Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 1 | /* |
| 2 | * Copyright 2016 The Chromium OS Authors. All rights reserved. |
| 3 | * Use of this source code is governed by a BSD-style license that can be |
| 4 | * found in the LICENSE file. |
| 5 | */ |
| 6 | |
Victor Prupis | f706020 | 2016-08-19 10:45:04 -0700 | [diff] [blame] | 7 | #include <arch/early_variables.h> |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 8 | #include <commonlib/iobuf.h> |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 9 | #include <console/console.h> |
| 10 | #include <stdlib.h> |
| 11 | #include <string.h> |
| 12 | |
Philipp Deppenwiese | d88fb36 | 2017-10-18 20:26:18 +0200 | [diff] [blame] | 13 | #include "tss_marshaling.h" |
Philipp Deppenwiese | c07f8fb | 2018-02-27 19:40:52 +0100 | [diff] [blame] | 14 | #include <security/tpm/tss/vendor/cr50/cr50.h> |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 15 | |
Victor Prupis | f706020 | 2016-08-19 10:45:04 -0700 | [diff] [blame] | 16 | static uint16_t tpm_tag CAR_GLOBAL; /* Depends on the command type. */ |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 17 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 18 | #define unmarshal_TPM_CAP(a, b) ibuf_read_be32(a, b) |
| 19 | #define unmarshal_TPM_CC(a, b) ibuf_read_be32(a, b) |
| 20 | #define unmarshal_TPM_PT(a, b) ibuf_read_be32(a, b) |
| 21 | #define unmarshal_TPM_HANDLE(a, b) ibuf_read_be32(a, b) |
| 22 | |
| 23 | #define marshal_TPM_HANDLE(a, b) obuf_write_be32(a, b) |
| 24 | #define marshal_TPMI_ALG_HASH(a, b) obuf_write_be16(a, b) |
| 25 | |
| 26 | static int marshal_startup(struct obuf *ob, struct tpm2_startup *cmd_body) |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 27 | { |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 28 | return obuf_write_be16(ob, cmd_body->startup_type); |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 29 | } |
| 30 | |
Joel Kitching | 2e690ee | 2018-11-15 16:48:53 +0800 | [diff] [blame] | 31 | static int marshal_shutdown(struct obuf *ob, struct tpm2_shutdown *cmd_body) |
| 32 | { |
| 33 | return obuf_write_be16(ob, cmd_body->shutdown_type); |
| 34 | } |
| 35 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 36 | static int marshal_get_capability(struct obuf *ob, |
| 37 | struct tpm2_get_capability *cmd_body) |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 38 | { |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 39 | int rc = 0; |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 40 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 41 | rc |= obuf_write_be32(ob, cmd_body->capability); |
| 42 | rc |= obuf_write_be32(ob, cmd_body->property); |
| 43 | rc |= obuf_write_be32(ob, cmd_body->propertyCount); |
Vadim Bendebury | bc92710 | 2016-07-07 10:52:46 -0700 | [diff] [blame] | 44 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 45 | return rc; |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 46 | } |
| 47 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 48 | static int marshal_TPM2B(struct obuf *ob, TPM2B *data) |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 49 | { |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 50 | int rc = 0; |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 51 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 52 | rc |= obuf_write_be16(ob, data->size); |
| 53 | rc |= obuf_write(ob, data->buffer, data->size); |
Vadim Bendebury | bc92710 | 2016-07-07 10:52:46 -0700 | [diff] [blame] | 54 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 55 | return rc; |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 56 | } |
| 57 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 58 | static int marshal_TPMA_NV(struct obuf *ob, TPMA_NV *nv) |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 59 | { |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 60 | uint32_t v; |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 61 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 62 | memcpy(&v, nv, sizeof(v)); |
| 63 | return obuf_write_be32(ob, v); |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 64 | } |
| 65 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 66 | static int marshal_TPMS_NV_PUBLIC(struct obuf *ob, TPMS_NV_PUBLIC *nvpub) |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 67 | { |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 68 | int rc = 0; |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 69 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 70 | rc |= marshal_TPM_HANDLE(ob, nvpub->nvIndex); |
| 71 | rc |= marshal_TPMI_ALG_HASH(ob, nvpub->nameAlg); |
| 72 | rc |= marshal_TPMA_NV(ob, &nvpub->attributes); |
| 73 | rc |= marshal_TPM2B(ob, &nvpub->authPolicy.b); |
| 74 | rc |= obuf_write_be16(ob, nvpub->dataSize); |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 75 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 76 | return rc; |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 77 | } |
| 78 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 79 | static int marshal_TPMT_HA(struct obuf *ob, TPMT_HA *tpmtha) |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 80 | { |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 81 | int rc = 0; |
| 82 | |
| 83 | rc |= marshal_TPMI_ALG_HASH(ob, tpmtha->hashAlg); |
| 84 | rc |= obuf_write(ob, tpmtha->digest.sha256, |
| 85 | sizeof(tpmtha->digest.sha256)); |
| 86 | |
| 87 | return rc; |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 88 | } |
| 89 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 90 | static int marshal_TPML_DIGEST_VALUES(struct obuf *ob, |
| 91 | TPML_DIGEST_VALUES *dvalues) |
Vadim Bendebury | f5ef699 | 2016-07-03 22:20:17 -0700 | [diff] [blame] | 92 | { |
| 93 | int i; |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 94 | int rc = 0; |
Vadim Bendebury | f5ef699 | 2016-07-03 22:20:17 -0700 | [diff] [blame] | 95 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 96 | rc |= obuf_write_be32(ob, dvalues->count); |
Vadim Bendebury | f5ef699 | 2016-07-03 22:20:17 -0700 | [diff] [blame] | 97 | for (i = 0; i < dvalues->count; i++) |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 98 | rc |= marshal_TPMT_HA(ob, &dvalues->digests[i]); |
| 99 | |
| 100 | return rc; |
Vadim Bendebury | f5ef699 | 2016-07-03 22:20:17 -0700 | [diff] [blame] | 101 | } |
| 102 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 103 | static int marshal_session_header(struct obuf *ob, |
| 104 | struct tpm2_session_header *session_header) |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 105 | { |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 106 | int rc = 0; |
| 107 | struct obuf ob_sz; |
| 108 | size_t prev_written; |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 109 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 110 | /* Snapshot current location to place size of header. */ |
| 111 | if (obuf_splice_current(ob, &ob_sz, sizeof(uint32_t)) < 0) |
| 112 | return -1; |
Vadim Bendebury | bc92710 | 2016-07-07 10:52:46 -0700 | [diff] [blame] | 113 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 114 | /* Write a size placeholder. */ |
| 115 | rc |= obuf_write_be32(ob, 0); |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 116 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 117 | /* Keep track of session header data size by tracking num written. */ |
| 118 | prev_written = obuf_nr_written(ob); |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 119 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 120 | rc |= obuf_write_be32(ob, session_header->session_handle); |
| 121 | rc |= obuf_write_be16(ob, session_header->nonce_size); |
| 122 | rc |= obuf_write(ob, session_header->nonce, session_header->nonce_size); |
| 123 | rc |= obuf_write_be8(ob, session_header->session_attrs); |
| 124 | rc |= obuf_write_be16(ob, session_header->auth_size); |
| 125 | rc |= obuf_write(ob, session_header->auth, session_header->auth_size); |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 126 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 127 | /* Fill back in proper size of session header. */ |
| 128 | rc |= obuf_write_be32(&ob_sz, obuf_nr_written(ob) - prev_written); |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 129 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 130 | return rc; |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 131 | } |
| 132 | |
Vadim Bendebury | ebba4d7 | 2016-07-07 11:04:06 -0700 | [diff] [blame] | 133 | /* |
| 134 | * Common session header can include one or two handles and an empty |
| 135 | * session_header structure. |
| 136 | */ |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 137 | static int marshal_common_session_header(struct obuf *ob, |
Vadim Bendebury | ebba4d7 | 2016-07-07 11:04:06 -0700 | [diff] [blame] | 138 | const uint32_t *handles, |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 139 | size_t handle_count) |
Vadim Bendebury | ebba4d7 | 2016-07-07 11:04:06 -0700 | [diff] [blame] | 140 | { |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 141 | size_t i; |
Vadim Bendebury | ebba4d7 | 2016-07-07 11:04:06 -0700 | [diff] [blame] | 142 | struct tpm2_session_header session_header; |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 143 | int rc = 0; |
Vadim Bendebury | ebba4d7 | 2016-07-07 11:04:06 -0700 | [diff] [blame] | 144 | |
Victor Prupis | f706020 | 2016-08-19 10:45:04 -0700 | [diff] [blame] | 145 | car_set_var(tpm_tag, TPM_ST_SESSIONS); |
Vadim Bendebury | ebba4d7 | 2016-07-07 11:04:06 -0700 | [diff] [blame] | 146 | |
| 147 | for (i = 0; i < handle_count; i++) |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 148 | rc |= marshal_TPM_HANDLE(ob, handles[i]); |
Vadim Bendebury | ebba4d7 | 2016-07-07 11:04:06 -0700 | [diff] [blame] | 149 | |
| 150 | memset(&session_header, 0, sizeof(session_header)); |
| 151 | session_header.session_handle = TPM_RS_PW; |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 152 | rc |= marshal_session_header(ob, &session_header); |
| 153 | |
| 154 | return rc; |
Vadim Bendebury | ebba4d7 | 2016-07-07 11:04:06 -0700 | [diff] [blame] | 155 | } |
| 156 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 157 | static int marshal_nv_define_space(struct obuf *ob, |
| 158 | struct tpm2_nv_define_space_cmd *nvd_in) |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 159 | { |
Vadim Bendebury | ebba4d7 | 2016-07-07 11:04:06 -0700 | [diff] [blame] | 160 | const uint32_t handle[] = { TPM_RH_PLATFORM }; |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 161 | struct obuf ob_sz; |
| 162 | size_t prev_written; |
| 163 | int rc = 0; |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 164 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 165 | rc |= marshal_common_session_header(ob, handle, ARRAY_SIZE(handle)); |
| 166 | rc |= marshal_TPM2B(ob, &nvd_in->auth.b); |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 167 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 168 | /* Snapshot current location to place size field. */ |
| 169 | if (obuf_splice_current(ob, &ob_sz, sizeof(uint16_t)) < 0) |
| 170 | return -1; |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 171 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 172 | /* Put placeholder for size */ |
| 173 | rc |= obuf_write_be16(ob, 0); |
Vadim Bendebury | bc92710 | 2016-07-07 10:52:46 -0700 | [diff] [blame] | 174 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 175 | /* Keep track of nv define space data size by tracking num written. */ |
| 176 | prev_written = obuf_nr_written(ob); |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 177 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 178 | rc |= marshal_TPMS_NV_PUBLIC(ob, &nvd_in->publicInfo); |
| 179 | rc |= obuf_write_be16(&ob_sz, obuf_nr_written(ob) - prev_written); |
Vadim Bendebury | bc92710 | 2016-07-07 10:52:46 -0700 | [diff] [blame] | 180 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 181 | return rc; |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 182 | } |
| 183 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 184 | static int marshal_nv_write(struct obuf *ob, |
| 185 | struct tpm2_nv_write_cmd *command_body) |
| 186 | { |
| 187 | int rc = 0; |
| 188 | uint32_t handles[] = { TPM_RH_PLATFORM, command_body->nvIndex }; |
| 189 | |
| 190 | rc |= marshal_common_session_header(ob, handles, ARRAY_SIZE(handles)); |
| 191 | rc |= marshal_TPM2B(ob, &command_body->data.b); |
| 192 | rc |= obuf_write_be16(ob, command_body->offset); |
| 193 | |
| 194 | return rc; |
| 195 | } |
| 196 | |
| 197 | static int marshal_nv_write_lock(struct obuf *ob, |
| 198 | struct tpm2_nv_write_lock_cmd *command_body) |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 199 | { |
Vadim Bendebury | ebba4d7 | 2016-07-07 11:04:06 -0700 | [diff] [blame] | 200 | uint32_t handles[] = { TPM_RH_PLATFORM, command_body->nvIndex }; |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 201 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 202 | return marshal_common_session_header(ob, handles, ARRAY_SIZE(handles)); |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 203 | } |
| 204 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 205 | static int marshal_pcr_extend(struct obuf *ob, |
| 206 | struct tpm2_pcr_extend_cmd *command_body) |
Vadim Bendebury | 4c0851c | 2016-07-03 17:08:10 -0700 | [diff] [blame] | 207 | { |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 208 | int rc = 0; |
| 209 | uint32_t handles[] = { command_body->pcrHandle }; |
