123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274 |
- #
- # Copyright (c) 2023-2024, STMicroelectronics - All Rights Reserved
- #
- # SPDX-License-Identifier: BSD-3-Clause
- #
- RESET_TO_BL2 := 1
- STM32MP_RECONFIGURE_CONSOLE ?= 0
- STM32MP_UART_BAUDRATE ?= 115200
- TRUSTED_BOARD_BOOT ?= 0
- STM32MP_USE_EXTERNAL_HEAP ?= 0
- # Use secure library from the ROM code for authentication
- STM32MP_CRYPTO_ROM_LIB ?= 0
- # Please don't increment this value without good understanding of
- # the monotonic counter
- STM32_TF_VERSION ?= 0
- # Enable dynamic memory mapping
- PLAT_XLAT_TABLES_DYNAMIC := 1
- # STM32 image header binary type for BL2
- STM32_HEADER_BL2_BINARY_TYPE := 0x10
- TF_CFLAGS += -Wsign-compare
- TF_CFLAGS += -Wformat-signedness
- # Number of TF-A copies in the device
- STM32_TF_A_COPIES := 2
- # PLAT_PARTITION_MAX_ENTRIES must take care of STM32_TF-A_COPIES and other partitions
- PLAT_PARTITION_MAX_ENTRIES := $(shell echo $$(($(STM32_TF_A_COPIES) + $(STM32_EXTRA_PARTS))))
- ifeq (${PSA_FWU_SUPPORT},1)
- # Number of banks of updatable firmware
- NR_OF_FW_BANKS := 2
- NR_OF_IMAGES_IN_FW_BANK := 1
- FWU_MAX_PART = $(shell echo $$(($(STM32_TF_A_COPIES) + 2 + $(NR_OF_FW_BANKS))))
- ifeq ($(shell test $(FWU_MAX_PART) -gt $(PLAT_PARTITION_MAX_ENTRIES); echo $$?),0)
- $(error "Required partition number is $(FWU_MAX_PART) where PLAT_PARTITION_MAX_ENTRIES is only \
- $(PLAT_PARTITION_MAX_ENTRIES)")
- endif
- endif
- # Boot devices
- STM32MP_EMMC ?= 0
- STM32MP_SDMMC ?= 0
- STM32MP_RAW_NAND ?= 0
- STM32MP_SPI_NAND ?= 0
- STM32MP_SPI_NOR ?= 0
- # Put both BL2 and FIP in eMMC boot partition
- STM32MP_EMMC_BOOT ?= 0
- # Serial boot devices
- STM32MP_UART_PROGRAMMER ?= 0
- STM32MP_USB_PROGRAMMER ?= 0
- $(eval DTC_V = $(shell $($(ARCH)-dtc) -v | awk '{print $$NF}'))
- $(eval DTC_VERSION = $(shell printf "%d" $(shell echo ${DTC_V} | cut -d- -f1 | sed "s/\./0/g" | grep -o "[0-9]*")))
- DTC_CPPFLAGS += ${INCLUDES}
- DTC_FLAGS += -Wno-unit_address_vs_reg
- ifeq ($(shell test $(DTC_VERSION) -ge 10601; echo $$?),0)
- DTC_FLAGS += -Wno-interrupt_provider
- endif
- # Macros and rules to build TF binary
- STM32_TF_ELF_LDFLAGS := --hash-style=gnu --as-needed
- STM32_TF_LINKERFILE := ${BUILD_PLAT}/${PLAT}.ld
- ASFLAGS += -DBL2_BIN_PATH=\"${BUILD_PLAT}/bl2.bin\"
- # Variables for use with stm32image
- STM32IMAGEPATH ?= tools/stm32image
- STM32IMAGE ?= ${STM32IMAGEPATH}/stm32image${BIN_EXT}
- STM32IMAGE_SRC := ${STM32IMAGEPATH}/stm32image.c
- STM32_DEPS += ${STM32IMAGE}
- FIP_DEPS += dtbs
- STM32MP_HW_CONFIG := ${BL33_CFG}
- # Add the HW_CONFIG to FIP and specify the same to certtool
- $(eval $(call TOOL_ADD_PAYLOAD,${STM32MP_HW_CONFIG},--hw-config))
- # Add the build options to pack Trusted OS Extra1 and Trusted OS Extra2 images
- # in the FIP if the platform requires.
