[PATCH 5/6] ARM: Rockchip: implement tee.bin v1 header parsing
Ahmad Fatoum
a.fatoum at pengutronix.de
Wed Nov 6 10:57:23 PST 2024
Building OP-TEE produces a number of binaries among them tee.elf,
tee.bin and tee-raw.bin.
So far, we assumed in Rockchip code that the binary provided by the user
to be built into barebox is tee-raw.bin.
That binary is installed as-is to address 0x200000, which is not
generally applicable:
- At least in upstream OP-TEE, the upstream RK3399 support uses
0x30000000 as base address
- Even if OP-TEE didn't hang, 0x200000 is likely not at the end
of RAM, but that's where barebox assumes OP-TEE is by default,
and thus barebox would carve out unneeded reserved memory.
The tee.bin on the other hand has an OP-TEE header in front of it, which
our i.MX OP-TEE support already uses to identify where to load the binary
too and how much memory to reserve.
Let's do the same for Rockchip and check if have an OP-TEE header and
use that to inform our placement of OP-TEE and reservation of memory in
barebox itself and in the reserved memory entries that will be fixed up
for Linux.
As OP-TEE support is added anew, we also make sure to always have
a OP-TEE header for barebox proper to consult and we fake one if
there isn't any.
Signed-off-by: Ahmad Fatoum <a.fatoum at pengutronix.de>
---
arch/arm/mach-rockchip/atf.c | 74 +++++++++++++++++++++++++++++--
arch/arm/mach-rockchip/rockchip.c | 16 +++++++
include/mach/rockchip/atf.h | 15 ++++++-
include/mach/rockchip/bootrom.h | 17 +++++++
4 files changed, 117 insertions(+), 5 deletions(-)
diff --git a/arch/arm/mach-rockchip/atf.c b/arch/arm/mach-rockchip/atf.c
index 2649b80af9e2..86a28c51016b 100644
--- a/arch/arm/mach-rockchip/atf.c
+++ b/arch/arm/mach-rockchip/atf.c
@@ -4,8 +4,10 @@
#include <asm/system.h>
#include <mach/rockchip/atf.h>
#include <elf.h>
+#include <tee/optee.h>
#include <asm/atf_common.h>
#include <asm/barebox-arm.h>
+#include <asm-generic/memory_layout.h>
#include <mach/rockchip/dmc.h>
#include <mach/rockchip/rockchip.h>
#include <mach/rockchip/bootrom.h>
@@ -14,6 +16,17 @@
struct rockchip_scratch_space *rk_scratch;
+static void rk_scratch_save_optee_hdr(const struct optee_header *hdr)
+{
+ if (!rk_scratch) {
+ pr_err("No scratch area initialized, skip saving optee-hdr");
+ return;
+ }
+
+ pr_debug("Saving optee-hdr to scratch area 0x%p\n", &rk_scratch->optee_hdr);
+ rk_scratch->optee_hdr = *hdr;
+}
+
static unsigned long load_elf64_image_phdr(const void *elf)
{
const Elf64_Ehdr *ehdr; /* Elf header structure pointer */
@@ -41,6 +54,59 @@ static unsigned long load_elf64_image_phdr(const void *elf)
return ehdr->e_entry;
}
+static uintptr_t rk_load_optee(uintptr_t bl32, const void *bl32_image,
+ size_t bl32_size)
+{
+ const struct optee_header *hdr = bl32_image;
+ struct optee_header dummy_hdr;
+
+ /* We already have ELF support for BL31, but adding it for BL32,
+ * would require us to identify a range that fits all ELF
+ * sections and fake a dummy OP-TEE header that describes it.
+ * This is doable, but let's postpone that until there is an
+ * actual user interested in this.
+ */
+ BUG_ON(memcmp(bl32_image, ELFMAG, 4) == 0);
+
+ if (optee_verify_header(hdr) == 0) {
+ bl32_size -= sizeof(*hdr);
+ bl32_image += sizeof(*hdr);
+
+ bl32 = (u64)hdr->init_load_addr_hi << 32;
+ bl32 |= hdr->init_load_addr_lo;
+
+ pr_debug("optee: adjusting address to 0x%lx\n", bl32);
+ } else if (bl32 != ROCKCHIP_OPTEE_HEADER_REQUIRED) {
+ dummy_hdr.magic = OPTEE_MAGIC;
+ dummy_hdr.version = OPTEE_VERSION_V1;
+ dummy_hdr.arch = OPTEE_ARCH_ARM64;
+ dummy_hdr.flags = 0;
+ dummy_hdr.init_size = bl32_size;
+ dummy_hdr.init_load_addr_hi = upper_32_bits(bl32);
+ dummy_hdr.init_load_addr_lo = lower_32_bits(bl32);
+ dummy_hdr.init_mem_usage = 0;
+ dummy_hdr.paged_size = 0;
+
+ hdr = &dummy_hdr;
+
+ pr_debug("optee: assuming load address is 0x%lx\n", bl32);
+
+ } else {
+ /* If we have neither a header, nor a defined load address
+ * there is really nothing we can do here.
