mirror of https://github.com/acidanthera/audk.git
UefiCpuPkg: Add SecCore module
Add SecCore module that uses the PlatformSecLib class for platform specific actions. The SecCore module also uses a new PCD to configure the size of the stack used in the SEC phase. If the stack size PCD is set to 0, the stack is configured to use half of the available temporary RAM. Contributed-under: TianoCore Contribution Agreement 1.0 Signed-off-by: Michael Kinney <michael.d.kinney@intel.com> Reviewed-by: Jeff Fan <jeff.fan@intel.com> git-svn-id: https://svn.code.sf.net/p/edk2/code/trunk/edk2@18636 6f19259b-4bc3-4df7-8a09-765794883524
This commit is contained in:
Michael Kinney
mdkinney
parent
a39d509761
commit
1921695e64
|
|
@ -0,0 +1,198 @@
|
||||||
|
/** @file
|
||||||
|
Locate the entry point for the PEI Core
|
||||||
|
|
||||||
|
Copyright (c) 2008 - 2011, Intel Corporation. All rights reserved.<BR>
|
||||||
|
This program and the accompanying materials
|
||||||
|
are licensed and made available under the terms and conditions of the BSD License
|
||||||
|
which accompanies this distribution. The full text of the license may be found at
|
||||||
|
http://opensource.org/licenses/bsd-license.php
|
||||||
|
|
||||||
|
THE PROGRAM IS DISTRIBUTED UNDER THE BSD LICENSE ON AN "AS IS" BASIS,
|
||||||
|
WITHOUT WARRANTIES OR REPRESENTATIONS OF ANY KIND, EITHER EXPRESS OR IMPLIED.
|
||||||
|
|
||||||
|
**/
|
||||||
|
|
||||||
|
#include <PiPei.h>
|
||||||
|
#include <Library/BaseLib.h>
|
||||||
|
#include <Library/PeCoffGetEntryPointLib.h>
|
||||||
|
|
||||||
|
#include "SecMain.h"
|
||||||
|
|
||||||
|
/**
|
||||||
|
Find core image base.
|
||||||
|
|
||||||
|
@param BootFirmwareVolumePtr Point to the boot firmware volume.
|
||||||
|
@param SecCoreImageBase The base address of the SEC core image.
|
||||||
|
@param PeiCoreImageBase The base address of the PEI core image.
|
||||||
|
|
||||||
|
**/
|
||||||
|
EFI_STATUS
|
||||||
|
EFIAPI
|
||||||
|
FindImageBase (
|
||||||
|
IN EFI_FIRMWARE_VOLUME_HEADER *BootFirmwareVolumePtr,
|
||||||
|
OUT EFI_PHYSICAL_ADDRESS *SecCoreImageBase,
|
||||||
|
OUT EFI_PHYSICAL_ADDRESS *PeiCoreImageBase
|
||||||
|
)
|
||||||
|
{
|
||||||
|
EFI_PHYSICAL_ADDRESS CurrentAddress;
|
||||||
|
EFI_PHYSICAL_ADDRESS EndOfFirmwareVolume;
|
||||||
|
EFI_FFS_FILE_HEADER *File;
|
||||||
|
UINT32 Size;
|
||||||
|
EFI_PHYSICAL_ADDRESS EndOfFile;
|
||||||
|
EFI_COMMON_SECTION_HEADER *Section;
|
||||||
|
EFI_PHYSICAL_ADDRESS EndOfSection;
|
||||||
|
|
||||||
|
*SecCoreImageBase = 0;
|
||||||
|
*PeiCoreImageBase = 0;
|
||||||
|
|
||||||
|
CurrentAddress = (EFI_PHYSICAL_ADDRESS)(UINTN) BootFirmwareVolumePtr;
|
||||||
|
EndOfFirmwareVolume = CurrentAddress + BootFirmwareVolumePtr->FvLength;
|
||||||
|
|
||||||
|
//
|
||||||
|
// Loop through the FFS files in the Boot Firmware Volume
|
||||||
|
//
|
||||||
|
for (EndOfFile = CurrentAddress + BootFirmwareVolumePtr->HeaderLength; ; ) {
|
||||||
|
|
||||||
|
CurrentAddress = (EndOfFile + 7) & 0xfffffffffffffff8ULL;
|
||||||
|
if (CurrentAddress > EndOfFirmwareVolume) {
|
||||||
|
return EFI_NOT_FOUND;
|
||||||
|
}
|
||||||
|
|
||||||
|
File = (EFI_FFS_FILE_HEADER*)(UINTN) CurrentAddress;
|
||||||
|
if (IS_FFS_FILE2 (File)) {
|
||||||
|
Size = FFS_FILE2_SIZE (File);
|
||||||
|
if (Size <= 0x00FFFFFF) {
|
||||||
|
return EFI_NOT_FOUND;
|
||||||
|
}
|
||||||
|
} else {
|
||||||
|
Size = FFS_FILE_SIZE (File);
|
||||||
|
if (Size < sizeof (EFI_FFS_FILE_HEADER)) {
|
||||||
|
return EFI_NOT_FOUND;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
EndOfFile = CurrentAddress + Size;
|
||||||
|
if (EndOfFile > EndOfFirmwareVolume) {
|
||||||
|
return EFI_NOT_FOUND;
|
||||||
|
}
|
||||||
|
|
||||||
|
//
|
||||||
|
// Look for SEC Core / PEI Core files
|
||||||
|
//
|
||||||
|
if (File->Type != EFI_FV_FILETYPE_SECURITY_CORE &&
|
||||||
|
File->Type != EFI_FV_FILETYPE_PEI_CORE) {
|
||||||
|
continue;
|
||||||
|
}
|
||||||
|
|
||||||
|
//
|
||||||
|
// Loop through the FFS file sections within the FFS file
|
||||||
|
//
|
||||||
|
if (IS_FFS_FILE2 (File)) {
|
||||||
|
EndOfSection = (EFI_PHYSICAL_ADDRESS) (UINTN) ((UINT8 *) File + sizeof (EFI_FFS_FILE_HEADER2));
|
||||||
|
} else {
|
||||||
|
EndOfSection = (EFI_PHYSICAL_ADDRESS) (UINTN) ((UINT8 *) File + sizeof (EFI_FFS_FILE_HEADER));
|
||||||
|
}
|
||||||
|
for (;;) {
|
||||||
|
CurrentAddress = (EndOfSection + 3) & 0xfffffffffffffffcULL;
|
||||||
|
Section = (EFI_COMMON_SECTION_HEADER*)(UINTN) CurrentAddress;
|
||||||
|
|
||||||
|
if (IS_SECTION2 (Section)) {
|
||||||
|
Size = SECTION2_SIZE (Section);
|
||||||
|
if (Size <= 0x00FFFFFF) {
|
||||||
|
return EFI_NOT_FOUND;
|
||||||
|
}
|
||||||
|
} else {
|
||||||
|
Size = SECTION_SIZE (Section);
|
||||||
|
if (Size < sizeof (EFI_COMMON_SECTION_HEADER)) {
|
||||||
|
return EFI_NOT_FOUND;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
EndOfSection = CurrentAddress + Size;
|
||||||
|
if (EndOfSection > EndOfFile) {
|
||||||
|
return EFI_NOT_FOUND;
|
||||||
|
}
|
||||||
|
|
||||||
|
//
|
||||||
|
// Look for executable sections
|
||||||
|
//
|
||||||
|
if (Section->Type == EFI_SECTION_PE32 || Section->Type == EFI_SECTION_TE) {
|
||||||
|
if (File->Type == EFI_FV_FILETYPE_SECURITY_CORE) {
|
||||||
|
if (IS_SECTION2 (Section)) {
|
||||||
|
*SecCoreImageBase = (PHYSICAL_ADDRESS) (UINTN) ((UINT8 *) Section + sizeof (EFI_COMMON_SECTION_HEADER2));
|
||||||
|
} else {
|
||||||
|
*SecCoreImageBase = (PHYSICAL_ADDRESS) (UINTN) ((UINT8 *) Section + sizeof (EFI_COMMON_SECTION_HEADER));
|
||||||
|
}
|
||||||
|
} else {
|
||||||
|
if (IS_SECTION2 (Section)) {
|
||||||
|
*PeiCoreImageBase = (PHYSICAL_ADDRESS) (UINTN) ((UINT8 *) Section + sizeof (EFI_COMMON_SECTION_HEADER2));
|
||||||
|
} else {
|
||||||
|
*PeiCoreImageBase = (PHYSICAL_ADDRESS) (UINTN) ((UINT8 *) Section + sizeof (EFI_COMMON_SECTION_HEADER));
|
||||||
|
}
|
||||||
|
}
|
||||||
|
break;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
//
|
||||||
|
// Both SEC Core and PEI Core images found
|
||||||
|
//
|
||||||
|
if (*SecCoreImageBase != 0 && *PeiCoreImageBase != 0) {
|
||||||
|
return EFI_SUCCESS;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
/**
|
||||||
|
Find and return Pei Core entry point.
|
||||||
|
|
||||||
|
It also find SEC and PEI Core file debug information. It will report them if
|
||||||
|
remote debug is enabled.
|
||||||
|
|
||||||
|
@param BootFirmwareVolumePtr Point to the boot firmware volume.
|
||||||
|
@param PeiCoreEntryPoint The entry point of the PEI core.
|
||||||
|
|
||||||
|
**/
|
||||||
|
VOID
|
||||||
|
EFIAPI
|
||||||
|
FindAndReportEntryPoints (
|
||||||
|
IN EFI_FIRMWARE_VOLUME_HEADER *BootFirmwareVolumePtr,
|
||||||
|
OUT EFI_PEI_CORE_ENTRY_POINT *PeiCoreEntryPoint
|
||||||
|
)
|
||||||
|
{
|
||||||
|
EFI_STATUS Status;
|
||||||
|
EFI_PHYSICAL_ADDRESS SecCoreImageBase;
|
||||||
|
EFI_PHYSICAL_ADDRESS PeiCoreImageBase;
|
||||||
|
PE_COFF_LOADER_IMAGE_CONTEXT ImageContext;
|
||||||
|
|
||||||
|
//
|
||||||
|
// Find SEC Core and PEI Core image base
|
||||||
|
//
|
||||||
|
Status = FindImageBase (BootFirmwareVolumePtr, &SecCoreImageBase, &PeiCoreImageBase);
|
||||||
|
ASSERT_EFI_ERROR (Status);
|
||||||
|
|
||||||
|
ZeroMem ((VOID *) &ImageContext, sizeof (PE_COFF_LOADER_IMAGE_CONTEXT));
|
||||||
|
//
|
||||||
|
// Report SEC Core debug information when remote debug is enabled
|
||||||
|
//
|
||||||
|
ImageContext.ImageAddress = SecCoreImageBase;
|
||||||
|
ImageContext.PdbPointer = PeCoffLoaderGetPdbPointer ((VOID*) (UINTN) ImageContext.ImageAddress);
|
||||||
|
PeCoffLoaderRelocateImageExtraAction (&ImageContext);
|
||||||
|
|
||||||
|
//
|
||||||
|
// Report PEI Core debug information when remote debug is enabled
|
||||||
|
//
|
||||||
|
ImageContext.ImageAddress = PeiCoreImageBase;
|
||||||
|
ImageContext.PdbPointer = PeCoffLoaderGetPdbPointer ((VOID*) (UINTN) ImageContext.ImageAddress);
|
||||||
|
PeCoffLoaderRelocateImageExtraAction (&ImageContext);
|
||||||
|
|
||||||
|
//
|
||||||
|
// Find PEI Core entry point
|
||||||
|
//
|
||||||
|
Status = PeCoffLoaderGetEntryPoint ((VOID *) (UINTN) PeiCoreImageBase, (VOID**) PeiCoreEntryPoint);
|
||||||
|
if (EFI_ERROR (Status)) {
|
||||||
|
*PeiCoreEntryPoint = 0;
|
||||||
|
}
|
||||||
|
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
|
@ -0,0 +1,106 @@
|
||||||
|
;------------------------------------------------------------------------------
|
||||||
|
;
|
||||||
|
; Copyright (c) 2014, Intel Corporation. All rights reserved.<BR>
|
||||||
|
; This program and the accompanying materials
|
||||||
|
; are licensed and made available under the terms and conditions of the BSD License
|
||||||
|
; which accompanies this distribution. The full text of the license may be found at
|
||||||
|
; http://opensource.org/licenses/bsd-license.php.
