Angel Pons | 118a9c7 | 2020-04-02 23:48:34 +0200 | [diff] [blame] | 1 | /* SPDX-License-Identifier: GPL-2.0-only */ |
Peter Stuge | 483b7bb | 2009-04-14 07:40:01 +0000 | [diff] [blame] | 2 | |
Aaron Durbin | 899d13d | 2015-05-15 23:39:23 -0500 | [diff] [blame] | 3 | #include <assert.h> |
Aaron Durbin | 899d13d | 2015-05-15 23:39:23 -0500 | [diff] [blame] | 4 | #include <boot_device.h> |
| 5 | #include <cbfs.h> |
Julius Werner | 0d9072b | 2020-03-05 12:51:08 -0800 | [diff] [blame] | 6 | #include <cbfs_private.h> |
Julius Werner | 1e37c9c | 2019-12-11 17:09:39 -0800 | [diff] [blame] | 7 | #include <cbmem.h> |
Julius Werner | 98eeb96 | 2019-12-11 15:47:42 -0800 | [diff] [blame] | 8 | #include <commonlib/bsd/compression.h> |
Aaron Durbin | 0b418bd | 2020-10-08 14:56:03 -0600 | [diff] [blame] | 9 | #include <commonlib/endian.h> |
Bill XIE | c79e96b | 2019-08-22 20:28:36 +0800 | [diff] [blame] | 10 | #include <console/console.h> |
Bill XIE | c79e96b | 2019-08-22 20:28:36 +0800 | [diff] [blame] | 11 | #include <fmap.h> |
Aaron Durbin | 899d13d | 2015-05-15 23:39:23 -0500 | [diff] [blame] | 12 | #include <lib.h> |
Julius Werner | fdabf3f | 2020-05-06 17:06:35 -0700 | [diff] [blame] | 13 | #include <metadata_hash.h> |
Bill XIE | c79e96b | 2019-08-22 20:28:36 +0800 | [diff] [blame] | 14 | #include <security/tpm/tspi/crtm.h> |
| 15 | #include <security/vboot/vboot_common.h> |
| 16 | #include <stdlib.h> |
| 17 | #include <string.h> |
Aaron Durbin | 899d13d | 2015-05-15 23:39:23 -0500 | [diff] [blame] | 18 | #include <symbols.h> |
Julius Werner | 09f2921 | 2015-09-29 13:51:35 -0700 | [diff] [blame] | 19 | #include <timestamp.h> |
Patrick Georgi | 58a150a | 2016-05-02 17:22:29 +0800 | [diff] [blame] | 20 | |
Julius Werner | 0d9072b | 2020-03-05 12:51:08 -0800 | [diff] [blame] | 21 | cb_err_t cbfs_boot_lookup(const char *name, bool force_ro, |
| 22 | union cbfs_mdata *mdata, struct region_device *rdev) |
Julius Werner | 1e37c9c | 2019-12-11 17:09:39 -0800 | [diff] [blame] | 23 | { |
Julius Werner | 0d9072b | 2020-03-05 12:51:08 -0800 | [diff] [blame] | 24 | const struct cbfs_boot_device *cbd = cbfs_get_boot_device(force_ro); |
| 25 | if (!cbd) |
| 26 | return CB_ERR; |
| 27 | |
| 28 | size_t data_offset; |
Julius Werner | 1e37c9c | 2019-12-11 17:09:39 -0800 | [diff] [blame] | 29 | cb_err_t err = CB_CBFS_CACHE_FULL; |
Julius Werner | 34cf073 | 2020-12-08 14:21:43 -0800 | [diff] [blame^] | 30 | if (!CONFIG(NO_CBFS_MCACHE) && !ENV_SMM && cbd->mcache_size) |
Julius Werner | 1e37c9c | 2019-12-11 17:09:39 -0800 | [diff] [blame] | 31 | err = cbfs_mcache_lookup(cbd->mcache, cbd->mcache_size, |
Julius Werner | 0d9072b | 2020-03-05 12:51:08 -0800 | [diff] [blame] | 32 | name, mdata, &data_offset); |
Julius Werner | fdabf3f | 2020-05-06 17:06:35 -0700 | [diff] [blame] | 33 | if (err == CB_CBFS_CACHE_FULL) { |
| 34 | struct vb2_hash *metadata_hash = NULL; |
| 35 | if (CONFIG(TOCTOU_SAFETY)) { |
| 36 | if (ENV_SMM) /* Cannot provide TOCTOU safety for SMM */ |
| 37 | dead_code(); |
Julius Werner | 34cf073 | 2020-12-08 14:21:43 -0800 | [diff] [blame^] | 38 | if (!cbd->mcache_size) |
| 39 | die("Cannot access CBFS TOCTOU-safely in " ENV_STRING " before CBMEM init!\n"); |
Julius Werner | fdabf3f | 2020-05-06 17:06:35 -0700 | [diff] [blame] | 40 | /* We can only reach this for the RW CBFS -- an mcache |
| 41 | overflow in the RO CBFS would have been caught when |
| 42 | building the mcache in cbfs_get_boot_device(). |
| 43 | (Note that TOCTOU_SAFETY implies !NO_CBFS_MCACHE.) */ |
| 44 | assert(cbd == vboot_get_cbfs_boot_device()); |
| 45 | /* TODO: set metadata_hash to RW metadata hash here. */ |
| 46 | } |
| 47 | err = cbfs_lookup(&cbd->rdev, name, mdata, &data_offset, |
| 48 | metadata_hash); |
| 49 | } |
