1 /* 2 * Copyright (c) 2022-2024, Arm Limited and Contributors. All rights reserved. 3 * 4 * SPDX-License-Identifier: BSD-3-Clause 5 */ 6 7 #include <arch_features.h> 8 #include <common/debug.h> 9 #include <common/feat_detect.h> 10 11 static bool tainted; 12 13 /******************************************************************************* 14 * This section lists the wrapper modules for each feature to evaluate the 15 * feature states (FEAT_STATE_ALWAYS and FEAT_STATE_CHECK) and perform 16 * necessary action as below: 17 * 18 * It verifies whether the FEAT_XXX (eg: FEAT_SB) is supported by the PE or not. 19 * Without this check an exception would occur during context save/restore 20 * routines, if the feature is enabled but not supported by PE. 21 ******************************************************************************/ 22 23 #define feat_detect_panic(a, b) ((a) ? (void)0 : feature_panic(b)) 24 25 /******************************************************************************* 26 * Function : feature_panic 27 * Customised panic function with error logging mechanism to list the feature 28 * not supported by the PE. 29 ******************************************************************************/ 30 static inline void feature_panic(char *feat_name) 31 { 32 ERROR("FEAT_%s not supported by the PE\n", feat_name); 33 panic(); 34 } 35 36 /******************************************************************************* 37 * Function : check_feature 38 * Check for a valid combination of build time flags (ENABLE_FEAT_xxx) and 39 * feature availability on the hardware. <min> is the smallest feature 40 * ID field value that is required for that feature. 41 * Triggers a panic later if a feature is forcefully enabled, but not 42 * available on the PE. Also will panic if the hardware feature ID field 43 * is larger than the maximum known and supported number, specified by <max>. 44 * 45 * We force inlining here to let the compiler optimise away the whole check 46 * if the feature is disabled at build time (FEAT_STATE_DISABLED). 47 ******************************************************************************/ 48 static inline void __attribute((__always_inline__)) 49 check_feature(int state, unsigned long field, const char *feat_name, 50 unsigned int min, unsigned int max) 51 { 52 if (state == FEAT_STATE_ALWAYS && field < min) { 53 ERROR("FEAT_%s not supported by the PE\n", feat_name); 54 tainted = true; 55 } 56 if (state >= FEAT_STATE_ALWAYS && field > max) { 57 ERROR("FEAT_%s is version %ld, but is only known up to version %d\n", 58 feat_name, field, max); 59 tainted = true; 60 } 61 } 62 63 /************************************************ 64 * Feature : FEAT_PAUTH (Pointer Authentication) 65 ***********************************************/ 66 static void read_feat_pauth(void) 67 { 68 #if (ENABLE_PAUTH == FEAT_STATE_ALWAYS) || (CTX_INCLUDE_PAUTH_REGS == FEAT_STATE_ALWAYS) 69 feat_detect_panic(is_armv8_3_pauth_present(), "PAUTH"); 70 #endif 71 } 72 73 /**************************************************** 74 * Feature : FEAT_BTI (Branch Target Identification) 75 ***************************************************/ 76 static void read_feat_bti(void) 77 { 78 #if (ENABLE_BTI == FEAT_STATE_ALWAYS) 79 feat_detect_panic(is_armv8_5_bti_present(), "BTI"); 80 #endif 81 } 82 83 /************************************************** 84 * Feature : FEAT_RME (Realm Management Extension) 85 *************************************************/ 86 static void read_feat_rme(void) 87 { 88 #if (ENABLE_RME == FEAT_STATE_ALWAYS) 89 feat_detect_panic((get_armv9_2_feat_rme_support() != 90 RME_NOT_IMPLEMENTED), "RME"); 91 #endif 92 } 93 94 /****************************************************************** 95 * Feature : FEAT_RNG_TRAP (Trapping support for RNDR/RNDRRS) 96 *****************************************************************/ 97 static void read_feat_rng_trap(void) 98 { 99 #if (ENABLE_FEAT_RNG_TRAP == FEAT_STATE_ALWAYS) 100 feat_detect_panic(is_feat_rng_trap_present(), "RNG_TRAP"); 101 #endif 102 } 103 104 /*********************************************************************************** 105 * TF-A supports many Arm architectural features starting from arch version 106 * (8.0 till 8.7+). These features are mostly enabled through build flags. This 107 * mechanism helps in validating these build flags in the early boot phase 108 * either in BL1 or BL31 depending on the platform and assists in identifying 109 * and notifying the features which are enabled but not supported by the PE. 110 * 111 * It reads all the enabled features ID-registers and ensures the features 112 * are supported by the PE. 113 * In case if they aren't it stops booting at an early phase and logs the error 114 * messages, notifying the platforms about the features that are not supported. 115 * 116 * Further the procedure is implemented with a tri-state approach for each feature: 117 * ENABLE_FEAT_xxx = 0 : The feature is disabled statically at compile time 118 * ENABLE_FEAT_xxx = 1 : The feature is enabled and must be present in hardware. 119 * There will be panic if feature is not present at cold boot. 120 * ENABLE_FEAT_xxx = 2 : The feature is enabled but dynamically enabled at runtime 121 * depending on hardware capability. 122 * 123 * For better readability, state values are defined with macros, namely: 124 * { FEAT_STATE_DISABLED, FEAT_STATE_ALWAYS, FEAT_STATE_CHECK }, taking values 125 * { 0, 1, 2 }, respectively, as their naming. 126 **********************************************************************************/ 127 void detect_arch_features(void) 128 { 129 tainted = false; 130 131 /* v8.0 features */ 132 check_feature(ENABLE_FEAT_SB, read_feat_sb_id_field(), "SB", 133 SB_IMPLEMENTED, SB_IMPLEMENTED); 134 check_feature(ENABLE_FEAT_CSV2_2, read_feat_csv2_id_field(), 135 "CSV2_2", CSV2_2_IMPLEMENTED, CSV2_3_IMPLEMENTED); 136 /* 137 * Even though the PMUv3 is an OPTIONAL feature, it is always 138 * implemented and Arm prescribes so. So assume it will be there and do 139 * away with a flag for it. This is used to check minor PMUv3px 140 * revisions so that we catch them as they come along 141 */ 142 check_feature(FEAT_STATE_ALWAYS, read_feat_pmuv3_id_field(), 143 "PMUv3", 1, ID_AA64DFR0_PMUVER_PMUV3P7); 144 145 /* v8.1 features */ 146 check_feature(ENABLE_FEAT_PAN, read_feat_pan_id_field(), "PAN", 147 PAN_IMPLEMENTED, PAN3_IMPLEMENTED); 148 check_feature(ENABLE_FEAT_VHE, read_feat_vhe_id_field(), "VHE", 1, 1); 149 150 /* v8.2 features */ 151 check_feature(ENABLE_SVE_FOR_NS, read_feat_sve_id_field(), 152 "SVE", SVE_IMPLEMENTED, SVE_IMPLEMENTED); 153 check_feature(ENABLE_FEAT_RAS, read_feat_ras_id_field(), "RAS", 1, 2); 154 155 /* v8.3 features */ 156 read_feat_pauth(); 157 158 /* v8.4 features */ 159 check_feature(ENABLE_FEAT_DIT, read_feat_dit_id_field(), "DIT", 160 DIT_IMPLEMENTED, DIT_IMPLEMENTED); 161 check_feature(ENABLE_FEAT_AMU, read_feat_amu_id_field(), 162 "AMUv1", 1, 2); 163 check_feature(ENABLE_FEAT_MPAM, read_feat_mpam_version(), 164 "MPAM", 1, 17); 165 check_feature(CTX_INCLUDE_NEVE_REGS, read_feat_nv_id_field(), 166 "NV2", NV2_IMPLEMENTED, NV2_IMPLEMENTED); 167 check_feature(ENABLE_FEAT_SEL2, read_feat_sel2_id_field(), 168 "SEL2", 1, 1); 169 check_feature(ENABLE_TRF_FOR_NS, read_feat_trf_id_field(), 170 "TRF", 1, 1); 171 172 /* v8.5 features */ 173 check_feature(ENABLE_FEAT_MTE2, get_armv8_5_mte_support(), "MTE2", 174 MTE_IMPLEMENTED_ELX, MTE_IMPLEMENTED_ASY); 175 check_feature(ENABLE_FEAT_RNG, read_feat_rng_id_field(), "RNG", 1, 1); 176 read_feat_bti(); 177 read_feat_rng_trap(); 178 179 /* v8.6 features */ 180 check_feature(ENABLE_FEAT_AMUv1p1, read_feat_amu_id_field(), 181 "AMUv1p1", 2, 2); 182 check_feature(ENABLE_FEAT_FGT, read_feat_fgt_id_field(), "FGT", 1, 1); 183 check_feature(ENABLE_FEAT_ECV, read_feat_ecv_id_field(), "ECV", 184 ECV_IMPLEMENTED, 2); 185 check_feature(ENABLE_FEAT_TWED, read_feat_twed_id_field(), 186 "TWED", TWED_IMPLEMENTED, TWED_IMPLEMENTED); 187 188 /* 189 * even though this is a "DISABLE" it does confusingly perform feature 190 * enablement duties like all other flags here. Check it against the HW 191 * feature when we intend to diverge from the default behaviour 192 */ 193 check_feature(DISABLE_MTPMU, read_feat_mtpmu_id_field(), "MTPMU", 194 MTPMU_IMPLEMENTED, MTPMU_IMPLEMENTED); 195 196 /* v8.7 features */ 197 check_feature(ENABLE_FEAT_HCX, read_feat_hcx_id_field(), "HCX", 198 HCX_IMPLEMENTED, HCX_IMPLEMENTED); 199 200 /* v8.9 features */ 201 check_feature(ENABLE_FEAT_TCR2, read_feat_tcr2_id_field(), 202 "TCR2", 1, 1); 203 check_feature(ENABLE_FEAT_S2PIE, read_feat_s2pie_id_field(), 204 "S2PIE", 1, 1); 205 check_feature(ENABLE_FEAT_S1PIE, read_feat_s1pie_id_field(), 206 "S1PIE", 1, 1); 207 check_feature(ENABLE_FEAT_S2POE, read_feat_s2poe_id_field(), 208 "S2POE", 1, 1); 209 check_feature(ENABLE_FEAT_S1POE, read_feat_s1poe_id_field(), 210 "S1POE", 1, 1); 211 check_feature(ENABLE_FEAT_CSV2_3, read_feat_csv2_id_field(), 212 "CSV2_3", 3, 3); 213 214 /* v9.0 features */ 215 check_feature(ENABLE_BRBE_FOR_NS, read_feat_brbe_id_field(), 216 "BRBE", BRBE_IMPLEMENTED, 2); 217 check_feature(ENABLE_TRBE_FOR_NS, read_feat_trbe_id_field(), 218 "TRBE", 1, 1); 219 220 /* v9.2 features */ 221 check_feature(ENABLE_SME_FOR_NS, read_feat_sme_id_field(), 222 "SME", SME_IMPLEMENTED, SME2_IMPLEMENTED); 223 check_feature(ENABLE_SME2_FOR_NS, read_feat_sme_id_field(), 224 "SME2", SME2_IMPLEMENTED, SME2_IMPLEMENTED); 225 226 /* v9.4 features */ 227 check_feature(ENABLE_FEAT_GCS, read_feat_gcs_id_field(), "GCS", 1, 1); 228 229 read_feat_rme(); 230 231 if (tainted) { 232 panic(); 233 } 234 } 235