blob: d89e7187bfb905a94c8498ee93a7e7dca90d2fe3 [file] [log] [blame]
Andrew Walbran68a8c162022-03-07 15:38:42 +00001// Copyright 2022, The Android Open Source Project
2//
3// Licensed under the Apache License, Version 2.0 (the "License");
4// you may not use this file except in compliance with the License.
5// You may obtain a copy of the License at
6//
7// http://www.apache.org/licenses/LICENSE-2.0
8//
9// Unless required by applicable law or agreed to in writing, software
10// distributed under the License is distributed on an "AS IS" BASIS,
11// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12// See the License for the specific language governing permissions and
13// limitations under the License.
14
15//! pVM firmware.
16
17#![no_main]
18#![no_std]
Pierre-Clément Tosifc531152022-10-20 12:22:23 +010019#![feature(default_alloc_error_handler)]
Andrew Walbran68a8c162022-03-07 15:38:42 +000020
Pierre-Clément Tosidb74cb12022-12-08 13:56:25 +000021extern crate alloc;
22
Pierre-Clément Tosi20b60962022-10-17 13:35:27 +010023mod config;
Pierre-Clément Tosi90cd4f12023-02-17 11:19:56 +000024mod crypto;
Jaewan Kimba8929b2023-01-13 11:13:29 +090025mod debug_policy;
Pierre-Clément Tosi4f4f5eb2022-12-08 14:31:42 +000026mod dice;
Pierre-Clément Tosi5bbfca52022-10-21 12:14:35 +010027mod entry;
Andrew Walbrandfb73372022-04-21 10:52:27 +000028mod exceptions;
Pierre-Clément Tosia0934c12022-11-25 20:54:11 +000029mod fdt;
Pierre-Clément Tosi1cc5eb72023-02-02 11:09:18 +000030mod gpt;
Pierre-Clément Tosifc531152022-10-20 12:22:23 +010031mod heap;
Pierre-Clément Tosida4440a2022-08-22 18:06:32 +010032mod helpers;
Andrew Walbranba47d1d2022-12-14 15:21:44 +000033mod hvc;
Pierre-Clément Tosi1cc5eb72023-02-02 11:09:18 +000034mod instance;
Pierre-Clément Tosia0934c12022-11-25 20:54:11 +000035mod memory;
Pierre-Clément Tosi072969b2022-10-19 17:32:24 +010036mod mmio_guard;
Pierre-Clément Tosia8a4a202022-11-03 14:16:46 +000037mod mmu;
Pierre-Clément Tosi90cd4f12023-02-17 11:19:56 +000038mod rand;
Pierre-Clément Tosida4440a2022-08-22 18:06:32 +010039mod smccc;
Andrew Walbran848decf2022-12-15 14:39:38 +000040mod virtio;
Andrew Walbran68a8c162022-03-07 15:38:42 +000041
Pierre-Clément Tosidb74cb12022-12-08 13:56:25 +000042use alloc::boxed::Box;
43
Pierre-Clément Tosi4ba79662023-02-13 11:22:41 +000044use crate::dice::PartialInputs;
45use crate::entry::RebootReason;
46use crate::fdt::modify_for_next_stage;
47use crate::helpers::flush;
48use crate::helpers::GUEST_PAGE_SIZE;
Pierre-Clément Tosi1cc5eb72023-02-02 11:09:18 +000049use crate::instance::get_or_generate_instance_salt;
Pierre-Clément Tosi4ba79662023-02-13 11:22:41 +000050use crate::memory::MemoryTracker;
51use crate::virtio::pci;
Pierre-Clément Tosi1cc5eb72023-02-02 11:09:18 +000052use diced_open_dice::bcc_handover_main_flow;
53use diced_open_dice::bcc_handover_parse;
Pierre-Clément Tosi90cd4f12023-02-17 11:19:56 +000054use diced_open_dice::DiceArtifacts;
Andrew Walbran730375d2022-12-21 14:04:34 +000055use fdtpci::{PciError, PciInfo};
Andrew Walbran19690632022-12-07 16:41:30 +000056use libfdt::Fdt;
Pierre-Clément Tosi8edf72e2022-12-06 16:02:57 +000057use log::{debug, error, info, trace};
Pierre-Clément Tosi2d652982023-01-09 19:30:17 +000058use pvmfw_avb::verify_payload;
Alice Wang0aa30322023-01-31 11:00:10 +000059use pvmfw_embedded_key::PUBLIC_KEY;
Andrew Walbran68a8c162022-03-07 15:38:42 +000060
Pierre-Clément Tosi4f4f5eb2022-12-08 14:31:42 +000061const NEXT_BCC_SIZE: usize = GUEST_PAGE_SIZE;
62
Alice Wang28cbcf12022-12-01 07:58:28 +000063fn main(
Pierre-Clément Tosidb74cb12022-12-08 13:56:25 +000064 fdt: &mut Fdt,
Alice Wang28cbcf12022-12-01 07:58:28 +000065 signed_kernel: &[u8],
66 ramdisk: Option<&[u8]>,
Alice Wang843d8312023-02-15 09:47:06 +000067 current_bcc_handover: &[u8],
Andrew Walbran19690632022-12-07 16:41:30 +000068 memory: &mut MemoryTracker,
Alice Wang0a688d22022-12-02 09:48:41 +000069) -> Result<(), RebootReason> {
Pierre-Clément Tosi37105a62022-10-18 12:21:48 +010070 info!("pVM firmware");
Pierre-Clément Tosi8036b4f2023-02-17 10:31:31 +000071 debug!("FDT: {:?}", fdt.as_ptr());
Pierre-Clément Tosia0934c12022-11-25 20:54:11 +000072 debug!("Signed kernel: {:?} ({:#x} bytes)", signed_kernel.as_ptr(), signed_kernel.len());
Alice Wanga78279c2022-12-16 12:41:19 +000073 debug!("AVB public key: addr={:?}, size={:#x} ({1})", PUBLIC_KEY.as_ptr(), PUBLIC_KEY.len());
Pierre-Clément Tosia0934c12022-11-25 20:54:11 +000074 if let Some(rd) = ramdisk {
75 debug!("Ramdisk: {:?} ({:#x} bytes)", rd.as_ptr(), rd.len());
76 } else {
77 debug!("Ramdisk: None");
78 }
Alice Wang843d8312023-02-15 09:47:06 +000079 let bcc_handover = bcc_handover_parse(current_bcc_handover).map_err(|e| {
80 error!("Invalid BCC Handover: {e:?}");
81 RebootReason::InvalidBcc
82 })?;
83 trace!("BCC: {bcc_handover:x?}");
Andrew Walbran19690632022-12-07 16:41:30 +000084
85 // Set up PCI bus for VirtIO devices.
