||
|
#include <arch_helpers.h>
|
||||||
|
#include <bl31/bl31.h>
|
||||||
|
#include <bl31/ehf.h>
|
||||||
|
#include <common/debug.h>
|
||||||
|
#include <common/fdt_wrappers.h>
|
||||||
|
#include <common/runtime_svc.h>
|
||||||
|
#include <lib/el3_runtime/context_mgmt.h>
|
||||||
|
#include <lib/smccc.h>
|
||||||
|
#include <lib/utils.h>
|
||||||
|
#include <lib/xlat_tables/xlat_tables_v2.h>
|
||||||
|
#include <libfdt.h>
|
||||||
|
#include <plat/common/platform.h>
|
||||||
|
#include <services/ffa_svc.h>
|
||||||
|
#include <services/spmc_svc.h>
|
||||||
|
#include <services/spmd_svc.h>
|
||||||
|
#include "spmc.h"
|
||||||
|
|
||||||
|
#include <platform_def.h>
|
||||||
|
|
||||||
|
/*
|
||||||
|
* Allocate a secure partition descriptor to describe each SP in the system that
|
||||||
|
* does not reside at EL3.
|
||||||
|
*/
|
||||||
|
static struct secure_partition_desc sp_desc[SECURE_PARTITION_COUNT];
|
||||||
|
|
||||||
|
/*
|
||||||
|
* Allocate an NS endpoint descriptor to describe each VM and the Hypervisor in
|
||||||
|
* the system that interacts with a SP. It is used to track the Hypervisor
|
||||||
|
* buffer pair, version and ID for now. It could be extended to track VM
|
||||||
|
* properties when the SPMC supports indirect messaging.
|
||||||
|
*/
|
||||||
|
static struct ns_endpoint_desc ns_ep_desc[NS_PARTITION_COUNT];
|
||||||
|
|
||||||
|
/*
|
||||||
|
* Helper function to obtain the descriptor of the last SP to whom control was
|
||||||
|
* handed to on this physical cpu. Currently, we assume there is only one SP.
|
||||||
|
* TODO: Expand to track multiple partitions when required.
|
||||||
|
*/
|
||||||
|
struct secure_partition_desc *spmc_get_current_sp_ctx(void)
|
||||||
|
{
|
||||||
|
return &(sp_desc[ACTIVE_SP_DESC_INDEX]);
|
||||||
|
}
|
||||||
|
|
||||||
|
/*
|
||||||
|
* Helper function to obtain the execution context of an SP on the
|
||||||
|
* current physical cpu.
|
||||||
|
*/
|
||||||
|
struct sp_exec_ctx *spmc_get_sp_ec(struct secure_partition_desc *sp)
|
||||||
|
{
|
||||||
|
return &(sp->ec[get_ec_index(sp)]);
|
||||||
|
}
|
||||||
|
|
||||||
|
/* Helper function to get pointer to SP context from its ID. */
|
||||||
|
struct secure_partition_desc *spmc_get_sp_ctx(uint16_t id)
|
||||||
|
{
|
||||||
|
/* Check for SWd Partitions. */
|
||||||
|
for (unsigned int i = 0U; i < SECURE_PARTITION_COUNT; i++) {
|
||||||
|
if (sp_desc[i].sp_id == id) {
|
||||||
|
return &(sp_desc[i]);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
return NULL;
|
||||||
|
}
|
||||||
|
|
||||||
|
/******************************************************************************
|
||||||
|
* This function returns to the place where spmc_sp_synchronous_entry() was
|
||||||
|
* called originally.
|
||||||
|
******************************************************************************/
|
||||||
|
__dead2 void spmc_sp_synchronous_exit(struct sp_exec_ctx *ec, uint64_t rc)
|
||||||
|
{
|
||||||
|
/*
|
||||||
|
* The SPM must have initiated the original request through a
|
||||||
|
* synchronous entry into the secure partition. Jump back to the
|
||||||
|
* original C runtime context with the value of rc in x0;
|
||||||
|
*/
|
||||||
|
spm_secure_partition_exit(ec->c_rt_ctx, rc);
|
||||||
|
|
||||||
|
panic();
|
||||||
|
}
|
||||||
|
|
||||||
|
/*******************************************************************************
|
||||||
|
* Return FFA_ERROR with specified error code.
