Angel Pons | 118a9c7 | 2020-04-02 23:48:34 +0200 | [diff] [blame] | 1 | /* SPDX-License-Identifier: GPL-2.0-only */ |
Peter Stuge | 483b7bb | 2009-04-14 07:40:01 +0000 | [diff] [blame] | 2 | |
Aaron Durbin | 899d13d | 2015-05-15 23:39:23 -0500 | [diff] [blame] | 3 | #include <assert.h> |
Aaron Durbin | 899d13d | 2015-05-15 23:39:23 -0500 | [diff] [blame] | 4 | #include <boot_device.h> |
| 5 | #include <cbfs.h> |
Julius Werner | 98eeb96 | 2019-12-11 15:47:42 -0800 | [diff] [blame] | 6 | #include <commonlib/bsd/compression.h> |
Bill XIE | c79e96b | 2019-08-22 20:28:36 +0800 | [diff] [blame] | 7 | #include <console/console.h> |
Aaron Durbin | 899d13d | 2015-05-15 23:39:23 -0500 | [diff] [blame] | 8 | #include <endian.h> |
Bill XIE | c79e96b | 2019-08-22 20:28:36 +0800 | [diff] [blame] | 9 | #include <fmap.h> |
Aaron Durbin | 899d13d | 2015-05-15 23:39:23 -0500 | [diff] [blame] | 10 | #include <lib.h> |
Bill XIE | c79e96b | 2019-08-22 20:28:36 +0800 | [diff] [blame] | 11 | #include <security/tpm/tspi/crtm.h> |
| 12 | #include <security/vboot/vboot_common.h> |
| 13 | #include <stdlib.h> |
| 14 | #include <string.h> |
Aaron Durbin | 899d13d | 2015-05-15 23:39:23 -0500 | [diff] [blame] | 15 | #include <symbols.h> |
Julius Werner | 09f2921 | 2015-09-29 13:51:35 -0700 | [diff] [blame] | 16 | #include <timestamp.h> |
Patrick Georgi | 58a150a | 2016-05-02 17:22:29 +0800 | [diff] [blame] | 17 | |
Aaron Durbin | 899d13d | 2015-05-15 23:39:23 -0500 | [diff] [blame] | 18 | #define ERROR(x...) printk(BIOS_ERR, "CBFS: " x) |
| 19 | #define LOG(x...) printk(BIOS_INFO, "CBFS: " x) |
Julius Werner | cd49cce | 2019-03-05 16:53:33 -0800 | [diff] [blame] | 20 | #if CONFIG(DEBUG_CBFS) |
Aaron Durbin | 899d13d | 2015-05-15 23:39:23 -0500 | [diff] [blame] | 21 | #define DEBUG(x...) printk(BIOS_SPEW, "CBFS: " x) |
| 22 | #else |
| 23 | #define DEBUG(x...) |
| 24 | #endif |
Peter Stuge | 483b7bb | 2009-04-14 07:40:01 +0000 | [diff] [blame] | 25 | |
Aaron Durbin | 37a5d15 | 2015-09-17 16:09:30 -0500 | [diff] [blame] | 26 | int cbfs_boot_locate(struct cbfsf *fh, const char *name, uint32_t *type) |
Aaron Durbin | 899d13d | 2015-05-15 23:39:23 -0500 | [diff] [blame] | 27 | { |
Aaron Durbin | 899d13d | 2015-05-15 23:39:23 -0500 | [diff] [blame] | 28 | struct region_device rdev; |
Aaron Durbin | 899d13d | 2015-05-15 23:39:23 -0500 | [diff] [blame] | 29 | |
Aaron Durbin | fe338e2 | 2019-11-18 12:35:21 -0700 | [diff] [blame] | 30 | if (cbfs_boot_region_device(&rdev)) |
Aaron Durbin | 899d13d | 2015-05-15 23:39:23 -0500 | [diff] [blame] | 31 | return -1; |
Aaron Durbin | 899d13d | 2015-05-15 23:39:23 -0500 | [diff] [blame] | 32 | |
Philipp Deppenwiese | 66f9a09 | 2018-11-08 10:59:40 +0100 | [diff] [blame] | 33 | int ret = cbfs_locate(fh, &rdev, name, type); |