Andrew Walbrand1d03182022-12-09 18:20:01 +000086 let pci_info = PciInfo::from_fdt(fdt).map_err(handle_pci_error)?;
87 debug!("PCI: {:#x?}", pci_info);
Andrew Walbranb398fc82023-01-24 14:45:46 +000088 let mut pci_root = pci::initialise(pci_info, memory)?;
Andrew Walbran19690632022-12-07 16:41:30 +000089
Alice Wang1f0add02023-01-23 16:22:53 +000090 let verified_boot_data = verify_payload(signed_kernel, ramdisk, PUBLIC_KEY).map_err(|e| {
Pierre-Clément Tosi2d652982023-01-09 19:30:17 +000091 error!("Failed to verify the payload: {e}");
92 RebootReason::PayloadVerificationError
93 })?;
94
Pierre-Clément Tosidb74cb12022-12-08 13:56:25 +000095 let next_bcc = heap::aligned_boxed_slice(NEXT_BCC_SIZE, GUEST_PAGE_SIZE).ok_or_else(|| {
96 error!("Failed to allocate the next-stage BCC");
97 RebootReason::InternalError
98 })?;
99 // By leaking the slice, its content will be left behind for the next stage.
100 let next_bcc = Box::leak(next_bcc);
Pierre-Clément Tosi4f4f5eb2022-12-08 14:31:42 +0000101
Pierre-Clément Tosif58f3a32023-02-02 16:24:23 +0000102 let dice_inputs = PartialInputs::new(&verified_boot_data).map_err(|e| {
103 error!("Failed to compute partial DICE inputs: {e:?}");
104 RebootReason::InternalError
105 })?;
Pierre-Clément Tosi90cd4f12023-02-17 11:19:56 +0000106 let cdi_seal = DiceArtifacts::cdi_seal(&bcc_handover);
107 let (new_instance, salt) = get_or_generate_instance_salt(&mut pci_root, &dice_inputs, cdi_seal)
108 .map_err(|e| {
Pierre-Clément Tosi1cc5eb72023-02-02 11:09:18 +0000109 error!("Failed to get instance.img salt: {e}");
110 RebootReason::InternalError
111 })?;
112 trace!("Got salt from instance.img: {salt:x?}");
113
Pierre-Clément Tosif58f3a32023-02-02 16:24:23 +0000114 let dice_inputs = dice_inputs.into_input_values(&salt).map_err(|e| {
115 error!("Failed to generate DICE inputs: {e:?}");
116 RebootReason::InternalError
117 })?;
Alice Wang843d8312023-02-15 09:47:06 +0000118 let _ = bcc_handover_main_flow(current_bcc_handover, &dice_inputs, next_bcc).map_err(|e| {
Pierre-Clément Tosif58f3a32023-02-02 16:24:23 +0000119 error!("Failed to derive next-stage DICE secrets: {e:?}");
120 RebootReason::SecretDerivationError
121 })?;
Pierre-Clément Tosidb74cb12022-12-08 13:56:25 +0000122 flush(next_bcc);
123
Pierre-Clément Tosib2d8aa72023-02-17 15:22:50 +0000124 let strict_boot = true;
Pierre-Clément Tosi4ba79662023-02-13 11:22:41 +0000125 modify_for_next_stage(fdt, next_bcc, new_instance, strict_boot).map_err(|e| {
126 error!("Failed to configure device tree: {e}");
Pierre-Clément Tosidb74cb12022-12-08 13:56:25 +0000127 RebootReason::InternalError
128 })?;
129
Alice Wang4379c832022-12-05 15:50:20 +0000130 info!("Starting payload...");
Alice Wang28cbcf12022-12-01 07:58:28 +0000131 Ok(())
Pierre-Clément Tosi263ffd52022-10-05 20:27:50 +0100132}
Andrew Walbrand1d03182022-12-09 18:20:01 +0000133
134/// Logs the given PCI error and returns the appropriate `RebootReason`.
135fn handle_pci_error(e: PciError) -> RebootReason {
136 error!("{}", e);
137 match e {
138 PciError::FdtErrorPci(_)
139 | PciError::FdtNoPci
140 | PciError::FdtErrorReg(_)
141 | PciError::FdtMissingReg
142 | PciError::FdtRegEmpty
143 | PciError::FdtRegMissingSize
144 | PciError::CamWrongSize(_)
145 | PciError::FdtErrorRanges(_)
146 | PciError::FdtMissingRanges
147 | PciError::RangeAddressMismatch { .. }
148 | PciError::NoSuitableRange => RebootReason::InvalidFdt,
Andrew Walbrand1d03182022-12-09 18:20:01 +0000149 }
150}