1301d27d9SRadoslaw Biernacki /* 2cd75693fSJean-Philippe Brucker * Copyright (c) 2015-2024, Arm Limited and Contributors. All rights reserved. 3301d27d9SRadoslaw Biernacki * 4301d27d9SRadoslaw Biernacki * SPDX-License-Identifier: BSD-3-Clause 5301d27d9SRadoslaw Biernacki */ 6301d27d9SRadoslaw Biernacki 7301d27d9SRadoslaw Biernacki #include <assert.h> 8301d27d9SRadoslaw Biernacki 9301d27d9SRadoslaw Biernacki #include <common/bl_common.h> 10ffb07b04SMaxim Uvarov #include <drivers/arm/pl061_gpio.h> 116cd113feSJean-Philippe Brucker #include <lib/gpt_rme/gpt_rme.h> 12305825b4SRaymond Mao #include <lib/transfer_list.h> 13301d27d9SRadoslaw Biernacki #include <plat/common/platform.h> 1472d47829SJean-Philippe Brucker #if ENABLE_RME 15d079d65dSMathieu Poirier #ifdef PLAT_qemu 1672d47829SJean-Philippe Brucker #include <qemu_pas_def.h> 17d079d65dSMathieu Poirier #elif PLAT_qemu_sbsa 18d079d65dSMathieu Poirier #include <qemu_sbsa_pas_def.h> 19d079d65dSMathieu Poirier #endif /* PLAT_qemu */ 20d079d65dSMathieu Poirier #endif /* ENABLE_RME */ 216d59413bSMathieu Poirier #ifdef PLAT_qemu_sbsa 226d59413bSMathieu Poirier #include <sbsa_platform.h> 236d59413bSMathieu Poirier #endif 24301d27d9SRadoslaw Biernacki 25301d27d9SRadoslaw Biernacki #include "qemu_private.h" 26301d27d9SRadoslaw Biernacki 27a12cb77cSChen Baozi #define MAP_BL31_TOTAL MAP_REGION_FLAT( \ 28a12cb77cSChen Baozi BL31_BASE, \ 29a12cb77cSChen Baozi BL31_END - BL31_BASE, \ 30a12cb77cSChen Baozi MT_MEMORY | MT_RW | EL3_PAS) 31a12cb77cSChen Baozi #define MAP_BL31_RO MAP_REGION_FLAT( \ 32a12cb77cSChen Baozi BL_CODE_BASE, \ 33a12cb77cSChen Baozi BL_CODE_END - BL_CODE_BASE, \ 34a12cb77cSChen Baozi MT_CODE | EL3_PAS), \ 35a12cb77cSChen Baozi MAP_REGION_FLAT( \ 36a12cb77cSChen Baozi BL_RO_DATA_BASE, \ 37a12cb77cSChen Baozi BL_RO_DATA_END \ 38a12cb77cSChen Baozi - BL_RO_DATA_BASE, \ 39a12cb77cSChen Baozi MT_RO_DATA | EL3_PAS) 40a12cb77cSChen Baozi 41af994ae8SChen Baozi #if USE_COHERENT_MEM 42a12cb77cSChen Baozi #define MAP_BL_COHERENT_RAM MAP_REGION_FLAT( \ 43a12cb77cSChen Baozi BL_COHERENT_RAM_BASE, \ 44a12cb77cSChen Baozi BL_COHERENT_RAM_END \ 45a12cb77cSChen Baozi - BL_COHERENT_RAM_BASE, \ 46a12cb77cSChen Baozi MT_DEVICE | MT_RW | EL3_PAS) 47af994ae8SChen Baozi #endif 48a12cb77cSChen Baozi 49301d27d9SRadoslaw Biernacki /* 50301d27d9SRadoslaw Biernacki * Placeholder variables for copying the arguments that have been passed to 51301d27d9SRadoslaw Biernacki * BL3-1 from BL2. 52301d27d9SRadoslaw Biernacki */ 53301d27d9SRadoslaw Biernacki static entry_point_info_t bl32_image_ep_info; 54301d27d9SRadoslaw Biernacki static entry_point_info_t bl33_image_ep_info; 558ffe0b2eSJean-Philippe Brucker #if ENABLE_RME 568ffe0b2eSJean-Philippe Brucker static entry_point_info_t rmm_image_ep_info; 578ffe0b2eSJean-Philippe Brucker #endif 58305825b4SRaymond Mao static struct transfer_list_header *bl31_tl; 59301d27d9SRadoslaw Biernacki 60301d27d9SRadoslaw Biernacki /******************************************************************************* 61301d27d9SRadoslaw Biernacki * Perform any BL3-1 early platform setup. Here is an opportunity to copy 62301d27d9SRadoslaw Biernacki * parameters passed by the calling EL (S-EL1 in BL2 & EL3 in BL1) before 63301d27d9SRadoslaw Biernacki * they are lost (potentially). This needs to be done before the MMU is 64301d27d9SRadoslaw Biernacki * initialized so that the memory layout can be used while creating page 65301d27d9SRadoslaw Biernacki * tables. BL2 has flushed this information to memory, so we are guaranteed 66301d27d9SRadoslaw Biernacki * to pick up good data. 67301d27d9SRadoslaw Biernacki ******************************************************************************/ 68301d27d9SRadoslaw Biernacki void bl31_early_platform_setup2(u_register_t arg0, u_register_t arg1, 69301d27d9SRadoslaw Biernacki u_register_t arg2, u_register_t arg3) 70301d27d9SRadoslaw Biernacki { 71*7ad6775bSRaymond Mao bool is64 = false; 72*7ad6775bSRaymond Mao uint64_t hval; 73*7ad6775bSRaymond Mao 74301d27d9SRadoslaw Biernacki /* Initialize the console to provide early debug support */ 75301d27d9SRadoslaw Biernacki qemu_console_init(); 76301d27d9SRadoslaw Biernacki 77c681d02cSMarcin Juszkiewicz /* Platform names have to be lowercase. */ 78c681d02cSMarcin Juszkiewicz #ifdef PLAT_qemu_sbsa 796d59413bSMathieu Poirier sbsa_platform_init(); 80c681d02cSMarcin Juszkiewicz #endif 81c681d02cSMarcin Juszkiewicz 82301d27d9SRadoslaw Biernacki /* 83301d27d9SRadoslaw Biernacki * Check params passed from BL2 84301d27d9SRadoslaw Biernacki */ 85301d27d9SRadoslaw Biernacki bl_params_t *params_from_bl2 = (bl_params_t *)arg0; 86301d27d9SRadoslaw Biernacki 87301d27d9SRadoslaw Biernacki assert(params_from_bl2); 88301d27d9SRadoslaw Biernacki assert(params_from_bl2->h.type == PARAM_BL_PARAMS); 89301d27d9SRadoslaw Biernacki assert(params_from_bl2->h.version >= VERSION_2); 90301d27d9SRadoslaw Biernacki 91301d27d9SRadoslaw Biernacki bl_params_node_t *bl_params = params_from_bl2->head; 92301d27d9SRadoslaw Biernacki 93301d27d9SRadoslaw Biernacki /* 948ffe0b2eSJean-Philippe Brucker * Copy BL33, BL32 and RMM (if present), entry point information. 95301d27d9SRadoslaw Biernacki * They are stored in Secure RAM, in BL2's address space. 96301d27d9SRadoslaw Biernacki */ 97301d27d9SRadoslaw Biernacki while (bl_params) { 98*7ad6775bSRaymond Mao #ifdef __aarch64__ 99*7ad6775bSRaymond Mao if (bl_params->image_id == BL31_IMAGE_ID && 100*7ad6775bSRaymond Mao GET_RW(bl_params->ep_info->spsr) == MODE_RW_64) 101*7ad6775bSRaymond Mao is64 = true; 102*7ad6775bSRaymond Mao #endif 103301d27d9SRadoslaw Biernacki if (bl_params->image_id == BL32_IMAGE_ID) 104301d27d9SRadoslaw Biernacki bl32_image_ep_info = *bl_params->ep_info; 105301d27d9SRadoslaw Biernacki 1068ffe0b2eSJean-Philippe Brucker #if ENABLE_RME 1078ffe0b2eSJean-Philippe Brucker if (bl_params->image_id == RMM_IMAGE_ID) 1088ffe0b2eSJean-Philippe Brucker rmm_image_ep_info = *bl_params->ep_info; 