1 /*
2  * Copyright (c) 2015-2023, Arm Limited and Contributors. All rights reserved.
3  *
4  * SPDX-License-Identifier: BSD-3-Clause
5  */
6 
7 #include <assert.h>
8 #include <string.h>
9 
10 #include <arch_helpers.h>
11 #include <common/debug.h>
12 #include <common/desc_image_load.h>
13 #include <drivers/fwu/fwu.h>
14 #include <drivers/fwu/fwu_metadata.h>
15 #include <drivers/io/io_block.h>
16 #include <drivers/io/io_driver.h>
17 #include <drivers/io/io_encrypted.h>
18 #include <drivers/io/io_fip.h>
19 #include <drivers/io/io_memmap.h>
20 #include <drivers/io/io_mtd.h>
21 #include <drivers/io/io_storage.h>
22 #include <drivers/mmc.h>
23 #include <drivers/partition/efi.h>
24 #include <drivers/partition/partition.h>
25 #include <drivers/raw_nand.h>
26 #include <drivers/spi_nand.h>
27 #include <drivers/spi_nor.h>
28 #include <drivers/st/stm32_fmc2_nand.h>
29 #include <drivers/st/stm32_qspi.h>
30 #include <drivers/st/stm32_sdmmc2.h>
31 #include <drivers/usb_device.h>
32 #include <lib/fconf/fconf.h>
33 #include <lib/mmio.h>
34 #include <lib/utils.h>
35 #include <plat/common/platform.h>
36 #include <tools_share/firmware_image_package.h>
37 
38 #include <platform_def.h>
39 #include <stm32cubeprogrammer.h>
40 #include <stm32mp_efi.h>
41 #include <stm32mp_fconf_getter.h>
42 #include <stm32mp_io_storage.h>
43 #include <usb_dfu.h>
44 
45 /* IO devices */
46 uintptr_t fip_dev_handle;
47 uintptr_t storage_dev_handle;
48 
49 static const io_dev_connector_t *fip_dev_con;
50 
51 #ifndef DECRYPTION_SUPPORT_none
52 static const io_dev_connector_t *enc_dev_con;
53 uintptr_t enc_dev_handle;
54 #endif
55 
56 #if STM32MP_SDMMC || STM32MP_EMMC
57 static struct mmc_device_info mmc_info;
58 
59 static uint8_t block_buffer[MMC_BLOCK_SIZE] __aligned(MMC_BLOCK_SIZE);
60 
61 static io_block_dev_spec_t mmc_block_dev_spec = {
62 	/* It's used as temp buffer in block driver */
63 	.buffer = {
64 		.offset = (size_t)&block_buffer,
65 		.length = MMC_BLOCK_SIZE,
66 	},
67 	.ops = {
68 		.read = mmc_read_blocks,
69 		.write = NULL,
70 	},
71 	.block_size = MMC_BLOCK_SIZE,
72 };
73 
74 static const io_dev_connector_t *mmc_dev_con;
75 #endif /* STM32MP_SDMMC || STM32MP_EMMC */
76 
77 #if STM32MP_SPI_NOR
78 static io_mtd_dev_spec_t spi_nor_dev_spec = {
79 	.ops = {
80 		.init = spi_nor_init,
81 		.read = spi_nor_read,
82 	},
83 };
84 #endif
85 
86 #if STM32MP_RAW_NAND
87 static io_mtd_dev_spec_t nand_dev_spec = {
88 	.ops = {
89 		.init = nand_raw_init,
90 		.read = nand_read,
91 		.seek = nand_seek_bb
92 	},
93 };
94 
95 static const io_dev_connector_t *nand_dev_con;
96 #endif
97 
98 #if STM32MP_SPI_NAND
99 static io_mtd_dev_spec_t spi_nand_dev_spec = {
100 	.ops = {
101 		.init = spi_nand_init,
102 		.read = nand_read,
103 		.seek = nand_seek_bb
104 	},
105 };
106 #endif
107 
108 #if STM32MP_SPI_NAND || STM32MP_SPI_NOR