Julius Werner | 0d9072b | 2020-03-05 12:51:08 -0800 | [diff] [blame] | 50 | |
| 51 | if (CONFIG(VBOOT_ENABLE_CBFS_FALLBACK) && !force_ro && |
| 52 | err == CB_CBFS_NOT_FOUND) { |
| 53 | printk(BIOS_INFO, "CBFS: Fall back to RO region for %s\n", |
| 54 | name); |
| 55 | return cbfs_boot_lookup(name, true, mdata, rdev); |
| 56 | } |
Julius Werner | 0247fcf | 2020-12-03 12:41:00 -0800 | [diff] [blame] | 57 | if (err) { |
| 58 | if (err == CB_CBFS_NOT_FOUND) |
| 59 | printk(BIOS_WARNING, "CBFS: '%s' not found.\n", name); |
| 60 | else if (err == CB_CBFS_HASH_MISMATCH) |
| 61 | printk(BIOS_ERR, "CBFS ERROR: metadata hash mismatch!\n"); |
| 62 | else |
| 63 | printk(BIOS_ERR, |
| 64 | "CBFS ERROR: error %d when looking up '%s'\n", |
| 65 | err, name); |
Julius Werner | 0d9072b | 2020-03-05 12:51:08 -0800 | [diff] [blame] | 66 | return err; |
Julius Werner | 0247fcf | 2020-12-03 12:41:00 -0800 | [diff] [blame] | 67 | } |
Julius Werner | 0d9072b | 2020-03-05 12:51:08 -0800 | [diff] [blame] | 68 | |
| 69 | if (rdev_chain(rdev, &cbd->rdev, data_offset, be32toh(mdata->h.len))) |
| 70 | return CB_ERR; |
| 71 | |
| 72 | if (tspi_measure_cbfs_hook(rdev, name, be32toh(mdata->h.type))) |
| 73 | return CB_ERR; |
| 74 | |
| 75 | return CB_SUCCESS; |
Julius Werner | 1e37c9c | 2019-12-11 17:09:39 -0800 | [diff] [blame] | 76 | } |
| 77 | |
Aaron Durbin | 37a5d15 | 2015-09-17 16:09:30 -0500 | [diff] [blame] | 78 | int cbfs_boot_locate(struct cbfsf *fh, const char *name, uint32_t *type) |
Aaron Durbin | 899d13d | 2015-05-15 23:39:23 -0500 | [diff] [blame] | 79 | { |
Julius Werner | 0d9072b | 2020-03-05 12:51:08 -0800 | [diff] [blame] | 80 | if (cbfs_boot_lookup(name, false, &fh->mdata, &fh->data)) |
Julius Werner | 1cd013b | 2019-12-11 16:50:02 -0800 | [diff] [blame] | 81 | return -1; |
| 82 | |
| 83 | size_t msize = be32toh(fh->mdata.h.offset); |
| 84 | if (rdev_chain(&fh->metadata, &addrspace_32bit.rdev, |
Julius Werner | 0d9072b | 2020-03-05 12:51:08 -0800 | [diff] [blame] | 85 | (uintptr_t)&fh->mdata, msize)) |
Julius Werner | 1cd013b | 2019-12-11 16:50:02 -0800 | [diff] [blame] | 86 | return -1; |
Julius Werner | 0d9072b | 2020-03-05 12:51:08 -0800 | [diff] [blame] | 87 | |
Julius Werner | 1cd013b | 2019-12-11 16:50:02 -0800 | [diff] [blame] | 88 | if (type) { |
| 89 | if (!*type) |
| 90 | *type = be32toh(fh->mdata.h.type); |
| 91 | else if (*type != be32toh(fh->mdata.h.type)) |
| 92 | return -1; |
Wim Vervoorn | 114e2e8 | 2019-11-05 14:09:16 +0100 | [diff] [blame] | 93 | } |
| 94 | |
Julius Werner | 1cd013b | 2019-12-11 16:50:02 -0800 | [diff] [blame] | 95 | return 0; |
Aaron Durbin | 899d13d | 2015-05-15 23:39:23 -0500 | [diff] [blame] | 96 | } |
| 97 | |
Julius Werner | 9d0cc2a | 2020-01-22 18:00:18 -0800 | [diff] [blame] | 98 | static void *_cbfs_map(const char *name, size_t *size_out, bool force_ro) |
Aaron Durbin | 899d13d | 2015-05-15 23:39:23 -0500 | [diff] [blame] | 99 | { |
Julius Werner | d17ce41 | 2020-10-01 18:25:49 -0700 | [diff] [blame] | 100 | struct region_device rdev; |
| 101 | union cbfs_mdata mdata; |
Aaron Durbin | 899d13d | 2015-05-15 23:39:23 -0500 | [diff] [blame] | 102 | |
Julius Werner | 9d0cc2a | 2020-01-22 18:00:18 -0800 | [diff] [blame] | 103 | if (cbfs_boot_lookup(name, force_ro, &mdata, &rdev)) |
Aaron Durbin | 899d13d | 2015-05-15 23:39:23 -0500 | [diff] [blame] | 104 | return NULL; |
| 105 | |
Julius Werner | 834b3ec | 2020-03-04 16:52:08 -0800 | [diff] [blame] | 106 | if (size_out != NULL) |
Julius Werner | d17ce41 | 2020-10-01 18:25:49 -0700 | [diff] [blame] | 107 | *size_out = region_device_sz(&rdev); |
Aaron Durbin | 899d13d | 2015-05-15 23:39:23 -0500 | [diff] [blame] | 108 | |
Julius Werner | d17ce41 | 2020-10-01 18:25:49 -0700 | [diff] [blame] | 109 | return rdev_mmap_full(&rdev); |
