From: Sascha Hauer <s.hauer@pengutronix.de>
To: "open list:BAREBOX" <barebox@lists.infradead.org>
Subject: [PATCH v2 04/14] ARM: k3: r5: add proper error handling
Date: Tue, 11 Mar 2025 13:25:17 +0100 [thread overview]
Message-ID: <20250311-am625-secure-v2-4-3cbbfa092346@pengutronix.de> (raw)
In-Reply-To: <20250311-am625-secure-v2-0-3cbbfa092346@pengutronix.de>
Add missing error handling in the image loading code. Properly check for
errors and panic when mandatory binaries are missing instead of blindly
continuing.
While at it change the return value variable from 'err' to 'ret' to stay
consistent with the rest of the code in r5.c.
Signed-off-by: Sascha Hauer <s.hauer@pengutronix.de>
---
arch/arm/mach-k3/r5.c | 65 +++++++++++++++++++++++++++------------------------
1 file changed, 35 insertions(+), 30 deletions(-)
diff --git a/arch/arm/mach-k3/r5.c b/arch/arm/mach-k3/r5.c
index 2418e9ae73..4eaf8658da 100644
--- a/arch/arm/mach-k3/r5.c
+++ b/arch/arm/mach-k3/r5.c
@@ -283,7 +283,7 @@ static int load_fip(const char *filename, off_t offset)
return 0;
}
-static void do_dfu(void)
+static int do_dfu(void)
{
struct usbgadget_funcs funcs = {};
int ret;
@@ -293,37 +293,24 @@ static void do_dfu(void)
funcs.dfu_opts = "/fip.img(fip)cs";
ret = usbgadget_prepare_register(&funcs);
- if (ret)
- goto err;
+ if (ret) {
+ pr_err("DFU failed with: %pe\n", ERR_PTR(ret));
+ return ret;
+ }
while (1) {
ret = stat("/fip.img", &s);
if (!ret) {
printf("Downloaded FIP image, DFU done\n");
- load_fip("/fip.img", 0);
- break;
+ ret = load_fip("/fip.img", 0);
+ if (!ret)
+ return 0;
}
command_slice_release();
mdelay(50);
command_slice_acquire();
};
-
- return;
-
-err:
- pr_err("DFU failed with: %pe\n", ERR_PTR(ret));
-}
-
-static int load_images(void)
-{
- int err;
-
- err = load_fip("/boot/k3.fip", 0);
- if (!err)
- return 0;
-
- return 0;
}
static int load_fip_emmc(void)
@@ -332,6 +319,7 @@ static int load_fip_emmc(void)
struct mci *mci;
char *fname;
const char *mmcdev = "mmc0";
+ int ret;
device_detect_by_name(mmcdev);
@@ -348,16 +336,16 @@ static int load_fip_emmc(void)
fname = xasprintf("/dev/%s.boot%d", mmcdev, bootpart - 1);
- load_fip(fname, K3_EMMC_BOOTPART_TIBOOT3_BIN_SIZE);
+ ret = load_fip(fname, K3_EMMC_BOOTPART_TIBOOT3_BIN_SIZE);
free(fname);
- return 0;
+ return ret;
}
static int k3_r5_start_image(void)
{
- int err;
+ int ret;
struct firmware fw;
const struct ti_sci_handle *ti_sci;
struct elf_image *elf;
@@ -365,11 +353,28 @@ static int k3_r5_start_image(void)
struct rproc *arm64_rproc;
if (IS_ENABLED(CONFIG_USB_GADGET_DFU) && bootsource_get() == BOOTSOURCE_SERIAL)
- do_dfu();
+ ret = do_dfu();
else if (k3_boot_is_emmc())
- load_fip_emmc();
+ ret = load_fip_emmc();
else
- load_images();
+ ret = load_fip("/boot/k3.fip", 0);
+
+ if (ret) {
+ pr_crit("Unable to load FIP image\n");
+ panic("Stop booting\n");
+ }
+
+ if (!have_bl31)
+ panic("No TFA found in FIP image\n");
+
+ if (!have_bl32)
+ pr_info("No OP-TEE found. Continuing without\n");
+
+ if (!have_bl33)
+ panic("No bl33 found in FIP image\n");
+
+ if (!k3_ti_dm)
+ panic("No ti-dm binary found\n");
ti_sci = ti_sci_get_handle(NULL);
if (IS_ERR(ti_sci))
@@ -387,9 +392,9 @@ static int k3_r5_start_image(void)
return PTR_ERR(elf);
}
- err = elf_load(elf);
- if (err) {
- pr_err("Cannot load ELF image %pe\n", ERR_PTR(err));
+ ret = elf_load(elf);
+ if (ret) {
+ pr_err("Cannot load ELF image %pe\n", ERR_PTR(ret));
elf_close(elf);
}
--
2.39.5
next prev parent reply other threads:[~2025-03-11 12:42 UTC|newest]
Thread overview: 26+ messages / expand[flat|nested] mbox.gz Atom feed top
2025-03-11 12:25 [PATCH v2 00/14] am625: support secure loading of full barebox Sascha Hauer
2025-03-11 12:25 ` [PATCH v2 01/14] firmware: always generate sha256sum Sascha Hauer
2025-03-11 13:13 ` Marco Felsch
2025-03-11 12:25 ` [PATCH v2 02/14] firmware: add function to verify next image Sascha Hauer
2025-03-11 13:19 ` Marco Felsch
2025-03-11 12:25 ` [PATCH v2 03/14] ARM: k3: r5: drop loading of separate binaries Sascha Hauer
2025-03-11 13:20 ` Marco Felsch
2025-03-11 12:25 ` Sascha Hauer [this message]
2025-03-11 13:21 ` [PATCH v2 04/14] ARM: k3: r5: add proper error handling Marco Felsch
2025-03-11 12:25 ` [PATCH v2 05/14] fip: rework fip_image_open() Sascha Hauer
2025-03-11 13:42 ` Marco Felsch
2025-03-12 11:02 ` Sascha Hauer
2025-03-12 11:45 ` Marco Felsch
2025-03-11 12:25 ` [PATCH v2 06/14] fip: fix wrong function call Sascha Hauer
2025-03-11 12:25 ` [PATCH v2 07/14] fip: add function to calculate a sha256 over FIP image Sascha Hauer
2025-03-11 13:43 ` Marco Felsch
2025-03-11 12:25 ` [PATCH v2 08/14] ARM: am625: support hash verification of full barebox Sascha Hauer
2025-03-11 13:44 ` Marco Felsch
2025-03-11 12:25 ` [PATCH v2 09/14] ARM: k3: add support for authenticating images against the ROM API Sascha Hauer
2025-03-11 12:25 ` [PATCH v2 10/14] ARM: k3: r5: delete fip image when it can't be opened Sascha Hauer
2025-03-11 12:25 ` [PATCH v2 11/14] ARM: k3: r5: Allow to authenticate next image by ROM API Sascha Hauer
2025-03-11 12:25 ` [PATCH v2 12/14] scripts/k3img: remove temporary files Sascha Hauer
2025-03-11 12:25 ` [PATCH v2 13/14] scripts: add k3sign Sascha Hauer
2025-03-11 12:25 ` [PATCH v2 14/14] ARM: k3: r5: select HAS_INSECURE_DEFAULTS when necessary Sascha Hauer
2025-03-11 13:46 ` Marco Felsch
2025-03-12 10:22 ` [PATCH v2 00/14] am625: support secure loading of full barebox Sascha Hauer
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20250311-am625-secure-v2-4-3cbbfa092346@pengutronix.de \
--to=s.hauer@pengutronix.de \
--cc=barebox@lists.infradead.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox