From patchwork Tue Mar 13 16:50:27 2018 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Bryan O'Donoghue X-Patchwork-Id: 131511 Delivered-To: patch@linaro.org Received: by 10.46.84.17 with SMTP id i17csp968832ljb; Tue, 13 Mar 2018 09:51:19 -0700 (PDT) X-Google-Smtp-Source: AG47ELsiErFYHTLdnJzmLUp0GczFODyf9+2/KQ75eJ01PZ8Gk4Qvxd9DwJl1OOGvr7l5sYupW3/t X-Received: by 10.80.211.2 with SMTP id g2mr1591210edh.96.1520959878967; Tue, 13 Mar 2018 09:51:18 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1520959878; cv=none; d=google.com; s=arc-20160816; b=XPg49G8+Ts/x7ZwEW8e4zlHkeqsJuNk19e7lBZPzuPOPjHgvyzB/hq4SiRUQLPUSY/ X2X1vc+li4L3BLfzpWDEx8gmYdEGYEXJNiq8DkJEZvYHmXZGQVNojzVr+gmqoahu1qv+ yAkzpiphGVAcacqpuFhbuvSgnAHvp6b+yBMS+QBKjHfSAgZzIsxYyHXRNLpHc1dnzM1q hRzTafotv3+rbMNj1Bx6s3ETBA+bl7OskiO20hUbWMatIWDKgQ8dJ9Z35YgbwM4UK3aG Xqn+9Rgb2BVLRMAhYQbTNFfcz7cvTnJJFC+avldiNlI3sRmPw7GZpO5IF+hdflMpb6cH UKtA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=sender:errors-to:content-transfer-encoding:mime-version :list-subscribe:list-help:list-post:list-archive:list-unsubscribe :list-id:precedence:subject:cc:references:in-reply-to:message-id :date:to:from:dkim-signature:arc-authentication-results; bh=l5juljvmr/PTK3OvKQkS8Ki3nmnBhU6k0e25cam/Ow8=; b=WjhAt8lSGEXbge4n2vgB1b7YQfGtEYd/svxqwdaTzQ811ajCvUuuFQN7J3bYxvDuqW t7NQmR+AP+vKpRUOIgGJ6foxDCCW7AsmEeHcY+IUrdkhWXnqf3hC+9v/k5jLsnq2aXGz m1vwZNDaLZQNKWNcFTYXAKixe4pkOUvmKhAtANu19njEBm2i7qX+w4TmUIIL/xYh35+B qDk4tQCf0/0+lveb8pSV6thWNS8GrWhM1Uj/QK98Xfjicu/Pu4IAyuA9kOQnTdm+tuYP nwWT5+VnBNoMnuiyG2DxEhg7+7wUppOhjiKH9XFdi+pcNu8FctFNF6WqQIEdSeIKgjja /cJQ== ARC-Authentication-Results: i=1; mx.google.com; dkim=neutral (body hash did not verify) header.i=@linaro.org header.s=google header.b=i99BL84v; spf=pass (google.com: best guess record for domain of u-boot-bounces@lists.denx.de designates 81.169.180.215 as permitted sender) smtp.mailfrom=u-boot-bounces@lists.denx.de; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=linaro.org Return-Path: Received: from lists.denx.de (dione.denx.de. [81.169.180.215]) by mx.google.com with ESMTP id h59si370788edd.220.2018.03.13.09.51.18; Tue, 13 Mar 2018 09:51:18 -0700 (PDT) Received-SPF: pass (google.com: best guess record for domain of u-boot-bounces@lists.denx.de designates 81.169.180.215 as permitted sender) client-ip=81.169.180.215; Authentication-Results: mx.google.com; dkim=neutral (body hash did not verify) header.i=@linaro.org header.s=google header.b=i99BL84v; spf=pass (google.com: best guess record for domain of u-boot-bounces@lists.denx.de designates 81.169.180.215 as permitted sender) smtp.mailfrom=u-boot-bounces@lists.denx.de; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=linaro.org Received: by lists.denx.de (Postfix, from userid 105) id 6C01FC21E6C; Tue, 13 Mar 2018 16:51:10 +0000 (UTC) X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on lists.denx.de X-Spam-Level: X-Spam-Status: No, score=0.0 required=5.0 tests=RCVD_IN_MSPIKE_H2, T_DKIM_INVALID autolearn=unavailable autolearn_force=no version=3.4.0 Received: from lists.denx.de (localhost [IPv6:::1]) by lists.denx.de (Postfix) with ESMTP id 