mbed library sources. Supersedes mbed-src.
Dependents: Nucleo_Hello_Encoder BLE_iBeaconScan AM1805_DEMO DISCO-F429ZI_ExportTemplate1 ... more
cmsis/TARGET_CORTEX_M/mbed_tz_context.c@188:bcfe06ba3d64, 2018-11-08 (annotated)
- Committer:
- AnnaBridge
- Date:
- Thu Nov 08 11:46:34 2018 +0000
- Revision:
- 188:bcfe06ba3d64
- Parent:
- 186:707f6e361f3e
- Child:
- 189:f392fc9709a3
mbed-dev library. Release version 164
Who changed what in which revision?
User | Revision | Line number | New contents of line |
---|---|---|---|
Anna Bridge |
186:707f6e361f3e | 1 | /****************************************************************************** |
Anna Bridge |
186:707f6e361f3e | 2 | * @file tz_context.c |
Anna Bridge |
186:707f6e361f3e | 3 | * @brief Context Management for Armv8-M TrustZone - Sample implementation |
Anna Bridge |
186:707f6e361f3e | 4 | * @version V1.1.1 |
Anna Bridge |
186:707f6e361f3e | 5 | * @date 10. January 2018 |
Anna Bridge |
186:707f6e361f3e | 6 | ******************************************************************************/ |
Anna Bridge |
186:707f6e361f3e | 7 | /* |
Anna Bridge |
186:707f6e361f3e | 8 | * Copyright (c) 2016-2018 Arm Limited. All rights reserved. |
Anna Bridge |
186:707f6e361f3e | 9 | * |
Anna Bridge |
186:707f6e361f3e | 10 | * SPDX-License-Identifier: Apache-2.0 |
Anna Bridge |
186:707f6e361f3e | 11 | * |
Anna Bridge |
186:707f6e361f3e | 12 | * Licensed under the Apache License, Version 2.0 (the License); you may |
Anna Bridge |
186:707f6e361f3e | 13 | * not use this file except in compliance with the License. |
Anna Bridge |
186:707f6e361f3e | 14 | * You may obtain a copy of the License at |
Anna Bridge |
186:707f6e361f3e | 15 | * |
Anna Bridge |
186:707f6e361f3e | 16 | * www.apache.org/licenses/LICENSE-2.0 |
Anna Bridge |
186:707f6e361f3e | 17 | * |
Anna Bridge |
186:707f6e361f3e | 18 | * Unless required by applicable law or agreed to in writing, software |
Anna Bridge |
186:707f6e361f3e | 19 | * distributed under the License is distributed on an AS IS BASIS, WITHOUT |
Anna Bridge |
186:707f6e361f3e | 20 | * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
Anna Bridge |
186:707f6e361f3e | 21 | * See the License for the specific language governing permissions and |
Anna Bridge |
186:707f6e361f3e | 22 | * limitations under the License. |
AnnaBridge | 188:bcfe06ba3d64 | 23 | */ |
AnnaBridge | 188:bcfe06ba3d64 | 24 | |
Anna Bridge |
186:707f6e361f3e | 25 | #if defined (__ARM_FEATURE_CMSE) && (__ARM_FEATURE_CMSE == 3U) |
Anna Bridge |
186:707f6e361f3e | 26 | |
Anna Bridge |
186:707f6e361f3e | 27 | #include "RTE_Components.h" |
Anna Bridge |
186:707f6e361f3e | 28 | #include CMSIS_device_header |
Anna Bridge |
186:707f6e361f3e | 29 | #include "tz_context.h" |
Anna Bridge |
186:707f6e361f3e | 30 | |
Anna Bridge |
186:707f6e361f3e | 31 | /// Number of process slots (threads may call secure library code) |
