1 /*
2  * Copyright (c) 2014-2020, ARM Limited and Contributors. All rights reserved.
3  *
4  * SPDX-License-Identifier: BSD-3-Clause
5  */
6 
7 #include <assert.h>
8 #include <errno.h>
9 #include <stdint.h>
10 #include <string.h>
11 
12 #include <platform_def.h>
13 
14 #include <common/bl_common.h>
15 #include <common/debug.h>
16 #include <drivers/io/io_driver.h>
17 #include <drivers/io/io_fip.h>
18 #include <drivers/io/io_storage.h>
19 #include <lib/utils.h>
20 #include <plat/common/platform.h>
21 #include <tools_share/firmware_image_package.h>
22 #include <tools_share/uuid.h>
23 
24 #ifndef MAX_FIP_DEVICES
25 #define MAX_FIP_DEVICES		1
26 #endif
27 
28 /* Useful for printing UUIDs when debugging.*/
29 #define PRINT_UUID2(x)								\
30 	"%08x-%04hx-%04hx-%02hhx%02hhx-%02hhx%02hhx%02hhx%02hhx%02hhx%02hhx",	\
31 		x.time_low, x.time_mid, x.time_hi_and_version,			\
32 		x.clock_seq_hi_and_reserved, x.clock_seq_low,			\
33 		x.node[0], x.node[1], x.node[2], x.node[3],			\
34 		x.node[4], x.node[5]
35 
36 typedef struct {
37 	unsigned int file_pos;
38 	fip_toc_entry_t entry;
39 } fip_file_state_t;
40 
41 /*
42  * Maintain dev_spec per FIP Device
43  * TODO - Add backend handles and file state
44  * per FIP device here once backends like io_memmap
45  * can support multiple open files
46  */
47 typedef struct {
48 	uintptr_t dev_spec;
49 	uint16_t plat_toc_flag;
50 } fip_dev_state_t;
51 
52 /*
53  * Only one file can be open across all FIP device
54  * as backends like io_memmap don't support
55  * multiple open files. The file state and
56  * backend handle should be maintained per FIP device
57  * if the same support is available in the backend
58  */
59 static fip_file_state_t current_fip_file = {0};
60 static uintptr_t backend_dev_handle;
61 static uintptr_t backend_image_spec;
62 
63 static fip_dev_state_t state_pool[MAX_FIP_DEVICES];
64 static io_dev_info_t dev_info_pool[MAX_FIP_DEVICES];
65 
66 /* Track number of allocated fip devices */
67 static unsigned int fip_dev_count;
68 
69 /* Firmware Image Package driver functions */
70 static int fip_dev_open(const uintptr_t dev_spec, io_dev_info_t **dev_info);
71 static int fip_file_open(io_dev_info_t *dev_info, const uintptr_t spec,
72 			  io_entity_t *entity);
73 static int fip_file_len(io_entity_t *entity, size_t *length);
74 static int fip_file_read(io_entity_t *entity, uintptr_t buffer, size_t length,
75 			  size_t *length_read);
76 static int fip_file_close(io_entity_t *entity);
77 static int fip_dev_init(io_dev_info_t *dev_info, const uintptr_t init_params);
78 static int fip_dev_close(io_dev_info_t *dev_info);
79 
80 
81 /* Return 0 for equal uuids. */
compare_uuids(const uuid_t * uuid1,const uuid_t * uuid2)82 static inline int compare_uuids(const uuid_t *uuid1, const uuid_t *uuid2)
83 {
84 	return memcmp(uuid1, uuid2, sizeof(uuid_t));
85 }
86 
87 
is_valid_header(fip_toc_header_t * header)88 static inline int is_valid_header(fip_toc_header_t *header)
89 {
90 	if ((header->name == TOC_HEADER_NAME) && (header->serial_number != 0)) {
91 		return 1;
92 	} else {
93 		return 0;
94 	}
95 }
96 
97 
98 /* Identify the device type as a virtual driver */
device_type_fip(void)99 static io_type_t device_type_fip(void)
100 {
101 	return IO_TYPE_FIRMWARE_IMAGE_PACKAGE;
102 }
103 
104 
105 static const io_dev_connector_t fip_dev_connector = {
106 	.dev_open = fip_dev_open
107 };
108 
109 
110 static const io_dev_funcs_t fip_dev_funcs = {
111 	.type = device_type_fip,
112 	.open = fip_file_open,
113 	.seek = NULL,
114 	.size = fip_file_len,
115 	.read = fip_file_read,
116 	.write = NULL,
117 	.close = fip_file_close,
118 	.dev_init = fip_dev_init,
119 	.dev_close = fip_dev_close,
120 };
121 
122 /* Locate a file state in the pool, specified by address */
find_first_fip_state(const uintptr_t dev_spec,unsigned int * index_out)123 static int find_first_fip_state(const uintptr_t dev_spec,
124 				  unsigned int *index_out)