008C5C21DDC; Tue, 13 Mar 2018 16:50:44 +0000 (UTC) Received: by lists.denx.de (Postfix, from userid 105) id BFF8EC21C8B; Tue, 13 Mar 2018 16:50:43 +0000 (UTC) Received: from mail-wr0-f195.google.com (mail-wr0-f195.google.com [209.85.128.195]) by lists.denx.de (Postfix) with ESMTPS id 55A4EC21BE5 for ; Tue, 13 Mar 2018 16:50:43 +0000 (UTC) Received: by mail-wr0-f195.google.com with SMTP id f14so763117wre.8 for ; Tue, 13 Mar 2018 09:50:43 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=linaro.org; s=google; h=from:to:cc:subject:date:message-id:in-reply-to:references; bh=Lzxdlo82gHbbDckSk9ZPGjw6g4zxoV7d0gNuIaKRog4=; b=i99BL84vX5scWFCTuSxT/uBwTfrFGxZFbwtJWEdRseB/iYJvz7m1TuC8RKnVKFitHr fjTf/M/8Hn7avmZ7R4h2AfM4tSVVbYtUzBzBKnqnX2O1cNNOYPvH15jd/ISxCyqm1ZOb ShC2oS2CbbSEsXPifwZkZs4eM3BgoKYfCLBu4= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:date:message-id:in-reply-to :references; bh=Lzxdlo82gHbbDckSk9ZPGjw6g4zxoV7d0gNuIaKRog4=; b=SXcwfBYaC51GQrN80gwQBTlo9P3r9EX7dRxFBh4Tr0OSwDPKV/pQEVxJd8G0GgZM01 PDtBM/Zg2t7AJ0h1pBOtGTkRKPLioD1EElSTT+lPpmC0ShVr70Jst5zkECsD1ar1AQ25 viBAlMpF3llYb/O4O0uB4P1HbIqZgRXSdR283lckfhIh9uSfwkydg+limRrmZLnB57o+ AfthAhEysMdosbYRpRpmcjbTNGHV3kazTFyxvUlAYu30zsArcLJpgW0EHFTN0b2wPU49 RgpDx0dxrw8tzDEjlXPgw5If8XCJIVCkSlnKckKJOG7W1hOY7dDR33xM28x+yk1j88Xv aegg== X-Gm-Message-State: AElRT7EIe6KlGRwqXIUXtXcpEMALG9ArIhg0/AVgGtH3OpDVvQHVu4hW ZniRSW2UUfE7Gy5CrG41RthajV7DO6s= X-Received: by 10.80.147.21 with SMTP id m21mr1584790eda.175.1520959842770; Tue, 13 Mar 2018 09:50:42 -0700 (PDT) Received: from localhost.localdomain ([109.255.42.2]) by smtp.gmail.com with ESMTPSA id 33sm476671edz.37.2018.03.13.09.50.41 (version=TLS1_2 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Tue, 13 Mar 2018 09:50:42 -0700 (PDT) From: Bryan O'Donoghue To: U-Boot@lists.denx.de, trini@konsulko.com, afd@ti.com, kever.yang@rock-chips.com, philipp.tomsich@theobroma-systems.com, peng.fan@nxp.com Date: Tue, 13 Mar 2018 16:50:27 +0000 Message-Id: <1520959836-16105-2-git-send-email-bryan.odonoghue@linaro.org> X-Mailer: git-send-email 2.7.4 In-Reply-To: <1520959836-16105-1-git-send-email-bryan.odonoghue@linaro.org> References: <1520959836-16105-1-git-send-email-bryan.odonoghue@linaro.org> Cc: Harinarayan Bhatta Subject: [U-Boot] [PATCH v6 01/10] optee: Add lib entries for sharing OPTEE code across ports X-BeenThere: u-boot@lists.denx.de X-Mailman-Version: 2.1.18 Precedence: list List-Id: U-Boot discussion List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , MIME-Version: 1.0 Errors-To: u-boot-bounces@lists.denx.de Sender: "U-Boot" This patch adds code to lib to enable sharing of useful OPTEE code between board-ports and architectures. The code on lib/optee/optee.c comes from the TI omap2 port. Eventually the OMAP2 code will be patched to include the shared code. The intention here is to add more useful OPTEE specific code as more functionality gets added. Signed-off-by: Bryan O'Donoghue Cc: Harinarayan Bhatta Cc: Andrew F. Davis Cc: Tom Rini Cc: Kever Yang Cc: Philipp Tomsich Cc: Peng Fan Tested-by: Peng Fan --- include/tee/optee.h | 16 ++++++++++++++++ lib/Kconfig | 1 + lib/Makefile | 1 + lib/optee/Kconfig | 8 ++++++++ lib/optee/Makefile | 7 +++++++ lib/optee/optee.c | 31 +++++++++++++++++++++++++++++++ 6 files changed, 64 insertions(+) create mode 100644 lib/optee/Kconfig create mode 100644 lib/optee/Makefile create mode 100644 lib/optee/optee.c diff --git a/include/tee/optee.h b/include/tee/optee.h index 9ab0d08..8943afb 100644 --- a/include/tee/optee.h +++ b/include/tee/optee.h @@ -10,6 +10,8 @@ #ifndef _OPTEE_H #define _OPTEE_H +#include + #define OPTEE_MAGIC 0x4554504f #define OPTEE_VERSION 1 #define OPTEE_ARCH_ARM32 0 @@ -27,4 +29,18 @@ struct optee_header { uint32_t paged_size; }; +#if defined(CONFIG_OPTEE) +int optee_verify_image(struct optee_header *hdr, unsigned long tzdram_start, + unsigned long tzdram_len, unsigned long image_len); +#else +static inline int optee_verify_image(struct optee_header *hdr, + unsigned long tzdram_start, + unsigned long tzdram_len, + unsigned long image_len) +{ + return -EPERM; +} + +#endif + #endif /* _OPTEE_H */ diff --git a/lib/Kconfig b/lib/Kconfig index 4fd41c4..a4029a6 100644 --- a/lib/Kconfig +++ b/lib/Kconfig @@ -310,5 +310,6 @@ endmenu source lib/efi/Kconfig source lib/efi_loader/Kconfig +source lib/optee/Kconfig endmenu diff --git a/lib/Makefile b/lib/Makefile index 0db41c1..35da570 100644 --- a/lib/Makefile +++ b/lib/Makefile @@ -18,6 +18,7 @@ obj-$(CONFIG_FIT) += libfdt/ obj-$(CONFIG_OF_LIVE) += of_live.o obj-$(CONFIG_CMD_DHRYSTONE) += dhry/ obj-$(CONFIG_ARCH_AT91) += at91/ +obj-$(CONFIG_OPTEE) += optee/ obj-$(CONFIG_AES) += aes.o obj-y += charset.o diff --git a/lib/optee/Kconfig b/lib/optee/Kconfig new file mode 100644 index 0000000..2e406fe --- /dev/null +++ b/lib/optee/Kconfig @@ -0,0 +1,8 @@ +config OPTEE + bool "Support OPTEE images" + help + U-Boot can be configured to boot OPTEE images. + Selecting this option will enable shared OPTEE library code and + enable an OPTEE specific bootm command that will perform additional + OPTEE specific checks before booting an OPTEE image created with + mkimage. diff --git a/lib/optee/Makefile b/lib/optee/Makefile new file mode 100644 index 0000000..03e832f --- /dev/null +++ b/lib/optee/Makefile @@ -0,0 +1,7 @@ +# +# (C) Copyright 2017 Linaro +# +# SPDX-License-Identifier: GPL-2.0+ +# + +obj-$(CONFIG_OPTEE) += optee.o diff --git a/lib/optee/optee.c b/lib/optee/optee.c new file mode 100644 index 0000000..2cc16d7 --- /dev/null +++ b/lib/optee/optee.c @@ -0,0 +1,31 @@ +/* + * Copyright (C) 2017 Linaro + * Bryan O'Donoghue + * + * SPDX-License-Identifier: GPL-2.0+ + */ + +#include +#include + +int optee_verify_image(struct optee_header *hdr, unsigned long tzdram_start, + unsigned long tzdram_len, unsigned long image_len) +{ + unsigned long tzdram_end = tzdram_start + tzdram_len; + uint32_t tee_file_size; + + tee_file_size = hdr->init_size + hdr->paged_size + + sizeof(struct optee_header); + + if (hdr->magic != OPTEE_MAGIC || + hdr->version != OPTEE_VERSION || + hdr->init_load_addr_hi > tzdram_end || + hdr->init_load_addr_lo < tzdram_start || + tee_file_size > tzdram_len || + tee_file_size != image_len || + (hdr->init_load_addr_lo + tee_file_size) > tzdram_end) { + return -EINVAL; + } + + return 0; +}