Wim Vervoorn | 114e2e8 | 2019-11-05 14:09:16 +0100 | [diff] [blame] | 34 | |
| 35 | if (CONFIG(VBOOT_ENABLE_CBFS_FALLBACK) && ret) { |
| 36 | |
| 37 | /* |
| 38 | * When VBOOT_ENABLE_CBFS_FALLBACK is enabled and a file is not available in the |
| 39 | * active RW region, the RO (COREBOOT) region will be used to locate the file. |
| 40 | * |
| 41 | * This functionality makes it possible to avoid duplicate files in the RO |
| 42 | * and RW partitions while maintaining updateability. |
| 43 | * |
| 44 | * Files can be added to the RO_REGION_ONLY config option to use this feature. |
| 45 | */ |
| 46 | printk(BIOS_DEBUG, "Fall back to RO region for %s\n", name); |
Bill XIE | bad08c2 | 2020-02-13 11:11:35 +0800 | [diff] [blame] | 47 | if (fmap_locate_area_as_rdev("COREBOOT", &rdev)) |
| 48 | ERROR("RO region not found\n"); |
| 49 | else |
| 50 | ret = cbfs_locate(fh, &rdev, name, type); |
Wim Vervoorn | 114e2e8 | 2019-11-05 14:09:16 +0100 | [diff] [blame] | 51 | } |
| 52 | |
Philipp Deppenwiese | 66f9a09 | 2018-11-08 10:59:40 +0100 | [diff] [blame] | 53 | if (!ret) |
Bill XIE | c79e96b | 2019-08-22 20:28:36 +0800 | [diff] [blame] | 54 | if (tspi_measure_cbfs_hook(fh, name)) |
Philipp Deppenwiese | 66f9a09 | 2018-11-08 10:59:40 +0100 | [diff] [blame] | 55 | return -1; |
| 56 | |
| 57 | return ret; |
Aaron Durbin | 899d13d | 2015-05-15 23:39:23 -0500 | [diff] [blame] | 58 | } |
| 59 | |
| 60 | void *cbfs_boot_map_with_leak(const char *name, uint32_t type, size_t *size) |
| 61 | { |
Aaron Durbin | 37a5d15 | 2015-09-17 16:09:30 -0500 | [diff] [blame] | 62 | struct cbfsf fh; |
Aaron Durbin | 899d13d | 2015-05-15 23:39:23 -0500 | [diff] [blame] | 63 | size_t fsize; |
| 64 | |
| 65 | if (cbfs_boot_locate(&fh, name, &type)) |
| 66 | return NULL; |
| 67 | |
Aaron Durbin | 37a5d15 | 2015-09-17 16:09:30 -0500 | [diff] [blame] | 68 | fsize = region_device_sz(&fh.data); |
Aaron Durbin | 899d13d | 2015-05-15 23:39:23 -0500 | [diff] [blame] | 69 | |
| 70 | if (size != NULL) |
| 71 | *size = fsize; |
| 72 | |
Aaron Durbin | 37a5d15 | 2015-09-17 16:09:30 -0500 | [diff] [blame] | 73 | return rdev_mmap(&fh.data, 0, fsize); |
Aaron Durbin | 899d13d | 2015-05-15 23:39:23 -0500 | [diff] [blame] | 74 | } |
| 75 | |
Pratik Prajapati | 2a7708a | 2016-11-30 17:29:10 -0800 | [diff] [blame] | 76 | int cbfs_locate_file_in_region(struct cbfsf *fh, const char *region_name, |
Philipp Deppenwiese | 66f9a09 | 2018-11-08 10:59:40 +0100 | [diff] [blame] | 77 | const char *name, uint32_t *type) |
Pratik Prajapati | 2a7708a | 2016-11-30 17:29:10 -0800 | [diff] [blame] | 78 | { |
| 79 | struct region_device rdev; |
Bill XIE | bad08c2 | 2020-02-13 11:11:35 +0800 | [diff] [blame] | 80 | int ret = 0; |
Pratik Prajapati | 2a7708a | 2016-11-30 17:29:10 -0800 | [diff] [blame] | 81 | if (fmap_locate_area_as_rdev(region_name, &rdev)) { |
| 82 | LOG("%s region not found while looking for %s\n", |
Philipp Deppenwiese | 66f9a09 | 2018-11-08 10:59:40 +0100 | [diff] [blame] | 83 | region_name, name); |
Pratik Prajapati | 2a7708a | 2016-11-30 17:29:10 -0800 | [diff] [blame] | 84 | return -1; |
| 85 | } |
| 86 | |
Bill XIE | bad08c2 | 2020-02-13 11:11:35 +0800 | [diff] [blame] | 87 | ret = cbfs_locate(fh, &rdev, name, type); |
| 88 | if (!ret) |
| 89 | if (tspi_measure_cbfs_hook(fh, name)) |
| 90 | return -1; |
| 91 | return ret; |
Pratik Prajapati | 2a7708a | 2016-11-30 17:29:10 -0800 | [diff] [blame] | 92 | } |
| 93 | |
Julius Werner | 09f2921 | 2015-09-29 13:51:35 -0700 | [diff] [blame] | 94 | size_t cbfs_load_and_decompress(const struct region_device *rdev, size_t offset, |
| 95 | size_t in_size, void *buffer, size_t buffer_size, uint32_t compression) |
Aaron Durbin | 899d13d | 2015-05-15 23:39:23 -0500 | [diff] [blame] | 96 | { |
Julius Werner | 09f2921 | 2015-09-29 13:51:35 -0700 | [diff] [blame] | 97 | size_t out_size; |
| 98 | |
| 99 | switch (compression) { |
| 100 | case CBFS_COMPRESS_NONE: |
Julius Werner | f975e55 | 2016-08-19 15:43:06 -0700 | [diff] [blame] | 101 | if (buffer_size < in_size) |
| 102 | return 0; |
Julius Werner | 09f2921 | 2015-09-29 13:51:35 -0700 | [diff] [blame] | 103 | if (rdev_readat(rdev, buffer, offset, in_size) != in_size) |
| 104 | return 0; |
| 105 | return in_size; |
| 106 | |
| 107 | case CBFS_COMPRESS_LZ4: |
Julius Werner | 21a4053 | 2020-04-21 16:03:53 -0700 | [diff] [blame] | 108 | if ((ENV_BOOTBLOCK || ENV_SEPARATE_VERSTAGE) && |
Julius Werner | cd49cce | 2019-03-05 16:53:33 -0800 | [diff] [blame] | 109 | !CONFIG(COMPRESS_PRERAM_STAGES)) |
Julius Werner | 09f2921 | 2015-09-29 13:51:35 -0700 | [diff] [blame] | 110 | return 0; |
| 111 | |
| 112 | /* Load the compressed image to the end of the available memory |
| 113 | * area for in-place decompression. It is the responsibility of |
| 114 | * the caller to ensure that buffer_size is large enough |
| 115 | * (see compression.h, guaranteed by cbfstool for stages). */ |
| 116 | void *compr_start = buffer + buffer_size - in_size; |
| 117 | if (rdev_readat(rdev, compr_start, offset, in_size) != in_size) |
| 118 | return 0; |
| 119 | |
| 120 | timestamp_add_now(TS_START_ULZ4F); |
| 121 | out_size = ulz4fn(compr_start, in_size, buffer, buffer_size); |
| 122 | timestamp_add_now(TS_END_ULZ4F); |
| 123 | return out_size; |
| 124 | |
| 125 | case CBFS_COMPRESS_LZMA: |
Kyösti Mälkki | b5211ef | 2018-06-01 07:11:25 +0300 | [diff] [blame] | 126 | /* We assume here romstage and postcar are never compressed. */ |
Julius Werner | 21a4053 | 2020-04-21 16:03:53 -0700 | [diff] [blame] | 127 | if (ENV_BOOTBLOCK || ENV_SEPARATE_VERSTAGE) |
