/* * Copyright 2020-2022 NXP * * SPDX-License-Identifier: BSD-3-Clause */ #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #define TRUSTY_PARAMS_LEN_BYTES (4096*2) static const mmap_region_t imx_mmap[] = { GIC_MAP, AIPS_MAP, OCRAM_S_MAP, DDRC_MAP, NOC_MAP, CAAM_RAM_MAP, NS_OCRAM_MAP, ROM_MAP, DRAM_MAP, {0}, }; static const struct aipstz_cfg aipstz[] = { {IMX_AIPSTZ1, 0x77777777, 0x77777777, .opacr = {0x0, 0x0, 0x0, 0x0, 0x0}, }, {IMX_AIPSTZ2, 0x77777777, 0x77777777, .opacr = {0x0, 0x0, 0x0, 0x0, 0x0}, }, {IMX_AIPSTZ3, 0x77777777, 0x77777777, .opacr = {0x0, 0x0, 0x0, 0x0, 0x0}, }, {IMX_AIPSTZ4, 0x77777777, 0x77777777, .opacr = {0x0, 0x0, 0x0, 0x0, 0x0}, }, {0}, }; static struct imx_rdc_cfg rdc[] = { /* Master domain assignment */ RDC_MDAn(RDC_MDA_M7, DID1), /* peripherals domain permission */ RDC_PDAPn(RDC_PDAP_UART2, D0R | D0W), /* memory region */ /* Sentinel */ {0}, }; static const struct imx_csu_cfg csu_cfg[] = { /* peripherals csl setting */ CSU_CSLx(CSU_CSL_OCRAM, CSU_SEC_LEVEL_2, LOCKED), CSU_CSLx(CSU_CSL_OCRAM_S, CSU_SEC_LEVEL_2, LOCKED), CSU_CSLx(CSU_CSL_RDC, CSU_SEC_LEVEL_3, LOCKED), CSU_CSLx(CSU_CSL_TZASC, CSU_SEC_LEVEL_5, LOCKED), CSU_CSLx(CSU_CSL_CSU, CSU_SEC_LEVEL_5, LOCKED), /* master HP0~1 */ /* SA setting */ CSU_SA(CSU_SA_M7, NON_SEC_ACCESS, LOCKED), CSU_SA(CSU_SA_SDMA1, NON_SEC_ACCESS, LOCKED), CSU_SA(CSU_SA_PCIE_CTRL1, NON_SEC_ACCESS, LOCKED), CSU_SA(CSU_SA_USB1, NON_SEC_ACCESS, LOCKED), CSU_SA(CSU_SA_USB2, NON_SEC_ACCESS, LOCKED), CSU_SA(CSU_SA_APB_HDMA, NON_SEC_ACCESS, LOCKED), CSU_SA(CSU_SA_ENET1, NON_SEC_ACCESS, LOCKED), CSU_SA(CSU_SA_USDHC1, NON_SEC_ACCESS, LOCKED), CSU_SA(CSU_SA_USDHC2, NON_SEC_ACCESS, LOCKED), CSU_SA(CSU_SA_USDHC3, NON_SEC_ACCESS, LOCKED), CSU_SA(CSU_SA_HUGO, NON_SEC_ACCESS, LOCKED), CSU_SA(CSU_SA_DAP, NON_SEC_ACCESS, LOCKED), CSU_SA(CSU_SA_SDMA2, NON_SEC_ACCESS, LOCKED), CSU_SA(CSU_SA_SDMA3, NON_SEC_ACCESS, LOCKED), CSU_SA(CSU_SA_LCDIF1, NON_SEC_ACCESS, LOCKED), CSU_SA(CSU_SA_ISI, NON_SEC_ACCESS, LOCKED), CSU_SA(CSU_SA_NPU, NON_SEC_ACCESS, LOCKED), CSU_SA(CSU_SA_LCDIF2, NON_SEC_ACCESS, LOCKED), CSU_SA(CSU_SA_HDMI_TX, NON_SEC_ACCESS, LOCKED), CSU_SA(CSU_SA_ENET2, NON_SEC_ACCESS, LOCKED), CSU_SA(CSU_SA_GPU3D, NON_SEC_ACCESS, LOCKED), CSU_SA(CSU_SA_GPU2D, NON_SEC_ACCESS, LOCKED), CSU_SA(CSU_SA_VPU_G1, NON_SEC_ACCESS, LOCKED), CSU_SA(CSU_SA_VPU_G2, NON_SEC_ACCESS, LOCKED), CSU_SA(CSU_SA_VPU_VC8000E, NON_SEC_ACCESS, LOCKED), CSU_SA(CSU_SA_AUDIO_EDMA, NON_SEC_ACCESS, LOCKED), CSU_SA(CSU_SA_ISP1, NON_SEC_ACCESS, LOCKED), CSU_SA(CSU_SA_ISP2, NON_SEC_ACCESS, LOCKED), CSU_SA(CSU_SA_DEWARP, NON_SEC_ACCESS, LOCKED), CSU_SA(CSU_SA_GIC500, NON_SEC_ACCESS, LOCKED), /* HP control setting */ /* Sentinel */ {0} }; static entry_point_info_t bl32_image_ep_info; static entry_point_info_t bl33_image_ep_info; /* get SPSR for BL33 entry */ static uint32_t get_spsr_for_bl33_entry(void) { unsigned long el_status; unsigned long mode; uint32_t spsr; /* figure out what mode we enter the non-secure world */ el_status = read_id_aa64pfr0_el1() >> ID_AA64PFR0_EL2_SHIFT; el_status &= ID_AA64PFR0_ELX_MASK; mode = (el_status) ? MODE_EL2 : MODE_EL1; spsr = SPSR_64(mode, MODE_SP_ELX, DISABLE_ALL_EXCEPTIONS); return spsr; } static void bl31_tzc380_setup(void) { unsigned int val; val = mmio_read_32(IMX_IOMUX_GPR_BASE + 0x28); if ((val & GPR_TZASC_EN) != GPR_TZASC_EN) return; tzc380_init(IMX_TZASC_BASE); /* * Need to substact offset 0x40000000 from CPU address when * programming tzasc region for i.mx8mp. */ /* Enable 1G-5G S/NS RW */ tzc380_configure_region(0, 0x00000000, TZC_ATTR_REGION_SIZE(TZC_REGION_SIZE_4G) | TZC_ATTR_REGION_EN_MASK | TZC_ATTR_SP_ALL); } void bl31_early_platform_setup2(u_register_t arg0, u_register_t arg1, u_register_t arg2, u_register_t arg3) { unsigned int console_base = IMX_BOOT_UART_BASE; static console_t console; unsigned int val; unsigned int i; int ret; /* Enable CSU NS access permission */ for (i = 0; i < 64; i++) { mmio_write_32(IMX_CSU_BASE + i * 4, 0x00ff00ff); } imx_aipstz_init(aipstz); if (console_base == 0U) { console_base = imx8m_uart_get_base(); } imx_rdc_init(rdc, console_base); imx_csu_init(csu_cfg); /* config the ocram memory range for secure access */ mmio_write_32(IMX_IOMUX_GPR_BASE + 0x2c, 0x4E1); val = mmio_read_32(IMX_IOMUX_GPR_BASE + 0x2c); mmio_write_32(IMX_IOMUX_GPR_BASE + 0x2c, val | 0x3DFF0000); console_imx_uart_register(console_base, IMX_BOOT_UART_CLK_IN_HZ, IMX_CONSOLE_BAUDRATE, &console); /* This console is only used for boot stage */ console_set_scope(&console, CONSOLE_FLAG_BOOT); imx8m_caam_init(); /* * tell BL3-1 where the non-secure software image is located * and the entry state information. */ bl33_image_ep_info.pc = PLAT_NS_IMAGE_OFFSET; bl33_image_ep_info.spsr = get_spsr_for_bl33_entry(); SET_SECURITY_STATE(bl33_image_ep_info.h.attr, NON_SECURE); #if defined(SPD_opteed) || defined(SPD_trusty) /* Populate entry point information for BL32 */ SET_PARAM_HEAD(&bl32_image_ep_info, PARAM_EP, VERSION_1, 0); SET_SECURITY_STATE(bl32_image_ep_info.h.attr, SECURE); bl32_image_ep_info.pc = BL32_BASE; bl32_image_ep_info.spsr = 0; /* Pass TEE base and size to bl33 */ bl33_image_ep_info.args.arg1 = BL32_BASE; bl33_image_ep_info.args.arg2 = BL32_SIZE; #ifdef SPD_trusty bl32_image_ep_info.args.arg0 = BL32_SIZE; bl32_image_ep_info.args.arg1 = BL32_BASE; #else /* Make sure memory is clean */ mmio_write_32(BL32_FDT_OVERLAY_ADDR, 0); bl33_image_ep_info.args.arg3 = BL32_FDT_OVERLAY_ADDR; bl32_image_ep_info.args.arg3 = BL32_FDT_OVERLAY_ADDR; #endif #endif ret = imx_bl31_params_parse(arg0, IMX_NS_OCRAM_SIZE, IMX_NS_OCRAM_BASE, &bl32_image_ep_info, &bl33_image_ep_info); if (ret != 0) { ret = imx_bl31_params_parse(arg0, IMX_TCM_BASE, IMX_TCM_SIZE, &bl32_image_ep_info, &bl33_image_ep_info); } #if !defined(SPD_opteed) && !defined(SPD_trusty) enable_snvs_privileged_access(); #endif bl31_tzc380_setup(); } #define MAP_BL31_TOTAL \ MAP_REGION_FLAT(BL31_START, BL31_SIZE, MT_MEMORY | MT_RW | MT_SECURE) #define MAP_BL31_RO \ MAP_REGION_FLAT(BL_CODE_BASE, BL_CODE_END - BL_CODE_BASE, MT_MEMORY | MT_RO | MT_SECURE) #define MAP_COHERENT_MEM \ MAP_REGION_FLAT(BL_COHERENT_RAM_BASE, BL_COHERENT_RAM_END - BL_COHERENT_RAM_BASE, \ MT_DEVICE | MT_RW | MT_SECURE) #define MAP_BL32_TOTAL \ MAP_REGION_FLAT(BL32_BASE, BL32_SIZE, MT_MEMORY | MT_RW) void bl31_plat_arch_setup(void) { const mmap_region_t bl_regions[] = { MAP_BL31_TOTAL, MAP_BL31_RO, #if USE_COHERENT_MEM MAP_COHERENT_MEM, #endif #if defined(SPD_opteed) || defined(SPD_trusty) /* Map TEE memory */ MAP_BL32_TOTAL, #endif {0} }; setup_page_tables(bl_regions, imx_mmap); enable_mmu_el3(0); } void bl31_platform_setup(void) { generic_delay_timer_init(); /* select the CKIL source to 32K OSC */ mmio_write_32(IMX_ANAMIX_BASE + ANAMIX_MISC_CTL, 0x1); /* Init the dram info */ dram_info_init(SAVED_DRAM_TIMING_BASE); plat_gic_driver_init(); plat_gic_init(); imx_gpc_init(); } entry_point_info_t *bl31_plat_get_next_image_ep_info(unsigned int type) { if (type == NON_SECURE) { return &bl33_image_ep_info; } if (type == SECURE) { return &bl32_image_ep_info; } return NULL; } unsigned int plat_get_syscnt_freq2(void) { return COUNTER_FREQUENCY; } #ifdef SPD_trusty void plat_trusty_set_boot_args(aapcs64_params_t *args) { args->arg0 = BL32_SIZE; args->arg1 = BL32_BASE; args->arg2 = TRUSTY_PARAMS_LEN_BYTES; } #endif