+ */
+ pr_err("optee: skipping. No header and no hardcoded load address\n");
+ return 0;
+ }
+
+ rk_scratch_save_optee_hdr(hdr);
+
+
+ memcpy((void *)bl32, bl32_image, bl32_size);
+
+ return bl32;
+}
+
#define rockchip_atf_load_bl31(SOC, atf_bin, tee_bin, fdt) do { \
const void *bl31_elf, *optee; \
unsigned long bl31; \
@@ -52,11 +118,9 @@ static unsigned long load_elf64_image_phdr(const void *elf)
bl31 = load_elf64_image_phdr(bl31_elf); \
\
if (IS_ENABLED(CONFIG_ARCH_ROCKCHIP_OPTEE)) { \
- optee_load_address = SOC##_OPTEE_LOAD_ADDRESS; \
- \
get_builtin_firmware(tee_bin, &optee, &optee_size); \
- \
- memcpy((void *)optee_load_address, optee, optee_size); \
+ optee_load_address = rk_load_optee(SOC##_OPTEE_LOAD_ADDRESS, \
+ optee, optee_size); \
} \
\
/* Setup an initial stack for EL2 */ \
@@ -106,6 +170,7 @@ void __noreturn rk3568_barebox_entry(void *fdt)
/* not reached when CONFIG_ARCH_ROCKCHIP_ATF */
}
+ optee_set_membase(rk_scratch_get_optee_hdr());
barebox_arm_entry(membase, endmem - membase, fdt);
}
@@ -142,5 +207,6 @@ void __noreturn rk3588_barebox_entry(void *fdt)
/* not reached when CONFIG_ARCH_ROCKCHIP_ATF */
}
+ optee_set_membase(rk_scratch_get_optee_hdr());
barebox_arm_entry(membase, endmem - membase, fdt);
}
diff --git a/arch/arm/mach-rockchip/rockchip.c b/arch/arm/mach-rockchip/rockchip.c
index 1c962ad8c89f..3d2ef791d20f 100644
--- a/arch/arm/mach-rockchip/rockchip.c
+++ b/arch/arm/mach-rockchip/rockchip.c
@@ -1,7 +1,10 @@
// SPDX-License-Identifier: GPL-2.0-only
#include <common.h>
#include <init.h>
+#include <asm/optee.h>
+#include <asm-generic/memory_layout.h>
#include <mach/rockchip/rockchip.h>
+#include <mach/rockchip/bootrom.h>
static int __rockchip_soc;
@@ -26,6 +29,19 @@ int rockchip_soc(void)
static int rockchip_init(void)
{
+ const struct optee_header *hdr = rk_scratch_get_optee_hdr();
+
+ if (IS_ENABLED(CONFIG_PBL_OPTEE) && optee_verify_header(hdr) == 0) {
+ static struct of_optee_fixup_data optee_fixup_data = {
+ .shm_size = OPTEE_SHM_SIZE,
+ .method = "smc",
+ };
+
+ optee_set_membase(hdr);
+ of_optee_fixup(of_get_root_node(), &optee_fixup_data);
+ of_register_fixup(of_optee_fixup, &optee_fixup_data);
+ }
+
switch (rockchip_soc()) {
case 3188:
return rk3188_init();
diff --git a/include/mach/rockchip/atf.h b/include/mach/rockchip/atf.h
index 89129abc01b9..1b07128f2e9b 100644
--- a/include/mach/rockchip/atf.h
+++ b/include/mach/rockchip/atf.h
@@ -8,11 +8,24 @@
#define RK3568_DRAM_BOTTOM 0xa00000
#define RK3588_DRAM_BOTTOM 0xa00000
-/* OP-TEE expects to be loaded here */
+/*
+ * The tee.bin image has an OP-TEE specific header that describes the
+ * initial load address and size. Unfortunately, the vendor blobs are in the
+ * tee-raw.bin format, which omits the header. We thus hardcode here the
+ * fallback addresses that should be used when barebox encounters
+ * tee-raw.bin instead of tee.bin.
+ */
#define RK3399_OPTEE_LOAD_ADDRESS 0x200000
#define RK3568_OPTEE_LOAD_ADDRESS 0x200000
#define RK3588_OPTEE_LOAD_ADDRESS 0x200000
+/*
+ * Hopefully for future platforms, the vendor binaries would use the image
+ * with an OP-TEE header and we can just set the load address for new SoCs
+ * to below macro to enforce that only tee.bin is used.
+ */
+#define ROCKCHIP_OPTEE_HEADER_REQUIRED 0
+
/*
* board lowlevel code should relocate barebox here. This is where
* OP-TEE jumps to after initialization.
diff --git a/include/mach/rockchip/bootrom.h b/include/mach/rockchip/bootrom.h
index 06450829b99a..6776ac5ef981 100644
--- a/include/mach/rockchip/bootrom.h
+++ b/include/mach/rockchip/bootrom.h
@@ -7,9 +7,12 @@
#include <linux/string.h>
#include <pbl.h>
#include <asm/barebox-arm.h>
+#include <tee/optee.h>
+#include <pbl.h>
struct rockchip_scratch_space {
u32 irom[16];
+ struct optee_header optee_hdr;
};
extern struct rockchip_scratch_space *rk_scratch;
@@ -29,5 +32,19 @@ void rockchip_parse_bootrom_iram(const void *iram);
int rockchip_bootsource_get_active_slot(void);
+static inline const struct optee_header *rk_scratch_get_optee_hdr(void)
+{
+ struct rockchip_scratch_space *scratch;
+
+ if (IN_PBL)
+ scratch = rk_scratch;
+ else
+ scratch = (void *)arm_mem_scratch_get();
+
+ if (!scratch)
+ return ERR_PTR(-EINVAL);
+
+ return &scratch->optee_hdr;
+}
#endif
--
2.39.5
More information about the barebox
mailing list