Julius Werner | 09f2921 | 2015-09-29 13:51:35 -0700 | [diff] [blame] | 128 | return 0; |
Julius Werner | cd49cce | 2019-03-05 16:53:33 -0800 | [diff] [blame] | 129 | if (ENV_ROMSTAGE && CONFIG(POSTCAR_STAGE)) |
Kyösti Mälkki | b5211ef | 2018-06-01 07:11:25 +0300 | [diff] [blame] | 130 | return 0; |
Lee Leahy | d950f51 | 2016-07-25 09:53:35 -0700 | [diff] [blame] | 131 | if ((ENV_ROMSTAGE || ENV_POSTCAR) |
Julius Werner | cd49cce | 2019-03-05 16:53:33 -0800 | [diff] [blame] | 132 | && !CONFIG(COMPRESS_RAMSTAGE)) |
Julius Werner | 09f2921 | 2015-09-29 13:51:35 -0700 | [diff] [blame] | 133 | return 0; |
Julius Werner | 09f2921 | 2015-09-29 13:51:35 -0700 | [diff] [blame] | 134 | void *map = rdev_mmap(rdev, offset, in_size); |
| 135 | if (map == NULL) |
| 136 | return 0; |
| 137 | |
| 138 | /* Note: timestamp not useful for memory-mapped media (x86) */ |
| 139 | timestamp_add_now(TS_START_ULZMA); |
| 140 | out_size = ulzman(map, in_size, buffer, buffer_size); |
| 141 | timestamp_add_now(TS_END_ULZMA); |
| 142 | |
| 143 | rdev_munmap(rdev, map); |
| 144 | |
| 145 | return out_size; |
| 146 | |
| 147 | default: |
Aaron Durbin | 899d13d | 2015-05-15 23:39:23 -0500 | [diff] [blame] | 148 | return 0; |
Julius Werner | 09f2921 | 2015-09-29 13:51:35 -0700 | [diff] [blame] | 149 | } |
Aaron Durbin | 899d13d | 2015-05-15 23:39:23 -0500 | [diff] [blame] | 150 | } |
| 151 | |
Stefan Reinauer | 800379f | 2010-03-01 08:34:19 +0000 | [diff] [blame] | 152 | static inline int tohex4(unsigned int c) |
Patrick Georgi | b203c2f | 2009-08-20 14:48:03 +0000 | [diff] [blame] | 153 | { |
Hung-Te Lin | 6fe0cab | 2013-01-22 18:57:56 +0800 | [diff] [blame] | 154 | return (c <= 9) ? (c + '0') : (c - 10 + 'a'); |
Patrick Georgi | b203c2f | 2009-08-20 14:48:03 +0000 | [diff] [blame] | 155 | } |
| 156 | |
Martin Roth | a616a4b | 2020-01-21 09:28:40 -0700 | [diff] [blame] | 157 | static void tohex8(unsigned int val, char *dest) |
| 158 | { |
| 159 | dest[0] = tohex4((val >> 4) & 0xf); |
| 160 | dest[1] = tohex4(val & 0xf); |
| 161 | } |
| 162 | |
Lee Leahy | b2d834a | 2017-03-08 16:52:22 -0800 | [diff] [blame] | 163 | static void tohex16(unsigned int val, char *dest) |
Patrick Georgi | b203c2f | 2009-08-20 14:48:03 +0000 | [diff] [blame] | 164 | { |
Philipp Deppenwiese | 66f9a09 | 2018-11-08 10:59:40 +0100 | [diff] [blame] | 165 | dest[0] = tohex4(val >> 12); |
| 166 | dest[1] = tohex4((val >> 8) & 0xf); |
| 167 | dest[2] = tohex4((val >> 4) & 0xf); |
Hung-Te Lin | 6fe0cab | 2013-01-22 18:57:56 +0800 | [diff] [blame] | 168 | dest[3] = tohex4(val & 0xf); |
Patrick Georgi | b203c2f | 2009-08-20 14:48:03 +0000 | [diff] [blame] | 169 | } |
| 170 | |
Aaron Durbin | 899d13d | 2015-05-15 23:39:23 -0500 | [diff] [blame] | 171 | void *cbfs_boot_map_optionrom(uint16_t vendor, uint16_t device) |