| 210 | |
| 211 | rc |= marshal_common_session_header(ob, handles, ARRAY_SIZE(handles)); |
| 212 | rc |= marshal_TPML_DIGEST_VALUES(ob, &command_body->digests); |
| 213 | |
| 214 | return rc; |
Vadim Bendebury | 4c0851c | 2016-07-03 17:08:10 -0700 | [diff] [blame] | 215 | } |
| 216 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 217 | static int marshal_nv_read(struct obuf *ob, |
| 218 | struct tpm2_nv_read_cmd *command_body) |
Vadim Bendebury | f5ef699 | 2016-07-03 22:20:17 -0700 | [diff] [blame] | 219 | { |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 220 | int rc = 0; |
Vadim Bendebury | ebba4d7 | 2016-07-07 11:04:06 -0700 | [diff] [blame] | 221 | uint32_t handles[] = { TPM_RH_PLATFORM, command_body->nvIndex }; |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 222 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 223 | rc |= marshal_common_session_header(ob, handles, ARRAY_SIZE(handles)); |
| 224 | rc |= obuf_write_be16(ob, command_body->size); |
| 225 | rc |= obuf_write_be16(ob, command_body->offset); |
| 226 | |
| 227 | return rc; |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 228 | } |
| 229 | |
Elyes HAOUAS | 3d45000 | 2018-08-09 18:55:58 +0200 | [diff] [blame] | 230 | /* TPM2_Clear command does not require parameters. */ |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 231 | static int marshal_clear(struct obuf *ob) |
Vadim Bendebury | 6acb9a6 | 2016-06-30 20:50:49 -0700 | [diff] [blame] | 232 | { |
| 233 | const uint32_t handle[] = { TPM_RH_PLATFORM }; |
| 234 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 235 | return marshal_common_session_header(ob, handle, ARRAY_SIZE(handle)); |
Vadim Bendebury | 6acb9a6 | 2016-06-30 20:50:49 -0700 | [diff] [blame] | 236 | } |
| 237 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 238 | static int marshal_selftest(struct obuf *ob, |
| 239 | struct tpm2_self_test *command_body) |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 240 | { |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 241 | return obuf_write_be8(ob, command_body->yes_no); |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 242 | } |
| 243 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 244 | static int marshal_hierarchy_control(struct obuf *ob, |
| 245 | struct tpm2_hierarchy_control_cmd *command_body) |
Aaron Durbin | f56c778 | 2017-01-10 17:44:42 -0600 | [diff] [blame] | 246 | { |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 247 | int rc = 0; |
Aaron Durbin | f56c778 | 2017-01-10 17:44:42 -0600 | [diff] [blame] | 248 | struct tpm2_session_header session_header; |
| 249 | |
| 250 | car_set_var(tpm_tag, TPM_ST_SESSIONS); |
| 251 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 252 | rc |= marshal_TPM_HANDLE(ob, TPM_RH_PLATFORM); |
Aaron Durbin | f56c778 | 2017-01-10 17:44:42 -0600 | [diff] [blame] | 253 | memset(&session_header, 0, sizeof(session_header)); |
| 254 | session_header.session_handle = TPM_RS_PW; |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 255 | rc |= marshal_session_header(ob, &session_header); |
Aaron Durbin | f56c778 | 2017-01-10 17:44:42 -0600 | [diff] [blame] | 256 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 257 | rc |= marshal_TPM_HANDLE(ob, command_body->enable); |
| 258 | rc |= obuf_write_be8(ob, command_body->state); |
| 259 | |
| 260 | return rc; |
Aaron Durbin | f56c778 | 2017-01-10 17:44:42 -0600 | [diff] [blame] | 261 | } |
| 262 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 263 | static int marshal_cr50_vendor_command(struct obuf *ob, void *command_body) |
Aaron Durbin | eeb7737 | 2017-03-08 11:23:11 -0600 | [diff] [blame] | 264 | { |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 265 | int rc = 0; |
| 266 | uint16_t *sub_command = command_body; |
Aaron Durbin | eeb7737 | 2017-03-08 11:23:11 -0600 | [diff] [blame] | 267 | |
| 268 | switch (*sub_command) { |
| 269 | case TPM2_CR50_SUB_CMD_NVMEM_ENABLE_COMMITS: |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 270 | rc |= obuf_write_be16(ob, *sub_command); |
Aaron Durbin | eeb7737 | 2017-03-08 11:23:11 -0600 | [diff] [blame] | 271 | break; |
Vadim Bendebury | 021ec28 | 2017-03-22 16:01:53 -0700 | [diff] [blame] | 272 | case TPM2_CR50_SUB_CMD_TURN_UPDATE_ON: |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 273 | rc |= obuf_write_be16(ob, sub_command[0]); |
| 274 | rc |= obuf_write_be16(ob, sub_command[1]); |
Vadim Bendebury | 021ec28 | 2017-03-22 16:01:53 -0700 | [diff] [blame] | 275 | break; |
