Jacob Garber | fa8f567 | 2020-05-18 13:18:19 -0600 | [diff] [blame] | 1 | /* SPDX-License-Identifier: BSD-3-Clause */ |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 2 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 3 | #include <commonlib/iobuf.h> |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 4 | #include <console/console.h> |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 5 | #include <string.h> |
| 6 | |
Philipp Deppenwiese | d88fb36 | 2017-10-18 20:26:18 +0200 | [diff] [blame] | 7 | #include "tss_marshaling.h" |
Philipp Deppenwiese | c07f8fb | 2018-02-27 19:40:52 +0100 | [diff] [blame] | 8 | #include <security/tpm/tss/vendor/cr50/cr50.h> |
Frans Hendriks | 589eff7 | 2019-06-26 10:43:40 +0200 | [diff] [blame] | 9 | #include <security/tpm/tss.h> |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 10 | |
Arthur Heymans | 0ca944b | 2019-11-20 19:51:06 +0100 | [diff] [blame] | 11 | static uint16_t tpm_tag; /* Depends on the command type. */ |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 12 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 13 | #define unmarshal_TPM_CAP(a, b) ibuf_read_be32(a, b) |
| 14 | #define unmarshal_TPM_CC(a, b) ibuf_read_be32(a, b) |
| 15 | #define unmarshal_TPM_PT(a, b) ibuf_read_be32(a, b) |
| 16 | #define unmarshal_TPM_HANDLE(a, b) ibuf_read_be32(a, b) |
| 17 | |
| 18 | #define marshal_TPM_HANDLE(a, b) obuf_write_be32(a, b) |
| 19 | #define marshal_TPMI_ALG_HASH(a, b) obuf_write_be16(a, b) |
| 20 | |
Caveh Jalali | c07fb75 | 2020-09-11 22:10:55 -0700 | [diff] [blame] | 21 | static int marshal_startup(struct obuf *ob, const struct tpm2_startup *cmd_body) |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 22 | { |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 23 | return obuf_write_be16(ob, cmd_body->startup_type); |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 24 | } |
| 25 | |
Caveh Jalali | c07fb75 | 2020-09-11 22:10:55 -0700 | [diff] [blame] | 26 | static int marshal_shutdown(struct obuf *ob, const struct tpm2_shutdown *cmd_body) |
Joel Kitching | 2e690ee | 2018-11-15 16:48:53 +0800 | [diff] [blame] | 27 | { |
| 28 | return obuf_write_be16(ob, cmd_body->shutdown_type); |
| 29 | } |
| 30 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 31 | static int marshal_get_capability(struct obuf *ob, |
Caveh Jalali | c07fb75 | 2020-09-11 22:10:55 -0700 | [diff] [blame] | 32 | const struct tpm2_get_capability *cmd_body) |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 33 | { |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 34 | int rc = 0; |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 35 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 36 | rc |= obuf_write_be32(ob, cmd_body->capability); |
| 37 | rc |= obuf_write_be32(ob, cmd_body->property); |
| 38 | rc |= obuf_write_be32(ob, cmd_body->propertyCount); |
Vadim Bendebury | bc92710 | 2016-07-07 10:52:46 -0700 | [diff] [blame] | 39 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 40 | return rc; |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 41 | } |
| 42 | |
Caveh Jalali | c07fb75 | 2020-09-11 22:10:55 -0700 | [diff] [blame] | 43 | static int marshal_TPM2B(struct obuf *ob, const TPM2B *data) |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 44 | { |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 45 | int rc = 0; |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 46 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 47 | rc |= obuf_write_be16(ob, data->size); |
| 48 | rc |= obuf_write(ob, data->buffer, data->size); |
Vadim Bendebury | bc92710 | 2016-07-07 10:52:46 -0700 | [diff] [blame] | 49 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 50 | return rc; |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 51 | } |
| 52 | |
Caveh Jalali | c07fb75 | 2020-09-11 22:10:55 -0700 | [diff] [blame] | 53 | static int marshal_TPMA_NV(struct obuf *ob, const TPMA_NV *nv) |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 54 | { |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 55 | uint32_t v; |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 56 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 57 | memcpy(&v, nv, sizeof(v)); |
| 58 | return obuf_write_be32(ob, v); |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 59 | } |
| 60 | |
Caveh Jalali | c07fb75 | 2020-09-11 22:10:55 -0700 | [diff] [blame] | 61 | static int marshal_TPMS_NV_PUBLIC(struct obuf *ob, const TPMS_NV_PUBLIC *nvpub) |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 62 | { |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 63 | int rc = 0; |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 64 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 65 | rc |= marshal_TPM_HANDLE(ob, nvpub->nvIndex); |
| 66 | rc |= marshal_TPMI_ALG_HASH(ob, nvpub->nameAlg); |
| 67 | rc |= marshal_TPMA_NV(ob, &nvpub->attributes); |
| 68 | rc |= marshal_TPM2B(ob, &nvpub->authPolicy.b); |
| 69 | rc |= obuf_write_be16(ob, nvpub->dataSize); |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 70 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 71 | return rc; |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 72 | } |
| 73 | |
Caveh Jalali | c07fb75 | 2020-09-11 22:10:55 -0700 | [diff] [blame] | 74 | static int marshal_TPMT_HA(struct obuf *ob, const TPMT_HA *tpmtha) |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 75 | { |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 76 | int rc = 0; |
| 77 | |
| 78 | rc |= marshal_TPMI_ALG_HASH(ob, tpmtha->hashAlg); |
Frans Hendriks | aa771cb | 2019-09-04 11:10:27 +0200 | [diff] [blame] | 79 | switch (tpmtha->hashAlg) { |
| 80 | case TPM_ALG_SHA1: |
| 81 | rc |= obuf_write(ob, tpmtha->digest.sha1, |
Frans Hendriks | 7e220ca | 2019-06-28 10:18:22 +0200 | [diff] [blame] | 82 | tlcl_get_hash_size_from_algo(tpmtha->hashAlg)); |
Frans Hendriks | aa771cb | 2019-09-04 11:10:27 +0200 | [diff] [blame] | 83 | break; |
| 84 | case TPM_ALG_SHA256: |
| 85 | rc |= obuf_write(ob, tpmtha->digest.sha256, |
| 86 | tlcl_get_hash_size_from_algo(tpmtha->hashAlg)); |
| 87 | break; |
| 88 | case TPM_ALG_SM3_256: |
| 89 | rc |= obuf_write(ob, tpmtha->digest.sm3_256, |
| 90 | tlcl_get_hash_size_from_algo(tpmtha->hashAlg)); |
| 91 | break; |
| 92 | case TPM_ALG_SHA384: |
| 93 | rc |= obuf_write(ob, tpmtha->digest.sha384, |
| 94 | tlcl_get_hash_size_from_algo(tpmtha->hashAlg)); |
| 95 | break; |
| 96 | case TPM_ALG_SHA512: |
| 97 | rc |= obuf_write(ob, tpmtha->digest.sha512, |
| 98 | tlcl_get_hash_size_from_algo(tpmtha->hashAlg)); |
| 99 | break; |
| 100 | default: |
| 101 | rc = -1; |
| 102 | } |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 103 | return rc; |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 104 | } |
| 105 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 106 | static int marshal_TPML_DIGEST_VALUES(struct obuf *ob, |
Caveh Jalali | c07fb75 | 2020-09-11 22:10:55 -0700 | [diff] [blame] | 107 | const TPML_DIGEST_VALUES *dvalues) |
Vadim Bendebury | f5ef699 | 2016-07-03 22:20:17 -0700 | [diff] [blame] | 108 | { |
| 109 | int i; |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 110 | int rc = 0; |
Vadim Bendebury | f5ef699 | 2016-07-03 22:20:17 -0700 | [diff] [blame] | 111 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 112 | rc |= obuf_write_be32(ob, dvalues->count); |
Vadim Bendebury | f5ef699 | 2016-07-03 22:20:17 -0700 | [diff] [blame] | 113 | for (i = 0; i < dvalues->count; i++) |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 114 | rc |= marshal_TPMT_HA(ob, &dvalues->digests[i]); |
| 115 | |
| 116 | return rc; |
Vadim Bendebury | f5ef699 | 2016-07-03 22:20:17 -0700 | [diff] [blame] | 117 | } |
| 118 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 119 | static int marshal_session_header(struct obuf *ob, |
Caveh Jalali | c07fb75 | 2020-09-11 22:10:55 -0700 | [diff] [blame] | 120 | const struct tpm2_session_header *session_header) |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 121 | { |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 122 | int rc = 0; |
| 123 | struct obuf ob_sz; |
| 124 | size_t prev_written; |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 125 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 126 | /* Snapshot current location to place size of header. */ |
| 127 | if (obuf_splice_current(ob, &ob_sz, sizeof(uint32_t)) < 0) |
| 128 | return -1; |
Vadim Bendebury | bc92710 | 2016-07-07 10:52:46 -0700 | [diff] [blame] | 129 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 130 | /* Write a size placeholder. */ |
| 131 | rc |= obuf_write_be32(ob, 0); |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 132 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 133 | /* Keep track of session header data size by tracking num written. */ |
| 134 | prev_written = obuf_nr_written(ob); |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 135 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 136 | rc |= obuf_write_be32(ob, session_header->session_handle); |
| 137 | rc |= obuf_write_be16(ob, session_header->nonce_size); |
| 138 | rc |= obuf_write(ob, session_header->nonce, session_header->nonce_size); |
| 139 | rc |= obuf_write_be8(ob, session_header->session_attrs); |
| 140 | rc |= obuf_write_be16(ob, session_header->auth_size); |
| 141 | rc |= obuf_write(ob, session_header->auth, session_header->auth_size); |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 142 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 143 | /* Fill back in proper size of session header. */ |
| 144 | rc |= obuf_write_be32(&ob_sz, obuf_nr_written(ob) - prev_written); |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 145 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 146 | return rc; |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 147 | } |
| 148 | |
Vadim Bendebury | ebba4d7 | 2016-07-07 11:04:06 -0700 | [diff] [blame] | 149 | /* |
| 150 | * Common session header can include one or two handles and an empty |
| 151 | * session_header structure. |
| 152 | */ |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 153 | static int marshal_common_session_header(struct obuf *ob, |
Caveh Jalali | c07fb75 | 2020-09-11 22:10:55 -0700 | [diff] [blame] | 154 | const uint32_t *handles, |
| 155 | size_t handle_count) |
Vadim Bendebury | ebba4d7 | 2016-07-07 11:04:06 -0700 | [diff] [blame] | 156 | { |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 157 | size_t i; |
Vadim Bendebury | ebba4d7 | 2016-07-07 11:04:06 -0700 | [diff] [blame] | 158 | struct tpm2_session_header session_header; |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 159 | int rc = 0; |
Vadim Bendebury | ebba4d7 | 2016-07-07 11:04:06 -0700 | [diff] [blame] | 160 | |
Arthur Heymans | 0ca944b | 2019-11-20 19:51:06 +0100 | [diff] [blame] | 161 | tpm_tag = TPM_ST_SESSIONS; |
Vadim Bendebury | ebba4d7 | 2016-07-07 11:04:06 -0700 | [diff] [blame] | 162 | |
| 163 | for (i = 0; i < handle_count; i++) |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 164 | rc |= marshal_TPM_HANDLE(ob, handles[i]); |
Vadim Bendebury | ebba4d7 | 2016-07-07 11:04:06 -0700 | [diff] [blame] | 165 | |