Peter Stuge | 483b7bb | 2009-04-14 07:40:01 +0000 | [diff] [blame] | 172 | { |
Hung-Te Lin | 6fe0cab | 2013-01-22 18:57:56 +0800 | [diff] [blame] | 173 | char name[17] = "pciXXXX,XXXX.rom"; |
Peter Stuge | 483b7bb | 2009-04-14 07:40:01 +0000 | [diff] [blame] | 174 | |
Philipp Deppenwiese | 66f9a09 | 2018-11-08 10:59:40 +0100 | [diff] [blame] | 175 | tohex16(vendor, name + 3); |
| 176 | tohex16(device, name + 8); |
Peter Stuge | 483b7bb | 2009-04-14 07:40:01 +0000 | [diff] [blame] | 177 | |
Aaron Durbin | 899d13d | 2015-05-15 23:39:23 -0500 | [diff] [blame] | 178 | return cbfs_boot_map_with_leak(name, CBFS_TYPE_OPTIONROM, NULL); |
Peter Stuge | 483b7bb | 2009-04-14 07:40:01 +0000 | [diff] [blame] | 179 | } |
| 180 | |
Martin Roth | a616a4b | 2020-01-21 09:28:40 -0700 | [diff] [blame] | 181 | void *cbfs_boot_map_optionrom_revision(uint16_t vendor, uint16_t device, uint8_t rev) |
| 182 | { |
| 183 | char name[20] = "pciXXXX,XXXX,XX.rom"; |
| 184 | |
| 185 | tohex16(vendor, name + 3); |
| 186 | tohex16(device, name + 8); |
| 187 | tohex8(rev, name + 13); |
| 188 | |
| 189 | return cbfs_boot_map_with_leak(name, CBFS_TYPE_OPTIONROM, NULL); |
| 190 | } |
| 191 | |
T Michael Turney | 809fa7b | 2018-04-12 13:36:40 -0700 | [diff] [blame] | 192 | size_t cbfs_boot_load_file(const char *name, void *buf, size_t buf_size, |
| 193 | uint32_t type) |
Julius Werner | f975e55 | 2016-08-19 15:43:06 -0700 | [diff] [blame] | 194 | { |
| 195 | struct cbfsf fh; |
| 196 | uint32_t compression_algo; |
| 197 | size_t decompressed_size; |
Julius Werner | f975e55 | 2016-08-19 15:43:06 -0700 | [diff] [blame] | 198 | |
| 199 | if (cbfs_boot_locate(&fh, name, &type) < 0) |
| 200 | return 0; |
| 201 | |
| 202 | if (cbfsf_decompression_info(&fh, &compression_algo, |
Philipp Deppenwiese | 66f9a09 | 2018-11-08 10:59:40 +0100 | [diff] [blame] | 203 | &decompressed_size) |
| 204 | < 0 |
| 205 | || decompressed_size > buf_size) |
Julius Werner | f975e55 | 2016-08-19 15:43:06 -0700 | [diff] [blame] | 206 | return 0; |
| 207 | |
| 208 | return cbfs_load_and_decompress(&fh.data, 0, region_device_sz(&fh.data), |
| 209 | buf, buf_size, compression_algo); |
| 210 | } |
| 211 | |
Aaron Durbin | 899d13d | 2015-05-15 23:39:23 -0500 | [diff] [blame] | 212 | int cbfs_prog_stage_load(struct prog *pstage) |
| 213 | { |
| 214 | struct cbfs_stage stage; |
| 215 | uint8_t *load; |
| 216 | void *entry; |
| 217 | size_t fsize; |
| 218 | size_t foffset; |
Aaron Durbin | 37a5d15 | 2015-09-17 16:09:30 -0500 | [diff] [blame] | 219 | const struct region_device *fh = prog_rdev(pstage); |
Hung-Te Lin | 6fe0cab | 2013-01-22 18:57:56 +0800 | [diff] [blame] | 220 | |
Aaron Durbin | 899d13d | 2015-05-15 23:39:23 -0500 | [diff] [blame] | 221 | if (rdev_readat(fh, &stage, 0, sizeof(stage)) != sizeof(stage)) |
