Browse Source
This patch adds a rudimentary SPM dispatcher component in EL3. It does the following: - Consumes the TOS_FW_CONFIG to determine properties of the SPM core component - Initialises the SPM core component which resides in the BL32 image - Implements a handler for SPCI calls from either security state. Some basic validation is done for each call but in most cases it is simply forwarded as-is to the "other" security state. Signed-off-by: Achin Gupta <achin.gupta@arm.com> Signed-off-by: Artsem Artsemenka <artsem.artsemenka@arm.com> Change-Id: I7d116814557f7255f4f4ebb797d1619d4fbab590pull/1938/head
Achin Gupta
5 years ago
committed by
Max Shvetsov
5 changed files with 684 additions and 0 deletions
@ -0,0 +1,25 @@ |
|||
/*
|
|||
* Copyright (c) 2020, ARM Limited and Contributors. All rights reserved. |
|||
* |
|||
* SPDX-License-Identifier: BSD-3-Clause |
|||
*/ |
|||
|
|||
#ifndef SPMD_SVC_H |
|||
#define SPMD_SVC_H |
|||
|
|||
#ifndef __ASSEMBLER__ |
|||
#include <services/spci_svc.h> |
|||
#include <stdint.h> |
|||
|
|||
int32_t spmd_setup(void); |
|||
uint64_t spmd_smc_handler(uint32_t smc_fid, |
|||
uint64_t x1, |
|||
uint64_t x2, |
|||
uint64_t x3, |
|||
uint64_t x4, |
|||
void *cookie, |
|||
void *handle, |
|||
uint64_t flags); |
|||
#endif /* __ASSEMBLER__ */ |
|||
|
|||
#endif /* SPMD_SVC_H */ |
@ -0,0 +1,73 @@ |
|||
/* |
|||
* Copyright (c) 2020, ARM Limited and Contributors. All rights reserved. |
|||
* |
|||
* SPDX-License-Identifier: BSD-3-Clause |
|||
*/ |
|||
|
|||
#include <asm_macros.S> |
|||
#include "../spmd_private.h" |
|||
|
|||
.global spmd_spm_core_enter |
|||
.global spmd_spm_core_exit |
|||
|
|||
/* --------------------------------------------------------------------- |
|||
* This function is called with SP_EL0 as stack. Here we stash our EL3 |
|||
* callee-saved registers on to the stack as a part of saving the C |
|||
* runtime and enter the secure payload. |
|||
* 'x0' contains a pointer to the memory where the address of the C |
|||
* runtime context is to be saved. |
|||
* --------------------------------------------------------------------- |
|||
*/ |
|||
func spmd_spm_core_enter |
|||
/* Make space for the registers that we're going to save */ |
|||
mov x3, sp |
|||
str x3, [x0, #0] |
|||
sub sp, sp, #SPMD_C_RT_CTX_SIZE |
|||
|
|||
/* Save callee-saved registers on to the stack */ |
|||
stp x19, x20, [sp, #SPMD_C_RT_CTX_X19] |
|||
stp x21, x22, [sp, #SPMD_C_RT_CTX_X21] |
|||
stp x23, x24, [sp, #SPMD_C_RT_CTX_X23] |
|||
stp x25, x26, [sp, #SPMD_C_RT_CTX_X25] |
|||
stp x27, x28, [sp, #SPMD_C_RT_CTX_X27] |
|||
stp x29, x30, [sp, #SPMD_C_RT_CTX_X29] |
|||
|
|||
/* --------------------------------------------------------------------- |
|||
* Everything is setup now. el3_exit() will use the secure context to |
|||
* restore to the general purpose and EL3 system registers to ERET |
|||
* into the secure payload. |
|||
* --------------------------------------------------------------------- |
|||
*/ |
|||
b el3_exit |
|||
endfunc spmd_spm_core_enter |
|||
|
|||
/* --------------------------------------------------------------------- |
|||
* This function is called with 'x0' pointing to a C runtime context. |
|||
* It restores the saved registers and jumps to that runtime with 'x0' |
|||
* as the new SP register. This destroys the C runtime context that had |
|||
* been built on the stack below the saved context by the caller. Later |
|||
* the second parameter 'x1' is passed as a return value to the caller. |
|||
* --------------------------------------------------------------------- |
|||
*/ |
|||
func spmd_spm_core_exit |
|||
/* Restore the previous stack */ |
|||
mov sp, x0 |
|||
|
|||
/* Restore callee-saved registers on to the stack */ |
|||
ldp x19, x20, [x0, #(SPMD_C_RT_CTX_X19 - SPMD_C_RT_CTX_SIZE)] |
|||
ldp x21, x22, [x0, #(SPMD_C_RT_CTX_X21 - SPMD_C_RT_CTX_SIZE)] |
|||
ldp x23, x24, [x0, #(SPMD_C_RT_CTX_X23 - SPMD_C_RT_CTX_SIZE)] |
|||
ldp x25, x26, [x0, #(SPMD_C_RT_CTX_X25 - SPMD_C_RT_CTX_SIZE)] |
|||
ldp x27, x28, [x0, #(SPMD_C_RT_CTX_X27 - SPMD_C_RT_CTX_SIZE)] |
|||
ldp x29, x30, [x0, #(SPMD_C_RT_CTX_X29 - SPMD_C_RT_CTX_SIZE)] |
|||
|
|||
/* --------------------------------------------------------------------- |
|||
* This should take us back to the instruction after the call to the |
|||
* last spm_secure_partition_enter().* Place the second parameter to x0 |
|||
* so that the caller will see it as a return value from the original |
|||
* entry call. |
|||
* --------------------------------------------------------------------- |
|||
*/ |
|||
mov x0, x1 |
|||
ret |
|||
endfunc spmd_spm_core_exit |
@ -0,0 +1,21 @@ |
|||
#
|
|||
# Copyright (c) 2020, ARM Limited and Contributors. All rights reserved.
|
|||
#
|
|||
# SPDX-License-Identifier: BSD-3-Clause
|
|||
#
|
|||
|
|||
ifneq (${ARCH},aarch64) |
|||
$(error "Error: SPMD is only supported on aarch64.") |
|||
endif |
|||
|
|||
SPMD_SOURCES += $(addprefix services/std_svc/spmd/, \
|
|||
${ARCH}/spmd_helpers.S \
|
|||
spmd_main.c) |
|||
|
|||
# Let the top-level Makefile know that we intend to include a BL32 image
|
|||
NEED_BL32 := yes |
|||
|
|||
# Enable dynamic memory mapping
|
|||
# The SPMD component maps the SPMC DTB within BL31 virtual space.
|
|||
PLAT_XLAT_TABLES_DYNAMIC := 1 |
|||
$(eval $(call add_define,PLAT_XLAT_TABLES_DYNAMIC)) |
@ -0,0 +1,487 @@ |
|||
/*
|
|||
* Copyright (c) 2020, ARM Limited and Contributors. All rights reserved. |
|||
* |
|||
* SPDX-License-Identifier: BSD-3-Clause |
|||
*/ |
|||
|
|||
#include <assert.h> |
|||
#include <errno.h> |
|||
#include <string.h> |
|||
|
|||
#include <arch_helpers.h> |
|||
#include <bl31/bl31.h> |
|||
#include <common/debug.h> |
|||
#include <common/runtime_svc.h> |
|||
#include <lib/el3_runtime/context_mgmt.h> |
|||
#include <lib/smccc.h> |
|||
#include <lib/spinlock.h> |
|||
#include <lib/utils.h> |
|||
#include <lib/xlat_tables/xlat_tables_v2.h> |
|||
#include <plat/common/common_def.h> |
|||
#include <plat/common/platform.h> |
|||
#include <platform_def.h> |
|||
#include <services/spci_svc.h> |
|||
#include <services/spmd_svc.h> |
|||
#include <smccc_helpers.h> |
|||
#include "spmd_private.h" |
|||
|
|||
/*******************************************************************************
|
|||
* SPM Core context information. |
|||
******************************************************************************/ |
|||
spmd_spm_core_context_t spm_core_context[PLATFORM_CORE_COUNT]; |
|||
|
|||
/*******************************************************************************
|
|||
* SPM Core attribute information read from its manifest. |
|||
******************************************************************************/ |
|||
spmc_manifest_sect_attribute_t spmc_attrs; |
|||
|
|||
/*******************************************************************************
|
|||
* This function takes an SP context pointer and performs a synchronous entry |
|||
* into it. |
|||
******************************************************************************/ |
|||
uint64_t spmd_spm_core_sync_entry(spmd_spm_core_context_t *spmc_ctx) |
|||
{ |
|||
uint64_t rc; |
|||
|
|||
assert(spmc_ctx != NULL); |
|||
|
|||
cm_set_context(&(spmc_ctx->cpu_ctx), SECURE); |
|||
|
|||
/* Restore the context assigned above */ |
|||
cm_el1_sysregs_context_restore(SECURE); |
|||
cm_set_next_eret_context(SECURE); |
|||
|
|||
/* Invalidate TLBs at EL1. */ |
|||
tlbivmalle1(); |
|||
dsbish(); |
|||
|
|||
/* Enter Secure Partition */ |
|||
rc = spmd_spm_core_enter(&spmc_ctx->c_rt_ctx); |
|||
|
|||
/* Save secure state */ |
|||
cm_el1_sysregs_context_save(SECURE); |
|||
|
|||
return rc; |
|||
} |
|||
|
|||
/*******************************************************************************
|
|||
* This function returns to the place where spm_sp_synchronous_entry() was |
|||
* called originally. |
|||
******************************************************************************/ |
|||
__dead2 void spmd_spm_core_sync_exit(uint64_t rc) |
|||
{ |
|||
spmd_spm_core_context_t *ctx = &spm_core_context[plat_my_core_pos()]; |
|||
|
|||
/* Get context of the SP in use by this CPU. */ |
|||
assert(cm_get_context(SECURE) == &(ctx->cpu_ctx)); |
|||
|
|||
/*
|
|||
* The SPMD must have initiated the original request through a |
|||
* synchronous entry into SPMC. Jump back to the original C runtime |
|||
* context with the value of rc in x0; |
|||
*/ |
|||
spmd_spm_core_exit(ctx->c_rt_ctx, rc); |
|||
|
|||
panic(); |
|||
} |
|||
|
|||
/*******************************************************************************
|
|||
* Jump to the SPM core for the first time. |
|||
******************************************************************************/ |
|||
static int32_t spmd_init(void) |
|||
{ |
|||
uint64_t rc = 0; |
|||
spmd_spm_core_context_t *ctx = &spm_core_context[plat_my_core_pos()]; |
|||
|
|||
INFO("SPM Core init start.\n"); |
|||
ctx->state = SPMC_STATE_RESET; |
|||
|
|||
rc = spmd_spm_core_sync_entry(ctx); |
|||
if (rc) { |
|||
ERROR("SPMC initialisation failed 0x%llx\n", rc); |
|||
panic(); |
|||
} |
|||
|
|||
ctx->state = SPMC_STATE_IDLE; |
|||
INFO("SPM Core init end.\n"); |
|||
|
|||
return 1; |
|||
} |
|||
|
|||
/*******************************************************************************
|
|||
* Initialize context of SPM core. |
|||
******************************************************************************/ |
|||
int32_t spmd_setup(void) |
|||
{ |
|||
int rc; |
|||
void *rd_base; |
|||
size_t rd_size; |
|||
entry_point_info_t *spmc_ep_info; |
|||
uintptr_t rd_base_align; |
|||
uintptr_t rd_size_align; |
|||
uint32_t ep_attr; |
|||
|
|||
spmc_ep_info = bl31_plat_get_next_image_ep_info(SECURE); |
|||
if (!spmc_ep_info) { |
|||
WARN("No SPM core image provided by BL2 boot loader, Booting " |
|||
"device without SP initialization. SMC`s destined for SPM " |
|||
"core will return SMC_UNK\n"); |
|||
return 1; |
|||
} |
|||
|
|||
/* Under no circumstances will this parameter be 0 */ |
|||
assert(spmc_ep_info->pc != 0U); |
|||
|
|||
/*
|
|||
* Check if BL32 ep_info has a reference to 'tos_fw_config'. This will |
|||
* be used as a manifest for the SPM core at the next lower EL/mode. |
|||
*/ |
|||
if (spmc_ep_info->args.arg0 == 0U || spmc_ep_info->args.arg2 == 0U) { |
|||
ERROR("Invalid or absent SPM core manifest\n"); |
|||
panic(); |
|||
} |
|||
|
|||
/* Obtain whereabouts of SPM core manifest */ |
|||
rd_base = (void *) spmc_ep_info->args.arg0; |
|||
rd_size = spmc_ep_info->args.arg2; |
|||
|
|||
rd_base_align = page_align((uintptr_t) rd_base, DOWN); |
|||
rd_size_align = page_align((uintptr_t) rd_size, UP); |
|||
|
|||
/* Map the manifest in the SPMD translation regime first */ |
|||
VERBOSE("SPM core manifest base : 0x%lx\n", rd_base_align); |
|||
VERBOSE("SPM core manifest size : 0x%lx\n", rd_size_align); |
|||
rc = mmap_add_dynamic_region((unsigned long long) rd_base_align, |
|||
(uintptr_t) rd_base_align, |
|||
rd_size_align, |
|||
MT_RO_DATA); |
|||
if (rc < 0) { |
|||
ERROR("Error while mapping SPM core manifest (%d).\n", rc); |
|||
panic(); |
|||
} |
|||
|
|||
/* Load the SPM core manifest */ |
|||
rc = plat_spm_core_manifest_load(&spmc_attrs, rd_base, rd_size); |
|||
if (rc < 0) { |
|||
WARN("No or invalid SPM core manifest image provided by BL2 " |
|||
"boot loader. "); |
|||
goto error; |
|||
} |
|||
|
|||
/*
|
|||
* Ensure that the SPM core version is compatible with the SPM |
|||
* dispatcher version |
|||
*/ |
|||
if ((spmc_attrs.major_version != SPCI_VERSION_MAJOR) || |
|||
(spmc_attrs.minor_version > SPCI_VERSION_MINOR)) { |
|||
WARN("Unsupported SPCI version (%x.%x) specified in SPM core " |
|||
"manifest image provided by BL2 boot loader.\n", |
|||
spmc_attrs.major_version, spmc_attrs.minor_version); |
|||
goto error; |
|||
} |
|||
|
|||
INFO("SPCI version (%x.%x).\n", spmc_attrs.major_version, |
|||
spmc_attrs.minor_version); |
|||
|
|||
/* Validate the SPM core runtime EL */ |
|||
if ((spmc_attrs.runtime_el != MODE_EL1) && |
|||
(spmc_attrs.runtime_el != MODE_EL2)) { |
|||
WARN("Unsupported SPM core run time EL%x specified in " |
|||
"manifest image provided by BL2 boot loader.\n", |
|||
spmc_attrs.runtime_el); |
|||
goto error; |
|||
} |
|||
|
|||
INFO("SPM core run time EL%x.\n", spmc_attrs.runtime_el); |
|||
|
|||
/* Validate the SPM core execution state */ |
|||
if ((spmc_attrs.exec_state != MODE_RW_64) && |
|||
(spmc_attrs.exec_state != MODE_RW_32)) { |
|||
WARN("Unsupported SPM core execution state %x specified in " |
|||
"manifest image provided by BL2 boot loader.\n", |
|||
spmc_attrs.exec_state); |
|||
goto error; |
|||
} |
|||
|
|||
INFO("SPM core execution state %x.\n", spmc_attrs.exec_state); |
|||
|
|||
/* Ensure manifest has not requested S-EL2 in AArch32 state */ |
|||
if ((spmc_attrs.exec_state == MODE_RW_32) && |
|||
(spmc_attrs.runtime_el == MODE_EL2)) { |
|||
WARN("Invalid combination of SPM core execution state (%x) " |
|||
"and run time EL (%x).\n", spmc_attrs.exec_state, |
|||
spmc_attrs.runtime_el); |
|||
goto error; |
|||
} |
|||
|
|||
/*
|
|||
* Check if S-EL2 is supported on this system if S-EL2 |
|||
* is required for SPM |
|||
*/ |
|||
if (spmc_attrs.runtime_el == MODE_EL2) { |
|||
uint64_t sel2 = read_id_aa64pfr0_el1(); |
|||
|
|||
sel2 >>= ID_AA64PFR0_SEL2_SHIFT; |
|||
sel2 &= ID_AA64PFR0_SEL2_MASK; |
|||
|
|||
if (!sel2) { |
|||
WARN("SPM core run time EL: S-EL%x is not supported " |
|||
"but specified in manifest image provided by " |
|||
"BL2 boot loader.\n", spmc_attrs.runtime_el); |
|||
goto error; |
|||
} |
|||
} |
|||
|
|||
/* Initialise an entrypoint to set up the CPU context */ |
|||
ep_attr = SECURE | EP_ST_ENABLE; |
|||
if (read_sctlr_el3() & SCTLR_EE_BIT) |
|||
ep_attr |= EP_EE_BIG; |
|||
SET_PARAM_HEAD(spmc_ep_info, PARAM_EP, VERSION_1, ep_attr); |
|||
assert(spmc_ep_info->pc == BL32_BASE); |
|||
|
|||
/*
|
|||
* Populate SPSR for SPM core based upon validated parameters from the |
|||
* manifest |
|||
*/ |
|||
if (spmc_attrs.exec_state == MODE_RW_32) { |
|||
spmc_ep_info->spsr = SPSR_MODE32(MODE32_svc, SPSR_T_ARM, |
|||
SPSR_E_LITTLE, |
|||
DAIF_FIQ_BIT | |
|||
DAIF_IRQ_BIT | |
|||
DAIF_ABT_BIT); |
|||
} else { |
|||
spmc_ep_info->spsr = SPSR_64(spmc_attrs.runtime_el, |
|||
MODE_SP_ELX, |
|||
DISABLE_ALL_EXCEPTIONS); |
|||
} |
|||
|
|||
/* Initialise SPM core context with this entry point information */ |
|||
cm_setup_context(&(spm_core_context[plat_my_core_pos()].cpu_ctx), |
|||
spmc_ep_info); |
|||
|
|||
INFO("SPM core setup done.\n"); |
|||
|
|||
/* Register init function for deferred init. */ |
|||
bl31_register_bl32_init(&spmd_init); |
|||
|
|||
return 0; |
|||
|
|||
error: |
|||
WARN("Booting device without SPM initialization. " |
|||
"SPCI SMCs destined for SPM core will return " |
|||
"ENOTSUPPORTED\n"); |
|||
|
|||
rc = mmap_remove_dynamic_region(rd_base_align, rd_size_align); |
|||
if (rc < 0) { |
|||
ERROR("Error while unmapping SPM core manifest (%d).\n", |
|||
rc); |
|||
panic(); |
|||
} |
|||
|
|||
return 1; |
|||
} |
|||
|
|||
/*******************************************************************************
|
|||
* This function handles all SMCs in the range reserved for SPCI. Each call is |
|||
* either forwarded to the other security state or handled by the SPM dispatcher |
|||
******************************************************************************/ |
|||
uint64_t spmd_smc_handler(uint32_t smc_fid, uint64_t x1, uint64_t x2, |
|||
uint64_t x3, uint64_t x4, void *cookie, void *handle, |
|||
uint64_t flags) |
|||
{ |
|||
uint32_t in_sstate; |
|||
uint32_t out_sstate; |
|||
int32_t ret; |
|||
spmd_spm_core_context_t *ctx = &spm_core_context[plat_my_core_pos()]; |
|||
|
|||
/* Determine which security state this SMC originated from */ |
|||
if (is_caller_secure(flags)) { |
|||
in_sstate = SECURE; |
|||
out_sstate = NON_SECURE; |
|||
} else { |
|||
in_sstate = NON_SECURE; |
|||
out_sstate = SECURE; |
|||
} |
|||
|
|||
INFO("SPM: 0x%x, 0x%llx, 0x%llx, 0x%llx, 0x%llx, " |
|||
"0x%llx, 0x%llx, 0x%llx\n", |
|||
smc_fid, x1, x2, x3, x4, SMC_GET_GP(handle, CTX_GPREG_X5), |
|||
SMC_GET_GP(handle, CTX_GPREG_X6), |
|||
SMC_GET_GP(handle, CTX_GPREG_X7)); |
|||
|
|||
switch (smc_fid) { |
|||
case SPCI_ERROR: |
|||
/*
|
|||
* Check if this is the first invocation of this interface on |
|||
* this CPU. If so, then indicate that the SPM core initialised |
|||
* unsuccessfully. |
|||
*/ |
|||
if ((in_sstate == SECURE) && (ctx->state == SPMC_STATE_RESET)) |
|||
spmd_spm_core_sync_exit(x2); |
|||
|
|||
/* Save incoming security state */ |
|||
cm_el1_sysregs_context_save(in_sstate); |
|||
|
|||
/* Restore outgoing security state */ |
|||
cm_el1_sysregs_context_restore(out_sstate); |
|||
cm_set_next_eret_context(out_sstate); |
|||
|
|||
SMC_RET8(cm_get_context(out_sstate), smc_fid, x1, x2, x3, x4, |
|||
SMC_GET_GP(handle, CTX_GPREG_X5), |
|||
SMC_GET_GP(handle, CTX_GPREG_X6), |
|||
SMC_GET_GP(handle, CTX_GPREG_X7)); |
|||
break; /* not reached */ |
|||
|
|||
case SPCI_VERSION: |
|||
/*
|
|||
* TODO: This is an optimization that the version information |
|||
* provided by the SPM core manifest is returned by the SPM |
|||
* dispatcher. It might be a better idea to simply forward this |
|||
* call to the SPM core and wash our hands completely. |
|||
*/ |
|||
ret = MAKE_SPCI_VERSION(spmc_attrs.major_version, |
|||
spmc_attrs.minor_version); |
|||
SMC_RET8(handle, SPCI_SUCCESS_SMC32, SPCI_TARGET_INFO_MBZ, ret, |
|||
SPCI_PARAM_MBZ, SPCI_PARAM_MBZ, SPCI_PARAM_MBZ, |
|||
SPCI_PARAM_MBZ, SPCI_PARAM_MBZ); |
|||
break; /* not reached */ |
|||
|
|||
case SPCI_FEATURES: |
|||
/*
|
|||
* This is an optional interface. Do the minimal checks and |
|||
* forward to SPM core which will handle it if implemented. |
|||
*/ |
|||
|
|||
/*
|
|||
* Check if w1 holds a valid SPCI fid. This is an |
|||
* optimization. |
|||
*/ |
|||
if (!is_spci_fid(x1)) |
|||
SMC_RET8(handle, SPCI_ERROR, |
|||
SPCI_TARGET_INFO_MBZ, SPCI_ERROR_NOT_SUPPORTED, |
|||
SPCI_PARAM_MBZ, SPCI_PARAM_MBZ, SPCI_PARAM_MBZ, |
|||
SPCI_PARAM_MBZ, SPCI_PARAM_MBZ); |
|||
|
|||
/* Forward SMC from Normal world to the SPM core */ |
|||
if (in_sstate == NON_SECURE) { |
|||
/* Save incoming security state */ |
|||
cm_el1_sysregs_context_save(in_sstate); |
|||
|
|||
/* Restore outgoing security state */ |
|||
cm_el1_sysregs_context_restore(out_sstate); |
|||
cm_set_next_eret_context(out_sstate); |
|||
|
|||
SMC_RET8(cm_get_context(out_sstate), smc_fid, |
|||
x1, x2, x3, x4, |
|||
SMC_GET_GP(handle, CTX_GPREG_X5), |
|||
SMC_GET_GP(handle, CTX_GPREG_X6), |
|||
SMC_GET_GP(handle, CTX_GPREG_X7)); |
|||
} else { |
|||
/*
|
|||
* Return success if call was from secure world i.e. all |
|||
* SPCI functions are supported. This is essentially a |
|||
* nop. |
|||
*/ |
|||
SMC_RET8(handle, SPCI_SUCCESS_SMC32, x1, x2, x3, x4, |
|||
SMC_GET_GP(handle, CTX_GPREG_X5), |
|||
SMC_GET_GP(handle, CTX_GPREG_X6), |
|||
SMC_GET_GP(handle, CTX_GPREG_X7)); |
|||
} |
|||
break; /* not reached */ |
|||
|
|||
case SPCI_RX_RELEASE: |
|||
case SPCI_RXTX_MAP_SMC32: |
|||
case SPCI_RXTX_MAP_SMC64: |
|||
case SPCI_RXTX_UNMAP: |
|||
case SPCI_MSG_RUN: |
|||
/* This interface must be invoked only by the Normal world */ |
|||
if (in_sstate == SECURE) { |
|||
SMC_RET8(handle, SPCI_ERROR, |
|||
SPCI_TARGET_INFO_MBZ, SPCI_ERROR_NOT_SUPPORTED, |
|||
SPCI_PARAM_MBZ, SPCI_PARAM_MBZ, SPCI_PARAM_MBZ, |
|||
SPCI_PARAM_MBZ, SPCI_PARAM_MBZ); |
|||
} |
|||
|
|||
/* Fall through to forward the call to the other world */ |
|||
|
|||
case SPCI_PARTITION_INFO_GET: |
|||
case SPCI_MSG_SEND: |
|||
case SPCI_MSG_SEND_DIRECT_REQ_SMC32: |
|||
case SPCI_MSG_SEND_DIRECT_REQ_SMC64: |
|||
case SPCI_MSG_SEND_DIRECT_RESP_SMC32: |
|||
case SPCI_MSG_SEND_DIRECT_RESP_SMC64: |
|||
case SPCI_MEM_DONATE_SMC32: |
|||
case SPCI_MEM_DONATE_SMC64: |
|||
case SPCI_MEM_LEND_SMC32: |
|||
case SPCI_MEM_LEND_SMC64: |
|||
case SPCI_MEM_SHARE_SMC32: |
|||
case SPCI_MEM_SHARE_SMC64: |
|||
case SPCI_MEM_RETRIEVE_REQ_SMC32: |
|||
case SPCI_MEM_RETRIEVE_REQ_SMC64: |
|||
case SPCI_MEM_RETRIEVE_RESP: |
|||
case SPCI_MEM_RELINQUISH: |
|||
case SPCI_MEM_RECLAIM: |
|||
case SPCI_SUCCESS_SMC32: |
|||
case SPCI_SUCCESS_SMC64: |
|||
/*
|
|||
* TODO: Assume that no requests originate from EL3 at the |
|||
* moment. This will change if a SP service is required in |
|||
* response to secure interrupts targeted to EL3. Until then |
|||
* simply forward the call to the Normal world. |
|||
*/ |
|||
|
|||
/* Save incoming security state */ |
|||
cm_el1_sysregs_context_save(in_sstate); |
|||
|
|||
/* Restore outgoing security state */ |
|||
cm_el1_sysregs_context_restore(out_sstate); |
|||
cm_set_next_eret_context(out_sstate); |
|||
|
|||
SMC_RET8(cm_get_context(out_sstate), smc_fid, x1, x2, x3, x4, |
|||
SMC_GET_GP(handle, CTX_GPREG_X5), |
|||
SMC_GET_GP(handle, CTX_GPREG_X6), |
|||
SMC_GET_GP(handle, CTX_GPREG_X7)); |
|||
break; /* not reached */ |
|||
|
|||
case SPCI_MSG_WAIT: |
|||
/*
|
|||
* Check if this is the first invocation of this interface on |
|||
* this CPU from the Secure world. If so, then indicate that the |
|||
* SPM core initialised successfully. |
|||
*/ |
|||
if ((in_sstate == SECURE) && (ctx->state == SPMC_STATE_RESET)) { |
|||
spmd_spm_core_sync_exit(0); |
|||
} |
|||
|
|||
/* Intentional fall-through */ |
|||
|
|||
case SPCI_MSG_YIELD: |
|||
/* This interface must be invoked only by the Secure world */ |
|||
if (in_sstate == NON_SECURE) { |
|||
SMC_RET8(handle, SPCI_ERROR, |
|||
SPCI_TARGET_INFO_MBZ, SPCI_ERROR_NOT_SUPPORTED, |
|||
SPCI_PARAM_MBZ, SPCI_PARAM_MBZ, SPCI_PARAM_MBZ, |
|||
SPCI_PARAM_MBZ, SPCI_PARAM_MBZ); |
|||
} |
|||
|
|||
/* Save incoming security state */ |
|||
cm_el1_sysregs_context_save(in_sstate); |
|||
|
|||
/* Restore outgoing security state */ |
|||
cm_el1_sysregs_context_restore(out_sstate); |
|||
cm_set_next_eret_context(out_sstate); |
|||
|
|||
SMC_RET8(cm_get_context(out_sstate), smc_fid, x1, x2, x3, x4, |
|||