| 166 | memset(&session_header, 0, sizeof(session_header)); |
| 167 | session_header.session_handle = TPM_RS_PW; |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 168 | rc |= marshal_session_header(ob, &session_header); |
| 169 | |
| 170 | return rc; |
Vadim Bendebury | ebba4d7 | 2016-07-07 11:04:06 -0700 | [diff] [blame] | 171 | } |
| 172 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 173 | static int marshal_nv_define_space(struct obuf *ob, |
Caveh Jalali | c07fb75 | 2020-09-11 22:10:55 -0700 | [diff] [blame] | 174 | const struct tpm2_nv_define_space_cmd *nvd_in) |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 175 | { |
Vadim Bendebury | ebba4d7 | 2016-07-07 11:04:06 -0700 | [diff] [blame] | 176 | const uint32_t handle[] = { TPM_RH_PLATFORM }; |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 177 | struct obuf ob_sz; |
| 178 | size_t prev_written; |
| 179 | int rc = 0; |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 180 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 181 | rc |= marshal_common_session_header(ob, handle, ARRAY_SIZE(handle)); |
| 182 | rc |= marshal_TPM2B(ob, &nvd_in->auth.b); |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 183 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 184 | /* Snapshot current location to place size field. */ |
| 185 | if (obuf_splice_current(ob, &ob_sz, sizeof(uint16_t)) < 0) |
| 186 | return -1; |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 187 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 188 | /* Put placeholder for size */ |
| 189 | rc |= obuf_write_be16(ob, 0); |
Vadim Bendebury | bc92710 | 2016-07-07 10:52:46 -0700 | [diff] [blame] | 190 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 191 | /* Keep track of nv define space data size by tracking num written. */ |
| 192 | prev_written = obuf_nr_written(ob); |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 193 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 194 | rc |= marshal_TPMS_NV_PUBLIC(ob, &nvd_in->publicInfo); |
| 195 | rc |= obuf_write_be16(&ob_sz, obuf_nr_written(ob) - prev_written); |
Vadim Bendebury | bc92710 | 2016-07-07 10:52:46 -0700 | [diff] [blame] | 196 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 197 | return rc; |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 198 | } |
| 199 | |
Aseda Aboagye | 4ad0420 | 2021-05-24 16:47:09 -0700 | [diff] [blame] | 200 | static int marshal_nv_setbits(struct obuf *ob, |
| 201 | const struct tpm2_nv_setbits_cmd *command_body) |
| 202 | { |
| 203 | int rc = 0; |
| 204 | const uint32_t handles[] = { TPM_RH_PLATFORM, command_body->nvIndex }; |
| 205 | |
| 206 | rc |= marshal_common_session_header(ob, handles, ARRAY_SIZE(handles)); |
| 207 | rc |= obuf_write_be64(ob, command_body->bits); |
| 208 | |
| 209 | return rc; |
| 210 | } |
| 211 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 212 | static int marshal_nv_write(struct obuf *ob, |
Caveh Jalali | c07fb75 | 2020-09-11 22:10:55 -0700 | [diff] [blame] | 213 | const struct tpm2_nv_write_cmd *command_body) |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 214 | { |
| 215 | int rc = 0; |
Caveh Jalali | c07fb75 | 2020-09-11 22:10:55 -0700 | [diff] [blame] | 216 | const uint32_t handles[] = { TPM_RH_PLATFORM, command_body->nvIndex }; |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 217 | |
| 218 | rc |= marshal_common_session_header(ob, handles, ARRAY_SIZE(handles)); |
| 219 | rc |= marshal_TPM2B(ob, &command_body->data.b); |
| 220 | rc |= obuf_write_be16(ob, command_body->offset); |
| 221 | |
| 222 | return rc; |
| 223 | } |
| 224 | |
| 225 | static int marshal_nv_write_lock(struct obuf *ob, |
Caveh Jalali | c07fb75 | 2020-09-11 22:10:55 -0700 | [diff] [blame] | 226 | const struct tpm2_nv_write_lock_cmd *command_body) |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 227 | { |
Caveh Jalali | c07fb75 | 2020-09-11 22:10:55 -0700 | [diff] [blame] | 228 | const uint32_t handles[] = { TPM_RH_PLATFORM, command_body->nvIndex }; |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 229 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 230 | return marshal_common_session_header(ob, handles, ARRAY_SIZE(handles)); |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 231 | } |
| 232 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 233 | static int marshal_pcr_extend(struct obuf *ob, |
Caveh Jalali | c07fb75 | 2020-09-11 22:10:55 -0700 | [diff] [blame] | 234 | const struct tpm2_pcr_extend_cmd *command_body) |
Vadim Bendebury | 4c0851c | 2016-07-03 17:08:10 -0700 | [diff] [blame] | 235 | { |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 236 | int rc = 0; |
Caveh Jalali | c07fb75 | 2020-09-11 22:10:55 -0700 | [diff] [blame] | 237 | const uint32_t handles[] = { command_body->pcrHandle }; |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 238 | |
| 239 | rc |= marshal_common_session_header(ob, handles, ARRAY_SIZE(handles)); |
| 240 | rc |= marshal_TPML_DIGEST_VALUES(ob, &command_body->digests); |
| 241 | |
| 242 | return rc; |
Vadim Bendebury | 4c0851c | 2016-07-03 17:08:10 -0700 | [diff] [blame] | 243 | } |
| 244 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 245 | static int marshal_nv_read(struct obuf *ob, |
Caveh Jalali | c07fb75 | 2020-09-11 22:10:55 -0700 | [diff] [blame] | 246 | const struct tpm2_nv_read_cmd *command_body) |
Vadim Bendebury | f5ef699 | 2016-07-03 22:20:17 -0700 | [diff] [blame] | 247 | { |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 248 | int rc = 0; |