|
||||||
|
;
|
||||||
|
; THE PROGRAM IS DISTRIBUTED UNDER THE BSD LICENSE ON AN "AS IS" BASIS,
|
||||||
|
; WITHOUT WARRANTIES OR REPRESENTATIONS OF ANY KIND, EITHER EXPRESS OR IMPLIED.
|
||||||
|
;
|
||||||
|
; Module Name:
|
||||||
|
;
|
||||||
|
; ResetVec.asm
|
||||||
|
;
|
||||||
|
; Abstract:
|
||||||
|
;
|
||||||
|
; Reset Vector Data structure
|
||||||
|
; This structure is located at 0xFFFFFFC0
|
||||||
|
;
|
||||||
|
;------------------------------------------------------------------------------
|
||||||
|
|
||||||
|
.model tiny
|
||||||
|
.686p
|
||||||
|
.stack 0h
|
||||||
|
.code
|
||||||
|
|
||||||
|
;
|
||||||
|
; The layout of this file is fixed. The build tool makes assumption of the layout.
|
||||||
|
;
|
||||||
|
|
||||||
|
ORG 0h
|
||||||
|
;
|
||||||
|
; Reserved
|
||||||
|
;
|
||||||
|
ReservedData DD 0eeeeeeeeh, 0eeeeeeeeh
|
||||||
|
|
||||||
|
ORG 10h
|
||||||
|
;
|
||||||
|
; This is located at 0xFFFFFFD0h
|
||||||
|
;
|
||||||
|
mov di, "AP"
|
||||||
|
jmp ApStartup
|
||||||
|
|
||||||
|
ORG 20h
|
||||||
|
;
|
||||||
|
; Pointer to the entry point of the PEI core
|
||||||
|
; It is located at 0xFFFFFFE0, and is fixed up by some build tool
|
||||||
|
; So if the value 8..1 appears in the final FD image, tool failure occurs.
|
||||||
|
;
|
||||||
|
PeiCoreEntryPoint DD 87654321h
|
||||||
|
|
||||||
|
;
|
||||||
|
; This is the handler for all kinds of exceptions. Since it's for debugging
|
||||||
|
; purpose only, nothing except a dead loop would be done here. Developers could
|
||||||
|
; analyze the cause of the exception if a debugger had been attached.
|
||||||
|
;
|
||||||
|
InterruptHandler PROC
|
||||||
|
jmp $
|
||||||
|
iret
|
||||||
|
InterruptHandler ENDP
|
||||||
|
|
||||||
|
ORG 30h
|
||||||
|
;
|
||||||
|
; For IA32, the reset vector must be at 0xFFFFFFF0, i.e., 4G-16 byte
|
||||||
|
; Execution starts here upon power-on/platform-reset.
|
||||||
|
;
|
||||||
|
ResetHandler:
|
||||||
|
nop
|
||||||
|
nop
|
||||||
|
ApStartup:
|
||||||
|
;
|
||||||
|
; Jmp Rel16 instruction
|
||||||
|
; Use machine code directly in case of the assembler optimization
|
||||||
|
; SEC entry point relative address will be fixed up by some build tool.
|
||||||
|
;
|
||||||
|
; Typically, SEC entry point is the function _ModuleEntryPoint() defined in
|
||||||
|
; SecEntry.asm
|
||||||
|
;
|
||||||
|
DB 0e9h
|
||||||
|
DW -3
|
||||||
|
|
||||||
|
|
||||||
|
ORG 38h
|
||||||
|
;
|
||||||
|
; Ap reset vector segment address is at 0xFFFFFFF8
|
||||||
|
; This will be fixed up by some build tool,
|
||||||
|
; so if the value 1..8 appears in the final FD image,
|
||||||
|
; tool failure occurs
|
||||||
|
;
|
||||||
|
ApSegAddress dd 12345678h
|
||||||
|
|
||||||
|
ORG 3ch
|
||||||
|
;
|
||||||
|
; BFV Base is at 0xFFFFFFFC
|
||||||
|
; This will be fixed up by some build tool,
|
||||||
|
; so if the value 1..8 appears in the final FD image,
|
||||||
|
; tool failure occurs.
|
||||||
|
;
|
||||||
|
BfvBase DD 12345678h
|
||||||
|
|
||||||
|
;
|
||||||
|
; Nothing can go here, otherwise the layout of this file would change.
|
||||||
|
;
|
||||||
|
|
||||||
|
END
|
||||||
|
|
@ -0,0 +1,103 @@
|
||||||
|
;------------------------------------------------------------------------------
|
||||||
|
;
|
||||||
|
; Copyright (c) 2014, Intel Corporation. All rights reserved.<BR>
|
||||||
|
; This program and the accompanying materials
|
||||||
|
; are licensed and made available under the terms and conditions of the BSD License
|
||||||
|
; which accompanies this distribution. The full text of the license may be found at
|
||||||
|
; http://opensource.org/licenses/bsd-license.php.
|
||||||
|
;
|
||||||
|
; THE PROGRAM IS DISTRIBUTED UNDER THE BSD LICENSE ON AN "AS IS" BASIS,
|
||||||
|
; WITHOUT WARRANTIES OR REPRESENTATIONS OF ANY KIND, EITHER EXPRESS OR IMPLIED.
