1 /*
2  * Copyright (c) 2015-2023, Renesas Electronics Corporation. All rights reserved.
3  *
4  * SPDX-License-Identifier: BSD-3-Clause
5  */
6 
7 #include <errno.h>
8 #include <stdint.h>
9 #include <string.h>
10 
11 #include <arch_helpers.h>
12 #include <common/bl_common.h>
13 #include <common/debug.h>
14 #include <drivers/auth/auth_mod.h>
15 #include <drivers/io/io_driver.h>
16 #include <drivers/io/io_storage.h>
17 #include <lib/mmio.h>
18 #include <plat/common/platform.h>
19 #include <tools_share/firmware_image_package.h>
20 #include <tools_share/uuid.h>
21 
22 #include "io_rcar.h"
23 #include "io_common.h"
24 #include "io_private.h"
25 #include <platform_def.h>
26 
27 extern int32_t plat_get_drv_source(uint32_t id, uintptr_t *dev,
28 				   uintptr_t *image_spec);
29 
30 static int32_t rcar_dev_open(const uintptr_t dev_spec __attribute__ ((unused)),
31 			     io_dev_info_t **dev_info);
32 static int32_t rcar_dev_close(io_dev_info_t *dev_info);
33 
34 typedef struct {
35 	const int32_t name;
36 	const uint32_t offset;
37 	const uint32_t attr;
38 } plat_rcar_name_offset_t;
39 
40 typedef struct {
41 	/*
42 	 * Put position above the struct to allow {0} on static init.
43 	 * It is a workaround for a known bug in GCC
44 	 * http://gcc.gnu.org/bugzilla/show_bug.cgi?id=53119
45 	 */
46 	uint32_t position;
47 	uint32_t no_load;
48 	uintptr_t offset;
49 	uint32_t size;
50 	uintptr_t dst;
51 	uintptr_t partition;	/* for eMMC */
52 	/* RCAR_EMMC_PARTITION_BOOT_0 */
53 	/* RCAR_EMMC_PARTITION_BOOT_1 */
54 	/* RCAR_EMMC_PARTITION_USER   */
55 } file_state_t;
56 
57 #define RCAR_GET_FLASH_ADR(a, b)	((uint32_t)((0x40000U * (a)) + (b)))
58 #define RCAR_ATTR_SET_CALCADDR(a)	((a) & 0xF)
59 #define RCAR_ATTR_SET_ISNOLOAD(a)	(((a) & 0x1) << 16U)
60 #define RCAR_ATTR_SET_CERTOFF(a)	(((a) & 0xF) << 8U)
61 #define RCAR_ATTR_SET_ALL(a, b, c)	((uint32_t)(RCAR_ATTR_SET_CALCADDR(a) |\
62 					RCAR_ATTR_SET_ISNOLOAD(b) |\
63 					RCAR_ATTR_SET_CERTOFF(c)))
64 
65 #define RCAR_ATTR_GET_CALCADDR(a)	((a) & 0xFU)
66 #define RCAR_ATTR_GET_ISNOLOAD(a)	(((a) >> 16) & 0x1U)
67 #define RCAR_ATTR_GET_CERTOFF(a)	((uint32_t)(((a) >> 8) & 0xFU))
68 
69 #define RCAR_MAX_BL3X_IMAGE		(8U)
70 #define RCAR_SECTOR6_CERT_OFFSET	(0x400U)
71 #define RCAR_SDRAM_certESS		(0x43F00000U)
72 #define RCAR_CERT_SIZE			(0x800U)
73 #define RCAR_CERT_INFO_SIZE_OFFSET	(0x264U)
74 #define RCAR_CERT_INFO_DST_OFFSET	(0x154U)
75 #define RCAR_CERT_INFO_SIZE_OFFSET1	(0x364U)
76 #define RCAR_CERT_INFO_DST_OFFSET1	(0x1D4U)
77 #define RCAR_CERT_INFO_SIZE_OFFSET2	(0x464U)
78 #define RCAR_CERT_INFO_DST_OFFSET2	(0x254U)
79 #define RCAR_CERT_LOAD			(1U)
80 
81 #define RCAR_FLASH_CERT_HEADER		RCAR_GET_FLASH_ADR(6U, 0U)
82 #define RCAR_EMMC_CERT_HEADER		(0x00030000U)
83 
