1 // SPDX-License-Identifier: GPL-2.0+ 2 /* 3 * Copyright 2015 Freescale Semiconductor, Inc. 4 */ 5 6 #include <common.h> 7 #include <dm.h> 8 #include <fsl_validate.h> 9 #include <fsl_secboot_err.h> 10 #include <fsl_sfp.h> 11 #include <dm/root.h> 12 13 #if defined(CONFIG_SPL_BUILD) && defined(CONFIG_SPL_FRAMEWORK) 14 #include <spl.h> 15 #endif 16 17 #ifdef CONFIG_ADDR_MAP 18 #include <asm/mmu.h> 19 #endif 20 21 #ifdef CONFIG_FSL_CORENET 22 #include <asm/fsl_pamu.h> 23 #endif 24 25 #ifdef CONFIG_ARCH_LS1021A 26 #include <asm/arch/immap_ls102xa.h> 27 #endif 28 29 #if defined(CONFIG_MPC85xx) 30 #define CONFIG_DCFG_ADDR CONFIG_SYS_MPC85xx_GUTS_ADDR 31 #else 32 #define CONFIG_DCFG_ADDR CONFIG_SYS_FSL_GUTS_ADDR 33 #endif 34 35 #ifdef CONFIG_SYS_FSL_CCSR_GUR_LE 36 #define gur_in32(a) in_le32(a) 37 #else 38 #define gur_in32(a) in_be32(a) 39 #endif 40 41 /* Check the Boot Mode. If Secure, return 1 else return 0 */ 42 int fsl_check_boot_mode_secure(void) 43 { 44 uint32_t val; 45 struct ccsr_sfp_regs *sfp_regs = (void *)(CONFIG_SYS_SFP_ADDR); 46 struct ccsr_gur __iomem *gur = (void *)(CONFIG_DCFG_ADDR); 47 48 val = sfp_in32(&sfp_regs->ospr) & ITS_MASK; 49 if (val == ITS_MASK) 50 return 1; 51 52 #if defined(CONFIG_FSL_CORENET) || !defined(CONFIG_MPC85xx) 53 /* For PBL based platforms check the SB_EN bit in RCWSR */ 54 val = gur_in32(&gur->rcwsr[RCW_SB_EN_REG_INDEX - 1]) & RCW_SB_EN_MASK; 55 if (val == RCW_SB_EN_MASK) 56 return 1; 57 #endif 58 59 #if defined(CONFIG_MPC85xx) && !defined(CONFIG_FSL_CORENET) 60 /* For Non-PBL Platforms, check the Device Status register 2*/ 61 val = gur_in32(&gur->pordevsr2) & MPC85xx_PORDEVSR2_SBC_MASK; 62 if (val != MPC85xx_PORDEVSR2_SBC_MASK) 63 return 1; 64 65 #endif 66 return 0; 67 } 68 69 #ifndef CONFIG_SPL_BUILD 70 int fsl_setenv_chain_of_trust(void) 71 { 72 /* Check Boot Mode 73 * If Boot Mode is Non-Secure, no changes are required 74 */ 75 if (fsl_check_boot_mode_secure() == 0) 76 return 0; 77 78 /* If Boot mode is Secure, set the environment variables 79 * bootdelay = 0 (To disable Boot Prompt) 80 * bootcmd = CONFIG_CHAIN_BOOT_CMD (Validate and execute Boot script) 81 */ 82 env_set("bootdelay", "0"); 83 84 #ifdef CONFIG_ARM 85 env_set("secureboot", "y"); 86 #else 87 env_set("bootcmd", CONFIG_CHAIN_BOOT_CMD); 88 #endif 89 90 return 0; 91 } 92 #endif 93 94 #ifdef CONFIG_SPL_BUILD 95 void spl_validate_uboot(uint32_t hdr_addr, uintptr_t img_addr) 96 { 97 int res; 98 99 /* 100 * Check Boot Mode 101 * If Boot Mode is Non-Secure, skip validation 102 */ 103 if (fsl_check_boot_mode_secure() == 0) 104 return; 105 106 printf("SPL: Validating U-Boot image\n"); 107 108 #ifdef CONFIG_ADDR_MAP 109 init_addr_map(); 110 #endif 111 112 #ifdef CONFIG_FSL_CORENET 113 if (pamu_init() < 0) 114 fsl_secboot_handle_error(ERROR_ESBC_PAMU_INIT); 115 #endif 116 117 #ifdef CONFIG_FSL_CAAM 118 if (sec_init() < 0) 119 fsl_secboot_handle_error(ERROR_ESBC_SEC_INIT); 120 #endif 121 122 /* 123 * dm_init_and_scan() is called as part of common SPL framework, so no 124 * need to call it again but in case of powerpc platforms which currently 125 * do not use common SPL framework, so need to call this function here. 126 */ 127 #if defined(CONFIG_SPL_DM) && (!defined(CONFIG_SPL_FRAMEWORK)) 128 dm_init_and_scan(true); 129 #endif 130 res = fsl_secboot_validate(hdr_addr, CONFIG_SPL_UBOOT_KEY_HASH, 131 &img_addr); 132 133 if (res == 0) 134 printf("SPL: Validation of U-boot successful\n"); 135 } 136 137 #ifdef CONFIG_SPL_FRAMEWORK 138 /* Override weak funtion defined in SPL framework to enable validation 139 * of main u-boot image before jumping to u-boot image. 140 */ 141 void __noreturn jump_to_image_no_args(struct spl_image_info *spl_image) 142 { 143 typedef void __noreturn (*image_entry_noargs_t)(void); 144 uint32_t hdr_addr; 145 146 image_entry_noargs_t image_entry = 147 (image_entry_noargs_t)(unsigned long)spl_image->entry_point; 148 149 hdr_addr = (spl_image->entry_point + spl_image->size - 150 CONFIG_U_BOOT_HDR_SIZE); 151 spl_validate_uboot(hdr_addr, (uintptr_t)spl_image->entry_point); 152 /* 153 * In case of failure in validation, spl_validate_uboot would 154 * not return back in case of Production environment with ITS=1. 155 * Thus U-Boot will not start. 156 * In Development environment (ITS=0 and SB_EN=1), the function 157 * may return back in case of non-fatal failures. 158 */ 159 160 debug("image entry point: 0x%lX\n", spl_image->entry_point); 161 image_entry(); 162 } 163 #endif /* ifdef CONFIG_SPL_FRAMEWORK */ 164 #endif /* ifdef CONFIG_SPL_BUILD */ 165
