]> git.ipfire.org Git - people/ms/u-boot.git/blob - drivers/tpm/tpm_tis_st33zp24_i2c.c
spmi: Fix sandbox spmi driver memory corruption
[people/ms/u-boot.git] / drivers / tpm / tpm_tis_st33zp24_i2c.c
1 /*
2 * STMicroelectronics TPM ST33ZP24 I2C UBOOT driver
3 *
4 * Copyright (C) 2016 STMicroelectronics
5 *
6 * Description: Device driver for ST33ZP24 I2C TPM TCG.
7 *
8 * This device driver implements the TPM interface as defined in
9 * the TCG TPM Interface Spec version 1.21, revision 1.0 and the
10 * STMicroelectronics Protocol Stack Specification version 1.2.0.
11 *
12 * SPDX-License-Identifier: GPL-2.0+
13 */
14
15 #include <common.h>
16 #include <dm.h>
17 #include <fdtdec.h>
18 #include <i2c.h>
19 #include <tpm.h>
20 #include <errno.h>
21 #include <linux/types.h>
22 #include <asm/unaligned.h>
23
24 #include "tpm_tis.h"
25 #include "tpm_internal.h"
26
27 #define TPM_ACCESS 0x0
28 #define TPM_STS 0x18
29 #define TPM_DATA_FIFO 0x24
30
31 #define LOCALITY0 0
32
33 #define TPM_DUMMY_BYTE 0xAA
34 #define TPM_ST33ZP24_I2C_SLAVE_ADDR 0x13
35
36 #define TPM_WRITE_DIRECTION 0x80
37
38 /*
39 * st33zp24_i2c_write8_reg
40 * Send byte to the TIS register according to the ST33ZP24 I2C protocol.
41 * @param: tpm_register, the tpm tis register where the data should be written
42 * @param: tpm_data, the tpm_data to write inside the tpm_register
43 * @param: tpm_size, The length of the data
44 * @return: Number of byte written successfully else an error code.
45 */
46 static int st33zp24_i2c_write8_reg(struct udevice *dev, u8 tpm_register,
47 const u8 *tpm_data, size_t tpm_size)
48 {
49 struct tpm_chip_priv *chip_priv = dev_get_uclass_priv(dev);
50
51 chip_priv->buf[0] = tpm_register;
52 memcpy(chip_priv->buf + 1, tpm_data, tpm_size);
53
54 return dm_i2c_write(dev, 0, chip_priv->buf, tpm_size + 1);
55 }
56
57 /*
58 * st33zp24_i2c_read8_reg
59 * Recv byte from the TIS register according to the ST33ZP24 I2C protocol.
60 * @param: tpm_register, the tpm tis register where the data should be read
61 * @param: tpm_data, the TPM response
62 * @param: tpm_size, tpm TPM response size to read.
63 * @return: Number of byte read successfully else an error code.
64 */
65 static int st33zp24_i2c_read8_reg(struct udevice *dev, u8 tpm_register,
66 u8 *tpm_data, size_t tpm_size)
67 {
68 int status;
69 u8 data;
70
71 data = TPM_DUMMY_BYTE;
72 status = st33zp24_i2c_write8_reg(dev, tpm_register, &data, 1);
73 if (status < 0)
74 return status;
75
76 return dm_i2c_read(dev, 0, tpm_data, tpm_size);
77 }
78
79 /*
80 * st33zp24_i2c_write
81 * Send byte to the TIS register according to the ST33ZP24 I2C protocol.
82 * @param: phy_id, the phy description
83 * @param: tpm_register, the tpm tis register where the data should be written
84 * @param: tpm_data, the tpm_data to write inside the tpm_register
85 * @param: tpm_size, the length of the data
86 * @return: number of byte written successfully: should be one if success.
