/******************************************************************************
* SECCFG VERSION CHECK
******************************************************************************/
int seccfg_ver_verify(void)
{
int ret = SEC_OK;
/* ----------------------------------- */
/* check seccfg magic */
/* ----------------------------------- */
if (SEC_CFG_MAGIC_NUM != seccfg.v1.magic_number) {
ret = ERR_SEC_CFG_MAGIC_INVALID;
goto _end;
}
/* ----------------------------------- */
/* check seccfg version */
/* ----------------------------------- */
switch (get_seccfg_ver()) {
case SECCFG_V1:
case SECCFG_V1_2:
SMSG(true, "[%s] seccfg id = %s\n", MOD, seccfg.v1.id);
if (0 != mcmp(seccfg.v1.id, SEC_CFG_BEGIN, SEC_CFG_BEGIN_LEN)) {
ret = ERR_SEC_CFG_INVALID_ID;
goto _end;
}
SMSG(true, "[%s] seccfg end pattern = 0x%x\n", MOD, seccfg.v1.end_pattern);
if (SEC_CFG_END_PATTERN != seccfg.v1.end_pattern) {
ret = ERR_SEC_CFG_INVALID_END_PATTERN;
goto _end;
}
break;
case SECCFG_V3:
SMSG(true, "[%s] seccfg id = %s\n", MOD, seccfg.v3.id);
if (0 != mcmp(seccfg.v3.id, SEC_CFG_BEGIN, SEC_CFG_BEGIN_LEN)) {
ret = ERR_SEC_CFG_INVALID_ID;
goto _end;
}
SMSG(true, "[%s] seccfg end pattern = 0x%x\n", MOD, seccfg.v3.end_pattern);
if (SEC_CFG_END_PATTERN != seccfg.v3.end_pattern) {
ret = ERR_SEC_CFG_INVALID_END_PATTERN;
goto _end;
}
break;
default:
ret = ERR_SEC_CFG_VERSION_INVALID;
goto _end;
}
_end:
return ret;
}
/******************************************************************************
* SECCFG VERSION CORRECT
******************************************************************************/
int seccfg_ver_correct (void)
{
int ret = SEC_OK;
SEC_IMG_HEADER_U *sign_header = 0;
/* ----------------------------------- */
/* check seccfg magic */
/* ----------------------------------- */
if(SEC_CFG_MAGIC_NUM != seccfg.v1.magic_number)
{
ret = ERR_SEC_CFG_MAGIC_INVALID;
goto _end;
}
/* ----------------------------------- */
/* check seccfg version */
/* ----------------------------------- */
switch(get_seccfg_ver())
{
case SECCFG_V1:
case SECCFG_V1_2:
/* correct seccfg version */
sign_header = (SEC_IMG_HEADER_U *)&seccfg.v1.image_info[0].header;
if(SEC_IMG_MAGIC != sign_header->v1.magic_number)
{
ret = ERR_SBOOT_CHECK_INVALID_IMG_MAGIC_NUM;
goto _end;
}
if(0 == sign_header->v2.signature_length)
{
set_shdr_ver(SEC_HDR_V1);
set_seccfg_ver(SECCFG_V1);
}
else
{
set_shdr_ver(SEC_HDR_V2);
set_seccfg_ver(SECCFG_V1_2);
}
break;
case SECCFG_V3:
set_shdr_ver(SEC_HDR_V3);
set_seccfg_ver(SECCFG_V3);
break;
default:
ret = ERR_SEC_CFG_VERSION_INVALID;
goto _end;
}
_end:
return ret;
}
/******************************************************************************
* SECCFG IMAGE COUNT
******************************************************************************/
uint32 get_seccfg_img_cnt(void)
{
switch (get_seccfg_ver()) {
case SECCFG_V1:
case SECCFG_V1_2:
return SECURE_IMAGE_COUNT;
case SECCFG_V3:
return SECURE_IMAGE_COUNT_V3;
case SECCFG_UNSET:
default:
return 0;
}
}
/******************************************************************************
* SECCFG SIU