Caveh Jalali | c07fb75 | 2020-09-11 22:10:55 -0700 | [diff] [blame] | 249 | const uint32_t handles[] = { TPM_RH_PLATFORM, command_body->nvIndex }; |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 250 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 251 | rc |= marshal_common_session_header(ob, handles, ARRAY_SIZE(handles)); |
| 252 | rc |= obuf_write_be16(ob, command_body->size); |
| 253 | rc |= obuf_write_be16(ob, command_body->offset); |
| 254 | |
| 255 | return rc; |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 256 | } |
| 257 | |
Elyes HAOUAS | 3d45000 | 2018-08-09 18:55:58 +0200 | [diff] [blame] | 258 | /* TPM2_Clear command does not require parameters. */ |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 259 | static int marshal_clear(struct obuf *ob) |
Vadim Bendebury | 6acb9a6 | 2016-06-30 20:50:49 -0700 | [diff] [blame] | 260 | { |
| 261 | const uint32_t handle[] = { TPM_RH_PLATFORM }; |
| 262 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 263 | return marshal_common_session_header(ob, handle, ARRAY_SIZE(handle)); |
Vadim Bendebury | 6acb9a6 | 2016-06-30 20:50:49 -0700 | [diff] [blame] | 264 | } |
| 265 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 266 | static int marshal_selftest(struct obuf *ob, |
Caveh Jalali | c07fb75 | 2020-09-11 22:10:55 -0700 | [diff] [blame] | 267 | const struct tpm2_self_test *command_body) |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 268 | { |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 269 | return obuf_write_be8(ob, command_body->yes_no); |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 270 | } |
| 271 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 272 | static int marshal_hierarchy_control(struct obuf *ob, |
Caveh Jalali | c07fb75 | 2020-09-11 22:10:55 -0700 | [diff] [blame] | 273 | const struct tpm2_hierarchy_control_cmd *command_body) |
Aaron Durbin | f56c778 | 2017-01-10 17:44:42 -0600 | [diff] [blame] | 274 | { |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 275 | int rc = 0; |
Aaron Durbin | f56c778 | 2017-01-10 17:44:42 -0600 | [diff] [blame] | 276 | struct tpm2_session_header session_header; |
| 277 | |
Arthur Heymans | 0ca944b | 2019-11-20 19:51:06 +0100 | [diff] [blame] | 278 | tpm_tag = TPM_ST_SESSIONS; |
Aaron Durbin | f56c778 | 2017-01-10 17:44:42 -0600 | [diff] [blame] | 279 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 280 | rc |= marshal_TPM_HANDLE(ob, TPM_RH_PLATFORM); |
Aaron Durbin | f56c778 | 2017-01-10 17:44:42 -0600 | [diff] [blame] | 281 | memset(&session_header, 0, sizeof(session_header)); |
| 282 | session_header.session_handle = TPM_RS_PW; |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 283 | rc |= marshal_session_header(ob, &session_header); |
Aaron Durbin | f56c778 | 2017-01-10 17:44:42 -0600 | [diff] [blame] | 284 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 285 | rc |= marshal_TPM_HANDLE(ob, command_body->enable); |
| 286 | rc |= obuf_write_be8(ob, command_body->state); |
| 287 | |
| 288 | return rc; |
Aaron Durbin | f56c778 | 2017-01-10 17:44:42 -0600 | [diff] [blame] | 289 | } |
| 290 | |
Christian Walter | c9ac0bc | 2020-01-28 19:54:33 +0100 | [diff] [blame] | 291 | static int marshal_clear_control(struct obuf *ob, |
Caveh Jalali | c07fb75 | 2020-09-11 22:10:55 -0700 | [diff] [blame] | 292 | const struct tpm2_clear_control_cmd *command_body) |
Christian Walter | c9ac0bc | 2020-01-28 19:54:33 +0100 | [diff] [blame] | 293 | { |
| 294 | int rc = 0; |
| 295 | struct tpm2_session_header session_header; |
| 296 | |
| 297 | tpm_tag = TPM_ST_SESSIONS; |
| 298 | |
| 299 | rc |= marshal_TPM_HANDLE(ob, TPM_RH_PLATFORM); |
| 300 | memset(&session_header, 0, sizeof(session_header)); |
| 301 | session_header.session_handle = TPM_RS_PW; |
| 302 | rc |= marshal_session_header(ob, &session_header); |
| 303 | |
| 304 | rc |= obuf_write_be8(ob, command_body->disable); |
| 305 | |
| 306 | return rc; |
| 307 | } |
| 308 | |
Caveh Jalali | c07fb75 | 2020-09-11 22:10:55 -0700 | [diff] [blame] | 309 | static int marshal_cr50_vendor_command(struct obuf *ob, const void *command_body) |
Aaron Durbin | eeb7737 | 2017-03-08 11:23:11 -0600 | [diff] [blame] | 310 | { |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 311 | int rc = 0; |
Caveh Jalali | c07fb75 | 2020-09-11 22:10:55 -0700 | [diff] [blame] | 312 | const uint16_t *sub_command = command_body; |
Aaron Durbin | eeb7737 | 2017-03-08 11:23:11 -0600 | [diff] [blame] | 313 | |
| 314 | switch (*sub_command) { |
Keith Short | e0f3400 | 2019-02-05 16:15:10 -0700 | [diff] [blame] | 315 | case TPM2_CR50_SUB_CMD_IMMEDIATE_RESET: |
| 316 | /* The 16-bit timeout parameter is optional for the |
| 317 | * IMMEDIATE_RESET command. However in coreboot, the timeout |
| 318 | * parameter must be specified. |
| 319 | */ |
| 320 | rc |= obuf_write_be16(ob, sub_command[0]); |
| 321 | rc |= obuf_write_be16(ob, sub_command[1]); |
| 322 | break; |
Aaron Durbin | eeb7737 | 2017-03-08 11:23:11 -0600 | [diff] [blame] | 323 | case TPM2_CR50_SUB_CMD_NVMEM_ENABLE_COMMITS: |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 324 | rc |= obuf_write_be16(ob, *sub_command); |
Aaron Durbin | eeb7737 | 2017-03-08 11:23:11 -0600 | [diff] [blame] | 325 | break; |
Vadim Bendebury | 021ec28 | 2017-03-22 16:01:53 -0700 | [diff] [blame] | 326 | case TPM2_CR50_SUB_CMD_TURN_UPDATE_ON: |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 327 | rc |= obuf_write_be16(ob, sub_command[0]); |
| 328 | rc |= obuf_write_be16(ob, sub_command[1]); |
Vadim Bendebury | 021ec28 | 2017-03-22 16:01:53 -0700 | [diff] [blame] | 329 | break; |
