From: Etienne Carriere <etienne.carriere@linaro.org>
To: Sughosh Ganu <sughosh.ganu@linaro.org>
Cc: u-boot@lists.denx.de, Heinrich Schuchardt <xypron.glpk@gmx.de>,
Ilias Apalodimas <ilias.apalodimas@linaro.org>,
Takahiro Akashi <takahiro.akashi@linaro.org>,
Patrick Delaunay <patrick.delaunay@foss.st.com>,
Patrice Chotard <patrice.chotard@foss.st.com>,
Simon Glass <sjg@chromium.org>, Bin Meng <bmeng.cn@gmail.com>,
Tom Rini <trini@konsulko.com>, Michal Simek <monstr@monstr.eu>,
Jassi Brar <jaswinder.singh@linaro.org>
Subject: Re: [PATCH v9 09/15] FWU: Add boot time checks as highlighted by the FWU specification
Date: Tue, 6 Sep 2022 08:58:50 +0200 [thread overview]
Message-ID: <CAN5uoS8eeO=Z9dKB9HrDJE3dGK_TsD8D0kUG1N9FKL3x64G1nw@mail.gmail.com> (raw)
In-Reply-To: <20220826095716.1676150-10-sughosh.ganu@linaro.org>
On Fri, 26 Aug 2022 at 11:58, Sughosh Ganu <sughosh.ganu@linaro.org> wrote:
>
> The FWU Multi Bank Update specification requires the Update Agent to
> carry out certain checks at the time of platform boot. The Update
> Agent is the component which is responsible for updating the firmware
> components and maintaining and keeping the metadata in sync.
>
> The spec requires that the Update Agent perform the following checks
> at the time of boot
> * Sanity check of both the metadata copies maintained by the platform.
> * Get the boot index passed to U-Boot by the prior stage bootloader
> and use this value for metadata bookkeeping.
> * Check if the system is booting in Trial State. If the system boots
> in the Trial State for more than a specified number of boot counts,
> change the Active Bank to be booting the platform from.
>
> Call these checks through the main loop event at the time of platform
> boot.
>
> Signed-off-by: Sughosh Ganu <sughosh.ganu@linaro.org>
> ---
> Changes since V8:
> * Call fwu_boottime_checks through the event interface
> * Add comments for API functions
>
> include/fwu.h | 13 +++
> lib/efi_loader/efi_setup.c | 1 +
> lib/fwu_updates/fwu.c | 189 ++++++++++++++++++++++++++++++++++++-
> 3 files changed, 202 insertions(+), 1 deletion(-)
>
> diff --git a/include/fwu.h b/include/fwu.h
> index b8c207deaf..31c9923ff5 100644
> --- a/include/fwu.h
> +++ b/include/fwu.h
> @@ -252,4 +252,17 @@ int fwu_plat_get_update_index(uint *update_idx);
> *
> */
> void fwu_plat_get_bootidx(void *boot_idx);
> +
> +/**
> + * fwu_update_checks_pass() - Check if FWU update can be done
> + *
> + * Check if the FWU update can be executed. The updates are
> + * allowed only when the platform is not in Trial State and
> + * the boot time checks have passed
> + *
> + * Return: 1 if OK, 0 on error
> + *
> + */
> +u8 fwu_update_checks_pass(void);
> +
> #endif /* _FWU_H_ */
> diff --git a/lib/efi_loader/efi_setup.c b/lib/efi_loader/efi_setup.c
> index 751beda590..23dc7a0710 100644
> --- a/lib/efi_loader/efi_setup.c
> +++ b/lib/efi_loader/efi_setup.c
> @@ -199,6 +199,7 @@ static efi_status_t __efi_init_early(void)
