From: Marco Felsch <m.felsch@pengutronix.de>
To: Sascha Hauer <s.hauer@pengutronix.de>
Cc: "open list:BAREBOX" <barebox@lists.infradead.org>
Subject: Re: [PATCH 03/13] ARM: k3: r5: drop loading of separate binaries
Date: Mon, 10 Mar 2025 19:44:56 +0100 [thread overview]
Message-ID: <20250310184456.i4tpauvbwb6uqwuk@pengutronix.de> (raw)
In-Reply-To: <20250228-am625-secure-v1-3-4002488ff5ed@pengutronix.de>
On 25-02-28, Sascha Hauer wrote:
> For starting the A52 cores we need TFA, OP-TEE, barebox and ti-dm
^
3
> binaries. These can be loaded as separate files from SD/eMMC/DFU or
> alternatively combined into a single FIP image.
> FIP images are convenient to handle, they can easily be generated on the
> command line and fiptool also has support for replacing blobs in images.
> This makes handling of separate binaries rather unnecessary and support
> for it only makes the loading code more complex. Drop it and make FIP
> images the only option which also faciliates integrating of secure boot.
>
> Signed-off-by: Sascha Hauer <s.hauer@pengutronix.de>
> ---
> arch/arm/mach-k3/r5.c | 70 +--------------------------------------------------
> 1 file changed, 1 insertion(+), 69 deletions(-)
>
> diff --git a/arch/arm/mach-k3/r5.c b/arch/arm/mach-k3/r5.c
> index ced1eb2856..2418e9ae73 100644
> --- a/arch/arm/mach-k3/r5.c
> +++ b/arch/arm/mach-k3/r5.c
> @@ -288,50 +288,15 @@ static void do_dfu(void)
> struct usbgadget_funcs funcs = {};
> int ret;
> struct stat s;
> - ssize_t size;
>
> funcs.flags |= USBGADGET_DFU;
> - funcs.dfu_opts = "/optee.bin(optee)c,"
> - "/bl31.bin(tfa)c,"
> - "/ti-dm.bin(ti-dm)c,"
> - "/barebox.bin(barebox)cs,"
> - "/fip.img(fip)cs";
> + funcs.dfu_opts = "/fip.img(fip)cs";
>
> ret = usbgadget_prepare_register(&funcs);
> if (ret)
> goto err;
>
> while (1) {
> - if (!have_bl32) {
> - size = read_file_into_buf("/optee.bin", BL32_ADDRESS, SZ_32M);
> - if (size > 0) {
> - printf("Downloaded OP-TEE\n");
> - have_bl32 = true;
> - }
> - }
> -
> - if (!have_bl31) {
> - size = read_file_into_buf("/bl31.bin", BL31_ADDRESS, SZ_32M);
> - if (size > 0) {
> - printf("Downloaded TF-A\n");
> - have_bl31 = true;
> - }
> - }
> -
> - if (!k3_ti_dm) {
> - ret = read_file_2("/ti-dm.bin", &size, &k3_ti_dm, FILESIZE_MAX);
> - if (!ret) {
> - printf("Downloaded TI-DM\n");
> - }
> - }
> -
> - size = read_file_into_buf("/barebox.bin", BAREBOX_ADDRESS, SZ_32M);
> - if (size > 0) {
> - have_bl33 = true;
> - printf("Downloaded barebox image, DFU done\n");
> - break;
> - }
> -
> ret = stat("/fip.img", &s);
> if (!ret) {
> printf("Downloaded FIP image, DFU done\n");
> @@ -352,45 +317,12 @@ static void do_dfu(void)
>
> static int load_images(void)
> {
> - ssize_t size;
> int err;
>
> err = load_fip("/boot/k3.fip", 0);
Since load_fip() is the only call we could remove the entire function
and call load_fip() directly from k3_r5_start_image().
