mirror of
https://github.com/AsahiLinux/u-boot
synced 2024-11-11 15:37:23 +00:00
856b284617
In case of error while executing esbc_validate command, SNVS transition and issue of reset is required only for secure-boot. If boot mode is non-secure, this is not required. Similarly, esbc_halt command which puts the core in Spin Loop is applicable only for Secure Boot. Signed-off-by: Aneesh Bansal <aneesh.bansal@nxp.com> Acked-by: Ruchika Gupta <ruchika.gupta@nxp.com> Reviewed-by: York Sun <york.sun@nxp.com>
74 lines
1.8 KiB
C
74 lines
1.8 KiB
C
/*
|
|
* Copyright 2015 Freescale Semiconductor, Inc.
|
|
*
|
|
* SPDX-License-Identifier: GPL-2.0+
|
|
*/
|
|
|
|
#include <common.h>
|
|
#include <command.h>
|
|
#include <fsl_validate.h>
|
|
|
|
static int do_esbc_halt(cmd_tbl_t *cmdtp, int flag, int argc,
|
|
char * const argv[])
|
|
{
|
|
if (fsl_check_boot_mode_secure() == 0) {
|
|
printf("Boot Mode is Non-Secure. Not entering spin loop.\n");
|
|
return 0;
|
|
}
|
|
|
|
printf("Core is entering spin loop.\n");
|
|
loop:
|
|
goto loop;
|
|
|
|
return 0;
|
|
}
|
|
|
|
static int do_esbc_validate(cmd_tbl_t *cmdtp, int flag, int argc,
|
|
char * const argv[])
|
|
{
|
|
char *hash_str = NULL;
|
|
uintptr_t haddr;
|
|
int ret;
|
|
|
|
if (argc < 2)
|
|
return cmd_usage(cmdtp);
|
|
else if (argc > 2)
|
|
/* Second arg - Optional - Hash Str*/
|
|
hash_str = argv[2];
|
|
|
|
/* First argument - header address -32/64bit */
|
|
haddr = (uintptr_t)simple_strtoul(argv[1], NULL, 16);
|
|
|
|
/* With esbc_validate command, Image address must be
|
|
* part of header. So, the function is called
|
|
* by passing this argument as 0.
|
|
*/
|
|
ret = fsl_secboot_validate(haddr, hash_str, 0);
|
|
if (ret)
|
|
return 1;
|
|
|
|
printf("esbc_validate command successful\n");
|
|
return 0;
|
|
}
|
|
|
|
/***************************************************/
|
|
static char esbc_validate_help_text[] =
|
|
"esbc_validate hdr_addr <hash_val> - Validates signature using\n"
|
|
" RSA verification\n"
|
|
" $hdr_addr Address of header of the image\n"
|
|
" to be validated.\n"
|
|
" $hash_val -Optional\n"
|
|
" It provides Hash of public/srk key to be\n"
|
|
" used to verify signature.\n";
|
|
|
|
U_BOOT_CMD(
|
|
esbc_validate, 3, 0, do_esbc_validate,
|
|
"Validates signature on a given image using RSA verification",
|
|
esbc_validate_help_text
|
|
);
|
|
|
|
U_BOOT_CMD(
|
|
esbc_halt, 1, 0, do_esbc_halt,
|
|
"Put the core in spin loop (Secure Boot Only)",
|
|
""
|
|
);
|