xref: /rk3399_ARM-atf/services/std_svc/spmd/spmd_main.c (revision 8cb99c3fc3539bb9926e73a1c33fd72f424fc453)
1 /*
2  * Copyright (c) 2020-2021, ARM Limited and Contributors. All rights reserved.
3  *
4  * SPDX-License-Identifier: BSD-3-Clause
5  */
6 
7 #include <assert.h>
8 #include <errno.h>
9 #include <string.h>
10 
11 #include <arch_helpers.h>
12 #include <arch/aarch64/arch_features.h>
13 #include <bl31/bl31.h>
14 #include <bl31/interrupt_mgmt.h>
15 #include <common/debug.h>
16 #include <common/runtime_svc.h>
17 #include <lib/el3_runtime/context_mgmt.h>
18 #include <lib/smccc.h>
19 #include <lib/spinlock.h>
20 #include <lib/utils.h>
21 #include <plat/common/common_def.h>
22 #include <plat/common/platform.h>
23 #include <platform_def.h>
24 #include <services/ffa_svc.h>
25 #include <services/spmd_svc.h>
26 #include <smccc_helpers.h>
27 #include "spmd_private.h"
28 
29 /*******************************************************************************
30  * SPM Core context information.
31  ******************************************************************************/
32 static spmd_spm_core_context_t spm_core_context[PLATFORM_CORE_COUNT];
33 
34 /*******************************************************************************
35  * SPM Core attribute information read from its manifest.
36  ******************************************************************************/
37 static spmc_manifest_attribute_t spmc_attrs;
38 
39 /*******************************************************************************
40  * SPM Core entry point information. Discovered on the primary core and reused
41  * on secondary cores.
42  ******************************************************************************/
43 static entry_point_info_t *spmc_ep_info;
44 
45 /*******************************************************************************
46  * SPM Core context on CPU based on mpidr.
47  ******************************************************************************/
48 spmd_spm_core_context_t *spmd_get_context_by_mpidr(uint64_t mpidr)
49 {
50 	int core_idx = plat_core_pos_by_mpidr(mpidr);
51 
52 	if (core_idx < 0) {
53 		ERROR("Invalid mpidr: %llx, returned ID: %d\n", mpidr, core_idx);
54 		panic();
55 	}
56 
57 	return &spm_core_context[core_idx];
58 }
59 
60 /*******************************************************************************
61  * SPM Core context on current CPU get helper.
62  ******************************************************************************/
63 spmd_spm_core_context_t *spmd_get_context(void)
64 {
65 	return spmd_get_context_by_mpidr(read_mpidr());
66 }
67 
68 /*******************************************************************************
69  * SPM Core ID getter.
70  ******************************************************************************/
71 uint16_t spmd_spmc_id_get(void)
72 {
73 	return spmc_attrs.spmc_id;
74 }
75 
76 /*******************************************************************************
77  * Static function declaration.
78  ******************************************************************************/
79 static int32_t spmd_init(void);
80 static int spmd_spmc_init(void *pm_addr);
81 static uint64_t spmd_ffa_error_return(void *handle,
82 				       int error_code);
83 static uint64_t spmd_smc_forward(uint32_t smc_fid,
84 				 bool secure_origin,
85 				 uint64_t x1,
86 				 uint64_t x2,
87 				 uint64_t x3,
88 				 uint64_t x4,
89 				 void *handle);
90 
91 /*******************************************************************************
92  * This function takes an SPMC context pointer and performs a synchronous
93  * SPMC entry.
94  ******************************************************************************/
95 uint64_t spmd_spm_core_sync_entry(spmd_spm_core_context_t *spmc_ctx)
96 {
97 	uint64_t rc;
98 
99 	assert(spmc_ctx != NULL);
100 
101 	cm_set_context(&(spmc_ctx->cpu_ctx), SECURE);
102 
103 	/* Restore the context assigned above */
104 #if SPMD_SPM_AT_SEL2
105 	cm_el2_sysregs_context_restore(SECURE);
106 #else
107 	cm_el1_sysregs_context_restore(SECURE);
108 #endif
109 	cm_set_next_eret_context(SECURE);
110 
111 	/* Enter SPMC */
112 	rc = spmd_spm_core_enter(&spmc_ctx->c_rt_ctx);
113 
114 	/* Save secure state */
115 #if SPMD_SPM_AT_SEL2
116 	cm_el2_sysregs_context_save(SECURE);
117 #else
118 	cm_el1_sysregs_context_save(SECURE);
119 #endif
120 
121 	return rc;
122 }
123 
124 /*******************************************************************************
125  * This function returns to the place where spmd_spm_core_sync_entry() was
126  * called originally.
127  ******************************************************************************/
128 __dead2 void spmd_spm_core_sync_exit(uint64_t rc)
129 {
130 	spmd_spm_core_context_t *ctx = spmd_get_context();
131 
132 	/* Get current CPU context from SPMC context */
133 	assert(cm_get_context(SECURE) == &(ctx->cpu_ctx));
134 
135 	/*
136 	 * The SPMD must have initiated the original request through a
137 	 * synchronous entry into SPMC. Jump back to the original C runtime
138 	 * context with the value of rc in x0;
139 	 */
140 	spmd_spm_core_exit(ctx->c_rt_ctx, rc);
141 
142 	panic();
143 }
144 
145 /*******************************************************************************
146  * Jump to the SPM Core for the first time.
147  ******************************************************************************/
148 static int32_t spmd_init(void)
149 {
150 	spmd_spm_core_context_t *ctx = spmd_get_context();
151 	uint64_t rc;
152 
153 	VERBOSE("SPM Core init start.\n");
154 
155 	/* Primary boot core enters the SPMC for initialization. */
156 	ctx->state = SPMC_STATE_ON_PENDING;
157 
158 	rc = spmd_spm_core_sync_entry(ctx);
159 	if (rc != 0ULL) {
160 		ERROR("SPMC initialisation failed 0x%llx\n", rc);
161 		return 0;
162 	}
163 
164 	ctx->state = SPMC_STATE_ON;
165 
166 	VERBOSE("SPM Core init end.\n");
167 
168 	return 1;
169 }
170 
171 /*******************************************************************************
172  * spmd_secure_interrupt_handler
173  * Enter the SPMC for further handling of the secure interrupt by the SPMC
174  * itself or a Secure Partition.
175  ******************************************************************************/
176 static uint64_t spmd_secure_interrupt_handler(uint32_t id,
177 					      uint32_t flags,
178 					      void *handle,
179 					      void *cookie)
180 {
181 	spmd_spm_core_context_t *ctx = spmd_get_context();
182 	gp_regs_t *gpregs = get_gpregs_ctx(&ctx->cpu_ctx);
183 	unsigned int linear_id = plat_my_core_pos();
184 	int64_t rc;
185 
186 	/* Sanity check the security state when the exception was generated */
187 	assert(get_interrupt_src_ss(flags) == NON_SECURE);
188 
189 	/* Sanity check the pointer to this cpu's context */
190 	assert(handle == cm_get_context(NON_SECURE));
191 
192 	/* Save the non-secure context before entering SPMC */
193 	cm_el1_sysregs_context_save(NON_SECURE);
194 #if SPMD_SPM_AT_SEL2
195 	cm_el2_sysregs_context_save(NON_SECURE);
196 #endif
197 
198 	/* Convey the event to the SPMC through the FFA_INTERRUPT interface. */
199 	write_ctx_reg(gpregs, CTX_GPREG_X0, FFA_INTERRUPT);
200 	write_ctx_reg(gpregs, CTX_GPREG_X1, 0);
201 	write_ctx_reg(gpregs, CTX_GPREG_X2, 0);
202 	write_ctx_reg(gpregs, CTX_GPREG_X3, 0);
203 	write_ctx_reg(gpregs, CTX_GPREG_X4, 0);
204 	write_ctx_reg(gpregs, CTX_GPREG_X5, 0);
205 	write_ctx_reg(gpregs, CTX_GPREG_X6, 0);
206 	write_ctx_reg(gpregs, CTX_GPREG_X7, 0);
207 
208 	/* Mark current core as handling a secure interrupt. */
209 	ctx->secure_interrupt_ongoing = true;
210 
211 	rc = spmd_spm_core_sync_entry(ctx);
212 	if (rc != 0ULL) {
213 		ERROR("%s failed (%llu) on CPU%u\n", __func__, rc, linear_id);
214 	}
215 
216 	ctx->secure_interrupt_ongoing = false;
217 
218 	cm_el1_sysregs_context_restore(NON_SECURE);
219 #if SPMD_SPM_AT_SEL2
220 	cm_el2_sysregs_context_restore(NON_SECURE);
221 #endif
222 	cm_set_next_eret_context(NON_SECURE);
223 
224 	SMC_RET0(&ctx->cpu_ctx);
225 }
226 
227 /*******************************************************************************
228  * Loads SPMC manifest and inits SPMC.
229  ******************************************************************************/
230 static int spmd_spmc_init(void *pm_addr)
231 {
232 	cpu_context_t *cpu_ctx;
233 	unsigned int core_id;
234 	uint32_t ep_attr, flags;
235 	int rc;
236 
237 	/* Load the SPM Core manifest */
238 	rc = plat_spm_core_manifest_load(&spmc_attrs, pm_addr);
239 	if (rc != 0) {
240 		WARN("No or invalid SPM Core manifest image provided by BL2\n");
241 		return rc;
242 	}
243 
244 	/*
245 	 * Ensure that the SPM Core version is compatible with the SPM
246 	 * Dispatcher version.
247 	 */
248 	if ((spmc_attrs.major_version != FFA_VERSION_MAJOR) ||
249 	    (spmc_attrs.minor_version > FFA_VERSION_MINOR)) {
250 		WARN("Unsupported FFA version (%u.%u)\n",
251 		     spmc_attrs.major_version, spmc_attrs.minor_version);
252 		return -EINVAL;
253 	}
254 
255 	VERBOSE("FFA version (%u.%u)\n", spmc_attrs.major_version,
256 	     spmc_attrs.minor_version);
257 
258 	VERBOSE("SPM Core run time EL%x.\n",
259 	     SPMD_SPM_AT_SEL2 ? MODE_EL2 : MODE_EL1);
260 
261 	/* Validate the SPMC ID, Ensure high bit is set */
262 	if (((spmc_attrs.spmc_id >> SPMC_SECURE_ID_SHIFT) &
263 			SPMC_SECURE_ID_MASK) == 0U) {
264 		WARN("Invalid ID (0x%x) for SPMC.\n", spmc_attrs.spmc_id);
265 		return -EINVAL;
266 	}
267 
268 	/* Validate the SPM Core execution state */
269 	if ((spmc_attrs.exec_state != MODE_RW_64) &&
270 	    (spmc_attrs.exec_state != MODE_RW_32)) {
271 		WARN("Unsupported %s%x.\n", "SPM Core execution state 0x",
272 		     spmc_attrs.exec_state);
273 		return -EINVAL;
274 	}
275 
276 	VERBOSE("%s%x.\n", "SPM Core execution state 0x",
277 		spmc_attrs.exec_state);
278 
279 #if SPMD_SPM_AT_SEL2
280 	/* Ensure manifest has not requested AArch32 state in S-EL2 */
281 	if (spmc_attrs.exec_state == MODE_RW_32) {
282 		WARN("AArch32 state at S-EL2 is not supported.\n");
283 		return -EINVAL;
284 	}
285 
286 	/*
287 	 * Check if S-EL2 is supported on this system if S-EL2
288 	 * is required for SPM
289 	 */
290 	if (!is_armv8_4_sel2_present()) {
291 		WARN("SPM Core run time S-EL2 is not supported.\n");
292 		return -EINVAL;
293 	}
294 #endif /* SPMD_SPM_AT_SEL2 */
295 
296 	/* Initialise an entrypoint to set up the CPU context */
297 	ep_attr = SECURE | EP_ST_ENABLE;
298 	if ((read_sctlr_el3() & SCTLR_EE_BIT) != 0ULL) {
299 		ep_attr |= EP_EE_BIG;
300 	}
301 
302 	SET_PARAM_HEAD(spmc_ep_info, PARAM_EP, VERSION_1, ep_attr);
303 
304 	/*
305 	 * Populate SPSR for SPM Core based upon validated parameters from the
306 	 * manifest.
