Daisuke Nojiri | 79cac09 | 2014-06-30 08:51:39 -0700 | [diff] [blame] | 1 | /* |
| 2 | * This file is part of the coreboot project. |
| 3 | * |
| 4 | * Copyright (C) 2013 Google, Inc. |
| 5 | * |
| 6 | * This program is free software; you can redistribute it and/or modify |
| 7 | * it under the terms of the GNU General Public License as published by |
| 8 | * the Free Software Foundation; version 2 of the License. |
| 9 | * |
| 10 | * This program is distributed in the hope that it will be useful, |
| 11 | * but WITHOUT ANY WARRANTY; without even the implied warranty of |
| 12 | * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
| 13 | * GNU General Public License for more details. |
Daisuke Nojiri | 79cac09 | 2014-06-30 08:51:39 -0700 | [diff] [blame] | 14 | */ |
| 15 | |
Aaron Durbin | 1f0ce3a | 2016-11-18 09:05:18 -0600 | [diff] [blame] | 16 | /* This needs to be pulled in first so that the handoff code below and |
| 17 | * peek into the vb2 data structures. Additionally, vboot doesn't currently |
| 18 | * include what it uses in its own headers. Provide the types it's after. |
| 19 | * TODO: fix this necessity. */ |
| 20 | #define NEED_VB20_INTERNALS |
| 21 | #include <stddef.h> |
| 22 | #include <stdint.h> |
| 23 | #include <vb2_api.h> |
| 24 | |
Daisuke Nojiri | efddcfb | 2014-09-04 09:55:34 -0700 | [diff] [blame] | 25 | #include <arch/stages.h> |
| 26 | #include <assert.h> |
Furquan Shaikh | 2a12e2e | 2016-07-25 11:48:03 -0700 | [diff] [blame] | 27 | #include <bootmode.h> |
Daisuke Nojiri | 79cac09 | 2014-06-30 08:51:39 -0700 | [diff] [blame] | 28 | #include <string.h> |
| 29 | #include <cbfs.h> |
| 30 | #include <cbmem.h> |
| 31 | #include <console/console.h> |
| 32 | #include <console/vtxprintf.h> |
Aaron Durbin | 0424c95 | 2015-03-28 23:56:22 -0500 | [diff] [blame] | 33 | #include <fmap.h> |
Daisuke Nojiri | 79cac09 | 2014-06-30 08:51:39 -0700 | [diff] [blame] | 34 | #include <stdlib.h> |
| 35 | #include <timestamp.h> |
Daisuke Nojiri | 79cac09 | 2014-06-30 08:51:39 -0700 | [diff] [blame] | 36 | #include <vboot_struct.h> |
Furquan Shaikh | 2a12e2e | 2016-07-25 11:48:03 -0700 | [diff] [blame] | 37 | #include <vboot/vbnv.h> |
| 38 | #include <vboot/misc.h> |
Daisuke Nojiri | 79cac09 | 2014-06-30 08:51:39 -0700 | [diff] [blame] | 39 | |
| 40 | /** |
| 41 | * Sets vboot_handoff based on the information in vb2_shared_data |
Daisuke Nojiri | 79cac09 | 2014-06-30 08:51:39 -0700 | [diff] [blame] | 42 | */ |
| 43 | static void fill_vboot_handoff(struct vboot_handoff *vboot_handoff, |
Daisuke Nojiri | efddcfb | 2014-09-04 09:55:34 -0700 | [diff] [blame] | 44 | struct vb2_shared_data *vb2_sd) |
Daisuke Nojiri | 79cac09 | 2014-06-30 08:51:39 -0700 | [diff] [blame] | 45 | { |
| 46 | VbSharedDataHeader *vb_sd = |
| 47 | (VbSharedDataHeader *)vboot_handoff->shared_data; |
| 48 | uint32_t *oflags = &vboot_handoff->init_params.out_flags; |
| 49 | |
| 50 | vb_sd->flags |= VBSD_BOOT_FIRMWARE_VBOOT2; |
| 51 | |
| 52 | vboot_handoff->selected_firmware = vb2_sd->fw_slot; |
| 53 | |
Daisuke Nojiri | 79cac09 | 2014-06-30 08:51:39 -0700 | [diff] [blame] | 54 | vb_sd->firmware_index = vb2_sd->fw_slot; |
| 55 | |
| 56 | vb_sd->magic = VB_SHARED_DATA_MAGIC; |
| 57 | vb_sd->struct_version = VB_SHARED_DATA_VERSION; |
| 58 | vb_sd->struct_size = sizeof(VbSharedDataHeader); |
| 59 | vb_sd->data_size = VB_SHARED_DATA_MIN_SIZE; |
| 60 | vb_sd->data_used = sizeof(VbSharedDataHeader); |
Julius Werner | e319e48 | 2015-01-29 17:50:58 -0800 | [diff] [blame] | 61 | vb_sd->fw_version_tpm = vb2_sd->fw_version_secdata; |
Daisuke Nojiri | 79cac09 | 2014-06-30 08:51:39 -0700 | [diff] [blame] | 62 | |
Gediminas Ramanauskas | ceaabc9 | 2014-11-04 20:07:09 -0800 | [diff] [blame] | 63 | if (get_write_protect_state()) |
| 64 | vb_sd->flags |= VBSD_BOOT_FIRMWARE_WP_ENABLED; |
Paul Kocialkowski | a400327 | 2015-09-03 11:27:27 +0200 | [diff] [blame] | 65 | if (get_sw_write_protect_state()) |
Daisuke Nojiri | 5d8ef4c | 2015-07-22 11:49:17 -0700 | [diff] [blame] | 66 | vb_sd->flags |= VBSD_BOOT_FIRMWARE_SW_WP_ENABLED; |
Gediminas Ramanauskas | ceaabc9 | 2014-11-04 20:07:09 -0800 | [diff] [blame] | 67 | |
Daisuke Nojiri | 79cac09 | 2014-06-30 08:51:39 -0700 | [diff] [blame] | 68 | if (vb2_sd->recovery_reason) { |
| 69 | vb_sd->firmware_index = 0xFF; |
Daisuke Nojiri | 6ce7459 | 2015-10-21 13:31:44 -0700 | [diff] [blame] | 70 | if (vb2_sd->flags & VB2_SD_FLAG_MANUAL_RECOVERY) |
Daisuke Nojiri | efddcfb | 2014-09-04 09:55:34 -0700 | [diff] [blame] | 71 | vb_sd->flags |= VBSD_BOOT_REC_SWITCH_ON; |
Daisuke Nojiri | 79cac09 | 2014-06-30 08:51:39 -0700 | [diff] [blame] | 72 | *oflags |= VB_INIT_OUT_ENABLE_RECOVERY; |
| 73 | *oflags |= VB_INIT_OUT_CLEAR_RAM; |
| 74 | *oflags |= VB_INIT_OUT_ENABLE_DISPLAY; |
| 75 | *oflags |= VB_INIT_OUT_ENABLE_USB_STORAGE; |
| 76 | } |
| 77 | if (vb2_sd->flags & VB2_SD_DEV_MODE_ENABLED) { |
| 78 | *oflags |= VB_INIT_OUT_ENABLE_DEVELOPER; |
| 79 | *oflags |= VB_INIT_OUT_CLEAR_RAM; |
| 80 | *oflags |= VB_INIT_OUT_ENABLE_DISPLAY; |
| 81 | *oflags |= VB_INIT_OUT_ENABLE_USB_STORAGE; |
| 82 | vb_sd->flags |= VBSD_BOOT_DEV_SWITCH_ON; |
| 83 | vb_sd->flags |= VBSD_LF_DEV_SWITCH_ON; |
| 84 | } |
Daisuke Nojiri | efddcfb | 2014-09-04 09:55:34 -0700 | [diff] [blame] | 85 | /* TODO: Set these in depthcharge */ |
Duncan Laurie | 6324de1 | 2016-01-20 13:15:12 -0800 | [diff] [blame] | 86 | if (IS_ENABLED(CONFIG_VIRTUAL_DEV_SWITCH)) |
Daisuke Nojiri | 79cac09 | 2014-06-30 08:51:39 -0700 | [diff] [blame] | 87 | vb_sd->flags |= VBSD_HONOR_VIRT_DEV_SWITCH; |
Duncan Laurie | 6324de1 | 2016-01-20 13:15:12 -0800 | [diff] [blame] | 88 | if (IS_ENABLED(CONFIG_EC_SOFTWARE_SYNC)) |
Daisuke Nojiri | 79cac09 | 2014-06-30 08:51:39 -0700 | [diff] [blame] | 89 | vb_sd->flags |= VBSD_EC_SOFTWARE_SYNC; |
Duncan Laurie | 6324de1 | 2016-01-20 13:15:12 -0800 | [diff] [blame] | 90 | if (!IS_ENABLED(CONFIG_PHYSICAL_REC_SWITCH)) |
Daisuke Nojiri | 79cac09 | 2014-06-30 08:51:39 -0700 | [diff] [blame] | 91 | vb_sd->flags |= VBSD_BOOT_REC_SWITCH_VIRTUAL; |
Duncan Laurie | 6324de1 | 2016-01-20 13:15:12 -0800 | [diff] [blame] | 92 | if (IS_ENABLED(CONFIG_VBOOT_EC_SLOW_UPDATE)) |
| 93 | vb_sd->flags |= VBSD_EC_SLOW_UPDATE; |
| 94 | if (IS_ENABLED(CONFIG_VBOOT_OPROM_MATTERS)) { |
| 95 | vb_sd->flags |= VBSD_OPROM_MATTERS; |
| 96 | /* |
| 97 | * Inform vboot if the display was enabled by dev/rec |
| 98 | * mode or was requested by vboot kernel phase. |
| 99 | */ |
Furquan Shaikh | 2a12e2e | 2016-07-25 11:48:03 -0700 | [diff] [blame] | 100 | if ((*oflags & VB_INIT_OUT_ENABLE_DISPLAY) || |
Duncan Laurie | 6324de1 | 2016-01-20 13:15:12 -0800 | [diff] [blame] | 101 | vboot_wants_oprom()) { |
| 102 | vb_sd->flags |= VBSD_OPROM_LOADED; |
| 103 | *oflags |= VB_INIT_OUT_ENABLE_DISPLAY; |
| 104 | } |
| 105 | } |
Daisuke Nojiri | 2624c8d | 2014-11-13 11:35:52 -0800 | [diff] [blame] | 106 | |
Daisuke Nojiri | 79cac09 | 2014-06-30 08:51:39 -0700 | [diff] [blame] | 107 | /* In vboot1, VBSD_FWB_TRIED is |
| 108 | * set only if B is booted as explicitly requested. Therefore, if B is |
| 109 | * booted because A was found bad, the flag should not be set. It's |
| 110 | * better not to touch it if we can only ambiguously control it. */ |
| 111 | /* if (vb2_sd->fw_slot) |
| 112 | vb_sd->flags |= VBSD_FWB_TRIED; */ |
| 113 | |
| 114 | /* copy kernel subkey if it's found */ |
| 115 | if (vb2_sd->workbuf_preamble_size) { |
| 116 | struct vb2_fw_preamble *fp; |
| 117 | uintptr_t dst, src; |
Daisuke Nojiri | efddcfb | 2014-09-04 09:55:34 -0700 | [diff] [blame] | 118 | printk(BIOS_INFO, "Copying FW preamble\n"); |
Daisuke Nojiri | 742fc8d | 2014-10-10 10:51:06 -0700 | [diff] [blame] | 119 | fp = (struct vb2_fw_preamble *)((uintptr_t)vb2_sd + |
Daisuke Nojiri | 79cac09 | 2014-06-30 08:51:39 -0700 | [diff] [blame] | 120 | vb2_sd->workbuf_preamble_offset); |
Daisuke Nojiri | efddcfb | 2014-09-04 09:55:34 -0700 | [diff] [blame] | 121 | src = (uintptr_t)&fp->kernel_subkey + |
| 122 | fp->kernel_subkey.key_offset; |
Daisuke Nojiri | 79cac09 | 2014-06-30 08:51:39 -0700 | [diff] [blame] | 123 | dst = (uintptr_t)vb_sd + sizeof(VbSharedDataHeader); |
Daisuke Nojiri | efddcfb | 2014-09-04 09:55:34 -0700 | [diff] [blame] | 124 | assert(dst + fp->kernel_subkey.key_size <= |
| 125 | (uintptr_t)vboot_handoff + sizeof(*vboot_handoff)); |
| 126 | memcpy((void *)dst, (void *)src, |
| 127 | fp->kernel_subkey.key_size); |
| 128 | vb_sd->data_used += fp->kernel_subkey.key_size; |
Daisuke Nojiri | 79cac09 | 2014-06-30 08:51:39 -0700 | [diff] [blame] | 129 | vb_sd->kernel_subkey.key_offset = |
| 130 | dst - (uintptr_t)&vb_sd->kernel_subkey; |
| 131 | vb_sd->kernel_subkey.key_size = fp->kernel_subkey.key_size; |
| 132 | vb_sd->kernel_subkey.algorithm = fp->kernel_subkey.algorithm; |
Daisuke Nojiri | efddcfb | 2014-09-04 09:55:34 -0700 | [diff] [blame] | 133 | vb_sd->kernel_subkey.key_version = |
| 134 | fp->kernel_subkey.key_version; |
Daisuke Nojiri | 79cac09 | 2014-06-30 08:51:39 -0700 | [diff] [blame] | 135 | } |
| 136 | |
| 137 | vb_sd->recovery_reason = vb2_sd->recovery_reason; |
| 138 | } |
| 139 | |
Aaron Durbin | 17200ad | 2015-05-01 16:48:54 -0500 | [diff] [blame] | 140 | void vboot_fill_handoff(void) |
Daisuke Nojiri | 79cac09 | 2014-06-30 08:51:39 -0700 | [diff] [blame] | 141 | { |
| 142 | struct vboot_handoff *vh; |
| 143 | struct vb2_shared_data *sd; |
| 144 | |
Aaron Durbin | b5a20b2 | 2015-10-06 17:29:03 -0500 | [diff] [blame] | 145 | sd = vb2_get_shared_data(); |
Daisuke Nojiri | 79cac09 | 2014-06-30 08:51:39 -0700 | [diff] [blame] | 146 | sd->workbuf_hash_offset = 0; |
| 147 | sd->workbuf_hash_size = 0; |
| 148 | |
Daisuke Nojiri | efddcfb | 2014-09-04 09:55:34 -0700 | [diff] [blame] | 149 | printk(BIOS_INFO, "creating vboot_handoff structure\n"); |
Daisuke Nojiri | 79cac09 | 2014-06-30 08:51:39 -0700 | [diff] [blame] | 150 | vh = cbmem_add(CBMEM_ID_VBOOT_HANDOFF, sizeof(*vh)); |
Daisuke Nojiri | efddcfb | 2014-09-04 09:55:34 -0700 | [diff] [blame] | 151 | if (vh == NULL) |
| 152 | /* we don't need to failover gracefully here because this |
| 153 | * shouldn't happen with the image that has passed QA. */ |
| 154 | die("failed to allocate vboot_handoff structure\n"); |
Daisuke Nojiri | 79cac09 | 2014-06-30 08:51:39 -0700 | [diff] [blame] | 155 | |
| 156 | memset(vh, 0, sizeof(*vh)); |
| 157 | |
Daisuke Nojiri | efddcfb | 2014-09-04 09:55:34 -0700 | [diff] [blame] | 158 | /* needed until we finish transtion to vboot2 for kernel verification */ |
Daisuke Nojiri | 79cac09 | 2014-06-30 08:51:39 -0700 | [diff] [blame] | 159 | fill_vboot_handoff(vh, sd); |
Aaron Durbin | d87cc3f | 2016-02-01 17:37:16 -0600 | [diff] [blame] | 160 | |
Furquan Shaikh | 626eea2 | 2016-11-12 11:09:28 -0800 | [diff] [blame] | 161 | |
| 162 | /* Log the recovery mode switches if required, before clearing them. */ |
| 163 | log_recovery_mode_switch(); |
| 164 | |
Aaron Durbin | d87cc3f | 2016-02-01 17:37:16 -0600 | [diff] [blame] | 165 | /* |
| 166 | * The recovery mode switch is cleared (typically backed by EC) here |
| 167 | * to allow multiple queries to get_recovery_mode_switch() and have |
| 168 | * them return consistent results during the verified boot path as well |
| 169 | * as dram initialization. x86 systems ignore the saved dram settings |
| 170 | * in the recovery path in order to start from a clean slate. Therefore |
| 171 | * clear the state here since this function is called when memory |
| 172 | * is known to be up. |
| 173 | */ |
| 174 | clear_recovery_mode_switch(); |
Daisuke Nojiri | 79cac09 | 2014-06-30 08:51:39 -0700 | [diff] [blame] | 175 | } |
Aaron Durbin | b593366 | 2015-10-07 16:03:41 -0500 | [diff] [blame] | 176 | |
| 177 | /* |
| 178 | * For platforms that employ VBOOT_DYNAMIC_WORK_BUFFER, the vboot |
| 179 | * verification doesn't happen until after cbmem is brought online. |
| 180 | * Therefore, the vboot results would not be initialized so don't |
| 181 | * automatically add results when cbmem comes online. |
| 182 | */ |
| 183 | #if !IS_ENABLED(CONFIG_VBOOT_DYNAMIC_WORK_BUFFER) |
| 184 | static void vb2_fill_handoff_cbmem(int unused) |
| 185 | { |
| 186 | vboot_fill_handoff(); |
| 187 | } |
| 188 | ROMSTAGE_CBMEM_INIT_HOOK(vb2_fill_handoff_cbmem) |
| 189 | #endif |