random-mirrors/smaeul-u-boot
1
0
Fork 0
mirror of https://github.com/smaeul/u-boot.git synced 2025-11-01 20:48:16 +00:00
Code Issues Packages Projects Releases Wiki Activity

net: fm: Add support for FIT firmware

Browse Source 
Fman microcode is executable code (AFAICT) loaded into a
coprocessor. As such, if verified boot is enabled, it must be verified
like other executable code. However, this is not currently done.

This commit adds verified boot functionality by encapsulating the
microcode in a FIT, which can then be signed/verified as normal. By
default we allow fallback to unencapsulated firmware, but if
CONFIG_FIT_SIGNATURE is enabled, then we make it mandatory. Because
existing Layerscape do not use this config (instead enabling
CONFIG_CHAIN_OF_TRUST), this should not break any existing boards.

An example (mildly-abbreviated) its is provided below:

/ {
    #address-cells = <1>;

    images {
        firmware {
            data = /incbin/(/path/to/firmware);
            type = "firmware";
            arch = "arm64";
            compression = "none";
	    signature {
                algo = "sha256,rsa2048";
                key-name-hint = "your key name";
            };
        };
    };

    configurations {
        default = "conf";
        conf {
            description = "Load FMAN microcode";
            fman = "firmware";
        };
    };
};

Reviewed-by: Simon Glass <sjg@chromium.org>
Signed-off-by: Sean Anderson <sean.anderson@seco.com>
Signed-off-by: Peng Fan <peng.fan@nxp.com>
This commit is contained in:
Sean Anderson 2022-09-07 13:44:55 +08:00 committed by Peng Fan
parent f1061c5701
commit 857e313a3d
1 changed files with 18 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
drivers/net/fm/fm.c
View File

@ -5,6 +5,7 @@
*/ */
#include <common.h> #include <common.h>
#include <env.h> #include <env.h>
#include <image.h>
#include <malloc.h> #include <malloc.h>
#include <asm/io.h> #include <asm/io.h>
#include <linux/errno.h> #include <linux/errno.h>
@ -513,6 +514,23 @@ int fm_init_common(int index, struct ccsr_fman *reg)
void *addr = NULL; void *addr = NULL;
#endif #endif
rc = fit_check_format(addr, CONFIG_SYS_QE_FMAN_FW_LENGTH);
if (!rc) {
size_t unused;
const void *new_addr;
rc = fit_get_data_conf_prop(addr, "fman", &new_addr, &unused);
if (rc)
return rc;
addr = (void *)new_addr;
} else if (CONFIG_IS_ENABLED(FIT_SIGNATURE)) {
/*
* Using a (signed) FIT wrapper is mandatory if we are
* doing verified boot.
*/
return rc;
}
/* Upload the Fman microcode if it's present */ /* Upload the Fman microcode if it's present */
rc = fman_upload_firmware(index, &reg->fm_imem, addr); rc = fman_upload_firmware(index, &reg->fm_imem, addr);
if (rc) if (rc)