LuminaSensum/arm-trusted-firmware

Fork: 0

LuminaSensum / arm-trusted-firmware

History for arm-trusted-firmware / services

2020-03-21	bd0c2f8 Browse files » spd: tlkd: support new TLK SMCs for RPMB service ... This patch adds support to handle following TLK SMCs: {TLK_SET_BL_VERSION, TLK_LOCK_BL_INTERFACE, TLK_BL_RPMB_SERVICE} These SMCs need to be supported in ATF in order to forward them to TLK. Otherwise, these functionalities won't work. Brief: TLK_SET_BL_VERSION: This SMC is issued by the bootloader to supply its version to TLK. TLK can use this to prevent rollback attacks. TLK_LOCK_BL_INTERFACE: This SMC is issued by bootloader before handing off execution to the OS. This allows preventing sensitive SMCs being used by the OS. TLK_BL_RPMB_SERVICE: bootloader issues this SMC to sign or verify RPMB frames. Tested by: Tests TLK can receive the new SMCs issued by bootloader Change-Id: I57c2d189a5f7a77cea26c3f8921866f2a6f0f944 Signed-off-by: Mustafa Yigit Bilgen <mbilgen@nvidia.com> Mustafa Yigit Bilgen authored on 3 Dec 2018 Varun Wadekar committed on 21 Mar 2020
2020-03-18	0600cf6 Browse files » tlkd: remove system off/reset handlers ... TLK does not participate in the system off/reset process and so has no use for the SYSTEM_OFF/RESET notifications. This patch removes the system off/reset handlers as a result. Change-Id: Icf1430b1400cea88000e6d54426eb604a43cbe6c Signed-off-by: Varun Wadekar <vwadekar@nvidia.com> Varun Wadekar committed on 18 Mar 2020
2020-03-18	a1e12de Browse files » spd: trusty: disable error messages seen during boot ... Platforms that do not support Trusty, usually see error messages from the Trusty SPD, during boot. This can be interpreted as a boot failure. This patch lowers the logging level for those error messages to avoid confusion. Change-Id: I931baa2c6db0de1aee17383039bc29ed229a1f25 Signed-off-by: Varun Wadekar <vwadekar@nvidia.com> Varun Wadekar committed on 18 Mar 2020
2020-03-17	0e75343 Browse files » Implement SMCCC_ARCH_SOC_ID SMC call ... Implemented SMCCC_ARCH_SOC_ID call in order to get below SOC information: 1. SOC revision 2. SOC version Implementation done using below SMCCC specification document: https://developer.arm.com/docs/den0028/c Signed-off-by: Manish V Badarkhe <Manish.Badarkhe@arm.com> Change-Id: Ie0595f1c345a6429a6fb4a7f05534a0ca9c9a48b Manish V Badarkhe committed on 17 Mar 2020
2020-03-13	bb37363 Browse files » Merge "SPMD: Add support for SPCI_ID_GET" into integration Sandrine Bailleux authored on 13 Mar 2020 TrustedFirmware Code Review committed on 13 Mar 2020
2020-03-12	ac03ac5 Browse files » SPMD: Add support for SPCI_ID_GET ... This patch introduces the `SPCI_ID_GET` interface which will return the ID of the calling SPCI component. Returns 0 for requests from the non-secure world and the SPCI component ID as specified in the manifest for secure world requests. Change-Id: Icf81eb1d0e1d7d5c521571e04972b6e2d356e0d1 Signed-off-by: Max Shvetsov <maksims.svecovs@arm.com> Signed-off-by: Marc Bonnici <marc.bonnici@arm.com> Max Shvetsov committed on 12 Mar 2020
2020-03-11	d205cda Browse files » spd: tlkd: secure timer interrupt handler ... This patch adds an interrupt handler for TLK. On receiving an interrupt, the source of the interrupt is determined and the interrupt is marked complete. The IRQ number is passed to TLK along with a special SMC function ID. TLK issues an SMC to notify completion of the interrupt handler in the S-EL1 world. Change-Id: I76f28cee6537245c5e448d2078f86312219cea1a Signed-off-by: Varun Wadekar <vwadekar@nvidia.com> Varun Wadekar committed on 11 Mar 2020