87 */
88 static int st33zp24_i2c_write(struct udevice *dev, u8 tpm_register,
89 const u8 *tpm_data, size_t tpm_size)
90 {
91 return st33zp24_i2c_write8_reg(dev, tpm_register | TPM_WRITE_DIRECTION,
92 tpm_data, tpm_size);
93 }
94
95 /*
96 * st33zp24_i2c_read
97 * Recv byte from the TIS register according to the ST33ZP24 I2C protocol.
98 * @param: phy_id, the phy description
99 * @param: tpm_register, the tpm tis register where the data should be read
100 * @param: tpm_data, the TPM response
101 * @param: tpm_size, tpm TPM response size to read.
102 * @return: number of byte read successfully: should be one if success.
103 */
104 static int st33zp24_i2c_read(struct udevice *dev, u8 tpm_register,
105 u8 *tpm_data, size_t tpm_size)
106 {
107 return st33zp24_i2c_read8_reg(dev, tpm_register, tpm_data, tpm_size);
108 }
109
110 /*
111 * st33zp24_i2c_release_locality release the active locality
112 * @param: chip, the tpm chip description.
113 */
114 static void st33zp24_i2c_release_locality(struct udevice *dev)
115 {
116 u8 data = TPM_ACCESS_ACTIVE_LOCALITY;
117
118 st33zp24_i2c_write(dev, TPM_ACCESS, &data, 1);
119 }
120
121 /*
122 * st33zp24_i2c_check_locality if the locality is active
123 * @param: chip, the tpm chip description
124 * @return: the active locality or -EACCES.
125 */
126 static int st33zp24_i2c_check_locality(struct udevice *dev)
127 {
128 struct tpm_chip *chip = dev_get_priv(dev);
129 u8 data;
130 u8 status;
131
132 status = st33zp24_i2c_read(dev, TPM_ACCESS, &data, 1);
133 if (!status && (data &
134 (TPM_ACCESS_ACTIVE_LOCALITY | TPM_ACCESS_VALID)) ==
135 (TPM_ACCESS_ACTIVE_LOCALITY | TPM_ACCESS_VALID))
136 return chip->locality;
137
138 return -EACCES;
139 }
140
141 /*
142 * st33zp24_i2c_request_locality request the TPM locality
143 * @param: chip, the chip description
144 * @return: the active locality or negative value.
145 */
146 static int st33zp24_i2c_request_locality(struct udevice *dev)
147 {
148 struct tpm_chip *chip = dev_get_priv(dev);
149 unsigned long start, stop;
150 long ret;
151 u8 data;
152
153 if (st33zp24_i2c_check_locality(dev) == chip->locality)
154 return chip->locality;
155
156 data = TPM_ACCESS_REQUEST_USE;
157 ret = st33zp24_i2c_write(dev, TPM_ACCESS, &data, 1);
158 if (ret < 0)
159 return ret;
160
161 /* wait for locality activated */
162 start = get_timer(0);
163 stop = chip->timeout_a;
164 do {
165 if (st33zp24_i2c_check_locality(dev) >= 0)
166 return chip->locality;
167 udelay(TPM_TIMEOUT_MS * 1000);
168 } while (get_timer(start) < stop);
169
170 return -EACCES;
171 }
172
173 /*
174 * st33zp24_i2c_status return the TPM_STS register
175 * @param: chip, the tpm chip description
176 * @return: the TPM_STS register value.
177 */
178 static u8 st33zp24_i2c_status(struct udevice *dev)
179 {
180 u8 data;
181
182 st33zp24_i2c_read(dev, TPM_STS, &data, 1);
183
184 return data;
185 }
186
187 /*
188 * st33zp24_i2c_get_burstcount return the burstcount address 0x19 0x1A
189 * @param: chip, the chip description
190 * return: the burstcount or -TPM_DRIVER_ERR in case of error.
