1 /*
2 * Copyright (c) 2018, ARM Limited and Contributors. All rights reserved.
3 *
4 * SPDX-License-Identifier: BSD-3-Clause
5 */
6
7 #include <assert.h>
8 #include <stdint.h>
9 #include <string.h>
10
11 #include <platform_def.h>
12
13 #include <common/debug.h>
14 #include <lib/utils_def.h>
15
16 #include "hikey_private.h"
17
18 #define PORTNUM_MAX 5
19
20 #define MDDRC_SECURITY_BASE 0xF7121000
21
22 struct int_en_reg {
23 unsigned in_en:1;
24 unsigned reserved:31;
25 };
26
27 struct rgn_map_reg {
28 unsigned rgn_base_addr:24;
29 unsigned rgn_size:6;
30 unsigned reserved:1;
31 unsigned rgn_en:1;
32 };
33
34 struct rgn_attr_reg {
35 unsigned sp:4;
36 unsigned security_inv:1;
37 unsigned reserved_0:3;
38 unsigned mid_en:1;
39 unsigned mid_inv:1;
40 unsigned reserved_1:6;
41 unsigned rgn_en:1;
42 unsigned subrgn_disable:16;
43 };
44
get_int_en_reg(uint32_t base)45 static volatile struct int_en_reg *get_int_en_reg(uint32_t base)
46 {
47 uint64_t addr = base + 0x20;
48 return (struct int_en_reg *)addr;
49 }
50
get_rgn_map_reg(uint32_t base,int region,int port)51 static volatile struct rgn_map_reg *get_rgn_map_reg(uint32_t base, int region, int port)
52 {
53 uint64_t addr = base + 0x100 + 0x10 * region + 0x400 * (uint64_t)port;
54 return (struct rgn_map_reg *)addr;
55 }
56
get_rgn_attr_reg(uint32_t base,int region,int port)57 static volatile struct rgn_attr_reg *get_rgn_attr_reg(uint32_t base, int region,
58 int port)
59 {
60 uint64_t addr = base + 0x104 + 0x10 * region + 0x400 * (uint64_t)port;
61 return (struct rgn_attr_reg *)addr;
62 }
63
64 /*
65 * Configure secure memory region
66 * region_size must be a power of 2 and at least 64KB
67 * region_base must be region_size aligned
68 */
sec_protect(uint32_t region_base,uint32_t region_size,int region)69 static void sec_protect(uint32_t region_base, uint32_t region_size,
70 int region)
71 {
72 volatile struct int_en_reg *int_en;
73 volatile struct rgn_map_reg *rgn_map;
74 volatile struct rgn_attr_reg *rgn_attr;
75 uint32_t i = 0;
76
77 /* ensure secure region number is between 1-15 */
78 assert(region > 0 && region < 16);
79 /* ensure secure region size is a power of 2 >= 64KB */
80 assert(IS_POWER_OF_TWO(region_size) && region_size >= 0x10000);
81 /* ensure secure region address is aligned to region size */
82 assert(!(region_base & (region_size - 1)));
83
84 INFO("BL2: TrustZone: protecting %u bytes of memory at 0x%x\n", region_size,
85 region_base);
86
87 int_en = get_int_en_reg(MDDRC_SECURITY_BASE);
88 int_en->in_en = 0x1;
89
90 for (i = 0; i < PORTNUM_MAX; i++) {
91 rgn_map = get_rgn_map_reg(MDDRC_SECURITY_BASE, region, i);
92 rgn_attr = get_rgn_attr_reg(MDDRC_SECURITY_BASE, region, i);
93 rgn_map->rgn_base_addr = region_base >> 16;
94 rgn_attr->subrgn_disable = 0x0;
95 rgn_attr->sp = (i == 3) ? 0xC : 0x0;
96 rgn_map->rgn_size = __builtin_ffs(region_size) - 2;
97 rgn_map->rgn_en = 0x1;
98 }
99 }
100
101 /*******************************************************************************
102 * Initialize the secure environment.
103 ******************************************************************************/
hikey_security_setup(void)104 void hikey_security_setup(void)
105 {
106 sec_protect(DDR_SEC_BASE, DDR_SEC_SIZE, 1);
107 sec_protect(DDR_SDP_BASE, DDR_SDP_SIZE, 2);
108 }
109