2020-03-03	033039f Browse files » SPMD: add command line parameter to run SPM at S-EL2 or S-EL1 ... Added SPMD_SPM_AT_SEL2 build command line parameter. Set to 1 to run SPM at S-EL2. Set to 0 to run SPM at S-EL1 (pre-v8.4 or S-EL2 is disabled). Removed runtime EL from SPM core manifest. Change-Id: Icb4f5ea4c800f266880db1d410d63fe27a1171c0 Signed-off-by: Artsem Artsemenka <artsem.artsemenka@arm.com> Signed-off-by: Max Shvetsov <maksims.svecovs@arm.com> Max Shvetsov committed on 3 Mar 2020
	93ff138 Browse files » SPMD: smc handler qualify secure origin using booleans ... Change-Id: Icc8f73660453a2cbb2241583684b615d5d1af9d4 Signed-off-by: Olivier Deprez <olivier.deprez@arm.com> Olivier Deprez authored on 23 Dec 2019 Max Shvetsov committed on 3 Mar 2020
	0f14d02 Browse files » SPMD: SPMC init, SMC handler cosmetic changes ... Change-Id: I8881d489994aea667e3dd59932ab4123f511d6ba Signed-off-by: Artsem Artsemenka <artsem.artsemenka@arm.com> Signed-off-by: Max Shvetsov <maksims.svecovs@arm.com> Max Shvetsov committed on 3 Mar 2020
	2825946 Browse files » SPMD: Adds partially supported EL2 registers. ... This patch adds EL2 registers that are supported up to ARMv8.6. ARM_ARCH_MINOR has to specified to enable save/restore routine. Note: Following registers are still not covered in save/restore. * AMEVCNTVOFF0<n>_EL2 * AMEVCNTVOFF1<n>_EL2 * ICH_AP0R<n>_EL2 * ICH_AP1R<n>_EL2 * ICH_LR<n>_EL2 Change-Id: I4813f3243e56e21cb297b31ef549a4b38d4876e1 Signed-off-by: Max Shvetsov <maksims.svecovs@arm.com> Max Shvetsov committed on 3 Mar 2020
2020-03-02	28f39f0 Browse files » SPMD: save/restore EL2 system registers. ... NOTE: Not all EL-2 system registers are saved/restored. This subset includes registers recognized by ARMv8.0 Change-Id: I9993c7d78d8f5f8e72d1c6c8d6fd871283aa3ce0 Signed-off-by: Jose Marinho <jose.marinho@arm.com> Signed-off-by: Olivier Deprez <olivier.deprez@arm.com> Signed-off-by: Artsem Artsemenka <artsem.artsemenka@arm.com> Signed-off-by: Max Shvetsov <maksims.svecovs@arm.com> Max Shvetsov committed on 2 Mar 2020
2020-02-20	af10d22 Browse files » Use consistent SMCCC error code ... Removed duplicate error code present for SMCCC and used proper error code for "SMCCC_ARCH_WORKAROUND_2" call. Signed-off-by: Manish V Badarkhe <Manish.Badarkhe@arm.com> Change-Id: I76fc7c88095f78a7e2c3d205838f8eaf3132ed5c Manish V Badarkhe committed on 20 Feb 2020
2020-02-18	76ce102 Browse files » Merge "coverity: fix MISRA violations" into integration Mark Dykes authored on 18 Feb 2020 TrustedFirmware Code Review committed on 18 Feb 2020
2020-02-18	2fe75a2 Browse files » coverity: fix MISRA violations ... Fixes for the following MISRA violations: - Missing explicit parentheses on sub-expression - An identifier or macro name beginning with an underscore, shall not be declared - Type mismatch in BL1 SMC handlers and tspd_main.c Change-Id: I7a92abf260da95acb0846b27c2997b59b059efc4 Signed-off-by: Zelalem <zelalem.aweke@arm.com> Zelalem committed on 18 Feb 2020
2020-02-12	76776c2 Browse files » trusty: generic-arm64-smcall: Support gicr address ... Add SMC_GET_GIC_BASE_GICR option to SMC_FC_GET_REG_BASE and SMC_FC64_GET_REG_BASE calls for returning the base address of the gic redistributor added in gic version 3. Bug: 122357256 Change-Id: Ia7c287040656515bab262588163e0c5fc8f13a21 Signed-off-by: Arve Hjønnevåg <arve@android.com> Arve Hjønnevåg committed on 12 Feb 2020