- ifneq ($(BL32_EXTRA1),)
- $(eval $(call TOOL_ADD_IMG,BL32_EXTRA1,--tos-fw-extra1,,$(ENCRYPT_BL32)))
- endif
- ifneq ($(BL32_EXTRA2),)
- $(eval $(call TOOL_ADD_IMG,BL32_EXTRA2,--tos-fw-extra2,,$(ENCRYPT_BL32)))
- endif
- # Enable flags for C files
- $(eval $(call assert_booleans,\
- $(sort \
- PLAT_XLAT_TABLES_DYNAMIC \
- STM32MP_EMMC \
- STM32MP_EMMC_BOOT \
- STM32MP_RAW_NAND \
- STM32MP_RECONFIGURE_CONSOLE \
- STM32MP_SDMMC \
- STM32MP_SPI_NAND \
- STM32MP_SPI_NOR \
- STM32MP_UART_PROGRAMMER \
- STM32MP_USB_PROGRAMMER \
- )))
- $(eval $(call assert_numerics,\
- $(sort \
- STM32_TF_VERSION \
- STM32MP_UART_BAUDRATE \
- )))
- $(eval $(call add_defines,\
- $(sort \
- PLAT_XLAT_TABLES_DYNAMIC \
- STM32_TF_VERSION \
- STM32MP_EMMC \
- STM32MP_EMMC_BOOT \
- STM32MP_RAW_NAND \
- STM32MP_RECONFIGURE_CONSOLE \
- STM32MP_SDMMC \
- STM32MP_SPI_NAND \
- STM32MP_SPI_NOR \
- STM32MP_UART_BAUDRATE \
- STM32MP_UART_PROGRAMMER \
- STM32MP_USB_PROGRAMMER \
- )))
- # Include paths and source files
- PLAT_INCLUDES += -Iplat/st/common/include/
- include lib/fconf/fconf.mk
- include lib/libfdt/libfdt.mk
- include lib/zlib/zlib.mk
- ifeq (${PSA_FWU_SUPPORT},1)
- include drivers/fwu/fwu.mk
- endif
- PLAT_BL_COMMON_SOURCES += common/uuid.c \
- plat/st/common/stm32mp_common.c
- include lib/xlat_tables_v2/xlat_tables.mk
- PLAT_BL_COMMON_SOURCES += ${XLAT_TABLES_LIB_SRCS}
- PLAT_BL_COMMON_SOURCES += drivers/clk/clk.c \
- drivers/delay_timer/delay_timer.c \
- drivers/delay_timer/generic_delay_timer.c \
- drivers/st/clk/stm32mp_clkfunc.c \
- drivers/st/ddr/stm32mp_ddr.c \
- drivers/st/gpio/stm32_gpio.c \
- drivers/st/regulator/regulator_core.c \
- drivers/st/regulator/regulator_fixed.c \
- plat/st/common/stm32mp_dt.c
- BL2_SOURCES += ${FCONF_SOURCES} ${FCONF_DYN_SOURCES}
- BL2_SOURCES += $(ZLIB_SOURCES)
- BL2_SOURCES += drivers/io/io_fip.c \
- plat/st/common/bl2_io_storage.c \
- plat/st/common/plat_image_load.c \
- plat/st/common/stm32mp_fconf_io.c
- BL2_SOURCES += drivers/io/io_block.c \
- drivers/io/io_mtd.c \
- drivers/io/io_storage.c
- ifneq (${DECRYPTION_SUPPORT},none)
- BL2_SOURCES += drivers/io/io_encrypted.c
- endif
- ifeq (${TRUSTED_BOARD_BOOT},1)
- AUTH_SOURCES := drivers/auth/auth_mod.c \
- drivers/auth/crypto_mod.c \
- drivers/auth/img_parser_mod.c
- ifeq (${GENERATE_COT},1)
- TFW_NVCTR_VAL := 0
- NTFW_NVCTR_VAL := 0
- KEY_ALG := ecdsa
- HASH_ALG := sha256
- ifeq (${SAVE_KEYS},1)