|
||||||
|
******************************************************************************/
|
||||||
|
uint64_t spmc_ffa_error_return(void *handle, int error_code)
|
||||||
|
{
|
||||||
|
SMC_RET8(handle, FFA_ERROR,
|
||||||
|
FFA_TARGET_INFO_MBZ, error_code,
|
||||||
|
FFA_PARAM_MBZ, FFA_PARAM_MBZ, FFA_PARAM_MBZ,
|
||||||
|
FFA_PARAM_MBZ, FFA_PARAM_MBZ);
|
||||||
|
}
|
||||||
|
|
||||||
|
/******************************************************************************
|
||||||
|
* Helper function to validate a secure partition ID to ensure it does not
|
||||||
|
* conflict with any other FF-A component and follows the convention to
|
||||||
|
* indicate it resides within the secure world.
|
||||||
|
******************************************************************************/
|
||||||
|
bool is_ffa_secure_id_valid(uint16_t partition_id)
|
||||||
|
{
|
||||||
|
/* Ensure the ID is not the invalid partition ID. */
|
||||||
|
if (partition_id == INV_SP_ID) {
|
||||||
|
return false;
|
||||||
|
}
|
||||||
|
|
||||||
|
/* Ensure the ID is not the SPMD ID. */
|
||||||
|
if (partition_id == SPMD_DIRECT_MSG_ENDPOINT_ID) {
|
||||||
|
return false;
|
||||||
|
}
|
||||||
|
|
||||||
|
/*
|
||||||
|
* Ensure the ID follows the convention to indicate it resides
|
||||||
|
* in the secure world.
|
||||||
|
*/
|
||||||
|
if (!ffa_is_secure_world_id(partition_id)) {
|
||||||
|
return false;
|
||||||
|
}
|
||||||
|
|
||||||
|
/* Ensure we don't conflict with the SPMC partition ID. */
|
||||||
|
if (partition_id == FFA_SPMC_ID) {
|
||||||
|
return false;
|
||||||
|
}
|
||||||
|
|
||||||
|
/* Ensure we do not already have an SP context with this ID. */
|
||||||
|
if (spmc_get_sp_ctx(partition_id)) {
|
||||||
|
return false;
|
||||||
|
}
|
||||||
|
|
||||||
|
return true;
|
||||||
|
}
|
||||||
|
|
||||||
|
/*******************************************************************************
|
||||||
|
* This function will parse the Secure Partition Manifest. From manifest, it
|
||||||
|
* will fetch details for preparing Secure partition image context and secure
|
||||||
|
* partition image boot arguments if any.
|
||||||
|
******************************************************************************/
|
||||||
|
static int sp_manifest_parse(void *sp_manifest, int offset,
|
||||||
|
struct secure_partition_desc *sp,
|
||||||
|
entry_point_info_t *ep_info)
|
||||||
|
{
|
||||||
|
int32_t ret, node;
|
||||||
|
uint32_t config_32;
|
||||||
|
|
||||||
|
/*
|
||||||
|
* Look for the mandatory fields that are expected to be present in
|
||||||
|
* the SP manifests.
|
||||||
|
*/
|
||||||
|
node = fdt_path_offset(sp_manifest, "/");
|
||||||
|
if (node < 0) {
|
||||||
|
ERROR("Did not find root node.\n");
|
||||||
|
return node;
|
||||||
|
}
|
||||||
|
|
||||||
|
ret = fdt_read_uint32(sp_manifest, node, "exception-level", &config_32);
|
||||||
|
if (ret != 0) {
|
||||||
|
ERROR("Missing SP Exception Level information.\n");
|
||||||
|
return ret;
|
||||||
|
}
|
||||||
|
|
||||||
|
sp->runtime_el = config_32;
|
||||||
|
|
||||||
|
ret = fdt_read_uint32(sp_manifest, node, "ffa-version", &config_32);
|
||||||
|
if (ret != 0) {
|
||||||
|
ERROR("Missing Secure Partition FF-A Version.\n");
|
||||||
|
return ret;
|
||||||
|
}
|
||||||
|
|
||||||
|
sp->ffa_version = config_32;
|
||||||
|
|
||||||
|
ret = fdt_read_uint32(sp_manifest, node, "execution-state", &config_32);
|
||||||
|
if (ret != 0) {
|
||||||
|
ERROR("Missing Secure Partition Execution State.\n");
|
||||||
|
return ret;
|
||||||
|
}
|
||||||
|
|
||||||
|
sp->execution_state = config_32;
|
||||||
|
|
||||||
|
/*
|
||||||
|
* Look for the optional fields that are expected to be present in
|
||||||
|
* an SP manifest.
|
||||||
|
*/
|
||||||
|
ret = fdt_read_uint32(sp_manifest, node, "id", &config_32);
|
||||||
|
if (ret != 0) {
|
||||||
|
WARN("Missing Secure Partition ID.\n");
|
||||||
|
} else {
|
||||||
|
if (!is_ffa_secure_id_valid(config_32)) {
|
||||||
|
ERROR("Invalid Secure Partition ID (0x%x).\n",
|
||||||
|
config_32);
|
||||||
|
return -EINVAL;
|
||||||
|
}
|
||||||
|
sp->sp_id = config_32;
|
||||||
|
}
|
||||||
|
|
||||||
|
return 0;
|
||||||
|
}
|
||||||
|
|
||||||
|
/*******************************************************************************
|
||||||
|
* This function gets the Secure Partition Manifest base and maps the manifest
|
||||||
|
* region.
|
||||||
|
* Currently only one Secure Partition manifest is considered which is used to
|
||||||
|
* prepare the context for the single Secure Partition.
|
||||||
|
******************************************************************************/
|
||||||
|
static int find_and_prepare_sp_context(void)
|
||||||
|
{
|
||||||
|
void *sp_manifest;
|
||||||
|
uintptr_t manifest_base;
|
||||||
|
uintptr_t manifest_base_align;
|
||||||
|
entry_point_info_t *next_image_ep_info;
|
||||||
|
int32_t ret;
|
||||||
|
struct secure_partition_desc *sp;
|
||||||
|
|
||||||
|
next_image_ep_info = bl31_plat_get_next_image_ep_info(SECURE);
|
||||||
|
if (next_image_ep_info == NULL) {
|
||||||
|
WARN("No Secure Partition image provided by BL2.\n");
|
||||||
|
return -ENOENT;
|
||||||
|
}
|
||||||
|
|
||||||
|
sp_manifest = (void *)next_image_ep_info->args.arg0;
|
||||||
|
if (sp_manifest == NULL) {
|
||||||
|
WARN("Secure Partition manifest absent.\n");
|
||||||
|
return -ENOENT;
|
||||||
|
}
|
||||||
|
|
||||||
|
manifest_base = (uintptr_t)sp_manifest;
|
||||||
|
manifest_base_align = page_align(manifest_base, DOWN);
|
||||||
|
|
||||||
|
/*
|
||||||
|
* Map the secure partition manifest region in the EL3 translation
|
||||||
|
* regime.
|
||||||
|
* Map an area equal to (2 * PAGE_SIZE) for now. During manifest base
|
||||||
|
* alignment the region of 1 PAGE_SIZE from manifest align base may
|
||||||
|
* not completely accommodate the secure partition manifest region.
|
||||||
|
*/
|
||||||
|
ret = mmap_add_dynamic_region((unsigned long long)manifest_base_align,
|
||||||
|
manifest_base_align,
|
||||||
|
PAGE_SIZE * 2,
|
||||||
|
MT_RO_DATA);
|
||||||
|
if (ret != 0) {
|
||||||
|
ERROR("Error while mapping SP manifest (%d).\n", ret);
|
||||||
|
return ret;
|
||||||
|
}
|
||||||
|
|
||||||
|
ret = fdt_node_offset_by_compatible(sp_manifest, -1,
|
||||||
|
"arm,ffa-manifest-1.0");
|
||||||
|
if (ret < 0) {
|
||||||
|
ERROR("Error happened in SP manifest reading.\n");
|
||||||
|
return -EINVAL;
|
||||||
|
}
|
||||||
|
|
||||||
|
/*
|
||||||
|
* Store the size of the manifest so that it can be used later to pass
|
||||||
|
* the manifest as boot information later.
|
||||||
|
*/
|
||||||
|
next_image_ep_info->args.arg1 = fdt_totalsize(sp_manifest);
|
||||||
|
INFO("Manifest size = %lu bytes.\n", next_image_ep_info->args.arg1);
|
||||||
|
|
||||||
|
/*
|
||||||
|
* Select an SP descriptor for initialising the partition's execution
|
||||||
|
* context on the primary CPU.
|
||||||
|
*/
|
||||||
|
sp = spmc_get_current_sp_ctx();
|
||||||
|
|
||||||
|
/* Initialize entry point information for the SP */
|
||||||
|
SET_PARAM_HEAD(next_image_ep_info, PARAM_EP, VERSION_1,
|
||||||
|
SECURE | EP_ST_ENABLE);
|
||||||
|
|
||||||
|
/* Parse the SP manifest. */
|
||||||
|
ret = sp_manifest_parse(sp_manifest, ret, sp, next_image_ep_info);
|
||||||
|
if (ret != 0) {
|
||||||
|
ERROR("Error in Secure Partition manifest parsing.\n");
|
||||||
|
return ret;
|
||||||
|
}
|
||||||
|
|
||||||
|
/* Check that the runtime EL in the manifest was correct. */
|
||||||
|
if (sp->runtime_el != S_EL1) {
|
||||||
|
ERROR("Unexpected runtime EL: %d\n", sp->runtime_el);
|
||||||
|
return -EINVAL;
|
||||||
|
}
|
||||||
|
|
||||||
|
/* Perform any common initialisation. */
|
||||||
|
spmc_sp_common_setup(sp, next_image_ep_info);
|
||||||
|
|
||||||
|
/* Perform any initialisation specific to S-EL1 SPs. */
|
||||||
|
spmc_el1_sp_setup(sp, next_image_ep_info);
|
||||||
|
|
||||||
|
/* Initialize the SP context with the required ep info. */
|
||||||
|
spmc_sp_common_ep_commit(sp, next_image_ep_info);
|
||||||
|
|
||||||
|
return 0;
|
||||||
|
}
|
||||||
|
|
||||||
|
/*******************************************************************************
|
||||||
|
* This function takes an SP context pointer and performs a synchronous entry
|
||||||
|
* into it.
|
||||||
|
******************************************************************************/
|
||||||
|
uint64_t spmc_sp_synchronous_entry(struct sp_exec_ctx *ec)
|
||||||
|
{
|
||||||
|
uint64_t rc;
|
||||||
|
|
||||||
|
assert(ec != NULL);
|
||||||
|
|
||||||
|
/* Assign the context of the SP to this CPU */
|
||||||
|
cm_set_context(&(ec->cpu_ctx), SECURE);
|
||||||
|
|
||||||
|
/* Restore the context assigned above */
|
||||||
|
cm_el1_sysregs_context_restore(SECURE);
|
||||||
|
cm_set_next_eret_context(SECURE);
|
||||||
|
|
||||||
|
/* Invalidate TLBs at EL1. */
|
||||||
|
tlbivmalle1();
|
||||||
|
dsbish();
|
||||||
|
|
||||||
|
/* Enter Secure Partition */
|
||||||
|
rc = spm_secure_partition_enter(&ec->c_rt_ctx);
|
||||||
|
|
||||||
|
/* Save secure state */
|
||||||
|
cm_el1_sysregs_context_save(SECURE);
|
||||||
|
|
||||||
|
return rc;
|
||||||
|
}
|
||||||
|
|
||||||
|
/*******************************************************************************
|
||||||
|
* SPMC Helper Functions.