|
||||||
|
;
|
||||||
|
; Module Name:
|
||||||
|
;
|
||||||
|
; ResetVec.nasmb
|
||||||
|
;
|
||||||
|
; Abstract:
|
||||||
|
;
|
||||||
|
; Reset Vector Data structure
|
||||||
|
; This structure is located at 0xFFFFFFC0
|
||||||
|
;
|
||||||
|
;------------------------------------------------------------------------------
|
||||||
|
|
||||||
|
; .stack 0x0
|
||||||
|
; SECTION .text
|
||||||
|
USE16
|
||||||
|
|
||||||
|
;
|
||||||
|
; The layout of this file is fixed. The build tool makes assumption of the layout.
|
||||||
|
;
|
||||||
|
|
||||||
|
ORG 0h
|
||||||
|
;
|
||||||
|
; Reserved
|
||||||
|
;
|
||||||
|
ReservedData: DD 0eeeeeeeeh, 0eeeeeeeeh
|
||||||
|
|
||||||
|
TIMES 0x10-($-$$) DB 0
|
||||||
|
;
|
||||||
|
; This is located at 0xFFFFFFD0h
|
||||||
|
;
|
||||||
|
mov di, "PA"
|
||||||
|
jmp ApStartup
|
||||||
|
|
||||||
|
TIMES 0x20-($-$$) DB 0
|
||||||
|
;
|
||||||
|
; Pointer to the entry point of the PEI core
|
||||||
|
; It is located at 0xFFFFFFE0, and is fixed up by some build tool
|
||||||
|
; So if the value 8..1 appears in the final FD image, tool failure occurs.
|
||||||
|
;
|
||||||
|
PeiCoreEntryPoint: DD 87654321h
|
||||||
|
|
||||||
|
;
|
||||||
|
; This is the handler for all kinds of exceptions. Since it's for debugging
|
||||||
|
; purpose only, nothing except a dead loop would be done here. Developers could
|
||||||
|
; analyze the cause of the exception if a debugger had been attached.
|
||||||
|
;
|
||||||
|
global ASM_PFX(InterruptHandler)
|
||||||
|
ASM_PFX(InterruptHandler):
|
||||||
|
jmp $
|
||||||
|
iret
|
||||||
|
|
||||||
|
TIMES 0x30-($-$$) DB 0
|
||||||
|
;
|
||||||
|
; For IA32, the reset vector must be at 0xFFFFFFF0, i.e., 4G-16 byte
|
||||||
|
; Execution starts here upon power-on/platform-reset.
|
||||||
|
;
|
||||||
|
ResetHandler:
|
||||||
|
nop
|
||||||
|
nop
|
||||||
|
ApStartup:
|
||||||
|
;
|
||||||
|
; Jmp Rel16 instruction
|
||||||
|
; Use machine code directly in case of the assembler optimization
|
||||||
|
; SEC entry point relative address will be fixed up by some build tool.
|
||||||
|
;
|
||||||
|
; Typically, SEC entry point is the function _ModuleEntryPoint() defined in
|
||||||
|
; SecEntry.asm
|
||||||
|
;
|
||||||
|
DB 0e9h
|
||||||
|
DW -3
|
||||||
|
|
||||||
|
|
||||||
|
TIMES 0x38-($-$$) DB 0
|
||||||
|
;
|
||||||
|
; Ap reset vector segment address is at 0xFFFFFFF8
|
||||||
|
; This will be fixed up by some build tool,
|
||||||
|
; so if the value 1..8 appears in the final FD image,
|
||||||
|
; tool failure occurs
|
||||||
|
;
|
||||||
|
ApSegAddress: dd 12345678h
|
||||||
|
|
||||||
|
TIMES 0x3c-($-$$) DB 0
|
||||||
|
;
|
||||||
|
; BFV Base is at 0xFFFFFFFC
|
||||||
|
; This will be fixed up by some build tool,
|
||||||
|
; so if the value 1..8 appears in the final FD image,
|
||||||
|
; tool failure occurs.
|
||||||
|
;
|
||||||
|
BfvBase: DD 12345678h
|
||||||
|
|
||||||
|
;
|
||||||
|
; Nothing can go here, otherwise the layout of this file would change.
|
||||||
|
;
|
||||||
|
|
@ -0,0 +1,72 @@
|
||||||
|
## @file
|
||||||
|
# SecCore module that implements the SEC phase.
|
||||||
|
#
|
||||||
|
# This is the first module taking control of the platform upon power-on/reset.
|
||||||
|
# It implements the first phase of the security phase. The entry point function is
|
||||||
|
# _ModuleEntryPoint in PlatformSecLib. The entry point function will switch to
|
||||||
|
# protected mode, setup flat memory model, enable temporary memory and
|
||||||
|
# call into SecStartup().
|
||||||
|
#
|
||||||
|
# Copyright (c) 2006 - 2015, Intel Corporation. All rights reserved.<BR>
|
||||||
|
# This program and the accompanying materials
|
||||||
|
# are licensed and made available under the terms and conditions of the BSD License
|
||||||
|
# which accompanies this distribution. The full text of the license may be found at
|
||||||
|
# http://opensource.org/licenses/bsd-license.php
|
||||||
|
#
|
||||||
|
# THE PROGRAM IS DISTRIBUTED UNDER THE BSD LICENSE ON AN "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR REPRESENTATIONS OF ANY KIND, EITHER EXPRESS OR IMPLIED.
|
||||||
|
#
|
||||||
|
##
|
||||||
|
|
||||||
|
[Defines]
|
||||||
|
INF_VERSION = 0x00010005
|
||||||
|
BASE_NAME = SecCore
|
||||||
|
MODULE_UNI_FILE = SecCore.uni
|
||||||
|
FILE_GUID = 1BA0062E-C779-4582-8566-336AE8F78F09
|
||||||
|
MODULE_TYPE = SEC
|
||||||
|
VERSION_STRING = 1.0
|
||||||
|
|
||||||
|
|
||||||
|
#
|
||||||
|
# The following information is for reference only and not required by the build tools.
|
||||||
|
#
|
||||||
|
# VALID_ARCHITECTURES = IA32 X64 IPF EBC
|
||||||
|
#
|
||||||
|
|
||||||
|
[Sources]
|
||||||
|
SecMain.c
|
||||||
|
SecMain.h
|
||||||
|
FindPeiCore.c
|
||||||
|
|
||||||
|
[Sources.IA32]
|
||||||
|
Ia32/ResetVec.asm16 | MSFT
|
||||||
|
Ia32/ResetVec.asm16 | INTEL
|
||||||
|
Ia32/ResetVec.nasmb | GCC
|
||||||
|
|
||||||
|
[Packages]
|
||||||
|
MdePkg/MdePkg.dec
|
||||||
|
MdeModulePkg/MdeModulePkg.dec
|
||||||
|
UefiCpuPkg/UefiCpuPkg.dec
|
||||||
|
|
||||||
|
[LibraryClasses]
|
||||||
|
BaseMemoryLib
|
||||||
|
DebugLib
|
||||||
|
BaseLib
|
||||||
|
PlatformSecLib
|
||||||
|
PcdLib
|
||||||
|
DebugAgentLib
|
||||||
|
UefiCpuLib
|
||||||
|
PeCoffGetEntryPointLib
|
||||||
|
PeCoffExtraActionLib
|
||||||
|
CpuExceptionHandlerLib
|
||||||
|
ReportStatusCodeLib
|
||||||
|
|
||||||
|
[Ppis]
|
||||||
|
gEfiSecPlatformInformationPpiGuid ## PRODUCES
|
||||||
|
gEfiTemporaryRamDonePpiGuid ## PRODUCES
|
||||||
|
|
||||||
|
[Pcd]
|
||||||
|
gUefiCpuPkgTokenSpaceGuid.PcdPeiTemporaryRamStackSize ## CONSUMES
|
||||||
|
|
||||||
|
[UserExtensions.TianoCore."ExtraFiles"]
|
||||||
|
SecCoreExtra.uni
|
||||||
Binary file not shown.
Binary file not shown.
|
|
@ -0,0 +1,295 @@
|
||||||
|
/** @file
|
||||||
|
C functions in SEC
|
||||||
|
|
||||||
|
Copyright (c) 2008 - 2015, Intel Corporation. All rights reserved.<BR>
|
||||||
|
This program and the accompanying materials
|
||||||
|
are licensed and made available under the terms and conditions of the BSD License
|
||||||
|
which accompanies this distribution. The full text of the license may be found at
|
||||||
|
http://opensource.org/licenses/bsd-license.php
|
||||||
|
|
||||||
|
THE PROGRAM IS DISTRIBUTED UNDER THE BSD LICENSE ON AN "AS IS" BASIS,
|
||||||
|
WITHOUT WARRANTIES OR REPRESENTATIONS OF ANY KIND, EITHER EXPRESS OR IMPLIED.
|
||||||
|
|
||||||
|
**/
|
||||||
|
|
||||||
|
#include "SecMain.h"
|
||||||
|
|
||||||
|
EFI_PEI_TEMPORARY_RAM_DONE_PPI gSecTemporaryRamDonePpi = {
|
||||||
|
SecTemporaryRamDone
|
||||||
|
};
|
||||||
|
|
||||||
|
EFI_SEC_PLATFORM_INFORMATION_PPI mSecPlatformInformationPpi = { SecPlatformInformation };
|
||||||
|
|
||||||
|
EFI_PEI_PPI_DESCRIPTOR mPeiSecPlatformInformationPpi[] = {
|
||||||
|
{
|
||||||
|
EFI_PEI_PPI_DESCRIPTOR_PPI,
|
||||||
|
&gEfiTemporaryRamDonePpiGuid,
|
||||||
|
&gSecTemporaryRamDonePpi
|
||||||
|
},
|
||||||
|
{
|
||||||
|
(EFI_PEI_PPI_DESCRIPTOR_PPI | EFI_PEI_PPI_DESCRIPTOR_TERMINATE_LIST),
|
||||||
|
&gEfiSecPlatformInformationPpiGuid,
|
||||||
|
&mSecPlatformInformationPpi
|
||||||
|
}
|
||||||
|
};
|
||||||
|
|
||||||
|
//
|
||||||
|
// These are IDT entries pointing to 10:FFFFFFE4h.
|
||||||
|
//
|
||||||
|
UINT64 mIdtEntryTemplate = 0xffff8e000010ffe4ULL;
|
||||||
|
|
||||||
|
/**
|
||||||
|
Caller provided function to be invoked at the end of InitializeDebugAgent().
|
||||||
|
|
||||||
|
Entry point to the C language phase of SEC. After the SEC assembly
|
||||||
|
code has initialized some temporary memory and set up the stack,
|
||||||
|
the control is transferred to this function.
|
||||||
|
|
||||||
|
@param[in] Context The first input parameter of InitializeDebugAgent().
|
||||||
|
|
||||||
|
**/
|
||||||
|
VOID
|
||||||
|
EFIAPI
|
||||||
|
SecStartupPhase2(
|
||||||
|
IN VOID *Context
|
||||||
|
);
|
||||||
|
|
||||||
|
/**
|
||||||
|
|
||||||
|
Entry point to the C language phase of SEC. After the SEC assembly
|
||||||
|
code has initialized some temporary memory and set up the stack,
|
||||||
|
the control is transferred to this function.
|
||||||
|
|
||||||
|
|
||||||
|
@param SizeOfRam Size of the temporary memory available for use.
|
||||||
|
@param TempRamBase Base address of temporary ram
|
||||||
|
@param BootFirmwareVolume Base address of the Boot Firmware Volume.