84 #define RCAR_COUNT_LOAD_BL33		(2U)
85 #define RCAR_COUNT_LOAD_BL33X		(3U)
86 
87 #define CHECK_IMAGE_AREA_CNT (7U)
88 #define BOOT_BL2_ADDR (0xE6304000U)
89 #define BOOT_BL2_LENGTH (0x19000U)
90 
91 typedef struct {
92 	uintptr_t dest;
93 	uintptr_t length;
94 } addr_loaded_t;
95 
96 static addr_loaded_t addr_loaded[CHECK_IMAGE_AREA_CNT] = {
97 	[0] = {BOOT_BL2_ADDR, BOOT_BL2_LENGTH},
98 	[1] = {BL31_BASE, RCAR_TRUSTED_SRAM_SIZE},
99 #ifndef SPD_NONE
100 	[2] = {BL32_BASE, BL32_SIZE}
101 #endif
102 };
103 
104 #ifndef SPD_NONE
105 static uint32_t addr_loaded_cnt = 3;
106 #else
107 static uint32_t addr_loaded_cnt = 2;
108 #endif
109 
110 static const plat_rcar_name_offset_t name_offset[] = {
111 	{BL31_IMAGE_ID, 0U, RCAR_ATTR_SET_ALL(0, 0, 0)},
112 
113 	/* BL3-2 is optional in the platform */
114 	{BL32_IMAGE_ID, 0U, RCAR_ATTR_SET_ALL(1, 0, 1)},
115 	{BL33_IMAGE_ID, 0U, RCAR_ATTR_SET_ALL(2, 0, 2)},
116 	{BL332_IMAGE_ID, 0U, RCAR_ATTR_SET_ALL(3, 0, 3)},
117 	{BL333_IMAGE_ID, 0U, RCAR_ATTR_SET_ALL(4, 0, 4)},
118 	{BL334_IMAGE_ID, 0U, RCAR_ATTR_SET_ALL(5, 0, 5)},
119 	{BL335_IMAGE_ID, 0U, RCAR_ATTR_SET_ALL(6, 0, 6)},
120 	{BL336_IMAGE_ID, 0U, RCAR_ATTR_SET_ALL(7, 0, 7)},
121 	{BL337_IMAGE_ID, 0U, RCAR_ATTR_SET_ALL(8, 0, 8)},
122 	{BL338_IMAGE_ID, 0U, RCAR_ATTR_SET_ALL(9, 0, 9)},
123 };
124 
125 #if TRUSTED_BOARD_BOOT
126 static const plat_rcar_name_offset_t cert_offset[] = {
127 	/* Certificates */
128 	{TRUSTED_KEY_CERT_ID, 0U, RCAR_ATTR_SET_ALL(0, 1, 0)},
129 	{SOC_FW_KEY_CERT_ID, 0U, RCAR_ATTR_SET_ALL(0, 1, 0)},
130 	{TRUSTED_OS_FW_KEY_CERT_ID, 0U, RCAR_ATTR_SET_ALL(0, 1, 0)},
131 	{NON_TRUSTED_FW_KEY_CERT_ID, 0U, RCAR_ATTR_SET_ALL(0, 1, 0)},
132 	{SOC_FW_CONTENT_CERT_ID, 0U, RCAR_ATTR_SET_ALL(0, 1, 0)},
133 	{TRUSTED_OS_FW_CONTENT_CERT_ID, 0U, RCAR_ATTR_SET_ALL(0, 1, 1)},
134 	{NON_TRUSTED_FW_CONTENT_CERT_ID, 0U, RCAR_ATTR_SET_ALL(0, 1, 2)},
135 	{BL332_CERT_ID, 0U, RCAR_ATTR_SET_ALL(0, 1, 3)},
136 	{BL333_CERT_ID, 0U, RCAR_ATTR_SET_ALL(0, 1, 4)},
137 	{BL334_CERT_ID, 0U, RCAR_ATTR_SET_ALL(0, 1, 5)},
138 	{BL335_CERT_ID, 0U, RCAR_ATTR_SET_ALL(0, 1, 6)},
139 	{BL336_CERT_ID, 0U, RCAR_ATTR_SET_ALL(0, 1, 7)},
140 	{BL337_CERT_ID, 0U, RCAR_ATTR_SET_ALL(0, 1, 8)},
141 	{BL338_CERT_ID, 0U, RCAR_ATTR_SET_ALL(0, 1, 9)},
142 };
143 #endif /* TRUSTED_BOARD_BOOT */
144 
145 static file_state_t current_file = { 0 };
146 
147 static uintptr_t rcar_handle, rcar_spec;
148 static uint64_t rcar_image_header[RCAR_MAX_BL3X_IMAGE + 2U] = { 0U };
149 static uint64_t rcar_image_header_prttn[RCAR_MAX_BL3X_IMAGE + 2U] = { 0U };
150 static uint64_t rcar_image_number = { 0U };
151 static uint32_t rcar_cert_load = { 0U };
152 
device_type_rcar(void)153 static io_type_t device_type_rcar(void)
154 {
155 	return IO_TYPE_FIRMWARE_IMAGE_PACKAGE;
156 }
157 
rcar_get_certificate(const int32_t name,uint32_t * cert)158 int32_t rcar_get_certificate(const int32_t name, uint32_t *cert)
159 {
160 #if TRUSTED_BOARD_BOOT
161 	int32_t i;
162 
163 	for (i = 0; i < ARRAY_SIZE(cert_offset); i++) {
164 		if (name != cert_offset[i].name) {
165 			continue;
166 		}
167 
168 		*cert = RCAR_CERT_SIZE;
169 		*cert *= RCAR_ATTR_GET_CERTOFF(cert_offset[i].attr);
170 		*cert += RCAR_SDRAM_certESS;
171 		return 0;
172 	}
173 #endif
174 	return -EINVAL;
175 }
176 
177 #define MFISBTSTSR			(0xE6260604U)
178 #define MFISBTSTSR_BOOT_PARTITION	(0x00000010U)
179 
file_to_offset(const int32_t name,uintptr_t * offset,uint32_t * cert,uint32_t * no_load,uintptr_t * partition)180 static int32_t file_to_offset(const int32_t name, uintptr_t *offset,
181 			      uint32_t *cert, uint32_t *no_load,
182 			      uintptr_t *partition)
183 {
184 	uint32_t addr;
185 	int32_t i;
186 
187 	for (i = 0; i < ARRAY_SIZE(name_offset); i++) {
188 		if (name != name_offset[i].name) {
189 			continue;
190 		}
191 
192 		addr = RCAR_ATTR_GET_CALCADDR(name_offset[i].attr);
193 		if (rcar_image_number + 2U < addr) {
194 			continue;
195 		}
196 
197 		*offset = rcar_image_header[addr];
198 
199 		if (mmio_read_32(MFISBTSTSR) & MFISBTSTSR_BOOT_PARTITION)
200 			*offset += 0x800000;
201 		*cert = RCAR_CERT_SIZE;
202 		*cert *= RCAR_ATTR_GET_CERTOFF(name_offset[i].attr);
203 		*cert += RCAR_SDRAM_certESS;
204 		*no_load = RCAR_ATTR_GET_ISNOLOAD(name_offset[i].attr);
205 		*partition = rcar_image_header_prttn[addr];
206 		return IO_SUCCESS;
207 	}
208 
209 #if TRUSTED_BOARD_BOOT
210 	for (i = 0; i < ARRAY_SIZE(cert_offset); i++) {
211 		if (name != cert_offset[i].name) {
212 			continue;
213 		}
214 
215 		*no_load = RCAR_ATTR_GET_ISNOLOAD(cert_offset[i].attr);
216 		*partition = 0U;
217 		*offset = 0U;
218 		*cert = 0U;
219 		return IO_SUCCESS;
220 	}
221 #endif
222 	return -EINVAL;
223 }
224 
225 #define RCAR_BOOT_KEY_CERT_NEW	(0xE6300F00U)
226 #define	RCAR_CERT_MAGIC_NUM	(0xE291F358U)
227 
rcar_read_certificate(uint64_t cert,uint32_t * len,uintptr_t * dst)228 void rcar_read_certificate(uint64_t cert, uint32_t *len, uintptr_t *dst)
229 {
230 	uint32_t seed, val, info_1, info_2;
231 	uintptr_t size, dsth, dstl;
232 
233 	cert &= 0xFFFFFFFFU;
234 
235 	seed = mmio_read_32(RCAR_BOOT_KEY_CERT_NEW);
236 	val = mmio_read_32(RCAR_BOOT_KEY_CERT_NEW + 0xC);
237 	info_1 = (val >> 18) & 0x3U;
238 	val = mmio_read_32(cert + 0xC);
239 	info_2 = (val >> 21) & 0x3;
240 
241 	if (seed == RCAR_CERT_MAGIC_NUM) {
242 		if (info_1 != 1) {
243 			ERROR("BL2: Cert is invalid.\n");
244 			*dst = 0;
245 			*len = 0;
246 			return;
247 		}
248 
249 		if (info_2 > 2) {
250 			ERROR("BL2: Cert is invalid.\n");
251 			*dst = 0;
252 			*len = 0;
253 			return;
254 		}