109 static const io_dev_connector_t *spi_dev_con;
110 #endif
111 
112 #if STM32MP_UART_PROGRAMMER || STM32MP_USB_PROGRAMMER
113 static const io_dev_connector_t *memmap_dev_con;
114 #endif
115 
116 io_block_spec_t image_block_spec = {
117 	.offset = 0U,
118 	.length = 0U,
119 };
120 
open_fip(const uintptr_t spec)121 int open_fip(const uintptr_t spec)
122 {
123 	return io_dev_init(fip_dev_handle, (uintptr_t)FIP_IMAGE_ID);
124 }
125 
126 #ifndef DECRYPTION_SUPPORT_none
open_enc_fip(const uintptr_t spec)127 int open_enc_fip(const uintptr_t spec)
128 {
129 	int result;
130 	uintptr_t local_image_handle;
131 
132 	result = io_dev_init(enc_dev_handle, (uintptr_t)ENC_IMAGE_ID);
133 	if (result != 0) {
134 		return result;
135 	}
136 
137 	result = io_open(enc_dev_handle, spec, &local_image_handle);
138 	if (result != 0) {
139 		return result;
140 	}
141 
142 	VERBOSE("Using encrypted FIP\n");
143 	io_close(local_image_handle);
144 
145 	return 0;
146 }
147 #endif
148 
open_storage(const uintptr_t spec)149 int open_storage(const uintptr_t spec)
150 {
151 	return io_dev_init(storage_dev_handle, 0);
152 }
153 
154 #if STM32MP_EMMC_BOOT
get_boot_part_fip_header(void)155 static uint32_t get_boot_part_fip_header(void)
156 {
157 	io_block_spec_t emmc_boot_fip_block_spec = {
158 		.offset = STM32MP_EMMC_BOOT_FIP_OFFSET,
159 		.length = MMC_BLOCK_SIZE, /* We are interested only in first 4 bytes */
160 	};
161 	uint32_t magic = 0U;
162 	int io_result;
163 	size_t bytes_read;
164 	uintptr_t fip_hdr_handle;
165 
166 	io_result = io_open(storage_dev_handle, (uintptr_t)&emmc_boot_fip_block_spec,
167 			    &fip_hdr_handle);
168 	assert(io_result == 0);
169 
170 	io_result = io_read(fip_hdr_handle, (uintptr_t)&magic, sizeof(magic),
171 			    &bytes_read);
172 	if ((io_result != 0) || (bytes_read != sizeof(magic))) {
173 		panic();
174 	}
175 
176 	io_close(fip_hdr_handle);
177 
178 	VERBOSE("%s: eMMC boot magic at offset 256K: %08x\n",
179 		__func__, magic);
180 
181 	return magic;
182 }
183 #endif
184 
print_boot_device(boot_api_context_t * boot_context)185 static void print_boot_device(boot_api_context_t *boot_context)
186 {
187 	switch (boot_context->boot_interface_selected) {
188 	case BOOT_API_CTX_BOOT_INTERFACE_SEL_FLASH_SD:
189 		INFO("Using SDMMC\n");
190 		break;
191 	case BOOT_API_CTX_BOOT_INTERFACE_SEL_FLASH_EMMC:
192 		INFO("Using EMMC\n");
193 		break;
194 	case BOOT_API_CTX_BOOT_INTERFACE_SEL_FLASH_NOR_SPI:
195 		INFO("Using SPI NOR\n");
196 		break;
197 	case BOOT_API_CTX_BOOT_INTERFACE_SEL_FLASH_NAND_FMC:
198 		INFO("Using FMC NAND\n");
199 		break;
200 	case BOOT_API_CTX_BOOT_INTERFACE_SEL_FLASH_NAND_SPI:
201 		INFO("Using SPI NAND\n");
202 		break;
203 	case BOOT_API_CTX_BOOT_INTERFACE_SEL_SERIAL_UART:
204 		INFO("Using UART\n");
205 		break;
206 	case BOOT_API_CTX_BOOT_INTERFACE_SEL_SERIAL_USB:
207 		INFO("Using USB\n");