|
||||||
|
******************************************************************************/
|
||||||
|
static int32_t sp_init(void)
|
||||||
|
{
|
||||||
|
uint64_t rc;
|
||||||
|
struct secure_partition_desc *sp;
|
||||||
|
struct sp_exec_ctx *ec;
|
||||||
|
|
||||||
|
sp = spmc_get_current_sp_ctx();
|
||||||
|
ec = spmc_get_sp_ec(sp);
|
||||||
|
ec->rt_model = RT_MODEL_INIT;
|
||||||
|
ec->rt_state = RT_STATE_RUNNING;
|
||||||
|
|
||||||
|
INFO("Secure Partition (0x%x) init start.\n", sp->sp_id);
|
||||||
|
|
||||||
|
rc = spmc_sp_synchronous_entry(ec);
|
||||||
|
if (rc != 0) {
|
||||||
|
/* Indicate SP init was not successful. */
|
||||||
|
ERROR("SP (0x%x) failed to initialize (%lu).\n",
|
||||||
|
sp->sp_id, rc);
|
||||||
|
return 0;
|
||||||
|
}
|
||||||
|
|
||||||
|
ec->rt_state = RT_STATE_WAITING;
|
||||||
|
INFO("Secure Partition initialized.\n");
|
||||||
|
|
||||||
|
return 1;
|
||||||
|
}
|
||||||
|
|
||||||
|
static void initalize_sp_descs(void)
|
||||||
|
{
|
||||||
|
struct secure_partition_desc *sp;
|
||||||
|
|
||||||
|
for (unsigned int i = 0U; i < SECURE_PARTITION_COUNT; i++) {
|
||||||
|
sp = &sp_desc[i];
|
||||||
|
sp->sp_id = INV_SP_ID;
|
||||||
|
sp->secondary_ep = 0;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
static void initalize_ns_ep_descs(void)
|
||||||
|
{
|
||||||
|
struct ns_endpoint_desc *ns_ep;
|
||||||
|
|
||||||
|
for (unsigned int i = 0U; i < NS_PARTITION_COUNT; i++) {
|
||||||
|
ns_ep = &ns_ep_desc[i];
|
||||||
|
/*
|
||||||
|
* Clashes with the Hypervisor ID but will not be a
|
||||||
|
* problem in practice.
|
||||||
|
*/
|
||||||
|
ns_ep->ns_ep_id = 0;
|
||||||
|
ns_ep->ffa_version = 0;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
/*******************************************************************************
|
||||||
|
* Initialize contexts of all Secure Partitions.
|
||||||
|
******************************************************************************/
|
||||||
|
int32_t spmc_setup(void)
|
||||||
|
{
|
||||||
|
int32_t ret;
|
||||||
|
|
||||||
|
/* Initialize endpoint descriptors */
|
||||||
|
initalize_sp_descs();
|
||||||
|
initalize_ns_ep_descs();
|
||||||
|
|
||||||
|
/* Perform physical SP setup. */
|
||||||
|
|
||||||
|
/* Disable MMU at EL1 (initialized by BL2) */
|
||||||
|
disable_mmu_icache_el1();
|
||||||
|
|
||||||
|
/* Initialize context of the SP */
|
||||||
|
INFO("Secure Partition context setup start.\n");
|
||||||
|
|
||||||
|
ret = find_and_prepare_sp_context();
|
||||||
|
if (ret != 0) {
|
||||||
|
ERROR("Error in SP finding and context preparation.\n");
|
||||||
|
return ret;
|
||||||
|
}
|
||||||
|
|
||||||
|
/* Register init function for deferred init. */
|
||||||
|
bl31_register_bl32_init(&sp_init);
|
||||||
|
|
||||||
|
INFO("Secure Partition setup done.\n");
|
||||||
|
|
||||||
|
return 0;
|
||||||
|
}
|
||||||
|
|
||||||
|
/*******************************************************************************
|
||||||
|
* Secure Partition Manager SMC handler.
