mirror of
https://github.com/torvalds/linux.git
synced 2026-04-29 12:02:35 -04:00
72e0642fb4
Split the act of building the ACR blob from firmware files from the rest of the (chip-dependent) secure boot logic. ACR logic is moved into acr_rxxx.c files, where rxxx corresponds to the compatible release of the NVIDIA driver. At the moment r352 and r361 are supported since firmwares have been released for these versions. Some abstractions are added on top of r352 so r361 can easily be implemented on top of it by just overriding a few hooks. This split makes it possible and easy to reuse the same ACR version on different chips. It also hopefully makes the code much more readable as the different secure boot logics are separated. As more chips and firmware versions will be supported, this is a necessity to not get lost in code that is already quite complex. This is a big commit, but it essentially moves things around (and split the nvkm_secboot structure into two, nvkm_secboot and nvkm_acr). Code semantics should not be affected. Signed-off-by: Alexandre Courbot <acourbot@nvidia.com> Signed-off-by: Ben Skeggs <bskeggs@redhat.com>
70 lines
2.5 KiB
C
70 lines
2.5 KiB
C
/*
|
|
* Copyright (c) 2016, NVIDIA CORPORATION. All rights reserved.
|
|
*
|
|
* Permission is hereby granted, free of charge, to any person obtaining a
|
|
* copy of this software and associated documentation files (the "Software"),
|
|
* to deal in the Software without restriction, including without limitation
|
|
* the rights to use, copy, modify, merge, publish, distribute, sublicense,
|
|
* and/or sell copies of the Software, and to permit persons to whom the
|
|
* Software is furnished to do so, subject to the following conditions:
|
|
*
|
|
* The above copyright notice and this permission notice shall be included in
|
|
* all copies or substantial portions of the Software.
|
|
*
|
|
* THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
|
|
* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
|
|
* FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
|
|
* THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
|
|
* LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
|
|
* FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
|
|
* DEALINGS IN THE SOFTWARE.
|
|
*/
|
|
#ifndef __NVKM_SECBOOT_ACR_H__
|
|
#define __NVKM_SECBOOT_ACR_H__
|
|
|
|
#include "priv.h"
|
|
|
|
struct nvkm_acr;
|
|
|
|
/**
|
|
* struct nvkm_acr_func - properties and functions specific to an ACR
|
|
*
|
|
* @load: make the ACR ready to run on the given secboot device
|
|
* @reset: reset the specified falcon
|
|
* @start: start the specified falcon (assumed to have been reset)
|
|
*/
|
|
struct nvkm_acr_func {
|
|
void (*dtor)(struct nvkm_acr *);
|
|
int (*oneinit)(struct nvkm_acr *, struct nvkm_secboot *);
|
|
int (*fini)(struct nvkm_acr *, struct nvkm_secboot *, bool);
|
|
int (*load)(struct nvkm_acr *, struct nvkm_secboot *,
|
|
struct nvkm_gpuobj *, u64);
|
|
int (*reset)(struct nvkm_acr *, struct nvkm_secboot *,
|
|
enum nvkm_secboot_falcon);
|
|
int (*start)(struct nvkm_acr *, struct nvkm_secboot *,
|
|
enum nvkm_secboot_falcon);
|
|
};
|
|
|
|
/**
|
|
* struct nvkm_acr - instance of an ACR
|
|
*
|
|
* @boot_falcon: ID of the falcon that will perform secure boot
|
|
* @managed_falcons: bitfield of falcons managed by this ACR
|
|
* @start_address: virtual start address of the HS bootloader
|
|
*/
|
|
struct nvkm_acr {
|
|
const struct nvkm_acr_func *func;
|
|
const struct nvkm_subdev *subdev;
|
|
|
|
enum nvkm_secboot_falcon boot_falcon;
|
|
unsigned long managed_falcons;
|
|
u32 start_address;
|
|
};
|
|
|
|
void *nvkm_acr_load_firmware(const struct nvkm_subdev *, const char *, size_t);
|
|
|
|
struct nvkm_acr *acr_r352_new(unsigned long);
|
|
struct nvkm_acr *acr_r361_new(unsigned long);
|
|
|
|
#endif
|