1a189a570SPascal BrandCFG_LTC_OPTEE_THREAD ?= y 29ba34389SJens Wiklander# Size of emulated TrustZone protected SRAM, 448 kB. 379a90f9bSJens Wiklander# Only applicable when paging is enabled. 49ba34389SJens WiklanderCFG_CORE_TZSRAM_EMUL_SIZE ?= 458752 5b36e639bSZhizhou ZhangCFG_LPAE_ADDR_SPACE_SIZE ?= (1ull << 32) 6a189a570SPascal Brand 775fddfb8SPeng FanCFG_MMAP_REGIONS ?= 13 842dd7a20SfangsuowuCFG_RESERVED_VASPACE_SIZE ?= (1024 * 1024 * 10) 975fddfb8SPeng Fan 10abe38974SJens Wiklanderifeq ($(CFG_ARM64_core),y) 117a976658SJerome ForissierCFG_KERN_LINKER_FORMAT ?= elf64-littleaarch64 127a976658SJerome ForissierCFG_KERN_LINKER_ARCH ?= aarch64 1359ac3927SZeng Taoelse 14abe38974SJens Wiklanderifeq ($(CFG_ARM32_core),y) 157a976658SJerome ForissierCFG_KERN_LINKER_FORMAT ?= elf32-littlearm 167a976658SJerome ForissierCFG_KERN_LINKER_ARCH ?= arm 1759ac3927SZeng Taoelse 1859ac3927SZeng Tao$(error Error: CFG_ARM64_core or CFG_ARM32_core should be defined) 1959ac3927SZeng Taoendif 207a976658SJerome Forissierendif 217a976658SJerome Forissier 220de9a5fbSJens Wiklanderifeq ($(CFG_TA_FLOAT_SUPPORT),y) 230de9a5fbSJens Wiklander# Use hard-float for floating point support in user TAs instead of 240de9a5fbSJens Wiklander# soft-float 250de9a5fbSJens WiklanderCFG_WITH_VFP ?= y 260de9a5fbSJens Wiklanderifeq ($(CFG_ARM64_core),y) 270de9a5fbSJens Wiklander# AArch64 has no fallback to soft-float 280de9a5fbSJens Wiklander$(call force,CFG_WITH_VFP,y) 290de9a5fbSJens Wiklanderendif 300de9a5fbSJens Wiklanderifeq ($(CFG_WITH_VFP),y) 319551f4e5SJens Wiklanderarm64-platform-hard-float-enabled := y 329551f4e5SJens Wiklanderifneq ($(CFG_TA_ARM32_NO_HARD_FLOAT_SUPPORT),y) 339551f4e5SJens Wiklanderarm32-platform-hard-float-enabled := y 349551f4e5SJens Wiklanderendif 350de9a5fbSJens Wiklanderendif 360de9a5fbSJens Wiklanderendif 370de9a5fbSJens Wiklander 383bc90f3dSJens Wiklander# Adds protection against CVE-2017-5715 also know as Spectre 393bc90f3dSJens Wiklander# (https://spectreattack.com) 403bc90f3dSJens Wiklander# See also https://developer.arm.com/-/media/Files/pdf/Cache_Speculation_Side-channels.pdf 413bc90f3dSJens Wiklander# Variant 2 423bc90f3dSJens WiklanderCFG_CORE_WORKAROUND_SPECTRE_BP ?= y 4340511940SJens Wiklander# Same as CFG_CORE_WORKAROUND_SPECTRE_BP but targeting exceptions from 4440511940SJens Wiklander# secure EL0 instead of non-secure world. 4540511940SJens WiklanderCFG_CORE_WORKAROUND_SPECTRE_BP_SEC ?= $(CFG_CORE_WORKAROUND_SPECTRE_BP) 463bc90f3dSJens Wiklander 4710d13b28SEtienne CarriereCFG_CORE_RWDATA_NOEXEC ?= y 483181c736SEtienne CarriereCFG_CORE_RODATA_NOEXEC ?= n 493181c736SEtienne Carriereifeq ($(CFG_CORE_RODATA_NOEXEC),y) 503181c736SEtienne Carriere$(call force,CFG_CORE_RWDATA_NOEXEC,y) 513181c736SEtienne Carriereendif 52aaaf00a2SJerome Forissier# 'y' to set the Alignment Check Enable bit in SCTLR/SCTLR_EL1, 'n' to clear it 53aaaf00a2SJerome ForissierCFG_SCTLR_ALIGNMENT_CHECK ?= y 5410d13b28SEtienne Carriere 55dd3afbacSJens Wiklanderifeq ($(CFG_CORE_LARGE_PHYS_ADDR),y) 56dd3afbacSJens Wiklander$(call force,CFG_WITH_LPAE,y) 57dd3afbacSJens Wiklanderendif 58dd3afbacSJens Wiklander 595b8a58b4SJens Wiklander# Unmaps all kernel mode code except the code needed to take exceptions 605b8a58b4SJens Wiklander# from user space and restore kernel mode mapping again. This gives more 615b8a58b4SJens Wiklander# strict control over what is accessible while in user mode. 625b8a58b4SJens Wiklander# Addresses CVE-2017-5715 (aka Meltdown) known to affect Arm Cortex-A75 635b8a58b4SJens WiklanderCFG_CORE_UNMAP_CORE_AT_EL0 ?= y 645b8a58b4SJens Wiklander 658267e19bSJerome Forissier# Initialize PMCR.DP to 1 to prohibit cycle counting in secure state, and 668267e19bSJerome Forissier# save/restore PMCR during world switch. 678267e19bSJerome ForissierCFG_SM_NO_CYCLE_COUNTING ?= y 688267e19bSJerome Forissier 69ab046bb5SEtienne Carriereifeq ($(CFG_ARM32_core),y) 70ab046bb5SEtienne Carriere# Configration directive related to ARMv7 optee boot arguments. 71ab046bb5SEtienne Carriere# CFG_PAGEABLE_ADDR: if defined, forces pageable data physical address. 72ab046bb5SEtienne Carriere# CFG_NS_ENTRY_ADDR: if defined, forces NS World physical entry address. 73ab046bb5SEtienne Carriere# CFG_DT_ADDR: if defined, forces Device Tree data physical address. 74ab046bb5SEtienne Carriereendif 75ab046bb5SEtienne Carriere 76739804b5SJens Wiklandercore-platform-cppflags += -I$(arch-dir)/include 77739804b5SJens Wiklandercore-platform-subdirs += \ 78f6e4d9f7SJens Wiklander $(addprefix $(arch-dir)/, kernel crypto mm tee pta) $(platform-dir) 79739804b5SJens Wiklander 80739804b5SJens Wiklanderifneq ($(CFG_WITH_ARM_TRUSTED_FW),y) 81739804b5SJens Wiklandercore-platform-subdirs += $(arch-dir)/sm 82739804b5SJens Wiklanderendif 83739804b5SJens Wiklander 84739804b5SJens Wiklanderarm64-platform-cppflags += -DARM64=1 -D__LP64__=1 85739804b5SJens Wiklanderarm32-platform-cppflags += -DARM32=1 -D__ILP32__=1 86739804b5SJens Wiklander 87c8f56835SJerome Forissierplatform-cflags-generic ?= -ffunction-sections -fdata-sections -pipe 88c8f56835SJerome Forissierplatform-aflags-generic ?= -pipe 89739804b5SJens Wiklander 9023381c10SJens Wiklanderarm32-platform-cflags-no-hard-float ?= -mfloat-abi=soft 910de9a5fbSJens Wiklanderarm32-platform-cflags-hard-float ?= -mfloat-abi=hard -funsafe-math-optimizations 92*c96d7091SSumit Gargarm32-platform-cflags-generic-thumb ?= -mthumb -mthumb-interwork \ 93*c96d7091SSumit Garg -fno-short-enums -fno-common -mno-unaligned-access 94*c96d7091SSumit Gargarm32-platform-cflags-generic-arm ?= -marm -fno-omit-frame-pointer -mapcs \ 95739804b5SJens Wiklander -fno-short-enums -fno-common -mno-unaligned-access 96739804b5SJens Wiklanderarm32-platform-aflags-no-hard-float ?= 97739804b5SJens Wiklander 98739804b5SJens Wiklanderarm64-platform-cflags-no-hard-float ?= -mgeneral-regs-only 990de9a5fbSJens Wiklanderarm64-platform-cflags-hard-float ?= 100739804b5SJens Wiklanderarm64-platform-cflags-generic ?= -mstrict-align 101739804b5SJens Wiklander 102739804b5SJens Wiklanderifeq ($(DEBUG),1) 103c8f56835SJerome Forissier# For backwards compatibility 104c8f56835SJerome Forissier$(call force,CFG_CC_OPTIMIZE_FOR_SIZE,n) 105c8f56835SJerome Forissier$(call force,CFG_DEBUG_INFO,y) 106739804b5SJens Wiklanderendif 107739804b5SJens Wiklander 108c8f56835SJerome ForissierCFG_CC_OPTIMIZE_FOR_SIZE ?= y 109c8f56835SJerome Forissierifeq ($(CFG_CC_OPTIMIZE_FOR_SIZE),y) 110c8f56835SJerome Forissierplatform-cflags-optimization ?= -Os 111c8f56835SJerome Forissierelse 112c8f56835SJerome Forissierplatform-cflags-optimization ?= -O0 113c8f56835SJerome Forissierendif 114c8f56835SJerome Forissier 115c8f56835SJerome ForissierCFG_DEBUG_INFO ?= y 116c8f56835SJerome Forissierifeq ($(CFG_DEBUG_INFO),y) 117739804b5SJens Wiklanderplatform-cflags-debug-info ?= -g3 118c8f56835SJerome Forissierplatform-aflags-debug-info ?= -g 119c8f56835SJerome Forissierendif 120739804b5SJens Wiklander 121739804b5SJens Wiklandercore-platform-cflags += $(platform-cflags-optimization) 122739804b5SJens Wiklandercore-platform-cflags += $(platform-cflags-generic) 123739804b5SJens Wiklandercore-platform-cflags += $(platform-cflags-debug-info) 124739804b5SJens Wiklander 125739804b5SJens Wiklandercore-platform-aflags += $(platform-aflags-generic) 126739804b5SJens Wiklandercore-platform-aflags += $(platform-aflags-debug-info) 127739804b5SJens Wiklander 1287a976658SJerome Forissierifeq ($(CFG_ARM64_core),y) 129b09cddcaSJerome Forissierarch-bits-core := 64 1307a976658SJerome Forissiercore-platform-cppflags += $(arm64-platform-cppflags) 1317a976658SJerome Forissiercore-platform-cflags += $(arm64-platform-cflags) 132739804b5SJens Wiklandercore-platform-cflags += $(arm64-platform-cflags-generic) 133739804b5SJens Wiklandercore-platform-cflags += $(arm64-platform-cflags-no-hard-float) 1347a976658SJerome Forissiercore-platform-aflags += $(arm64-platform-aflags) 1357a976658SJerome Forissierelse 136b09cddcaSJerome Forissierarch-bits-core := 32 1377a976658SJerome Forissiercore-platform-cppflags += $(arm32-platform-cppflags) 1387a976658SJerome Forissiercore-platform-cflags += $(arm32-platform-cflags) 139739804b5SJens Wiklandercore-platform-cflags += $(arm32-platform-cflags-no-hard-float) 14031a29642SJerome Forissierifeq ($(CFG_UNWIND),y) 141923c1f34SJens Wiklandercore-platform-cflags += -funwind-tables 142923c1f34SJens Wiklanderendif 143*c96d7091SSumit Gargcore-platform-cflags += $(arm32-platform-cflags-generic-thumb) 144739804b5SJens Wiklandercore-platform-aflags += $(core_arm32-platform-aflags) 1457a976658SJerome Forissiercore-platform-aflags += $(arm32-platform-aflags) 146abe38974SJens Wiklanderendif 147739804b5SJens Wiklander 1488955ffc4SJerome Forissier# Provide default supported-ta-targets if not set by the platform config 1498955ffc4SJerome Forissierifeq (,$(supported-ta-targets)) 1508955ffc4SJerome Forissiersupported-ta-targets = ta_arm32 1519f1eec75SJerome Forissierifeq ($(CFG_ARM64_core),y) 1528955ffc4SJerome Forissiersupported-ta-targets += ta_arm64 1539f1eec75SJerome Forissierendif 1549f1eec75SJerome Forissierendif 1559f1eec75SJerome Forissier 156dc701d99SJerome Forissierta-targets := $(if $(CFG_USER_TA_TARGETS),$(filter $(supported-ta-targets),$(CFG_USER_TA_TARGETS)),$(supported-ta-targets)) 157dc701d99SJerome Forissierunsup-targets := $(filter-out $(ta-targets),$(CFG_USER_TA_TARGETS)) 158dc701d99SJerome Forissierifneq (,$(unsup-targets)) 159dc701d99SJerome Forissier$(error CFG_USER_TA_TARGETS contains unsupported value(s): $(unsup-targets). Valid values: $(supported-ta-targets)) 160dc701d99SJerome Forissierendif 1618955ffc4SJerome Forissier 162739804b5SJens Wiklanderifneq ($(filter ta_arm32,$(ta-targets)),) 163739804b5SJens Wiklander# Variables for ta-target/sm "ta_arm32" 164739804b5SJens WiklanderCFG_ARM32_ta_arm32 := y 165b09cddcaSJerome Forissierarch-bits-ta_arm32 := 32 166739804b5SJens Wiklanderta_arm32-platform-cppflags += $(arm32-platform-cppflags) 167739804b5SJens Wiklanderta_arm32-platform-cflags += $(arm32-platform-cflags) 168739804b5SJens Wiklanderta_arm32-platform-cflags += $(platform-cflags-optimization) 169739804b5SJens Wiklanderta_arm32-platform-cflags += $(platform-cflags-debug-info) 1707f761274SJerome Forissierta_arm32-platform-cflags += -fpic 171*c96d7091SSumit Garg 172*c96d7091SSumit Garg# Thumb mode doesn't support function graph tracing due to missing 173*c96d7091SSumit Garg# frame pointer support required to trace function call chain. So 174*c96d7091SSumit Garg# rather compile in ARM mode if function tracing is enabled. 175*c96d7091SSumit Gargifeq ($(CFG_TA_FTRACE_SUPPORT),y) 176*c96d7091SSumit Gargta_arm32-platform-cflags += $(arm32-platform-cflags-generic-arm) 177*c96d7091SSumit Gargelse 178*c96d7091SSumit Gargta_arm32-platform-cflags += $(arm32-platform-cflags-generic-thumb) 179*c96d7091SSumit Gargendif 180*c96d7091SSumit Garg 1819551f4e5SJens Wiklanderifeq ($(arm32-platform-hard-float-enabled),y) 1820de9a5fbSJens Wiklanderta_arm32-platform-cflags += $(arm32-platform-cflags-hard-float) 1830de9a5fbSJens Wiklanderelse 184739804b5SJens Wiklanderta_arm32-platform-cflags += $(arm32-platform-cflags-no-hard-float) 1850de9a5fbSJens Wiklanderendif 18631a29642SJerome