Anna Bridge |
186:707f6e361f3e | 32 | #ifndef TZ_PROCESS_STACK_SLOTS |
Anna Bridge |
186:707f6e361f3e | 33 | #define TZ_PROCESS_STACK_SLOTS 8U |
Anna Bridge |
186:707f6e361f3e | 34 | #endif |
Anna Bridge |
186:707f6e361f3e | 35 | |
Anna Bridge |
186:707f6e361f3e | 36 | /// Stack size of the secure library code |
Anna Bridge |
186:707f6e361f3e | 37 | #ifndef TZ_PROCESS_STACK_SIZE |
Anna Bridge |
186:707f6e361f3e | 38 | #define TZ_PROCESS_STACK_SIZE 256U |
Anna Bridge |
186:707f6e361f3e | 39 | #endif |
Anna Bridge |
186:707f6e361f3e | 40 | |
Anna Bridge |
186:707f6e361f3e | 41 | typedef struct { |
Anna Bridge |
186:707f6e361f3e | 42 | uint32_t sp_top; // stack space top |
Anna Bridge |
186:707f6e361f3e | 43 | uint32_t sp_limit; // stack space limit |
Anna Bridge |
186:707f6e361f3e | 44 | uint32_t sp; // current stack pointer |
Anna Bridge |
186:707f6e361f3e | 45 | } stack_info_t; |
Anna Bridge |
186:707f6e361f3e | 46 | |
Anna Bridge |
186:707f6e361f3e | 47 | static stack_info_t ProcessStackInfo [TZ_PROCESS_STACK_SLOTS]; |
Anna Bridge |
186:707f6e361f3e | 48 | static uint64_t ProcessStackMemory[TZ_PROCESS_STACK_SLOTS][TZ_PROCESS_STACK_SIZE/8U]; |
Anna Bridge |
186:707f6e361f3e | 49 | static uint32_t ProcessStackFreeSlot = 0xFFFFFFFFU; |
Anna Bridge |
186:707f6e361f3e | 50 | |
Anna Bridge |
186:707f6e361f3e | 51 | |
Anna Bridge |
186:707f6e361f3e | 52 | /// Initialize secure context memory system |
Anna Bridge |
186:707f6e361f3e | 53 | /// \return execution status (1: success, 0: error) |
Anna Bridge |
186:707f6e361f3e | 54 | __attribute__((cmse_nonsecure_entry)) |
Anna Bridge |
186:707f6e361f3e | 55 | uint32_t TZ_InitContextSystem_S (void) { |
Anna Bridge |
186:707f6e361f3e | 56 | uint32_t n; |
Anna Bridge |
186:707f6e361f3e | 57 | |
Anna Bridge |
186:707f6e361f3e | 58 | if (__get_IPSR() == 0U) { |
Anna Bridge |
186:707f6e361f3e | 59 | return 0U; // Thread Mode |
Anna Bridge |
186:707f6e361f3e | 60 | } |
Anna Bridge |
186:707f6e361f3e | 61 | |
Anna Bridge |
186:707f6e361f3e | 62 | for (n = 0U; n < TZ_PROCESS_STACK_SLOTS; n++) { |
Anna Bridge |
186:707f6e361f3e | 63 | ProcessStackInfo[n].sp = 0U; |
Anna Bridge |
186:707f6e361f3e | 64 | ProcessStackInfo[n].sp_limit = (uint32_t)&ProcessStackMemory[n]; |
Anna Bridge |
186:707f6e361f3e | 65 | ProcessStackInfo[n].sp_top = (uint32_t)&ProcessStackMemory[n] + TZ_PROCESS_STACK_SIZE; |
Anna Bridge |
186:707f6e361f3e | 66 | *((uint32_t *)ProcessStackMemory[n]) = n + 1U; |
Anna Bridge |
186:707f6e361f3e | 67 | } |
Anna Bridge |
186:707f6e361f3e | 68 | *((uint32_t *)ProcessStackMemory[--n]) = 0xFFFFFFFFU; |
Anna Bridge |
186:707f6e361f3e | 69 | |
Anna Bridge |
186:707f6e361f3e | 70 | ProcessStackFreeSlot = 0U; |
Anna Bridge |
186:707f6e361f3e | 71 | |
Anna Bridge |
186:707f6e361f3e | 72 | // Default process stack pointer and stack limit |
Anna Bridge |
186:707f6e361f3e | 73 | __set_PSPLIM((uint32_t)ProcessStackMemory); |
Anna Bridge |
186:707f6e361f3e | 74 | __set_PSP ((uint32_t)ProcessStackMemory); |
Anna Bridge |
186:707f6e361f3e | 75 | |
Anna Bridge |
186:707f6e361f3e | 76 | // Privileged Thread Mode using PSP |
Anna Bridge |
186:707f6e361f3e | 77 | __set_CONTROL(0x02U); |
Anna Bridge |
186:707f6e361f3e | 78 | |
Anna Bridge |
186:707f6e361f3e | 79 | return 1U; // Success |
Anna Bridge |
186:707f6e361f3e | 80 | } |
Anna Bridge |
186:707f6e361f3e | 81 | |
Anna Bridge |
186:707f6e361f3e | 82 | |
Anna Bridge |
186:707f6e361f3e | 83 | /// Allocate context memory for calling secure software modules in TrustZone |
Anna Bridge |
186:707f6e361f3e | 84 | /// \param[in] module identifies software modules called from non-secure mode |
Anna Bridge |
186:707f6e361f3e | 85 | /// \return value != 0 id TrustZone memory slot identifier |
Anna Bridge |
186:707f6e361f3e | 86 | /// \return value 0 no memory available or internal error |
Anna Bridge |
186:707f6e361f3e | 87 | __attribute__((cmse_nonsecure_entry)) |
Anna Bridge |
186:707f6e361f3e | 88 | TZ_MemoryId_t TZ_AllocModuleContext_S (TZ_ModuleId_t module) { |
Anna Bridge |
186:707f6e361f3e | 89 | uint32_t slot; |
Anna Bridge |
186:707f6e361f3e | 90 | |
Anna Bridge |
186:707f6e361f3e | 91 | (void)module; // Ignore (fixed Stack size) |
Anna Bridge |
186:707f6e361f3e | 92 | |
Anna Bridge |
186:707f6e361f3e | 93 | if (__get_IPSR() == 0U) { |
Anna Bridge |
186:707f6e361f3e | 94 | return 0U; // Thread Mode |
Anna Bridge |
186:707f6e361f3e | 95 | } |
Anna Bridge |
186:707f6e361f3e | 96 | |
Anna Bridge |
186:707f6e361f3e | 97 | if (ProcessStackFreeSlot == 0xFFFFFFFFU) { |
Anna Bridge |
186:707f6e361f3e | 98 | return 0U; // No slot available |
Anna Bridge |
186:707f6e361f3e | 99 | } |
Anna Bridge |
186:707f6e361f3e | 100 | |
Anna Bridge |
186:707f6e361f3e | 101 | slot = ProcessStackFreeSlot; |
Anna Bridge |
186:707f6e361f3e | 102 | ProcessStackFreeSlot = *((uint32_t *)ProcessStackMemory[slot]); |
Anna Bridge |
186:707f6e361f3e | 103 | |
Anna Bridge |
186:707f6e361f3e | 104 | ProcessStackInfo[slot].sp = ProcessStackInfo[slot].sp_top; |
Anna Bridge |
186:707f6e361f3e | 105 | |
Anna Bridge |
186:707f6e361f3e | 106 | return (slot + 1U); |
Anna Bridge |
186:707f6e361f3e | 107 | } |
Anna Bridge |
186:707f6e361f3e | 108 | |
Anna Bridge |
186:707f6e361f3e | 109 | |
Anna Bridge |
186:707f6e361f3e | 110 | /// Free context memory that was previously allocated with \ref TZ_AllocModuleContext_S |
Anna Bridge |
186:707f6e361f3e | 111 | /// \param[in] id TrustZone memory slot identifier |
Anna Bridge |
186:707f6e361f3e | 112 | /// \return execution status (1: success, 0: error) |
Anna Bridge |
186:707f6e361f3e | 113 | __attribute__((cmse_nonsecure_entry)) |
Anna Bridge |
186:707f6e361f3e | 114 | uint32_t TZ_FreeModuleContext_S (TZ_MemoryId_t id) { |
Anna Bridge |
186:707f6e361f3e | 115 | uint32_t slot; |
Anna Bridge |
186:707f6e361f3e | 116 | |
Anna Bridge |
186:707f6e361f3e | 117 | if (__get_IPSR() == 0U) { |
Anna Bridge |
186:707f6e361f3e | 118 | return 0U; // Thread Mode |
Anna Bridge |
186:707f6e361f3e | 119 | } |
Anna Bridge |
186:707f6e361f3e | 120 | |
Anna Bridge |
186:707f6e361f3e | 121 | if ((id == 0U) || (id > TZ_PROCESS_STACK_SLOTS)) { |
Anna Bridge |
186:707f6e361f3e | 122 | return 0U; // Invalid ID |
Anna Bridge |
186:707f6e361f3e | 123 | } |
Anna Bridge |
186:707f6e361f3e | 124 | |
Anna Bridge |
186:707f6e361f3e | 125 | slot = id - 1U; |
Anna Bridge |
186:707f6e361f3e | 126 | |
Anna Bridge |
186:707f6e361f3e | 127 | if (ProcessStackInfo[slot].sp == 0U) { |
Anna Bridge |
186:707f6e361f3e | 128 | return 0U; // Inactive slot |
Anna Bridge |
186:707f6e361f3e | 129 | } |
Anna Bridge |
186:707f6e361f3e | 130 | ProcessStackInfo[slot].sp = 0U; |
Anna Bridge |
186:707f6e361f3e | 131 | |
Anna Bridge |
186:707f6e361f3e | 132 | *((uint32_t *)ProcessStackMemory[slot]) = ProcessStackFreeSlot; |
Anna Bridge |
186:707f6e361f3e | 133 | ProcessStackFreeSlot = slot; |
Anna Bridge |
186:707f6e361f3e | 134 | |
Anna Bridge |
186:707f6e361f3e | 135 | return 1U; // Success |
Anna Bridge |
186:707f6e361f3e | 136 | } |
Anna Bridge |
186:707f6e361f3e | 137 | |
Anna Bridge |
186:707f6e361f3e | 138 | |
Anna Bridge |
186:707f6e361f3e | 139 | /// Load secure context (called on RTOS thread context switch) |
Anna Bridge |
186:707f6e361f3e | 140 | /// \param[in] id TrustZone memory slot identifier |
Anna Bridge |
186:707f6e361f3e | 141 | /// \return execution status (1: success, 0: error) |
Anna Bridge |
186:707f6e361f3e | 142 | __attribute__((cmse_nonsecure_entry)) |
Anna Bridge |
186:707f6e361f3e | 143 | uint32_t TZ_LoadContext_S (TZ_MemoryId_t id) { |
Anna Bridge |
186:707f6e361f3e | 144 | uint32_t slot; |
Anna Bridge |
186:707f6e361f3e | 145 | |
Anna Bridge |
186:707f6e361f3e | 146 | if ((__get_IPSR() == 0U) || ((__get_CONTROL() & 2U) == 0U)) { |
Anna Bridge |
186:707f6e361f3e | 147 | return 0U; // Thread Mode or using Main Stack for threads |
Anna Bridge |
186:707f6e361f3e | 148 | } |
Anna Bridge |
186:707f6e361f3e | 149 | |
Anna Bridge |
186:707f6e361f3e | 150 | if ((id == 0U) || (id > TZ_PROCESS_STACK_SLOTS)) { |
Anna Bridge |
186:707f6e361f3e | 151 | return 0U; // Invalid ID |
Anna Bridge |
186:707f6e361f3e | 152 | } |
Anna Bridge |
186:707f6e361f3e | 153 | |
Anna Bridge |
186:707f6e361f3e | 154 | slot = id - 1U; |
Anna Bridge |
186:707f6e361f3e | 155 | |
Anna Bridge |
186:707f6e361f3e | 156 | if (ProcessStackInfo[slot].sp == 0U) { |
Anna Bridge |
186:707f6e361f3e | 157 | return 0U; // Inactive slot |
Anna Bridge |
186:707f6e361f3e | 158 | } |
Anna Bridge |
186:707f6e361f3e | 159 | |
Anna Bridge |