125 {
126 	int result = -ENOENT;
127 	unsigned int index;
128 
129 	for (index = 0; index < (unsigned int)MAX_FIP_DEVICES; ++index) {
130 		/* dev_spec is used as identifier since it's unique */
131 		if (state_pool[index].dev_spec == dev_spec) {
132 			result = 0;
133 			*index_out = index;
134 			break;
135 		}
136 	}
137 	return result;
138 }
139 
140 
141 /* Allocate a device info from the pool and return a pointer to it */
allocate_dev_info(io_dev_info_t ** dev_info)142 static int allocate_dev_info(io_dev_info_t **dev_info)
143 {
144 	int result = -ENOMEM;
145 
146 	assert(dev_info != NULL);
147 
148 	if (fip_dev_count < (unsigned int)MAX_FIP_DEVICES) {
149 		unsigned int index = 0;
150 
151 		result = find_first_fip_state(0, &index);
152 		assert(result == 0);
153 		/* initialize dev_info */
154 		dev_info_pool[index].funcs = &fip_dev_funcs;
155 		dev_info_pool[index].info =
156 				(uintptr_t)&state_pool[index];
157 		*dev_info = &dev_info_pool[index];
158 		++fip_dev_count;
159 	}
160 
161 	return result;
162 }
163 
164 /* Release a device info to the pool */
free_dev_info(io_dev_info_t * dev_info)165 static int free_dev_info(io_dev_info_t *dev_info)
166 {
167 	int result;
168 	unsigned int index = 0;
169 	fip_dev_state_t *state;
170 
171 	assert(dev_info != NULL);
172 
173 	state = (fip_dev_state_t *)dev_info->info;
174 	result = find_first_fip_state(state->dev_spec, &index);
175 	if (result ==  0) {
176 		/* free if device info is valid */
177 		zeromem(state, sizeof(fip_dev_state_t));
178 		--fip_dev_count;
179 	}
180 
181 	return result;
182 }
183 
184 /*
185  * Multiple FIP devices can be opened depending on the value of
186  * MAX_FIP_DEVICES. Given that there is only one backend, only a
187  * single file can be open at a time by any FIP device.
188  */
fip_dev_open(const uintptr_t dev_spec,io_dev_info_t ** dev_info)189 static int fip_dev_open(const uintptr_t dev_spec,
190 			 io_dev_info_t **dev_info)
191 {
192 	int result;
193 	io_dev_info_t *info;
194 	fip_dev_state_t *state;
195 
196 	assert(dev_info != NULL);
197 #if MAX_FIP_DEVICES > 1
198 	assert(dev_spec != (uintptr_t)NULL);
199 #endif
200 
201 	result = allocate_dev_info(&info);
202 	if (result != 0)
203 		return -ENOMEM;
204 
205 	state = (fip_dev_state_t *)info->info;
206 
207 	state->dev_spec = dev_spec;
208 
209 	*dev_info = info;
210 
211 	return 0;
212 }
213 
214 
215 /* Do some basic package checks. */
fip_dev_init(io_dev_info_t * dev_info,const uintptr_t init_params)216 static int fip_dev_init(io_dev_info_t *dev_info, const uintptr_t init_params)
217 {
218 	int result;
219 	unsigned int image_id = (unsigned int)init_params;
220 	uintptr_t backend_handle;
221 	fip_toc_header_t header;
222 	size_t bytes_read;
223 	fip_dev_state_t *state;
224 
225 	assert(dev_info != NULL);
226 
227 	state = (fip_dev_state_t *)dev_info->info;
228 
229 	/* Obtain a reference to the image by querying the platform layer */
230 	result = plat_get_image_source(image_id, &backend_dev_handle,
231 				       &backend_image_spec);
232 	if (result != 0) {
233 		WARN("Failed to obtain reference to image id=%u (%i)\n",
234 			image_id, result);
235 		result = -ENOENT;
236 		goto fip_dev_init_exit;
237 	}
238 
239 	/* Attempt to access the FIP image */
240 	result = io_open(backend_dev_handle, backend_image_spec,
241 			 &backend_handle);
242 	if (result != 0) {
243 		WARN("Failed to access image id=%u (%i)\n", image_id, result);
244 		result = -ENOENT;
245 		goto fip_dev_init_exit;
246 	}
247 
248 	result = io_read(backend_handle, (uintptr_t)&header, sizeof(header),
249 			&bytes_read);
250 	if (result == 0) {
251 		if (!is_valid_header(&header)) {
252 			WARN("Firmware Image Package header check failed.\n");
253 			result = -ENOENT;
254 		} else {
255 			VERBOSE("FIP header looks OK.\n");
256 			/*
257 			 * Store 16-bit Platform ToC flags field which occupies
258 			 * bits [32-47] in fip header.