Forissierifeq ($(CFG_UNWIND),y) 18731a29642SJerome Forissierta_arm32-platform-cflags += -funwind-tables 18831a29642SJerome Forissierendif 1899b40b6e6SJerome Forissierta_arm32-platform-aflags += $(platform-aflags-generic) 190739804b5SJens Wiklanderta_arm32-platform-aflags += $(platform-aflags-debug-info) 191739804b5SJens Wiklanderta_arm32-platform-aflags += $(arm32-platform-aflags) 192739804b5SJens Wiklander 193739804b5SJens Wiklanderta-mk-file-export-vars-ta_arm32 += CFG_ARM32_ta_arm32 194739804b5SJens Wiklanderta-mk-file-export-vars-ta_arm32 += ta_arm32-platform-cppflags 195739804b5SJens Wiklanderta-mk-file-export-vars-ta_arm32 += ta_arm32-platform-cflags 196739804b5SJens Wiklanderta-mk-file-export-vars-ta_arm32 += ta_arm32-platform-aflags 197c042fbefSJerome Forissier 1980ca35294SVictor Chongta-mk-file-export-add-ta_arm32 += CROSS_COMPILE ?= arm-linux-gnueabihf-_nl_ 199c042fbefSJerome Forissierta-mk-file-export-add-ta_arm32 += CROSS_COMPILE32 ?= $$(CROSS_COMPILE)_nl_ 200c042fbefSJerome Forissierta-mk-file-export-add-ta_arm32 += CROSS_COMPILE_ta_arm32 ?= $$(CROSS_COMPILE32)_nl_ 201739804b5SJens Wiklanderendif 202739804b5SJens Wiklander 203739804b5SJens Wiklanderifneq ($(filter ta_arm64,$(ta-targets)),) 204739804b5SJens Wiklander# Variables for ta-target/sm "ta_arm64" 205739804b5SJens WiklanderCFG_ARM64_ta_arm64 := y 206b09cddcaSJerome Forissierarch-bits-ta_arm64 := 64 207739804b5SJens Wiklanderta_arm64-platform-cppflags += $(arm64-platform-cppflags) 208739804b5SJens Wiklanderta_arm64-platform-cflags += $(arm64-platform-cflags) 209739804b5SJens Wiklanderta_arm64-platform-cflags += $(platform-cflags-optimization) 210739804b5SJens Wiklanderta_arm64-platform-cflags += $(platform-cflags-debug-info) 2117f761274SJerome Forissierta_arm64-platform-cflags += -fpic 212739804b5SJens Wiklanderta_arm64-platform-cflags += $(arm64-platform-cflags-generic) 2139551f4e5SJens Wiklanderifeq ($(arm64-platform-hard-float-enabled),y) 2140de9a5fbSJens Wiklanderta_arm64-platform-cflags += $(arm64-platform-cflags-hard-float) 2150de9a5fbSJens Wiklanderelse 216739804b5SJens Wiklanderta_arm64-platform-cflags += $(arm64-platform-cflags-no-hard-float) 2170de9a5fbSJens Wiklanderendif 2189b40b6e6SJerome Forissierta_arm64-platform-aflags += $(platform-aflags-generic) 219739804b5SJens Wiklanderta_arm64-platform-aflags += $(platform-aflags-debug-info) 220739804b5SJens Wiklanderta_arm64-platform-aflags += $(arm64-platform-aflags) 221739804b5SJens Wiklander 222739804b5SJens Wiklanderta-mk-file-export-vars-ta_arm64 += CFG_ARM64_ta_arm64 223739804b5SJens Wiklanderta-mk-file-export-vars-ta_arm64 += ta_arm64-platform-cppflags 224739804b5SJens Wiklanderta-mk-file-export-vars-ta_arm64 += ta_arm64-platform-cflags 225739804b5SJens Wiklanderta-mk-file-export-vars-ta_arm64 += ta_arm64-platform-aflags 226c042fbefSJerome Forissier 227c042fbefSJerome Forissierta-mk-file-export-add-ta_arm64 += CROSS_COMPILE64 ?