14f6ad66aSAchin Gupta /* 2ec7c29abSBoyan Karatotev * Copyright (c) 2013-2025, Arm Limited and Contributors. All rights reserved. 34f6ad66aSAchin Gupta * 482cb2c1aSdp-arm * SPDX-License-Identifier: BSD-3-Clause 54f6ad66aSAchin Gupta */ 64f6ad66aSAchin Gupta 709d40e0eSAntonio Nino Diaz #include <assert.h> 809d40e0eSAntonio Nino Diaz 909d40e0eSAntonio Nino Diaz #include <platform_def.h> 1009d40e0eSAntonio Nino Diaz 1197043ac9SDan Handley #include <arch.h> 12ed108b56SAlexei Fedorov #include <arch_features.h> 134f6ad66aSAchin Gupta #include <arch_helpers.h> 1409d40e0eSAntonio Nino Diaz #include <bl1/bl1.h> 1509d40e0eSAntonio Nino Diaz #include <common/bl_common.h> 16758ccb80SChris Kay #include <common/build_message.h> 1709d40e0eSAntonio Nino Diaz #include <common/debug.h> 1809d40e0eSAntonio Nino Diaz #include <drivers/auth/auth_mod.h> 190aa0b3afSManish V Badarkhe #include <drivers/auth/crypto_mod.h> 2009d40e0eSAntonio Nino Diaz #include <drivers/console.h> 21ed8f06ddSthagon01-arm #include <lib/bootmarker_capture.h> 226bb96fa6SBoyan Karatotev #include <lib/cpus/errata.h> 23*a873d26fSBoyan Karatotev #include <lib/el3_runtime/context_mgmt.h> 24d158d425SBoyan Karatotev #include <lib/extensions/pauth.h> 25ed8f06ddSthagon01-arm #include <lib/pmf/pmf.h> 2609d40e0eSAntonio Nino Diaz #include <lib/utils.h> 2709d40e0eSAntonio Nino Diaz #include <plat/common/platform.h> 28085e80ecSAntonio Nino Diaz #include <smccc_helpers.h> 2909d40e0eSAntonio Nino Diaz #include <tools_share/uuid.h> 3009d40e0eSAntonio Nino Diaz 312a4b4b71SIsla Mitchell #include "bl1_private.h" 3248bfb88eSYatharth Kochar 337baff11fSYatharth Kochar static void bl1_load_bl2(void); 3429fb905dSVikram Kanigiri 35530ceda5SAlexei Fedorov #if ENABLE_PAUTH 36530ceda5SAlexei Fedorov uint64_t bl1_apiakey[2]; 37530ceda5SAlexei Fedorov #endif 38530ceda5SAlexei Fedorov 39ed8f06ddSthagon01-arm #if ENABLE_RUNTIME_INSTRUMENTATION 40ed8f06ddSthagon01-arm PMF_REGISTER_SERVICE(bl_svc, PMF_RT_INSTR_SVC_ID, 41ed8f06ddSthagon01-arm BL_TOTAL_IDS, PMF_DUMP_ENABLE) 42ed8f06ddSthagon01-arm #endif 43ed8f06ddSthagon01-arm 448f55dfb4SSandrine Bailleux /******************************************************************************* 45cd7d6b0eSAntonio Nino Diaz * Setup function for BL1. 46d158d425SBoyan Karatotev * Also perform late architectural and platform specific initialization. 47d158d425SBoyan Karatotev * It also queries the platform to load and run next BL image. Only called 48d158d425SBoyan Karatotev * by the primary cpu after a cold boot. 49cd7d6b0eSAntonio Nino Diaz ******************************************************************************/ 50d158d425SBoyan Karatotev void __no_pauth bl1_main(void) 51cd7d6b0eSAntonio Nino Diaz { 52d158d425SBoyan Karatotev unsigned int image_id; 53d158d425SBoyan Karatotev 54ae770fedSYann Gautier /* Enable early console if EARLY_CONSOLE flag is enabled */ 55ae770fedSYann Gautier plat_setup_early_console(); 56ae770fedSYann Gautier 57cd7d6b0eSAntonio Nino Diaz /* Perform early platform-specific setup */ 58cd7d6b0eSAntonio Nino Diaz bl1_early_platform_setup(); 59cd7d6b0eSAntonio Nino Diaz 60cd7d6b0eSAntonio Nino Diaz /* Perform late platform-specific setup */ 61cd7d6b0eSAntonio Nino Diaz bl1_plat_arch_setup(); 62cd7d6b0eSAntonio Nino Diaz 63*a873d26fSBoyan Karatotev /* Init registers that don't get contexted */ 64*a873d26fSBoyan Karatotev cm_manage_extensions_el3(plat_my_core_pos()); 65*a873d26fSBoyan Karatotev 66*a873d26fSBoyan Karatotev /* When BL2 runs in Secure world, it needs a coherent context. */ 67*a873d26fSBoyan Karatotev #if !BL2_RUNS_AT_EL3 68*a873d26fSBoyan Karatotev /* Init per-world context registers. */ 69*a873d26fSBoyan Karatotev cm_manage_extensions_per_world(); 70*a873d26fSBoyan Karatotev #endif 717baff11fSYatharth Kochar 72ed8f06ddSthagon01-arm #if ENABLE_RUNTIME_INSTRUMENTATION 73ed8f06ddSthagon01-arm PMF_CAPTURE_TIMESTAMP(bl_svc, BL1_ENTRY, PMF_CACHE_MAINT); 74ed8f06ddSthagon01-arm #endif 75ed8f06ddSthagon01-arm 766ad2e461SDan Handley /* Announce our arrival */ 776ad2e461SDan Handley NOTICE(FIRMWARE_WELCOME_STR); 78758ccb80SChris Kay NOTICE("BL1: %s\n", build_version_string); 796ad2e461SDan Handley NOTICE("BL1: %s\n", build_message); 806ad2e461SDan Handley 813443a702SJohn Powell INFO("BL1: RAM %p - %p\n", (void *)BL1_RAM_BASE, (void *)BL1_RAM_LIMIT); 826ad2e461SDan Handley 8310bcd761SJeenu Viswambharan print_errata_status(); 844f6ad66aSAchin Gupta 85aa61368eSAntonio Nino Diaz #if ENABLE_ASSERTIONS 86f3b4914bSYatharth Kochar u_register_t val; 874f6ad66aSAchin Gupta /* 884f6ad66aSAchin Gupta * Ensure that MMU/Caches and coherency are turned on 894f6ad66aSAchin Gupta */ 90402b3cf8SJulius Werner #ifdef __aarch64__ 91ce4c820dSDan Handley val = read_sctlr_el3(); 92402b3cf8SJulius Werner #else 93402b3cf8SJulius Werner val = read_sctlr(); 94f3b4914bSYatharth Kochar #endif 953443a702SJohn Powell assert((val & SCTLR_M_BIT) != 0); 963443a702SJohn Powell assert((val & SCTLR_C_BIT) != 0); 973443a702SJohn Powell assert((val & SCTLR_I_BIT) != 0); 98ce4c820dSDan Handley /* 99ce4c820dSDan Handley * Check that Cache Writeback Granule (CWG) in CTR_EL0 matches the 100ce4c820dSDan Handley * provided platform value 101ce4c820dSDan Handley */ 102ce4c820dSDan Handley val = (read_ctr_el0() >> CTR_CWG_SHIFT) & CTR_CWG_MASK; 103ce4c820dSDan Handley /* 104ce4c820dSDan Handley * If CWG is zero, then no CWG information is available but we can 105ce4c820dSDan Handley * at least check the platform value is less than the architectural 106ce4c820dSDan Handley * maximum. 107ce4c820dSDan Handley */ 108ce4c820dSDan Handley if (val != 0) 109ce4c820dSDan Handley assert(CACHE_WRITEBACK_GRANULE == SIZE_FROM_LOG2_WORDS(val)); 110ce4c820dSDan Handley else 111ce4c820dSDan Handley assert(CACHE_WRITEBACK_GRANULE <= MAX_CACHE_LINE_SIZE); 112aa61368eSAntonio Nino Diaz #endif /* ENABLE_ASSERTIONS */ 1134f6ad66aSAchin Gupta 1144f6ad66aSAchin Gupta /* Perform remaining generic architectural setup from EL3 */ 1154f6ad66aSAchin Gupta bl1_arch_setup(); 1164f6ad66aSAchin Gupta 1170aa0b3afSManish V Badarkhe crypto_mod_init(); 1180aa0b3afSManish V Badarkhe 1197baff11fSYatharth Kochar /* Initialize authentication module */ 1207baff11fSYatharth Kochar auth_mod_init(); 1217baff11fSYatharth Kochar 12248ba0345SManish V Badarkhe /* Initialize the measured boot */ 12348ba0345SManish V Badarkhe bl1_plat_mboot_init(); 12448ba0345SManish V Badarkhe 1254f6ad66aSAchin Gupta /* Perform platform setup in BL1. */ 1264f6ad66aSAchin Gupta bl1_platform_setup(); 1274f6ad66aSAchin Gupta 1287baff11fSYatharth Kochar /* Get the image id of next image to load and run. */ 1297baff11fSYatharth Kochar image_id = bl1_plat_get_next_image_id(); 1307baff11fSYatharth Kochar 13148bfb88eSYatharth Kochar /* 13248bfb88eSYatharth Kochar * We currently interpret any image id other than 13348bfb88eSYatharth Kochar * BL2_IMAGE_ID as the start of firmware update. 13448bfb88eSYatharth Kochar */ 1357baff11fSYatharth Kochar if (image_id == BL2_IMAGE_ID) 1367baff11fSYatharth Kochar bl1_load_bl2(); 13748bfb88eSYatharth Kochar else 13848bfb88eSYatharth Kochar NOTICE("BL1-FWU: *******FWU Process Started*******\n"); 1397baff11fSYatharth Kochar 14048ba0345SManish V Badarkhe /* Teardown the measured boot driver */ 14148ba0345SManish V Badarkhe bl1_plat_mboot_finish(); 14248ba0345SManish V Badarkhe 143055c97afSLauren Wehrmeister crypto_mod_finish(); 144055c97afSLauren Wehrmeister 1457baff11fSYatharth Kochar bl1_prepare_next_image(image_id); 1460b32628eSAntonio Nino Diaz 147ed8f06ddSthagon01-arm #if ENABLE_RUNTIME_INSTRUMENTATION 148ed8f06ddSthagon01-arm PMF_CAPTURE_TIMESTAMP(bl_svc, BL1_EXIT, PMF_CACHE_MAINT); 149ed8f06ddSthagon01-arm #endif 150ed8f06ddSthagon01-arm 1510b32628eSAntonio Nino Diaz console_flush(); 152d158d425SBoyan Karatotev 153d158d425SBoyan Karatotev /* Disable pointer authentication before jumping to next boot image. */ 154d158d425SBoyan Karatotev if (is_feat_pauth_supported()) { 155d158d425SBoyan Karatotev pauth_disable_el3(); 156d158d425SBoyan Karatotev } 1577baff11fSYatharth Kochar } 1587baff11fSYatharth Kochar 1597baff11fSYatharth Kochar /******************************************************************************* 1607baff11fSYatharth Kochar * This function locates and loads the BL2 raw binary image in the trusted SRAM. 1617baff11fSYatharth Kochar * Called by the primary cpu after a cold boot. 1627baff11fSYatharth Kochar * TODO: Add support for alternative image load mechanism e.g using virtio/elf 1637baff11fSYatharth Kochar * loader etc. 1647baff11fSYatharth Kochar ******************************************************************************/ 165ce3f9a6dSRoberto Vargas static void bl1_load_bl2(void) 1667baff11fSYatharth Kochar { 1673443a702SJohn Powell image_desc_t *desc; 1683443a702SJohn Powell image_info_t *info; 1697baff11fSYatharth Kochar int err; 1707baff11fSYatharth Kochar 1717baff11fSYatharth Kochar /* Get the image descriptor */ 1723443a702SJohn Powell desc = bl1_plat_get_image_desc(BL2_IMAGE_ID); 1733443a702SJohn Powell assert(desc != NULL); 1747baff11fSYatharth Kochar 1757baff11fSYatharth Kochar /* Get the image info */ 1763443a702SJohn Powell info = &desc->image_info; 17716948ae1SJuan Castillo INFO("BL1: Loading BL2\n"); 17816948ae1SJuan Castillo 179566034fcSSoby Mathew err = bl1_plat_handle_pre_image_load(BL2_IMAGE_ID); 1803443a702SJohn Powell if (err != 0) { 18111f001cbSMasahiro Yamada ERROR("Failure in pre image load handling of BL2 (%d)\n", err); 18211f001cbSMasahiro Yamada plat_error_handler(err); 18311f001cbSMasahiro Yamada } 18411f001cbSMasahiro Yamada 1853443a702SJohn Powell err = load_auth_image(BL2_IMAGE_ID, info); 1863443a702SJohn Powell if (err != 0) { 1876ad2e461SDan Handley ERROR("Failed to load BL2 firmware.\n"); 18840fc6cd1SJuan Castillo plat_error_handler(err); 1894112bfa0SVikram Kanigiri } 19001df3c14SJuan Castillo 19111f001cbSMasahiro Yamada /* Allow platform to handle image information. */ 192566034fcSSoby Mathew err = bl1_plat_handle_post_image_load(BL2_IMAGE_ID); 1933443a702SJohn Powell if (err != 0) { 19411f001cbSMasahiro Yamada ERROR("Failure in post image load handling of BL2 (%d)\n", err); 19511f001cbSMasahiro Yamada plat_error_handler(err); 19611f001cbSMasahiro Yamada } 19711f001cbSMasahiro Yamada 1987baff11fSYatharth Kochar NOTICE("BL1: Booting BL2\n"); 1994f6ad66aSAchin Gupta } 2004f6ad66aSAchin Gupta 2014f6ad66aSAchin Gupta /******************************************************************************* 202f3b4914bSYatharth Kochar * Function called just before handing over to the next BL to inform the user 203f3b4914bSYatharth Kochar * about the boot progress. In debug mode, also print details about the BL 204f3b4914bSYatharth Kochar * image's execution context. 2054f6ad66aSAchin Gupta ******************************************************************************/ 206f3b4914bSYatharth Kochar void bl1_print_next_bl_ep_info(const entry_point_info_t *bl_ep_info) 2074f6ad66aSAchin Gupta { 208402b3cf8SJulius Werner #ifdef __aarch64__ 209d178637dSJuan Castillo NOTICE("BL1: Booting BL31\n"); 210402b3cf8SJulius Werner #else 211402b3cf8SJulius Werner NOTICE("BL1: Booting BL32\n"); 212402b3cf8SJulius Werner #endif /* __aarch64__ */ 213f3b4914bSYatharth Kochar print_entry_point_info(bl_ep_info); 2144f6ad66aSAchin Gupta } 21535e8c766SSandrine Bailleux 21635e8c766SSandrine Bailleux #if SPIN_ON_BL1_EXIT 21735e8c766SSandrine Bailleux void print_debug_loop_message(void) 21835e8c766SSandrine Bailleux { 21935e8c766SSandrine Bailleux NOTICE("BL1: Debug loop, spinning forever\n"); 22035e8c766SSandrine Bailleux NOTICE("BL1: Please connect the debugger to continue\n"); 22135e8c766SSandrine Bailleux } 22235e8c766SSandrine Bailleux #endif 22348bfb88eSYatharth Kochar 22448bfb88eSYatharth Kochar /******************************************************************************* 22548bfb88eSYatharth Kochar * Top level handler for servicing BL1 SMCs. 22648bfb88eSYatharth Kochar ******************************************************************************/ 2272fe75a2dSZelalem u_register_t bl1_smc_handler(unsigned int smc_fid, 2282fe75a2dSZelalem u_register_t x1, 2292fe75a2dSZelalem u_register_t x2, 2302fe75a2dSZelalem u_register_t x3, 2312fe75a2dSZelalem u_register_t x4, 23248bfb88eSYatharth Kochar void *cookie, 23348bfb88eSYatharth Kochar void *handle, 23448bfb88eSYatharth Kochar unsigned int flags) 23548bfb88eSYatharth Kochar { 236a14988c6SJimmy Brisson /* BL1 Service UUID */ 237a14988c6SJimmy Brisson DEFINE_SVC_UUID2(bl1_svc_uid, 238a14988c6SJimmy Brisson U(0xd46739fd), 0xcb72, 0x9a4d, 0xb5, 0x75, 239a14988c6SJimmy Brisson 0x67, 0x15, 0xd6, 0xf4, 0xbb, 0x4a); 240a14988c6SJimmy Brisson 24148bfb88eSYatharth Kochar 24248bfb88eSYatharth Kochar #if TRUSTED_BOARD_BOOT 24348bfb88eSYatharth Kochar /* 24448bfb88eSYatharth Kochar * Dispatch FWU calls to FWU SMC handler and return its return 24548bfb88eSYatharth Kochar * value 24648bfb88eSYatharth Kochar */ 24748bfb88eSYatharth Kochar if (is_fwu_fid(smc_fid)) { 24848bfb88eSYatharth Kochar return bl1_fwu_smc_handler(smc_fid, x1, x2, x3, x4, cookie, 24948bfb88eSYatharth Kochar handle, flags); 25048bfb88eSYatharth Kochar } 25148bfb88eSYatharth Kochar #endif 25248bfb88eSYatharth Kochar 25348bfb88eSYatharth Kochar switch (smc_fid) { 25448bfb88eSYatharth Kochar case BL1_SMC_CALL_COUNT: 25548bfb88eSYatharth Kochar SMC_RET1(handle, BL1_NUM_SMC_CALLS); 25648bfb88eSYatharth Kochar 25748bfb88eSYatharth Kochar case BL1_SMC_UID: 25848bfb88eSYatharth Kochar SMC_UUID_RET(handle, bl1_svc_uid); 25948bfb88eSYatharth Kochar 26048bfb88eSYatharth Kochar case BL1_SMC_VERSION: 26148bfb88eSYatharth Kochar SMC_RET1(handle, BL1_SMC_MAJOR_VER | BL1_SMC_MINOR_VER); 26248bfb88eSYatharth Kochar 26348bfb88eSYatharth Kochar default: 26448bfb88eSYatharth Kochar WARN("Unimplemented BL1 SMC Call: 0x%x\n", smc_fid); 26548bfb88eSYatharth Kochar SMC_RET1(handle, SMC_UNK); 26648bfb88eSYatharth Kochar } 2673443a702SJohn Powell } 268a4409008Sdp-arm 269a4409008Sdp-arm /******************************************************************************* 270a4409008Sdp-arm * BL1 SMC wrapper. This function is only used in AArch32 mode to ensure ABI 271a4409008Sdp-arm * compliance when invoking bl1_smc_handler. 272a4409008Sdp-arm ******************************************************************************/ 2732fe75a2dSZelalem u_register_t bl1_smc_wrapper(uint32_t smc_fid, 274a4409008Sdp-arm void *cookie, 275a4409008Sdp-arm void *handle, 276a4409008Sdp-arm unsigned int flags) 277a4409008Sdp-arm { 2782fe75a2dSZelalem u_register_t x1, x2, x3, x4; 279a4409008Sdp-arm 280466bb285SZelalem assert(handle != NULL); 281a4409008Sdp-arm 282a4409008Sdp-arm get_smc_params_from_ctx(handle, x1, x2, x3, x4); 283a4409008Sdp-arm return bl1_smc_handler(smc_fid, x1, x2, x3, x4, cookie, handle, flags); 284a4409008Sdp-arm } 285