259 			 */
260 			state->plat_toc_flag = (header.flags >> 32) & 0xffff;
261 		}
262 	}
263 
264 	io_close(backend_handle);
265 
266  fip_dev_init_exit:
267 	return result;
268 }
269 
270 /* Close a connection to the FIP device */
fip_dev_close(io_dev_info_t * dev_info)271 static int fip_dev_close(io_dev_info_t *dev_info)
272 {
273 	/* TODO: Consider tracking open files and cleaning them up here */
274 
275 	/* Clear the backend. */
276 	backend_dev_handle = (uintptr_t)NULL;
277 	backend_image_spec = (uintptr_t)NULL;
278 
279 	return free_dev_info(dev_info);
280 }
281 
282 
283 /* Open a file for access from package. */
fip_file_open(io_dev_info_t * dev_info,const uintptr_t spec,io_entity_t * entity)284 static int fip_file_open(io_dev_info_t *dev_info, const uintptr_t spec,
285 			 io_entity_t *entity)
286 {
287 	int result;
288 	uintptr_t backend_handle;
289 	const io_uuid_spec_t *uuid_spec = (io_uuid_spec_t *)spec;
290 	static const uuid_t uuid_null = { {0} }; /* Double braces for clang */
291 	size_t bytes_read;
292 	int found_file = 0;
293 
294 	assert(uuid_spec != NULL);
295 	assert(entity != NULL);
296 
297 	/* Can only have one file open at a time for the moment. We need to
298 	 * track state like file cursor position. We know the header lives at
299 	 * offset zero, so this entry should never be zero for an active file.
300 	 * When the system supports dynamic memory allocation we can allow more
301 	 * than one open file at a time if needed.
302 	 */
303 	if (current_fip_file.entry.offset_address != 0U) {
304 		WARN("fip_file_open : Only one open file at a time.\n");
305 		return -ENFILE;
306 	}
307 
308 	/* Attempt to access the FIP image */
309 	result = io_open(backend_dev_handle, backend_image_spec,
310 			 &backend_handle);
311 	if (result != 0) {
312 		WARN("Failed to open Firmware Image Package (%i)\n", result);
313 		result = -ENOENT;
314 		goto fip_file_open_exit;
315 	}
316 
317 	/* Seek past the FIP header into the Table of Contents */
318 	result = io_seek(backend_handle, IO_SEEK_SET,
319 			 (signed long long)sizeof(fip_toc_header_t));
320 	if (result != 0) {
321 		WARN("fip_file_open: failed to seek\n");
322 		result = -ENOENT;
323 		goto fip_file_open_close;
324 	}
325 
326 	found_file = 0;
327 	do {
328 		result = io_read(backend_handle,
329 				 (uintptr_t)&current_fip_file.entry,
330 				 sizeof(current_fip_file.entry),
331 				 &bytes_read);
332 		if (result == 0) {
333 			if (compare_uuids(&current_fip_file.entry.uuid,
334 					  &uuid_spec->uuid) == 0) {
335 				found_file = 1;
336 			}
337 		} else {
338 			WARN("Failed to read FIP (%i)\n", result);
339 			goto fip_file_open_close;
340 		}
341 	} while ((found_file == 0) &&
342 			(compare_uuids(&current_fip_file.entry.uuid,
343 				&uuid_null) != 0));
344 
345 	if (found_file == 1) {
346 		/* All fine. Update entity info with file state and return. Set
347 		 * the file position to 0. The 'current_fip_file.entry' holds
348 		 * the base and size of the file.