1098ffe0b2eSJean-Philippe Brucker #endif 1108ffe0b2eSJean-Philippe Brucker 111301d27d9SRadoslaw Biernacki if (bl_params->image_id == BL33_IMAGE_ID) 112301d27d9SRadoslaw Biernacki bl33_image_ep_info = *bl_params->ep_info; 113301d27d9SRadoslaw Biernacki 114301d27d9SRadoslaw Biernacki bl_params = bl_params->next_params_info; 115301d27d9SRadoslaw Biernacki } 116301d27d9SRadoslaw Biernacki 117301d27d9SRadoslaw Biernacki if (!bl33_image_ep_info.pc) 118301d27d9SRadoslaw Biernacki panic(); 1198ffe0b2eSJean-Philippe Brucker #if ENABLE_RME 1208ffe0b2eSJean-Philippe Brucker if (!rmm_image_ep_info.pc) 1218ffe0b2eSJean-Philippe Brucker panic(); 1228ffe0b2eSJean-Philippe Brucker #endif 123305825b4SRaymond Mao 124*7ad6775bSRaymond Mao if (!TRANSFER_LIST || 125*7ad6775bSRaymond Mao !transfer_list_check_header((void *)arg3)) 126*7ad6775bSRaymond Mao return; 127*7ad6775bSRaymond Mao 128*7ad6775bSRaymond Mao if (is64) 129*7ad6775bSRaymond Mao hval = TRANSFER_LIST_HANDOFF_X1_VALUE(REGISTER_CONVENTION_VERSION); 130*7ad6775bSRaymond Mao else 131*7ad6775bSRaymond Mao hval = TRANSFER_LIST_HANDOFF_R1_VALUE(REGISTER_CONVENTION_VERSION); 132*7ad6775bSRaymond Mao 133*7ad6775bSRaymond Mao if (arg1 != hval) 134*7ad6775bSRaymond Mao return; 135*7ad6775bSRaymond Mao 136305825b4SRaymond Mao bl31_tl = (void *)arg3; /* saved TL address from BL2 */ 137305825b4SRaymond Mao } 138301d27d9SRadoslaw Biernacki 13972d47829SJean-Philippe Brucker #if ENABLE_RME 140d079d65dSMathieu Poirier #if PLAT_qemu 14172d47829SJean-Philippe Brucker /* 14272d47829SJean-Philippe Brucker * The GPT library might modify the gpt regions structure to optimize 14372d47829SJean-Philippe Brucker * the layout, so the array cannot be constant. 14472d47829SJean-Philippe Brucker */ 145d079d65dSMathieu Poirier static pas_region_t pas_regions[] = { 14672d47829SJean-Philippe Brucker QEMU_PAS_ROOT, 14772d47829SJean-Philippe Brucker QEMU_PAS_SECURE, 14872d47829SJean-Philippe Brucker QEMU_PAS_GPTS, 14972d47829SJean-Philippe Brucker QEMU_PAS_NS0, 15072d47829SJean-Philippe Brucker QEMU_PAS_REALM, 15172d47829SJean-Philippe Brucker QEMU_PAS_NS1, 15272d47829SJean-Philippe Brucker }; 15372d47829SJean-Philippe Brucker 154d079d65dSMathieu Poirier static inline void bl31_adjust_pas_regions(void) {} 155d079d65dSMathieu Poirier #elif PLAT_qemu_sbsa 156d079d65dSMathieu Poirier /* 157d079d65dSMathieu Poirier * The GPT library might modify the gpt regions structure to optimize 158d079d65dSMathieu Poirier * the layout, so the array cannot be constant. 159d079d65dSMathieu Poirier */ 160d079d65dSMathieu Poirier static pas_region_t pas_regions[] = { 161d079d65dSMathieu Poirier QEMU_PAS_ROOT, 162d079d65dSMathieu Poirier QEMU_PAS_SECURE, 163d079d65dSMathieu Poirier QEMU_PAS_GPTS, 164d079d65dSMathieu Poirier QEMU_PAS_REALM, 165d079d65dSMathieu Poirier QEMU_PAS_NS0, 166d079d65dSMathieu Poirier }; 167d079d65dSMathieu Poirier 168d079d65dSMathieu Poirier static void bl31_adjust_pas_regions(void) 169d079d65dSMathieu Poirier { 170d079d65dSMathieu Poirier uint64_t base_addr = 0, total_size = 0; 171d079d65dSMathieu Poirier struct platform_memory_data data; 172d079d65dSMathieu Poirier uint32_t node; 173d079d65dSMathieu Poirier 174d079d65dSMathieu Poirier /* 175d079d65dSMathieu Poirier * The amount of memory supported by the SBSA platform is dynamic 176d079d65dSMathieu Poirier * and dependent on user input. Since the configuration of the GPT 177d079d65dSMathieu Poirier * needs to reflect the system memory, QEMU_PAS_NS0 needs to be set 178d079d65dSMathieu Poirier * based on the information found in the device tree. 179d079d65dSMathieu Poirier */ 180d079d65dSMathieu Poirier 181d079d65dSMathieu Poirier for (node = 0; node < sbsa_platform_num_memnodes(); node++) { 182d079d65dSMathieu Poirier data = sbsa_platform_memory_node(node); 183d079d65dSMathieu Poirier 184d079d65dSMathieu Poirier if (data.nodeid == 0) { 185d079d65dSMathieu Poirier base_addr = data.addr_base; 186d079d65dSMathieu Poirier } 187d079d65dSMathieu Poirier 188d079d65dSMathieu Poirier total_size += data.addr_size; 189d079d65dSMathieu Poirier } 190d079d65dSMathieu Poirier 191d079d65dSMathieu Poirier /* Index '4' correspond to QEMU_PAS_NS0, see pas_regions[] above */ 192d079d65dSMathieu Poirier pas_regions[4].base_pa = base_addr; 193d079d65dSMathieu Poirier pas_regions[4].size = total_size; 194d079d65dSMathieu Poirier } 195d079d65dSMathieu Poirier #endif /* PLAT_qemu */ 196d079d65dSMathieu Poirier 197d079d65dSMathieu Poirier static void bl31_plat_gpt_setup(void) 198d079d65dSMathieu Poirier { 19972d47829SJean-Philippe Brucker /* 20072d47829SJean-Philippe Brucker * Initialize entire protected space to GPT_GPI_ANY. With each L0 entry 20172d47829SJean-Philippe Brucker * covering 1GB (currently the only supported option), then covering 20272d47829SJean-Philippe Brucker * 256TB of RAM (48-bit PA) would require a 2MB L0 region. At the 20372d47829SJean-Philippe Brucker * moment we use a 8KB table, which covers 1TB of RAM (40-bit PA). 20472d47829SJean-Philippe Brucker */ 2057b015e12SMathieu Poirier if (gpt_init_l0_tables(PLATFORM_GPCCR_PPS, PLAT_QEMU_L0_GPT_BASE, 20672d47829SJean-Philippe Brucker PLAT_QEMU_L0_GPT_SIZE + 20772d47829SJean-Philippe Brucker PLAT_QEMU_GPT_BITLOCK_SIZE) < 0) { 20872d47829SJean-Philippe Brucker ERROR("gpt_init_l0_tables() failed!\n"); 20972d47829SJean-Philippe Brucker panic(); 21072d47829SJean-Philippe Brucker } 21172d47829SJean-Philippe Brucker 212d079d65dSMathieu Poirier bl31_adjust_pas_regions(); 213d079d65dSMathieu Poirier 21472d47829SJean-Philippe Brucker /* Carve out defined PAS ranges. */ 21572d47829SJean-Philippe Brucker if (gpt_init_pas_l1_tables(GPCCR_PGS_4K, 21672d47829SJean-Philippe Brucker PLAT_QEMU_L1_GPT_BASE, 21772d47829SJean-Philippe Brucker PLAT_QEMU_L1_GPT_SIZE, 21872d47829SJean-Philippe Brucker pas_regions, 21972d47829SJean-Philippe Brucker (unsigned int)(sizeof(pas_regions) / 22072d47829SJean-Philippe Brucker sizeof(pas_region_t))) < 0) { 22172d47829SJean-Philippe Brucker ERROR("gpt_init_pas_l1_tables() failed!\n"); 22272d47829SJean-Philippe Brucker panic(); 22372d47829SJean-Philippe Brucker } 22472d47829SJean-Philippe Brucker 22572d47829SJean-Philippe Brucker INFO("Enabling Granule Protection Checks\n"); 22672d47829SJean-Philippe Brucker if (gpt_enable() < 0) { 22772d47829SJean-Philippe Brucker ERROR("gpt_enable() failed!\n"); 22872d47829SJean-Philippe Brucker panic(); 22972d47829SJean-Philippe Brucker } 23072d47829SJean-Philippe Brucker } 23172d47829SJean-Philippe Brucker #endif 23272d47829SJean-Philippe Brucker 233301d27d9SRadoslaw Biernacki void bl31_plat_arch_setup(void) 234301d27d9SRadoslaw Biernacki { 235a12cb77cSChen Baozi const mmap_region_t bl_regions[] = { 236a12cb77cSChen Baozi MAP_BL31_TOTAL, 237a12cb77cSChen Baozi MAP_BL31_RO, 238af994ae8SChen Baozi #if USE_COHERENT_MEM 239a12cb77cSChen Baozi MAP_BL_COHERENT_RAM, 240af994ae8SChen Baozi #endif 241cd75693fSJean-Philippe Brucker #if ENABLE_RME 242cd75693fSJean-Philippe Brucker MAP_GPT_L0_REGION, 243cd75693fSJean-Philippe Brucker MAP_GPT_L1_REGION, 244cd75693fSJean-Philippe Brucker MAP_RMM_SHARED_MEM, 245cd75693fSJean-Philippe Brucker #endif 246a12cb77cSChen Baozi {0} 247a12cb77cSChen Baozi }; 248a12cb77cSChen Baozi 249a12cb77cSChen Baozi setup_page_tables(bl_regions, plat_qemu_get_mmap()); 250a12cb77cSChen Baozi 251a12cb77cSChen Baozi enable_mmu_el3(0); 2526cd113feSJean-Philippe Brucker 2536cd113feSJean-Philippe Brucker #if ENABLE_RME 25472d47829SJean-Philippe Brucker /* Initialise and enable granule protection after MMU. */ 25572d47829SJean-Philippe Brucker bl31_plat_gpt_setup(); 25672d47829SJean-Philippe Brucker 2576cd113feSJean-Philippe Brucker /* 2586cd113feSJean-Philippe Brucker * Initialise Granule Protection library and enable GPC for the primary 2596cd113feSJean-Philippe Brucker * processor. The tables have already been initialized by a previous BL 2606cd113feSJean-Philippe Brucker * stage, so there is no need to provide any PAS here. This function 2616cd113feSJean-Philippe Brucker * sets up pointers to those tables. 2626cd113feSJean-Philippe Brucker */ 2636cd113feSJean-Philippe Brucker if (gpt_runtime_init() < 0) { 2646cd113feSJean-Philippe Brucker ERROR("gpt_runtime_init() failed!\n"); 2656cd113feSJean-Philippe Brucker panic(); 2666cd113feSJean-Philippe Brucker } 2676cd113feSJean-Philippe Brucker #endif /* ENABLE_RME */ 2686cd113feSJean-Philippe Brucker 269301d27d9SRadoslaw Biernacki } 270301d27d9SRadoslaw Biernacki 271ffb07b04SMaxim Uvarov static void qemu_gpio_init(void) 272ffb07b04SMaxim Uvarov { 273ffb07b04SMaxim Uvarov #ifdef SECURE_GPIO_BASE 274ffb07b04SMaxim Uvarov pl061_gpio_init(); 275ffb07b04SMaxim Uvarov pl061_gpio_register(SECURE_GPIO_BASE, 0); 276ffb07b04SMaxim Uvarov #endif 277ffb07b04SMaxim Uvarov } 278ffb07b04SMaxim Uvarov 279301d27d9SRadoslaw Biernacki void bl31_platform_setup(void) 280301d27d9SRadoslaw Biernacki { 281301d27d9SRadoslaw Biernacki plat_qemu_gic_init(); 282ffb07b04SMaxim Uvarov qemu_gpio_init(); 283301d27d9SRadoslaw Biernacki } 284301d27d9SRadoslaw Biernacki 285301d27d9SRadoslaw Biernacki unsigned int plat_get_syscnt_freq2(void) 286301d27d9SRadoslaw Biernacki { 2875436047aSMarcin Juszkiewicz return read_cntfrq_el0(); 288301d27d9SRadoslaw Biernacki } 289301d27d9SRadoslaw Biernacki 290301d27d9SRadoslaw Biernacki /******************************************************************************* 291301d27d9SRadoslaw Biernacki * Return a pointer to the 'entry_point_info' structure of the next image 292301d27d9SRadoslaw Biernacki * for the security state specified. BL3-3 corresponds to the non-secure 293301d27d9SRadoslaw Biernacki * image type while BL3-2 corresponds to the secure image type. A NULL 294301d27d9SRadoslaw Biernacki * pointer is returned if the image does not exist. 295301d27d9SRadoslaw Biernacki ******************************************************************************/ 296301d27d9SRadoslaw Biernacki entry_point_info_t *bl31_plat_get_next_image_ep_info(uint32_t type) 297301d27d9SRadoslaw Biernacki { 298301d27d9SRadoslaw Biernacki entry_point_info_t *next_image_info; 299301d27d9SRadoslaw Biernacki 300301d27d9SRadoslaw Biernacki assert(sec_state_is_valid(type)); 3018ffe0b2eSJean-Philippe Brucker if (type == NON_SECURE) { 3028ffe0b2eSJean-Philippe Brucker next_image_info = &bl33_image_ep_info; 3038ffe0b2eSJean-Philippe Brucker } 3048ffe0b2eSJean-Philippe Brucker #if ENABLE_RME 3058ffe0b2eSJean-Philippe Brucker else if (type == REALM) { 3068ffe0b2eSJean-Philippe Brucker next_image_info = &rmm_image_ep_info; 3078ffe0b2eSJean-Philippe Brucker } 3088ffe0b2eSJean-Philippe Brucker #endif 3098ffe0b2eSJean-Philippe Brucker else { 3108ffe0b2eSJean-Philippe Brucker next_image_info = &bl32_image_ep_info; 3118ffe0b2eSJean-Philippe Brucker } 3128ffe0b2eSJean-Philippe Brucker 313301d27d9SRadoslaw Biernacki /* 314301d27d9SRadoslaw Biernacki * None of the images on the ARM development platforms can have 0x0 315301d27d9SRadoslaw Biernacki * as the entrypoint 316301d27d9SRadoslaw Biernacki */ 317301d27d9SRadoslaw Biernacki if (next_image_info->pc) 318301d27d9SRadoslaw Biernacki return next_image_info; 319301d27d9SRadoslaw Biernacki else 320301d27d9SRadoslaw Biernacki return NULL; 321301d27d9SRadoslaw Biernacki } 322305825b4SRaymond Mao 323305825b4SRaymond Mao void bl31_plat_runtime_setup(void) 324305825b4SRaymond Mao { 325305825b4SRaymond Mao #if TRANSFER_LIST 326305825b4SRaymond Mao if (bl31_tl) { 327305825b4SRaymond Mao /* 328305825b4SRaymond Mao * update the TL from S to NS memory before jump to BL33 329305825b4SRaymond Mao * to reflect all changes in TL done by BL32 330305825b4SRaymond Mao */ 331305825b4SRaymond Mao memcpy((void *)FW_NS_HANDOFF_BASE, bl31_tl, bl31_tl->max_size); 332305825b4SRaymond Mao } 333305825b4SRaymond Mao #endif 334c09aa4ffSJens Wiklander 335c09aa4ffSJens Wiklander console_flush(); 336c09aa4ffSJens Wiklander console_switch_state(CONSOLE_FLAG_RUNTIME); 337305825b4SRaymond Mao } 338