LXR uboot/board/freescale/common/fsl_chain_of

   1// SPDX-License-Identifier: GPL-2.0+
   2/*
   3 * Copyright 2015 Freescale Semiconductor, Inc.
   4 */
   5
   6#include <common.h>
   7#include <dm.h>
   8#include <env.h>
   9#include <fsl_validate.h>
  10#include <fsl_secboot_err.h>
  11#include <fsl_sfp.h>
  12#include <dm/root.h>
  13
  14#if defined(CONFIG_SPL_BUILD) && defined(CONFIG_SPL_FRAMEWORK)
  15#include <spl.h>
  16#endif
  17
  18#ifdef CONFIG_ADDR_MAP
  19#include <asm/mmu.h>
  20#endif
  21
  22#ifdef CONFIG_FSL_CORENET
  23#include <asm/fsl_pamu.h>
  24#endif
  25
  26#ifdef CONFIG_ARCH_LS1021A
  27#include <asm/arch/immap_ls102xa.h>
  28#endif
  29
  30#if defined(CONFIG_MPC85xx)
  31#define CONFIG_DCFG_ADDR        CONFIG_SYS_MPC85xx_GUTS_ADDR
  32#else
  33#define CONFIG_DCFG_ADDR        CONFIG_SYS_FSL_GUTS_ADDR
  34#endif
  35
  36#ifdef CONFIG_SYS_FSL_CCSR_GUR_LE
  37#define gur_in32(a)       in_le32(a)
  38#else
  39#define gur_in32(a)       in_be32(a)
  40#endif
  41
  42/* Check the Boot Mode. If Secure, return 1 else return 0 */
  43int fsl_check_boot_mode_secure(void)
  44{
  45        uint32_t val;
  46        struct ccsr_sfp_regs *sfp_regs = (void *)(CONFIG_SYS_SFP_ADDR);
  47        struct ccsr_gur __iomem *gur = (void *)(CONFIG_DCFG_ADDR);
  48
  49        val = sfp_in32(&sfp_regs->ospr) & ITS_MASK;
  50        if (val == ITS_MASK)
  51                return 1;
  52
  53#if defined(CONFIG_FSL_CORENET) || !defined(CONFIG_MPC85xx)
  54        /* For PBL based platforms check the SB_EN bit in RCWSR */
  55        val = gur_in32(&gur->rcwsr[RCW_SB_EN_REG_INDEX - 1]) & RCW_SB_EN_MASK;
  56        if (val == RCW_SB_EN_MASK)
  57                return 1;
  58#endif
  59
  60#if defined(CONFIG_MPC85xx) && !defined(CONFIG_FSL_CORENET)
  61        /* For Non-PBL Platforms, check the Device Status register 2*/
  62        val = gur_in32(&gur->pordevsr2) & MPC85xx_PORDEVSR2_SBC_MASK;
  63        if (val != MPC85xx_PORDEVSR2_SBC_MASK)
  64                return 1;
  65
  66#endif
  67        return 0;
  68}
  69
  70#ifndef CONFIG_SPL_BUILD
  71int fsl_setenv_chain_of_trust(void)
  72{
  73        /* Check Boot Mode
  74         * If Boot Mode is Non-Secure, no changes are required
  75         */
  76        if (fsl_check_boot_mode_secure() == 0)
  77                return 0;
  78
  79        /* If Boot mode is Secure, set the environment variables
  80         * bootdelay = 0 (To disable Boot Prompt)
  81         * bootcmd = CONFIG_CHAIN_BOOT_CMD (Validate and execute Boot script)
  82         */
  83        env_set("bootdelay", "-2");
  84
  85#ifdef CONFIG_ARM
  86        env_set("secureboot", "y");
  87#else
  88        env_set("bootcmd", CONFIG_CHAIN_BOOT_CMD);
  89#endif
  90
  91        return 0;
  92}
  93#endif
  94
  95#ifdef CONFIG_SPL_BUILD
  96void spl_validate_uboot(uint32_t hdr_addr, uintptr_t img_addr)
  97{
  98        int res;
  99
 100        /*
 101         * Check Boot Mode
 102         * If Boot Mode is Non-Secure, skip validation
 103         */
 104        if (fsl_check_boot_mode_secure() == 0)
 105                return;
 106
 107        printf("SPL: Validating U-Boot image\n");
 108
 109#ifdef CONFIG_ADDR_MAP
 110        init_addr_map();
 111#endif
 112
 113#ifdef CONFIG_FSL_CORENET
 114        if (pamu_init() < 0)
 115                fsl_secboot_handle_error(ERROR_ESBC_PAMU_INIT);
 116#endif
 117
 118#ifdef CONFIG_FSL_CAAM
 119        if (sec_init() < 0)
 120                fsl_secboot_handle_error(ERROR_ESBC_SEC_INIT);
 121#endif
 122
 123/*
 124 * dm_init_and_scan() is called as part of common SPL framework, so no
 125 * need to call it again but in case of powerpc platforms which currently
 126 * do not use common SPL framework, so need to call this function here.
 127 */
 128#if defined(CONFIG_SPL_DM) && (!defined(CONFIG_SPL_FRAMEWORK))
 129        dm_init_and_scan(true);
 130#endif
 131        res = fsl_secboot_validate(hdr_addr, CONFIG_SPL_UBOOT_KEY_HASH,
 132                                   &img_addr);
 133
 134        if (res == 0)
 135                printf("SPL: Validation of U-boot successful\n");
 136}
 137
 138#ifdef CONFIG_SPL_FRAMEWORK
 139/* Override weak funtion defined in SPL framework to enable validation
 140 * of main u-boot image before jumping to u-boot image.
 141 */
 142void __noreturn jump_to_image_no_args(struct spl_image_info *spl_image)
 143{
 144        typedef void __noreturn (*image_entry_noargs_t)(void);
 145        uint32_t hdr_addr;
 146
 147        image_entry_noargs_t image_entry =
 148                (image_entry_noargs_t)(unsigned long)spl_image->entry_point;
 149
 150        hdr_addr = (spl_image->entry_point + spl_image->size -
 151                        CONFIG_U_BOOT_HDR_SIZE);
 152        spl_validate_uboot(hdr_addr, (uintptr_t)spl_image->entry_point);
 153        /*
 154         * In case of failure in validation, spl_validate_uboot would
 155         * not return back in case of Production environment with ITS=1.
 156         * Thus U-Boot will not start.
 157         * In Development environment (ITS=0 and SB_EN=1), the function
 158         * may return back in case of non-fatal failures.
 159         */
 160
 161        debug("image entry point: 0x%lX\n", spl_image->entry_point);
 162        image_entry();
 163}
 164#endif /* ifdef CONFIG_SPL_FRAMEWORK */
 165#endif /* ifdef CONFIG_SPL_BUILD */
 166