blob: 6545a07a9fb10043fce002dd914ac54240d03560 [file] [log] [blame]
Andrew Walbran68a8c162022-03-07 15:38:42 +00001// Copyright 2022, The Android Open Source Project
2//
3// Licensed under the Apache License, Version 2.0 (the "License");
4// you may not use this file except in compliance with the License.
5// You may obtain a copy of the License at
6//
7// http://www.apache.org/licenses/LICENSE-2.0
8//
9// Unless required by applicable law or agreed to in writing, software
10// distributed under the License is distributed on an "AS IS" BASIS,
11// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12// See the License for the specific language governing permissions and
13// limitations under the License.
14
15//! pVM firmware.
16
17#![no_main]
18#![no_std]
Pierre-Clément Tosifc531152022-10-20 12:22:23 +010019#![feature(default_alloc_error_handler)]
Andrew Walbran68a8c162022-03-07 15:38:42 +000020
Pierre-Clément Tosidb74cb12022-12-08 13:56:25 +000021extern crate alloc;
22
Pierre-Clément Tosi20b60962022-10-17 13:35:27 +010023mod config;
Jaewan Kimba8929b2023-01-13 11:13:29 +090024mod debug_policy;
Pierre-Clément Tosi4f4f5eb2022-12-08 14:31:42 +000025mod dice;
Pierre-Clément Tosi5bbfca52022-10-21 12:14:35 +010026mod entry;
Andrew Walbrandfb73372022-04-21 10:52:27 +000027mod exceptions;
Pierre-Clément Tosia0934c12022-11-25 20:54:11 +000028mod fdt;
Pierre-Clément Tosi1cc5eb72023-02-02 11:09:18 +000029mod gpt;
Pierre-Clément Tosifc531152022-10-20 12:22:23 +010030mod heap;
Pierre-Clément Tosida4440a2022-08-22 18:06:32 +010031mod helpers;
Andrew Walbranba47d1d2022-12-14 15:21:44 +000032mod hvc;
Pierre-Clément Tosi1cc5eb72023-02-02 11:09:18 +000033mod instance;
Pierre-Clément Tosia0934c12022-11-25 20:54:11 +000034mod memory;
Pierre-Clément Tosi072969b2022-10-19 17:32:24 +010035mod mmio_guard;
Pierre-Clément Tosia8a4a202022-11-03 14:16:46 +000036mod mmu;
Pierre-Clément Tosida4440a2022-08-22 18:06:32 +010037mod smccc;
Andrew Walbran848decf2022-12-15 14:39:38 +000038mod virtio;
Andrew Walbran68a8c162022-03-07 15:38:42 +000039
Pierre-Clément Tosidb74cb12022-12-08 13:56:25 +000040use alloc::boxed::Box;
41
Pierre-Clément Tosi4ba79662023-02-13 11:22:41 +000042use crate::dice::PartialInputs;
43use crate::entry::RebootReason;
44use crate::fdt::modify_for_next_stage;
45use crate::helpers::flush;
46use crate::helpers::GUEST_PAGE_SIZE;
Pierre-Clément Tosi1cc5eb72023-02-02 11:09:18 +000047use crate::instance::get_or_generate_instance_salt;
Pierre-Clément Tosi4ba79662023-02-13 11:22:41 +000048use crate::memory::MemoryTracker;
49use crate::virtio::pci;
Pierre-Clément Tosi1cc5eb72023-02-02 11:09:18 +000050use diced_open_dice::bcc_handover_main_flow;
51use diced_open_dice::bcc_handover_parse;
Andrew Walbran730375d2022-12-21 14:04:34 +000052use fdtpci::{PciError, PciInfo};
Andrew Walbran19690632022-12-07 16:41:30 +000053use libfdt::Fdt;
Pierre-Clément Tosi8edf72e2022-12-06 16:02:57 +000054use log::{debug, error, info, trace};
Pierre-Clément Tosi2d652982023-01-09 19:30:17 +000055use pvmfw_avb::verify_payload;
Alice Wang0aa30322023-01-31 11:00:10 +000056use pvmfw_embedded_key::PUBLIC_KEY;
Andrew Walbran68a8c162022-03-07 15:38:42 +000057
Pierre-Clément Tosi4f4f5eb2022-12-08 14:31:42 +000058const NEXT_BCC_SIZE: usize = GUEST_PAGE_SIZE;
59
Alice Wang28cbcf12022-12-01 07:58:28 +000060fn main(
Pierre-Clément Tosidb74cb12022-12-08 13:56:25 +000061 fdt: &mut Fdt,
Alice Wang28cbcf12022-12-01 07:58:28 +000062 signed_kernel: &[u8],
63 ramdisk: Option<&[u8]>,
Alice Wang843d8312023-02-15 09:47:06 +000064 current_bcc_handover: &[u8],
Andrew Walbran19690632022-12-07 16:41:30 +000065 memory: &mut MemoryTracker,
Alice Wang0a688d22022-12-02 09:48:41 +000066) -> Result<(), RebootReason> {
Pierre-Clément Tosi37105a62022-10-18 12:21:48 +010067 info!("pVM firmware");
Pierre-Clément Tosi8036b4f2023-02-17 10:31:31 +000068 debug!("FDT: {:?}", fdt.as_ptr());
Pierre-Clément Tosia0934c12022-11-25 20:54:11 +000069 debug!("Signed kernel: {:?} ({:#x} bytes)", signed_kernel.as_ptr(), signed_kernel.len());
Alice Wanga78279c2022-12-16 12:41:19 +000070 debug!("AVB public key: addr={:?}, size={:#x} ({1})", PUBLIC_KEY.as_ptr(), PUBLIC_KEY.len());
Pierre-Clément Tosia0934c12022-11-25 20:54:11 +000071 if let Some(rd) = ramdisk {
72 debug!("Ramdisk: {:?} ({:#x} bytes)", rd.as_ptr(), rd.len());
73 } else {
74 debug!("Ramdisk: None");
75 }
Alice Wang843d8312023-02-15 09:47:06 +000076 let bcc_handover = bcc_handover_parse(current_bcc_handover).map_err(|e| {
77 error!("Invalid BCC Handover: {e:?}");
78 RebootReason::InvalidBcc
79 })?;
80 trace!("BCC: {bcc_handover:x?}");
Andrew Walbran19690632022-12-07 16:41:30 +000081
82 // Set up PCI bus for VirtIO devices.
Andrew Walbrand1d03182022-12-09 18:20:01 +000083 let pci_info = PciInfo::from_fdt(fdt).map_err(handle_pci_error)?;
84 debug!("PCI: {:#x?}", pci_info);
Andrew Walbranb398fc82023-01-24 14:45:46 +000085 let mut pci_root = pci::initialise(pci_info, memory)?;
Andrew Walbran19690632022-12-07 16:41:30 +000086
Alice Wang1f0add02023-01-23 16:22:53 +000087 let verified_boot_data = verify_payload(signed_kernel, ramdisk, PUBLIC_KEY).map_err(|e| {
Pierre-Clément Tosi2d652982023-01-09 19:30:17 +000088 error!("Failed to verify the payload: {e}");
89 RebootReason::PayloadVerificationError
90 })?;
91
Pierre-Clément Tosidb74cb12022-12-08 13:56:25 +000092 let next_bcc = heap::aligned_boxed_slice(NEXT_BCC_SIZE, GUEST_PAGE_SIZE).ok_or_else(|| {
93 error!("Failed to allocate the next-stage BCC");
94 RebootReason::InternalError
95 })?;
96 // By leaking the slice, its content will be left behind for the next stage.
97 let next_bcc = Box::leak(next_bcc);
Pierre-Clément Tosi4f4f5eb2022-12-08 14:31:42 +000098
Pierre-Clément Tosif58f3a32023-02-02 16:24:23 +000099 let dice_inputs = PartialInputs::new(&verified_boot_data).map_err(|e| {
100 error!("Failed to compute partial DICE inputs: {e:?}");
101 RebootReason::InternalError
102 })?;
Pierre-Clément Tosi1cc5eb72023-02-02 11:09:18 +0000103 let (new_instance, salt) =
104 get_or_generate_instance_salt(&mut pci_root, &dice_inputs).map_err(|e| {
105 error!("Failed to get instance.img salt: {e}");
106 RebootReason::InternalError
107 })?;
108 trace!("Got salt from instance.img: {salt:x?}");
109
Pierre-Clément Tosif58f3a32023-02-02 16:24:23 +0000110 let dice_inputs = dice_inputs.into_input_values(&salt).map_err(|e| {
111 error!("Failed to generate DICE inputs: {e:?}");
112 RebootReason::InternalError
113 })?;
Alice Wang843d8312023-02-15 09:47:06 +0000114 let _ = bcc_handover_main_flow(current_bcc_handover, &dice_inputs, next_bcc).map_err(|e| {
Pierre-Clément Tosif58f3a32023-02-02 16:24:23 +0000115 error!("Failed to derive next-stage DICE secrets: {e:?}");
116 RebootReason::SecretDerivationError
117 })?;
Pierre-Clément Tosidb74cb12022-12-08 13:56:25 +0000118 flush(next_bcc);
119
Pierre-Clément Tosi4ba79662023-02-13 11:22:41 +0000120 let strict_boot = false; // TODO(b/268307476): Flip in its own commit to isolate testing.
121 modify_for_next_stage(fdt, next_bcc, new_instance, strict_boot).map_err(|e| {
122 error!("Failed to configure device tree: {e}");
Pierre-Clément Tosidb74cb12022-12-08 13:56:25 +0000123 RebootReason::InternalError
124 })?;
125
Alice Wang4379c832022-12-05 15:50:20 +0000126 info!("Starting payload...");
Alice Wang28cbcf12022-12-01 07:58:28 +0000127 Ok(())
Pierre-Clément Tosi263ffd52022-10-05 20:27:50 +0100128}
Andrew Walbrand1d03182022-12-09 18:20:01 +0000129
130/// Logs the given PCI error and returns the appropriate `RebootReason`.
131fn handle_pci_error(e: PciError) -> RebootReason {
132 error!("{}", e);
133 match e {
134 PciError::FdtErrorPci(_)
135 | PciError::FdtNoPci
136 | PciError::FdtErrorReg(_)
137 | PciError::FdtMissingReg
138 | PciError::FdtRegEmpty
139 | PciError::FdtRegMissingSize
140 | PciError::CamWrongSize(_)
141 | PciError::FdtErrorRanges(_)
142 | PciError::FdtMissingRanges
143 | PciError::RangeAddressMismatch { .. }
144 | PciError::NoSuitableRange => RebootReason::InvalidFdt,
Andrew Walbrand1d03182022-12-09 18:20:01 +0000145 }
146}