Keith Short | e371d42 | 2019-01-11 07:52:32 -0700 | [diff] [blame] | 330 | case TPM2_CR50_SUB_CMD_GET_REC_BTN: |
| 331 | rc |= obuf_write_be16(ob, *sub_command); |
| 332 | break; |
Keith Short | e0f3400 | 2019-02-05 16:15:10 -0700 | [diff] [blame] | 333 | case TPM2_CR50_SUB_CMD_TPM_MODE: |
| 334 | /* The Cr50 TPM_MODE command supports an optional parameter. |
| 335 | * When the parameter is present the Cr50 will attempt to change |
| 336 | * the TPM state (enable or disable) and returns the new state |
| 337 | * in the response. When the parameter is absent, the Cr50 |
| 338 | * returns the current TPM state. |
| 339 | * |
| 340 | * coreboot currently only uses the TPM get capability and does |
| 341 | * not set a new TPM state with the Cr50. |
| 342 | */ |
| 343 | rc |= obuf_write_be16(ob, *sub_command); |
| 344 | break; |
dnojiri | 622c6b8 | 2020-04-03 10:51:50 -0700 | [diff] [blame] | 345 | case TPM2_CR50_SUB_CMD_GET_BOOT_MODE: |
| 346 | rc |= obuf_write_be16(ob, *sub_command); |
| 347 | break; |
Karthikeyan Ramasubramanian | ba7b90e | 2021-03-01 13:50:20 -0700 | [diff] [blame] | 348 | case TPM2_CR50_SUB_CMD_RESET_EC: |
| 349 | rc |= obuf_write_be16(ob, *sub_command); |
| 350 | break; |
Aaron Durbin | eeb7737 | 2017-03-08 11:23:11 -0600 | [diff] [blame] | 351 | default: |
| 352 | /* Unsupported subcommand. */ |
| 353 | printk(BIOS_WARNING, "Unsupported cr50 subcommand: 0x%04x\n", |
| 354 | *sub_command); |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 355 | rc = -1; |
Aaron Durbin | eeb7737 | 2017-03-08 11:23:11 -0600 | [diff] [blame] | 356 | break; |
| 357 | } |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 358 | return rc; |
Aaron Durbin | eeb7737 | 2017-03-08 11:23:11 -0600 | [diff] [blame] | 359 | } |
| 360 | |
Caveh Jalali | c07fb75 | 2020-09-11 22:10:55 -0700 | [diff] [blame] | 361 | int tpm_marshal_command(TPM_CC command, const void *tpm_command_body, struct obuf *ob) |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 362 | { |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 363 | struct obuf ob_hdr; |
| 364 | const size_t hdr_sz = sizeof(uint16_t) + 2 * sizeof(uint32_t); |
| 365 | int rc = 0; |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 366 | |
Arthur Heymans | 0ca944b | 2019-11-20 19:51:06 +0100 | [diff] [blame] | 367 | tpm_tag = TPM_ST_NO_SESSIONS; |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 368 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 369 | if (obuf_splice_current(ob, &ob_hdr, hdr_sz) < 0) |
| 370 | return -1; |
| 371 | |
| 372 | /* Write TPM command header with placeholder field values. */ |
| 373 | rc |= obuf_write_be16(ob, 0); |
| 374 | rc |= obuf_write_be32(ob, 0); |
| 375 | rc |= obuf_write_be32(ob, command); |
| 376 | |
| 377 | if (rc != 0) |
| 378 | return rc; |
| 379 | |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 380 | switch (command) { |
| 381 | case TPM2_Startup: |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 382 | rc |= marshal_startup(ob, tpm_command_body); |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 383 | break; |
| 384 | |
Joel Kitching | 2e690ee | 2018-11-15 16:48:53 +0800 | [diff] [blame] | 385 | case TPM2_Shutdown: |
| 386 | rc |= marshal_shutdown(ob, tpm_command_body); |
| 387 | break; |
| 388 | |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 389 | case TPM2_GetCapability: |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 390 | rc |= marshal_get_capability(ob, tpm_command_body); |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 391 | break; |
| 392 | |
| 393 | case TPM2_NV_Read: |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 394 | rc |= marshal_nv_read(ob, tpm_command_body); |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 395 | break; |
| 396 | |
| 397 | case TPM2_NV_DefineSpace: |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 398 | rc |= marshal_nv_define_space(ob, tpm_command_body); |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 399 | break; |
| 400 | |
Aseda Aboagye | 4ad0420 | 2021-05-24 16:47:09 -0700 | [diff] [blame] | 401 | case TPM2_NV_SetBits: |
| 402 | rc |= marshal_nv_setbits(ob, tpm_command_body); |
| 403 | break; |
| 404 | |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 405 | case TPM2_NV_Write: |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 406 | rc |= marshal_nv_write(ob, tpm_command_body); |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 407 | break; |
| 408 | |
Vadim Bendebury | 4c0851c | 2016-07-03 17:08:10 -0700 | [diff] [blame] | 409 | case TPM2_NV_WriteLock: |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 410 | rc |= marshal_nv_write_lock(ob, tpm_command_body); |
Vadim Bendebury | 4c0851c | 2016-07-03 17:08:10 -0700 | [diff] [blame] | 411 | break; |
| 412 | |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 413 | case TPM2_SelfTest: |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 414 | rc |= marshal_selftest(ob, tpm_command_body); |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 415 | break; |
| 416 | |
Aaron Durbin | f56c778 | 2017-01-10 17:44:42 -0600 | [diff] [blame] | 417 | case TPM2_Hierarchy_Control: |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 418 | rc |= marshal_hierarchy_control(ob, tpm_command_body); |
Aaron Durbin | f56c778 | 2017-01-10 17:44:42 -0600 | [diff] [blame] | 419 | break; |
| 420 | |
Christian Walter | c9ac0bc | 2020-01-28 19:54:33 +0100 | [diff] [blame] | 421 | case TPM2_ClearControl: |
| 422 | rc |= marshal_clear_control(ob, tpm_command_body); |
| 423 | break; |
| 424 | |