Julius Werner | b29bd27b | 2015-12-03 11:29:12 -0800 | [diff] [blame] | 222 | return -1; |
Aaron Durbin | 899d13d | 2015-05-15 23:39:23 -0500 | [diff] [blame] | 223 | |
| 224 | fsize = region_device_sz(fh); |
| 225 | fsize -= sizeof(stage); |
| 226 | foffset = 0; |
| 227 | foffset += sizeof(stage); |
| 228 | |
| 229 | assert(fsize == stage.len); |
| 230 | |
| 231 | /* Note: cbfs_stage fields are currently in the endianness of the |
| 232 | * running processor. */ |
| 233 | load = (void *)(uintptr_t)stage.load; |
| 234 | entry = (void *)(uintptr_t)stage.entry; |
| 235 | |
Aaron Durbin | ed253c8 | 2015-10-07 17:22:42 -0500 | [diff] [blame] | 236 | /* Hacky way to not load programs over read only media. The stages |
| 237 | * that would hit this path initialize themselves. */ |
Julius Werner | 21a4053 | 2020-04-21 16:03:53 -0700 | [diff] [blame] | 238 | if ((ENV_BOOTBLOCK || ENV_SEPARATE_VERSTAGE) && |
| 239 | !CONFIG(NO_XIP_EARLY_STAGES) && CONFIG(BOOT_DEVICE_MEMORY_MAPPED)) { |
Aaron Durbin | ed253c8 | 2015-10-07 17:22:42 -0500 | [diff] [blame] | 240 | void *mapping = rdev_mmap(fh, foffset, fsize); |
| 241 | rdev_munmap(fh, mapping); |
| 242 | if (mapping == load) |
| 243 | goto out; |
| 244 | } |
| 245 | |
Julius Werner | 09f2921 | 2015-09-29 13:51:35 -0700 | [diff] [blame] | 246 | fsize = cbfs_load_and_decompress(fh, foffset, fsize, load, |
| 247 | stage.memlen, stage.compression); |
| 248 | if (!fsize) |
Aaron Durbin | 899d13d | 2015-05-15 23:39:23 -0500 | [diff] [blame] | 249 | return -1; |
| 250 | |
| 251 | /* Clear area not covered by file. */ |
| 252 | memset(&load[fsize], 0, stage.memlen - fsize); |
| 253 | |
Aaron Durbin | 096f457 | 2016-03-31 13:49:00 -0500 | [diff] [blame] | 254 | prog_segment_loaded((uintptr_t)load, stage.memlen, SEG_FINAL); |
Aaron Durbin | ed253c8 | 2015-10-07 17:22:42 -0500 | [diff] [blame] | 255 | |
| 256 | out: |
Aaron Durbin | 899d13d | 2015-05-15 23:39:23 -0500 | [diff] [blame] | 257 | prog_set_area(pstage, load, stage.memlen); |
| 258 | prog_set_entry(pstage, entry, NULL); |
| 259 | |
| 260 | return 0; |
Hung-Te Lin | 6fe0cab | 2013-01-22 18:57:56 +0800 | [diff] [blame] | 261 | } |
Aaron Durbin | 6d720f3 | 2015-12-08 17:00:23 -0600 | [diff] [blame] | 262 | |
Aaron Durbin | fe338e2 | 2019-11-18 12:35:21 -0700 | [diff] [blame] | 263 | int cbfs_boot_region_device(struct region_device *rdev) |
Aaron Durbin | 6d720f3 | 2015-12-08 17:00:23 -0600 | [diff] [blame] | 264 | { |
Aaron Durbin | 6d720f3 | 2015-12-08 17:00:23 -0600 | [diff] [blame] | 265 | boot_device_init(); |
Julius Werner | 815611e | 2019-12-05 22:29:07 -0800 | [diff] [blame] | 266 | return vboot_locate_cbfs(rdev) && |
| 267 | fmap_locate_area_as_rdev("COREBOOT", rdev); |
Aaron Durbin | 6d720f3 | 2015-12-08 17:00:23 -0600 | [diff] [blame] | 268 | } |