Keith Short | e371d42 | 2019-01-11 07:52:32 -0700 | [diff] [blame^] | 276 | case TPM2_CR50_SUB_CMD_GET_REC_BTN: |
| 277 | rc |= obuf_write_be16(ob, *sub_command); |
| 278 | break; |
Aaron Durbin | eeb7737 | 2017-03-08 11:23:11 -0600 | [diff] [blame] | 279 | default: |
| 280 | /* Unsupported subcommand. */ |
| 281 | printk(BIOS_WARNING, "Unsupported cr50 subcommand: 0x%04x\n", |
| 282 | *sub_command); |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 283 | rc = -1; |
Aaron Durbin | eeb7737 | 2017-03-08 11:23:11 -0600 | [diff] [blame] | 284 | break; |
| 285 | } |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 286 | return rc; |
Aaron Durbin | eeb7737 | 2017-03-08 11:23:11 -0600 | [diff] [blame] | 287 | } |
| 288 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 289 | int tpm_marshal_command(TPM_CC command, void *tpm_command_body, struct obuf *ob) |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 290 | { |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 291 | struct obuf ob_hdr; |
| 292 | const size_t hdr_sz = sizeof(uint16_t) + 2 * sizeof(uint32_t); |
| 293 | int rc = 0; |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 294 | |
Victor Prupis | f706020 | 2016-08-19 10:45:04 -0700 | [diff] [blame] | 295 | car_set_var(tpm_tag, TPM_ST_NO_SESSIONS); |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 296 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 297 | if (obuf_splice_current(ob, &ob_hdr, hdr_sz) < 0) |
| 298 | return -1; |
| 299 | |
| 300 | /* Write TPM command header with placeholder field values. */ |
| 301 | rc |= obuf_write_be16(ob, 0); |
| 302 | rc |= obuf_write_be32(ob, 0); |
| 303 | rc |= obuf_write_be32(ob, command); |
| 304 | |
| 305 | if (rc != 0) |
| 306 | return rc; |
| 307 | |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 308 | switch (command) { |
| 309 | case TPM2_Startup: |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 310 | rc |= marshal_startup(ob, tpm_command_body); |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 311 | break; |
| 312 | |
Joel Kitching | 2e690ee | 2018-11-15 16:48:53 +0800 | [diff] [blame] | 313 | case TPM2_Shutdown: |
| 314 | rc |= marshal_shutdown(ob, tpm_command_body); |
| 315 | break; |
| 316 | |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 317 | case TPM2_GetCapability: |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 318 | rc |= marshal_get_capability(ob, tpm_command_body); |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 319 | break; |
| 320 | |
| 321 | case TPM2_NV_Read: |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 322 | rc |= marshal_nv_read(ob, tpm_command_body); |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 323 | break; |
| 324 | |
| 325 | case TPM2_NV_DefineSpace: |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 326 | rc |= marshal_nv_define_space(ob, tpm_command_body); |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 327 | break; |
| 328 | |
| 329 | case TPM2_NV_Write: |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 330 | rc |= marshal_nv_write(ob, tpm_command_body); |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 331 | break; |
| 332 | |
Vadim Bendebury | 4c0851c | 2016-07-03 17:08:10 -0700 | [diff] [blame] | 333 | case TPM2_NV_WriteLock: |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 334 | rc |= marshal_nv_write_lock(ob, tpm_command_body); |
Vadim Bendebury | 4c0851c | 2016-07-03 17:08:10 -0700 | [diff] [blame] | 335 | break; |
| 336 | |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 337 | case TPM2_SelfTest: |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 338 | rc |= marshal_selftest(ob, tpm_command_body); |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 339 | break; |
| 340 | |
Aaron Durbin | f56c778 | 2017-01-10 17:44:42 -0600 | [diff] [blame] | 341 | case TPM2_Hierarchy_Control: |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 342 | rc |= marshal_hierarchy_control(ob, tpm_command_body); |
Aaron Durbin | f56c778 | 2017-01-10 17:44:42 -0600 | [diff] [blame] | 343 | break; |
| 344 | |
Vadim Bendebury | 6acb9a6 | 2016-06-30 20:50:49 -0700 | [diff] [blame] | 345 | case TPM2_Clear: |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 346 | rc |= marshal_clear(ob); |
Vadim Bendebury | 6acb9a6 | 2016-06-30 20:50:49 -0700 | [diff] [blame] | 347 | break; |
| 348 | |
Vadim Bendebury | f5ef699 | 2016-07-03 22:20:17 -0700 | [diff] [blame] | 349 | case TPM2_PCR_Extend: |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 350 | rc |= marshal_pcr_extend(ob, tpm_command_body); |