|
||||||
|
******************************************************************************/
|
||||||
|
uint64_t spmc_smc_handler(uint32_t smc_fid,
|
||||||
|
bool secure_origin,
|
||||||
|
uint64_t x1,
|
||||||
|
uint64_t x2,
|
||||||
|
uint64_t x3,
|
||||||
|
uint64_t x4,
|
||||||
|
void *cookie,
|
||||||
|
void *handle,
|
||||||
|
uint64_t flags)
|
||||||
|
{
|
||||||
|
switch (smc_fid) {
|
||||||
|
|
||||||
|
default:
|
||||||
|
WARN("Unsupported FF-A call 0x%08x.\n", smc_fid);
|
||||||
|
break;
|
||||||
|
}
|
||||||
|
return spmc_ffa_error_return(handle, FFA_ERROR_NOT_SUPPORTED);
|
||||||
|
}
|
|
@ -0,0 +1,112 @@
|
||||||
|
/*
|
||||||
|
* Copyright (c) 2022, ARM Limited and Contributors. All rights reserved.
|
||||||
|
*
|
||||||
|
* SPDX-License-Identifier: BSD-3-Clause
|
||||||
|
*/
|
||||||
|
|
||||||
|
#include <assert.h>
|
||||||
|
#include <string.h>
|
||||||
|
|
||||||
|
#include <arch.h>
|
||||||
|
#include <arch_helpers.h>
|
||||||
|
#include <common/debug.h>
|
||||||
|
#include <context.h>
|
||||||
|
#include <lib/el3_runtime/context_mgmt.h>
|
||||||
|
#include <lib/utils.h>
|
||||||
|
#include <lib/xlat_tables/xlat_tables_v2.h>
|
||||||
|
#include <plat/common/common_def.h>
|
||||||
|
#include <plat/common/platform.h>
|
||||||
|
#include <services/ffa_svc.h>
|
||||||
|
#include "spm_common.h"
|
||||||
|
#include "spmc.h"
|
||||||
|
|
||||||
|
#include <platform_def.h>
|
||||||
|
|
||||||
|
/*
|
||||||
|
* We are assuming that the index of the execution
|
||||||
|
* context used is the linear index of the current physical cpu.
|
||||||
|
*/
|
||||||
|
unsigned int get_ec_index(struct secure_partition_desc *sp)
|
||||||
|
{
|
||||||
|
return plat_my_core_pos();
|
||||||
|
}
|
||||||
|
|
||||||
|
/* S-EL1 partition specific initialisation. */
|
||||||
|
void spmc_el1_sp_setup(struct secure_partition_desc *sp,
|
||||||
|
entry_point_info_t *ep_info)
|
||||||
|
{
|
||||||
|
/* Sanity check input arguments. */
|
||||||
|
assert(sp != NULL);
|
||||||
|
assert(ep_info != NULL);
|
||||||
|
|
||||||
|
/* Initialise the SPSR for S-EL1 SPs. */
|
||||||
|
ep_info->spsr = SPSR_64(MODE_EL1, MODE_SP_ELX,
|
||||||
|
DISABLE_ALL_EXCEPTIONS);
|
||||||
|
|
||||||
|
/*
|
||||||
|
* Check whether setup is being performed for the primary or a secondary
|
||||||
|
* execution context. In the latter case, indicate to the SP that this
|
||||||
|
* is a warm boot.
|
||||||
|
* TODO: This check would need to be reworked if the same entry point is
|
||||||
|
* used for both primary and secondary initialisation.
|
||||||
|
*/
|
||||||
|
if (sp->secondary_ep != 0U) {
|
||||||
|
/*
|
||||||
|
* Sanity check that the secondary entry point is still what was
|
||||||
|
* originally set.