Vadim Bendebury | 6acb9a6 | 2016-06-30 20:50:49 -0700 | [diff] [blame] | 425 | case TPM2_Clear: |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 426 | rc |= marshal_clear(ob); |
Vadim Bendebury | 6acb9a6 | 2016-06-30 20:50:49 -0700 | [diff] [blame] | 427 | break; |
| 428 | |
Vadim Bendebury | f5ef699 | 2016-07-03 22:20:17 -0700 | [diff] [blame] | 429 | case TPM2_PCR_Extend: |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 430 | rc |= marshal_pcr_extend(ob, tpm_command_body); |
Vadim Bendebury | f5ef699 | 2016-07-03 22:20:17 -0700 | [diff] [blame] | 431 | break; |
| 432 | |
Aaron Durbin | eeb7737 | 2017-03-08 11:23:11 -0600 | [diff] [blame] | 433 | case TPM2_CR50_VENDOR_COMMAND: |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 434 | rc |= marshal_cr50_vendor_command(ob, tpm_command_body); |
Aaron Durbin | eeb7737 | 2017-03-08 11:23:11 -0600 | [diff] [blame] | 435 | break; |
| 436 | |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 437 | default: |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 438 | printk(BIOS_INFO, "%s:%d:Request to marshal unsupported command %#x\n", |
| 439 | __FILE__, __LINE__, command); |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 440 | rc = -1; |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 441 | } |
| 442 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 443 | if (rc != 0) |
| 444 | return rc; |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 445 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 446 | /* Fix up the command header with known values. */ |
Arthur Heymans | 0ca944b | 2019-11-20 19:51:06 +0100 | [diff] [blame] | 447 | rc |= obuf_write_be16(&ob_hdr, tpm_tag); |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 448 | rc |= obuf_write_be32(&ob_hdr, obuf_nr_written(ob)); |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 449 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 450 | return rc; |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 451 | } |
| 452 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 453 | static int unmarshal_get_capability(struct ibuf *ib, |
Caveh Jalali | c07fb75 | 2020-09-11 22:10:55 -0700 | [diff] [blame] | 454 | struct get_cap_response *gcr) |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 455 | { |
| 456 | int i; |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 457 | int rc = 0; |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 458 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 459 | rc |= ibuf_read_be8(ib, &gcr->more_data); |
| 460 | rc |= unmarshal_TPM_CAP(ib, &gcr->cd.capability); |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 461 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 462 | if (rc != 0) |
| 463 | return rc; |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 464 | |
| 465 | switch (gcr->cd.capability) { |
| 466 | case TPM_CAP_TPM_PROPERTIES: |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 467 | if (ibuf_read_be32(ib, &gcr->cd.data.tpmProperties.count)) |
| 468 | return -1; |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 469 | if (gcr->cd.data.tpmProperties.count > ARRAY_SIZE |
| 470 | (gcr->cd.data.tpmProperties.tpmProperty)) { |
| 471 | printk(BIOS_INFO, "%s:%s:%d - %d - too many properties\n", |
| 472 | __FILE__, __func__, __LINE__, |
| 473 | gcr->cd.data.tpmProperties.count); |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 474 | return -1; |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 475 | } |
| 476 | for (i = 0; i < gcr->cd.data.tpmProperties.count; i++) { |
| 477 | TPMS_TAGGED_PROPERTY *pp; |
| 478 | |
| 479 | pp = gcr->cd.data.tpmProperties.tpmProperty + i; |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 480 | rc |= unmarshal_TPM_PT(ib, &pp->property); |
| 481 | rc |= ibuf_read_be32(ib, &pp->value); |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 482 | } |
| 483 | break; |
Frans Hendriks | 589eff7 | 2019-06-26 10:43:40 +0200 | [diff] [blame] | 484 | case TPM_CAP_PCRS: |
| 485 | if (ibuf_read_be32(ib, &gcr->cd.data.assignedPCR.count)) |
| 486 | return -1; |
| 487 | if (gcr->cd.data.assignedPCR.count > |
| 488 | ARRAY_SIZE(gcr->cd.data.assignedPCR.pcrSelections)) { |
| 489 | printk(BIOS_INFO, "%s:%s:%d - %d - too many properties\n", |
| 490 | __FILE__, __func__, __LINE__, |
| 491 | gcr->cd.data.assignedPCR.count); |
| 492 | return -1; |
| 493 | } |
| 494 | for (i = 0; i < gcr->cd.data.assignedPCR.count; i++) { |
| 495 | TPMS_PCR_SELECTION *pp = |
| 496 | &gcr->cd.data.assignedPCR.pcrSelections[i]; |
| 497 | rc |= ibuf_read(ib, pp, sizeof(TPMS_PCR_SELECTION)); |
| 498 | } |
| 499 | break; |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 500 | default: |
| 501 | printk(BIOS_ERR, |
| 502 | "%s:%d - unable to unmarshal capability response", |
| 503 | __func__, __LINE__); |
| 504 | printk(BIOS_ERR, " for %d\n", gcr->cd.capability); |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 505 | rc = -1; |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 506 | break; |
| 507 | } |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 508 | |
| 509 | return rc; |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 510 | } |
| 511 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 512 | static int unmarshal_TPM2B_MAX_NV_BUFFER(struct ibuf *ib, |
Caveh Jalali | c07fb75 | 2020-09-11 22:10:55 -0700 | [diff] [blame] | 513 | TPM2B_MAX_NV_BUFFER *nv_buffer) |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 514 | { |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 515 | if (ibuf_read_be16(ib, &nv_buffer->t.size)) |
| 516 | return -1; |
| 517 | |