208 		break;
209 	default:
210 		ERROR("Boot interface %u not found\n",
211 		      boot_context->boot_interface_selected);
212 		panic();
213 		break;
214 	}
215 
216 	if (boot_context->boot_interface_instance != 0U) {
217 		INFO("  Instance %d\n", boot_context->boot_interface_instance);
218 	}
219 }
220 
221 #if STM32MP_SDMMC || STM32MP_EMMC
boot_mmc(enum mmc_device_type mmc_dev_type,uint16_t boot_interface_instance)222 static void boot_mmc(enum mmc_device_type mmc_dev_type,
223 		     uint16_t boot_interface_instance)
224 {
225 	int io_result __maybe_unused;
226 	struct stm32_sdmmc2_params params;
227 
228 	zeromem(&params, sizeof(struct stm32_sdmmc2_params));
229 
230 	mmc_info.mmc_dev_type = mmc_dev_type;
231 
232 	switch (boot_interface_instance) {
233 	case 1:
234 		params.reg_base = STM32MP_SDMMC1_BASE;
235 		break;
236 	case 2:
237 		params.reg_base = STM32MP_SDMMC2_BASE;
238 		break;
239 	case 3:
240 		params.reg_base = STM32MP_SDMMC3_BASE;
241 		break;
242 	default:
243 		WARN("SDMMC instance not found, using default\n");
244 		if (mmc_dev_type == MMC_IS_SD) {
245 			params.reg_base = STM32MP_SDMMC1_BASE;
246 		} else {
247 			params.reg_base = STM32MP_SDMMC2_BASE;
248 		}
249 		break;
250 	}
251 
252 	if (mmc_dev_type != MMC_IS_EMMC) {
253 		params.flags = MMC_FLAG_SD_CMD6;
254 	}
255 
256 	params.device_info = &mmc_info;
257 	if (stm32_sdmmc2_mmc_init(&params) != 0) {
258 		ERROR("SDMMC%u init failed\n", boot_interface_instance);
259 		panic();
260 	}
261 
262 	/* Open MMC as a block device to read FIP */
263 	io_result = register_io_dev_block(&mmc_dev_con);
264 	if (io_result != 0) {
265 		panic();
266 	}
267 
268 	io_result = io_dev_open(mmc_dev_con, (uintptr_t)&mmc_block_dev_spec,
269 				&storage_dev_handle);
270 	assert(io_result == 0);
271 
272 #if STM32MP_EMMC_BOOT
273 	if (mmc_dev_type == MMC_IS_EMMC) {
274 		io_result = mmc_part_switch_current_boot();
275 		assert(io_result == 0);
276 
277 		if (get_boot_part_fip_header() != TOC_HEADER_NAME) {
278 			WARN("%s: Can't find FIP header on eMMC boot partition. Trying GPT\n",
279 			     __func__);
280 			io_result = mmc_part_switch_user();
281 			assert(io_result == 0);
282 			return;
283 		}
284 
285 		VERBOSE("%s: FIP header found on eMMC boot partition\n",
286 			__func__);
287 		image_block_spec.offset = STM32MP_EMMC_BOOT_FIP_OFFSET;
288 		image_block_spec.length = mmc_boot_part_size() - STM32MP_EMMC_BOOT_FIP_OFFSET;
289 	}
290 #endif
291 }
292 #endif /* STM32MP_SDMMC || STM32MP_EMMC */
293 
294 #if STM32MP_SPI_NOR
boot_spi_nor(boot_api_context_t * boot_context)295 static void boot_spi_nor(boot_api_context_t *boot_context)
296 {
297 	int io_result __maybe_unused;
298 
299 	io_result = stm32_qspi_init();
300 	assert(io_result == 0);
301 
302 	io_result = register_io_dev_mtd(&spi_dev_con);
303 	assert(io_result == 0);
304 
305 	/* Open connections to device */
306 	io_result = io_dev_open(spi_dev_con,
307 				(uintptr_t)&spi_nor_dev_spec,
308 				&storage_dev_handle);
309 	assert(io_result == 0);
310 }
311 #endif /* STM32MP_SPI_NOR */
312 
313 #if STM32MP_RAW_NAND
boot_fmc2_nand(boot_api_context_t * boot_context)314 static void boot_fmc2_nand(boot_api_context_t *boot_context)
315 {
316 	int io_result __maybe_unused;
317 
318 	io_result = stm32_fmc2_init();
319 	assert(io_result == 0);
320 
321 	/* Register the IO device on this platform */
322 	io_result = register_io_dev_mtd(&nand_dev_con);
323 	assert(io_result == 0);
324 
325 	/* Open connections to device */
326 	io_result = io_dev_open(nand_dev_con, (uintptr_t)&nand_dev_spec,
327 				&storage_dev_handle);
328 	assert(io_result == 0);
329 }
330 #endif /* STM32MP_RAW_NAND */
331 
332 #if STM32MP_SPI_NAND
boot_spi_nand(boot_api_context_t * boot_context)333 static void boot_spi_nand(boot_api_context_t *boot_context)
334 {
335 	int io_result __maybe_unused;
336 
337 	io_result = stm32_qspi_init();
338 	assert(io_result == 0);
339 
340 	io_result = register_io_dev_mtd(&spi_dev_con);
341 	assert(io_result == 0);
342 
343 	/* Open connections to device */
344 	io_result = io_dev_open(spi_dev_con,
345 				(uintptr_t)&spi_nand_dev_spec,
346 				&storage_dev_handle);
347 	assert(io_result == 0);
348 }
349 #endif /* STM32MP_SPI_NAND */
350 
351 #if STM32MP_UART_PROGRAMMER || STM32MP_USB_PROGRAMMER
mmap_io_setup(void)352 static void mmap_io_setup(void)
353 {
354 	int io_result __maybe_unused;
355 
356 	io_result = register_io_dev_memmap(&memmap_dev_con);
357 	assert(io_result == 0);
358 
359 	io_result = io_dev_open(memmap_dev_con, (uintptr_t)NULL,
360 				&storage_dev_handle);
361 	assert(io_result == 0);
362 }
363 
364 #if STM32MP_UART_PROGRAMMER
stm32cubeprogrammer_uart(void)365 static void stm32cubeprogrammer_uart(void)
366 {
367 	int ret __maybe_unused;
368 	boot_api_context_t *boot_context =
369 		(boot_api_context_t *)stm32mp_get_boot_ctx_address();
370 	uintptr_t uart_base;
371 
372 	uart_base = get_uart_address(boot_context->boot_interface_instance);
373 	ret = stm32cubeprog_uart_load(uart_base, DWL_BUFFER_BASE, DWL_BUFFER_SIZE);
374 	assert(ret == 0);
375 }
376 #endif
377 
378 #if STM32MP_USB_PROGRAMMER
stm32cubeprogrammer_usb(void)379 static void stm32cubeprogrammer_usb(void)
380 {
381 	int ret __maybe_unused;
382 	struct usb_handle *pdev;
383 
384 	/* Init USB on platform */
385 	pdev = usb_dfu_plat_init();
386 
387 	ret = stm32cubeprog_usb_load(pdev, DWL_BUFFER_BASE, DWL_BUFFER_SIZE);
388 	assert(ret == 0);
389 }
390 #endif
391 #endif /* STM32MP_UART_PROGRAMMER || STM32MP_USB_PROGRAMMER */
392 
stm32mp_io_setup(void)393 void stm32mp_io_setup(void)
394 {
395 	int io_result __maybe_unused;
396 	boot_api_context_t *boot_context =
397 		(boot_api_context_t *)stm32mp_get_boot_ctx_address();