|
||||||
|
*/
|
||||||
|
assert(sp->secondary_ep == ep_info->pc);
|
||||||
|
ep_info->args.arg0 = FFA_WB_TYPE_S2RAM;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
/* Common initialisation for all SPs. */
|
||||||
|
void spmc_sp_common_setup(struct secure_partition_desc *sp,
|
||||||
|
entry_point_info_t *ep_info)
|
||||||
|
{
|
||||||
|
uint16_t sp_id;
|
||||||
|
|
||||||
|
/* Assign FF-A Partition ID if not already assigned. */
|
||||||
|
if (sp->sp_id == INV_SP_ID) {
|
||||||
|
sp_id = FFA_SP_ID_BASE + ACTIVE_SP_DESC_INDEX;
|
||||||
|
/*
|
||||||
|
* Ensure we don't clash with previously assigned partition
|
||||||
|
* IDs.
|
||||||
|
*/
|
||||||
|
while (!is_ffa_secure_id_valid(sp_id)) {
|
||||||
|
sp_id++;
|
||||||
|
|
||||||
|
if (sp_id == FFA_SWD_ID_LIMIT) {
|
||||||
|
ERROR("Unable to determine valid SP ID.\n");
|
||||||
|
panic();
|
||||||
|
}
|
||||||
|
}
|
||||||
|
sp->sp_id = sp_id;
|
||||||
|
}
|
||||||
|
|
||||||
|
/*
|
||||||
|
* We currently only support S-EL1 partitions so ensure this is the
|
||||||
|
* case.
|
||||||
|
*/
|
||||||
|
assert(sp->runtime_el == S_EL1);
|
||||||
|
|
||||||
|
/*
|
||||||
|
* Clear the general purpose registers. These should be populated as
|
||||||
|
* required.
|
||||||
|
*/
|
||||||
|
zeromem(&ep_info->args, sizeof(ep_info->args));
|
||||||
|
}
|
||||||
|
|
||||||
|
/*
|
||||||
|
* Initialise the SP context now we have populated the common and EL specific
|
||||||
|
* entrypoint information.
|
||||||
|
*/
|
||||||
|
void spmc_sp_common_ep_commit(struct secure_partition_desc *sp,
|
||||||
|
entry_point_info_t *ep_info)
|
||||||
|
{
|
||||||
|
cpu_context_t *cpu_ctx;
|
||||||
|
|
||||||
|
cpu_ctx = &(spmc_get_sp_ec(sp)->cpu_ctx);
|
||||||
|
print_entry_point_info(ep_info);
|
||||||
|
cm_setup_context(cpu_ctx, ep_info);
|
||||||
|
}
|
|
@ -58,12 +58,6 @@ typedef struct spmd_spm_core_context {
|
||||||
*/
|
*/
|
||||||
#define FFA_NS_ENDPOINT_ID U(0)
|
#define FFA_NS_ENDPOINT_ID U(0)
|
||||||
|
|
||||||
/* Mask and shift to check valid secure FF-A Endpoint ID. */
|
|
||||||
#define SPMC_SECURE_ID_MASK U(1)
|
|
||||||
#define SPMC_SECURE_ID_SHIFT U(15)
|
|
||||||
|
|
||||||
#define SPMD_DIRECT_MSG_ENDPOINT_ID U(FFA_ENDPOINT_ID_MAX - 1)
|
|
||||||
|
|
||||||
/* Define SPMD target function IDs for framework messages to the SPMC */
|
/* Define SPMD target function IDs for framework messages to the SPMC */
|
||||||
#define SPMD_FWK_MSG_BIT BIT(31)
|
#define SPMD_FWK_MSG_BIT BIT(31)
|
||||||
#define SPMD_FWK_MSG_PSCI U(0)
|
#define SPMD_FWK_MSG_PSCI U(0)
|
||||||
|
|
Loading…
Reference in New Issue