349 		 */
350 		current_fip_file.file_pos = 0;
351 		entity->info = (uintptr_t)&current_fip_file;
352 	} else {
353 		/* Did not find the file in the FIP. */
354 		current_fip_file.entry.offset_address = 0;
355 		result = -ENOENT;
356 	}
357 
358  fip_file_open_close:
359 	io_close(backend_handle);
360 
361  fip_file_open_exit:
362 	return result;
363 }
364 
365 
366 /* Return the size of a file in package */
fip_file_len(io_entity_t * entity,size_t * length)367 static int fip_file_len(io_entity_t *entity, size_t *length)
368 {
369 	assert(entity != NULL);
370 	assert(length != NULL);
371 
372 	*length =  ((fip_file_state_t *)entity->info)->entry.size;
373 
374 	return 0;
375 }
376 
377 
378 /* Read data from a file in package */
fip_file_read(io_entity_t * entity,uintptr_t buffer,size_t length,size_t * length_read)379 static int fip_file_read(io_entity_t *entity, uintptr_t buffer, size_t length,
380 			  size_t *length_read)
381 {
382 	int result;
383 	fip_file_state_t *fp;
384 	size_t file_offset;
385 	size_t bytes_read;
386 	uintptr_t backend_handle;
387 
388 	assert(entity != NULL);
389 	assert(length_read != NULL);
390 	assert(entity->info != (uintptr_t)NULL);
391 
392 	/* Open the backend, attempt to access the blob image */
393 	result = io_open(backend_dev_handle, backend_image_spec,
394 			 &backend_handle);
395 	if (result != 0) {
396 		WARN("Failed to open FIP (%i)\n", result);
397 		result = -ENOENT;
398 		goto fip_file_read_exit;
399 	}
400 
401 	fp = (fip_file_state_t *)entity->info;
402 
403 	/* Seek to the position in the FIP where the payload lives */
404 	file_offset = fp->entry.offset_address + fp->file_pos;
405 	result = io_seek(backend_handle, IO_SEEK_SET,
406 			 (signed long long)file_offset);
407 	if (result != 0) {
408 		WARN("fip_file_read: failed to seek\n");
409 		result = -ENOENT;
410 		goto fip_file_read_close;
411 	}
412 
413 	result = io_read(backend_handle, buffer, length, &bytes_read);
414 	if (result != 0) {
415 		/* We cannot read our data. Fail. */
416 		WARN("Failed to read payload (%i)\n", result);
417 		result = -ENOENT;
418 		goto fip_file_read_close;
419 	} else {
420 		/* Set caller length and new file position. */
421 		*length_read = bytes_read;
422 		fp->file_pos += bytes_read;
423 	}
424 
425 /* Close the backend. */
426  fip_file_read_close:
427 	io_close(backend_handle);
428 
429  fip_file_read_exit:
430 	return result;
431 }
432 
433 
434 /* Close a file in package */
fip_file_close(io_entity_t * entity)435 static int fip_file_close(io_entity_t *entity)
436 {
437 	/* Clear our current file pointer.
438 	 * If we had malloc() we would free() here.
439 	 */
440 	if (current_fip_file.entry.offset_address != 0U) {
441 		zeromem(&current_fip_file, sizeof(current_fip_file));
442 	}
443 
444 	/* Clear the Entity info. */
445 	entity->info = 0;
446 
447 	return 0;
448 }
449 
450 /* Exported functions */
451 
452 /* Register the Firmware Image Package driver with the IO abstraction */
register_io_dev_fip(const io_dev_connector_t ** dev_con)453 int register_io_dev_fip(const io_dev_connector_t **dev_con)
454 {
455 	int result;
456 	assert(dev_con != NULL);
457 
458 	/*
459 	 * Since dev_info isn't really used in io_register_device, always
460 	 * use the same device info at here instead.
461 	 */
462 	result = io_register_device(&dev_info_pool[0]);
463 	if (result == 0)
464 		*dev_con = &fip_dev_connector;
465 
466 	return result;
467 }
468 
469 /* Function to retrieve plat_toc_flags, previously saved in FIP dev */
fip_dev_get_plat_toc_flag(io_dev_info_t * dev_info,uint16_t * plat_toc_flag)470 int fip_dev_get_plat_toc_flag(io_dev_info_t *dev_info, uint16_t *plat_toc_flag)
471 {
472 	fip_dev_state_t *state;
473 
474 	assert(dev_info != NULL);
475 
476 	state = (fip_dev_state_t *)dev_info->info;
477 
478 	*plat_toc_flag =  state->plat_toc_flag;
479 
480 	return 0;
481 }
482