Regards,
Marco
> if (!err)
> return 0;
>
> - size = read_file_into_buf("/boot/optee.bin", BL32_ADDRESS, SZ_32M);
> - if (size < 0) {
> - if (size != -ENOENT) {
> - pr_err("Cannot load optee.bin: %pe\n", ERR_PTR(size));
> - return size;
> - }
> - pr_info("optee.bin not found, continue without\n");
> - } else {
> - pr_debug("Loaded optee.bin (size %u) to 0x%p\n", size, BL32_ADDRESS);
> - }
> -
> - size = read_file_into_buf("/boot/barebox.bin", BAREBOX_ADDRESS, SZ_32M);
> - if (size < 0) {
> - pr_err("Cannot load barebox.bin: %pe\n", ERR_PTR(size));
> - return size;
> - }
> - pr_debug("Loaded barebox.bin (size %u) to 0x%p\n", size, BAREBOX_ADDRESS);
> -
> - size = read_file_into_buf("/boot/bl31.bin", BL31_ADDRESS, SZ_32M);
> - if (size < 0) {
> - pr_err("Cannot load bl31.bin: %pe\n", ERR_PTR(size));
> - return size;
> - }
> - pr_debug("Loaded bl31.bin (size %u) to 0x%p\n", size, BL31_ADDRESS);
> -
> - err = read_file_2("/boot/ti-dm.bin", &size, &k3_ti_dm, FILESIZE_MAX);
> - if (err) {
> - pr_err("Cannot load ti-dm.bin: %pe\n", ERR_PTR(err));
> - return err;
> - }
> - pr_debug("Loaded ti-dm.bin (size %u)\n", size);
> -
> return 0;
> }
>
>
> --
> 2.39.5
>
>
>
next prev parent reply other threads:[~2025-03-10 18:45 UTC|newest]
Thread overview: 28+ messages / expand[flat|nested] mbox.gz Atom feed top
2025-02-28 7:16 [PATCH 00/13] am625: support secure loading of full barebox Sascha Hauer
2025-02-28 7:16 ` [PATCH 01/13] firmware: always generate sha256sum Sascha Hauer
2025-02-28 7:16 ` [PATCH 02/13] firmware: add function to verify next image Sascha Hauer
2025-03-10 18:37 ` Marco Felsch
2025-03-11 7:35 ` Sascha Hauer
2025-02-28 7:16 ` [PATCH 03/13] ARM: k3: r5: drop loading of separate binaries Sascha Hauer
2025-03-10 18:44 ` Marco Felsch [this message]
2025-02-28 7:16 ` [PATCH 04/13] ARM: k3: r5: add proper error handling Sascha Hauer
2025-03-10 18:52 ` Marco Felsch
2025-03-11 8:24 ` Sascha Hauer
2025-03-11 8:50 ` Marco Felsch
2025-02-28 7:16 ` [PATCH 05/13] fip: rework fip_image_open() Sascha Hauer
2025-02-28 7:16 ` [PATCH 06/13] fip: fix wrong function call Sascha Hauer
2025-02-28 7:16 ` [PATCH 07/13] fip: add function to calculate a sha256 over FIP image Sascha Hauer
2025-02-28 7:16 ` [PATCH 08/13] ARM: am625: support hash verification of full barebox Sascha Hauer
2025-03-10 19:22 ` Marco Felsch
2025-03-11 7:53 ` Sascha Hauer
2025-02-28 7:16 ` [PATCH 09/13] ARM: k3: add support for authenticating images against the ROM API Sascha Hauer
2025-02-28 7:16 ` [PATCH 10/13] ARM: k3: r5: delete fip image when it can't be opened Sascha Hauer
2025-02-28 7:16 ` [PATCH 11/13] ARM: k3: r5: Allow to authenticate next image by ROM API Sascha Hauer
2025-03-10 19:26 ` Marco Felsch
2025-03-11 7:54 ` Sascha Hauer
2025-02-28 7:17 ` [PATCH 12/13] scripts/k3img: remove temporary files Sascha Hauer
2025-02-28 7:17 ` [PATCH 13/13] scripts: add k3sign Sascha Hauer
2025-03-10 17:40 ` [PATCH 00/13] am625: support secure loading of full barebox Marco Felsch
2025-03-11 8:12 ` Sascha Hauer
2025-03-11 8:48 ` Marco Felsch
2025-03-11 9:13 ` Sascha Hauer
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20250310184456.i4tpauvbwb6uqwuk@pengutronix.de \
--to=m.felsch@pengutronix.de \
--cc=barebox@lists.infradead.org \
--cc=s.hauer@pengutronix.de \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox