2 * Copyright 2015 Freescale Semiconductor, Inc.
4 * SPDX-License-Identifier: GPL-2.0+
9 #include <fsl_validate.h>
10 #include <fsl_secboot_err.h>
14 #if defined(CONFIG_SPL_BUILD) && defined(CONFIG_SPL_FRAMEWORK)
18 #ifdef CONFIG_ADDR_MAP
22 #ifdef CONFIG_FSL_CORENET
23 #include <asm/fsl_pamu.h>
26 #ifdef CONFIG_ARCH_LS1021A
27 #include <asm/arch/immap_ls102xa.h>
30 #if defined(CONFIG_MPC85xx)
31 #define CONFIG_DCFG_ADDR CONFIG_SYS_MPC85xx_GUTS_ADDR
33 #define CONFIG_DCFG_ADDR CONFIG_SYS_FSL_GUTS_ADDR
36 #ifdef CONFIG_SYS_FSL_CCSR_GUR_LE
37 #define gur_in32(a) in_le32(a)
39 #define gur_in32(a) in_be32(a)
42 /* Check the Boot Mode. If Secure, return 1 else return 0 */
43 int fsl_check_boot_mode_secure(void)
46 struct ccsr_sfp_regs
*sfp_regs
= (void *)(CONFIG_SYS_SFP_ADDR
);
47 struct ccsr_gur __iomem
*gur
= (void *)(CONFIG_DCFG_ADDR
);
49 val
= sfp_in32(&sfp_regs
->ospr
) & ITS_MASK
;
53 #if defined(CONFIG_FSL_CORENET) || !defined(CONFIG_MPC85xx)
54 /* For PBL based platforms check the SB_EN bit in RCWSR */
55 val
= gur_in32(&gur
->rcwsr
[RCW_SB_EN_REG_INDEX
- 1]) & RCW_SB_EN_MASK
;
56 if (val
== RCW_SB_EN_MASK
)
60 #if defined(CONFIG_MPC85xx) && !defined(CONFIG_FSL_CORENET)
61 /* For Non-PBL Platforms, check the Device Status register 2*/
62 val
= gur_in32(&gur
->pordevsr2
) & MPC85xx_PORDEVSR2_SBC_MASK
;
63 if (val
!= MPC85xx_PORDEVSR2_SBC_MASK
)
70 #ifndef CONFIG_SPL_BUILD
71 int fsl_setenv_chain_of_trust(void)
74 * If Boot Mode is Non-Secure, no changes are required
76 if (fsl_check_boot_mode_secure() == 0)
79 /* If Boot mode is Secure, set the environment variables
80 * bootdelay = 0 (To disable Boot Prompt)
81 * bootcmd = CONFIG_CHAIN_BOOT_CMD (Validate and execute Boot script)
83 env_set("bootdelay", "0");
86 env_set("secureboot", "y");
88 env_set("bootcmd", CONFIG_CHAIN_BOOT_CMD
);
95 #ifdef CONFIG_SPL_BUILD
96 void spl_validate_uboot(uint32_t hdr_addr
, uintptr_t img_addr
)
102 * If Boot Mode is Non-Secure, skip validation
104 if (fsl_check_boot_mode_secure() == 0)
107 printf("SPL: Validating U-Boot image\n");
109 #ifdef CONFIG_ADDR_MAP
113 #ifdef CONFIG_FSL_CORENET
115 fsl_secboot_handle_error(ERROR_ESBC_PAMU_INIT
);
118 #ifdef CONFIG_FSL_CAAM
120 fsl_secboot_handle_error(ERROR_ESBC_SEC_INIT
);
124 * dm_init_and_scan() is called as part of common SPL framework, so no
125 * need to call it again but in case of powerpc platforms which currently
126 * do not use common SPL framework, so need to call this function here.
128 #if defined(CONFIG_SPL_DM) && (!defined(CONFIG_SPL_FRAMEWORK))
129 dm_init_and_scan(true);
131 res
= fsl_secboot_validate(hdr_addr
, CONFIG_SPL_UBOOT_KEY_HASH
,
135 printf("SPL: Validation of U-boot successful\n");
138 #ifdef CONFIG_SPL_FRAMEWORK
139 /* Override weak funtion defined in SPL framework to enable validation
140 * of main u-boot image before jumping to u-boot image.
142 void __noreturn
jump_to_image_no_args(struct spl_image_info
*spl_image
)
144 typedef void __noreturn (*image_entry_noargs_t
)(void);
147 image_entry_noargs_t image_entry
=
148 (image_entry_noargs_t
)(unsigned long)spl_image
->entry_point
;
150 hdr_addr
= (spl_image
->entry_point
+ spl_image
->size
-
151 CONFIG_U_BOOT_HDR_SIZE
);
152 spl_validate_uboot(hdr_addr
, (uintptr_t)spl_image
->entry_point
);
154 * In case of failure in validation, spl_validate_uboot would
155 * not return back in case of Production environment with ITS=1.
156 * Thus U-Boot will not start.
157 * In Development environment (ITS=0 and SB_EN=1), the function
158 * may return back in case of non-fatal failures.
161 debug("image entry point: 0x%lX\n", spl_image
->entry_point
);
164 #endif /* ifdef CONFIG_SPL_FRAMEWORK */
165 #endif /* ifdef CONFIG_SPL_BUILD */