186:707f6e361f3e | 160 | // Setup process stack pointer and stack limit |
Anna Bridge |
186:707f6e361f3e | 161 | __set_PSPLIM(ProcessStackInfo[slot].sp_limit); |
Anna Bridge |
186:707f6e361f3e | 162 | __set_PSP (ProcessStackInfo[slot].sp); |
Anna Bridge |
186:707f6e361f3e | 163 | |
Anna Bridge |
186:707f6e361f3e | 164 | return 1U; // Success |
Anna Bridge |
186:707f6e361f3e | 165 | } |
Anna Bridge |
186:707f6e361f3e | 166 | |
Anna Bridge |
186:707f6e361f3e | 167 | |
Anna Bridge |
186:707f6e361f3e | 168 | /// Store secure context (called on RTOS thread context switch) |
Anna Bridge |
186:707f6e361f3e | 169 | /// \param[in] id TrustZone memory slot identifier |
Anna Bridge |
186:707f6e361f3e | 170 | /// \return execution status (1: success, 0: error) |
Anna Bridge |
186:707f6e361f3e | 171 | __attribute__((cmse_nonsecure_entry)) |
Anna Bridge |
186:707f6e361f3e | 172 | uint32_t TZ_StoreContext_S (TZ_MemoryId_t id) { |
Anna Bridge |
186:707f6e361f3e | 173 | uint32_t slot; |
Anna Bridge |
186:707f6e361f3e | 174 | uint32_t sp; |
Anna Bridge |
186:707f6e361f3e | 175 | |
Anna Bridge |
186:707f6e361f3e | 176 | if ((__get_IPSR() == 0U) || ((__get_CONTROL() & 2U) == 0U)) { |
Anna Bridge |
186:707f6e361f3e | 177 | return 0U; // Thread Mode or using Main Stack for threads |
Anna Bridge |
186:707f6e361f3e | 178 | } |
Anna Bridge |
186:707f6e361f3e | 179 | |
Anna Bridge |
186:707f6e361f3e | 180 | if ((id == 0U) || (id > TZ_PROCESS_STACK_SLOTS)) { |
Anna Bridge |
186:707f6e361f3e | 181 | return 0U; // Invalid ID |
Anna Bridge |
186:707f6e361f3e | 182 | } |
Anna Bridge |
186:707f6e361f3e | 183 | |
Anna Bridge |
186:707f6e361f3e | 184 | slot = id - 1U; |
Anna Bridge |
186:707f6e361f3e | 185 | |
Anna Bridge |
186:707f6e361f3e | 186 | if (ProcessStackInfo[slot].sp == 0U) { |
Anna Bridge |
186:707f6e361f3e | 187 | return 0U; // Inactive slot |
Anna Bridge |
186:707f6e361f3e | 188 | } |
Anna Bridge |
186:707f6e361f3e | 189 | |
Anna Bridge |
186:707f6e361f3e | 190 | sp = __get_PSP(); |
Anna Bridge |
186:707f6e361f3e | 191 | if ((sp < ProcessStackInfo[slot].sp_limit) || |
Anna Bridge |
186:707f6e361f3e | 192 | (sp > ProcessStackInfo[slot].sp_top)) { |
Anna Bridge |
186:707f6e361f3e | 193 | return 0U; // SP out of range |
Anna Bridge |
186:707f6e361f3e | 194 | } |
Anna Bridge |
186:707f6e361f3e | 195 | ProcessStackInfo[slot].sp = sp; |
Anna Bridge |
186:707f6e361f3e | 196 | |
Anna Bridge |
186:707f6e361f3e | 197 | // Default process stack pointer and stack limit |
Anna Bridge |
186:707f6e361f3e | 198 | __set_PSPLIM((uint32_t)ProcessStackMemory); |
Anna Bridge |
186:707f6e361f3e | 199 | __set_PSP ((uint32_t)ProcessStackMemory); |
Anna Bridge |
186:707f6e361f3e | 200 | |
Anna Bridge |
186:707f6e361f3e | 201 | return 1U; // Success |
Anna Bridge |
186:707f6e361f3e | 202 | } |
Anna Bridge |
186:707f6e361f3e | 203 | #endif |