diff --git a/include/drivers/arm/nic_400.h b/include/drivers/arm/nic_400.h new file mode 100644 index 0000000000000000000000000000000000000000..1031662b9347c8725953e49e64831ccfb1d25353 --- /dev/null +++ b/include/drivers/arm/nic_400.h @@ -0,0 +1,40 @@ +/* + * Copyright (c) 2015, ARM Limited and Contributors. All rights reserved. + * + * Redistribution and use in source and binary forms, with or without + * modification, are permitted provided that the following conditions are met: + * + * Redistributions of source code must retain the above copyright notice, this + * list of conditions and the following disclaimer. + * + * Redistributions in binary form must reproduce the above copyright notice, + * this list of conditions and the following disclaimer in the documentation + * and/or other materials provided with the distribution. + * + * Neither the name of ARM nor the names of its contributors may be used + * to endorse or promote products derived from this software without specific + * prior written permission. + * + * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" + * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE + * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE + * ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE + * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR + * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF + * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS + * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN + * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) + * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE + * POSSIBILITY OF SUCH DAMAGE. + */ + +#ifndef __NIC_400_H__ +#define __NIC_400_H__ + +/* + * Address of slave 'n' security setting in the NIC-400 address region + * control + */ +#define NIC400_ADDR_CTRL_SECURITY_REG(n) (0x8 + (n) * 4) + +#endif /* __NIC_400_H__ */ diff --git a/include/plat/arm/common/arm_def.h b/include/plat/arm/common/arm_def.h index 377bfaa222700f781de349881375f0ec04937339..a22e64ab344f589a92e685d98edd8384f5c89c17 100644 --- a/include/plat/arm/common/arm_def.h +++ b/include/plat/arm/common/arm_def.h @@ -173,10 +173,6 @@ #define ARM_CONSOLE_BAUDRATE 115200 -/* TZC related constants */ -#define ARM_TZC_BASE 0x2a4a0000 - - /****************************************************************************** * Required platform porting definitions common to all ARM standard platforms *****************************************************************************/ diff --git a/include/plat/arm/css/common/css_def.h b/include/plat/arm/css/common/css_def.h index 157a22f4c926720918e5361c2b63d081514db090..38ff9ddd7df81bf3b7a44ce35fd48655e0b2f453 100644 --- a/include/plat/arm/css/common/css_def.h +++ b/include/plat/arm/css/common/css_def.h @@ -111,6 +111,9 @@ /* TZC related constants */ #define PLAT_ARM_TZC_FILTERS REG_ATTR_FILTER_BIT_ALL +#define PLAT_ARM_TZC_BASE 0x2a4a0000 +/* System timer related constants */ +#define PLAT_ARM_NSTIMER_FRAME_ID 1 #endif /* __CSS_DEF_H__ */ diff --git a/plat/arm/board/fvp/include/platform_def.h b/plat/arm/board/fvp/include/platform_def.h index c2a7d6a567073ec66799a58fa9f4e6ed1d6afa2a..155216a8a412a3360afe1e2768d3a2e938789189 100644 --- a/plat/arm/board/fvp/include/platform_def.h +++ b/plat/arm/board/fvp/include/platform_def.h @@ -85,6 +85,9 @@ #define PLAT_ARM_CCI_CLUSTER0_SL_IFACE_IX 3 #define PLAT_ARM_CCI_CLUSTER1_SL_IFACE_IX 4 +/* System timer related constants */ +#define PLAT_ARM_NSTIMER_FRAME_ID 1 + /* TrustZone controller related constants * * Currently only filters 0 and 2 are connected on Base FVP. @@ -100,6 +103,7 @@ * Give access to the CPUs and Virtio. Some devices * would normally use the default ID so allow that too. */ +#define PLAT_ARM_TZC_BASE 0x2a4a0000 #define PLAT_ARM_TZC_FILTERS REG_ATTR_FILTER_BIT(0) #define PLAT_ARM_TZC_NS_DEV_ACCESS ( \ diff --git a/plat/arm/board/juno/juno_security.c