|
||||||
|
**/
|
||||||
|
VOID
|
||||||
|
EFIAPI
|
||||||
|
SecStartup (
|
||||||
|
IN UINT32 SizeOfRam,
|
||||||
|
IN UINT32 TempRamBase,
|
||||||
|
IN VOID *BootFirmwareVolume
|
||||||
|
)
|
||||||
|
{
|
||||||
|
EFI_SEC_PEI_HAND_OFF SecCoreData;
|
||||||
|
IA32_DESCRIPTOR IdtDescriptor;
|
||||||
|
SEC_IDT_TABLE IdtTableInStack;
|
||||||
|
UINT32 Index;
|
||||||
|
UINT32 PeiStackSize;
|
||||||
|
EFI_STATUS Status;
|
||||||
|
|
||||||
|
//
|
||||||
|
// Report Status Code to indicate entering SEC core
|
||||||
|
//
|
||||||
|
REPORT_STATUS_CODE (
|
||||||
|
EFI_PROGRESS_CODE,
|
||||||
|
EFI_SOFTWARE_SEC | EFI_SW_SEC_PC_ENTRY_POINT
|
||||||
|
);
|
||||||
|
|
||||||
|
PeiStackSize = PcdGet32 (PcdPeiTemporaryRamStackSize);
|
||||||
|
if (PeiStackSize == 0) {
|
||||||
|
PeiStackSize = (SizeOfRam >> 1);
|
||||||
|
}
|
||||||
|
|
||||||
|
ASSERT (PeiStackSize < SizeOfRam);
|
||||||
|
|
||||||
|
//
|
||||||
|
// Process all libraries constructor function linked to SecCore.
|
||||||
|
//
|
||||||
|
ProcessLibraryConstructorList ();
|
||||||
|
|
||||||
|
//
|
||||||
|
// Initialize floating point operating environment
|
||||||
|
// to be compliant with UEFI spec.
|
||||||
|
//
|
||||||
|
InitializeFloatingPointUnits ();
|
||||||
|
|
||||||
|
// |-------------------|---->
|
||||||
|
// |IDT Table |
|
||||||
|
// |-------------------|
|
||||||
|
// |PeiService Pointer | PeiStackSize
|
||||||
|
// |-------------------|
|
||||||
|
// | |
|
||||||
|
// | Stack |
|
||||||
|
// |-------------------|---->
|
||||||
|
// | |
|
||||||
|
// | |
|
||||||
|
// | Heap | PeiTemporayRamSize
|
||||||
|
// | |
|
||||||
|
// | |
|
||||||
|
// |-------------------|----> TempRamBase
|
||||||
|
|
||||||
|
IdtTableInStack.PeiService = 0;
|
||||||
|
for (Index = 0; Index < SEC_IDT_ENTRY_COUNT; Index ++) {
|
||||||
|
CopyMem ((VOID*)&IdtTableInStack.IdtTable[Index], (VOID*)&mIdtEntryTemplate, sizeof (UINT64));
|
||||||
|
}
|
||||||
|
|
||||||
|
IdtDescriptor.Base = (UINTN) &IdtTableInStack.IdtTable;
|
||||||
|
IdtDescriptor.Limit = (UINT16)(sizeof (IdtTableInStack.IdtTable) - 1);
|
||||||
|
|
||||||
|
AsmWriteIdtr (&IdtDescriptor);
|
||||||
|
|
||||||
|
//
|
||||||
|
// Setup the default exception handlers
|
||||||
|
//
|
||||||
|
Status = InitializeCpuExceptionHandlers (NULL);
|
||||||
|
ASSERT_EFI_ERROR (Status);
|
||||||
|
|
||||||
|
//
|
||||||
|
// Update the base address and length of Pei temporary memory
|
||||||
|
//
|
||||||
|
SecCoreData.DataSize = (UINT16) sizeof (EFI_SEC_PEI_HAND_OFF);
|
||||||
|
SecCoreData.BootFirmwareVolumeBase = BootFirmwareVolume;
|
||||||
|
SecCoreData.BootFirmwareVolumeSize = (UINTN)(0x100000000ULL - (UINTN) BootFirmwareVolume);
|
||||||
|
SecCoreData.TemporaryRamBase = (VOID*)(UINTN) TempRamBase;
|
||||||
|
SecCoreData.TemporaryRamSize = SizeOfRam;
|
||||||
|
SecCoreData.PeiTemporaryRamBase = SecCoreData.TemporaryRamBase;
|
||||||
|
SecCoreData.PeiTemporaryRamSize = SizeOfRam - PeiStackSize;
|
||||||
|
SecCoreData.StackBase = (VOID*)(UINTN)(TempRamBase + SecCoreData.PeiTemporaryRamSize);
|
||||||
|
SecCoreData.StackSize = PeiStackSize;
|
||||||
|
|
||||||
|
//
|
||||||
|
// Initialize Debug Agent to support source level debug in SEC/PEI phases before memory ready.
|
||||||
|
//
|
||||||
|
InitializeDebugAgent (DEBUG_AGENT_INIT_PREMEM_SEC, &SecCoreData, SecStartupPhase2);
|
||||||
|
}
|
||||||
|
|
||||||
|
/**
|
||||||
|
Caller provided function to be invoked at the end of InitializeDebugAgent().
|
||||||
|
|
||||||
|
Entry point to the C language phase of SEC. After the SEC assembly
|
||||||
|
code has initialized some temporary memory and set up the stack,
|
||||||
|
the control is transferred to this function.
|
||||||
|
|
||||||
|
@param[in] Context The first input parameter of InitializeDebugAgent().
|
||||||
|
|
||||||
|
**/
|
||||||
|
VOID
|
||||||
|
EFIAPI
|
||||||
|
SecStartupPhase2(
|
||||||
|
IN VOID *Context
|
||||||
|
)
|
||||||
|
{
|
||||||
|
EFI_SEC_PEI_HAND_OFF *SecCoreData;
|
||||||
|
EFI_PEI_PPI_DESCRIPTOR *PpiList;
|
||||||
|
UINT32 Index;
|
||||||
|
EFI_PEI_PPI_DESCRIPTOR *AllSecPpiList;
|
||||||
|
EFI_PEI_CORE_ENTRY_POINT PeiCoreEntryPoint;
|
||||||
|
|
||||||
|
SecCoreData = (EFI_SEC_PEI_HAND_OFF *) Context;
|
||||||
|
AllSecPpiList = (EFI_PEI_PPI_DESCRIPTOR *) SecCoreData->PeiTemporaryRamBase;
|
||||||
|
//
|
||||||
|
// Find Pei Core entry point. It will report SEC and Pei Core debug information if remote debug
|
||||||
|
// is enabled.
|
||||||
|
//
|
||||||
|
FindAndReportEntryPoints ((EFI_FIRMWARE_VOLUME_HEADER *) SecCoreData->BootFirmwareVolumeBase, &PeiCoreEntryPoint);
|
||||||
|
if (PeiCoreEntryPoint == NULL)
|
||||||
|
{
|
||||||
|
CpuDeadLoop ();
|
||||||
|
}
|
||||||
|
|
||||||
|
//
|
||||||
|
// Perform platform specific initialization before entering PeiCore.
|
||||||
|
//
|
||||||
|
PpiList = SecPlatformMain (SecCoreData);
|
||||||
|
if (PpiList != NULL) {
|
||||||
|
//
|
||||||
|
// Remove the terminal flag from the terminal PPI
|
||||||
|
//
|
||||||
|
CopyMem (AllSecPpiList, mPeiSecPlatformInformationPpi, sizeof (mPeiSecPlatformInformationPpi));
|
||||||
|
Index = sizeof (mPeiSecPlatformInformationPpi) / sizeof (EFI_PEI_PPI_DESCRIPTOR) - 1;
|
||||||
|
AllSecPpiList[Index].Flags = AllSecPpiList[Index].Flags & (~EFI_PEI_PPI_DESCRIPTOR_TERMINATE_LIST);
|
||||||
|
|
||||||
|
//
|
||||||
|
// Append the platform additional PPI list
|
||||||
|
//
|
||||||
|
Index += 1;
|
||||||
|
while (((PpiList->Flags & EFI_PEI_PPI_DESCRIPTOR_TERMINATE_LIST) != EFI_PEI_PPI_DESCRIPTOR_TERMINATE_LIST)) {
|
||||||
|
CopyMem (&AllSecPpiList[Index], PpiList, sizeof (EFI_PEI_PPI_DESCRIPTOR));
|
||||||
|
Index++;
|
||||||
|
PpiList++;
|
||||||
|
}
|
||||||
|
|
||||||
|
//
|
||||||
|
// Add the terminal PPI
|
||||||
|
//
|
||||||
|
CopyMem (&AllSecPpiList[Index ++], PpiList, sizeof (EFI_PEI_PPI_DESCRIPTOR));
|
||||||
|
|
||||||
|
//
|
||||||
|
// Set PpiList to the total PPI
|
||||||
|
//
|
||||||
|
PpiList = AllSecPpiList;
|
||||||
|
|
||||||
|
//
|
||||||
|
// Adjust PEI TEMP RAM Range.
|
||||||
|
//
|
||||||
|
ASSERT (SecCoreData->PeiTemporaryRamSize > Index * sizeof (EFI_PEI_PPI_DESCRIPTOR));
|
||||||
|
SecCoreData->PeiTemporaryRamBase = (VOID *)((UINTN) SecCoreData->PeiTemporaryRamBase + Index * sizeof (EFI_PEI_PPI_DESCRIPTOR));
|
||||||
|
SecCoreData->PeiTemporaryRamSize = SecCoreData->PeiTemporaryRamSize - Index * sizeof (EFI_PEI_PPI_DESCRIPTOR);
|
||||||
|
} else {
|
||||||
|
//
|
||||||
|
// No addition PPI, PpiList directly point to the common PPI list.
|
||||||
|
//
|
||||||
|
PpiList = &mPeiSecPlatformInformationPpi[0];
|
||||||
|
}
|
||||||
|
|
||||||
|
//
|
||||||
|
// Report Status Code to indicate transferring to PEI core
|
||||||
|
//
|
||||||
|
REPORT_STATUS_CODE (
|
||||||
|
EFI_PROGRESS_CODE,
|
||||||
|
EFI_SOFTWARE_SEC | EFI_SW_SEC_PC_HANDOFF_TO_NEXT
|
||||||
|
);
|
||||||
|
|
||||||
|
//
|
||||||
|
// Transfer the control to the PEI core
|
||||||
|
//
|
||||||
|
ASSERT (PeiCoreEntryPoint != NULL);
|
||||||
|
(*PeiCoreEntryPoint) (SecCoreData, PpiList);
|
||||||
|
|
||||||
|
//
|
||||||
|
// Should not come here.
|
||||||
|
//
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
|
||||||
|
/**
|
||||||
|
TemporaryRamDone() disables the use of Temporary RAM. If present, this service is invoked
|
||||||
|
by the PEI Foundation after the EFI_PEI_PERMANANT_MEMORY_INSTALLED_PPI is installed.
|
||||||
|
|
||||||
|
@retval EFI_SUCCESS Use of Temporary RAM was disabled.
|
||||||
|
@retval EFI_INVALID_PARAMETER Temporary RAM could not be disabled.
|
||||||
|
|
||||||
|
**/
|
||||||
|
EFI_STATUS
|
||||||
|
EFIAPI
|
||||||
|
SecTemporaryRamDone (
|
||||||
|
VOID
|
||||||
|
)
|
||||||
|
{
|
||||||
|
BOOLEAN State;
|
||||||
|
|
||||||
|
//
|
||||||
|
// Migrate DebugAgentContext.
|
||||||
|
//
|
||||||
|
InitializeDebugAgent (DEBUG_AGENT_INIT_POSTMEM_SEC, NULL, NULL);
|
||||||
|
|
||||||
|
//
|
||||||
|
// Disable interrupts and save current interrupt state
|
||||||
|
//
|
||||||
|
State = SaveAndDisableInterrupts();
|
||||||
|
|
||||||
|
//
|
||||||
|
// Disable Temporary RAM after Stack and Heap have been migrated at this point.