307 	 */
308 	if (spmc_attrs.exec_state == MODE_RW_32) {
309 		spmc_ep_info->spsr = SPSR_MODE32(MODE32_svc, SPSR_T_ARM,
310 						 SPSR_E_LITTLE,
311 						 DAIF_FIQ_BIT |
312 						 DAIF_IRQ_BIT |
313 						 DAIF_ABT_BIT);
314 	} else {
315 
316 #if SPMD_SPM_AT_SEL2
317 		static const uint32_t runtime_el = MODE_EL2;
318 #else
319 		static const uint32_t runtime_el = MODE_EL1;
320 #endif
321 		spmc_ep_info->spsr = SPSR_64(runtime_el,
322 					     MODE_SP_ELX,
323 					     DISABLE_ALL_EXCEPTIONS);
324 	}
325 
326 	/* Set an initial SPMC context state for all cores. */
327 	for (core_id = 0U; core_id < PLATFORM_CORE_COUNT; core_id++) {
328 		spm_core_context[core_id].state = SPMC_STATE_OFF;
329 
330 		/* Setup an initial cpu context for the SPMC. */
331 		cpu_ctx = &spm_core_context[core_id].cpu_ctx;
332 		cm_setup_context(cpu_ctx, spmc_ep_info);
333 
334 		/*
335 		 * Pass the core linear ID to the SPMC through x4.
336 		 * (TF-A implementation defined behavior helping
337 		 * a legacy TOS migration to adopt FF-A).
338 		 */
339 		write_ctx_reg(get_gpregs_ctx(cpu_ctx), CTX_GPREG_X4, core_id);
340 	}
341 
342 	/* Register power management hooks with PSCI */
343 	psci_register_spd_pm_hook(&spmd_pm);
344 
345 	/* Register init function for deferred init. */
346 	bl31_register_bl32_init(&spmd_init);
347 
348 	INFO("SPM Core setup done.\n");
349 
350 	/*
351 	 * Register an interrupt handler routing secure interrupts to SPMD
352 	 * while the NWd is running.
353 	 */
354 	flags = 0;
355 	set_interrupt_rm_flag(flags, NON_SECURE);
356 	rc = register_interrupt_type_handler(INTR_TYPE_S_EL1,
357 					     spmd_secure_interrupt_handler,
358 					     flags);
359 	if (rc != 0) {
360 		panic();
361 	}
362 
363 	return 0;
364 }
365 
366 /*******************************************************************************
367  * Initialize context of SPM Core.
368  ******************************************************************************/
369 int spmd_setup(void)
370 {
371 	void *spmc_manifest;
372 	int rc;
373 
374 	spmc_ep_info = bl31_plat_get_next_image_ep_info(SECURE);
375 	if (spmc_ep_info == NULL) {
376 		WARN("No SPM Core image provided by BL2 boot loader.\n");
377 		return -EINVAL;
378 	}
379 
380 	/* Under no circumstances will this parameter be 0 */
381 	assert(spmc_ep_info->pc != 0ULL);
382 
383 	/*
384 	 * Check if BL32 ep_info has a reference to 'tos_fw_config'. This will
385 	 * be used as a manifest for the SPM Core at the next lower EL/mode.
386 	 */
387 	spmc_manifest = (void *)spmc_ep_info->args.arg0;
388 	if (spmc_manifest == NULL) {
389 		ERROR("Invalid or absent SPM Core manifest.\n");
390 		return -EINVAL;
391 	}
392 
393 	/* Load manifest, init SPMC */
394 	rc = spmd_spmc_init(spmc_manifest);
395 	if (rc != 0) {
396 		WARN("Booting device without SPM initialization.\n");
397 	}
398 
399 	return rc;
400 }
401 
402 /*******************************************************************************
403  * Forward SMC to the other security state
404  ******************************************************************************/
405 static uint64_t spmd_smc_forward(uint32_t smc_fid,
406 				 bool secure_origin,
407 				 uint64_t x1,
408 				 uint64_t x2,
409 				 uint64_t x3,
410 				 uint64_t x4,
411 				 void *handle)
412 {
413 	unsigned int secure_state_in = (secure_origin) ? SECURE : NON_SECURE;
414 	unsigned int secure_state_out = (!secure_origin) ? SECURE : NON_SECURE;
415 
416 	/* Save incoming security state */
417 #if SPMD_SPM_AT_SEL2
418 	if (secure_state_in == NON_SECURE) {
419 		cm_el1_sysregs_context_save(secure_state_in);
420 	}
421 	cm_el2_sysregs_context_save(secure_state_in);
422 #else
423 	cm_el1_sysregs_context_save(secure_state_in);
424 #endif
425 
426 	/* Restore outgoing security state */
427 #if SPMD_SPM_AT_SEL2
428 	if (secure_state_out == NON_SECURE) {
429 		cm_el1_sysregs_context_restore(secure_state_out);
430 	}
431 	cm_el2_sysregs_context_restore(secure_state_out);
432 #else
433 	cm_el1_sysregs_context_restore(secure_state_out);
434 #endif
435 	cm_set_next_eret_context(secure_state_out);
436 
437 	SMC_RET8(cm_get_context(secure_state_out), smc_fid, x1, x2, x3, x4,
438 			SMC_GET_GP(handle, CTX_GPREG_X5),
439 			SMC_GET_GP(handle, CTX_GPREG_X6),
440 			SMC_GET_GP(handle, CTX_GPREG_X7));
441 }
442 
443 /*******************************************************************************
444  * Return FFA_ERROR with specified error code
445  ******************************************************************************/
446 static uint64_t spmd_ffa_error_return(void *handle, int error_code)
447 {
448 	SMC_RET8(handle, (uint32_t) FFA_ERROR,
449 		 FFA_TARGET_INFO_MBZ, (uint32_t)error_code,
450 		 FFA_PARAM_MBZ, FFA_PARAM_MBZ, FFA_PARAM_MBZ,
451 		 FFA_PARAM_MBZ, FFA_PARAM_MBZ);
452 }
453 
454 /*******************************************************************************
455  * spmd_check_address_in_binary_image
456  ******************************************************************************/
457 bool spmd_check_address_in_binary_image(uint64_t address)
458 {
459 	assert(!check_uptr_overflow(spmc_attrs.load_address, spmc_attrs.binary_size));
460 
461 	return ((address >= spmc_attrs.load_address) &&
462 		(address < (spmc_attrs.load_address + spmc_attrs.binary_size)));
463 }
464 
465 /******************************************************************************
466  * spmd_is_spmc_message
467  *****************************************************************************/
468 static bool spmd_is_spmc_message(unsigned int ep)
469 {
470 	return ((ffa_endpoint_destination(ep) == SPMD_DIRECT_MSG_ENDPOINT_ID)
471 		&& (ffa_endpoint_source(ep) == spmc_attrs.spmc_id));
472 }
473 
474 /******************************************************************************
475  * spmd_handle_spmc_message
476  *****************************************************************************/
477 static int spmd_handle_spmc_message(unsigned long long msg,
478 		unsigned long long parm1, unsigned long long parm2,
479 		unsigned long long parm3, unsigned long long parm4)
480 {
481 	VERBOSE("%s %llx %llx %llx %llx %llx\n", __func__,
482 		msg, parm1, parm2, parm3, parm4);
483 
484 	return -EINVAL;
485 }
486 
487 /*******************************************************************************
488  * This function handles all SMCs in the range reserved for FFA. Each call is
489  * either forwarded to the other security state or handled by the SPM dispatcher
490  ******************************************************************************/
491 uint64_t spmd_smc_handler(uint32_t smc_fid,
492 			  uint64_t x1,
493 			  uint64_t x2,
494 			  uint64_t x3,
495 			  uint64_t x4,
496 			  void *cookie,
497 			  void *handle,
498 			  uint64_t flags)
499 {
500 	unsigned int linear_id = plat_my_core_pos();
501 	spmd_spm_core_context_t *ctx = spmd_get_context();
502 	bool secure_origin;
503 	int32_t ret;
504 	uint32_t input_version;
505 
506 	/* Determine which security state this SMC originated from */
507 	secure_origin = is_caller_secure(flags);
508 
509 	VERBOSE("SPM(%u): 0x%x 0x%llx 0x%llx 0x%llx 0x%llx "
510 		"0x%llx 0x%llx 0x%llx\n",
511 		linear_id, smc_fid, x1, x2, x3, x4,
512 		SMC_GET_GP(handle, CTX_GPREG_X5),
513 		SMC_GET_GP(handle, CTX_GPREG_X6),
514 		SMC_GET_GP(handle, CTX_GPREG_X7));
515 
516 	switch (smc_fid) {
517 	case FFA_ERROR:
518 		/*
519 		 * Check if this is the first invocation of this interface on
520 		 * this CPU. If so, then indicate that the SPM Core initialised
521 		 * unsuccessfully.
522 		 */
523 		if (secure_origin && (ctx->state == SPMC_STATE_ON_PENDING)) {
524 			spmd_spm_core_sync_exit(x2);
525 		}
526 
527 		return spmd_smc_forward(smc_fid, secure_origin,
528 					x1, x2, x3, x4, handle);
529 		break; /* not reached */
530 
531 	case FFA_VERSION:
532 		input_version = (uint32_t)(0xFFFFFFFF & x1);
533 		/*
534 		 * If caller is secure and SPMC was initialized,
535 		 * return FFA_VERSION of SPMD.
536 		 * If caller is non secure and SPMC was initialized,
537 		 * return SPMC's version.
538 		 * Sanity check to "input_version".
539 		 */
540 		if ((input_version & FFA_VERSION_BIT31_MASK) ||
541 			(ctx->state == SPMC_STATE_RESET)) {
542 			ret = FFA_ERROR_NOT_SUPPORTED;
543 		} else if (!secure_origin) {
544 			ret = MAKE_FFA_VERSION(spmc_attrs.major_version,
545 					       spmc_attrs.minor_version);
546 		} else {
547 			ret = MAKE_FFA_VERSION(FFA_VERSION_MAJOR,
548 					       FFA_VERSION_MINOR);
549 		}
550 
551 		SMC_RET8(handle, (uint32_t)ret, FFA_TARGET_INFO_MBZ,
552 			 FFA_TARGET_INFO_MBZ, FFA_PARAM_MBZ, FFA_PARAM_MBZ,
553 			 FFA_PARAM_MBZ, FFA_PARAM_MBZ, FFA_PARAM_MBZ);
554 		break; /* not reached */
555 
556 	case FFA_FEATURES:
557 		/*
558 		 * This is an optional interface. Do the minimal checks and
559 		 * forward to SPM Core which will handle it if implemented.
560 		 */
561 
562 		/*
563 		 * Check if x1 holds a valid FFA fid. This is an
564 		 * optimization.
565 		 */
566 		if (!is_ffa_fid(x1)) {
567 			return spmd_ffa_error_return(handle,
568 						     FFA_ERROR_NOT_SUPPORTED);
569 		}
570 
571 		/* Forward SMC from Normal world to the SPM Core */
572 		if (!secure_origin) {
573 			return spmd_smc_forward(smc_fid, secure_origin,
574 						x1, x2, x3, x4, handle);
575 		}
576 
577 		/*
578 		 * Return success if call was from secure world i.e. all
579 		 * FFA functions are supported. This is essentially a
580 		 * nop.
581 		 */
582 		SMC_RET8(handle, FFA_SUCCESS_SMC32, x1, x2, x3, x4,
583 			 SMC_GET_GP(handle, CTX_GPREG_X5),
584 			 SMC_GET_GP(handle, CTX_GPREG_X6),
585 			 SMC_GET_GP(handle, CTX_GPREG_X7));
586 
587 		break; /* not reached */
588 
589 	case FFA_ID_GET:
590 		/*
591 		 * Returns the ID of the calling FFA component.
592 		 */
593 		if (!secure_origin) {
594 			SMC_RET8(handle, FFA_SUCCESS_SMC32,
595 				 FFA_TARGET_INFO_MBZ, FFA_NS_ENDPOINT_ID,
596 				 FFA_PARAM_MBZ, FFA_PARAM_MBZ,
597 				 FFA_PARAM_MBZ, FFA_PARAM_MBZ,
598 				 FFA_PARAM_MBZ);
599 		}
600 
601 		SMC_RET8(handle, FFA_SUCCESS_SMC32,
602 			 FFA_TARGET_INFO_MBZ, spmc_attrs.spmc_id,
603 			 FFA_PARAM_MBZ, FFA_PARAM_MBZ,
604 			 FFA_PARAM_MBZ, FFA_PARAM_MBZ,
605 			 FFA_PARAM_MBZ);
606 
607 		break; /* not reached */
608 
609 	case FFA_SECONDARY_EP_REGISTER_SMC64:
610 		if (secure_origin) {
611 			ret = spmd_pm_secondary_ep_register(x1);
612 
613 			if (ret < 0) {
614 				SMC_RET8(handle, FFA_ERROR_SMC64,
615 					FFA_TARGET_INFO_MBZ, ret,
616 					FFA_PARAM_MBZ, FFA_PARAM_MBZ,
617 					FFA_PARAM_MBZ, FFA_PARAM_MBZ,
618 					FFA_PARAM_MBZ);
619 			} else {
620 				SMC_RET8(handle, FFA_SUCCESS_SMC64,
621 					FFA_TARGET_INFO_MBZ, FFA_PARAM_MBZ,
622 					FFA_PARAM_MBZ, FFA_PARAM_MBZ,
623 					FFA_PARAM_MBZ, FFA_PARAM_MBZ,
624 					FFA_PARAM_MBZ);
625 			}
626 		}
627 
628 		return spmd_ffa_error_return(handle, FFA_ERROR_NOT_SUPPORTED);
629 		break; /* Not reached */
630 
631 	case FFA_SPM_ID_GET:
632 		if (MAKE_FFA_VERSION(1, 1) > FFA_VERSION_COMPILED) {
633 			return spmd_ffa_error_return(handle,
634 						     FFA_ERROR_NOT_SUPPORTED);
635 		}
636 		/*
637 		 * Returns the ID of the SPMC or SPMD depending on the FF-A
638 		 * instance where this function is invoked
639 		 */
640 		if (!secure_origin) {
641 			SMC_RET8(handle, FFA_SUCCESS_SMC32,
642 				 FFA_TARGET_INFO_MBZ, spmc_attrs.spmc_id,
643 				 FFA_PARAM_MBZ, FFA_PARAM_MBZ,
644 				 FFA_PARAM_MBZ, FFA_PARAM_MBZ,
645 				 FFA_PARAM_MBZ);
646 		}
647 		SMC_RET8(handle, FFA_SUCCESS_SMC32,
648 			 FFA_TARGET_INFO_MBZ, SPMD_DIRECT_MSG_ENDPOINT_ID,
649 			 FFA_PARAM_MBZ, FFA_PARAM_MBZ,
650 			 FFA_PARAM_MBZ, FFA_PARAM_MBZ,
651 			 FFA_PARAM_MBZ);
652 
653 		break; /* not reached */
654 
655 	case FFA_MSG_SEND_DIRECT_REQ_SMC32:
656 		if (secure_origin && spmd_is_spmc_message(x1)) {
657 			ret = spmd_handle_spmc_message(x3, x4,
658 				SMC_GET_GP(handle, CTX_GPREG_X5),
659 				SMC_GET_GP(handle, CTX_GPREG_X6),
660 				SMC_GET_GP(handle, CTX_GPREG_X7));
661 
662 			SMC_RET8(handle, FFA_SUCCESS_SMC32,
663 				FFA_TARGET_INFO_MBZ, ret,
664 				FFA_PARAM_MBZ, FFA_PARAM_MBZ,
665 				FFA_PARAM_MBZ, FFA_PARAM_MBZ,
666 				FFA_PARAM_MBZ);
667 		} else {
668 			/* Forward direct message to the other world */
669 			return spmd_smc_forward(smc_fid, secure_origin,
670 				x1, x2, x3, x4, handle);
671 		}
672 		break; /* Not reached */
673 
674 	case FFA_MSG_SEND_DIRECT_RESP_SMC32:
675 		if (secure_origin && spmd_is_spmc_message(x1)) {
676 			spmd_spm_core_sync_exit(0ULL);
677 		} else {
678 			/* Forward direct message to the other world */
679 			return spmd_smc_forward(smc_fid, secure_origin,
680 				x1, x2, x3, x4, handle);
681 		}
682 		break; /* Not reached */
683 
684 	case FFA_RX_RELEASE:
685 	case FFA_RXTX_MAP_SMC32:
686 	case FFA_RXTX_MAP_SMC64:
687 	case FFA_RXTX_UNMAP:
688 	case FFA_PARTITION_INFO_GET:
689 #if MAKE_FFA_VERSION(1, 1) <= FFA_VERSION_COMPILED
690 	case FFA_NOTIFICATION_BITMAP_CREATE:
691 	case FFA_NOTIFICATION_BITMAP_DESTROY:
692 	case FFA_NOTIFICATION_BIND:
693 	case FFA_NOTIFICATION_UNBIND:
694 	case FFA_NOTIFICATION_SET:
695 	case FFA_NOTIFICATION_GET:
696 	case FFA_NOTIFICATION_INFO_GET:
697 	case FFA_NOTIFICATION_INFO_GET_SMC64:
698 #endif
699 		/*
700 		 * Above calls should not be forwarded from Secure world to
701 		 * Normal world.