191 */
192 static int st33zp24_i2c_get_burstcount(struct udevice *dev)
193 {
194 struct tpm_chip *chip = dev_get_priv(dev);
195 unsigned long start, stop;
196 int burstcnt, status;
197 u8 tpm_reg, temp;
198
199 /* wait for burstcount */
200 start = get_timer(0);
201 stop = chip->timeout_d;
202 do {
203 tpm_reg = TPM_STS + 1;
204 status = st33zp24_i2c_read(dev, tpm_reg, &temp, 1);
205 if (status < 0)
206 return -EBUSY;
207
208 tpm_reg = TPM_STS + 2;
209 burstcnt = temp;
210 status = st33zp24_i2c_read(dev, tpm_reg, &temp, 1);
211 if (status < 0)
212 return -EBUSY;
213
214 burstcnt |= temp << 8;
215 if (burstcnt)
216 return burstcnt;
217 udelay(TIS_SHORT_TIMEOUT_MS * 1000);
218 } while (get_timer(start) < stop);
219
220 return -EBUSY;
221 }
222
223 /*
224 * st33zp24_i2c_cancel, cancel the current command execution or
225 * set STS to COMMAND READY.
226 * @param: chip, tpm_chip description.
227 */
228 static void st33zp24_i2c_cancel(struct udevice *dev)
229 {
230 u8 data;
231
232 data = TPM_STS_COMMAND_READY;
233 st33zp24_i2c_write(dev, TPM_STS, &data, 1);
234 }
235
236 /*
237 * st33zp24_i2c_wait_for_stat wait for a TPM_STS value
238 * @param: chip, the tpm chip description
239 * @param: mask, the value mask to wait
240 * @param: timeout, the timeout
241 * @param: status,
242 * @return: the tpm status, 0 if success, -ETIME if timeout is reached.
243 */
244 static int st33zp24_i2c_wait_for_stat(struct udevice *dev, u8 mask,
245 unsigned long timeout, int *status)
246 {
247 unsigned long start, stop;
248
249 /* Check current status */
250 *status = st33zp24_i2c_status(dev);
251 if ((*status & mask) == mask)
252 return 0;
253
254 start = get_timer(0);
255 stop = timeout;
256 do {
257 udelay(TPM_TIMEOUT_MS * 1000);
258 *status = st33zp24_i2c_status(dev);
259 if ((*status & mask) == mask)
260 return 0;
261 } while (get_timer(start) < stop);
262
263 return -ETIME;
264 }
265
266 /*
267 * st33zp24_i2c_recv_data receive data
268 * @param: chip, the tpm chip description
269 * @param: buf, the buffer where the data are received
270 * @param: count, the number of data to receive
271 * @return: the number of bytes read from TPM FIFO.
272 */
273 static int st33zp24_i2c_recv_data(struct udevice *dev, u8 *buf, size_t count)
274 {
275 struct tpm_chip *chip = dev_get_priv(dev);
276 int size = 0, burstcnt, len, ret, status;
277
278 while (size < count &&
279 st33zp24_i2c_wait_for_stat(dev, TPM_STS_DATA_AVAIL | TPM_STS_VALID,
280 chip->timeout_c, &status) == 0) {
281 burstcnt = st33zp24_i2c_get_burstcount(dev);
282 if (burstcnt < 0)
283 return burstcnt;
284 len = min_t(int, burstcnt, count - size);
285 ret = st33zp24_i2c_read(dev, TPM_DATA_FIFO, buf + size, len);
286 if (ret < 0)
287 return ret;
288
289 size += len;
290 }
291
292 return size;
293 }
294
295 /*
296 * st33zp24_i2c_recv received TPM response through TPM phy.
297 * @param: chip, tpm_chip description.
298 * @param: buf, the buffer to store data.
299 * @param: count, the number of bytes that can received (sizeof buf).
300 * @return: Returns zero in case of success else -EIO.