> goto out;
>
> ret = efi_disk_init();
> +
> out:
> return ret;
> }
> diff --git a/lib/fwu_updates/fwu.c b/lib/fwu_updates/fwu.c
> index 94b15859a5..27f48855af 100644
> --- a/lib/fwu_updates/fwu.c
> +++ b/lib/fwu_updates/fwu.c
> @@ -4,10 +4,19 @@
> */
>
> #include <dm.h>
> +#include <efi.h>
> #include <efi_loader.h>
> +#include <efi_variable.h>
> +#include <event.h>
> #include <fwu.h>
> #include <fwu_mdata.h>
> -#include <log.h>
> +#include <malloc.h>
> +
> +#include <linux/errno.h>
> +#include <linux/types.h>
> +
> +static u8 trial_state;
> +static u8 boottime_check;
>
> #include <linux/errno.h>
> #include <linux/types.h>
> @@ -16,6 +25,112 @@
> #define IMAGE_ACCEPT_SET BIT(0)
> #define IMAGE_ACCEPT_CLEAR BIT(1)
>
> +static int trial_counter_update(u16 *trial_state_ctr)
> +{
> + bool delete;
> + u32 var_attr;
> + efi_status_t status;
> + efi_uintn_t var_size;
> +
> + delete = !trial_state_ctr ? true : false;
> + var_size = !trial_state_ctr ? 0 : (efi_uintn_t)sizeof(*trial_state_ctr);
> + var_attr = !trial_state_ctr ? 0 : EFI_VARIABLE_NON_VOLATILE |
> + EFI_VARIABLE_BOOTSERVICE_ACCESS;
> + status = efi_set_variable_int(u"TrialStateCtr",
> + &efi_global_variable_guid,
> + var_attr,
> + var_size, trial_state_ctr, false);
> +
> + if ((delete && (status != EFI_NOT_FOUND &&
> + status != EFI_SUCCESS)) ||
> + (!delete && status != EFI_SUCCESS))
> + return -1;
> +
> + return 0;
> +}
> +
> +static int in_trial_state(struct fwu_mdata *mdata)
> +{
> + u32 i, active_bank;
> + struct fwu_image_entry *img_entry;
> + struct fwu_image_bank_info *img_bank_info;
> +
> + active_bank = mdata->active_index;
> + img_entry = &mdata->img_entry[0];
> + for (i = 0; i < CONFIG_FWU_NUM_IMAGES_PER_BANK; i++) {
> + img_bank_info = &img_entry[i].img_bank_info[active_bank];
> + if (!img_bank_info->accepted) {
> + return 1;
> + }
> + }
> +
> + return 0;
> +}
> +
> +static int fwu_trial_state_check(struct udevice *dev)
> +{
> + int ret;
> + efi_status_t status;
> + efi_uintn_t var_size;
> + u16 trial_state_ctr;
> + u32 var_attributes, active_idx;
> + struct fwu_mdata mdata = { 0 };
> +
> + ret = fwu_get_mdata(dev, &mdata);
> + if (ret)
> + return ret;
> +
> + if ((trial_state = in_trial_state(&mdata))) {
> + var_size = (efi_uintn_t)sizeof(trial_state_ctr);
> + log_info("System booting in Trial State\n");
> + var_attributes = EFI_VARIABLE_NON_VOLATILE |
> + EFI_VARIABLE_BOOTSERVICE_ACCESS;
> + status = efi_get_variable_int(u"TrialStateCtr",
> + &efi_global_variable_guid,
> + &var_attributes,
> + &var_size, &trial_state_ctr,
> + NULL);
> + if (status != EFI_SUCCESS) {
> + log_err("Unable to read TrialStateCtr variable\n");
> + ret = -1;
> + goto out;
> + }
> +
> + ++trial_state_ctr;
> + if (trial_state_ctr > CONFIG_FWU_TRIAL_STATE_CNT) {
> + log_info("Trial State count exceeded. Revert back to previous_active_index\n");
> + active_idx = mdata.active_index;
> + ret = fwu_revert_boot_index();