|
||||||
|
//
|
||||||
|
SecPlatformDisableTemporaryMemory ();
|
||||||
|
|
||||||
|
//
|
||||||
|
// Restore original interrupt state
|
||||||
|
//
|
||||||
|
SetInterruptState (State);
|
||||||
|
|
||||||
|
return EFI_SUCCESS;
|
||||||
|
}
|
||||||
|
|
@ -0,0 +1,109 @@
|
||||||
|
/** @file
|
||||||
|
Master header file for SecCore.
|
||||||
|
|
||||||
|
Copyright (c) 2008 - 2013, Intel Corporation. All rights reserved.<BR>
|
||||||
|
This program and the accompanying materials
|
||||||
|
are licensed and made available under the terms and conditions of the BSD License
|
||||||
|
which accompanies this distribution. The full text of the license may be found at
|
||||||
|
http://opensource.org/licenses/bsd-license.php
|
||||||
|
|
||||||
|
THE PROGRAM IS DISTRIBUTED UNDER THE BSD LICENSE ON AN "AS IS" BASIS,
|
||||||
|
WITHOUT WARRANTIES OR REPRESENTATIONS OF ANY KIND, EITHER EXPRESS OR IMPLIED.
|
||||||
|
|
||||||
|
**/
|
||||||
|
|
||||||
|
#ifndef _SEC_CORE_H_
|
||||||
|
#define _SEC_CORE_H_
|
||||||
|
|
||||||
|
#include <PiPei.h>
|
||||||
|
|
||||||
|
#include <Ppi/SecPlatformInformation.h>
|
||||||
|
#include <Ppi/TemporaryRamDone.h>
|
||||||
|
|
||||||
|
#include <Library/BaseLib.h>
|
||||||
|
#include <Library/DebugLib.h>
|
||||||
|
#include <Library/PcdLib.h>
|
||||||
|
#include <Library/BaseMemoryLib.h>
|
||||||
|
#include <Library/PlatformSecLib.h>
|
||||||
|
#include <Library/UefiCpuLib.h>
|
||||||
|
#include <Library/PeCoffGetEntryPointLib.h>
|
||||||
|
#include <Library/PeCoffExtraActionLib.h>
|
||||||
|
#include <Library/DebugAgentLib.h>
|
||||||
|
#include <Library/CpuExceptionHandlerLib.h>
|
||||||
|
#include <Library/ReportStatusCodeLib.h>
|
||||||
|
|
||||||
|
|
||||||
|
#define SEC_IDT_ENTRY_COUNT 34
|
||||||
|
|
||||||
|
typedef struct _SEC_IDT_TABLE {
|
||||||
|
//
|
||||||
|
// Reserved 8 bytes preceding IDT to store EFI_PEI_SERVICES**, since IDT base
|
||||||
|
// address should be 8-byte alignment.
|
||||||
|
// Note: For IA32, only the 4 bytes immediately preceding IDT is used to store
|
||||||
|
// EFI_PEI_SERVICES**
|
||||||
|
//
|
||||||
|
UINT64 PeiService;
|
||||||
|
UINT64 IdtTable[SEC_IDT_ENTRY_COUNT];
|
||||||
|
} SEC_IDT_TABLE;
|
||||||
|
|
||||||
|
/**
|
||||||
|
TemporaryRamDone() disables the use of Temporary RAM. If present, this service is invoked
|
||||||
|
by the PEI Foundation after the EFI_PEI_PERMANANT_MEMORY_INSTALLED_PPI is installed.
|
||||||
|
|
||||||
|
@retval EFI_SUCCESS Use of Temporary RAM was disabled.
|
||||||
|
@retval EFI_INVALID_PARAMETER Temporary RAM could not be disabled.
|
||||||
|
|
||||||
|
**/
|
||||||
|
EFI_STATUS
|
||||||
|
EFIAPI
|
||||||
|
SecTemporaryRamDone (
|
||||||
|
VOID
|
||||||
|
);
|
||||||
|
|
||||||
|
/**
|
||||||
|
Entry point to the C language phase of SEC. After the SEC assembly
|
||||||
|
code has initialized some temporary memory and set up the stack,
|
||||||
|
the control is transferred to this function.
|
||||||
|
|
||||||
|
@param SizeOfRam Size of the temporary memory available for use.
|
||||||
|
@param TempRamBase Base address of temporary ram
|
||||||
|
@param BootFirmwareVolume Base address of the Boot Firmware Volume.
|
||||||
|
**/
|
||||||
|
VOID
|
||||||
|
EFIAPI
|
||||||
|
SecStartup (
|
||||||
|
IN UINT32 SizeOfRam,
|
||||||
|
IN UINT32 TempRamBase,
|
||||||
|
IN VOID *BootFirmwareVolume
|
||||||
|
);
|
||||||
|
|
||||||
|
/**
|
||||||
|
Find and return Pei Core entry point.
|
||||||
|
|
||||||
|
It also find SEC and PEI Core file debug information. It will report them if
|
||||||
|
remote debug is enabled.
|
||||||
|
|
||||||
|
@param BootFirmwareVolumePtr Point to the boot firmware volume.
|
||||||
|
@param PeiCoreEntryPoint Point to the PEI core entry point.
|
||||||
|
|
||||||
|
**/
|
||||||
|
VOID
|
||||||
|
EFIAPI
|
||||||
|
FindAndReportEntryPoints (
|
||||||
|
IN EFI_FIRMWARE_VOLUME_HEADER *BootFirmwareVolumePtr,
|
||||||
|
OUT EFI_PEI_CORE_ENTRY_POINT *PeiCoreEntryPoint
|
||||||
|
);
|
||||||
|
|
||||||
|
/**
|
||||||
|
Auto-generated function that calls the library constructors for all of the module's
|
||||||
|
dependent libraries. This function must be called by the SEC Core once a stack has
|
||||||
|
been established.
|
||||||
|
|
||||||
|
**/
|
||||||
|
VOID
|
||||||
|
EFIAPI
|
||||||
|
ProcessLibraryConstructorList (
|
||||||
|
VOID
|
||||||
|
);
|
||||||
|
|
||||||
|
#endif
|
||||||
Loading…
Reference in New Issue