Implement plat_set_nv_ctr for FVP platforms
authorAntonio Nino Diaz <antonio.ninodiaz@arm.com>
Fri, 20 May 2016 13:14:16 +0000 (14:14 +0100)
committerAntonio Nino Diaz <antonio.ninodiaz@arm.com>
Fri, 3 Jun 2016 10:17:03 +0000 (11:17 +0100)
Replaced placeholder implementation of plat_set_nv_ctr for FVP
platforms by a working one.

On FVP, the mapping of region DEVICE2 has been changed from RO to RW
to prevent exceptions when writing to the NV counter, which is
contained in this region.

Change-Id: I56a49631432ce13905572378cbdf106f69c82f57

plat/arm/board/common/board_arm_trusted_boot.c
plat/arm/board/fvp/fvp_common.c
plat/arm/board/fvp/fvp_trusted_boot.c [new file with mode: 0644]
plat/arm/board/fvp/platform.mk

index 7ae00ccee738f1d9ff7d4288d5c2a6184e8f90f4..fd9e9f628618449d72400e1098e2a5f64b30b662 100644 (file)
@@ -1,5 +1,5 @@
 /*
- * Copyright (c) 2015, ARM Limited and Contributors. All rights reserved.
+ * Copyright (c) 2015-2016, ARM Limited and Contributors. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions are met:
@@ -180,10 +180,10 @@ int plat_get_nv_ctr(void *cookie, unsigned int *nv_ctr)
 }
 
 /*
- * Store a new non-volatile counter value. On Juno and FVP, the non-volatile
- * counters are RO and cannot be modified. We expect the values in the
- * certificates to always match the RO values so that this function is never
- * called.
+ * Store a new non-volatile counter value. By default on ARM development
+ * platforms, the non-volatile counters are RO and cannot be modified. We expect
+ * the values in the certificates to always match the RO values so that this
+ * function is never called.
  *
  * Return: 0 = success, Otherwise = error
  */
index eb67dab2b3dd580390d246d35b7dfe281851661f..0f557af243497afd870689d19914a185d16d51e0 100644 (file)
@@ -62,7 +62,7 @@ arm_config_t arm_config;
 
 #define MAP_DEVICE2    MAP_REGION_FLAT(DEVICE2_BASE,                   \
                                        DEVICE2_SIZE,                   \
-                                       MT_DEVICE | MT_RO | MT_SECURE)
+                                       MT_DEVICE | MT_RW | MT_SECURE)
 
 
 /*
diff --git a/plat/arm/board/fvp/fvp_trusted_boot.c b/plat/arm/board/fvp/fvp_trusted_boot.c
new file mode 100644 (file)
index 0000000..7db5051
--- /dev/null
@@ -0,0 +1,68 @@
+/*
+ * Copyright (c) 2016, ARM Limited and Contributors. All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions are met:
+ *
+ * Redistributions of source code must retain the above copyright notice, this
+ * list of conditions and the following disclaimer.
+ *
+ * Redistributions in binary form must reproduce the above copyright notice,
+ * this list of conditions and the following disclaimer in the documentation
+ * and/or other materials provided with the distribution.
+ *
+ * Neither the name of ARM nor the names of its contributors may be used
+ * to endorse or promote products derived from this software without specific
+ * prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
+ * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+ * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+ * ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE
+ * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
+ * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
+ * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
+ * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
+ * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
+ * POSSIBILITY OF SUCH DAMAGE.
+ */
+
+#include <assert.h>
+#include <platform_oid.h>
+#include <stdint.h>
+#include <string.h>
+#include "fvp_def.h"
+
+/*
+ * Store a new non-volatile counter value. On some FVP versions, the
+ * non-volatile counters are RO. On these versions we expect the values in the
+ * certificates to always match the RO values so that this function is never
+ * called.
+ *
+ * Return: 0 = success, Otherwise = error
+ */
+int plat_set_nv_ctr(void *cookie, unsigned int nv_ctr)
+{
+       const char *oid;
+       uint32_t *nv_ctr_addr;
+
+       assert(cookie != NULL);
+
+       oid = (const char *)cookie;
+       if (strcmp(oid, TRUSTED_FW_NVCOUNTER_OID) == 0) {
+               nv_ctr_addr = (uint32_t *)TFW_NVCTR_BASE;
+       } else if (strcmp(oid, NON_TRUSTED_FW_NVCOUNTER_OID) == 0) {
+               nv_ctr_addr = (uint32_t *)NTFW_CTR_BASE;
+       } else {
+               return 1;
+       }
+
+       *(unsigned int *)nv_ctr_addr = nv_ctr;
+
+       /* Verify that the current value is the one we just wrote. */
+       if (nv_ctr != (unsigned int)(*nv_ctr_addr))
+               return 1;
+
+       return 0;
+}
index 6456cdeaab8ad4ba2fea5ad8a36ce688a6a90740..e4ae0ed0ea20af9fb1f336addc50faa018f33b27 100644 (file)
@@ -111,6 +111,7 @@ BL1_SOURCES         +=      drivers/io/io_semihosting.c                     \
                                plat/arm/board/fvp/fvp_bl1_setup.c              \
                                plat/arm/board/fvp/fvp_err.c                    \
                                plat/arm/board/fvp/fvp_io_storage.c             \
+                               plat/arm/board/fvp/fvp_trusted_boot.c           \
                                ${FVP_CPU_LIBS}                                 \
                                ${FVP_INTERCONNECT_SOURCES}
 
@@ -122,6 +123,7 @@ BL2_SOURCES         +=      drivers/io/io_semihosting.c                     \
                                plat/arm/board/fvp/fvp_bl2_setup.c              \
                                plat/arm/board/fvp/fvp_err.c                    \
                                plat/arm/board/fvp/fvp_io_storage.c             \
+                               plat/arm/board/fvp/fvp_trusted_boot.c           \
                                ${FVP_SECURITY_SOURCES}
 
 ifeq (${FVP_USE_SP804_TIMER},1)