sysmem: fdt: reserve more CONFIG_SYS_FDT_PAD size for fdt

Sometimes, framework or user would call fdt_increase_size() to update
fdt size, it's better reserve more space to avoid sysmem gives the fdt

sysmem: fdt: reserve more CONFIG_SYS_FDT_PAD size for fdt

Sometimes, framework or user would call fdt_increase_size() to update
fdt size, it's better reserve more space to avoid sysmem gives the fdt
region overflow report.

The CONFIG_SYS_FDT_PAD default value is sync with bootm framework
in: common/image-fdt.c

Change-Id: I363e9a4182e13b1628a76666acd8272d25db659d
Signed-off-by: Joseph Chen <chenjh@rock-chips.com>

show more ...

lib: sysmem: ignore sysmem reserve warning

Change-Id: I970da1456388f825a351dc26d725bb3ba10d41a4
Signed-off-by: Joseph Chen <chenjh@rock-chips.com>

lib: optee_client: recover original partition after error

1.switch to RPMB partition when call init rpmb
2.switch to original partition when call finish rpmb
3.it will not switch to original partiti

lib: optee_client: recover original partition after error

1.switch to RPMB partition when call init rpmb
2.switch to original partition when call finish rpmb
3.it will not switch to original partition when error
occurred, we should recover original partition after error

Change-Id: I41927e82fb2db690058a809f008ca1f59d334011
Signed-off-by: Hisping Lin <hisping.lin@rock-chips.com>

show more ...

cmd: add test case for secure storage

1.mmc testsecurestorage to test secure storage
2.test secure storage in rpmb and test secure storage in
security partition when use emmc
3.test secure storage

cmd: add test case for secure storage

1.mmc testsecurestorage to test secure storage
2.test secure storage in rpmb and test secure storage in
security partition when use emmc
3.test secure storage in security partition when use nand

Change-Id: Id6f72893c002c5040cb1790051c9685911878df7
Signed-off-by: Hisping Lin <hisping.lin@rock-chips.com>

show more ...

lib: Kconfig: add CONFIG_SYS_STACK_SIZE

Change-Id: I37cb4ffea5ef6aa2475a3ca7a87f58f23fcff76a
Signed-off-by: Joseph Chen <chenjh@rock-chips.com>

lib: optee_client: add read&wite permanent attributes certificate

Change-Id: I83321afcf9d89b0cde0bcc78f1f02c847f85a115
Signed-off-by: Jason Zhu <jason.zhu@rock-chips.com>

lib: introduce sysmem for permanent memory management

U-Boot provides MALLOC for runtime temporary memory management and
LMB for bootm memory management. There is not a mechanism for permanent
memor

lib: introduce sysmem for permanent memory management

U-Boot provides MALLOC for runtime temporary memory management and
LMB for bootm memory management. There is not a mechanism for permanent
memory management. so that the memory blocks are easy to overlap with
each other.

What does permanent memory mean ?
- The memory can't be touched by U-Boot(ATF/OPTEE/SHM/kernel-reserved, etc);
- The memory occupied even in kernel, such as some firmware load buffer;

This patch introduces sysmem to do permanent memory management, which
implements base on LMB. It provides memory block (pool):
- init;
- add;
- alloc;
- free;
- reserve;
- stat;
- overflow check;

Here is an example for RK3399 sysmem boot stat(assume the "fdt" region is Overflow)
called by sysmem_dump_all():

sysmem_dump_all:
------------------------------------------------------
memory.rgn[0].base = 0x00000000
.size = 0x00000000
memory.rgn[1].base = 0x00200000
.size = 0x08200000
memory.rgn[2].base = 0x0a200000
.size = 0x75e00000

memory.total = 0x7e000000 (2016 MiB. 0 KiB)
------------------------------------------------------
reserved.rgn[0].name = "ATF"
.base = 0x00000000
.size = 0x00100000
reserved.rgn[1].name = "PSTORE/ATAGS/SHM"
.base = 0x00100000
.size = 0x00100000
reserved.rgn[2].name = "OP-TEE"
.base = 0x08400000
.size = 0x01e00000
reserved.rgn[3].name = "U-Boot"
.base = 0x71be03c0
.size = 0x0e41fc40
reserved.rgn[4].name = "secure-memory@20000000"
.base = 0x20000000
.size = 0x10000000

reserved.total = 0x2041fc40 (516 MiB. 127 KiB)
------------------------------------------------------
allocated.rgn[0].name = "fdt" (Overflow)
.base = 0x01f00000
.size = 0x00009704
allocated.rgn[1].name = "kernel"
.base = 0x0027c000
.size = 0x0129da04
allocated.rgn[2].name = "ramdisk"
.base = 0x0a200000
.size = 0x001e6c04

allocated.total = 0x0148dd0c (20 MiB. 567 KiB)
------------------------------------------------------
LMB.reserved[0].base = 0x00000000
.size = 0x00200000
LMB.reserved[1].base = 0x0027c000
.size = 0x0129da04
LMB.reserved[2].base = 0x01f00000
.size = 0x00009704
LMB.reserved[3].base = 0x08400000
.size = 0x01fe6c04
LMB.reserved[4].base = 0x20000000
.size = 0x10000000
LMB.reserved[5].base = 0x71be03c0
.size = 0x0e41fc40

reserved.core.total = 0x218ad94c (536 MiB. 694 KiB)
------------------------------------------------------

Change-Id: If63b7abed2cdd3c054719511fcceed733ddf606d
Signed-off-by: Joseph Chen <chenjh@rock-chips.com>

show more ...

lib: optee_client: Extract keymaster CA module

Extract keymaster CA module from OpteeClientInterface
refactoring code for keymaster reads and writes form caller module

Change-Id: I1069fce0d29d9d981

lib: optee_client: Extract keymaster CA module

Extract keymaster CA module from OpteeClientInterface
refactoring code for keymaster reads and writes form caller module

Change-Id: I1069fce0d29d9d9815f71e7f3b4d231754382acd
Signed-off-by: Jian Qiu <qiujian@rock-chips.com>

show more ...

lib: optee_client: move keybox code to write_keybox.c

Change-Id: Ifcd9962a8b802ee2bcbdbd0e88effb4485e5963a
Signed-off-by: Tony Xu <tony.xu@rock-chips.com>

lib: avb: fix fail to read PIK minimum

Do not update the PIK version if it is equal to the value in the storage,
otherwise the error may occur in power failure test.

Change-Id: Ia478d9b404de3982b4d

lib: avb: fix fail to read PIK minimum

Do not update the PIK version if it is equal to the value in the storage,
otherwise the error may occur in power failure test.

Change-Id: Ia478d9b404de3982b4de5b185e15d181b37f5fd9
Signed-off-by: Jason Zhu <jason.zhu@rock-chips.com>

show more ...

lib: optee_client: optimizing print information

Change-Id: I37e6dc56b8eb46bc6d0a2c12bbd4c329d35ca687
Signed-off-by: Hisping Lin <hisping.lin@rock-chips.com>

lib: avb: add more help info for AVB_VBMETA_PUBLIC_KEY_VALIDATE

Change-Id: I2c63850244983144a6b5ac8303f1debc7a37cb2a
Signed-off-by: Joseph Chen <chenjh@rock-chips.com>

lib: optee_clientApi: write table when verify table fail

Change-Id: I38d055945da5bf183e34588a08d8964c2d810f5f
Signed-off-by: Hisping Lin <hisping.lin@rock-chips.com>

UPSTREAM: libfdt: move headers to <linux/libfdt.h> and <linux/libfdt_env.h>

Thomas reported U-Boot failed to build host tools if libfdt-devel
package is installed because tools include libfdt header

UPSTREAM: libfdt: move headers to <linux/libfdt.h> and <linux/libfdt_env.h>

Thomas reported U-Boot failed to build host tools if libfdt-devel
package is installed because tools include libfdt headers from
/usr/include/ instead of using internal ones.

This commit moves the header code:
include/libfdt.h -> include/linux/libfdt.h
include/libfdt_env.h -> include/linux/libfdt_env.h

and replaces include directives:
#include <libfdt.h> -> #include <linux/libfdt.h>
#include <libfdt_env.h> -> #include <linux/libfdt_env.h>

Change-Id: I6c0f7e50e8b571106627f25ddac008a62bd2994e
Reported-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Signed-off-by: Masahiro Yamada <yamada.masahiro@socionext.com>
Signed-off-by: Kever Yang <kever.yang@rock-chips.com>

show more ...

UPSTREAM: libfdt: migrate libfdt.h to a wrapper + U-Boot own code

There is tons of code duplication between lib/libfdt/libfdt.h and
scripts/dtc/libfdt/libfdt.h. Evacuate the U-Boot own code to
incl

UPSTREAM: libfdt: migrate libfdt.h to a wrapper + U-Boot own code

There is tons of code duplication between lib/libfdt/libfdt.h and
scripts/dtc/libfdt/libfdt.h. Evacuate the U-Boot own code to
include/libfdt.h and remove lib/libfdt/libfdt.h.

For host tools, <libfdt.h> should include scripts/dtc/libfdt/libfdt.h,
which is already suitable for user-space.

For compiling U-Boot, <linux/libfdt.h> should be included because we
need a different libfdt_env.h .

Change-Id: I61a718a3fecb9f316cf3ddbac7c125394532a9c5
Signed-off-by: Masahiro Yamada <yamada.masahiro@socionext.com>
Signed-off-by: Kever Yang <kever.yang@rock-chips.com>

show more ...

UPSTREAM: libfdt: migrate fdt_rw.c to a wrapper of scripts/dtc/libfdt/fdt_rw.c

The only difference between scripts/dtc/libfdt/fdt_rw.c and
lib/libfdt/fdt_rw.c is fdt_remove_unused_strings().

It is

UPSTREAM: libfdt: migrate fdt_rw.c to a wrapper of scripts/dtc/libfdt/fdt_rw.c

The only difference between scripts/dtc/libfdt/fdt_rw.c and
lib/libfdt/fdt_rw.c is fdt_remove_unused_strings().

It is only used by fdtgrep, so we do not need to compile it for U-Boot
image. Move it to tools/libfdt/fdw_rw.c so that lib/libfdt/fdt_rw.c
can be a wrapper of scripts/dtc/libfdt/fdt_rw.c.

Change-Id: I6e2578d4bfdf75438d3aa1cb51f270f34527d37d
Signed-off-by: Masahiro Yamada <yamada.masahiro@socionext.com>
Reviewed-by: Simon Glass <sjg@chromium.org>
Signed-off-by: Kever Yang <kever.yang@rock-chips.com>

show more ...

rockchip: video: use common API instead of private

We can use fdtdec_get_is_enabled() instead of fdt_device_is_available().

Change-Id: I7aa03ed82f83fc72206659889a4f7f095dc66b36
Signed-off-by: Kever

rockchip: video: use common API instead of private

We can use fdtdec_get_is_enabled() instead of fdt_device_is_available().

Change-Id: I7aa03ed82f83fc72206659889a4f7f095dc66b36
Signed-off-by: Kever Yang <kever.yang@rock-chips.com>

show more ...

rockchip: make avb boot flow uninterruptable

- only allow "boot_android" as bootcmd;
- enter rockusb or fastboot when boot failed;
- don't allow ctrl+c to enter hush;

Change-Id: I7a67f4b738ed78370f

rockchip: make avb boot flow uninterruptable

- only allow "boot_android" as bootcmd;
- enter rockusb or fastboot when boot failed;
- don't allow ctrl+c to enter hush;

Change-Id: I7a67f4b738ed78370f19fe2c8c920a5abc104b4b
Signed-off-by: Joseph Chen <chenjh@rock-chips.com>

show more ...

avb: Kconfig: add config AVB_VBMETA_PUBLIC_KEY_VALIDATE

Change-Id: I2f9c74a8427874066e1bb7ac7b774a0fb3befba9
Signed-off-by: Joseph Chen <chenjh@rock-chips.com>

lib: initcall: add time cost verbose

This is more helpful than bootstage timing record since it
is quite possible for every developer to enable inicall
verbose for debug and find abnormal time cost

lib: initcall: add time cost verbose

This is more helpful than bootstage timing record since it
is quite possible for every developer to enable inicall
verbose for debug and find abnormal time cost as early as
possible.

It looks like:
initcall: 000000000061015c
# 183 us
initcall: 000000000ff3e614
# 0 us
initcall: 000000000ff3e408
# 0 us
initcall: 00000000006105fc (relocated to 000000000ff3e5fc)
# 6401 us
initcall: 0000000000610420 (relocated to 000000000ff3e420)
# 1 us
initcall: 0000000000604444 (relocated to 000000000ff32444)
# 5 us
Change-Id: Ib59f3e5052f921d0046a6fa73cbfb968000fd34e
Signed-off-by: Joseph Chen <chenjh@rock-chips.com>

show more ...

lib: optee_client: remove widevine ta from uboot

Change-Id: I9e6e4d6743d0a8e9787c2b01e535d920d4f93008
Signed-off-by: Hisping Lin <hisping.lin@rock-chips.com>

Attestation key: write attestation key to secure storage

Split attestation key into AttestationKey.ec and AttestationKey.rsa,
then write to secure storage.

Change-Id: I8e00d602c4174a002e6ecad2e4cfa

Attestation key: write attestation key to secure storage

Split attestation key into AttestationKey.ec and AttestationKey.rsa,
then write to secure storage.

Change-Id: I8e00d602c4174a002e6ecad2e4cfa846f32a681f
Signed-off-by: Tony Xu <tony.xu@rock-chips.com>

show more ...

lib: optee_client: remove keymaster ta from uboot

keymaster ta is too large, so we change store data
to static ta and remove keymaster ta

Change-Id: Icdb694138caf005d2cb2821714a8526d0391b18b
Signed

lib: optee_client: remove keymaster ta from uboot

keymaster ta is too large, so we change store data
to static ta and remove keymaster ta

Change-Id: Icdb694138caf005d2cb2821714a8526d0391b18b
Signed-off-by: Hisping Lin <hisping.lin@rock-chips.com>

show more ...

lib: optee_client: fix bug for security partition not find

bug make error R&W when security partition is not defined

Change-Id: Iddf840d3f9c090292e58f73492c20f84e4b3b4ea
Signed-off-by: Hisping Lin

lib: optee_client: fix bug for security partition not find

bug make error R&W when security partition is not defined

Change-Id: Iddf840d3f9c090292e58f73492c20f84e4b3b4ea
Signed-off-by: Hisping Lin <hisping.lin@rock-chips.com>

show more ...

lib: optee_client: Reduce keymaster ta size

Change-Id: I2a82e33f92123ba29e6fb456b4e6b35312620e64
Signed-off-by: Jian Qiu <qiujian@rock-chips.com>