15096aeb2SMarc Bonnici /* 25096aeb2SMarc Bonnici * Copyright (c) 2022, ARM Limited and Contributors. All rights reserved. 35096aeb2SMarc Bonnici * 45096aeb2SMarc Bonnici * SPDX-License-Identifier: BSD-3-Clause 55096aeb2SMarc Bonnici */ 65096aeb2SMarc Bonnici 75096aeb2SMarc Bonnici #ifndef SPMC_H 85096aeb2SMarc Bonnici #define SPMC_H 95096aeb2SMarc Bonnici 105096aeb2SMarc Bonnici #include <stdint.h> 115096aeb2SMarc Bonnici 125096aeb2SMarc Bonnici #include <lib/psci/psci.h> 135096aeb2SMarc Bonnici #include <lib/spinlock.h> 147affa25cSMarc Bonnici #include <services/el3_spmc_logical_sp.h> 155096aeb2SMarc Bonnici #include "spm_common.h" 165096aeb2SMarc Bonnici 175096aeb2SMarc Bonnici /* 185096aeb2SMarc Bonnici * Ranges of FF-A IDs for Normal world and Secure world components. The 195096aeb2SMarc Bonnici * convention matches that used by other SPMCs i.e. Hafnium and OP-TEE. 205096aeb2SMarc Bonnici */ 215096aeb2SMarc Bonnici #define FFA_NWD_ID_BASE 0x0 225096aeb2SMarc Bonnici #define FFA_NWD_ID_LIMIT 0x7FFF 235096aeb2SMarc Bonnici #define FFA_SWD_ID_BASE 0x8000 245096aeb2SMarc Bonnici #define FFA_SWD_ID_LIMIT SPMD_DIRECT_MSG_ENDPOINT_ID - 1 255096aeb2SMarc Bonnici #define FFA_SWD_ID_MASK 0x8000 265096aeb2SMarc Bonnici 27c4db76f0SMarc Bonnici /* ID 0 is reserved for the normal world entity, (Hypervisor or OS Kernel). */ 28c4db76f0SMarc Bonnici #define FFA_NWD_ID U(0) 295096aeb2SMarc Bonnici /* First ID is reserved for the SPMC */ 305096aeb2SMarc Bonnici #define FFA_SPMC_ID U(FFA_SWD_ID_BASE) 315096aeb2SMarc Bonnici /* SP IDs are allocated after the SPMC ID */ 325096aeb2SMarc Bonnici #define FFA_SP_ID_BASE (FFA_SPMC_ID + 1) 335096aeb2SMarc Bonnici /* Align with Hafnium implementation */ 345096aeb2SMarc Bonnici #define INV_SP_ID 0x7FFF 355096aeb2SMarc Bonnici 3655a29638SMarc Bonnici /* FF-A Related helper macros. */ 37aad20c85SMarc Bonnici #define FFA_ID_MASK U(0xFFFF) 38aad20c85SMarc Bonnici #define FFA_PARTITION_ID_SHIFT U(16) 3955a29638SMarc Bonnici #define FFA_FEATURES_BIT31_MASK U(0x1u << 31) 40*0560b53eSMarc Bonnici #define FFA_FEATURES_RET_REQ_NS_BIT U(0x1 << 1) 4155a29638SMarc Bonnici 42aad20c85SMarc Bonnici #define FFA_RUN_EP_ID(ep_vcpu_ids) \ 43aad20c85SMarc Bonnici ((ep_vcpu_ids >> FFA_PARTITION_ID_SHIFT) & FFA_ID_MASK) 44aad20c85SMarc Bonnici #define FFA_RUN_VCPU_ID(ep_vcpu_ids) \ 45aad20c85SMarc Bonnici (ep_vcpu_ids & FFA_ID_MASK) 46aad20c85SMarc Bonnici 471a752245SMarc Bonnici #define FFA_PAGE_SIZE (4096) 481a752245SMarc Bonnici #define FFA_RXTX_PAGE_COUNT_MASK 0x1F 491a752245SMarc Bonnici 501a752245SMarc Bonnici /* Ensure that the page size used by TF-A is 4k aligned. */ 511a752245SMarc Bonnici CASSERT((PAGE_SIZE % FFA_PAGE_SIZE) == 0, assert_aligned_page_size); 521a752245SMarc Bonnici 535096aeb2SMarc Bonnici /* 5459bd2ad8SMarc Bonnici * Defines to allow an SP to subscribe for power management messages 5559bd2ad8SMarc Bonnici */ 5659bd2ad8SMarc Bonnici #define FFA_PM_MSG_SUB_CPU_OFF U(1 << 0) 5759bd2ad8SMarc Bonnici #define FFA_PM_MSG_SUB_CPU_SUSPEND U(1 << 1) 5859bd2ad8SMarc Bonnici #define FFA_PM_MSG_SUB_CPU_SUSPEND_RESUME U(1 << 2) 5959bd2ad8SMarc Bonnici 6059bd2ad8SMarc Bonnici /* 615096aeb2SMarc Bonnici * Runtime states of an execution context as per the FF-A v1.1 specification. 625096aeb2SMarc Bonnici */ 635096aeb2SMarc Bonnici enum sp_runtime_states { 645096aeb2SMarc Bonnici RT_STATE_WAITING, 655096aeb2SMarc Bonnici RT_STATE_RUNNING, 665096aeb2SMarc Bonnici RT_STATE_PREEMPTED, 675096aeb2SMarc Bonnici RT_STATE_BLOCKED 685096aeb2SMarc Bonnici }; 695096aeb2SMarc Bonnici 705096aeb2SMarc Bonnici /* 715096aeb2SMarc Bonnici * Runtime model of an execution context as per the FF-A v1.1 specification. Its 725096aeb2SMarc Bonnici * value is valid only if the execution context is not in the waiting state. 735096aeb2SMarc Bonnici */ 745096aeb2SMarc Bonnici enum sp_runtime_model { 755096aeb2SMarc Bonnici RT_MODEL_DIR_REQ, 765096aeb2SMarc Bonnici RT_MODEL_RUN, 775096aeb2SMarc Bonnici RT_MODEL_INIT, 785096aeb2SMarc Bonnici RT_MODEL_INTR 795096aeb2SMarc Bonnici }; 805096aeb2SMarc Bonnici 815096aeb2SMarc Bonnici enum sp_runtime_el { 825096aeb2SMarc Bonnici EL1 = 0, 835096aeb2SMarc Bonnici S_EL0, 845096aeb2SMarc Bonnici S_EL1 855096aeb2SMarc Bonnici }; 865096aeb2SMarc Bonnici 875096aeb2SMarc Bonnici enum sp_execution_state { 885096aeb2SMarc Bonnici SP_STATE_AARCH64 = 0, 895096aeb2SMarc Bonnici SP_STATE_AARCH32 905096aeb2SMarc Bonnici }; 915096aeb2SMarc Bonnici 92e1df6008SMarc Bonnici enum mailbox_state { 93e1df6008SMarc Bonnici /* There is no message in the mailbox. */ 94e1df6008SMarc Bonnici MAILBOX_STATE_EMPTY, 95e1df6008SMarc Bonnici 96e1df6008SMarc Bonnici /* There is a message that has been populated in the mailbox. */ 97e1df6008SMarc Bonnici MAILBOX_STATE_FULL, 98e1df6008SMarc Bonnici }; 99e1df6008SMarc Bonnici 100e1df6008SMarc Bonnici struct mailbox { 101e1df6008SMarc Bonnici enum mailbox_state state; 102e1df6008SMarc Bonnici 103e1df6008SMarc Bonnici /* RX/TX Buffers. */ 104e1df6008SMarc Bonnici void *rx_buffer; 105e1df6008SMarc Bonnici const void *tx_buffer; 106e1df6008SMarc Bonnici 107e1df6008SMarc Bonnici /* Size of RX/TX Buffer. */ 108e1df6008SMarc Bonnici uint32_t rxtx_page_count; 109e1df6008SMarc Bonnici 110e1df6008SMarc Bonnici /* Lock access to mailbox. */ 111e1df6008SMarc Bonnici spinlock_t lock; 112e1df6008SMarc Bonnici }; 113e1df6008SMarc Bonnici 1145096aeb2SMarc Bonnici /* 1155096aeb2SMarc Bonnici * Execution context members for an SP. This is a bit like struct 1165096aeb2SMarc Bonnici * vcpu in a hypervisor. 1175096aeb2SMarc Bonnici */ 1185096aeb2SMarc Bonnici struct sp_exec_ctx { 1195096aeb2SMarc Bonnici /* 1205096aeb2SMarc Bonnici * Store the stack address to restore C runtime context from after 1215096aeb2SMarc Bonnici * returning from a synchronous entry into the SP. 1225096aeb2SMarc Bonnici */ 1235096aeb2SMarc Bonnici uint64_t c_rt_ctx; 1245096aeb2SMarc Bonnici 1255096aeb2SMarc Bonnici /* Space to maintain the architectural state of an SP. */ 1265096aeb2SMarc Bonnici cpu_context_t cpu_ctx; 1275096aeb2SMarc Bonnici 1285096aeb2SMarc Bonnici /* Track the current runtime state of the SP. */ 1295096aeb2SMarc Bonnici enum sp_runtime_states rt_state; 1305096aeb2SMarc Bonnici 1315096aeb2SMarc Bonnici /* Track the current runtime model of the SP. */ 1325096aeb2SMarc Bonnici enum sp_runtime_model rt_model; 1335096aeb2SMarc Bonnici }; 1345096aeb2SMarc Bonnici 1355096aeb2SMarc Bonnici /* 1365096aeb2SMarc Bonnici * Structure to describe the cumulative properties of an SP. 1375096aeb2SMarc Bonnici */ 1385096aeb2SMarc Bonnici struct secure_partition_desc { 1395096aeb2SMarc Bonnici /* 1405096aeb2SMarc Bonnici * Execution contexts allocated to this endpoint. Ideally, 1415096aeb2SMarc Bonnici * we need as many contexts as there are physical cpus only 1425096aeb2SMarc Bonnici * for a S-EL1 SP which is MP-pinned. 1435096aeb2SMarc Bonnici */ 1445096aeb2SMarc Bonnici struct sp_exec_ctx ec[PLATFORM_CORE_COUNT]; 1455096aeb2SMarc Bonnici 1465096aeb2SMarc Bonnici /* ID of the Secure Partition. */ 1475096aeb2SMarc Bonnici uint16_t sp_id; 1485096aeb2SMarc Bonnici 1495096aeb2SMarc Bonnici /* Runtime EL. */ 1505096aeb2SMarc Bonnici enum sp_runtime_el runtime_el; 1515096aeb2SMarc Bonnici 1525096aeb2SMarc Bonnici /* Partition UUID. */ 1535096aeb2SMarc Bonnici uint32_t uuid[4]; 1545096aeb2SMarc Bonnici 1555096aeb2SMarc Bonnici /* Partition Properties. */ 1565096aeb2SMarc Bonnici uint32_t properties; 1575096aeb2SMarc Bonnici 1585096aeb2SMarc Bonnici /* Supported FF-A Version. */ 1595096aeb2SMarc Bonnici uint32_t ffa_version; 1605096aeb2SMarc Bonnici 1615096aeb2SMarc Bonnici /* Execution State. */ 1625096aeb2SMarc Bonnici enum sp_execution_state execution_state; 1635096aeb2SMarc Bonnici 164e1df6008SMarc Bonnici /* Mailbox tracking. */ 165e1df6008SMarc Bonnici struct mailbox mailbox; 166e1df6008SMarc Bonnici 1675096aeb2SMarc Bonnici /* Secondary entrypoint. Only valid for a S-EL1 SP. */ 1685096aeb2SMarc Bonnici uintptr_t secondary_ep; 16959bd2ad8SMarc Bonnici 17059bd2ad8SMarc Bonnici /* 17159bd2ad8SMarc Bonnici * Store whether the SP has subscribed to any power management messages. 17259bd2ad8SMarc Bonnici */ 17359bd2ad8SMarc Bonnici uint16_t pwr_mgmt_msgs; 174*0560b53eSMarc Bonnici 175*0560b53eSMarc Bonnici /* 176*0560b53eSMarc Bonnici * Store whether the SP has requested the use of the NS bit for memory 177*0560b53eSMarc Bonnici * management transactions if it is using FF-A v1.0. 178*0560b53eSMarc Bonnici */ 179*0560b53eSMarc Bonnici bool ns_bit_requested; 1805096aeb2SMarc Bonnici }; 1815096aeb2SMarc Bonnici 1825096aeb2SMarc Bonnici /* 1835096aeb2SMarc Bonnici * This define identifies the only SP that will be initialised and participate 1845096aeb2SMarc Bonnici * in FF-A communication. The implementation leaves the door open for more SPs 1855096aeb2SMarc Bonnici * to be managed in future but for now it is reasonable to assume that either a 1865096aeb2SMarc Bonnici * single S-EL0 or a single S-EL1 SP will be supported. This define will be used 1875096aeb2SMarc Bonnici * to identify which SP descriptor to initialise and manage during SP runtime. 1885096aeb2SMarc Bonnici */ 1895096aeb2SMarc Bonnici #define ACTIVE_SP_DESC_INDEX 0 1905096aeb2SMarc Bonnici 1915096aeb2SMarc Bonnici /* 1925096aeb2SMarc Bonnici * Structure to describe the cumulative properties of the Hypervisor and 1935096aeb2SMarc Bonnici * NS-Endpoints. 1945096aeb2SMarc Bonnici */ 1955096aeb2SMarc Bonnici struct ns_endpoint_desc { 1965096aeb2SMarc Bonnici /* 1975096aeb2SMarc Bonnici * ID of the NS-Endpoint or Hypervisor. 1985096aeb2SMarc Bonnici */ 1995096aeb2SMarc Bonnici uint16_t ns_ep_id; 2005096aeb2SMarc Bonnici 2015096aeb2SMarc Bonnici /* 202e1df6008SMarc Bonnici * Mailbox tracking. 203e1df6008SMarc Bonnici */ 204e1df6008SMarc Bonnici struct mailbox mailbox; 205e1df6008SMarc Bonnici 206e1df6008SMarc Bonnici /* 207e1df6008SMarc Bonnici * Supported FF-A Version 2085096aeb2SMarc Bonnici */ 2095096aeb2SMarc Bonnici uint32_t ffa_version; 2105096aeb2SMarc Bonnici }; 2115096aeb2SMarc Bonnici 212f74e2772SMarc Bonnici /** 213f74e2772SMarc Bonnici * Holds information returned for each partition by the FFA_PARTITION_INFO_GET 214f74e2772SMarc Bonnici * interface. 215f74e2772SMarc Bonnici */ 216f74e2772SMarc Bonnici struct ffa_partition_info_v1_0 { 217f74e2772SMarc Bonnici uint16_t ep_id; 218f74e2772SMarc Bonnici uint16_t execution_ctx_count; 219f74e2772SMarc Bonnici uint32_t properties; 220f74e2772SMarc Bonnici }; 221f74e2772SMarc Bonnici 222f74e2772SMarc Bonnici /* Extended structure for v1.1. */ 223f74e2772SMarc Bonnici struct ffa_partition_info_v1_1 { 224f74e2772SMarc Bonnici uint16_t ep_id; 225f74e2772SMarc Bonnici uint16_t execution_ctx_count; 226f74e2772SMarc Bonnici uint32_t properties; 227f74e2772SMarc Bonnici uint32_t uuid[4]; 228f74e2772SMarc Bonnici }; 229f74e2772SMarc Bonnici 23059bd2ad8SMarc Bonnici /* Reference to power management hooks */ 23159bd2ad8SMarc Bonnici extern const spd_pm_ops_t spmc_pm; 23259bd2ad8SMarc Bonnici 2335096aeb2SMarc Bonnici /* Setup Function for different SP types. */ 2345096aeb2SMarc Bonnici void spmc_sp_common_setup(struct secure_partition_desc *sp, 2352e219215SAchin Gupta entry_point_info_t *ep_info, 2362e219215SAchin Gupta int32_t boot_info_reg); 2375096aeb2SMarc Bonnici void spmc_el1_sp_setup(struct secure_partition_desc *sp, 2385096aeb2SMarc Bonnici entry_point_info_t *ep_info); 2395096aeb2SMarc Bonnici void spmc_sp_common_ep_commit(struct secure_partition_desc *sp, 2405096aeb2SMarc Bonnici entry_point_info_t *ep_info); 2415096aeb2SMarc Bonnici 2425096aeb2SMarc Bonnici /* 2435096aeb2SMarc Bonnici * Helper function to perform a synchronous entry into a SP. 2445096aeb2SMarc Bonnici */ 2455096aeb2SMarc Bonnici uint64_t spmc_sp_synchronous_entry(struct sp_exec_ctx *ec); 2465096aeb2SMarc Bonnici 2475096aeb2SMarc Bonnici /* 2485096aeb2SMarc Bonnici * Helper function to obtain the descriptor of the current SP on a physical cpu. 2495096aeb2SMarc Bonnici */ 2505096aeb2SMarc Bonnici struct secure_partition_desc *spmc_get_current_sp_ctx(void); 2515096aeb2SMarc Bonnici 2525096aeb2SMarc Bonnici /* 2535096aeb2SMarc Bonnici * Helper function to obtain the execution context of an SP on a 2545096aeb2SMarc Bonnici * physical cpu. 2555096aeb2SMarc Bonnici */ 2565096aeb2SMarc Bonnici struct sp_exec_ctx *spmc_get_sp_ec(struct secure_partition_desc *sp); 2575096aeb2SMarc Bonnici 2585096aeb2SMarc Bonnici /* 2595096aeb2SMarc Bonnici * Helper function to obtain the index of the execution context of an SP on a 2605096aeb2SMarc Bonnici * physical cpu. 2615096aeb2SMarc Bonnici */ 2625096aeb2SMarc Bonnici unsigned int get_ec_index(struct secure_partition_desc *sp); 2635096aeb2SMarc Bonnici 2645096aeb2SMarc Bonnici uint64_t spmc_ffa_error_return(void *handle, int error_code); 2655096aeb2SMarc Bonnici 2665096aeb2SMarc Bonnici /* 2675096aeb2SMarc Bonnici * Ensure a partition ID does not clash and follows the secure world convention. 2685096aeb2SMarc Bonnici */ 2695096aeb2SMarc Bonnici bool is_ffa_secure_id_valid(uint16_t partition_id); 2705096aeb2SMarc Bonnici 2717affa25cSMarc Bonnici /* 2727affa25cSMarc Bonnici * Helper function to obtain the array storing the EL3 2737affa25cSMarc Bonnici * Logical Partition descriptors. 2747affa25cSMarc Bonnici */ 2757affa25cSMarc Bonnici struct el3_lp_desc *get_el3_lp_array(void); 2767affa25cSMarc Bonnici 277f16b6ee3SMarc Bonnici /* 278f16b6ee3SMarc Bonnici * Helper function to obtain the RX/TX buffer pair descriptor of the Hypervisor 279f16b6ee3SMarc Bonnici * or OS kernel in the normal world or the last SP that was run. 280f16b6ee3SMarc Bonnici */ 281f16b6ee3SMarc Bonnici struct mailbox *spmc_get_mbox_desc(bool secure_origin); 282f16b6ee3SMarc Bonnici 283f0244e5dSMarc Bonnici /* 284f0244e5dSMarc Bonnici * Helper function to obtain the context of an SP with a given partition ID. 285f0244e5dSMarc Bonnici */ 286f0244e5dSMarc Bonnici struct secure_partition_desc *spmc_get_sp_ctx(uint16_t id); 287f0244e5dSMarc Bonnici 2887e804f96SMarc Bonnici /* 2897e804f96SMarc Bonnici * Add helper function to obtain the FF-A version of the calling 2907e804f96SMarc Bonnici * partition. 2917e804f96SMarc Bonnici */ 2927e804f96SMarc Bonnici uint32_t get_partition_ffa_version(bool secure_origin); 2937e804f96SMarc Bonnici 294f0244e5dSMarc Bonnici 2955096aeb2SMarc Bonnici #endif /* SPMC_H */ 296