14f6ad66aSAchin Gupta /* 210bcd761SJeenu Viswambharan * Copyright (c) 2013-2017, ARM Limited and Contributors. All rights reserved. 34f6ad66aSAchin Gupta * 44f6ad66aSAchin Gupta * Redistribution and use in source and binary forms, with or without 54f6ad66aSAchin Gupta * modification, are permitted provided that the following conditions are met: 64f6ad66aSAchin Gupta * 74f6ad66aSAchin Gupta * Redistributions of source code must retain the above copyright notice, this 84f6ad66aSAchin Gupta * list of conditions and the following disclaimer. 94f6ad66aSAchin Gupta * 104f6ad66aSAchin Gupta * Redistributions in binary form must reproduce the above copyright notice, 114f6ad66aSAchin Gupta * this list of conditions and the following disclaimer in the documentation 124f6ad66aSAchin Gupta * and/or other materials provided with the distribution. 134f6ad66aSAchin Gupta * 144f6ad66aSAchin Gupta * Neither the name of ARM nor the names of its contributors may be used 154f6ad66aSAchin Gupta * to endorse or promote products derived from this software without specific 164f6ad66aSAchin Gupta * prior written permission. 174f6ad66aSAchin Gupta * 184f6ad66aSAchin Gupta * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" 194f6ad66aSAchin Gupta * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 204f6ad66aSAchin Gupta * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 214f6ad66aSAchin Gupta * ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE 224f6ad66aSAchin Gupta * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR 234f6ad66aSAchin Gupta * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF 244f6ad66aSAchin Gupta * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS 254f6ad66aSAchin Gupta * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN 264f6ad66aSAchin Gupta * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) 274f6ad66aSAchin Gupta * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE 284f6ad66aSAchin Gupta * POSSIBILITY OF SUCH DAMAGE. 294f6ad66aSAchin Gupta */ 304f6ad66aSAchin Gupta 3197043ac9SDan Handley #include <arch.h> 324f6ad66aSAchin Gupta #include <arch_helpers.h> 3397043ac9SDan Handley #include <assert.h> 341779ba6bSJuan Castillo #include <auth_mod.h> 3548bfb88eSYatharth Kochar #include <bl1.h> 3697043ac9SDan Handley #include <bl_common.h> 37*0b32628eSAntonio Nino Diaz #include <console.h> 384112bfa0SVikram Kanigiri #include <debug.h> 3910bcd761SJeenu Viswambharan #include <errata_report.h> 4097043ac9SDan Handley #include <platform.h> 415f0cdb05SDan Handley #include <platform_def.h> 4248bfb88eSYatharth Kochar #include <smcc_helpers.h> 43c45f627dSSoby Mathew #include <utils.h> 445b827a8fSDan Handley #include "bl1_private.h" 4548bfb88eSYatharth Kochar #include <uuid.h> 4648bfb88eSYatharth Kochar 4748bfb88eSYatharth Kochar /* BL1 Service UUID */ 4848bfb88eSYatharth Kochar DEFINE_SVC_UUID(bl1_svc_uid, 4948bfb88eSYatharth Kochar 0xfd3967d4, 0x72cb, 0x4d9a, 0xb5, 0x75, 5048bfb88eSYatharth Kochar 0x67, 0x15, 0xd6, 0xf4, 0xbb, 0x4a); 514f6ad66aSAchin Gupta 52a2f8b166SVikram Kanigiri 537baff11fSYatharth Kochar static void bl1_load_bl2(void); 5429fb905dSVikram Kanigiri 558f55dfb4SSandrine Bailleux /******************************************************************************* 568f55dfb4SSandrine Bailleux * The next function has a weak definition. Platform specific code can override 578f55dfb4SSandrine Bailleux * it if it wishes to. 588f55dfb4SSandrine Bailleux ******************************************************************************/ 598f55dfb4SSandrine Bailleux #pragma weak bl1_init_bl2_mem_layout 608f55dfb4SSandrine Bailleux 618f55dfb4SSandrine Bailleux /******************************************************************************* 628f55dfb4SSandrine Bailleux * Function that takes a memory layout into which BL2 has been loaded and 638f55dfb4SSandrine Bailleux * populates a new memory layout for BL2 that ensures that BL1's data sections 648f55dfb4SSandrine Bailleux * resident in secure RAM are not visible to BL2. 658f55dfb4SSandrine Bailleux ******************************************************************************/ 668f55dfb4SSandrine Bailleux void bl1_init_bl2_mem_layout(const meminfo_t *bl1_mem_layout, 678f55dfb4SSandrine Bailleux meminfo_t *bl2_mem_layout) 688f55dfb4SSandrine Bailleux { 698f55dfb4SSandrine Bailleux 708f55dfb4SSandrine Bailleux assert(bl1_mem_layout != NULL); 718f55dfb4SSandrine Bailleux assert(bl2_mem_layout != NULL); 728f55dfb4SSandrine Bailleux 7342019bf4SYatharth Kochar #if LOAD_IMAGE_V2 7442019bf4SYatharth Kochar /* 7542019bf4SYatharth Kochar * Remove BL1 RW data from the scope of memory visible to BL2. 7642019bf4SYatharth Kochar * This is assuming BL1 RW data is at the top of bl1_mem_layout. 7742019bf4SYatharth Kochar */ 7842019bf4SYatharth Kochar assert(BL1_RW_BASE > bl1_mem_layout->total_base); 7942019bf4SYatharth Kochar bl2_mem_layout->total_base = bl1_mem_layout->total_base; 8042019bf4SYatharth Kochar bl2_mem_layout->total_size = BL1_RW_BASE - bl1_mem_layout->total_base; 8142019bf4SYatharth Kochar #else 828f55dfb4SSandrine Bailleux /* Check that BL1's memory is lying outside of the free memory */ 838f55dfb4SSandrine Bailleux assert((BL1_RAM_LIMIT <= bl1_mem_layout->free_base) || 847baff11fSYatharth Kochar (BL1_RAM_BASE >= bl1_mem_layout->free_base + 857baff11fSYatharth Kochar bl1_mem_layout->free_size)); 868f55dfb4SSandrine Bailleux 878f55dfb4SSandrine Bailleux /* Remove BL1 RW data from the scope of memory visible to BL2 */ 888f55dfb4SSandrine Bailleux *bl2_mem_layout = *bl1_mem_layout; 898f55dfb4SSandrine Bailleux reserve_mem(&bl2_mem_layout->total_base, 908f55dfb4SSandrine Bailleux &bl2_mem_layout->total_size, 918f55dfb4SSandrine Bailleux BL1_RAM_BASE, 9242019bf4SYatharth Kochar BL1_RAM_LIMIT - BL1_RAM_BASE); 9342019bf4SYatharth Kochar #endif /* LOAD_IMAGE_V2 */ 948f55dfb4SSandrine Bailleux 958f55dfb4SSandrine Bailleux flush_dcache_range((unsigned long)bl2_mem_layout, sizeof(meminfo_t)); 968f55dfb4SSandrine Bailleux } 9729fb905dSVikram Kanigiri 9829fb905dSVikram Kanigiri /******************************************************************************* 994f6ad66aSAchin Gupta * Function to perform late architectural and platform specific initialization. 1007baff11fSYatharth Kochar * It also queries the platform to load and run next BL image. Only called 1017baff11fSYatharth Kochar * by the primary cpu after a cold boot. 1024f6ad66aSAchin Gupta ******************************************************************************/ 1034f6ad66aSAchin Gupta void bl1_main(void) 1044f6ad66aSAchin Gupta { 1057baff11fSYatharth Kochar unsigned int image_id; 1067baff11fSYatharth Kochar 1076ad2e461SDan Handley /* Announce our arrival */ 1086ad2e461SDan Handley NOTICE(FIRMWARE_WELCOME_STR); 1096ad2e461SDan Handley NOTICE("BL1: %s\n", version_string); 1106ad2e461SDan Handley NOTICE("BL1: %s\n", build_message); 1116ad2e461SDan Handley 112f3b4914bSYatharth Kochar INFO("BL1: RAM %p - %p\n", (void *)BL1_RAM_BASE, 113f3b4914bSYatharth Kochar (void *)BL1_RAM_LIMIT); 1146ad2e461SDan Handley 11510bcd761SJeenu Viswambharan print_errata_status(); 1164f6ad66aSAchin Gupta 117ce4c820dSDan Handley #if DEBUG 118f3b4914bSYatharth Kochar u_register_t val; 1194f6ad66aSAchin Gupta /* 1204f6ad66aSAchin Gupta * Ensure that MMU/Caches and coherency are turned on 1214f6ad66aSAchin Gupta */ 122f3b4914bSYatharth Kochar #ifdef AARCH32 123f3b4914bSYatharth Kochar val = read_sctlr(); 124f3b4914bSYatharth Kochar #else 125ce4c820dSDan Handley val = read_sctlr_el3(); 126f3b4914bSYatharth Kochar #endif 127354ab57dSAndrew Thoelke assert(val & SCTLR_M_BIT); 128354ab57dSAndrew Thoelke assert(val & SCTLR_C_BIT); 129354ab57dSAndrew Thoelke assert(val & SCTLR_I_BIT); 130ce4c820dSDan Handley /* 131ce4c820dSDan Handley * Check that Cache Writeback Granule (CWG) in CTR_EL0 matches the 132ce4c820dSDan Handley * provided platform value 133ce4c820dSDan Handley */ 134ce4c820dSDan Handley val = (read_ctr_el0() >> CTR_CWG_SHIFT) & CTR_CWG_MASK; 135ce4c820dSDan Handley /* 136ce4c820dSDan Handley * If CWG is zero, then no CWG information is available but we can 137ce4c820dSDan Handley * at least check the platform value is less than the architectural 138ce4c820dSDan Handley * maximum. 139ce4c820dSDan Handley */ 140ce4c820dSDan Handley if (val != 0) 141ce4c820dSDan Handley assert(CACHE_WRITEBACK_GRANULE == SIZE_FROM_LOG2_WORDS(val)); 142ce4c820dSDan Handley else 143ce4c820dSDan Handley assert(CACHE_WRITEBACK_GRANULE <= MAX_CACHE_LINE_SIZE); 144ce4c820dSDan Handley #endif 1454f6ad66aSAchin Gupta 1464f6ad66aSAchin Gupta /* Perform remaining generic architectural setup from EL3 */ 1474f6ad66aSAchin Gupta bl1_arch_setup(); 1484f6ad66aSAchin Gupta 1497baff11fSYatharth Kochar #if TRUSTED_BOARD_BOOT 1507baff11fSYatharth Kochar /* Initialize authentication module */ 1517baff11fSYatharth Kochar auth_mod_init(); 1527baff11fSYatharth Kochar #endif /* TRUSTED_BOARD_BOOT */ 1537baff11fSYatharth Kochar 1544f6ad66aSAchin Gupta /* Perform platform setup in BL1. */ 1554f6ad66aSAchin Gupta bl1_platform_setup(); 1564f6ad66aSAchin Gupta 1577baff11fSYatharth Kochar /* Get the image id of next image to load and run. */ 1587baff11fSYatharth Kochar image_id = bl1_plat_get_next_image_id(); 1597baff11fSYatharth Kochar 16048bfb88eSYatharth Kochar /* 16148bfb88eSYatharth Kochar * We currently interpret any image id other than 16248bfb88eSYatharth Kochar * BL2_IMAGE_ID as the start of firmware update. 16348bfb88eSYatharth Kochar */ 1647baff11fSYatharth Kochar if (image_id == BL2_IMAGE_ID) 1657baff11fSYatharth Kochar bl1_load_bl2(); 16648bfb88eSYatharth Kochar else 16748bfb88eSYatharth Kochar NOTICE("BL1-FWU: *******FWU Process Started*******\n"); 1687baff11fSYatharth Kochar 1697baff11fSYatharth Kochar bl1_prepare_next_image(image_id); 170*0b32628eSAntonio Nino Diaz 171*0b32628eSAntonio Nino Diaz console_flush(); 1727baff11fSYatharth Kochar } 1737baff11fSYatharth Kochar 1747baff11fSYatharth Kochar /******************************************************************************* 1757baff11fSYatharth Kochar * This function locates and loads the BL2 raw binary image in the trusted SRAM. 1767baff11fSYatharth Kochar * Called by the primary cpu after a cold boot. 1777baff11fSYatharth Kochar * TODO: Add support for alternative image load mechanism e.g using virtio/elf 1787baff11fSYatharth Kochar * loader etc. 1797baff11fSYatharth Kochar ******************************************************************************/ 1807baff11fSYatharth Kochar void bl1_load_bl2(void) 1817baff11fSYatharth Kochar { 1827baff11fSYatharth Kochar image_desc_t *image_desc; 1837baff11fSYatharth Kochar image_info_t *image_info; 1847baff11fSYatharth Kochar entry_point_info_t *ep_info; 1857baff11fSYatharth Kochar meminfo_t *bl1_tzram_layout; 1867baff11fSYatharth Kochar meminfo_t *bl2_tzram_layout; 1877baff11fSYatharth Kochar int err; 1887baff11fSYatharth Kochar 1897baff11fSYatharth Kochar /* Get the image descriptor */ 1907baff11fSYatharth Kochar image_desc = bl1_plat_get_image_desc(BL2_IMAGE_ID); 1917baff11fSYatharth Kochar assert(image_desc); 1927baff11fSYatharth Kochar 1937baff11fSYatharth Kochar /* Get the image info */ 1947baff11fSYatharth Kochar image_info = &image_desc->image_info; 1957baff11fSYatharth Kochar 1967baff11fSYatharth Kochar /* Get the entry point info */ 1977baff11fSYatharth Kochar ep_info = &image_desc->ep_info; 1984112bfa0SVikram Kanigiri 1998f55dfb4SSandrine Bailleux /* Find out how much free trusted ram remains after BL1 load */ 200ee12f6f7SSandrine Bailleux bl1_tzram_layout = bl1_plat_sec_mem_layout(); 2018f55dfb4SSandrine Bailleux 20216948ae1SJuan Castillo INFO("BL1: Loading BL2\n"); 20316948ae1SJuan Castillo 20442019bf4SYatharth Kochar #if LOAD_IMAGE_V2 20542019bf4SYatharth Kochar err = load_auth_image(BL2_IMAGE_ID, image_info); 20642019bf4SYatharth Kochar #else 2078f55dfb4SSandrine Bailleux /* Load the BL2 image */ 2081779ba6bSJuan Castillo err = load_auth_image(bl1_tzram_layout, 20916948ae1SJuan Castillo BL2_IMAGE_ID, 2107baff11fSYatharth Kochar image_info->image_base, 2117baff11fSYatharth Kochar image_info, 2127baff11fSYatharth Kochar ep_info); 2131779ba6bSJuan Castillo 21442019bf4SYatharth Kochar #endif /* LOAD_IMAGE_V2 */ 21542019bf4SYatharth Kochar 2164112bfa0SVikram Kanigiri if (err) { 2176ad2e461SDan Handley ERROR("Failed to load BL2 firmware.\n"); 21840fc6cd1SJuan Castillo plat_error_handler(err); 2194112bfa0SVikram Kanigiri } 22001df3c14SJuan Castillo 2214f6ad66aSAchin Gupta /* 2224f6ad66aSAchin Gupta * Create a new layout of memory for BL2 as seen by BL1 i.e. 2234f6ad66aSAchin Gupta * tell it the amount of total and free memory available. 2244f6ad66aSAchin Gupta * This layout is created at the first free address visible 2254f6ad66aSAchin Gupta * to BL2. BL2 will read the memory layout before using its 2264f6ad66aSAchin Gupta * memory for other purposes. 2274f6ad66aSAchin Gupta */ 22842019bf4SYatharth Kochar #if LOAD_IMAGE_V2 22942019bf4SYatharth Kochar bl2_tzram_layout = (meminfo_t *) bl1_tzram_layout->total_base; 23042019bf4SYatharth Kochar #else 231fb037bfbSDan Handley bl2_tzram_layout = (meminfo_t *) bl1_tzram_layout->free_base; 23242019bf4SYatharth Kochar #endif /* LOAD_IMAGE_V2 */ 23342019bf4SYatharth Kochar 2348f55dfb4SSandrine Bailleux bl1_init_bl2_mem_layout(bl1_tzram_layout, bl2_tzram_layout); 2354f6ad66aSAchin Gupta 236f3b4914bSYatharth Kochar ep_info->args.arg1 = (uintptr_t)bl2_tzram_layout; 2377baff11fSYatharth Kochar NOTICE("BL1: Booting BL2\n"); 238f3b4914bSYatharth Kochar VERBOSE("BL1: BL2 memory layout address = %p\n", 239f3b4914bSYatharth Kochar (void *) bl2_tzram_layout); 2404f6ad66aSAchin Gupta } 2414f6ad66aSAchin Gupta 2424f6ad66aSAchin Gupta /******************************************************************************* 243f3b4914bSYatharth Kochar * Function called just before handing over to the next BL to inform the user 244f3b4914bSYatharth Kochar * about the boot progress. In debug mode, also print details about the BL 245f3b4914bSYatharth Kochar * image's execution context. 