301 */
302 static int st33zp24_i2c_recv(struct udevice *dev, u8 *buf, size_t count)
303 {
304 struct tpm_chip *chip = dev_get_priv(dev);
305 int size, expected;
306
307 if (!chip)
308 return -ENODEV;
309
310 if (count < TPM_HEADER_SIZE) {
311 size = -EIO;
312 goto out;
313 }
314
315 size = st33zp24_i2c_recv_data(dev, buf, TPM_HEADER_SIZE);
316 if (size < TPM_HEADER_SIZE) {
317 debug("TPM error, unable to read header\n");
318 goto out;
319 }
320
321 expected = get_unaligned_be32(buf + 2);
322 if (expected > count) {
323 size = -EIO;
324 goto out;
325 }
326
327 size += st33zp24_i2c_recv_data(dev, &buf[TPM_HEADER_SIZE],
328 expected - TPM_HEADER_SIZE);
329 if (size < expected) {
330 debug("TPM error, unable to read remaining bytes of result\n");
331 size = -EIO;
332 goto out;
333 }
334
335 out:
336 st33zp24_i2c_cancel(dev);
337 st33zp24_i2c_release_locality(dev);
338
339 return size;
340 }
341
342 /*
343 * st33zp24_i2c_send send TPM commands through TPM phy.
344 * @param: chip, tpm_chip description.
345 * @param: buf, the buffer to send.
346 * @param: len, the number of bytes to send.
347 * @return: Returns zero in case of success else the negative error code.
348 */
349 static int st33zp24_i2c_send(struct udevice *dev, const u8 *buf, size_t len)
350 {
351 struct tpm_chip *chip = dev_get_priv(dev);
352 u32 i, size;
353 int burstcnt, ret, status;
354 u8 data, tpm_stat;
355
356 if (!chip)
357 return -ENODEV;
358 if (len < TPM_HEADER_SIZE)
359 return -EIO;
360
361 ret = st33zp24_i2c_request_locality(dev);
362 if (ret < 0)
363 return ret;
364
365 tpm_stat = st33zp24_i2c_status(dev);
366 if ((tpm_stat & TPM_STS_COMMAND_READY) == 0) {
367 st33zp24_i2c_cancel(dev);
368 if (st33zp24_i2c_wait_for_stat(dev, TPM_STS_COMMAND_READY,
369 chip->timeout_b, &status) < 0) {
370 ret = -ETIME;
371 goto out_err;
372 }
373 }
374
375 for (i = 0; i < len - 1;) {
376 burstcnt = st33zp24_i2c_get_burstcount(dev);
377 if (burstcnt < 0)
378 return burstcnt;
379
380 size = min_t(int, len - i - 1, burstcnt);
381 ret = st33zp24_i2c_write(dev, TPM_DATA_FIFO, buf + i, size);
382 if (ret < 0)
383 goto out_err;
384
385 i += size;
386 }
387
388 tpm_stat = st33zp24_i2c_status(dev);
389 if ((tpm_stat & TPM_STS_DATA_EXPECT) == 0) {
390 ret = -EIO;
391 goto out_err;
392 }
393
394 ret = st33zp24_i2c_write(dev, TPM_DATA_FIFO, buf + len - 1, 1);
395 if (ret < 0)
396 goto out_err;
397
398 tpm_stat = st33zp24_i2c_status(dev);
399 if ((tpm_stat & TPM_STS_DATA_EXPECT) != 0) {
400 ret = -EIO;
401 goto out_err;
402 }
403
404 data = TPM_STS_GO;
405 ret = st33zp24_i2c_write(dev, TPM_STS, &data, 1);
406 if (ret < 0)
407 goto out_err;
408
409 return len;
410
411 out_err:
412 st33zp24_i2c_cancel(dev);
413 st33zp24_i2c_release_locality(dev);
414
415 return ret;
416 }
417
418 static int st33zp24_i2c_cleanup(struct udevice *dev)
419 {
420 st33zp24_i2c_cancel(dev);
421 /*
422 * The TPM needs some time to clean up here,
423 * so we sleep rather than keeping the bus busy
424 */
425 mdelay(2);
426 st33zp24_i2c_release_locality(dev);
427
428 return 0;
429 }
430
431 static int st33zp24_i2c_init(struct udevice *dev)
432 {
433 struct tpm_chip *chip = dev_get_priv(dev);
434
435 chip->is_open = 1;
436
437 /* Default timeouts - these could move to the device tree */
438 chip->timeout_a = TIS_SHORT_TIMEOUT_MS;
439 chip->timeout_b = TIS_LONG_TIMEOUT_MS;
440 chip->timeout_c = TIS_SHORT_TIMEOUT_MS;
441 chip->timeout_d = TIS_SHORT_TIMEOUT_MS;
442
443 chip->locality = LOCALITY0;
444
445 /*
446 * A timeout query to TPM can be placed here.
