1 /* 2 * Copyright (c) 2016-2018, ARM Limited and Contributors. All rights reserved. 3 * 4 * SPDX-License-Identifier: BSD-3-Clause 5 */ 6 7 #include <assert.h> 8 9 #include <platform_def.h> 10 11 #include <common/debug.h> 12 #include <drivers/arm/tzc_dmc500.h> 13 #include <plat/arm/common/plat_arm.h> 14 15 /******************************************************************************* 16 * Initialize the DMC500-TrustZone Controller for ARM standard platforms. 17 * When booting an EL3 payload, this is simplified: we configure region 0 with 18 * secure access only and do not enable any other region. 19 ******************************************************************************/ 20 void arm_tzc_dmc500_setup(tzc_dmc500_driver_data_t *plat_driver_data, 21 const arm_tzc_regions_info_t *tzc_regions) 22 { 23 #ifndef EL3_PAYLOAD_BASE 24 unsigned int region_index = 1U; 25 const arm_tzc_regions_info_t *p; 26 const arm_tzc_regions_info_t init_tzc_regions[] = { 27 ARM_TZC_REGIONS_DEF, 28 {0} 29 }; 30 #endif 31 32 assert(plat_driver_data); 33 34 INFO("Configuring DMC-500 TZ Settings\n"); 35 36 tzc_dmc500_driver_init(plat_driver_data); 37 38 #ifndef EL3_PAYLOAD_BASE 39 if (tzc_regions == NULL) 40 p = init_tzc_regions; 41 else 42 p = tzc_regions; 43 44 /* Region 0 set to no access by default */ 45 tzc_dmc500_configure_region0(TZC_REGION_S_NONE, 0); 46 47 /* Rest Regions set according to tzc_regions array */ 48 for (; p->base != 0ULL; p++) { 49 tzc_dmc500_configure_region(region_index, p->base, p->end, 50 p->sec_attr, p->nsaid_permissions); 51 region_index++; 52 } 53 54 INFO("Total %u regions set.\n", region_index); 55 56 #else 57 /* Allow secure access only to DRAM for EL3 payloads */ 58 tzc_dmc500_configure_region0(TZC_REGION_S_RDWR, 0); 59 #endif 60 /* 61 * Raise an exception if a NS device tries to access secure memory 62 * TODO: Add interrupt handling support. 63 */ 64 tzc_dmc500_set_action(TZC_ACTION_RV_LOWERR); 65 66 /* 67 * Flush the configuration settings to have an affect. Validate 68 * flush by checking FILTER_EN is set on region 1 attributes 69 * register. 70 */ 71 tzc_dmc500_config_complete(); 72 73 /* 74 * Wait for the flush to complete. 75 * TODO: Have a timeout for this loop 76 */ 77 while (tzc_dmc500_verify_complete()) 78 ; 79 } 80