Vadim Bendebury | f5ef699 | 2016-07-03 22:20:17 -0700 | [diff] [blame] | 351 | break; |
| 352 | |
Aaron Durbin | eeb7737 | 2017-03-08 11:23:11 -0600 | [diff] [blame] | 353 | case TPM2_CR50_VENDOR_COMMAND: |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 354 | rc |= marshal_cr50_vendor_command(ob, tpm_command_body); |
Aaron Durbin | eeb7737 | 2017-03-08 11:23:11 -0600 | [diff] [blame] | 355 | break; |
| 356 | |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 357 | default: |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 358 | printk(BIOS_INFO, "%s:%d:Request to marshal unsupported command %#x\n", |
| 359 | __FILE__, __LINE__, command); |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 360 | rc = -1; |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 361 | } |
| 362 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 363 | if (rc != 0) |
| 364 | return rc; |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 365 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 366 | /* Fix up the command header with known values. */ |
| 367 | rc |= obuf_write_be16(&ob_hdr, car_get_var(tpm_tag)); |
| 368 | rc |= obuf_write_be32(&ob_hdr, obuf_nr_written(ob)); |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 369 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 370 | return rc; |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 371 | } |
| 372 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 373 | static int unmarshal_get_capability(struct ibuf *ib, |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 374 | struct get_cap_response *gcr) |
| 375 | { |
| 376 | int i; |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 377 | int rc = 0; |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 378 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 379 | rc |= ibuf_read_be8(ib, &gcr->more_data); |
| 380 | rc |= unmarshal_TPM_CAP(ib, &gcr->cd.capability); |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 381 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 382 | if (rc != 0) |
| 383 | return rc; |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 384 | |
| 385 | switch (gcr->cd.capability) { |
| 386 | case TPM_CAP_TPM_PROPERTIES: |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 387 | if (ibuf_read_be32(ib, &gcr->cd.data.tpmProperties.count)) |
| 388 | return -1; |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 389 | if (gcr->cd.data.tpmProperties.count > ARRAY_SIZE |
| 390 | (gcr->cd.data.tpmProperties.tpmProperty)) { |
| 391 | printk(BIOS_INFO, "%s:%s:%d - %d - too many properties\n", |
| 392 | __FILE__, __func__, __LINE__, |
| 393 | gcr->cd.data.tpmProperties.count); |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 394 | return -1; |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 395 | } |
| 396 | for (i = 0; i < gcr->cd.data.tpmProperties.count; i++) { |
| 397 | TPMS_TAGGED_PROPERTY *pp; |
| 398 | |
| 399 | pp = gcr->cd.data.tpmProperties.tpmProperty + i; |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 400 | rc |= unmarshal_TPM_PT(ib, &pp->property); |
| 401 | rc |= ibuf_read_be32(ib, &pp->value); |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 402 | } |
| 403 | break; |
| 404 | default: |
| 405 | printk(BIOS_ERR, |
| 406 | "%s:%d - unable to unmarshal capability response", |
| 407 | __func__, __LINE__); |
| 408 | printk(BIOS_ERR, " for %d\n", gcr->cd.capability); |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 409 | rc = -1; |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 410 | break; |
| 411 | } |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 412 | |
| 413 | return rc; |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 414 | } |
| 415 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 416 | static int unmarshal_TPM2B_MAX_NV_BUFFER(struct ibuf *ib, |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 417 | TPM2B_MAX_NV_BUFFER *nv_buffer) |
| 418 | { |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 419 | if (ibuf_read_be16(ib, &nv_buffer->t.size)) |
| 420 | return -1; |
| 421 | |
| 422 | nv_buffer->t.buffer = ibuf_oob_drain(ib, nv_buffer->t.size); |
| 423 | |
| 424 | if (nv_buffer->t.buffer == NULL) { |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 425 | printk(BIOS_ERR, "%s:%d - " |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 426 | "size mismatch: expected %d, remaining %zd\n", |
| 427 | __func__, __LINE__, nv_buffer->t.size, |