Aaron Durbin | 899d13d | 2015-05-15 23:39:23 -0500 | [diff] [blame] | 110 | } |
| 111 | |
Julius Werner | 9d0cc2a | 2020-01-22 18:00:18 -0800 | [diff] [blame] | 112 | void *cbfs_map(const char *name, size_t *size_out) |
| 113 | { |
| 114 | return _cbfs_map(name, size_out, false); |
| 115 | } |
| 116 | |
| 117 | void *cbfs_ro_map(const char *name, size_t *size_out) |
| 118 | { |
| 119 | return _cbfs_map(name, size_out, true); |
| 120 | } |
| 121 | |
Julius Werner | 834b3ec | 2020-03-04 16:52:08 -0800 | [diff] [blame] | 122 | int cbfs_unmap(void *mapping) |
| 123 | { |
| 124 | /* This works because munmap() only works on the root rdev and never |
| 125 | cares about which chained subregion something was mapped from. */ |
| 126 | return rdev_munmap(boot_device_ro(), mapping); |
| 127 | } |
| 128 | |
Pratik Prajapati | 2a7708a | 2016-11-30 17:29:10 -0800 | [diff] [blame] | 129 | int cbfs_locate_file_in_region(struct cbfsf *fh, const char *region_name, |
Philipp Deppenwiese | 66f9a09 | 2018-11-08 10:59:40 +0100 | [diff] [blame] | 130 | const char *name, uint32_t *type) |
Pratik Prajapati | 2a7708a | 2016-11-30 17:29:10 -0800 | [diff] [blame] | 131 | { |
| 132 | struct region_device rdev; |
Bill XIE | bad08c2 | 2020-02-13 11:11:35 +0800 | [diff] [blame] | 133 | int ret = 0; |
Pratik Prajapati | 2a7708a | 2016-11-30 17:29:10 -0800 | [diff] [blame] | 134 | if (fmap_locate_area_as_rdev(region_name, &rdev)) { |
| 135 | LOG("%s region not found while looking for %s\n", |
Philipp Deppenwiese | 66f9a09 | 2018-11-08 10:59:40 +0100 | [diff] [blame] | 136 | region_name, name); |
Pratik Prajapati | 2a7708a | 2016-11-30 17:29:10 -0800 | [diff] [blame] | 137 | return -1; |
| 138 | } |
| 139 | |
Julius Werner | 0d9072b | 2020-03-05 12:51:08 -0800 | [diff] [blame] | 140 | uint32_t dummy_type = 0; |
| 141 | if (!type) |
| 142 | type = &dummy_type; |
| 143 | |
Bill XIE | bad08c2 | 2020-02-13 11:11:35 +0800 | [diff] [blame] | 144 | ret = cbfs_locate(fh, &rdev, name, type); |
| 145 | if (!ret) |
Julius Werner | 0d9072b | 2020-03-05 12:51:08 -0800 | [diff] [blame] | 146 | if (tspi_measure_cbfs_hook(&rdev, name, *type)) |
Bill XIE | bad08c2 | 2020-02-13 11:11:35 +0800 | [diff] [blame] | 147 | return -1; |
| 148 | return ret; |
Pratik Prajapati | 2a7708a | 2016-11-30 17:29:10 -0800 | [diff] [blame] | 149 | } |
| 150 | |
Aaron Durbin | a85febc | 2020-05-15 15:09:10 -0600 | [diff] [blame] | 151 | static inline bool fsps_env(void) |
| 152 | { |
| 153 | /* FSP-S is assumed to be loaded in ramstage. */ |
| 154 | if (ENV_RAMSTAGE) |
| 155 | return true; |
| 156 | return false; |
| 157 | } |
| 158 | |
Aaron Durbin | ecbfa99 | 2020-05-15 17:01:58 -0600 | [diff] [blame] | 159 | static inline bool fspm_env(void) |
| 160 | { |
| 161 | /* FSP-M is assumed to be loaded in romstage. */ |
| 162 | if (ENV_ROMSTAGE) |
| 163 | return true; |
| 164 | return false; |
| 165 | } |
| 166 | |
Aaron Durbin | a121f95 | 2020-05-26 15:48:10 -0600 | [diff] [blame] | 167 | static inline bool cbfs_lz4_enabled(void) |
| 168 | { |
Aaron Durbin | a85febc | 2020-05-15 15:09:10 -0600 | [diff] [blame] | 169 | if (fsps_env() && CONFIG(FSP_COMPRESS_FSP_S_LZ4)) |
| 170 | return true; |
Aaron Durbin | ecbfa99 | 2020-05-15 17:01:58 -0600 | [diff] [blame] | 171 | if (fspm_env() && CONFIG(FSP_COMPRESS_FSP_M_LZ4)) |
| 172 | return true; |
Aaron Durbin | a85febc | 2020-05-15 15:09:10 -0600 | [diff] [blame] | 173 | |
Aaron Durbin | a121f95 | 2020-05-26 15:48:10 -0600 | [diff] [blame] | 174 | if ((ENV_BOOTBLOCK || ENV_SEPARATE_VERSTAGE) && !CONFIG(COMPRESS_PRERAM_STAGES)) |
| 175 | return false; |
| 176 | |
| 177 | return true; |
| 178 | } |
| 179 | |
| 180 | static inline bool cbfs_lzma_enabled(void) |
| 181 | { |
Aaron Durbin | a85febc | 2020-05-15 15:09:10 -0600 | [diff] [blame] | 182 | if (fsps_env() && CONFIG(FSP_COMPRESS_FSP_S_LZMA)) |
