board/freescale/common/fsl_chain_of_trust.c

   1 /*
   2  * Copyright 2015 Freescale Semiconductor, Inc.
   3  *
   4  * SPDX-License-Identifier:     GPL-2.0+
   5  */
   6
   7 #include <common.h>
   8 #include <fsl_validate.h>
   9 #include <fsl_secboot_err.h>
  10 #include <fsl_sfp.h>
  11 #include <dm/root.h>
  12
  13 #if defined(CONFIG_SPL_BUILD) && defined(CONFIG_SPL_FRAMEWORK)
  14 #include <spl.h>
  15 #endif
  16
  17 #ifdef CONFIG_ADDR_MAP
  18 #include <asm/mmu.h>
  19 #endif
  20
  21 #ifdef CONFIG_FSL_CORENET
  22 #include <asm/fsl_pamu.h>
  23 #endif
  24
  25 #ifdef CONFIG_LS102XA
  26 #include <asm/arch/immap_ls102xa.h>
  27 #endif
  28
  29 #if defined(CONFIG_MPC85xx)
  30 #define CONFIG_DCFG_ADDR        CONFIG_SYS_MPC85xx_GUTS_ADDR
  31 #else
  32 #define CONFIG_DCFG_ADDR        CONFIG_SYS_FSL_GUTS_ADDR
  33 #endif
  34
  35 #ifdef CONFIG_SYS_FSL_CCSR_GUR_LE
  36 #define gur_in32(a)       in_le32(a)
  37 #else
  38 #define gur_in32(a)       in_be32(a)
  39 #endif
  40
  41 /* Check the Boot Mode. If Secure, return 1 else return 0 */
  42 int fsl_check_boot_mode_secure(void)
  43 {
  44         uint32_t val;
  45         struct ccsr_sfp_regs *sfp_regs = (void *)(CONFIG_SYS_SFP_ADDR);
  46         struct ccsr_gur __iomem *gur = (void *)(CONFIG_DCFG_ADDR);
  47
  48         val = sfp_in32(&sfp_regs->ospr) & ITS_MASK;
  49         if (val == ITS_MASK)
  50                 return 1;
  51
  52 #if defined(CONFIG_FSL_CORENET) || !defined(CONFIG_MPC85xx)
  53         /* For PBL based platforms check the SB_EN bit in RCWSR */
  54         val = gur_in32(&gur->rcwsr[RCW_SB_EN_REG_INDEX - 1]) & RCW_SB_EN_MASK;
  55         if (val == RCW_SB_EN_MASK)
  56                 return 1;
  57 #endif
  58
  59 #if defined(CONFIG_MPC85xx) && !defined(CONFIG_FSL_CORENET)
  60         /* For Non-PBL Platforms, check the Device Status register 2*/
  61         val = gur_in32(&gur->pordevsr2) & MPC85xx_PORDEVSR2_SBC_MASK;
  62         if (val != MPC85xx_PORDEVSR2_SBC_MASK)
  63                 return 1;
  64
  65 #endif
  66         return 0;
  67 }
  68
  69 #ifndef CONFIG_SPL_BUILD
  70 int fsl_setenv_chain_of_trust(void)
  71 {
  72         /* Check Boot Mode
  73          * If Boot Mode is Non-Secure, no changes are required
  74          */
  75         if (fsl_check_boot_mode_secure() == 0)
  76                 return 0;
  77
  78         /* If Boot mode is Secure, set the environment variables
  79          * bootdelay = 0 (To disable Boot Prompt)
  80          * bootcmd = CONFIG_CHAIN_BOOT_CMD (Validate and execute Boot script)
  81          */
  82         setenv("bootdelay", "0");
  83         setenv("bootcmd", CONFIG_CHAIN_BOOT_CMD);
  84         return 0;
  85 }
  86 #endif
  87
  88 #ifdef CONFIG_SPL_BUILD
  89 void spl_validate_uboot(uint32_t hdr_addr, uintptr_t img_addr)
  90 {
  91         int res;
  92
  93         /*
  94          * Check Boot Mode
  95          * If Boot Mode is Non-Secure, skip validation
  96          */
  97         if (fsl_check_boot_mode_secure() == 0)
  98                 return;
  99
 100         printf("SPL: Validating U-Boot image\n");
 101
 102 #ifdef CONFIG_ADDR_MAP
 103         init_addr_map();
 104 #endif
 105
 106 #ifdef CONFIG_FSL_CORENET
 107         if (pamu_init() < 0)
 108                 fsl_secboot_handle_error(ERROR_ESBC_PAMU_INIT);
 109 #endif
 110
 111 #ifdef CONFIG_FSL_CAAM
 112         if (sec_init() < 0)
 113                 fsl_secboot_handle_error(ERROR_ESBC_SEC_INIT);
 114 #endif
 115
 116 /*
 117  * dm_init_and_scan() is called as part of common SPL framework, so no
 118  * need to call it again but in case of powerpc platforms which currently
 119  * do not use common SPL framework, so need to call this function here.
 120  */
 121 #if defined(CONFIG_SPL_DM) && (!defined(CONFIG_SPL_FRAMEWORK))
 122         dm_init_and_scan(true);
 123 #endif
 124         res = fsl_secboot_validate(hdr_addr, CONFIG_SPL_UBOOT_KEY_HASH,
 125                                    &img_addr);
 126
 127         if (res == 0)
 128                 printf("SPL: Validation of U-boot successful\n");
 129 }
 130
 131 #ifdef CONFIG_SPL_FRAMEWORK
 132 /* Override weak funtion defined in SPL framework to enable validation
 133  * of main u-boot image before jumping to u-boot image.
 134  */
 135 void __noreturn jump_to_image_no_args(struct spl_image_info *spl_image)
 136 {
 137         typedef void __noreturn (*image_entry_noargs_t)(void);
 138         uint32_t hdr_addr;
 139
 140         image_entry_noargs_t image_entry =
 141                 (image_entry_noargs_t)(unsigned long)spl_image->entry_point;
 142
 143         hdr_addr = (spl_image->entry_point + spl_image->size -
 144                         CONFIG_U_BOOT_HDR_SIZE);
 145         spl_validate_uboot(hdr_addr, (uintptr_t)spl_image->entry_point);
 146         /*
 147          * In case of failure in validation, spl_validate_uboot would
 148          * not return back in case of Production environment with ITS=1.
 149          * Thus U-Boot will not start.
 150          * In Development environment (ITS=0 and SB_EN=1), the function
 151          * may return back in case of non-fatal failures.
 152          */
 153
 154         debug("image entry point: 0x%lX\n", spl_image->entry_point);
 155         image_entry();
 156 }
 157 #endif /* ifdef CONFIG_SPL_FRAMEWORK */
 158 #endif /* ifdef CONFIG_SPL_BUILD */