- TRUSTED_WORLD_KEY ?= ${BUILD_PLAT}/trusted.pem
- NON_TRUSTED_WORLD_KEY ?= ${BUILD_PLAT}/non-trusted.pem
- BL32_KEY ?= ${BUILD_PLAT}/trusted_os.pem
- BL33_KEY ?= ${BUILD_PLAT}/non-trusted_os.pem
- endif
- endif
- TF_MBEDTLS_KEY_ALG := ecdsa
- KEY_SIZE := 256
- ifneq (${MBEDTLS_DIR},)
- MBEDTLS_MAJOR=$(shell grep -hP "define MBEDTLS_VERSION_MAJOR" \
- ${MBEDTLS_DIR}/include/mbedtls/*.h | grep -oe '\([0-9.]*\)')
- ifeq (${MBEDTLS_MAJOR}, 3)
- MBEDTLS_CONFIG_FILE ?= "<stm32mp_mbedtls_config-3.h>"
- else
- $(error Error: TF-A only supports MbedTLS versions > 3.x)
- endif
- endif
- include drivers/auth/mbedtls/mbedtls_x509.mk
- COT_DESC_IN_DTB := 1
- AUTH_SOURCES += lib/fconf/fconf_cot_getter.c \
- lib/fconf/fconf_tbbr_getter.c \
- plat/st/common/stm32mp_crypto_lib.c
- BL2_SOURCES += $(AUTH_SOURCES) \
- plat/st/common/stm32mp_trusted_boot.c
- endif
- ifneq ($(filter 1,${STM32MP_EMMC} ${STM32MP_SDMMC}),)
- BL2_SOURCES += drivers/mmc/mmc.c \
- drivers/partition/gpt.c \
- drivers/partition/partition.c
- endif
- ifneq ($(filter 1,${STM32MP_SPI_NAND} ${STM32MP_SPI_NOR}),)
- BL2_SOURCES += drivers/mtd/spi-mem/spi_mem.c
- endif
- ifeq (${STM32MP_RAW_NAND},1)
- $(eval $(call add_define_val,NAND_ONFI_DETECT,1))
- BL2_SOURCES += drivers/mtd/nand/raw_nand.c
- endif
- ifeq (${STM32MP_SPI_NAND},1)
- BL2_SOURCES += drivers/mtd/nand/spi_nand.c
- endif
- ifeq (${STM32MP_SPI_NOR},1)
- ifneq (${STM32MP_FORCE_MTD_START_OFFSET},)
- $(eval $(call add_define_val,STM32MP_NOR_FIP_OFFSET,${STM32MP_FORCE_MTD_START_OFFSET}))
- endif
- BL2_SOURCES += drivers/mtd/nor/spi_nor.c
- endif
- ifneq ($(filter 1,${STM32MP_RAW_NAND} ${STM32MP_SPI_NAND}),)
- ifneq (${STM32MP_FORCE_MTD_START_OFFSET},)
- $(eval $(call add_define_val,STM32MP_NAND_FIP_OFFSET,${STM32MP_FORCE_MTD_START_OFFSET}))
- endif
- BL2_SOURCES += drivers/mtd/nand/core.c
- endif
- ifneq ($(filter 1,${STM32MP_UART_PROGRAMMER} ${STM32MP_USB_PROGRAMMER}),)
- BL2_SOURCES += drivers/io/io_memmap.c
- endif
- ifeq (${STM32MP_UART_PROGRAMMER},1)
- BL2_SOURCES += plat/st/common/stm32cubeprogrammer_uart.c
- endif
- ifeq (${STM32MP_USB_PROGRAMMER},1)
- BL2_SOURCES += drivers/usb/usb_device.c \
- plat/st/common/stm32cubeprogrammer_usb.c \
- plat/st/common/usb_dfu.c
- endif
- BL2_SOURCES += drivers/st/ddr/stm32mp_ddr_test.c \
- drivers/st/ddr/stm32mp_ram.c
- BL2_SOURCES += common/desc_image_load.c
- BL2_SOURCES += lib/optee/optee_utils.c
|