| 183 | return true; |
Aaron Durbin | ecbfa99 | 2020-05-15 17:01:58 -0600 | [diff] [blame] | 184 | if (fspm_env() && CONFIG(FSP_COMPRESS_FSP_M_LZMA)) |
| 185 | return true; |
Aaron Durbin | a121f95 | 2020-05-26 15:48:10 -0600 | [diff] [blame] | 186 | /* We assume here romstage and postcar are never compressed. */ |
| 187 | if (ENV_BOOTBLOCK || ENV_SEPARATE_VERSTAGE) |
| 188 | return false; |
| 189 | if (ENV_ROMSTAGE && CONFIG(POSTCAR_STAGE)) |
| 190 | return false; |
| 191 | if ((ENV_ROMSTAGE || ENV_POSTCAR) |
| 192 | && !CONFIG(COMPRESS_RAMSTAGE)) |
| 193 | return false; |
| 194 | return true; |
| 195 | } |
| 196 | |
Julius Werner | 09f2921 | 2015-09-29 13:51:35 -0700 | [diff] [blame] | 197 | size_t cbfs_load_and_decompress(const struct region_device *rdev, size_t offset, |
| 198 | size_t in_size, void *buffer, size_t buffer_size, uint32_t compression) |
Aaron Durbin | 899d13d | 2015-05-15 23:39:23 -0500 | [diff] [blame] | 199 | { |
Julius Werner | 09f2921 | 2015-09-29 13:51:35 -0700 | [diff] [blame] | 200 | size_t out_size; |
Aaron Durbin | 84f394e | 2020-05-26 16:16:42 -0600 | [diff] [blame] | 201 | void *map; |
Julius Werner | 09f2921 | 2015-09-29 13:51:35 -0700 | [diff] [blame] | 202 | |
| 203 | switch (compression) { |
| 204 | case CBFS_COMPRESS_NONE: |
Julius Werner | f975e55 | 2016-08-19 15:43:06 -0700 | [diff] [blame] | 205 | if (buffer_size < in_size) |
| 206 | return 0; |
Julius Werner | 09f2921 | 2015-09-29 13:51:35 -0700 | [diff] [blame] | 207 | if (rdev_readat(rdev, buffer, offset, in_size) != in_size) |
| 208 | return 0; |
| 209 | return in_size; |
| 210 | |
| 211 | case CBFS_COMPRESS_LZ4: |
Aaron Durbin | a121f95 | 2020-05-26 15:48:10 -0600 | [diff] [blame] | 212 | if (!cbfs_lz4_enabled()) |
Julius Werner | 09f2921 | 2015-09-29 13:51:35 -0700 | [diff] [blame] | 213 | return 0; |
| 214 | |
Aaron Durbin | 84f394e | 2020-05-26 16:16:42 -0600 | [diff] [blame] | 215 | /* cbfs_stage_load_and_decompress() takes care of in-place |
| 216 | lz4 decompression by setting up the rdev to be in memory. */ |
| 217 | map = rdev_mmap(rdev, offset, in_size); |
| 218 | if (map == NULL) |
Julius Werner | 09f2921 | 2015-09-29 13:51:35 -0700 | [diff] [blame] | 219 | return 0; |
| 220 | |
| 221 | timestamp_add_now(TS_START_ULZ4F); |
Aaron Durbin | 84f394e | 2020-05-26 16:16:42 -0600 | [diff] [blame] | 222 | out_size = ulz4fn(map, in_size, buffer, buffer_size); |
Julius Werner | 09f2921 | 2015-09-29 13:51:35 -0700 | [diff] [blame] | 223 | timestamp_add_now(TS_END_ULZ4F); |
Aaron Durbin | 84f394e | 2020-05-26 16:16:42 -0600 | [diff] [blame] | 224 | |
| 225 | rdev_munmap(rdev, map); |
| 226 | |
Julius Werner | 09f2921 | 2015-09-29 13:51:35 -0700 | [diff] [blame] | 227 | return out_size; |
| 228 | |
| 229 | case CBFS_COMPRESS_LZMA: |
Aaron Durbin | a121f95 | 2020-05-26 15:48:10 -0600 | [diff] [blame] | 230 | if (!cbfs_lzma_enabled()) |
Julius Werner | 09f2921 | 2015-09-29 13:51:35 -0700 | [diff] [blame] | 231 | return 0; |
Aaron Durbin | 84f394e | 2020-05-26 16:16:42 -0600 | [diff] [blame] | 232 | map = rdev_mmap(rdev, offset, in_size); |
Julius Werner | 09f2921 | 2015-09-29 13:51:35 -0700 | [diff] [blame] | 233 | if (map == NULL) |
| 234 | return 0; |
| 235 | |
| 236 | /* Note: timestamp not useful for memory-mapped media (x86) */ |
| 237 | timestamp_add_now(TS_START_ULZMA); |
| 238 | out_size = ulzman(map, in_size, buffer, buffer_size); |
| 239 | timestamp_add_now(TS_END_ULZMA); |
| 240 | |
| 241 | rdev_munmap(rdev, map); |
| 242 | |
| 243 | return out_size; |
| 244 | |
| 245 | default: |
Aaron Durbin | 899d13d | 2015-05-15 23:39:23 -0500 | [diff] [blame] | 246 | return 0; |
Julius Werner | 09f2921 | 2015-09-29 13:51:35 -0700 | [diff] [blame] | 247 | } |