398 
399 	print_boot_device(boot_context);
400 
401 	if ((boot_context->boot_partition_used_toboot == 1U) ||
402 	    (boot_context->boot_partition_used_toboot == 2U)) {
403 		INFO("Boot used partition fsbl%u\n",
404 		     boot_context->boot_partition_used_toboot);
405 	}
406 
407 	io_result = register_io_dev_fip(&fip_dev_con);
408 	assert(io_result == 0);
409 
410 	io_result = io_dev_open(fip_dev_con, (uintptr_t)NULL,
411 				&fip_dev_handle);
412 
413 #ifndef DECRYPTION_SUPPORT_none
414 	io_result = register_io_dev_enc(&enc_dev_con);
415 	assert(io_result == 0);
416 
417 	io_result = io_dev_open(enc_dev_con, (uintptr_t)NULL,
418 				&enc_dev_handle);
419 	assert(io_result == 0);
420 #endif
421 
422 	switch (boot_context->boot_interface_selected) {
423 #if STM32MP_SDMMC
424 	case BOOT_API_CTX_BOOT_INTERFACE_SEL_FLASH_SD:
425 		dmbsy();
426 		boot_mmc(MMC_IS_SD, boot_context->boot_interface_instance);
427 		break;
428 #endif
429 #if STM32MP_EMMC
430 	case BOOT_API_CTX_BOOT_INTERFACE_SEL_FLASH_EMMC:
431 		dmbsy();
432 		boot_mmc(MMC_IS_EMMC, boot_context->boot_interface_instance);
433 		break;
434 #endif
435 #if STM32MP_SPI_NOR
436 	case BOOT_API_CTX_BOOT_INTERFACE_SEL_FLASH_NOR_SPI:
437 		dmbsy();
438 		boot_spi_nor(boot_context);
439 		break;
440 #endif
441 #if STM32MP_RAW_NAND
442 	case BOOT_API_CTX_BOOT_INTERFACE_SEL_FLASH_NAND_FMC:
443 		dmbsy();
444 		boot_fmc2_nand(boot_context);
445 		break;
446 #endif
447 #if STM32MP_SPI_NAND
448 	case BOOT_API_CTX_BOOT_INTERFACE_SEL_FLASH_NAND_SPI:
449 		dmbsy();
450 		boot_spi_nand(boot_context);
451 		break;
452 #endif
453 #if STM32MP_UART_PROGRAMMER || STM32MP_USB_PROGRAMMER
454 #if STM32MP_UART_PROGRAMMER
455 	case BOOT_API_CTX_BOOT_INTERFACE_SEL_SERIAL_UART:
456 #endif
457 #if STM32MP_USB_PROGRAMMER
458 	case BOOT_API_CTX_BOOT_INTERFACE_SEL_SERIAL_USB:
459 #endif
460 		dmbsy();
461 		mmap_io_setup();
462 		break;
463 #endif
464 
465 	default:
466 		ERROR("Boot interface %d not supported\n",
467 		      boot_context->boot_interface_selected);
468 		panic();
469 		break;
470 	}
471 }
472 
bl2_plat_handle_pre_image_load(unsigned int image_id)473 int bl2_plat_handle_pre_image_load(unsigned int image_id)
474 {
475 	static bool gpt_init_done __maybe_unused;
476 	uint16_t boot_itf = stm32mp_get_boot_itf_selected();
477 
478 	switch (boot_itf) {
479 #if STM32MP_SDMMC || STM32MP_EMMC
480 	case BOOT_API_CTX_BOOT_INTERFACE_SEL_FLASH_EMMC:
481 #if STM32MP_EMMC_BOOT
482 		if (image_block_spec.offset == STM32MP_EMMC_BOOT_FIP_OFFSET) {
483 			break;
484 		}
485 #endif
486 		/* fallthrough */
487 	case BOOT_API_CTX_BOOT_INTERFACE_SEL_FLASH_SD:
488 		if (!gpt_init_done) {
489 /*
490  * With FWU Multi Bank feature enabled, the selection of
491  * the image to boot will be done by fwu_init calling the
492  * platform hook, plat_fwu_set_images_source.