| 518 | nv_buffer->t.buffer = ibuf_oob_drain(ib, nv_buffer->t.size); |
| 519 | |
| 520 | if (nv_buffer->t.buffer == NULL) { |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 521 | printk(BIOS_ERR, "%s:%d - " |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 522 | "size mismatch: expected %d, remaining %zd\n", |
| 523 | __func__, __LINE__, nv_buffer->t.size, |
| 524 | ibuf_remaining(ib)); |
| 525 | return -1; |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 526 | } |
| 527 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 528 | return 0; |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 529 | } |
| 530 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 531 | static int unmarshal_nv_read(struct ibuf *ib, struct nv_read_response *nvr) |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 532 | { |
| 533 | /* Total size of the parameter field. */ |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 534 | if (ibuf_read_be32(ib, &nvr->params_size)) |
| 535 | return -1; |
| 536 | |
| 537 | if (unmarshal_TPM2B_MAX_NV_BUFFER(ib, &nvr->buffer)) |
| 538 | return -1; |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 539 | |
| 540 | if (nvr->params_size != |
| 541 | (nvr->buffer.t.size + sizeof(nvr->buffer.t.size))) { |
| 542 | printk(BIOS_ERR, |
| 543 | "%s:%d - parameter/buffer %d/%d size mismatch", |
| 544 | __func__, __LINE__, nvr->params_size, |
| 545 | nvr->buffer.t.size); |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 546 | return -1; |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 547 | } |
| 548 | |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 549 | /* |
Frans Hendriks | 8bd5c99 | 2018-10-29 10:47:52 +0100 | [diff] [blame] | 550 | * Let's ignore the authorization section. It should be 5 bytes total, |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 551 | * just confirm that this is the case and report any discrepancy. |
| 552 | */ |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 553 | if (ibuf_remaining(ib) != 5) |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 554 | printk(BIOS_ERR, |
Frans Hendriks | 8bd5c99 | 2018-10-29 10:47:52 +0100 | [diff] [blame] | 555 | "%s:%d - unexpected authorization section size %zd\n", |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 556 | __func__, __LINE__, ibuf_remaining(ib)); |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 557 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 558 | ibuf_oob_drain(ib, ibuf_remaining(ib)); |
| 559 | |
| 560 | return 0; |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 561 | } |
| 562 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 563 | static int unmarshal_vendor_command(struct ibuf *ib, |
Caveh Jalali | c07fb75 | 2020-09-11 22:10:55 -0700 | [diff] [blame] | 564 | struct vendor_command_response *vcr) |
Vadim Bendebury | 021ec28 | 2017-03-22 16:01:53 -0700 | [diff] [blame] | 565 | { |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 566 | if (ibuf_read_be16(ib, &vcr->vc_subcommand)) |
| 567 | return -1; |
Vadim Bendebury | 021ec28 | 2017-03-22 16:01:53 -0700 | [diff] [blame] | 568 | |
| 569 | switch (vcr->vc_subcommand) { |
Keith Short | e0f3400 | 2019-02-05 16:15:10 -0700 | [diff] [blame] | 570 | case TPM2_CR50_SUB_CMD_IMMEDIATE_RESET: |
| 571 | break; |
Vadim Bendebury | 021ec28 | 2017-03-22 16:01:53 -0700 | [diff] [blame] | 572 | case TPM2_CR50_SUB_CMD_NVMEM_ENABLE_COMMITS: |
| 573 | break; |
| 574 | case TPM2_CR50_SUB_CMD_TURN_UPDATE_ON: |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 575 | return ibuf_read_be8(ib, &vcr->num_restored_headers); |
Keith Short | e371d42 | 2019-01-11 07:52:32 -0700 | [diff] [blame] | 576 | case TPM2_CR50_SUB_CMD_GET_REC_BTN: |
| 577 | return ibuf_read_be8(ib, &vcr->recovery_button_state); |
Keith Short | e0f3400 | 2019-02-05 16:15:10 -0700 | [diff] [blame] | 578 | case TPM2_CR50_SUB_CMD_TPM_MODE: |
| 579 | return ibuf_read_be8(ib, &vcr->tpm_mode); |
dnojiri | 622c6b8 | 2020-04-03 10:51:50 -0700 | [diff] [blame] | 580 | case TPM2_CR50_SUB_CMD_GET_BOOT_MODE: |
| 581 | return ibuf_read_be8(ib, &vcr->boot_mode); |
Karthikeyan Ramasubramanian | ba7b90e | 2021-03-01 13:50:20 -0700 | [diff] [blame] | 582 | case TPM2_CR50_SUB_CMD_RESET_EC: |
| 583 | break; |
Vadim Bendebury | 021ec28 | 2017-03-22 16:01:53 -0700 | [diff] [blame] | 584 | default: |
| 585 | printk(BIOS_ERR, |
| 586 | "%s:%d - unsupported vendor command %#04x!\n", |
| 587 | __func__, __LINE__, vcr->vc_subcommand); |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 588 | return -1; |
Vadim Bendebury | 021ec28 | 2017-03-22 16:01:53 -0700 | [diff] [blame] | 589 | } |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 590 | |
| 591 | return 0; |
Vadim Bendebury | 021ec28 | 2017-03-22 16:01:53 -0700 | [diff] [blame] | 592 | } |
| 593 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 594 | struct tpm2_response *tpm_unmarshal_response(TPM_CC command, struct ibuf *ib) |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 595 | { |
Arthur Heymans | 0ca944b | 2019-11-20 19:51:06 +0100 | [diff] [blame] | 596 | static struct tpm2_response tpm2_static_resp; |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 597 | int rc = 0; |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 598 | |
Arthur Heymans | 0ca944b | 2019-11-20 19:51:06 +0100 | [diff] [blame] | 599 | rc |= ibuf_read_be16(ib, &tpm2_static_resp.hdr.tpm_tag); |
| 600 | rc |= ibuf_read_be32(ib, &tpm2_static_resp.hdr.tpm_size); |
| 601 | rc |= unmarshal_TPM_CC(ib, &tpm2_static_resp.hdr.tpm_code); |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 602 | |