255 
256 		switch (info_2) {
257 		case 2:
258 			size = cert + RCAR_CERT_INFO_SIZE_OFFSET2;
259 			dstl = cert + RCAR_CERT_INFO_DST_OFFSET2;
260 			break;
261 		case 1:
262 			size = cert + RCAR_CERT_INFO_SIZE_OFFSET1;
263 			dstl = cert + RCAR_CERT_INFO_DST_OFFSET1;
264 			break;
265 		case 0:
266 			size = cert + RCAR_CERT_INFO_SIZE_OFFSET;
267 			dstl = cert + RCAR_CERT_INFO_DST_OFFSET;
268 			break;
269 		}
270 		val = mmio_read_32(size);
271 		if (val > (UINT32_MAX / 4)) {
272 			ERROR("BL2: %s[%d] uint32 overflow!\n",
273 				__func__, __LINE__);
274 			*dst = 0;
275 			*len = 0;
276 			return;
277 		}
278 
279 		*len = val * 4U;
280 		dsth = dstl + 4U;
281 		*dst = ((uintptr_t) mmio_read_32(dsth) << 32) +
282 		    ((uintptr_t) mmio_read_32(dstl));
283 		return;
284 	}
285 
286 	size = cert + RCAR_CERT_INFO_SIZE_OFFSET;
287 	val = mmio_read_32(size);
288 	if (val > (UINT32_MAX / 4)) {
289 		ERROR("BL2: %s[%d] uint32 overflow!\n", __func__, __LINE__);
290 		*dst = 0;
291 		*len = 0;
292 		return;
293 	}
294 	*len = val * 4U;
295 	dstl = cert + RCAR_CERT_INFO_DST_OFFSET;
296 	dsth = dstl + 4U;
297 	*dst = ((uintptr_t) mmio_read_32(dsth) << 32) +
298 	    ((uintptr_t) mmio_read_32(dstl));
299 }
300 
check_load_area(uintptr_t dst,uintptr_t len)301 static int32_t check_load_area(uintptr_t dst, uintptr_t len)
302 {
303 	uint32_t legacy = dst + len <= UINT32_MAX - 1 ? 1 : 0;
304 	uintptr_t dram_start, dram_end;
305 	uintptr_t prot_start, prot_end;
306 	int32_t result = IO_SUCCESS;
307 	int n;
308 
309 	dram_start = legacy ? DRAM1_NS_BASE : DRAM_40BIT_BASE;
310 
311 	dram_end = legacy ? DRAM1_NS_BASE + DRAM1_NS_SIZE :
312 	    DRAM_40BIT_BASE + DRAM_40BIT_SIZE;
313 
314 	prot_start = legacy ? DRAM_PROTECTED_BASE : DRAM_40BIT_PROTECTED_BASE;
315 
316 	prot_end = prot_start + DRAM_PROTECTED_SIZE;
317 
318 	if (dst < dram_start || len > dram_end || dst > dram_end - len) {
319 		ERROR("BL2: dst address is on the protected area.\n");
320 		result = IO_FAIL;
321 		goto done;
322 	}
323 
324 	/* load image is within SDRAM protected area */
325 	if (dst >= prot_start && dst < prot_end) {
326 		ERROR("BL2: dst address is on the protected area.\n");
327 		result = IO_FAIL;
328 		goto done;
329 	}
330 
331 	if (len > prot_start || (dst < prot_start && dst > prot_start - len)) {
332 		ERROR("BL2: %s[%d] loaded data is on the protected area.\n",
333 			__func__, __LINE__);
334 		result = IO_FAIL;
335 		goto done;
336 	}
337 
338 	if (addr_loaded_cnt >= CHECK_IMAGE_AREA_CNT) {
339 		ERROR("BL2: max loadable non secure images reached\n");
340 		result = IO_FAIL;
341 		goto done;
342 	}
343 
344 	addr_loaded[addr_loaded_cnt].dest = dst;
345 	addr_loaded[addr_loaded_cnt].length = len;
346 	for (n = 0; n < addr_loaded_cnt; n++) {
347 		/*
348 		 * Check if next image invades a previous loaded image
349 		 *
350 		 * IMAGE n: area from previous image:	dest| IMAGE n |length
351 		 * IMAGE n+1: area from next image:	dst | IMAGE n |len
352 		 *
353 		 * 1. check:
354 		 *      | IMAGE n |
355 		 *        | IMAGE n+1 |
356 		 * 2. check:
357 		 *      | IMAGE n |
358 		 *  | IMAGE n+1 |
359 		 * 3. check:
360 		 *      | IMAGE n |
361 		 *  |    IMAGE n+1    |
362 		 */
363 		if (((dst >= addr_loaded[n].dest) &&
364 		     (dst <= addr_loaded[n].dest + addr_loaded[n].length)) ||
365 		    ((dst + len >= addr_loaded[n].dest) &&
366 		     (dst + len <= addr_loaded[n].dest + addr_loaded[n].length)) ||
367 		    ((dst <= addr_loaded[n].dest) &&
368 		     (dst + len >= addr_loaded[n].dest + addr_loaded[n].length))) {
369 			ERROR("BL2: next image overlap a previous image area.\n");
370 			result = IO_FAIL;
371 			goto done;
372 		}
373 	}
374 	addr_loaded_cnt++;
375 
376 done:
377 	if (result == IO_FAIL) {
378 		ERROR("BL2: Out of range : dst=0x%lx len=0x%lx\n", dst, len);
379 	}
380 
381 	return result;
382 }
383 
load_bl33x(void)384 static int32_t load_bl33x(void)
385 {
386 	static int32_t loaded = IO_NOT_SUPPORTED;
387 	uintptr_t dst, partition, handle;
388 	uint32_t noload, cert, len, i;
389 	uintptr_t offset;
390 	int32_t rc;
391 	size_t cnt;
392 	const int32_t img[] = {
393 		BL33_IMAGE_ID,
394 		BL332_IMAGE_ID,
395 		BL333_IMAGE_ID,
396 		BL334_IMAGE_ID,
397 		BL335_IMAGE_ID,
398 		BL336_IMAGE_ID,
399 		BL337_IMAGE_ID,
400 		BL338_IMAGE_ID
401 	};
402 
403 	if (loaded != IO_NOT_SUPPORTED) {
404 		return loaded;
405 	}
406 
407 	for (i = 1; i < rcar_image_number; i++) {
408 		rc = file_to_offset(img[i], &offset, &cert, &noload,
409 				    &partition);
410 		if (rc != IO_SUCCESS) {
411 			WARN("%s: failed to get offset\n", __func__);
412 			loaded = IO_FAIL;
413 			return loaded;
414 		}
415 
416 		rcar_read_certificate((uint64_t) cert, &len, &dst);
417 		((io_drv_spec_t *) rcar_spec)->partition = partition;
418 
419 		rc = io_open(rcar_handle, rcar_spec, &handle);
420 		if (rc != IO_SUCCESS) {
421 			WARN("%s: Failed to open FIP (%i)\n", __func__, rc);
422 			loaded = IO_FAIL;
423 			return loaded;
424 		}
425 
426 		rc = io_seek(handle, IO_SEEK_SET, offset);
427 		if (rc != IO_SUCCESS) {
428 			WARN("%s: failed to seek\n", __func__);
429 			loaded = IO_FAIL;
430 			return loaded;
431 		}
432 
433 		rc = check_load_area(dst, len);
434 		if (rc != IO_SUCCESS) {
435 			WARN("%s: check load area\n", __func__);
436 			loaded = IO_FAIL;
437 			return loaded;
438 		}
439 
440 		rc = io_read(handle, dst, len, &cnt);
441 		if (rc != IO_SUCCESS) {
442 			WARN("%s: failed to read\n", __func__);
443 			loaded = IO_FAIL;
444 			return loaded;
445 		}
446 #if TRUSTED_BOARD_BOOT
447 		rc = auth_mod_verify_img(img[i], (void *)dst, len);
448 		if (rc != 0) {
449 			memset((void *)dst, 0x00, len);
450 			loaded = IO_FAIL;
451 			return loaded;
452 		}
453 #endif
454 		io_close(handle);
455 	}
456 
457 	loaded = IO_SUCCESS;
458 
459 	return loaded;
460 }
461 
rcar_dev_init(io_dev_info_t * dev_info,const uintptr_t name)462 static int32_t rcar_dev_init(io_dev_info_t *dev_info, const uintptr_t name)
463 {
464 	static uint64_t header[64] __aligned(FLASH_TRANS_SIZE_UNIT) = {0UL};
465 	uintptr_t handle;
466 	ssize_t offset;
467 	uint32_t i;
468 	int32_t rc;
469 	size_t cnt;
470 
471 	/* Obtain a reference to the image by querying the platform layer */
472 	rc = plat_get_drv_source(name, &rcar_handle, &rcar_spec);
473 	if (rc != IO_SUCCESS) {
474 		WARN("Failed to obtain reference to img %ld (%i)\n", name, rc);
475 		return IO_FAIL;
476 	}
477 
478 	if (rcar_cert_load == RCAR_CERT_LOAD) {
479 		return IO_SUCCESS;
480 	}
481 
482 	rc = io_open(rcar_handle, rcar_spec, &handle);
483 	if (rc != IO_SUCCESS) {
484 		WARN("Failed to access img %ld (%i)\n", name, rc);
485 		return IO_FAIL;
486 	}
487 
488 	/*
489 	 * get start address list
490 	 * [0] address num
491 	 * [1] BL33-1 image address
492 	 * [2] BL33-2 image address
493 	 * [3] BL33-3 image address
494 	 * [4] BL33-4 image address
495 	 * [5] BL33-5 image address
496 	 * [6] BL33-6 image address
497 	 * [7] BL33-7 image address
498 	 * [8] BL33-8 image address
499 	 */
500 	offset = name == EMMC_DEV_ID ? RCAR_EMMC_CERT_HEADER :
501 	    RCAR_FLASH_CERT_HEADER;
502 	rc = io_seek(handle, IO_SEEK_SET, offset);
503 	if (rc != IO_SUCCESS) {
504 		WARN("Firmware Image Package header failed to seek\n");
505 		goto error;
506 	}
507 
508 	rc = io_read(handle, (uintptr_t) &header, sizeof(header), &cnt);
509 	if (rc != IO_SUCCESS) {
510 		WARN("Firmware Image Package header failed to read\n");
511 		goto error;
512 	}
513 
514 #if RCAR_BL2_DCACHE == 1
515 	inv_dcache_range((uint64_t) header, sizeof(header));
516 #endif
517 
518 	rcar_image_number = header[0];
519 	if (rcar_image_number == 0 || rcar_image_number > RCAR_MAX_BL3X_IMAGE) {
520 		WARN("Firmware Image Package header check failed.\n");
521 		rc = IO_FAIL;
522 		goto error;
523 	}
524 
525 	for (i = 0; i < rcar_image_number + 2; i++) {
526 		rcar_image_header[i] = header[i * 2 + 1];
527 		rcar_image_header_prttn[i] = header[i * 2 + 2];
528 	}
529 
530 	rc = io_seek(handle, IO_SEEK_SET, offset + RCAR_SECTOR6_CERT_OFFSET);
531 	if (rc != IO_SUCCESS) {
532 		WARN("Firmware Image Package header failed to seek cert\n");
533 		goto error;
534 	}
535 
536 	rc = io_read(handle, RCAR_SDRAM_certESS,
537 		     RCAR_CERT_SIZE * (2 + rcar_image_number), &cnt);
538 	if (rc != IO_SUCCESS) {
539 		WARN("cert file read error.\n");