	471e8fa Browse files » trusty: Allow gic base to be specified with GICD_BASE ... Some platforms define GICD_BASE instead of PLAT_ARM_GICD_BASE but the meaning is the same. Change-Id: I1bb04bb49fdab055b365b1d70a4d48d2058e49df Signed-off-by: Arve Hjønnevåg <arve@android.com> Arve Hjønnevåg committed on 12 Feb 2020
	f01428b Browse files » trusty: Allow getting trusty memsize from BL32_MEM_SIZE instead of TSP_SEC_MEM_SIZE ... Some platforms define BL32_MEM_SIZE instead of TSP_SEC_MEM_SIZE, but the meaning is the same. Change-Id: I93d96dca442e653435cae6a165b1955efe2d2b75 Signed-off-by: Arve Hjønnevåg <arve@android.com> Arve Hjønnevåg committed on 12 Feb 2020
2020-02-10	2a7b403 Browse files » SPMD: hook SPMD into standard services framework ... This patch adds support to initialise the SPM dispatcher as a standard secure service. It also registers a handler for SPCI SMCs exported by the SPM dispatcher. Signed-off-by: Achin Gupta <achin.gupta@arm.com> Signed-off-by: Artsem Artsemenka <artsem.artsemenka@arm.com> Change-Id: I2183adf826d08ff3fee9aee75f021021162b6477 Achin Gupta authored on 11 Oct 2019 Max Shvetsov committed on 10 Feb 2020
2020-02-10	bdd2596 Browse files » SPMD: add SPM dispatcher based upon SPCI Beta 0 spec ... This patch adds a rudimentary SPM dispatcher component in EL3. It does the following: - Consumes the TOS_FW_CONFIG to determine properties of the SPM core component - Initialises the SPM core component which resides in the BL32 image - Implements a handler for SPCI calls from either security state. Some basic validation is done for each call but in most cases it is simply forwarded as-is to the "other" security state. Signed-off-by: Achin Gupta <achin.gupta@arm.com> Signed-off-by: Artsem Artsemenka <artsem.artsemenka@arm.com> Change-Id: I7d116814557f7255f4f4ebb797d1619d4fbab590 Achin Gupta authored on 11 Oct 2019 Max Shvetsov committed on 10 Feb 2020
2020-01-22	f461fe3 Browse files » Prevent speculative execution past ERET ... Even though ERET always causes a jump to another address, aarch64 CPUs speculatively execute following instructions as if the ERET instruction was not a jump instruction. The speculative execution does not cross privilege-levels (to the jump target as one would expect), but it continues on the kernel privilege level as if the ERET instruction did not change the control flow - thus execution anything that is accidentally linked after the ERET instruction. Later, the results of this speculative execution are always architecturally discarded, however they can leak data using microarchitectural side channels. This speculative execution is very reliable (seems to be unconditional) and it manages to complete even relatively performance-heavy operations (e.g. multiple dependent fetches from uncached memory). This was fixed in Linux, FreeBSD, OpenBSD and Optee OS: https://github.com/torvalds/linux/commit/679db70801da9fda91d26caf13bf5b5ccc74e8e8 https://github.com/freebsd/freebsd/commit/29fb48ace4186a41c409fde52bcf4216e9e50b61 https://github.com/openbsd/src/commit/3a08873ece1cb28ace89fd65e8f3c1375cc98de2 https://github.com/OP-TEE/optee_os/commit/abfd092aa19f9c0251e3d5551e2d68a9ebcfec8a It is demonstrated in a SafeSide example: https://github.com/google/safeside/blob/master/demos/eret_hvc_smc_wrapper.cc https://github.com/google/safeside/blob/master/kernel_modules/kmod_eret_hvc_smc/eret_hvc_smc_module.c Signed-off-by: Anthony Steinhauser <asteinhauser@google.com> Change-Id: Iead39b0b9fb4b8d8b5609daaa8be81497ba63a0f Anthony Steinhauser committed on 22 Jan 2020