| 428 | ibuf_remaining(ib)); |
| 429 | return -1; |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 430 | } |
| 431 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 432 | return 0; |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 433 | } |
| 434 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 435 | static int unmarshal_nv_read(struct ibuf *ib, struct nv_read_response *nvr) |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 436 | { |
| 437 | /* Total size of the parameter field. */ |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 438 | if (ibuf_read_be32(ib, &nvr->params_size)) |
| 439 | return -1; |
| 440 | |
| 441 | if (unmarshal_TPM2B_MAX_NV_BUFFER(ib, &nvr->buffer)) |
| 442 | return -1; |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 443 | |
| 444 | if (nvr->params_size != |
| 445 | (nvr->buffer.t.size + sizeof(nvr->buffer.t.size))) { |
| 446 | printk(BIOS_ERR, |
| 447 | "%s:%d - parameter/buffer %d/%d size mismatch", |
| 448 | __func__, __LINE__, nvr->params_size, |
| 449 | nvr->buffer.t.size); |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 450 | return -1; |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 451 | } |
| 452 | |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 453 | /* |
| 454 | * Let's ignore the authorisation section. It should be 5 bytes total, |
| 455 | * just confirm that this is the case and report any discrepancy. |
| 456 | */ |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 457 | if (ibuf_remaining(ib) != 5) |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 458 | printk(BIOS_ERR, |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 459 | "%s:%d - unexpected authorisation seciton size %zd\n", |
| 460 | __func__, __LINE__, ibuf_remaining(ib)); |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 461 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 462 | ibuf_oob_drain(ib, ibuf_remaining(ib)); |
| 463 | |
| 464 | return 0; |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 465 | } |
| 466 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 467 | static int unmarshal_vendor_command(struct ibuf *ib, |
Vadim Bendebury | 021ec28 | 2017-03-22 16:01:53 -0700 | [diff] [blame] | 468 | struct vendor_command_response *vcr) |
| 469 | { |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 470 | if (ibuf_read_be16(ib, &vcr->vc_subcommand)) |
| 471 | return -1; |
Vadim Bendebury | 021ec28 | 2017-03-22 16:01:53 -0700 | [diff] [blame] | 472 | |
| 473 | switch (vcr->vc_subcommand) { |
| 474 | case TPM2_CR50_SUB_CMD_NVMEM_ENABLE_COMMITS: |
| 475 | break; |
| 476 | case TPM2_CR50_SUB_CMD_TURN_UPDATE_ON: |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 477 | return ibuf_read_be8(ib, &vcr->num_restored_headers); |
Vadim Bendebury | 021ec28 | 2017-03-22 16:01:53 -0700 | [diff] [blame] | 478 | break; |
Keith Short | e371d42 | 2019-01-11 07:52:32 -0700 | [diff] [blame^] | 479 | case TPM2_CR50_SUB_CMD_GET_REC_BTN: |
| 480 | return ibuf_read_be8(ib, &vcr->recovery_button_state); |
Vadim Bendebury | 021ec28 | 2017-03-22 16:01:53 -0700 | [diff] [blame] | 481 | default: |
| 482 | printk(BIOS_ERR, |
| 483 | "%s:%d - unsupported vendor command %#04x!\n", |
| 484 | __func__, __LINE__, vcr->vc_subcommand); |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 485 | return -1; |
Vadim Bendebury | 021ec28 | 2017-03-22 16:01:53 -0700 | [diff] [blame] | 486 | } |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 487 | |
| 488 | return 0; |
Vadim Bendebury | 021ec28 | 2017-03-22 16:01:53 -0700 | [diff] [blame] | 489 | } |
| 490 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 491 | struct tpm2_response *tpm_unmarshal_response(TPM_CC command, struct ibuf *ib) |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 492 | { |
Duncan Laurie | 4a56076 | 2016-09-01 16:09:43 -0700 | [diff] [blame] | 493 | static struct tpm2_response tpm2_static_resp CAR_GLOBAL; |
| 494 | struct tpm2_response *tpm2_resp = car_get_var_ptr(&tpm2_static_resp); |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 495 | int rc = 0; |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 496 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 497 | rc |= ibuf_read_be16(ib, &tpm2_resp->hdr.tpm_tag); |
| 498 | rc |= ibuf_read_be32(ib, &tpm2_resp->hdr.tpm_size); |
| 499 | rc |= unmarshal_TPM_CC(ib, &tpm2_resp->hdr.tpm_code); |
| 500 | |
| 501 | if (rc != 0) |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 502 | return NULL; |
| 503 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 504 | if (ibuf_remaining(ib) == 0) { |
| 505 | if (tpm2_resp->hdr.tpm_size != ibuf_nr_read(ib)) |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 506 | printk(BIOS_ERR, |
| 507 | "%s: size mismatch in response to command %#x\n", |
| 508 | __func__, command); |
Duncan Laurie | 4a56076 | 2016-09-01 16:09:43 -0700 | [diff] [blame] | 509 | return tpm2_resp; |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 510 | } |
| 511 | |
| 512 | switch (command) { |
| 513 | case TPM2_Startup: |
Joel Kitching | 2e690ee | 2018-11-15 16:48:53 +0800 | [diff] [blame] | 514 | case TPM2_Shutdown: |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 515 | break; |
| 516 | |
| 517 | case TPM2_GetCapability: |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 518 | rc |= unmarshal_get_capability(ib, &tpm2_resp->gc); |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 519 | break; |
| 520 | |
| 521 | case TPM2_NV_Read: |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 522 | rc |= unmarshal_nv_read(ib, &tpm2_resp->nvr); |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 523 | break; |
| 524 | |
Aaron Durbin | f56c778 | 2017-01-10 17:44:42 -0600 | [diff] [blame] | 525 | case TPM2_Hierarchy_Control: |
Vadim Bendebury | 6acb9a6 | 2016-06-30 20:50:49 -0700 | [diff] [blame] | 526 | case TPM2_Clear: |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 527 | case TPM2_NV_DefineSpace: |
| 528 | case TPM2_NV_Write: |
Vadim Bendebury | 4c0851c | 2016-07-03 17:08:10 -0700 | [diff] [blame] | 529 | case TPM2_NV_WriteLock: |
Vadim Bendebury | f5ef699 | 2016-07-03 22:20:17 -0700 | [diff] [blame] | 530 | case TPM2_PCR_Extend: |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 531 | /* Session data included in response can be safely ignored. */ |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 532 | ibuf_oob_drain(ib, ibuf_remaining(ib)); |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 533 | break; |
| 534 | |
Aaron Durbin | eeb7737 | 2017-03-08 11:23:11 -0600 | [diff] [blame] | 535 | case TPM2_CR50_VENDOR_COMMAND: |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 536 | rc |= unmarshal_vendor_command(ib, &tpm2_resp->vcr); |
Aaron Durbin | eeb7737 | 2017-03-08 11:23:11 -0600 | [diff] [blame] | 537 | break; |
| 538 | |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 539 | default: |
| 540 | { |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 541 | size_t i; |
| 542 | size_t sz_left; |
| 543 | const uint8_t *data; |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 544 | |
| 545 | printk(BIOS_INFO, "%s:%d:" |
| 546 | "Request to unmarshal unexpected command %#x," |
| 547 | " code %#x", |
| 548 | __func__, __LINE__, command, |
Duncan Laurie | 4a56076 | 2016-09-01 16:09:43 -0700 | [diff] [blame] | 549 | tpm2_resp->hdr.tpm_code); |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 550 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 551 | sz_left = ibuf_remaining(ib); |
| 552 | data = ibuf_oob_drain(ib, sz_left); |
| 553 | |
| 554 | for (i = 0; i < sz_left; i++) { |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 555 | if (!(i % 16)) |
| 556 | printk(BIOS_INFO, "\n"); |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 557 | printk(BIOS_INFO, "%2.2x ", data[i]); |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 558 | } |
| 559 | } |
| 560 | printk(BIOS_INFO, "\n"); |
| 561 | return NULL; |
| 562 | } |
| 563 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 564 | if (ibuf_remaining(ib)) { |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 565 | printk(BIOS_INFO, |
| 566 | "%s:%d got %d bytes back in response to %#x," |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 567 | " failed to parse (%zd)\n", |
Duncan Laurie | 4a56076 | 2016-09-01 16:09:43 -0700 | [diff] [blame] | 568 | __func__, __LINE__, tpm2_resp->hdr.tpm_size, |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 569 | command, ibuf_remaining(ib)); |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 570 | return NULL; |
| 571 | } |
Richard Spiegel | 248c60a | 2018-08-07 09:24:14 -0700 | [diff] [blame] | 572 | if (rc) |
| 573 | printk(BIOS_WARNING, "Warning: %s had one or more failures.\n", |
| 574 | __func__); |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 575 | |
| 576 | /* The entire message have been parsed. */ |
Duncan Laurie | 4a56076 | 2016-09-01 16:09:43 -0700 | [diff] [blame] | 577 | return tpm2_resp; |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 578 | } |