/* * Copyright (c) 2018-2024, Arm Limited and Contributors. All rights reserved. * * SPDX-License-Identifier: BSD-3-Clause */ #include #include #if MEASURED_BOOT #include #endif #include #include #include #include #include #include #define DTB_PROP_MBEDTLS_HEAP_ADDR "mbedtls_heap_addr" #define DTB_PROP_MBEDTLS_HEAP_SIZE "mbedtls_heap_size" #if MEASURED_BOOT #ifdef SPD_opteed /* * Currently OP-TEE does not support reading DTBs from Secure memory * and this property should be removed when this feature is supported. */ #define DTB_PROP_HW_SM_LOG_ADDR "tpm_event_log_sm_addr" #endif /* SPD_opteed */ #define DTB_PROP_HW_LOG_ADDR "tpm_event_log_addr" #define DTB_PROP_HW_LOG_SIZE "tpm_event_log_size" #define DTB_PROP_HW_LOG_MAX_SIZE "tpm_event_log_max_size" #endif /* MEASURED_BOOT */ static size_t event_log_max_size __unused; /******************************************************************************* * Validate the tb_fw_config is a valid DTB file and returns the node offset * to "arm,tb_fw" property. * Arguments: * void *dtb - pointer to the TB_FW_CONFIG in memory * int *node - Returns the node offset to "arm,tb_fw" property if found. * * Returns 0 on success and -1 on error. ******************************************************************************/ int arm_dyn_tb_fw_cfg_init(void *dtb, int *node) { assert(dtb != NULL); assert(node != NULL); /* Check if the pointer to DT is correct */ if (fdt_check_header(dtb) != 0) { WARN("Invalid DTB file passed as%s\n", " TB_FW_CONFIG"); return -1; } /* Assert the node offset point to "arm,tb_fw" compatible property */ *node = fdt_node_offset_by_compatible(dtb, -1, "arm,tb_fw"); if (*node < 0) { WARN("The compatible property '%s' not%s", "arm,tb_fw", " found in the config\n"); return -1; } VERBOSE("Dyn cfg: '%s'%s", "arm,tb_fw", " found in the config\n"); return 0; } /* * This function writes the Mbed TLS heap address and size in the DTB. When it * is called, it is guaranteed that a DTB is available. However it is not * guaranteed that the shared Mbed TLS heap implementation is used. Thus we * return error code from here and it's the responsibility of the caller to * determine the action upon error. * * This function is supposed to be called only by BL1. * * Returns: * 0 = success * -1 = error */ int arm_set_dtb_mbedtls_heap_info(void *dtb, void *heap_addr, size_t heap_size) { int dtb_root; /* * Verify that the DTB is valid, before attempting to write to it, * and get the DTB root node. */ int err = arm_dyn_tb_fw_cfg_init(dtb, &dtb_root); if (err < 0) { ERROR("Invalid%s loaded. Unable to get root node\n", " TB_FW_CONFIG"); return -1; } /* * Write the heap address and size in the DTB. * * NOTE: The variables heap_addr and heap_size are corrupted * by the "fdtw_write_inplace_cells" function. After the * function calls they must NOT be reused. */ err = fdtw_write_inplace_cells(dtb, dtb_root, DTB_PROP_MBEDTLS_HEAP_ADDR, 2, &heap_addr); if (err < 0) { ERROR("%sDTB property '%s'\n", "Unable to write ", DTB_PROP_MBEDTLS_HEAP_ADDR); return -1; } err = fdtw_write_inplace_cells(dtb, dtb_root, DTB_PROP_MBEDTLS_HEAP_SIZE, 1, &heap_size); if (err < 0) { ERROR("%sDTB property '%s'\n", "Unable to write ", DTB_PROP_MBEDTLS_HEAP_SIZE); return -1; } return 0; } #if MEASURED_BOOT #if DICE_PROTECTION_ENVIRONMENT #include #define DTB_PROP_DPE_CTX_HANDLE "dpe_ctx_handle" static int arm_set_dpe_context_handle(uintptr_t config_base, int *ctx_handle) { /* As libfdt uses void *, we can't avoid this cast */ void *dtb = (void *)config_base; const char *compatible = "arm,dpe_ctx_handle"; int err, node; /* * Verify that the DTB is valid, before attempting to write to it, * and get the DTB root node. */ /* Check if the pointer to DT is correct */ err = fdt_check_header(dtb); if (err < 0) { WARN("Invalid DTB file passed\n"); return err; } /* Assert the node offset point to compatible property */ node = fdt_node_offset_by_compatible(dtb, -1, compatible); if (node < 0) { WARN("The compatible property '%s' not%s", compatible, " found in the config\n"); return node; } VERBOSE("Dyn cfg: '%s'%s", compatible, " found in the config\n"); err = fdtw_write_inplace_cells(dtb, node, DTB_PROP_DPE_CTX_HANDLE, 1, ctx_handle); if (err < 0) { ERROR("%sDTB property '%s'\n", "Unable to write ", DTB_PROP_DPE_CTX_HANDLE); } else { /* * Ensure that the info written to the DTB is visible * to other images. */ flush_dcache_range(config_base, fdt_totalsize(dtb)); } return err; } /* * This function writes the DPE context handle value to the NT_FW_CONFIG DTB. * * This function is supposed to be called only by BL2. * * Returns: * 0 = success * < 0 = error */ int arm_set_nt_fw_info(int *ctx_handle) { uintptr_t config_base; const bl_mem_params_node_t *cfg_mem_params; /* Get the config load address and size from NT_FW_CONFIG */ cfg_mem_params = get_bl_mem_params_node(NT_FW_CONFIG_ID); assert(cfg_mem_params != NULL); config_base = cfg_mem_params->image_info.image_base; /* Write the context handle value in the DTB */ return arm_set_dpe_context_handle(config_base, ctx_handle); } /* * This function writes the DPE context handle value to the TB_FW_CONFIG DTB. * * This function is supposed to be called only by BL1. * * Returns: * 0 = success * < 0 = error */ int arm_set_tb_fw_info(int *ctx_handle) { /* * Read tb_fw_config device tree for Event Log properties * and write the Event Log address and its size in the DTB */ const struct dyn_cfg_dtb_info_t *tb_fw_config_info; uintptr_t tb_fw_cfg_dtb; tb_fw_config_info = FCONF_GET_PROPERTY(dyn_cfg, dtb, TB_FW_CONFIG_ID); assert(tb_fw_config_info != NULL); tb_fw_cfg_dtb = tb_fw_config_info->config_addr; /* Write the context handle value in the DTB */ return arm_set_dpe_context_handle(tb_fw_cfg_dtb, ctx_handle); } /* * This function reads the initial DPE context handle from TB_FW_CONFIG DTB. * * This function is supposed to be called only by BL2. * * Returns: * 0 = success * < 0 = error */ int arm_get_tb_fw_info(int *ctx_handle) { /* As libfdt uses void *, we can't avoid this cast */ const struct dyn_cfg_dtb_info_t *tb_fw_config_info; int node, rc; tb_fw_config_info = FCONF_GET_PROPERTY(dyn_cfg, dtb, TB_FW_CONFIG_ID); assert(tb_fw_config_info != NULL); void *dtb = (void *)tb_fw_config_info->config_addr; const char *compatible = "arm,dpe_ctx_handle"; /* Assert the node offset point to compatible property */ node = fdt_node_offset_by_compatible(dtb, -1, compatible); if (node < 0) { WARN("The compatible property '%s'%s", compatible, " not specified in TB_FW config.