2019-12-20	99c6910 Browse files » spm-mm: Rename aarch64 assembly files ... Change-Id: I2bab67f319758dd033aa689d985227cad796cdea Signed-off-by: Paul Beesley <paul.beesley@arm.com> Paul Beesley authored on 15 Oct 2019 Manish Pandey committed on 20 Dec 2019
	6b1d9e6 Browse files » spm-mm: Rename source files ... Change-Id: I851be04fc5de8a95ea11270996f8ca33f0fccadb Signed-off-by: Paul Beesley <paul.beesley@arm.com> Paul Beesley authored on 15 Oct 2019 Manish Pandey committed on 20 Dec 2019
	6b54236 Browse files » spm-mm: Rename spm_shim_private.h ... Change-Id: I575188885ebed8c5f0682ac6e0e7dd159155727f Signed-off-by: Paul Beesley <paul.beesley@arm.com> Paul Beesley authored on 15 Oct 2019 Manish Pandey committed on 20 Dec 2019
	ff362d5 Browse files » spm-mm: Rename spm_private.h ... Change-Id: Ie47009158032c2e8f35febd7bf5458156f334ead Signed-off-by: Paul Beesley <paul.beesley@arm.com> Paul Beesley authored on 15 Oct 2019 Manish Pandey committed on 20 Dec 2019
	442e092 Browse files » spm-mm: Rename component makefile ... Change-Id: Idcd2a35cd2b30d77a7ca031f7e0172814bdb8cab Signed-off-by: Paul Beesley <paul.beesley@arm.com> Paul Beesley authored on 15 Oct 2019 Manish Pandey committed on 20 Dec 2019
	962c44e Browse files » spm-mm: Remove mm_svc.h header ... The contents of this header have been merged into the spm_mm_svc.h header file. Change-Id: I01530b2e4ec1b4c091ce339758025e2216e740a4 Signed-off-by: Paul Beesley <paul.beesley@arm.com> Paul Beesley authored on 15 Oct 2019 Manish Pandey committed on 20 Dec 2019
	0bf9f56 Browse files » spm-mm: Refactor spm_svc.h and its contents ... Change-Id: I91c192924433226b54d33e57d56d146c1c6df81b Signed-off-by: Paul Beesley <paul.beesley@arm.com> Paul Beesley authored on 15 Oct 2019 Manish Pandey committed on 20 Dec 2019
	aeaa225 Browse files » spm-mm: Refactor secure_partition.h and its contents ... Before adding any new SPM-related components we should first do some cleanup around the existing SPM-MM implementation. The aim is to make sure that any SPM-MM components have names that clearly indicate that they are MM-related. Otherwise, when adding new SPM code, it could quickly become confusing as it would be unclear to which component the code belongs. The secure_partition.h header is a clear example of this, as the name is generic so it could easily apply to any SPM-related code, when it is in fact SPM-MM specific. This patch renames the file and the two structures defined within it, and then modifies any references in files that use the header. Change-Id: I44bd95fab774c358178b3e81262a16da500fda26 Signed-off-by: Paul Beesley <paul.beesley@arm.com> Paul Beesley authored on 15 Oct 2019 Manish Pandey committed on 20 Dec 2019
	538b002 Browse files » spm: Remove SPM Alpha 1 prototype and support files ... The Secure Partition Manager (SPM) prototype implementation is being removed. This is preparatory work for putting in place a dispatcher component that, in turn, enables partition managers at S-EL2 / S-EL1. This patch removes: - The core service files (std_svc/spm) - The Resource Descriptor headers (include/services) - SPRT protocol support and service definitions - SPCI protocol support and service definitions Change-Id: Iaade6f6422eaf9a71187b1e2a4dffd7fb8766426 Signed-off-by: Paul Beesley <paul.beesley@arm.com> Signed-off-by: Artsem Artsemenka <artsem.artsemenka@arm.com> Paul Beesley authored on 14 Oct 2019 Manish Pandey committed on 20 Dec 2019