| 603 | if (rc != 0) |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 604 | return NULL; |
| 605 | |
Julius Werner | 71a1314 | 2020-05-06 11:11:03 -0700 | [diff] [blame] | 606 | if (ibuf_capacity(ib) != tpm2_static_resp.hdr.tpm_size) { |
| 607 | printk(BIOS_ERR, |
| 608 | "%s: size mismatch in response to command %#x\n", |
| 609 | __func__, command); |
| 610 | return NULL; |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 611 | } |
| 612 | |
Julius Werner | 71a1314 | 2020-05-06 11:11:03 -0700 | [diff] [blame] | 613 | /* On errors, we're not sure what the TPM is returning. None of the |
| 614 | commands we use actually expect useful data payloads for errors, so |
| 615 | just ignore any data after the header. */ |
| 616 | if (tpm2_static_resp.hdr.tpm_code != TPM2_RC_SUCCESS) |
| 617 | return &tpm2_static_resp; |
| 618 | |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 619 | switch (command) { |
| 620 | case TPM2_Startup: |
Joel Kitching | 2e690ee | 2018-11-15 16:48:53 +0800 | [diff] [blame] | 621 | case TPM2_Shutdown: |
Julius Werner | 71a1314 | 2020-05-06 11:11:03 -0700 | [diff] [blame] | 622 | case TPM2_SelfTest: |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 623 | break; |
| 624 | |
| 625 | case TPM2_GetCapability: |
Arthur Heymans | 0ca944b | 2019-11-20 19:51:06 +0100 | [diff] [blame] | 626 | rc |= unmarshal_get_capability(ib, &tpm2_static_resp.gc); |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 627 | break; |
| 628 | |
| 629 | case TPM2_NV_Read: |
Arthur Heymans | 0ca944b | 2019-11-20 19:51:06 +0100 | [diff] [blame] | 630 | rc |= unmarshal_nv_read(ib, &tpm2_static_resp.nvr); |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 631 | break; |
| 632 | |
Aaron Durbin | f56c778 | 2017-01-10 17:44:42 -0600 | [diff] [blame] | 633 | case TPM2_Hierarchy_Control: |
Vadim Bendebury | 6acb9a6 | 2016-06-30 20:50:49 -0700 | [diff] [blame] | 634 | case TPM2_Clear: |
Christian Walter | c9ac0bc | 2020-01-28 19:54:33 +0100 | [diff] [blame] | 635 | case TPM2_ClearControl: |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 636 | case TPM2_NV_DefineSpace: |
Aseda Aboagye | 4ad0420 | 2021-05-24 16:47:09 -0700 | [diff] [blame] | 637 | case TPM2_NV_SetBits: |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 638 | case TPM2_NV_Write: |
Vadim Bendebury | 4c0851c | 2016-07-03 17:08:10 -0700 | [diff] [blame] | 639 | case TPM2_NV_WriteLock: |
Vadim Bendebury | f5ef699 | 2016-07-03 22:20:17 -0700 | [diff] [blame] | 640 | case TPM2_PCR_Extend: |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 641 | /* Session data included in response can be safely ignored. */ |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 642 | ibuf_oob_drain(ib, ibuf_remaining(ib)); |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 643 | break; |
| 644 | |
Aaron Durbin | eeb7737 | 2017-03-08 11:23:11 -0600 | [diff] [blame] | 645 | case TPM2_CR50_VENDOR_COMMAND: |
Arthur Heymans | 0ca944b | 2019-11-20 19:51:06 +0100 | [diff] [blame] | 646 | rc |= unmarshal_vendor_command(ib, &tpm2_static_resp.vcr); |
Aaron Durbin | eeb7737 | 2017-03-08 11:23:11 -0600 | [diff] [blame] | 647 | break; |
| 648 | |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 649 | default: |
| 650 | { |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 651 | size_t i; |
| 652 | size_t sz_left; |
| 653 | const uint8_t *data; |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 654 | |
| 655 | printk(BIOS_INFO, "%s:%d:" |
| 656 | "Request to unmarshal unexpected command %#x," |
| 657 | " code %#x", |
| 658 | __func__, __LINE__, command, |
Arthur Heymans | 0ca944b | 2019-11-20 19:51:06 +0100 | [diff] [blame] | 659 | tpm2_static_resp.hdr.tpm_code); |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 660 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 661 | sz_left = ibuf_remaining(ib); |
| 662 | data = ibuf_oob_drain(ib, sz_left); |
| 663 | |
| 664 | for (i = 0; i < sz_left; i++) { |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 665 | if (!(i % 16)) |
| 666 | printk(BIOS_INFO, "\n"); |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 667 | printk(BIOS_INFO, "%2.2x ", data[i]); |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 668 | } |
| 669 | } |
| 670 | printk(BIOS_INFO, "\n"); |
| 671 | return NULL; |
| 672 | } |
| 673 | |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 674 | if (ibuf_remaining(ib)) { |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 675 | printk(BIOS_INFO, |
| 676 | "%s:%d got %d bytes back in response to %#x," |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 677 | " failed to parse (%zd)\n", |
Arthur Heymans | 0ca944b | 2019-11-20 19:51:06 +0100 | [diff] [blame] | 678 | __func__, __LINE__, tpm2_static_resp.hdr.tpm_size, |
Aaron Durbin | ee049fa | 2017-03-25 00:38:45 -0500 | [diff] [blame] | 679 | command, ibuf_remaining(ib)); |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 680 | return NULL; |
| 681 | } |
Richard Spiegel | 248c60a | 2018-08-07 09:24:14 -0700 | [diff] [blame] | 682 | if (rc) |
Julius Werner | e966595 | 2022-01-21 17:06:20 -0800 | [diff] [blame^] | 683 | printk(BIOS_WARNING, "%s had one or more failures.\n", |
Richard Spiegel | 248c60a | 2018-08-07 09:24:14 -0700 | [diff] [blame] | 684 | __func__); |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 685 | |
| 686 | /* The entire message have been parsed. */ |
Arthur Heymans | 0ca944b | 2019-11-20 19:51:06 +0100 | [diff] [blame] | 687 | return &tpm2_static_resp; |
Vadim Bendebury | 627afc2 | 2016-06-19 12:13:18 -0700 | [diff] [blame] | 688 | } |