493  */
494 #if !PSA_FWU_SUPPORT
495 			const partition_entry_t *entry;
496 			const struct efi_guid fip_guid = STM32MP_FIP_GUID;
497 
498 			partition_init(GPT_IMAGE_ID);
499 			entry = get_partition_entry_by_type(&fip_guid);
500 			if (entry == NULL) {
501 				entry = get_partition_entry(FIP_IMAGE_NAME);
502 				if (entry == NULL) {
503 					ERROR("Could NOT find the %s partition!\n",
504 					      FIP_IMAGE_NAME);
505 
506 					return -ENOENT;
507 				}
508 			}
509 
510 			image_block_spec.offset = entry->start;
511 			image_block_spec.length = entry->length;
512 #endif
513 			gpt_init_done = true;
514 		} else {
515 			bl_mem_params_node_t *bl_mem_params = get_bl_mem_params_node(image_id);
516 
517 			assert(bl_mem_params != NULL);
518 
519 			mmc_block_dev_spec.buffer.offset = bl_mem_params->image_info.image_base;
520 			mmc_block_dev_spec.buffer.length = bl_mem_params->image_info.image_max_size;
521 		}
522 
523 		break;
524 #endif
525 
526 #if STM32MP_RAW_NAND || STM32MP_SPI_NAND
527 #if STM32MP_RAW_NAND
528 	case BOOT_API_CTX_BOOT_INTERFACE_SEL_FLASH_NAND_FMC:
529 #endif
530 #if STM32MP_SPI_NAND
531 	case BOOT_API_CTX_BOOT_INTERFACE_SEL_FLASH_NAND_SPI:
532 #endif
533 		image_block_spec.offset = STM32MP_NAND_FIP_OFFSET;
534 		break;
535 #endif
536 
537 #if STM32MP_SPI_NOR
538 	case BOOT_API_CTX_BOOT_INTERFACE_SEL_FLASH_NOR_SPI:
539 /*
540  * With FWU Multi Bank feature enabled, the selection of
541  * the image to boot will be done by fwu_init calling the
542  * platform hook, plat_fwu_set_images_source.
543  */
544 #if !PSA_FWU_SUPPORT
545 		image_block_spec.offset = STM32MP_NOR_FIP_OFFSET;
546 #endif
547 		break;
548 #endif
549 
550 #if STM32MP_UART_PROGRAMMER
551 	case BOOT_API_CTX_BOOT_INTERFACE_SEL_SERIAL_UART:
552 		if (image_id == FW_CONFIG_ID) {
553 			stm32cubeprogrammer_uart();
554 			/* FIP loaded at DWL address */
555 			image_block_spec.offset = DWL_BUFFER_BASE;
556 			image_block_spec.length = DWL_BUFFER_SIZE;
557 		}
558 		break;
559 #endif
560 #if STM32MP_USB_PROGRAMMER
561 	case BOOT_API_CTX_BOOT_INTERFACE_SEL_SERIAL_USB:
562 		if (image_id == FW_CONFIG_ID) {
563 			stm32cubeprogrammer_usb();
564 			/* FIP loaded at DWL address */
565 			image_block_spec.offset = DWL_BUFFER_BASE;
566 			image_block_spec.length = DWL_BUFFER_SIZE;
567 		}
568 		break;
569 #endif
570 
571 	default:
572 		ERROR("FIP Not found\n");
573 		panic();
574 	}
575 
576 	return 0;
577 }
578 
579 /*
580  * Return an IO device handle and specification which can be used to access
581  * an image. Use this to enforce platform load policy.
582  */
plat_get_image_source(unsigned int image_id,uintptr_t * dev_handle,uintptr_t * image_spec)583 int plat_get_image_source(unsigned int image_id, uintptr_t *dev_handle,
584 			  uintptr_t *image_spec)
585 {
586 	int rc;
587 	const struct plat_io_policy *policy;
588 
589 	policy = FCONF_GET_PROPERTY(stm32mp, io_policies, image_id);
590 	rc = policy->check(policy->image_spec);
591 	if (rc == 0) {
592 		*image_spec = policy->image_spec;
593 		*dev_handle = *(policy->dev_handle);
594 	}
595 
596 	return rc;
597 }
598 
599 #if (STM32MP_SDMMC || STM32MP_EMMC || STM32MP_SPI_NOR) && PSA_FWU_SUPPORT
600 /*
601  * In each boot in non-trial mode, we set the BKP register to
602  * FWU_MAX_TRIAL_REBOOT, and return the active_index from metadata.
603  *
604  * As long as the update agent didn't update the "accepted" field in metadata
605  * (i.e. we are in trial mode), we select the new active_index.
606  * To avoid infinite boot loop at trial boot we decrement a BKP register.
607  * If this counter is 0:
608  *     - an unexpected TAMPER event raised (that resets the BKP registers to 0)
609  *     - a power-off occurs before the update agent was able to update the
610  *       "accepted' field
611  *     - we already boot FWU_MAX_TRIAL_REBOOT times in trial mode.
612  * we select the previous_active_index.
613  */
plat_fwu_get_boot_idx(void)614 uint32_t plat_fwu_get_boot_idx(void)
615 {
616 	/*
617 	 * Select boot index and update boot counter only once per boot
618 	 * even if this function is called several times.
619 	 */
620 	static uint32_t boot_idx = INVALID_BOOT_IDX;
621 
622 	if (boot_idx == INVALID_BOOT_IDX) {
623 		const struct fwu_metadata *data = fwu_get_metadata();
624 
625 		boot_idx = data->active_index;
626 
627 		if (data->bank_state[boot_idx] == FWU_BANK_STATE_VALID) {
628 			if (stm32_get_and_dec_fwu_trial_boot_cnt() == 0U) {
629 				WARN("Trial FWU fails %u times\n",
630 				     FWU_MAX_TRIAL_REBOOT);
631 				boot_idx = fwu_get_alternate_boot_bank();
632 			}
633 		} else if (data->bank_state[boot_idx] ==
634 			   FWU_BANK_STATE_ACCEPTED) {
635 			stm32_set_max_fwu_trial_boot_cnt();
636 		} else {
637 			ERROR("The active bank(%u) of the platform is in Invalid State.\n",
638 				boot_idx);
639 			boot_idx = fwu_get_alternate_boot_bank();
640 			stm32_clear_fwu_trial_boot_cnt();
641 		}
642 	}
643 
644 	return boot_idx;
645 }
646 
stm32_get_image_spec(const struct efi_guid * img_type_guid)647 static void *stm32_get_image_spec(const struct efi_guid *img_type_guid)
648 {
649 	unsigned int i;
650 
651 	for (i = 0U; i < MAX_NUMBER_IDS; i++) {
652 		if ((guidcmp(&policies[i].img_type_guid, img_type_guid)) == 0) {
653 			return (void *)policies[i].image_spec;
654 		}
655 	}
656 
657 	return NULL;
658 }
659 
plat_fwu_set_images_source(const struct fwu_metadata * metadata)660 void plat_fwu_set_images_source(const struct fwu_metadata *metadata)
661 {
662 	unsigned int i;
663 	uint32_t boot_idx;
664 	const partition_entry_t *entry __maybe_unused;
665 	const struct fwu_image_entry *img_entry;
666 	const void *img_type_guid;
667 	const void *img_guid;
668 	io_block_spec_t *image_spec;
669 	const uint16_t boot_itf = stm32mp_get_boot_itf_selected();
670 
671 	boot_idx = plat_fwu_get_boot_idx();
672 	assert(boot_idx < NR_OF_FW_BANKS);
673 	VERBOSE("Selecting to boot from bank %u\n", boot_idx);
674 
675 	img_entry = (void *)&metadata->fw_desc.img_entry;
676 	for (i = 0U; i < NR_OF_IMAGES_IN_FW_BANK; i++) {
677 		img_type_guid = &img_entry[i].img_type_guid;
678 
679 		img_guid = &img_entry[i].img_bank_info[boot_idx].img_guid;
680 
681 		image_spec = stm32_get_image_spec(img_type_guid);
682 		if (image_spec == NULL) {
683 			ERROR("Unable to get image spec for the image in the metadata\n");
684 			panic();
685 		}
686 
687 		switch (boot_itf) {
688 #if (STM32MP_SDMMC || STM32MP_EMMC)
689 		case BOOT_API_CTX_BOOT_INTERFACE_SEL_FLASH_SD:
690 		case BOOT_API_CTX_BOOT_INTERFACE_SEL_FLASH_EMMC:
691 			entry = get_partition_entry_by_guid(img_guid);
692 			if (entry == NULL) {
693 				ERROR("No partition with the uuid mentioned in metadata\n");
694 				panic();
695 			}
696 
697 			image_spec->offset = entry->start;
698 			image_spec->length = entry->length;
699 			break;
700 #endif
701 #if STM32MP_SPI_NOR
702 		case BOOT_API_CTX_BOOT_INTERFACE_SEL_FLASH_NOR_SPI:
703 			if (guidcmp(img_guid, &STM32MP_NOR_FIP_A_GUID) == 0) {
704 				image_spec->offset = STM32MP_NOR_FIP_A_OFFSET;
705 			} else if (guidcmp(img_guid, &STM32MP_NOR_FIP_B_GUID) == 0) {
706 				image_spec->offset = STM32MP_NOR_FIP_B_OFFSET;
707 			} else {
708 				ERROR("Invalid uuid mentioned in metadata\n");
709 				panic();
710 			}
711 			break;
712 #endif
713 		default:
714 			panic();
715 			break;
716 		}
717 	}
718 }
719 
plat_set_image_source(unsigned int image_id,uintptr_t * handle,uintptr_t * image_spec)720 static int plat_set_image_source(unsigned int image_id,
721 				 uintptr_t *handle,
722 				 uintptr_t *image_spec)
723 {
724 	struct plat_io_policy *policy;
725 	io_block_spec_t *spec __maybe_unused;
726 	const partition_entry_t *entry __maybe_unused;
727 	const uint16_t boot_itf = stm32mp_get_boot_itf_selected();
728 
729 	policy = &policies[image_id];
730 	spec = (io_block_spec_t *)policy->image_spec;
731 
732 	switch (boot_itf) {
733 #if (STM32MP_SDMMC || STM32MP_EMMC)
734 	case BOOT_API_CTX_BOOT_INTERFACE_SEL_FLASH_SD:
735 	case BOOT_API_CTX_BOOT_INTERFACE_SEL_FLASH_EMMC:
736 		partition_init(GPT_IMAGE_ID);
737 
738 		if (image_id == FWU_METADATA_IMAGE_ID) {
739 			entry = get_partition_entry(METADATA_PART_1);
740 		} else {
741 			entry = get_partition_entry(METADATA_PART_2);
742 		}
743 
744 		if (entry == NULL) {
745 			ERROR("Unable to find a metadata partition\n");
746 			return -ENOENT;
747 		}
748 
749 		spec->offset = entry->start;
750 		spec->length = entry->length;
751 		break;
752 #endif
753 
754 #if STM32MP_SPI_NOR
755 	case BOOT_API_CTX_BOOT_INTERFACE_SEL_FLASH_NOR_SPI:
756 		if (image_id == FWU_METADATA_IMAGE_ID) {
757 			spec->offset = STM32MP_NOR_METADATA1_OFFSET;
758 		} else {
759 			spec->offset = STM32MP_NOR_METADATA2_OFFSET;
760 		}
761 
762 		spec->length = sizeof(struct fwu_metadata);
763 		break;
764 #endif
765 	default:
766 		panic();
767 		break;
768 	}
769 
770 	*image_spec = policy->image_spec;
771 	*handle = *policy->dev_handle;
772 
773 	return 0;
774 }
775 
plat_fwu_set_metadata_image_source(unsigned int image_id,uintptr_t * handle,uintptr_t * image_spec)776 int plat_fwu_set_metadata_image_source(unsigned int image_id,
777 				       uintptr_t *handle,
778 				       uintptr_t *image_spec)
779 {
780 	assert((image_id == FWU_METADATA_IMAGE_ID) ||
781 	       (image_id == BKUP_FWU_METADATA_IMAGE_ID));
782 
783 	return plat_set_image_source(image_id, handle, image_spec);
784 }
785 #endif /* (STM32MP_SDMMC || STM32MP_EMMC || STM32MP_SPI_NOR) && PSA_FWU_SUPPORT */
786