SMC_GET_GP(handle, CTX_GPREG_X5), |
|||
SMC_GET_GP(handle, CTX_GPREG_X6), |
|||
SMC_GET_GP(handle, CTX_GPREG_X7)); |
|||
break; /* not reached */ |
|||
|
|||
default: |
|||
WARN("SPM: Unsupported call 0x%08x\n", smc_fid); |
|||
SMC_RET8(handle, SPCI_ERROR, |
|||
SPCI_TARGET_INFO_MBZ, SPCI_ERROR_NOT_SUPPORTED, |
|||
SPCI_PARAM_MBZ, SPCI_PARAM_MBZ, SPCI_PARAM_MBZ, |
|||
SPCI_PARAM_MBZ, SPCI_PARAM_MBZ); |
|||
} |
|||
} |
@ -0,0 +1,78 @@ |
|||
/*
|
|||
* Copyright (c) 2019-2020, ARM Limited and Contributors. All rights reserved. |
|||
* |
|||
* SPDX-License-Identifier: BSD-3-Clause |
|||
*/ |
|||
|
|||
#ifndef SPMD_PRIVATE_H |
|||
#define SPMD_PRIVATE_H |
|||
|
|||
#include <context.h> |
|||
|
|||
/*******************************************************************************
|
|||
* Constants that allow assembler code to preserve callee-saved registers of the |
|||
* C runtime context while performing a security state switch. |
|||
******************************************************************************/ |
|||
#define SPMD_C_RT_CTX_X19 0x0 |
|||
#define SPMD_C_RT_CTX_X20 0x8 |
|||
#define SPMD_C_RT_CTX_X21 0x10 |
|||
#define SPMD_C_RT_CTX_X22 0x18 |
|||
#define SPMD_C_RT_CTX_X23 0x20 |
|||
#define SPMD_C_RT_CTX_X24 0x28 |
|||
#define SPMD_C_RT_CTX_X25 0x30 |
|||
#define SPMD_C_RT_CTX_X26 0x38 |
|||
#define SPMD_C_RT_CTX_X27 0x40 |
|||
#define SPMD_C_RT_CTX_X28 0x48 |
|||
#define SPMD_C_RT_CTX_X29 0x50 |
|||
#define SPMD_C_RT_CTX_X30 0x58 |
|||
|
|||
#define SPMD_C_RT_CTX_SIZE 0x60 |
|||
#define SPMD_C_RT_CTX_ENTRIES (SPMD_C_RT_CTX_SIZE >> DWORD_SHIFT) |
|||
|
|||
#ifndef __ASSEMBLER__ |
|||
#include <services/spci_svc.h> |
|||
#include <stdint.h> |
|||
|
|||
/*
|
|||
* Convert a function no. in a FID to a bit position. All function nos. are |
|||
* between 0 and 0x1f |
|||
*/ |
|||
#define SPCI_FNO_TO_BIT_POS(_fid) (1 << ((_fid) & U(0x1f))) |
|||
|
|||
typedef enum spmc_state { |
|||
SPMC_STATE_RESET = 0, |
|||
SPMC_STATE_IDLE |
|||
} spmc_state_t; |
|||
|
|||
/*
|
|||
* Data structure used by the SPM dispatcher (SPMD) in EL3 to track context of |
|||
* the SPM core (SPMC) at the next lower EL. |
|||
*/ |
|||
typedef struct spmd_spm_core_context { |
|||
uint64_t c_rt_ctx; |
|||
cpu_context_t cpu_ctx; |
|||
spmc_state_t state; |
|||
} spmd_spm_core_context_t; |
|||
|
|||
/*
|
|||
* Data structure used by the SPM dispatcher (SPMD) in EL3 to track sequence of |
|||
* SPCI calls from lower ELs. |
|||
* |
|||
* next_smc_bit_map: Per-cpu bit map of SMCs from each world that are expected |
|||
* next. |
|||
*/ |
|||
typedef struct spmd_spci_context { |
|||
uint32_t next_smc_bit_map[2]; |
|||
} spmd_spci_context_t; |
|||
|
|||
/* Functions used to enter/exit a Secure Partition synchronously */ |
|||
uint64_t spmd_spm_core_sync_entry(spmd_spm_core_context_t *ctx); |
|||
__dead2 void spmd_spm_core_sync_exit(uint64_t rc); |
|||
|
|||
/* Assembly helpers */ |
|||
uint64_t spmd_spm_core_enter(uint64_t *c_rt_ctx); |
|||
void __dead2 spmd_spm_core_exit(uint64_t c_rt_ctx, uint64_t ret); |
|||
|
|||
#endif /* __ASSEMBLER__ */ |
|||
|
|||
#endif /* SPMD_PRIVATE_H */ |
Loading…
Reference in new issue