******************************************************************************/
uint32 get_seccfg_siu(SECCFG_U *p_seccfg)
{
switch (get_seccfg_ver()) {
case SECCFG_V1:
case SECCFG_V1_2:
return p_seccfg->v1.siu_status;
case SECCFG_V3:
return p_seccfg->v3.siu_status;
case SECCFG_UNSET:
default:
memset(p_seccfg, 0, sizeof(SECCFG_U));
return 0;
}
}
void set_seccfg_status(SECCFG_U *p_seccfg, SECCFG_STATUS val)
{
switch (get_seccfg_ver()) {
case SECCFG_V1:
case SECCFG_V1_2:
p_seccfg->v1.status = val;
break;
case SECCFG_V3:
p_seccfg->v3.seccfg_status = val;
break;
case SECCFG_UNSET:
default:
memset(p_seccfg, 0, sizeof(SECCFG_U));
break;
}
}
/**************************************************************************
* SEC DRIVER IOCTL
**************************************************************************/
long sec_core_ioctl(struct file *file, unsigned int cmd, unsigned long arg)
{
int err = 0;
int ret = 0;
unsigned int cipher_len = 0;
unsigned int rid[4];
unsigned char part_name[10];
META_CONTEXT meta_ctx;
/* ---------------------------------- */
/* IOCTL */
/* ---------------------------------- */
if (_IOC_TYPE(cmd) != SEC_IOC_MAGIC)
return -ENOTTY;
if (_IOC_NR(cmd) > SEC_IOC_MAXNR)
return -ENOTTY;
if (_IOC_DIR(cmd) & _IOC_READ)
err = !access_ok(VERIFY_WRITE, (void __user *)arg, _IOC_SIZE(cmd));
if (_IOC_DIR(cmd) & _IOC_WRITE)
err = !access_ok(VERIFY_READ, (void __user *)arg, _IOC_SIZE(cmd));
if (err) return -EFAULT;
switch (cmd) {
/* ---------------------------------- */
/* get random id */
/* ---------------------------------- */
case SEC_GET_RANDOM_ID:
SMSG(bMsg,"[%s] CMD - SEC_GET_RANDOM_ID\n",MOD);
sec_get_random_id(&rid[0]);
ret = osal_copy_to_user((void __user *)arg, (void *)&rid[0], sizeof(unsigned int) * 4);
break;
/* ---------------------------------- */
/* init boot info */
/* ---------------------------------- */
case SEC_BOOT_INIT:
SMSG(bMsg,"[%s] CMD - SEC_BOOT_INIT\n",MOD);
ret = sec_boot_init();
ret = osal_copy_to_user((void __user *)arg, (void *)&ret, sizeof(int));
break;
/* ---------------------------------- */
/* check if secure boot is enbaled */
/* ---------------------------------- */
case SEC_BOOT_IS_ENABLED:
SMSG(bMsg,"[%s] CMD - SEC_BOOT_IS_ENABLED\n",MOD);
ret = sec_boot_enabled();
ret = osal_copy_to_user((void __user *)arg, (void *)&ret, sizeof(int));
break;
/* ---------------------------------- */
/* encrypt sec cfg */
/* ---------------------------------- */
case SEC_SECCFG_ENCRYPT:
SMSG(bMsg,"[%s] CMD - SEC_SECCFG_ENCRYPT\n",MOD);
if(copy_from_user((void *)&seccfg, (void __user *)arg, sizeof(SECCFG_U)))
{
return -EFAULT;
}
/* specify encrpytion length */
SMSG(true,"[%s] SECCFG v%d\n",MOD,get_seccfg_ver());
if (SEC_CFG_END_PATTERN == seccfg.v1.end_pattern)
{
if((SECCFG_V1 != get_seccfg_ver()) && (SECCFG_V1_2 != get_seccfg_ver()))
{
SMSG(true,"[%s] mismatch seccfg version v%d\n",MOD,get_seccfg_ver());
SEC_ASSERT(0);
}
cipher_len = get_seccfg_cipher_len();
sp_hacc_enc((unsigned char*)&seccfg.v1.image_info,cipher_len,rom_info.m_SEC_CTRL.m_seccfg_ac_en,HACC_USER1,FALSE);
}
else if (SEC_CFG_END_PATTERN == seccfg.v3.end_pattern)
{
if(SECCFG_V3 != get_seccfg_ver())
{
SMSG(true,"[%s] mismatch seccfg version v%d\n",MOD,get_seccfg_ver());
SEC_ASSERT(0);
}
cipher_len = get_seccfg_cipher_len();
sp_hacc_enc((unsigned char*)&seccfg.v3.image_info,cipher_len,rom_info.m_SEC_CTRL.m_seccfg_ac_en,HACC_USER1,FALSE);
}
else
{
SMSG(true,"[%s] wrong seccfg version v%d\n",MOD,seccfg.v3.seccfg_ver)
SEC_ASSERT(0);
}
ret = osal_copy_to_user((void __user *)arg, (void *)&seccfg, sizeof(SECCFG_U));
break;
/* ---------------------------------- */
/* decrypt sec cfg */
/* ---------------------------------- */
case SEC_SECCFG_DECRYPT:
SMSG(bMsg,"[%s] CMD - SEC_SECCFG_DECRYPT\n",MOD);
if(copy_from_user((void *)&seccfg, (void __user *)arg, sizeof(SECCFG_U)))
{
return -EFAULT;
}
/* specify decrpytion length */
if (SEC_CFG_END_PATTERN == seccfg.v1.end_pattern)
{
/* seccfg version should be corrected by caller */
set_seccfg_ver(SECCFG_V1);
cipher_len = get_seccfg_cipher_len();
sp_hacc_dec((unsigned char*)&seccfg.v1.image_info,cipher_len,rom_info.m_SEC_CTRL.m_seccfg_ac_en,HACC_USER1,FALSE);
}
else if (SEC_CFG_END_PATTERN == seccfg.v3.end_pattern)
{
/* seccfg version should be corrected by caller */
set_seccfg_ver(SECCFG_V3);
cipher_len = get_seccfg_cipher_len();
sp_hacc_dec((unsigned char*)&seccfg.v3.image_info,cipher_len,rom_info.m_SEC_CTRL.m_seccfg_ac_en,HACC_USER1,FALSE);
}
else
{
SMSG(true,"[%s] wrong seccfg version v%d\n",MOD,seccfg.v3.seccfg_ver)
SEC_ASSERT(0);
}
SMSG(bMsg,"[%s] SECCFG v%d\n",MOD,get_seccfg_ver());
ret = osal_copy_to_user((void __user *)arg, (void *)&seccfg, sizeof(SECCFG_U));
break;
/* ---------------------------------- */
/* NVRAM HW encryption */
/* ---------------------------------- */
case SEC_NVRAM_HW_ENCRYPT:
SMSG(bMsg,"[%s] CMD - SEC_NVRAM_HW_ENCRYPT\n",MOD);
if(osal_copy_from_user((void *)&meta_ctx, (void __user *)arg, sizeof(meta_ctx)))
{
return -EFAULT;
}
/* TODO : double check if META register is correct ? */
sp_hacc_enc((unsigned char*)&(meta_ctx.data),NVRAM_CIPHER_LEN,TRUE,HACC_USER2,FALSE);
meta_ctx.ret = SEC_OK;
ret = osal_copy_to_user((void __user *)arg, (void *)&meta_ctx, sizeof(meta_ctx));
break;
/* ---------------------------------- */
/* NVRAM HW decryption */
/* ---------------------------------- */
case SEC_NVRAM_HW_DECRYPT:
SMSG(bMsg,"[%s] CMD - SEC_NVRAM_HW_DECRYPT\n",MOD);
if(osal_copy_from_user((void *)&meta_ctx, (void __user *)arg, sizeof(meta_ctx)))
{
return -EFAULT;
}
sp_hacc_dec((unsigned char*)&(meta_ctx.data),NVRAM_CIPHER_LEN,TRUE,HACC_USER2,FALSE);
meta_ctx.ret = SEC_OK;
ret = osal_copy_to_user((void __user *)arg, (void *)&meta_ctx, sizeof(meta_ctx));
break;
/* ---------------------------------- */
/* check if secure usbdl is enbaled */
/* ---------------------------------- */
case SEC_USBDL_IS_ENABLED:
SMSG(bMsg,"[%s] CMD - SEC_USBDL_IS_ENABLED\n",MOD);
ret = sec_usbdl_enabled();
ret = osal_copy_to_user((void __user *)arg, (void *)&ret, sizeof(int));
break;
/* ---------------------------------- */
/* configure HACC HW (include SW KEY) */
/* ---------------------------------- */
case SEC_HACC_CONFIG:
SMSG(bMsg,"[%s] CMD - SEC_HACC_CONFIG\n",MOD);
ret = sec_boot_hacc_init();
ret = osal_copy_to_user((void __user *)arg, (void *)&ret, sizeof(int));
break;
/* ---------------------------------- */
/* enable HACC HW clock */
/* ---------------------------------- */
case SEC_HACC_ENABLE_CLK:
SMSG(bMsg,"[%s] CMD - SEC_HACC_ENABLE_CLK\n",MOD);
ret = osal_copy_to_user((void __user *)arg, (void *)&ret, sizeof(int));
break;
/* ---------------------------------- */
/* lock hacc function */
/* ---------------------------------- */
case SEC_HACC_LOCK:
SMSG(bMsg,"[%s] CMD - SEC_HACC_LOCK\n",MOD);
SMSG(bMsg,"[%s] lock\n",MOD);
/* If the semaphore is successfully acquired, this function returns 0.*/
ret = osal_hacc_lock();
if(ret)
{
SMSG(true,"[%s] ERESTARTSYS\n",MOD);
return -ERESTARTSYS;
}
return ret;
/* ---------------------------------- */
/* unlock hacc function */
/* ---------------------------------- */
case SEC_HACC_UNLOCK:
SMSG(bMsg,"[%s] CMD - SEC_HACC_UNLOCK\n",MOD);
SMSG(bMsg,"[%s] unlock\n",MOD);
osal_hacc_unlock();
break;
/* ---------------------------------- */
/* check if secure boot check enabled */
/* ---------------------------------- */
case SEC_BOOT_PART_CHECK_ENABLE:
SMSG(bMsg,"[%s] CMD -SEC_BOOT_PART_CHECK_ENABLE\n",MOD);
if(copy_from_user((void *)part_name, (void __user *)arg, sizeof(part_name)))
{
return -EFAULT;
}
ret = sec_boot_check_part_enabled (part_name);
SMSG(bMsg,"[%s] result '0x%x'\n",MOD,ret);
return ret;
/* ---------------------------------- */
/* notify mark incomplete */
/* ---------------------------------- */
case SEC_BOOT_NOTIFY_MARK_STATUS:
SMSG(true,"[%s] mark status\n",MOD);
/* may do some post process here ... */
break;
/* ---------------------------------- */
/* notify check pass */
/* ---------------------------------- */
case SEC_BOOT_NOTIFY_PASS:
SMSG(true,"[%s] sbchk pass\n",MOD);
SMSG(true,"[%s] sbchk pass\n",MOD);
SMSG(true,"[%s] sbchk pass\n",MOD);
SMSG(true,"[%s] sbchk pass\n",MOD);
SMSG(true,"[%s] sbchk pass\n",MOD);
/* may do some post process here ... */
break;
/* ---------------------------------- */
/* notify check fail */
/* ---------------------------------- */
case SEC_BOOT_NOTIFY_FAIL:
if(osal_copy_from_user((void *)part_name, (void __user *)arg, sizeof(part_name)))
{
return -EFAULT;
}
SMSG(true,"[%s] sbchk fail '%s'\n",MOD,part_name);
SMSG(true,"[%s] sbchk fail '%s'\n",MOD,part_name);
SMSG(true,"[%s] sbchk fail '%s'\n",MOD,part_name);
SMSG(true,"[%s] sbchk fail '%s'\n",MOD,part_name);
SMSG(true,"[%s] sbchk fail '%s'\n",MOD,part_name);
osal_msleep(3000);
/* punishment ... */
SEC_ASSERT(0);
break;
/* ---------------------------------- */
/* notify recovery mode done */
/* ---------------------------------- */
case SEC_BOOT_NOTIFY_RMSDUP_DONE:
SMSG(true,"[%s] recovery mode done\n",MOD);
/* may do some post process here ... */
break;
/* ---------------------------------- */
/* read rom info */
/* ---------------------------------- */
case SEC_READ_ROM_INFO:
SMSG(bMsg,"[%s] read rom info\n",MOD);
ret = osal_copy_to_user((void __user *)arg, (void *)&rom_info, sizeof(AND_ROMINFO_T));
break;
}
return 0;
}