2464f6ad66aSAchin Gupta ******************************************************************************/ 247f3b4914bSYatharth Kochar void bl1_print_next_bl_ep_info(const entry_point_info_t *bl_ep_info) 2484f6ad66aSAchin Gupta { 249f3b4914bSYatharth Kochar #ifdef AARCH32 250f3b4914bSYatharth Kochar NOTICE("BL1: Booting BL32\n"); 251f3b4914bSYatharth Kochar #else 252d178637dSJuan Castillo NOTICE("BL1: Booting BL31\n"); 253f3b4914bSYatharth Kochar #endif /* AARCH32 */ 254f3b4914bSYatharth Kochar print_entry_point_info(bl_ep_info); 2554f6ad66aSAchin Gupta } 25635e8c766SSandrine Bailleux 25735e8c766SSandrine Bailleux #if SPIN_ON_BL1_EXIT 25835e8c766SSandrine Bailleux void print_debug_loop_message(void) 25935e8c766SSandrine Bailleux { 26035e8c766SSandrine Bailleux NOTICE("BL1: Debug loop, spinning forever\n"); 26135e8c766SSandrine Bailleux NOTICE("BL1: Please connect the debugger to continue\n"); 26235e8c766SSandrine Bailleux } 26335e8c766SSandrine Bailleux #endif 26448bfb88eSYatharth Kochar 26548bfb88eSYatharth Kochar /******************************************************************************* 26648bfb88eSYatharth Kochar * Top level handler for servicing BL1 SMCs. 26748bfb88eSYatharth Kochar ******************************************************************************/ 26848bfb88eSYatharth Kochar register_t bl1_smc_handler(unsigned int smc_fid, 26948bfb88eSYatharth Kochar register_t x1, 27048bfb88eSYatharth Kochar register_t x2, 27148bfb88eSYatharth Kochar register_t x3, 27248bfb88eSYatharth Kochar register_t x4, 27348bfb88eSYatharth Kochar void *cookie, 27448bfb88eSYatharth Kochar void *handle, 27548bfb88eSYatharth Kochar unsigned int flags) 27648bfb88eSYatharth Kochar { 27748bfb88eSYatharth Kochar 27848bfb88eSYatharth Kochar #if TRUSTED_BOARD_BOOT 27948bfb88eSYatharth Kochar /* 28048bfb88eSYatharth Kochar * Dispatch FWU calls to FWU SMC handler and return its return 28148bfb88eSYatharth Kochar * value 28248bfb88eSYatharth Kochar */ 28348bfb88eSYatharth Kochar if (is_fwu_fid(smc_fid)) { 28448bfb88eSYatharth Kochar return bl1_fwu_smc_handler(smc_fid, x1, x2, x3, x4, cookie, 28548bfb88eSYatharth Kochar handle, flags); 28648bfb88eSYatharth Kochar } 28748bfb88eSYatharth Kochar #endif 28848bfb88eSYatharth Kochar 28948bfb88eSYatharth Kochar switch (smc_fid) { 29048bfb88eSYatharth Kochar case BL1_SMC_CALL_COUNT: 29148bfb88eSYatharth Kochar SMC_RET1(handle, BL1_NUM_SMC_CALLS); 29248bfb88eSYatharth Kochar 29348bfb88eSYatharth Kochar case BL1_SMC_UID: 29448bfb88eSYatharth Kochar SMC_UUID_RET(handle, bl1_svc_uid); 29548bfb88eSYatharth Kochar 29648bfb88eSYatharth Kochar case BL1_SMC_VERSION: 29748bfb88eSYatharth Kochar SMC_RET1(handle, BL1_SMC_MAJOR_VER | BL1_SMC_MINOR_VER); 29848bfb88eSYatharth Kochar 29948bfb88eSYatharth Kochar default: 30048bfb88eSYatharth Kochar break; 30148bfb88eSYatharth Kochar } 30248bfb88eSYatharth Kochar 30348bfb88eSYatharth Kochar WARN("Unimplemented BL1 SMC Call: 0x%x \n", smc_fid); 30448bfb88eSYatharth Kochar SMC_RET1(handle, SMC_UNK); 30548bfb88eSYatharth Kochar } 306