540 		goto error;
541 	}
542 
543 #if RCAR_BL2_DCACHE == 1
544 	inv_dcache_range(RCAR_SDRAM_certESS,
545 			 RCAR_CERT_SIZE * (2 + rcar_image_number));
546 #endif
547 
548 	rcar_cert_load = RCAR_CERT_LOAD;
549 error:
550 
551 	if (rc != IO_SUCCESS) {
552 		rc = IO_FAIL;
553 	}
554 
555 	io_close(handle);
556 
557 	return rc;
558 
559 }
560 
rcar_file_open(io_dev_info_t * info,const uintptr_t file_spec,io_entity_t * entity)561 static int32_t rcar_file_open(io_dev_info_t *info, const uintptr_t file_spec,
562 			      io_entity_t *entity)
563 {
564 	const io_drv_spec_t *spec = (io_drv_spec_t *) file_spec;
565 	uintptr_t partition, offset, dst;
566 	uint32_t noload, cert, len;
567 	int32_t rc;
568 
569 	/*
570 	 * Only one file open at a time. We need to  track state (ie, file
571 	 * cursor position). Since the header lives at offset zero, this entry
572 	 * should never be zero in an active file.
573 	 * Once the system supports dynamic memory allocation we will allow more
574 	 * than one open file at a time.
575 	 */
576 	if (current_file.offset != 0U) {
577 		WARN("%s: Only one open file at a time.\n", __func__);
578 		return IO_RESOURCES_EXHAUSTED;
579 	}
580 
581 	rc = file_to_offset(spec->offset, &offset, &cert, &noload, &partition);
582 	if (rc != IO_SUCCESS) {
583 		WARN("Failed to open file name %ld (%i)\n", spec->offset, rc);
584 		return IO_FAIL;
585 	}
586 
587 	if (noload != 0U) {
588 		current_file.offset = 1;
589 		current_file.dst = 0;
590 		current_file.size = 1;
591 		current_file.position = 0;
592 		current_file.no_load = noload;
593 		current_file.partition = 0;
594 		entity->info = (uintptr_t) &current_file;
595 
596 		return IO_SUCCESS;
597 	}
598 
599 	rcar_read_certificate((uint64_t) cert, &len, &dst);
600 
601 	current_file.partition = partition;
602 	current_file.no_load = noload;
603 	current_file.offset = offset;
604 	current_file.position = 0;
605 	current_file.size = len;
606 	current_file.dst = dst;
607 	entity->info = (uintptr_t) &current_file;
608 
609 	return IO_SUCCESS;
610 }
611 
rcar_file_len(io_entity_t * entity,size_t * length)612 static int32_t rcar_file_len(io_entity_t *entity, size_t *length)
613 {
614 	*length = ((file_state_t *) entity->info)->size;
615 
616 	NOTICE("%s: len: 0x%08lx\n", __func__, *length);
617 
618 	return IO_SUCCESS;
619 }
620 
rcar_file_read(io_entity_t * entity,uintptr_t buffer,size_t length,size_t * cnt)621 static int32_t rcar_file_read(io_entity_t *entity, uintptr_t buffer,
622 			      size_t length, size_t *cnt)
623 {
624 	file_state_t *fp = (file_state_t *) entity->info;
625 	ssize_t offset = fp->offset + fp->position;
626 	uintptr_t handle;
627 	int32_t rc;
628 
629 #ifdef SPD_NONE
630 	static uint32_t load_bl33x_counter = 1;
631 #else
632 	static uint32_t load_bl33x_counter;
633 #endif
634 	if (current_file.no_load != 0U) {
635 		*cnt = length;
636 		return IO_SUCCESS;
637 	}
638 
639 	((io_drv_spec_t *) rcar_spec)->partition = fp->partition;
640 
641 	rc = io_open(rcar_handle, rcar_spec, &handle);
642 	if (rc != IO_SUCCESS) {
643 		WARN("Failed to open FIP (%i)\n", rc);
644 		return IO_FAIL;
645 	}
646 
647 	rc = io_seek(handle, IO_SEEK_SET, offset);
648 	if (rc != IO_SUCCESS) {
649 		WARN("%s: failed to seek\n", __func__);
650 		goto error;
651 	}
652 
653 	if (load_bl33x_counter == RCAR_COUNT_LOAD_BL33) {
654 		rc = check_load_area(buffer, length);
655 		if (rc != IO_SUCCESS) {
656 			WARN("%s: load area err\n", __func__);
657 			goto error;
658 		}
659 	}
660 
661 	rc = io_read(handle, buffer, length, cnt);
662 	if (rc != IO_SUCCESS) {
663 		WARN("Failed to read payload (%i)\n", rc);
664 		goto error;
665 	}
666 
667 	fp->position += *cnt;
668 	io_close(handle);
669 
670 	load_bl33x_counter += 1;
671 	if (load_bl33x_counter == RCAR_COUNT_LOAD_BL33X) {
672 		return load_bl33x();
673 	}
674 
675 	return IO_SUCCESS;
676 error:
677 	io_close(handle);
678 	return IO_FAIL;
679 }
680 
rcar_file_close(io_entity_t * entity)681 static int32_t rcar_file_close(io_entity_t *entity)
682 {
683 	if (current_file.offset != 0U) {
684 		memset(&current_file, 0, sizeof(current_file));
685 	}
686 
687 	entity->info = 0U;
688 
689 	return IO_SUCCESS;
690 }
691 
692 static const io_dev_funcs_t rcar_dev_funcs = {
693 	.type = &device_type_rcar,
694 	.open = &rcar_file_open,
695 	.seek = NULL,
696 	.size = &rcar_file_len,
697 	.read = &rcar_file_read,
698 	.write = NULL,
699 	.close = &rcar_file_close,
700 	.dev_init = &rcar_dev_init,
701 	.dev_close = &rcar_dev_close,
702 };
703 
704 static const io_dev_info_t rcar_dev_info = {
705 	.funcs = &rcar_dev_funcs,
706 	.info = (uintptr_t) 0
707 };
708 
709 static const io_dev_connector_t rcar_dev_connector = {
710 	.dev_open = &rcar_dev_open
711 };
712 
rcar_dev_open(const uintptr_t dev_spec,io_dev_info_t ** dev_info)713 static int32_t rcar_dev_open(const uintptr_t dev_spec __attribute__ ((unused)),
714 			     io_dev_info_t **dev_info)
715 {
716 	*dev_info = (io_dev_info_t *) &rcar_dev_info;
717 
718 	return IO_SUCCESS;
719 }
720 
rcar_dev_close(io_dev_info_t * dev_info)721 static int32_t rcar_dev_close(io_dev_info_t *dev_info)
722 {
723 	rcar_handle = 0;
724 	rcar_spec = 0;
725 
726 	return IO_SUCCESS;
727 }
728 
rcar_register_io_dev(const io_dev_connector_t ** dev_con)729 int32_t rcar_register_io_dev(const io_dev_connector_t **dev_con)
730 {
731 	int32_t result;
732 
733 	result = io_register_device(&rcar_dev_info);
734 	if (result == IO_SUCCESS) {
735 		*dev_con = &rcar_dev_connector;
736 	}
737 
738 	return result;
739 }
740