702 		 *
703 		 * Fall through to forward the call to the other world
704 		 */
705 	case FFA_MSG_RUN:
706 		/* This interface must be invoked only by the Normal world */
707 
708 		if (secure_origin) {
709 			return spmd_ffa_error_return(handle,
710 						     FFA_ERROR_NOT_SUPPORTED);
711 		}
712 
713 		/* Fall through to forward the call to the other world */
714 	case FFA_MSG_SEND:
715 	case FFA_MSG_SEND_DIRECT_REQ_SMC64:
716 	case FFA_MSG_SEND_DIRECT_RESP_SMC64:
717 	case FFA_MEM_DONATE_SMC32:
718 	case FFA_MEM_DONATE_SMC64:
719 	case FFA_MEM_LEND_SMC32:
720 	case FFA_MEM_LEND_SMC64:
721 	case FFA_MEM_SHARE_SMC32:
722 	case FFA_MEM_SHARE_SMC64:
723 	case FFA_MEM_RETRIEVE_REQ_SMC32:
724 	case FFA_MEM_RETRIEVE_REQ_SMC64:
725 	case FFA_MEM_RETRIEVE_RESP:
726 	case FFA_MEM_RELINQUISH:
727 	case FFA_MEM_RECLAIM:
728 	case FFA_SUCCESS_SMC32:
729 	case FFA_SUCCESS_SMC64:
730 		/*
731 		 * TODO: Assume that no requests originate from EL3 at the
732 		 * moment. This will change if a SP service is required in
733 		 * response to secure interrupts targeted to EL3. Until then
734 		 * simply forward the call to the Normal world.
735 		 */
736 
737 		return spmd_smc_forward(smc_fid, secure_origin,
738 					x1, x2, x3, x4, handle);
739 		break; /* not reached */
740 
741 	case FFA_MSG_WAIT:
742 		/*
743 		 * Check if this is the first invocation of this interface on
744 		 * this CPU from the Secure world. If so, then indicate that the
745 		 * SPM Core initialised successfully.
746 		 */
747 		if (secure_origin && (ctx->state == SPMC_STATE_ON_PENDING)) {
748 			spmd_spm_core_sync_exit(0ULL);
749 		}
750 
751 		/* Fall through to forward the call to the other world */
752 	case FFA_INTERRUPT:
753 	case FFA_MSG_YIELD:
754 		/* This interface must be invoked only by the Secure world */
755 		if (!secure_origin) {
756 			return spmd_ffa_error_return(handle,
757 						      FFA_ERROR_NOT_SUPPORTED);
758 		}
759 
760 		return spmd_smc_forward(smc_fid, secure_origin,
761 					x1, x2, x3, x4, handle);
762 		break; /* not reached */
763 
764 	case FFA_NORMAL_WORLD_RESUME:
765 		if (secure_origin && ctx->secure_interrupt_ongoing) {
766 			spmd_spm_core_sync_exit(0ULL);
767 		} else {
768 			return spmd_ffa_error_return(handle, FFA_ERROR_DENIED);
769 		}
770 		break; /* Not reached */
771 
772 	default:
773 		WARN("SPM: Unsupported call 0x%08x\n", smc_fid);
774 		return spmd_ffa_error_return(handle, FFA_ERROR_NOT_SUPPORTED);
775 	}
776 }
777