b/plat/arm/board/juno/juno_security.c index 1de38c35da2f42c8f8cfb766c03f2707c29f7310..f9386cadedce77c772ec11d5db57129dd1097883 100644 --- a/plat/arm/board/juno/juno_security.c +++ b/plat/arm/board/juno/juno_security.c @@ -29,6 +29,7 @@ */ #include <mmio.h> +#include <nic_400.h> #include <plat_arm.h> #include <soc_css.h> #include "juno_def.h" @@ -47,6 +48,17 @@ static void init_mmu401(void) mmio_write_32(MMU401_DMA330_BASE + MMU401_SSD_OFFSET, reg); } +/******************************************************************************* + * Program CSS-NIC400 to allow non-secure access to some CSS regions. + ******************************************************************************/ +static void css_init_nic400(void) +{ + /* Note: This is the NIC-400 device on the CSS */ + mmio_write_32(PLAT_SOC_CSS_NIC400_BASE + + NIC400_ADDR_CTRL_SECURITY_REG(CSS_NIC400_SLAVE_BOOTSECURE), + ~0); +} + /******************************************************************************* * Initialize the secure environment. ******************************************************************************/ @@ -54,6 +66,8 @@ void plat_arm_security_setup(void) { /* Initialize the TrustZone Controller */ arm_tzc_setup(); + /* Do ARM CSS internal NIC setup */ + css_init_nic400(); /* Do ARM CSS SoC security setup */ soc_css_security_setup(); /* Initialize the SMMU SSD tables*/ diff --git a/plat/arm/common/arm_bl31_setup.c b/plat/arm/common/arm_bl31_setup.c index 3fda2ef85367a00363c09a290eb2eea80b4aefda..899463ee95421358db7de3cb05217a1b7bc54971 100644 --- a/plat/arm/common/arm_bl31_setup.c +++ b/plat/arm/common/arm_bl31_setup.c @@ -40,6 +40,7 @@ #include <mmio.h> #include <plat_arm.h> #include <platform.h> +#include <platform_def.h> /* @@ -219,9 +220,9 @@ void arm_bl31_platform_setup(void) reg_val = (1 << CNTACR_RPCT_SHIFT) | (1 << CNTACR_RVCT_SHIFT); reg_val |= (1 << CNTACR_RFRQ_SHIFT) | (1 << CNTACR_RVOFF_SHIFT); reg_val |= (1 << CNTACR_RWVT_SHIFT) | (1 << CNTACR_RWPT_SHIFT); - mmio_write_32(ARM_SYS_TIMCTL_BASE + CNTACR_BASE(1), reg_val); + mmio_write_32(ARM_SYS_TIMCTL_BASE + CNTACR_BASE(PLAT_ARM_NSTIMER_FRAME_ID), reg_val); - reg_val = (1 << CNTNSAR_NS_SHIFT(1)); + reg_val = (1 << CNTNSAR_NS_SHIFT(PLAT_ARM_NSTIMER_FRAME_ID)); mmio_write_32(ARM_SYS_TIMCTL_BASE + CNTNSAR, reg_val); /* Initialize power controller before setting up topology */ diff --git a/plat/arm/common/arm_security.c b/plat/arm/common/arm_security.c index 8bee4fef8909f2f313595e68c8433f6a63f5712f..990d8d4a6edc2ae5c1f5102f51c81521ab3fe05c 100644 --- a/plat/arm/common/arm_security.c +++ b/plat/arm/common/arm_security.c @@ -47,7 +47,7 @@ void arm_tzc_setup(void) { INFO("Configuring TrustZone Controller\n"); - tzc_init(ARM_TZC_BASE); + tzc_init(PLAT_ARM_TZC_BASE); /* Disable filters. */ tzc_disable_filters(); diff --git a/plat/arm/soc/common/soc_css_security.c b/plat/arm/soc/common/soc_css_security.c index 36f59ea0c34931af9703578de3a44512810046a4..37fd37c3d9c14812e97060ed5a4be7ef68f4c782 100644 --- a/plat/arm/soc/common/soc_css_security.c +++ b/plat/arm/soc/common/soc_css_security.c @@ -30,17 +30,10 @@ #include <board_css_def.h> #include <mmio.h> +#include <nic_400.h> #include <platform_def.h> #include <soc_css_def.h> -/* - * Address of slave 'n' security setting in the NIC-400 address region - * control - * TODO: Ideally this macro should be moved in a "nic-400.h" header file but - * it would be the only thing in there so it's not worth it at the moment. - */ -#define NIC400_ADDR_CTRL_SECURITY_REG(n) (0x8 + (n) * 4) - void soc_css_init_nic400(void) { /* @@ -70,13 +63,6 @@ void soc_css_init_nic400(void) NIC400_ADDR_CTRL_SECURITY_REG(SOC_CSS_NIC400_BOOTSEC_BRIDGE), ~SOC_CSS_NIC400_BOOTSEC_BRIDGE_UART1); - /* - * Allow non-secure access to some CSS regions. - * Note: This is the NIC-400 device on the CSS - */ - mmio_write_32(PLAT_SOC_CSS_NIC400_BASE + - NIC400_ADDR_CTRL_SECURITY_REG(CSS_NIC400_SLAVE_BOOTSECURE), - ~0); }