> + if (ret) {
> + log_err("Unable to revert active_index\n");
> + goto out;
> + }
> +
> + /* Delete the TrialStateCtr variable */
> + ret = trial_counter_update(NULL);
> + if (ret) {
> + log_err("Unable to delete TrialStateCtr variable\n");
> + goto out;
> + }
> + } else {
> + ret = trial_counter_update(&trial_state_ctr);
> + if (ret) {
> + log_err("Unable to increment TrialStateCtr variable\n");
> + goto out;
> + }
> + }
> + } else {
> + /* Delete the variable */
> + ret = trial_counter_update(NULL);
> + if (ret) {
> + log_err("Unable to delete TrialStateCtr variable\n");
> + }
> + }
> +
> +out:
> + return ret;
> +}
> +
> static int fwu_get_dev(struct udevice **dev)
>
> {
> @@ -382,3 +497,75 @@ __weak int fwu_plat_get_update_index(uint *update_idx)
>
> return ret;
> }
> +
> +/**
> + * fwu_update_checks_pass() - Check if FWU update can be done
> + *
> + * Check if the FWU update can be executed. The updates are
> + * allowed only when the platform is not in Trial State and
> + * the boot time checks have passed
> + *
> + * Return: 1 if OK, 0 on error
> + *
> + */
> +u8 fwu_update_checks_pass(void)
> +{
> + return !trial_state && boottime_check;
> +}
> +
> +static int fwu_boottime_checks(void *ctx, struct event *event)
> +{
> + int ret;
> + struct udevice *dev;
> + u32 boot_idx, active_idx;
> +
> + ret = fwu_get_dev(&dev);
> + if (ret)
> + return ret;
> +
> + ret = fwu_mdata_check(dev);
> + if (ret) {
> + return 0;
> + }
> +
> + /*
> + * Get the Boot Index, i.e. the bank from
> + * which the platform has booted. This value
> + * gets passed from the ealier stage bootloader
> + * which booted u-boot, e.g. tf-a. If the
> + * boot index is not the same as the
> + * active_index read from the FWU metadata,
> + * update the active_index.
> + */
> + fwu_plat_get_bootidx(&boot_idx);
> + if (boot_idx >= CONFIG_FWU_NUM_BANKS) {
> + log_err("Received incorrect value of boot_index\n");
> + return 0;
> + }
> +
> + ret = fwu_get_active_index(&active_idx);
> + if (ret) {
> + log_err("Unable to read active_index\n");
> + return 0;
> + }
> +
> + if (boot_idx != active_idx) {
> + log_info("Boot idx %u is not matching active idx %u, changing active_idx\n",
> + boot_idx, active_idx);
> + ret = fwu_update_active_index(boot_idx);
> + if (!ret)
> + boottime_check = 1;
> +
> + return 0;
> + }
> +
> + if (efi_init_obj_list() != EFI_SUCCESS)
> + return 0;
> +
> + ret = fwu_trial_state_check(dev);
> + if (!ret)
> + boottime_check = 1;
> +
> + return 0;
> +}
> +EVENT_SPY(EVT_MAIN_LOOP, fwu_boottime_checks);
> --
> 2.34.1
>
next prev parent reply other threads:[~2022-09-06 6:59 UTC|newest]
Thread overview: 43+ messages / expand[flat|nested] mbox.gz Atom feed top
2022-08-26 9:57 [PATCH v9 00/15] FWU: Add FWU Multi Bank Update feature support Sughosh Ganu
2022-08-26 9:57 ` [PATCH v9 01/15] dt/bindings: Add bindings for GPT based FWU Metadata storage device Sughosh Ganu
2022-09-04 7:09 ` Ilias Apalodimas
2022-09-06 7:35 ` Etienne Carriere
2022-08-26 9:57 ` [PATCH v9 02/15] FWU: Add FWU metadata structure and driver for accessing metadata Sughosh Ganu
2022-09-06 7:36 ` Etienne Carriere
2022-09-07 6:45 ` Ilias Apalodimas
2022-09-07 11:02 ` Sughosh Ganu
2022-08-26 9:57 ` [PATCH v9 03/15] FWU: Add FWU metadata access driver for GPT partitioned block devices Sughosh Ganu
2022-09-06 7:01 ` Etienne Carriere
2022-09-06 7:12 ` Sughosh Ganu
2022-08-26 9:57 ` [PATCH v9 04/15] stm32mp1: dk2: Add a node for the FWU metadata device Sughosh Ganu
2022-09-06 7:37 ` Etienne Carriere
2022-08-26 9:57 ` [PATCH v9 05/15] stm32mp1: dk2: Add image information for capsule updates Sughosh Ganu
2022-09-04 7:11 ` Ilias Apalodimas
2022-09-05 19:18 ` Etienne Carriere
2022-09-06 7:08 ` Sughosh Ganu
2022-08-26 9:57 ` [PATCH v9 06/15] FWU: Add helper functions for accessing FWU metadata Sughosh Ganu
2022-09-06 7:39 ` Etienne Carriere
2022-09-07 5:59 ` Ilias Apalodimas
2022-09-07 11:05 ` Sughosh Ganu
2022-08-26 9:57 ` [PATCH v9 07/15] FWU: STM32MP1: Add support to read boot index from backup register Sughosh Ganu
2022-09-06 7:27 ` Etienne Carriere
2022-09-06 7:37 ` Sughosh Ganu
2022-09-06 7:44 ` Sughosh Ganu
2022-08-26 9:57 ` [PATCH v9 08/15] event: Add an event for main_loop Sughosh Ganu
2022-08-27 0:20 ` Simon Glass
2022-08-26 9:57 ` [PATCH v9 09/15] FWU: Add boot time checks as highlighted by the FWU specification Sughosh Ganu
2022-09-06 6:58 ` Etienne Carriere [this message]
2022-09-06 7:01 ` Etienne Carriere
2022-09-06 7:11 ` Sughosh Ganu
2022-08-26 9:57 ` [PATCH v9 10/15] FWU: Add support for the FWU Multi Bank Update feature Sughosh Ganu
2022-09-07 13:34 ` Ilias Apalodimas
2022-09-08 2:15 ` Takahiro Akashi
2022-09-08 6:34 ` Sughosh Ganu
2022-08-26 9:57 ` [PATCH v9 11/15] FWU: cmd: Add a command to read FWU metadata Sughosh Ganu
2022-09-06 7:59 ` Etienne Carriere
2022-08-26 9:57 ` [PATCH v9 12/15] test: dm: Add test cases for FWU Metadata uclass Sughosh Ganu
2022-09-04 7:10 ` Ilias Apalodimas
2022-08-26 9:57 ` [PATCH v9 13/15] mkeficapsule: Add support for generating empty capsules Sughosh Ganu
2022-09-22 13:26 ` Ilias Apalodimas
2022-08-26 9:57 ` [PATCH v9 14/15] mkeficapsule: Add support for setting OEM flags in capsule header Sughosh Ganu
2022-08-26 9:57 ` [PATCH v9 15/15] FWU: doc: Add documentation for the FWU feature Sughosh Ganu
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to='CAN5uoS8eeO=Z9dKB9HrDJE3dGK_TsD8D0kUG1N9FKL3x64G1nw@mail.gmail.com' \
--to=etienne.carriere@linaro.org \
--cc=bmeng.cn@gmail.com \
--cc=ilias.apalodimas@linaro.org \
--cc=jaswinder.singh@linaro.org \
--cc=monstr@monstr.eu \
--cc=patrice.chotard@foss.st.com \
--cc=patrick.delaunay@foss.st.com \
--cc=sjg@chromium.org \
--cc=sughosh.ganu@linaro.org \
--cc=takahiro.akashi@linaro.org \
--cc=trini@konsulko.com \
--cc=u-boot@lists.denx.de \
--cc=xypron.glpk@gmx.de \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).