Aaron Durbin | 899d13d | 2015-05-15 23:39:23 -0500 | [diff] [blame] | 248 | } |
| 249 | |
Aaron Durbin | 84f394e | 2020-05-26 16:16:42 -0600 | [diff] [blame] | 250 | static size_t cbfs_stage_load_and_decompress(const struct region_device *rdev, |
| 251 | size_t offset, size_t in_size, void *buffer, size_t buffer_size, |
| 252 | uint32_t compression) |
| 253 | { |
| 254 | struct region_device rdev_src; |
| 255 | |
| 256 | if (compression == CBFS_COMPRESS_LZ4) { |
| 257 | if (!cbfs_lz4_enabled()) |
| 258 | return 0; |
| 259 | /* Load the compressed image to the end of the available memory |
| 260 | * area for in-place decompression. It is the responsibility of |
| 261 | * the caller to ensure that buffer_size is large enough |
| 262 | * (see compression.h, guaranteed by cbfstool for stages). */ |
| 263 | void *compr_start = buffer + buffer_size - in_size; |
| 264 | if (rdev_readat(rdev, compr_start, offset, in_size) != in_size) |
| 265 | return 0; |
| 266 | /* Create a region device backed by memory. */ |
| 267 | rdev_chain(&rdev_src, &addrspace_32bit.rdev, |
| 268 | (uintptr_t)compr_start, in_size); |
| 269 | |
| 270 | return cbfs_load_and_decompress(&rdev_src, 0, in_size, buffer, |
| 271 | buffer_size, compression); |
| 272 | } |
| 273 | |
| 274 | /* All other algorithms can use the generic implementation. */ |
| 275 | return cbfs_load_and_decompress(rdev, offset, in_size, buffer, |
| 276 | buffer_size, compression); |
| 277 | } |
| 278 | |
Stefan Reinauer | 800379f | 2010-03-01 08:34:19 +0000 | [diff] [blame] | 279 | static inline int tohex4(unsigned int c) |
Patrick Georgi | b203c2f | 2009-08-20 14:48:03 +0000 | [diff] [blame] | 280 | { |
Hung-Te Lin | 6fe0cab | 2013-01-22 18:57:56 +0800 | [diff] [blame] | 281 | return (c <= 9) ? (c + '0') : (c - 10 + 'a'); |
Patrick Georgi | b203c2f | 2009-08-20 14:48:03 +0000 | [diff] [blame] | 282 | } |
| 283 | |
Martin Roth | a616a4b | 2020-01-21 09:28:40 -0700 | [diff] [blame] | 284 | static void tohex8(unsigned int val, char *dest) |
| 285 | { |
| 286 | dest[0] = tohex4((val >> 4) & 0xf); |
| 287 | dest[1] = tohex4(val & 0xf); |
| 288 | } |
| 289 | |
Lee Leahy | b2d834a | 2017-03-08 16:52:22 -0800 | [diff] [blame] | 290 | static void tohex16(unsigned int val, char *dest) |
Patrick Georgi | b203c2f | 2009-08-20 14:48:03 +0000 | [diff] [blame] | 291 | { |
Philipp Deppenwiese | 66f9a09 | 2018-11-08 10:59:40 +0100 | [diff] [blame] | 292 | dest[0] = tohex4(val >> 12); |
| 293 | dest[1] = tohex4((val >> 8) & 0xf); |
| 294 | dest[2] = tohex4((val >> 4) & 0xf); |
Hung-Te Lin | 6fe0cab | 2013-01-22 18:57:56 +0800 | [diff] [blame] | 295 | dest[3] = tohex4(val & 0xf); |
Patrick Georgi | b203c2f | 2009-08-20 14:48:03 +0000 | [diff] [blame] | 296 | } |
| 297 | |
Aaron Durbin | 899d13d | 2015-05-15 23:39:23 -0500 | [diff] [blame] | 298 | void *cbfs_boot_map_optionrom(uint16_t vendor, uint16_t device) |
Peter Stuge | 483b7bb | 2009-04-14 07:40:01 +0000 | [diff] [blame] | 299 | { |
Hung-Te Lin | 6fe0cab | 2013-01-22 18:57:56 +0800 | [diff] [blame] | 300 | char name[17] = "pciXXXX,XXXX.rom"; |
Peter Stuge | 483b7bb | 2009-04-14 07:40:01 +0000 | [diff] [blame] | 301 | |
Philipp Deppenwiese | 66f9a09 | 2018-11-08 10:59:40 +0100 | [diff] [blame] | 302 | tohex16(vendor, name + 3); |
| 303 | tohex16(device, name + 8); |
Peter Stuge | 483b7bb | 2009-04-14 07:40:01 +0000 | [diff] [blame] | 304 | |
Julius Werner | 834b3ec | 2020-03-04 16:52:08 -0800 | [diff] [blame] | 305 | return cbfs_map(name, NULL); |
Peter Stuge | 483b7bb | 2009-04-14 07:40:01 +0000 | [diff] [blame] | 306 | } |
| 307 | |
Martin Roth | a616a4b | 2020-01-21 09:28:40 -0700 | [diff] [blame] | 308 | void *cbfs_boot_map_optionrom_revision(uint16_t vendor, uint16_t device, uint8_t rev) |
| 309 | { |
| 310 | char name[20] = "pciXXXX,XXXX,XX.rom"; |
| 311 | |
| 312 | tohex16(vendor, name + 3); |
| 313 | tohex16(device, name + 8); |
| 314 | tohex8(rev, name + 13); |
| 315 | |
Julius Werner | 834b3ec | 2020-03-04 16:52:08 -0800 | [diff] [blame] | 316 | return cbfs_map(name, NULL); |
Martin Roth | a616a4b | 2020-01-21 09:28:40 -0700 | [diff] [blame] | 317 | } |
| 318 | |
Julius Werner | 9d0cc2a | 2020-01-22 18:00:18 -0800 | [diff] [blame] | 319 | static size_t _cbfs_load(const char *name, void *buf, size_t buf_size, |
| 320 | bool force_ro) |
Julius Werner | f975e55 | 2016-08-19 15:43:06 -0700 | [diff] [blame] | 321 | { |
Julius Werner | d17ce41 | 2020-10-01 18:25:49 -0700 | [diff] [blame] | 322 | struct region_device rdev; |
| 323 | union cbfs_mdata mdata; |
Julius Werner | f975e55 | 2016-08-19 15:43:06 -0700 | [diff] [blame] | 324 | |
Julius Werner | 9d0cc2a | 2020-01-22 18:00:18 -0800 | [diff] [blame] | 325 | if (cbfs_boot_lookup(name, force_ro, &mdata, &rdev)) |
Julius Werner | f975e55 | 2016-08-19 15:43:06 -0700 | [diff] [blame] | 326 | return 0; |
| 327 | |
Julius Werner | d17ce41 | 2020-10-01 18:25:49 -0700 | [diff] [blame] | 328 | uint32_t compression = CBFS_COMPRESS_NONE; |
| 329 | const struct cbfs_file_attr_compression *attr = cbfs_find_attr(&mdata, |
| 330 | CBFS_FILE_ATTR_TAG_COMPRESSION, sizeof(*attr)); |
| 331 | if (attr) { |
| 332 | compression = be32toh(attr->compression); |
| 333 | if (buf_size < be32toh(attr->decompressed_size)) |
| 334 | return 0; |
| 335 | } |
Julius Werner | f975e55 | 2016-08-19 15:43:06 -0700 | [diff] [blame] | 336 | |
Julius Werner | d17ce41 | 2020-10-01 18:25:49 -0700 | [diff] [blame] | 337 | return cbfs_load_and_decompress(&rdev, 0, region_device_sz(&rdev), |
| 338 | buf, buf_size, compression); |
Julius Werner | f975e55 | 2016-08-19 15:43:06 -0700 | [diff] [blame] | 339 | } |
| 340 | |
Julius Werner | 9d0cc2a | 2020-01-22 18:00:18 -0800 | [diff] [blame] | 341 | size_t cbfs_load(const char *name, void *buf, size_t buf_size) |
| 342 | { |
| 343 | return _cbfs_load(name, buf, buf_size, false); |
| 344 | } |
| 345 | |
| 346 | size_t cbfs_ro_load(const char *name, void *buf, size_t buf_size) |
| 347 | { |
| 348 | return _cbfs_load(name, buf, buf_size, true); |
| 349 | } |
| 350 | |
Aaron Durbin | 899d13d | 2015-05-15 23:39:23 -0500 | [diff] [blame] | 351 | int cbfs_prog_stage_load(struct prog *pstage) |
| 352 | { |
| 353 | struct cbfs_stage stage; |
| 354 | uint8_t *load; |
| 355 | void *entry; |
| 356 | size_t fsize; |
| 357 | size_t foffset; |
Aaron Durbin | 37a5d15 | 2015-09-17 16:09:30 -0500 | [diff] [blame] | 358 | const struct region_device *fh = prog_rdev(pstage); |
Hung-Te Lin | 6fe0cab | 2013-01-22 18:57:56 +0800 | [diff] [blame] | 359 | |
Aaron Durbin | 899d13d | 2015-05-15 23:39:23 -0500 | [diff] [blame] | 360 | if (rdev_readat(fh, &stage, 0, sizeof(stage)) != sizeof(stage)) |
Julius Werner | b29bd27b | 2015-12-03 11:29:12 -0800 | [diff] [blame] | 361 | return -1; |
Aaron Durbin | 899d13d | 2015-05-15 23:39:23 -0500 | [diff] [blame] | 362 | |
| 363 | fsize = region_device_sz(fh); |
| 364 | fsize -= sizeof(stage); |
| 365 | foffset = 0; |
| 366 | foffset += sizeof(stage); |
| 367 | |
Aaron Durbin | 0b418bd | 2020-10-08 14:56:03 -0600 | [diff] [blame] | 368 | /* cbfs_stage fields are written in little endian despite the other |
| 369 | cbfs data types being encoded in big endian. */ |
| 370 | stage.compression = read_le32(&stage.compression); |
| 371 | stage.entry = read_le64(&stage.entry); |
| 372 | stage.load = read_le64(&stage.load); |
| 373 | stage.len = read_le32(&stage.len); |
| 374 | stage.memlen = read_le32(&stage.memlen); |
| 375 | |
Aaron Durbin | 899d13d | 2015-05-15 23:39:23 -0500 | [diff] [blame] | 376 | assert(fsize == stage.len); |
| 377 | |
Aaron Durbin | 899d13d | 2015-05-15 23:39:23 -0500 | [diff] [blame] | 378 | load = (void *)(uintptr_t)stage.load; |
| 379 | entry = (void *)(uintptr_t)stage.entry; |
| 380 | |
Aaron Durbin | ed253c8 | 2015-10-07 17:22:42 -0500 | [diff] [blame] | 381 | /* Hacky way to not load programs over read only media. The stages |
| 382 | * that would hit this path initialize themselves. */ |
Julius Werner | 21a4053 | 2020-04-21 16:03:53 -0700 | [diff] [blame] | 383 | if ((ENV_BOOTBLOCK || ENV_SEPARATE_VERSTAGE) && |
| 384 | !CONFIG(NO_XIP_EARLY_STAGES) && CONFIG(BOOT_DEVICE_MEMORY_MAPPED)) { |
Aaron Durbin | ed253c8 | 2015-10-07 17:22:42 -0500 | [diff] [blame] | 385 | void *mapping = rdev_mmap(fh, foffset, fsize); |
| 386 | rdev_munmap(fh, mapping); |
| 387 | if (mapping == load) |
| 388 | goto out; |
| 389 | } |
| 390 | |
Aaron Durbin | 84f394e | 2020-05-26 16:16:42 -0600 | [diff] [blame] | 391 | fsize = cbfs_stage_load_and_decompress(fh, foffset, fsize, load, |
Julius Werner | 09f2921 | 2015-09-29 13:51:35 -0700 | [diff] [blame] | 392 | stage.memlen, stage.compression); |
| 393 | if (!fsize) |
Aaron Durbin | 899d13d | 2015-05-15 23:39:23 -0500 | [diff] [blame] | 394 | return -1; |
| 395 | |
| 396 | /* Clear area not covered by file. */ |
| 397 | memset(&load[fsize], 0, stage.memlen - fsize); |
| 398 | |
Aaron Durbin | 096f457 | 2016-03-31 13:49:00 -0500 | [diff] [blame] | 399 | prog_segment_loaded((uintptr_t)load, stage.memlen, SEG_FINAL); |
Aaron Durbin | ed253c8 | 2015-10-07 17:22:42 -0500 | [diff] [blame] | 400 | |
| 401 | out: |
Aaron Durbin | 899d13d | 2015-05-15 23:39:23 -0500 | [diff] [blame] | 402 | prog_set_area(pstage, load, stage.memlen); |
| 403 | prog_set_entry(pstage, entry, NULL); |
| 404 | |
| 405 | return 0; |
Hung-Te Lin | 6fe0cab | 2013-01-22 18:57:56 +0800 | [diff] [blame] | 406 | } |
Aaron Durbin | 6d720f3 | 2015-12-08 17:00:23 -0600 | [diff] [blame] | 407 | |
Julius Werner | 1e37c9c | 2019-12-11 17:09:39 -0800 | [diff] [blame] | 408 | void cbfs_boot_device_find_mcache(struct cbfs_boot_device *cbd, uint32_t id) |
Aaron Durbin | 6d720f3 | 2015-12-08 17:00:23 -0600 | [diff] [blame] | 409 | { |
Julius Werner | 1e37c9c | 2019-12-11 17:09:39 -0800 | [diff] [blame] | 410 | if (CONFIG(NO_CBFS_MCACHE) || ENV_SMM) |
| 411 | return; |
| 412 | |
Julius Werner | 34cf073 | 2020-12-08 14:21:43 -0800 | [diff] [blame^] | 413 | if (cbd->mcache_size) |
| 414 | return; |
| 415 | |
Julius Werner | 1e37c9c | 2019-12-11 17:09:39 -0800 | [diff] [blame] | 416 | const struct cbmem_entry *entry; |
| 417 | if (cbmem_possibly_online() && |
| 418 | (entry = cbmem_entry_find(id))) { |
| 419 | cbd->mcache = cbmem_entry_start(entry); |
| 420 | cbd->mcache_size = cbmem_entry_size(entry); |
| 421 | } else if (ENV_ROMSTAGE_OR_BEFORE) { |
| 422 | u8 *boundary = _ecbfs_mcache - REGION_SIZE(cbfs_mcache) * |
| 423 | CONFIG_CBFS_MCACHE_RW_PERCENTAGE / 100; |
| 424 | boundary = (u8 *)ALIGN_DOWN((uintptr_t)boundary, |
| 425 | CBFS_MCACHE_ALIGNMENT); |
| 426 | if (id == CBMEM_ID_CBFS_RO_MCACHE) { |
| 427 | cbd->mcache = _cbfs_mcache; |
| 428 | cbd->mcache_size = boundary - _cbfs_mcache; |
| 429 | } else if (id == CBMEM_ID_CBFS_RW_MCACHE) { |
| 430 | cbd->mcache = boundary; |
| 431 | cbd->mcache_size = _ecbfs_mcache - boundary; |
| 432 | } |
| 433 | } |
Aaron Durbin | 6d720f3 | 2015-12-08 17:00:23 -0600 | [diff] [blame] | 434 | } |
Julius Werner | 1e37c9c | 2019-12-11 17:09:39 -0800 | [diff] [blame] | 435 | |
Julius Werner | fdabf3f | 2020-05-06 17:06:35 -0700 | [diff] [blame] | 436 | cb_err_t cbfs_init_boot_device(const struct cbfs_boot_device *cbd, |
| 437 | struct vb2_hash *metadata_hash) |
| 438 | { |
| 439 | /* If we have an mcache, mcache_build() will also check mdata hash. */ |
| 440 | if (!CONFIG(NO_CBFS_MCACHE) && !ENV_SMM && cbd->mcache_size > 0) |