447 * Standard timeout values are used so far
448 */
449
450 return 0;
451 }
452
453 static int st33zp24_i2c_open(struct udevice *dev)
454 {
455 struct tpm_chip *chip = dev_get_priv(dev);
456 int rc;
457
458 debug("%s: start\n", __func__);
459 if (chip->is_open)
460 return -EBUSY;
461
462 rc = st33zp24_i2c_init(dev);
463 if (rc < 0)
464 chip->is_open = 0;
465
466 return rc;
467 }
468
469 static int st33zp24_i2c_close(struct udevice *dev)
470 {
471 struct tpm_chip *chip = dev_get_priv(dev);
472
473 if (chip->is_open) {
474 st33zp24_i2c_release_locality(dev);
475 chip->is_open = 0;
476 chip->vend_dev = 0;
477 }
478
479 return 0;
480 }
481
482 static int st33zp24_i2c_get_desc(struct udevice *dev, char *buf, int size)
483 {
484 struct tpm_chip *chip = dev_get_priv(dev);
485
486 if (size < 50)
487 return -ENOSPC;
488
489 return snprintf(buf, size, "1.2 TPM (%s, chip type %s device-id 0x%x)",
490 chip->is_open ? "open" : "closed",
491 dev->name,
492 chip->vend_dev >> 16);
493 }
494
495 static const struct tpm_ops st33zp24_i2c_tpm_ops = {
496 .open = st33zp24_i2c_open,
497 .close = st33zp24_i2c_close,
498 .recv = st33zp24_i2c_recv,
499 .send = st33zp24_i2c_send,
500 .cleanup = st33zp24_i2c_cleanup,
501 .get_desc = st33zp24_i2c_get_desc,
502 };
503
504 static int st33zp24_i2c_probe(struct udevice *dev)
505 {
506 struct tpm_chip *chip = dev_get_priv(dev);
507
508 /* Default timeouts */
509 chip->timeout_a = TIS_SHORT_TIMEOUT_MS;
510 chip->timeout_b = TIS_LONG_TIMEOUT_MS;
511 chip->timeout_c = TIS_SHORT_TIMEOUT_MS;
512 chip->timeout_d = TIS_SHORT_TIMEOUT_MS;
513
514 chip->locality = LOCALITY0;
515
516 i2c_set_chip_offset_len(dev, 0);
517
518 debug("ST33ZP24 I2C TPM from STMicroelectronics found\n");
519
520 return 0;
521 }
522
523 static int st33zp24_i2c_remove(struct udevice *dev)
524 {
525 st33zp24_i2c_release_locality(dev);
526
527 return 0;
528 }
529
530 static const struct udevice_id st33zp24_i2c_ids[] = {
531 { .compatible = "st,st33zp24-i2c" },
532 { }
533 };
534
535 U_BOOT_DRIVER(st33zp24_i2c) = {
536 .name = "st33zp24-i2c",
537 .id = UCLASS_TPM,
538 .of_match = of_match_ptr(st33zp24_i2c_ids),
539 .probe = st33zp24_i2c_probe,
540 .remove = st33zp24_i2c_remove,
541 .ops = &st33zp24_i2c_tpm_ops,
542 .priv_auto_alloc_size = sizeof(struct tpm_chip),
543 };