fix(qemu): produce manifest entry inside transfer list

When SPD is configured as SPMD, BL2 is now responsible for creating
`TL_TAG_DT_*_MANIFEST` before handing off the control to bl31, where
it wil

fix(qemu): produce manifest entry inside transfer list

When SPD is configured as SPMD, BL2 is now responsible for creating
`TL_TAG_DT_*_MANIFEST` before handing off the control to bl31, where
it will look up the transfer list and prepare the transition context
for SPMC (see `find_and_prepare_sp_context`).

This adds the logic for qemu platforms to populate the transfer list
entry and content in BL2 setup phase.

Change-Id: I95e17e4fd7e3ecfbae18568ec3bfe35d587399eb
Signed-off-by: Kun Qin <kuqin@microsoft.com>

show more ...

feat(gpt): move gpt support under ENABLE_FEAT_RME

Granule Protection Tables (GPT) library support is enabled only when
ENABLE_RMM is set (previously this build option was ENABLE_RME). Since
RME rela

feat(gpt): move gpt support under ENABLE_FEAT_RME

Granule Protection Tables (GPT) library support is enabled only when
ENABLE_RMM is set (previously this build option was ENABLE_RME). Since
RME related support is now enabled using feature detection option
ENABLE_FEAT_RME, this patch moves GPT support under ENABLE_FEAT_RME.

This change brings in below benefits:
- single TF-A build that works for RME and non-RME systems, when
build with ENABLE_FEAT_RME=2 (FEAT_STATE_CHECK)
- RMM loading is optional on RME systems
- SiP calls that leverages RME features to change the PAS of a memory
range from non-secure to secure is supported without need to enable
Realm PAS or RMM.
- FIRME Granule Management Interface (GMI) ABIs that handles
FEAT_RME_GPC2/FEAT_RME_GDI can be enabled without need to enable RMM

Signed-off-by: Arunachalam Ganapathy <arunachalam.ganapathy@arm.com>
Change-Id: I88d9d4e0491af2b4ae0307c018f2d4a71ee6693f

show more ...

feat(rmmd): replace ENABLE_RME with ENABLE_RMM

RME architectural requirements are now handled under the feature
detection option ENABLE_FEAT_RME. However, the existing ENABLE_RME build
option perfor

feat(rmmd): replace ENABLE_RME with ENABLE_RMM

RME architectural requirements are now handled under the feature
detection option ENABLE_FEAT_RME. However, the existing ENABLE_RME build
option performs RMM-specific tasks such as GPT setup, loading the RMM,
and enabling RMMD support.

Since ENABLE_RME now only controls RMM-related functionality, rename it
to ENABLE_RMM to better reflect its purpose and avoid confusion with
ENABLE_FEAT_RME.

For backward compatibility, setting the legacy ENABLE_RME=1 (until it is
deprecated) will automatically enable both ENABLE_FEAT_RME and
ENABLE_RMM.

Signed-off-by: Arunachalam Ganapathy <arunachalam.ganapathy@arm.com>
Change-Id: Iac945bdffe5002161bf1161b81a5aa7abec68192

show more ...

refactor(qemu): use generic hold pen

Convert QEMU to use the common hold pen helpers.

This is not a functional fix -- QEMU uses HW_ASSISTED_COHERENCY=1
so caches are always coherent and the origina

refactor(qemu): use generic hold pen

Convert QEMU to use the common hold pen helpers.

This is not a functional fix -- QEMU uses HW_ASSISTED_COHERENCY=1
so caches are always coherent and the original 8-byte slots worked.
However, aligning with the common hold pen pattern improves
consistency and removes duplicated logic.

plat_hold_pen_init() is called once from plat_setup_psci_ops() to
write HOLD_STATE_WAIT into every slot and flush to main memory.
Then plat_hold_pen_signal() writes just the target slot with the
entrypoint. Secondaries use the plat_hold_pen_wait_and_jump macro
to poll and branch directly to the entrypoint stored in their slot,
eliminating the mailbox fetch.

Change-Id: I5ca1ca5fb8708024ce8a04fa80403473dcd1e257
Signed-off-by: Nicolas Pitre <npitre@baylibre.com>

show more ...

feat(qemu): disable fpregs traps for QEMU in BL31

The BL31 boot process of QEMU requires, as a workaround, disabling of
fpregs trap in BL31. The fpregs trap is by default enabled and therefore
it ne

feat(qemu): disable fpregs traps for QEMU in BL31

The BL31 boot process of QEMU requires, as a workaround, disabling of
fpregs trap in BL31. The fpregs trap is by default enabled and therefore
it needed to be explicitly disabled for the BL31 setup for QEMU.

Change-Id: Id958e5e72a1fae81553ba320dcdb232bc705b835
Signed-off-by: Jens Wiklander <jens.wiklander@linaro.org>

show more ...

feat(qemu): enable ENABLE_FEAT_RAS and ENABLE_FEAT_SB

Both are now FEAT_STATE_CHECKED enabled so they can be now be used.

Change-Id: I2485d583349e432014808a775ef57799eed4a596
Signed-off-by: Boyan K

feat(qemu): enable ENABLE_FEAT_RAS and ENABLE_FEAT_SB

Both are now FEAT_STATE_CHECKED enabled so they can be now be used.

Change-Id: I2485d583349e432014808a775ef57799eed4a596
Signed-off-by: Boyan Karatotev <boyan.karatotev@arm.com>

show more ...

feat(qemu): add support for FEAT_GCS

Auto-detect FEAT_GCS and enable it when the platform supports it.
This is needed for Linux under QEMU 10.2

Change-Id: I175237006d3808bc058499a34357918674a0c561

feat(qemu): add support for FEAT_GCS

Auto-detect FEAT_GCS and enable it when the platform supports it.
This is needed for Linux under QEMU 10.2

Change-Id: I175237006d3808bc058499a34357918674a0c561
Signed-off-by: Jean-Philippe Brucker <jean-philippe@linaro.org>

show more ...

feat(qemu): add support for FEAT_SxPxE

Auto-detect the POE and PIE features and enable them when the platform
supports them. This is needed for Linux under QEMU 10.2.

Change-Id: Ic05f3227e61386b06a

feat(qemu): add support for FEAT_SxPxE

Auto-detect the POE and PIE features and enable them when the platform
supports them. This is needed for Linux under QEMU 10.2.

Change-Id: Ic05f3227e61386b06a1deffce8678048aed456b1
Signed-off-by: Jean-Philippe Brucker <jean-philippe@linaro.org>

show more ...

feat(qemu): add support for FEAT_TCR2 and FEAT_SCTLR2

QEMU supports this since 10.1.
ENABLE_FEAT_TCR2 is needed to boot a Linux guest.
ENABLE_FEAT_SCTLR2 is needed to boot a Linux nested guest.

Cha

feat(qemu): add support for FEAT_TCR2 and FEAT_SCTLR2

QEMU supports this since 10.1.
ENABLE_FEAT_TCR2 is needed to boot a Linux guest.
ENABLE_FEAT_SCTLR2 is needed to boot a Linux nested guest.

Change-Id: Id9c509a530fb5d0df9955f80ef26992d5bea1191
Signed-off-by: Pierrick Bouvier <pierrick.bouvier@linaro.org>
Signed-off-by: Jean-Philippe Brucker <jean-philippe@linaro.org>

show more ...

Merge changes from topic "sbsa2" into integration

* changes:
feat(qemu): skip paged image info
feat(optee): check paged image size
feat(qemu-sbsa): support s-el2 and s-el1 spmc

feat(qemu): skip paged image info

In qemu_bl2_handle_post_image_load() when fixing up the arguments for
BL32, only pass on paged image base and size if it has been loaded. The
paged image is not sup

feat(qemu): skip paged image info

In qemu_bl2_handle_post_image_load() when fixing up the arguments for
BL32, only pass on paged image base and size if it has been loaded. The
paged image is not supported for SPMC_OPTEE so make sure it's not
loaded.

Change-Id: I9c82ef687006e0f882a098de2cc3000038476b17
Signed-off-by: Jens Wiklander <jens.wiklander@linaro.org>

show more ...

fix(qemu): add reason parameter to MEC update

The FIRME MFI_MEC_REFRESH call takes a reason parameter. Add it to the
QEMU callback for compatibility.

Change-Id: I32c5be5dbce44102650f9312c44e1d00a31

fix(qemu): add reason parameter to MEC update

The FIRME MFI_MEC_REFRESH call takes a reason parameter. Add it to the
QEMU callback for compatibility.

Change-Id: I32c5be5dbce44102650f9312c44e1d00a3146eb9
Signed-off-by: Jean-Philippe Brucker <jean-philippe@linaro.org>

show more ...

build(handoff)!: switch to LibTL submodule

Removes in-tree Transfer List implementation and updates all references
to use the external LibTL submodule. Updates include paths, Makefile
macros, and pl

build(handoff)!: switch to LibTL submodule

Removes in-tree Transfer List implementation and updates all references
to use the external LibTL submodule. Updates include paths, Makefile
macros, and platform integration logic to link with LibTL as a static
library.

If you cloned TF-A without the `--recurse-submodules` flag, you can
ensure that this submodule is present by running:

git submodule update --init --recursive

BREAKING-CHANGE: LibTL is now included in TF-A as a submodule.
Please run `git submodule update --init --recursive` if you encounter
issues after migrating to the latest version of TF-A.

Change-Id: I1fa31f7b730066c27985d968698e553b00b07c38
Signed-off-by: Harrison Mutai <harrison.mutai@arm.com>

show more ...

refactor(qemu): guard handoff logic w/ build flag

Prepare for environments where the Firmware Handoff (LibTL)
submodule may not be available. Wrap all Transfer List dependent logic
in `#if TRANSFER

refactor(qemu): guard handoff logic w/ build flag

Prepare for environments where the Firmware Handoff (LibTL)
submodule may not be available. Wrap all Transfer List dependent logic
in `#if TRANSFER_LIST` guards, ensuring QEMU can build and run without
the submodule.

This is useful for builds not integrating the firmware handoff
mechanism.

Change-Id: I0be3773bf300b02cd3beccf738a021925e3c53c6
Signed-off-by: Harrison Mutai <harrison.mutai@arm.com>

show more ...

fix(qemu): fix variable may be used uninitialized error

When building with LTO, the compiler discovers that it is possible to
use the `ns_buf_base` variable without writing to it. This happens on
er

fix(qemu): fix variable may be used uninitialized error

When building with LTO, the compiler discovers that it is possible to
use the `ns_buf_base` variable without writing to it. This happens on
error by dt_add_ns_buf_node(). Check its return value and panic() if
something went wrong so the error doesn't propagate silently.

Change-Id: Ia6aa83b0b9301b2db7bfa6ecd66396c37a57e816
Signed-off-by: Boyan Karatotev <boyan.karatotev@arm.com>

show more ...

feat(cpufeat): enable FEAT_PAuth to FEAT_STATE_CHECKED

FEAT_PAuth is the second to last feature to be a boolean choice - it's
either unconditionally compiled in and must be present in hardware or
it

feat(cpufeat): enable FEAT_PAuth to FEAT_STATE_CHECKED

FEAT_PAuth is the second to last feature to be a boolean choice - it's
either unconditionally compiled in and must be present in hardware or
it's not compiled in. FEAT_PAuth is architected to be backwards
compatible - a subset of the branch guarding instructions (pacia/autia)
execute as NOPs when PAuth is not present. That subset is used with
`-mbranch-protection=standard` and -march pre-8.3. This patch adds the
necessary logic to also check accesses of the non-backward compatible
registers and allow a fully checked implementation.

Note that a checked support requires -march to be pre 8.3, as otherwise
the compiler will include branch protection instructions that are not
NOPs without PAuth (eg retaa) which cannot be checked.

Change-Id: Id942c20cae9d15d25b3d72b8161333642574ddaa
Signed-off-by: Boyan Karatotev <boyan.karatotev@arm.com>

show more ...