From: Sascha Hauer <s.hauer@pengutronix.de>
To: "open list:BAREBOX" <barebox@lists.infradead.org>
Subject: [PATCH 04/13] ARM: k3: r5: add proper error handling
Date: Fri, 28 Feb 2025 08:16:52 +0100 [thread overview]
Message-ID: <20250228-am625-secure-v1-4-4002488ff5ed@pengutronix.de> (raw)
In-Reply-To: <20250228-am625-secure-v1-0-4002488ff5ed@pengutronix.de>
Add missing error handling in the image loading code. Properly check for
errors and panic when mandatory binaries are missing instead of blindly
continuing.
Signed-off-by: Sascha Hauer <s.hauer@pengutronix.de>
---
arch/arm/mach-k3/r5.c | 57 ++++++++++++++++++++++++++++-----------------------
1 file changed, 31 insertions(+), 26 deletions(-)
diff --git a/arch/arm/mach-k3/r5.c b/arch/arm/mach-k3/r5.c
index 2418e9ae73..e12c888afa 100644
--- a/arch/arm/mach-k3/r5.c
+++ b/arch/arm/mach-k3/r5.c
@@ -283,7 +283,7 @@ static int load_fip(const char *filename, off_t offset)
return 0;
}
-static void do_dfu(void)
+static int do_dfu(void)
{
struct usbgadget_funcs funcs = {};
int ret;
@@ -293,37 +293,24 @@ static void do_dfu(void)
funcs.dfu_opts = "/fip.img(fip)cs";
ret = usbgadget_prepare_register(&funcs);
- if (ret)
- goto err;
+ if (ret) {
+ pr_err("DFU failed with: %pe\n", ERR_PTR(ret));
+ return ret;
+ }
while (1) {
ret = stat("/fip.img", &s);
if (!ret) {
printf("Downloaded FIP image, DFU done\n");
- load_fip("/fip.img", 0);
- break;
+ ret = load_fip("/fip.img", 0);
+ if (!ret)
+ return 0;
}
command_slice_release();
mdelay(50);
command_slice_acquire();
};
-
- return;
-
-err:
- pr_err("DFU failed with: %pe\n", ERR_PTR(ret));
-}
-
-static int load_images(void)
-{
- int err;
-
- err = load_fip("/boot/k3.fip", 0);
- if (!err)
- return 0;
-
- return 0;
}
static int load_fip_emmc(void)
@@ -332,6 +319,7 @@ static int load_fip_emmc(void)
struct mci *mci;
char *fname;
const char *mmcdev = "mmc0";
+ int ret;
device_detect_by_name(mmcdev);
@@ -348,11 +336,11 @@ static int load_fip_emmc(void)
fname = xasprintf("/dev/%s.boot%d", mmcdev, bootpart - 1);
- load_fip(fname, K3_EMMC_BOOTPART_TIBOOT3_BIN_SIZE);
+ ret = load_fip(fname, K3_EMMC_BOOTPART_TIBOOT3_BIN_SIZE);
free(fname);
- return 0;
+ return ret;
}
static int k3_r5_start_image(void)
@@ -365,11 +353,28 @@ static int k3_r5_start_image(void)
struct rproc *arm64_rproc;
if (IS_ENABLED(CONFIG_USB_GADGET_DFU) && bootsource_get() == BOOTSOURCE_SERIAL)
- do_dfu();
+ err = do_dfu();
else if (k3_boot_is_emmc())
- load_fip_emmc();
+ err = load_fip_emmc();
else
- load_images();
+ err = load_fip("/boot/k3.fip", 0);
+
+ if (err) {
+ pr_crit("Unable to load FIP image\n");
+ panic("Stop booting\n");
+ }
+
+ if (!have_bl31)
+ panic("No TFA found in FIP image\n");
+
+ if (!have_bl32)
+ pr_info("No OP-TEE found. Continuing without\n");
+
+ if (!have_bl33)
+ panic("No bl33 found in FIP image\n");
+
+ if (!k3_ti_dm)
+ panic("No ti-dm binary found\n");
ti_sci = ti_sci_get_handle(NULL);
if (IS_ERR(ti_sci))
--
2.39.5
next prev parent reply other threads:[~2025-02-28 7:18 UTC|newest]
Thread overview: 28+ messages / expand[flat|nested] mbox.gz Atom feed top
2025-02-28 7:16 [PATCH 00/13] am625: support secure loading of full barebox Sascha Hauer
2025-02-28 7:16 ` [PATCH 01/13] firmware: always generate sha256sum Sascha Hauer
2025-02-28 7:16 ` [PATCH 02/13] firmware: add function to verify next image Sascha Hauer
2025-03-10 18:37 ` Marco Felsch
2025-03-11 7:35 ` Sascha Hauer
2025-02-28 7:16 ` [PATCH 03/13] ARM: k3: r5: drop loading of separate binaries Sascha Hauer
2025-03-10 18:44 ` Marco Felsch
2025-02-28 7:16 ` Sascha Hauer [this message]
2025-03-10 18:52 ` [PATCH 04/13] ARM: k3: r5: add proper error handling Marco Felsch
2025-03-11 8:24 ` Sascha Hauer
2025-03-11 8:50 ` Marco Felsch
2025-02-28 7:16 ` [PATCH 05/13] fip: rework fip_image_open() Sascha Hauer
2025-02-28 7:16 ` [PATCH 06/13] fip: fix wrong function call Sascha Hauer
2025-02-28 7:16 ` [PATCH 07/13] fip: add function to calculate a sha256 over FIP image Sascha Hauer
2025-02-28 7:16 ` [PATCH 08/13] ARM: am625: support hash verification of full barebox Sascha Hauer
2025-03-10 19:22 ` Marco Felsch
2025-03-11 7:53 ` Sascha Hauer
2025-02-28 7:16 ` [PATCH 09/13] ARM: k3: add support for authenticating images against the ROM API Sascha Hauer
2025-02-28 7:16 ` [PATCH 10/13] ARM: k3: r5: delete fip image when it can't be opened Sascha Hauer
2025-02-28 7:16 ` [PATCH 11/13] ARM: k3: r5: Allow to authenticate next image by ROM API Sascha Hauer
2025-03-10 19:26 ` Marco Felsch
2025-03-11 7:54 ` Sascha Hauer
2025-02-28 7:17 ` [PATCH 12/13] scripts/k3img: remove temporary files Sascha Hauer
2025-02-28 7:17 ` [PATCH 13/13] scripts: add k3sign Sascha Hauer
2025-03-10 17:40 ` [PATCH 00/13] am625: support secure loading of full barebox Marco Felsch
2025-03-11 8:12 ` Sascha Hauer
2025-03-11 8:48 ` Marco Felsch
2025-03-11 9:13 ` Sascha Hauer
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20250228-am625-secure-v1-4-4002488ff5ed@pengutronix.de \
--to=s.hauer@pengutronix.de \
--cc=barebox@lists.infradead.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox