]> git.dujemihanovic.xyz Git - u-boot.git/commit
tegra124: Reserve secure RAM using MC_SECURITY_CFG{0, 1}_0
authorIan Campbell <ijc@hellion.org.uk>
Tue, 21 Apr 2015 05:18:36 +0000 (07:18 +0200)
committerTom Warren <twarren@nvidia.com>
Wed, 13 May 2015 16:24:15 +0000 (09:24 -0700)
commit73169874a2867cb8ee5ec79eb9f2b176d3af34b2
treec54e48fe526faa9ef81f58de7460013646706d5b
parentffdf9f9ae057131375534df5f1e798d1e64785e9
tegra124: Reserve secure RAM using MC_SECURITY_CFG{0, 1}_0

These registers can be used to prevent non-secure world from accessing a
megabyte aligned region of RAM, use them to protect the u-boot secure monitor
code.

At first I tried to do this from s_init(), however this inexplicably causes
u-boot's networking (e.g. DHCP) to fail, while networking under Linux was fine.

So instead I have added a new weak arch function protect_secure_section()
called from relocate_secure_section() and reserved the region there. This is
better overall since it defers the reservation until after the sec vs. non-sec
decision (which can be influenced by an envvar) has been made when booting the
os.

Signed-off-by: Ian Campbell <ijc@hellion.org.uk>
[Jan: tiny style adjustment]
Signed-off-by: Jan Kiszka <jan.kiszka@siemens.com>
Reviewed-by: Tom Rini <trini@konsulko.com>
Reviewed-by: Thierry Reding <treding@nvidia.com>
Tested-by: Thierry Reding <treding@nvidia.com>
Tested-by: Ian Campbell <ijc@hellion.org.uk>
Signed-off-by: Tom Warren <twarren@nvidia.com>
arch/arm/cpu/armv7/virt-v7.c
arch/arm/include/asm/system.h
arch/arm/mach-tegra/ap.c