1*54fd6939SJiyong Park /*
2*54fd6939SJiyong Park * Copyright (c) 2013-2021, ARM Limited and Contributors. All rights reserved.
3*54fd6939SJiyong Park *
4*54fd6939SJiyong Park * SPDX-License-Identifier: BSD-3-Clause
5*54fd6939SJiyong Park */
6*54fd6939SJiyong Park
7*54fd6939SJiyong Park #include <assert.h>
8*54fd6939SJiyong Park
9*54fd6939SJiyong Park #include <platform_def.h>
10*54fd6939SJiyong Park
11*54fd6939SJiyong Park #include <arch.h>
12*54fd6939SJiyong Park #include <arch_features.h>
13*54fd6939SJiyong Park #include <arch_helpers.h>
14*54fd6939SJiyong Park #include <bl1/bl1.h>
15*54fd6939SJiyong Park #include <common/bl_common.h>
16*54fd6939SJiyong Park #include <common/debug.h>
17*54fd6939SJiyong Park #include <drivers/auth/auth_mod.h>
18*54fd6939SJiyong Park #include <drivers/console.h>
19*54fd6939SJiyong Park #include <lib/cpus/errata_report.h>
20*54fd6939SJiyong Park #include <lib/utils.h>
21*54fd6939SJiyong Park #include <plat/common/platform.h>
22*54fd6939SJiyong Park #include <smccc_helpers.h>
23*54fd6939SJiyong Park #include <tools_share/uuid.h>
24*54fd6939SJiyong Park
25*54fd6939SJiyong Park #include "bl1_private.h"
26*54fd6939SJiyong Park
27*54fd6939SJiyong Park static void bl1_load_bl2(void);
28*54fd6939SJiyong Park
29*54fd6939SJiyong Park #if ENABLE_PAUTH
30*54fd6939SJiyong Park uint64_t bl1_apiakey[2];
31*54fd6939SJiyong Park #endif
32*54fd6939SJiyong Park
33*54fd6939SJiyong Park /*******************************************************************************
34*54fd6939SJiyong Park * Helper utility to calculate the BL2 memory layout taking into consideration
35*54fd6939SJiyong Park * the BL1 RW data assuming that it is at the top of the memory layout.
36*54fd6939SJiyong Park ******************************************************************************/
bl1_calc_bl2_mem_layout(const meminfo_t * bl1_mem_layout,meminfo_t * bl2_mem_layout)37*54fd6939SJiyong Park void bl1_calc_bl2_mem_layout(const meminfo_t *bl1_mem_layout,
38*54fd6939SJiyong Park meminfo_t *bl2_mem_layout)
39*54fd6939SJiyong Park {
40*54fd6939SJiyong Park assert(bl1_mem_layout != NULL);
41*54fd6939SJiyong Park assert(bl2_mem_layout != NULL);
42*54fd6939SJiyong Park
43*54fd6939SJiyong Park /*
44*54fd6939SJiyong Park * Remove BL1 RW data from the scope of memory visible to BL2.
45*54fd6939SJiyong Park * This is assuming BL1 RW data is at the top of bl1_mem_layout.
46*54fd6939SJiyong Park */
47*54fd6939SJiyong Park assert(BL1_RW_BASE > bl1_mem_layout->total_base);
48*54fd6939SJiyong Park bl2_mem_layout->total_base = bl1_mem_layout->total_base;
49*54fd6939SJiyong Park bl2_mem_layout->total_size = BL1_RW_BASE - bl1_mem_layout->total_base;
50*54fd6939SJiyong Park
51*54fd6939SJiyong Park flush_dcache_range((uintptr_t)bl2_mem_layout, sizeof(meminfo_t));
52*54fd6939SJiyong Park }
53*54fd6939SJiyong Park
54*54fd6939SJiyong Park /*******************************************************************************
55*54fd6939SJiyong Park * Setup function for BL1.
56*54fd6939SJiyong Park ******************************************************************************/
bl1_setup(void)57*54fd6939SJiyong Park void bl1_setup(void)
58*54fd6939SJiyong Park {
59*54fd6939SJiyong Park /* Perform early platform-specific setup */
60*54fd6939SJiyong Park bl1_early_platform_setup();
61*54fd6939SJiyong Park
62*54fd6939SJiyong Park /* Perform late platform-specific setup */
63*54fd6939SJiyong Park bl1_plat_arch_setup();
64*54fd6939SJiyong Park
65*54fd6939SJiyong Park #if CTX_INCLUDE_PAUTH_REGS
66*54fd6939SJiyong Park /*
67*54fd6939SJiyong Park * Assert that the ARMv8.3-PAuth registers are present or an access
68*54fd6939SJiyong Park * fault will be triggered when they are being saved or restored.
69*54fd6939SJiyong Park */
70*54fd6939SJiyong Park assert(is_armv8_3_pauth_present());
71*54fd6939SJiyong Park #endif /* CTX_INCLUDE_PAUTH_REGS */
72*54fd6939SJiyong Park }
73*54fd6939SJiyong Park
74*54fd6939SJiyong Park /*******************************************************************************
75*54fd6939SJiyong Park * Function to perform late architectural and platform specific initialization.
76*54fd6939SJiyong Park * It also queries the platform to load and run next BL image. Only called
77*54fd6939SJiyong Park * by the primary cpu after a cold boot.
78*54fd6939SJiyong Park ******************************************************************************/
bl1_main(void)79*54fd6939SJiyong Park void bl1_main(void)
80*54fd6939SJiyong Park {
81*54fd6939SJiyong Park unsigned int image_id;
82*54fd6939SJiyong Park
83*54fd6939SJiyong Park /* Announce our arrival */
84*54fd6939SJiyong Park NOTICE(FIRMWARE_WELCOME_STR);
85*54fd6939SJiyong Park NOTICE("BL1: %s\n", version_string);
86*54fd6939SJiyong Park NOTICE("BL1: %s\n", build_message);
87*54fd6939SJiyong Park
88*54fd6939SJiyong Park INFO("BL1: RAM %p - %p\n", (void *)BL1_RAM_BASE, (void *)BL1_RAM_LIMIT);
89*54fd6939SJiyong Park
90*54fd6939SJiyong Park print_errata_status();
91*54fd6939SJiyong Park
92*54fd6939SJiyong Park #if ENABLE_ASSERTIONS
93*54fd6939SJiyong Park u_register_t val;
94*54fd6939SJiyong Park /*
95*54fd6939SJiyong Park * Ensure that MMU/Caches and coherency are turned on
96*54fd6939SJiyong Park */
97*54fd6939SJiyong Park #ifdef __aarch64__
98*54fd6939SJiyong Park val = read_sctlr_el3();
99*54fd6939SJiyong Park #else
100*54fd6939SJiyong Park val = read_sctlr();
101*54fd6939SJiyong Park #endif
102*54fd6939SJiyong Park assert((val & SCTLR_M_BIT) != 0);
103*54fd6939SJiyong Park assert((val & SCTLR_C_BIT) != 0);
104*54fd6939SJiyong Park assert((val & SCTLR_I_BIT) != 0);
105*54fd6939SJiyong Park /*
106*54fd6939SJiyong Park * Check that Cache Writeback Granule (CWG) in CTR_EL0 matches the
107*54fd6939SJiyong Park * provided platform value
108*54fd6939SJiyong Park */
109*54fd6939SJiyong Park val = (read_ctr_el0() >> CTR_CWG_SHIFT) & CTR_CWG_MASK;
110*54fd6939SJiyong Park /*
111*54fd6939SJiyong Park * If CWG is zero, then no CWG information is available but we can
112*54fd6939SJiyong Park * at least check the platform value is less than the architectural
113*54fd6939SJiyong Park * maximum.
114*54fd6939SJiyong Park */
115*54fd6939SJiyong Park if (val != 0)
116*54fd6939SJiyong Park assert(CACHE_WRITEBACK_GRANULE == SIZE_FROM_LOG2_WORDS(val));
117*54fd6939SJiyong Park else
118*54fd6939SJiyong Park assert(CACHE_WRITEBACK_GRANULE <= MAX_CACHE_LINE_SIZE);
119*54fd6939SJiyong Park #endif /* ENABLE_ASSERTIONS */
120*54fd6939SJiyong Park
121*54fd6939SJiyong Park /* Perform remaining generic architectural setup from EL3 */
122*54fd6939SJiyong Park bl1_arch_setup();
123*54fd6939SJiyong Park
124*54fd6939SJiyong Park #if TRUSTED_BOARD_BOOT
125*54fd6939SJiyong Park /* Initialize authentication module */
126*54fd6939SJiyong Park auth_mod_init();
127*54fd6939SJiyong Park #endif /* TRUSTED_BOARD_BOOT */
128*54fd6939SJiyong Park
129*54fd6939SJiyong Park /* Initialize the measured boot */
130*54fd6939SJiyong Park bl1_plat_mboot_init();
131*54fd6939SJiyong Park
132*54fd6939SJiyong Park /* Perform platform setup in BL1. */
133*54fd6939SJiyong Park bl1_platform_setup();
134*54fd6939SJiyong Park
135*54fd6939SJiyong Park #if ENABLE_PAUTH
136*54fd6939SJiyong Park /* Store APIAKey_EL1 key */
137*54fd6939SJiyong Park bl1_apiakey[0] = read_apiakeylo_el1();
138*54fd6939SJiyong Park bl1_apiakey[1] = read_apiakeyhi_el1();
139*54fd6939SJiyong Park #endif /* ENABLE_PAUTH */
140*54fd6939SJiyong Park
141*54fd6939SJiyong Park /* Get the image id of next image to load and run. */
142*54fd6939SJiyong Park image_id = bl1_plat_get_next_image_id();
143*54fd6939SJiyong Park
144*54fd6939SJiyong Park /*
145*54fd6939SJiyong Park * We currently interpret any image id other than
146*54fd6939SJiyong Park * BL2_IMAGE_ID as the start of firmware update.
147*54fd6939SJiyong Park */
148*54fd6939SJiyong Park if (image_id == BL2_IMAGE_ID)
149*54fd6939SJiyong Park bl1_load_bl2();
150*54fd6939SJiyong Park else
151*54fd6939SJiyong Park NOTICE("BL1-FWU: *******FWU Process Started*******\n");
152*54fd6939SJiyong Park
153*54fd6939SJiyong Park /* Teardown the measured boot driver */
154*54fd6939SJiyong Park bl1_plat_mboot_finish();
155*54fd6939SJiyong Park
156*54fd6939SJiyong Park bl1_prepare_next_image(image_id);
157*54fd6939SJiyong Park
158*54fd6939SJiyong Park console_flush();
159*54fd6939SJiyong Park }
160*54fd6939SJiyong Park
161*54fd6939SJiyong Park /*******************************************************************************
162*54fd6939SJiyong Park * This function locates and loads the BL2 raw binary image in the trusted SRAM.
163*54fd6939SJiyong Park * Called by the primary cpu after a cold boot.
164*54fd6939SJiyong Park * TODO: Add support for alternative image load mechanism e.g using virtio/elf
165*54fd6939SJiyong Park * loader etc.
166*54fd6939SJiyong Park ******************************************************************************/
bl1_load_bl2(void)167*54fd6939SJiyong Park static void bl1_load_bl2(void)
168*54fd6939SJiyong Park {
169*54fd6939SJiyong Park image_desc_t *desc;
170*54fd6939SJiyong Park image_info_t *info;
171*54fd6939SJiyong Park int err;
172*54fd6939SJiyong Park
173*54fd6939SJiyong Park /* Get the image descriptor */
174*54fd6939SJiyong Park desc = bl1_plat_get_image_desc(BL2_IMAGE_ID);
175*54fd6939SJiyong Park assert(desc != NULL);
176*54fd6939SJiyong Park
177*54fd6939SJiyong Park /* Get the image info */
178*54fd6939SJiyong Park info = &desc->image_info;
179*54fd6939SJiyong Park INFO("BL1: Loading BL2\n");
180*54fd6939SJiyong Park
181*54fd6939SJiyong Park err = bl1_plat_handle_pre_image_load(BL2_IMAGE_ID);
182*54fd6939SJiyong Park if (err != 0) {
183*54fd6939SJiyong Park ERROR("Failure in pre image load handling of BL2 (%d)\n", err);
184*54fd6939SJiyong Park plat_error_handler(err);
185*54fd6939SJiyong Park }
186*54fd6939SJiyong Park
187*54fd6939SJiyong Park err = load_auth_image(BL2_IMAGE_ID, info);
188*54fd6939SJiyong Park if (err != 0) {
189*54fd6939SJiyong Park ERROR("Failed to load BL2 firmware.\n");
190*54fd6939SJiyong Park plat_error_handler(err);
191*54fd6939SJiyong Park }
192*54fd6939SJiyong Park
193*54fd6939SJiyong Park /* Allow platform to handle image information. */
194*54fd6939SJiyong Park err = bl1_plat_handle_post_image_load(BL2_IMAGE_ID);
195*54fd6939SJiyong Park if (err != 0) {
196*54fd6939SJiyong Park ERROR("Failure in post image load handling of BL2 (%d)\n", err);
197*54fd6939SJiyong Park plat_error_handler(err);
198*54fd6939SJiyong Park }
199*54fd6939SJiyong Park
200*54fd6939SJiyong Park NOTICE("BL1: Booting BL2\n");
201*54fd6939SJiyong Park }
202*54fd6939SJiyong Park
203*54fd6939SJiyong Park /*******************************************************************************
204*54fd6939SJiyong Park * Function called just before handing over to the next BL to inform the user
205*54fd6939SJiyong Park * about the boot progress. In debug mode, also print details about the BL
206*54fd6939SJiyong Park * image's execution context.
207*54fd6939SJiyong Park ******************************************************************************/
bl1_print_next_bl_ep_info(const entry_point_info_t * bl_ep_info)208*54fd6939SJiyong Park void bl1_print_next_bl_ep_info(const entry_point_info_t *bl_ep_info)
209*54fd6939SJiyong Park {
210*54fd6939SJiyong Park #ifdef __aarch64__
211*54fd6939SJiyong Park NOTICE("BL1: Booting BL31\n");
212*54fd6939SJiyong Park #else
213*54fd6939SJiyong Park NOTICE("BL1: Booting BL32\n");
214*54fd6939SJiyong Park #endif /* __aarch64__ */
215*54fd6939SJiyong Park print_entry_point_info(bl_ep_info);
216*54fd6939SJiyong Park }
217*54fd6939SJiyong Park
218*54fd6939SJiyong Park #if SPIN_ON_BL1_EXIT
print_debug_loop_message(void)219*54fd6939SJiyong Park void print_debug_loop_message(void)
220*54fd6939SJiyong Park {
221*54fd6939SJiyong Park NOTICE("BL1: Debug loop, spinning forever\n");
222*54fd6939SJiyong Park NOTICE("BL1: Please connect the debugger to continue\n");
223*54fd6939SJiyong Park }
224*54fd6939SJiyong Park #endif
225*54fd6939SJiyong Park
226*54fd6939SJiyong Park /*******************************************************************************
227*54fd6939SJiyong Park * Top level handler for servicing BL1 SMCs.
228*54fd6939SJiyong Park ******************************************************************************/
bl1_smc_handler(unsigned int smc_fid,u_register_t x1,u_register_t x2,u_register_t x3,u_register_t x4,void * cookie,void * handle,unsigned int flags)229*54fd6939SJiyong Park u_register_t bl1_smc_handler(unsigned int smc_fid,
230*54fd6939SJiyong Park u_register_t x1,
231*54fd6939SJiyong Park u_register_t x2,
232*54fd6939SJiyong Park u_register_t x3,
233*54fd6939SJiyong Park u_register_t x4,
234*54fd6939SJiyong Park void *cookie,
235*54fd6939SJiyong Park void *handle,
236*54fd6939SJiyong Park unsigned int flags)
237*54fd6939SJiyong Park {
238*54fd6939SJiyong Park /* BL1 Service UUID */
239*54fd6939SJiyong Park DEFINE_SVC_UUID2(bl1_svc_uid,
240*54fd6939SJiyong Park U(0xd46739fd), 0xcb72, 0x9a4d, 0xb5, 0x75,
241*54fd6939SJiyong Park 0x67, 0x15, 0xd6, 0xf4, 0xbb, 0x4a);
242*54fd6939SJiyong Park
243*54fd6939SJiyong Park
244*54fd6939SJiyong Park #if TRUSTED_BOARD_BOOT
245*54fd6939SJiyong Park /*
246*54fd6939SJiyong Park * Dispatch FWU calls to FWU SMC handler and return its return
247*54fd6939SJiyong Park * value
248*54fd6939SJiyong Park */
249*54fd6939SJiyong Park if (is_fwu_fid(smc_fid)) {
250*54fd6939SJiyong Park return bl1_fwu_smc_handler(smc_fid, x1, x2, x3, x4, cookie,
251*54fd6939SJiyong Park handle, flags);
252*54fd6939SJiyong Park }
253*54fd6939SJiyong Park #endif
254*54fd6939SJiyong Park
255*54fd6939SJiyong Park switch (smc_fid) {
256*54fd6939SJiyong Park case BL1_SMC_CALL_COUNT:
257*54fd6939SJiyong Park SMC_RET1(handle, BL1_NUM_SMC_CALLS);
258*54fd6939SJiyong Park
259*54fd6939SJiyong Park case BL1_SMC_UID:
260*54fd6939SJiyong Park SMC_UUID_RET(handle, bl1_svc_uid);
261*54fd6939SJiyong Park
262*54fd6939SJiyong Park case BL1_SMC_VERSION:
263*54fd6939SJiyong Park SMC_RET1(handle, BL1_SMC_MAJOR_VER | BL1_SMC_MINOR_VER);
264*54fd6939SJiyong Park
265*54fd6939SJiyong Park default:
266*54fd6939SJiyong Park WARN("Unimplemented BL1 SMC Call: 0x%x\n", smc_fid);
267*54fd6939SJiyong Park SMC_RET1(handle, SMC_UNK);
268*54fd6939SJiyong Park }
269*54fd6939SJiyong Park }
270*54fd6939SJiyong Park
271*54fd6939SJiyong Park /*******************************************************************************
272*54fd6939SJiyong Park * BL1 SMC wrapper. This function is only used in AArch32 mode to ensure ABI
273*54fd6939SJiyong Park * compliance when invoking bl1_smc_handler.
274*54fd6939SJiyong Park ******************************************************************************/
bl1_smc_wrapper(uint32_t smc_fid,void * cookie,void * handle,unsigned int flags)275*54fd6939SJiyong Park u_register_t bl1_smc_wrapper(uint32_t smc_fid,
276*54fd6939SJiyong Park void *cookie,
277*54fd6939SJiyong Park void *handle,
278*54fd6939SJiyong Park unsigned int flags)
279*54fd6939SJiyong Park {
280*54fd6939SJiyong Park u_register_t x1, x2, x3, x4;
281*54fd6939SJiyong Park
282*54fd6939SJiyong Park assert(handle != NULL);
283*54fd6939SJiyong Park
284*54fd6939SJiyong Park get_smc_params_from_ctx(handle, x1, x2, x3, x4);
285*54fd6939SJiyong Park return bl1_smc_handler(smc_fid, x1, x2, x3, x4, cookie, handle, flags);
286*54fd6939SJiyong Park }
287