= $$(CROSS_COMPILE)_nl_ 228c042fbefSJerome Forissierta-mk-file-export-add-ta_arm64 += CROSS_COMPILE_ta_arm64 ?= $$(CROSS_COMPILE64)_nl_ 229739804b5SJens Wiklanderendif 230b09cddcaSJerome Forissier 231b09cddcaSJerome Forissier# Set cross compiler prefix for each submodule 232b09cddcaSJerome Forissier$(foreach sm, core $(ta-targets), $(eval CROSS_COMPILE_$(sm) ?= $(CROSS_COMPILE$(arch-bits-$(sm))))) 23318b58024SJens Wiklander 23418b58024SJens Wiklanderarm32-sysreg-txt = core/arch/arm/kernel/arm32_sysreg.txt 23518b58024SJens Wiklanderarm32-sysregs-$(arm32-sysreg-txt)-h := arm32_sysreg.h 23618b58024SJens Wiklanderarm32-sysregs-$(arm32-sysreg-txt)-s := arm32_sysreg.S 23718b58024SJens Wiklanderarm32-sysregs += $(arm32-sysreg-txt) 23818b58024SJens Wiklander 239c3d0b15dSJens Wiklanderifeq ($(CFG_ARM_GICV3),y) 240c3d0b15dSJens Wiklanderarm32-gicv3-sysreg-txt = core/arch/arm/kernel/arm32_gicv3_sysreg.txt 241c3d0b15dSJens Wiklanderarm32-sysregs-$(arm32-gicv3-sysreg-txt)-h := arm32_gicv3_sysreg.h 242c3d0b15dSJens Wiklanderarm32-sysregs-$(arm32-gicv3-sysreg-txt)-s := arm32_gicv3_sysreg.S 243c3d0b15dSJens Wiklanderarm32-sysregs += $(arm32-gicv3-sysreg-txt) 244c3d0b15dSJens Wiklanderendif 245c3d0b15dSJens Wiklander 24618b58024SJens Wiklanderarm32-sysregs-out := $(out-dir)/$(sm)/include/generated 24718b58024SJens Wiklander 24818b58024SJens Wiklanderdefine process-arm32-sysreg 24918b58024SJens WiklanderFORCE-GENSRC$(sm): $$(arm32-sysregs-out)/$$(arm32-sysregs-$(1)-h) 25018b58024SJens Wiklandercleanfiles := $$(cleanfiles) $$(arm32-sysregs-out)/$$(arm32-sysregs-$(1)-h) 25118b58024SJens Wiklander 25218b58024SJens Wiklander$$(arm32-sysregs-out)/$$(arm32-sysregs-$(1)-h): $(1) scripts/arm32_sysreg.py 25318b58024SJens Wiklander @$(cmd-echo-silent) ' GEN $$@' 25418b58024SJens Wiklander $(q)mkdir -p $$(dir $$@) 25518b58024SJens Wiklander $(q)scripts/arm32_sysreg.py --guard __$$(arm32-sysregs-$(1)-h) \ 25618b58024SJens Wiklander < $$< > $$@ 25718b58024SJens Wiklander 25818b58024SJens WiklanderFORCE-GENSRC$(sm): $$(arm32-sysregs-out)/$$(arm32-sysregs-$(1)-s) 25918b58024SJens Wiklandercleanfiles := $$(cleanfiles) $$(arm32-sysregs-out)/$$(arm32-sysregs-$(1)-s) 26018b58024SJens Wiklander 26118b58024SJens Wiklander$$(arm32-sysregs-out)/$$(arm32-sysregs-$(1)-s): $(1) scripts/arm32_sysreg.py 26218b58024SJens Wiklander @$(cmd-echo-silent) ' GEN $$@' 26318b58024SJens Wiklander $(q)mkdir -p $$(dir $$@) 26418b58024SJens Wiklander $(q)scripts/arm32_sysreg.py --s_file < $$< > $$@ 26518b58024SJens Wiklanderendef #process-arm32-sysreg 26618b58024SJens Wiklander 26718b58024SJens Wiklander$(foreach sr, $(arm32-sysregs), $(eval $(call process-arm32-sysreg,$(sr)))) 268