\n"); return node; } VERBOSE("Dyn cfg: '%s'%s", compatible, " found in the config\n"); rc = fdt_read_uint32(dtb, node, DTB_PROP_DPE_CTX_HANDLE, (uint32_t *)ctx_handle); if (rc != 0) { ERROR("%s%s", DTB_PROP_DPE_CTX_HANDLE, " not specified in TB_FW config.\n"); } return rc; } #else /* * Write the Event Log address and its size in the DTB. * * Returns: * 0 = success * < 0 = error */ static int arm_set_event_log_info(uintptr_t config_base, #ifdef SPD_opteed uintptr_t sm_log_addr, #endif uintptr_t log_addr, size_t log_size) { /* As libfdt uses void *, we can't avoid this cast */ void *dtb = (void *)config_base; const char *compatible = "arm,tpm_event_log"; int err, node; /* * Verify that the DTB is valid, before attempting to write to it, * and get the DTB root node. */ /* Check if the pointer to DT is correct */ err = fdt_check_header(dtb); if (err < 0) { WARN("Invalid DTB file passed\n"); return err; } /* Assert the node offset point to compatible property */ node = fdt_node_offset_by_compatible(dtb, -1, compatible); if (node < 0) { WARN("The compatible property '%s' not%s", compatible, " found in the config\n"); return node; } VERBOSE("Dyn cfg: '%s'%s", compatible, " found in the config\n"); #ifdef SPD_opteed if (sm_log_addr != 0UL) { err = fdtw_write_inplace_cells(dtb, node, DTB_PROP_HW_SM_LOG_ADDR, 2, &sm_log_addr); if (err < 0) { ERROR("%sDTB property '%s'\n", "Unable to write ", DTB_PROP_HW_SM_LOG_ADDR); return err; } } #endif err = fdtw_write_inplace_cells(dtb, node, DTB_PROP_HW_LOG_ADDR, 2, &log_addr); if (err < 0) { ERROR("%sDTB property '%s'\n", "Unable to write ", DTB_PROP_HW_LOG_ADDR); return err; } assert(event_log_max_size != 0U); err = fdtw_write_inplace_cells(dtb, node, DTB_PROP_HW_LOG_MAX_SIZE, 1, &event_log_max_size); if (err < 0) { ERROR("%sDTB property '%s'\n", "Unable to write ", DTB_PROP_HW_LOG_MAX_SIZE); return err; } err = fdtw_write_inplace_cells(dtb, node, DTB_PROP_HW_LOG_SIZE, 1, &log_size); if (err < 0) { ERROR("%sDTB property '%s'\n", "Unable to write ", DTB_PROP_HW_LOG_SIZE); } else { /* * Ensure that the info written to the DTB is visible * to other images. */ flush_dcache_range(config_base, fdt_totalsize(dtb)); } return err; } /* * This function writes the Event Log address and its size * in the TOS_FW_CONFIG DTB. * * This function is supposed to be called only by BL2. * * Returns: * 0 = success * < 0 = error */ int arm_set_tos_fw_info(uintptr_t log_addr, size_t log_size) { uintptr_t config_base; const bl_mem_params_node_t *cfg_mem_params; int err; assert(log_addr != 0UL); /* Get the config load address and size of TOS_FW_CONFIG */ cfg_mem_params = get_bl_mem_params_node(TOS_FW_CONFIG_ID); assert(cfg_mem_params != NULL); config_base = cfg_mem_params->image_info.image_base; /* Write the Event Log address and its size in the DTB */ err = arm_set_event_log_info(config_base, #ifdef SPD_opteed 0UL, #endif log_addr, log_size); if (err < 0) { ERROR("%sEvent Log data to TOS_FW_CONFIG\n", "Unable to write "); } return err; } /* * This function writes the Event Log address and its size * in the NT_FW_CONFIG DTB. * * This function is supposed to be called only by BL2. * * Returns: * 0 = success * < 0 = error */ int arm_set_nt_fw_info( #ifdef SPD_opteed uintptr_t log_addr, #endif size_t log_size, uintptr_t *ns_log_addr) { uintptr_t config_base; uintptr_t ns_addr; const bl_mem_params_node_t *cfg_mem_params; int err; assert(ns_log_addr != NULL); /* Get the config load address and size from NT_FW_CONFIG */ cfg_mem_params = get_bl_mem_params_node(NT_FW_CONFIG_ID); assert(cfg_mem_params != NULL); config_base = cfg_mem_params->image_info.image_base; /* Calculate Event Log address in Non-secure memory */ ns_addr = cfg_mem_params->image_info.image_base + cfg_mem_params->image_info.image_max_size; /* Check for memory space */ if ((uint64_t)(ns_addr + log_size) > ARM_NS_DRAM1_END) { return -1; } /* Write the Event Log address and its size in the DTB */ err = arm_set_event_log_info(config_base, #ifdef SPD_opteed log_addr, #endif ns_addr, log_size); /* Return Event Log address in Non-secure memory */ *ns_log_addr = (err < 0) ? 0UL : ns_addr; return err; } /* * This function writes the Event Log address and its size * in the TB_FW_CONFIG DTB. * * This function is supposed to be called only by BL1. * * Returns: * 0 = success * < 0 = error */ int arm_set_tb_fw_info(uintptr_t log_addr, size_t log_size, size_t log_max_size) { /* * Read tb_fw_config device tree for Event Log properties * and write the Event Log address and its size in the DTB */ const struct dyn_cfg_dtb_info_t *tb_fw_config_info; uintptr_t tb_fw_cfg_dtb; int err; tb_fw_config_info = FCONF_GET_PROPERTY(dyn_cfg, dtb, TB_FW_CONFIG_ID); assert(tb_fw_config_info != NULL); tb_fw_cfg_dtb = tb_fw_config_info->config_addr; event_log_max_size = log_max_size; err = arm_set_event_log_info(tb_fw_cfg_dtb, #ifdef SPD_opteed 0UL, #endif log_addr, log_size); return err; } /* * This function reads the Event Log address and its size * properties present in TB_FW_CONFIG DTB. * * This function is supposed to be called only by BL2. * * Returns: * 0 = success * < 0 = error * Alongside returns Event Log address and its size. */ int arm_get_tb_fw_info(uint64_t *log_addr, size_t *log_size, size_t *log_max_size) { /* As libfdt uses void *, we can't avoid this cast */ const struct dyn_cfg_dtb_info_t *tb_fw_config_info; int node, rc; tb_fw_config_info = FCONF_GET_PROPERTY(dyn_cfg, dtb, TB_FW_CONFIG_ID); assert(tb_fw_config_info != NULL); void *dtb = (void *)tb_fw_config_info->config_addr; const char *compatible = "arm,tpm_event_log"; /* Assert the node offset point to compatible property */ node = fdt_node_offset_by_compatible(dtb, -1, compatible); if (node < 0) { WARN("The compatible property '%s'%s", compatible, " not specified in TB_FW config.\n"); return node; } VERBOSE("Dyn cfg: '%s'%s", compatible, " found in the config\n"); rc = fdt_read_uint64(dtb, node, DTB_PROP_HW_LOG_ADDR, log_addr); if (rc != 0) { ERROR("%s%s", DTB_PROP_HW_LOG_ADDR, " not specified in TB_FW config.\n"); return rc; } rc = fdt_read_uint32(dtb, node, DTB_PROP_HW_LOG_SIZE, (uint32_t *)log_size); if (rc != 0) { ERROR("%s%s", DTB_PROP_HW_LOG_SIZE, " not specified in TB_FW config.\n"); return rc; } rc = fdt_read_uint32(dtb, node, DTB_PROP_HW_LOG_MAX_SIZE, (uint32_t *)log_max_size); if (rc != 0) { ERROR("%s%s", DTB_PROP_HW_LOG_MAX_SIZE, " not specified in TB_FW config.\n"); return rc; } else { event_log_max_size = *log_max_size; } return rc; } #endif /* DICE_PROTECTION_ENVIRONMENT */ #endif /* MEASURED_BOOT */