| 441 | return cbfs_mcache_build(&cbd->rdev, cbd->mcache, |
| 442 | cbd->mcache_size, metadata_hash); |
| 443 | |
| 444 | /* No mcache and no verification means we have nothing special to do. */ |
| 445 | if (!CONFIG(CBFS_VERIFICATION) || !metadata_hash) |
| 446 | return CB_SUCCESS; |
| 447 | |
| 448 | /* Verification only: use cbfs_walk() without a walker() function to |
| 449 | just run through the CBFS once, will return NOT_FOUND by default. */ |
| 450 | cb_err_t err = cbfs_walk(&cbd->rdev, NULL, NULL, metadata_hash, 0); |
| 451 | if (err == CB_CBFS_NOT_FOUND) |
| 452 | err = CB_SUCCESS; |
| 453 | return err; |
| 454 | } |
| 455 | |
Julius Werner | 1e37c9c | 2019-12-11 17:09:39 -0800 | [diff] [blame] | 456 | const struct cbfs_boot_device *cbfs_get_boot_device(bool force_ro) |
| 457 | { |
| 458 | static struct cbfs_boot_device ro; |
| 459 | |
| 460 | /* Ensure we always init RO mcache, even if first file is from RW. |
| 461 | Otherwise it may not be available when needed in later stages. */ |
| 462 | if (ENV_INITIAL_STAGE && !force_ro && !region_device_sz(&ro.rdev)) |
| 463 | cbfs_get_boot_device(true); |
| 464 | |
| 465 | if (!force_ro) { |
| 466 | const struct cbfs_boot_device *rw = vboot_get_cbfs_boot_device(); |
| 467 | /* This will return NULL if vboot isn't enabled, didn't run yet |
| 468 | or decided to boot into recovery mode. */ |
| 469 | if (rw) |
| 470 | return rw; |
| 471 | } |
| 472 | |
Julius Werner | 34cf073 | 2020-12-08 14:21:43 -0800 | [diff] [blame^] | 473 | /* In rare cases post-RAM stages may run this before cbmem_initialize(), |
| 474 | so we can't lock in the result of find_mcache() on the first try and |
| 475 | should keep trying every time until an mcache is found. */ |
| 476 | cbfs_boot_device_find_mcache(&ro, CBMEM_ID_CBFS_RO_MCACHE); |
| 477 | |
Julius Werner | 1e37c9c | 2019-12-11 17:09:39 -0800 | [diff] [blame] | 478 | if (region_device_sz(&ro.rdev)) |
| 479 | return &ro; |
| 480 | |
| 481 | if (fmap_locate_area_as_rdev("COREBOOT", &ro.rdev)) |
Julius Werner | fdabf3f | 2020-05-06 17:06:35 -0700 | [diff] [blame] | 482 | die("Cannot locate primary CBFS"); |
Julius Werner | 1e37c9c | 2019-12-11 17:09:39 -0800 | [diff] [blame] | 483 | |
Julius Werner | fdabf3f | 2020-05-06 17:06:35 -0700 | [diff] [blame] | 484 | if (ENV_INITIAL_STAGE) { |
| 485 | cb_err_t err = cbfs_init_boot_device(&ro, metadata_hash_get()); |
| 486 | if (err == CB_CBFS_HASH_MISMATCH) |
| 487 | die("RO CBFS metadata hash verification failure"); |
| 488 | else if (CONFIG(TOCTOU_SAFETY) && err == CB_CBFS_CACHE_FULL) |
| 489 | die("RO mcache overflow breaks TOCTOU safety!\n"); |
| 490 | else if (err && err != CB_CBFS_CACHE_FULL) |
| 491 | die("RO CBFS initialization error: %d", err); |
Julius Werner | 1e37c9c | 2019-12-11 17:09:39 -0800 | [diff] [blame] | 492 | } |
| 493 | |
| 494 | return &ro; |
| 495 | } |
| 496 | |
| 497 | #if !CONFIG(NO_CBFS_MCACHE) |
| 498 | static void mcache_to_cbmem(const struct cbfs_boot_device *cbd, u32 cbmem_id) |
| 499 | { |
| 500 | if (!cbd) |
| 501 | return; |
| 502 | |
| 503 | size_t real_size = cbfs_mcache_real_size(cbd->mcache, cbd->mcache_size); |
| 504 | void *cbmem_mcache = cbmem_add(cbmem_id, real_size); |
| 505 | if (!cbmem_mcache) { |
| 506 | printk(BIOS_ERR, "ERROR: Cannot allocate CBMEM mcache %#x (%#zx bytes)!\n", |
| 507 | cbmem_id, real_size); |
| 508 | return; |
| 509 | } |
| 510 | memcpy(cbmem_mcache, cbd->mcache, real_size); |
| 511 | } |
| 512 | |
| 513 | static void cbfs_mcache_migrate(int unused) |
| 514 | { |
| 515 | mcache_to_cbmem(vboot_get_cbfs_boot_device(), CBMEM_ID_CBFS_RW_MCACHE); |
| 516 | mcache_to_cbmem(cbfs_get_boot_device(true), CBMEM_ID_CBFS_RO_MCACHE); |
| 517 | } |
| 518 | ROMSTAGE_CBMEM_INIT_HOOK(cbfs_mcache_migrate) |
| 519 | #endif |