February 2020 - U-Boot

[PATCH v6 00/16] efi_loader: add secure boot support
by AKASHI Takahiro 27 Feb '20

27 Feb '20

# Documentation for UEFI secure boot on U-Boot will be submitted in # a separate patch in near future. One of major missing features in current UEFI implementation is "secure boot." The ultimate goal of my attempt is to implement image authentication based on signature and provide UEFI secure boot support which would be fully compliant with UEFI specification, section 32[1]. (The code was originally developed by Patrick Wildt.) This patch set requires one prerequisite[2]. For complete workable cod, see my repository[3]. My "non-volatile" support[4], which is under discussion, is not mandatory and so not included here, but this inevitably implies that, for example, signature database variables, like db and dbx, won't be persistent unless you explicitly run "env save" command. Anyhow, Linaro is also working on implementing real "secure storage" solution based on TF-A and OP-TEE. Supported features: * image authentication based on db and dbx * supported signature types are EFI_CERT_SHA256_GUID (SHA256 digest for unsigned images) EFI_CERT_X509_GUID (x509 certificate for signed images) * SecureBoot/SignatureSupport variables * SetupMode and user mode * variable authentication based on PK and KEK EFI_VARIABLE_TIME_BASED_AUTHENTICATED_WRITE_ACCESS * basic pytest test cases Unsupported features: (marked as TODO in most cases in the source code, and won't be included in this series) * hash algorithms other than SHA256 * dbt: timestamp(RFC6131)-based certificate revocation * dbr: OS recovery * xxxDefault: default values for signature stores * transition to AuditMode and DeployedMode * recording rejected images in EFI_IMAGE_EXECUTION_INFO_TABLE * verification "policy", in particular, check against signature's owner * private authenticated variables * variable authentication with EFI_VARIABLE_ENHANCED_AUTHENTICATED_ACCESS * real secure storage support, including hardware-specific PK (Platform Key) installation TODO's other than "Unsupported features": (won't be included in this series) * fail recovery, in particular, in modifying authenticated variables * support read-only attributes of well-defined global variables in particular, "SignatureSupport" * Extensive test suite (or more test cases) to confirm compatibility with EDK2 => I requested EDK SCT community to add tests[5]. Test: * My pytest, included in this patch set, passed. * efi_selftest passed. (At least no regression.) * Travis CI tests have passed. Known issues: * efitools is used in pytest, and its version must be v1.5.2 or later. (Solution: You can define EFITOOLS_PATH in defs.py for your own efitools.) Hints about how to use: (Please see other documents, or my pytest scripts, for details.) * You can create your own certificates with openssl. * You can sign your application with sbsign (on Ubuntu). * You can create raw data for signature database with efitools, and install/manage authenticated variables with "env -set -e" command or efitools' "UpdateVars.efi" application. [1] https://uefi.org/sites/default/files/resources/UEFI_Spec_2_8_final.pdf [2] https://lists.denx.de/pipermail/u-boot/2020-January/398057.html (extend rsa_verify() for UEFI secure boot) [3] http://git.linaro.org/people/takahiro.akashi/u-boot.git/ efi/secboot [4] https://lists.denx.de/pipermail/u-boot/2019-September/382835.html (non-volatile variables support) [5] https://bugzilla.tianocore.org/show_bug.cgi?id=2230 Changes in v6 (Feb 26, 2020) * fix 'make htmldocs' warnings (patch#4,#7) * refactor efi_load_pe() to avoid test_efi_fit.py error (patch#7) * fix pytest warnings (patch#14) Changes in v5 (Jan 28, 2020) * rebased to pre-v2020.04-rc1 (fixed some merge conflicts) * remove already-merged commits (v4's patch#1) * fix a compile error caused by gcc 9.x (patch#4) * return SECURITY_VIOLATION instead of ACCESS_DENIED if authentication fails (patch#7) * use qsort() for section sorting (patch#7) * add "efidebug test" sub-command (patch#11) * add efi_start_image(SECURITY_VIOLATION) test (patch#14) Changes in v4 (Dec 18, 2019) * adjust EFI_SECURE_BOOT dependencies due to a change of RSA extension patch v5 (patch#2) * change "imply" to "select" against kconfig dependencies (patch#2) * otherwise, no functional changes Changes in v3 (Dec 9, 2019) * allow for arbitrary number of regions in efi_image_region_add() (patch#3, #5 and #8) * remove a redundant check in a while loop at efi_sigstore_free() (patch#4) Changes in v2 (Nov 26, 2019) * rebased to v2020.01-rc3 * rename IMAGE_DIRECTORY_ENTRY_CERTTABLE to IMAGE_DIRECTORY_ENTRY_SECURITY (patch#1,#9) * add comments (patch#1) * drop v1's patch#2 as it is no longer necessary * drop v1's patch#3 as other "SECURE_BOOT" architectures have renamed this option and no longer use it * add structure descriptions (patch#3) * rework hash calculation code in efi_signature_verify() and remove an odd constant, WinIndrectSha256 (patch#3) * move travis.yml changes to a separate patch (patch#12, #16) * yield_fixture() -> fixture() (patch#12) * call console.restart_uboot() at every test case (13,#14) * add patch#15; enable UEFI-related configurations by default on sandbox * add patch#16; modify Travis CI environment to run UEFI secure boot test Changes in v1 (Nov 13, 2019) * rebased to v2020.01-rc * remove already-merged patches * re-work the patch set for easier reviews, including - move a config definition patch forward (patch#4) - refactor/rename verification functions (patch#5/#10) - split signature database parser as a separate patch (patch#6) - split secure state transition code as a separate patch (patch#8) - move most part of init_secure_boot() into init_variables() (patch#8) - split test environment setup from test patches (patch#14) * add function descriptions (patch#5-#11) * make sure the section list is sorted in ascending order in hash calculation of PE image (patch#10) * add a new "-at" (authenticated access) option to "env -e" (patch#13) * list required host packages, in particular udisks2, in pytest (patch#14) * modify conftest.py to run under python3 (patch#14) * use a partition on a disk instead of a whole disk without partition table (patch#14) * reduce dependency on efitools, yet relying on its host tools (patch#14) * modify pytests to catch up wth latest changes of "env -e" syntax (patch#15,#16) RFC (Sept 18, 2019) AKASHI Takahiro (16): efi_loader: add CONFIG_EFI_SECURE_BOOT config option efi_loader: add signature verification functions efi_loader: add signature database parser efi_loader: variable: support variable authentication efi_loader: variable: add secure boot state transition efi_loader: variable: add VendorKeys variable efi_loader: image_loader: support image authentication efi_loader: set up secure boot cmd: env: use appropriate guid for authenticated UEFI variable cmd: env: add "-at" option to "env set -e" command cmd: efidebug: add "test bootmgr" sub-command efi_loader, pytest: set up secure boot environment efi_loader, pytest: add UEFI secure boot tests (authenticated variables) efi_loader, pytest: add UEFI secure boot tests (image) sandbox: add extra configurations for UEFI and related tests travis: add packages for UEFI secure boot test .travis.yml | 11 +- cmd/efidebug.c | 78 +- cmd/nvedit.c | 5 +- cmd/nvedit_efi.c | 23 +- configs/sandbox64_defconfig | 3 + configs/sandbox_defconfig | 3 + include/efi_api.h | 87 ++ include/efi_loader.h | 91 +- lib/efi_loader/Kconfig | 18 + lib/efi_loader/Makefile | 1 + lib/efi_loader/efi_boottime.c | 10 +- lib/efi_loader/efi_image_loader.c | 459 ++++++++- lib/efi_loader/efi_setup.c | 38 + lib/efi_loader/efi_signature.c | 809 +++++++++++++++ lib/efi_loader/efi_variable.c | 952 ++++++++++++++++-- test/py/README.md | 8 + test/py/tests/test_efi_secboot/conftest.py | 151 +++ test/py/tests/test_efi_secboot/defs.py | 21 + .../py/tests/test_efi_secboot/test_authvar.py | 282 ++++++ test/py/tests/test_efi_secboot/test_signed.py | 117 +++ .../tests/test_efi_secboot/test_unsigned.py | 121 +++ 21 files changed, 3157 insertions(+), 131 deletions(-) create mode 100644 lib/efi_loader/efi_signature.c create mode 100644 test/py/tests/test_efi_secboot/conftest.py create mode 100644 test/py/tests/test_efi_secboot/defs.py create mode 100644 test/py/tests/test_efi_secboot/test_authvar.py create mode 100644 test/py/tests/test_efi_secboot/test_signed.py create mode 100644 test/py/tests/test_efi_secboot/test_unsigned.py -- 2.24.0

2 18

[U-Boot] [PATCH] defconfig: k2x_hs: Remove DTB_RESELECT to fix DHCP issue
by Andrew F. Davis 27 Feb '20

27 Feb '20

From: Madan Srinivas <madans(a)ti.com> This fixes the inadvertent definition of CONFIG_DTB_RESELECT and CONFIG_MULTI_DTB_FIT in the K2x HS defconfigs, that happened as part of a resync of the defconfigs. The inclusion of these config options causes ethernet to stop working on K2x HS devices as they interfere with the installation of the secure boot monitor. This patch also removes the above configs for the K2 GP devices, as they are not needed, and to keep the differences between the GP and HS defconfigs to a minimum. Signed-off-by: Madan Srinivas <madans(a)ti.com> Signed-off-by: Andrew F. Davis <afd(a)ti.com> --- configs/k2e_evm_defconfig | 2 -- configs/k2e_hs_evm_defconfig | 2 -- configs/k2hk_evm_defconfig | 2 -- configs/k2hk_hs_evm_defconfig | 2 -- configs/k2l_evm_defconfig | 2 -- 5 files changed, 10 deletions(-) diff --git a/configs/k2e_evm_defconfig b/configs/k2e_evm_defconfig index 29334c4185..5df19efa9b 100644 --- a/configs/k2e_evm_defconfig +++ b/configs/k2e_evm_defconfig @@ -37,8 +37,6 @@ CONFIG_MTDPARTS_DEFAULT="mtdparts=davinci_nand.0:1024k(bootloader)ro,512k(params CONFIG_CMD_UBI=y CONFIG_OF_CONTROL=y CONFIG_DEFAULT_DEVICE_TREE="keystone-k2e-evm" -CONFIG_DTB_RESELECT=y -CONFIG_MULTI_DTB_FIT=y CONFIG_ENV_IS_IN_NAND=y CONFIG_SYS_RELOC_GD_ENV_ADDR=y CONFIG_NET_RANDOM_ETHADDR=y diff --git a/configs/k2e_hs_evm_defconfig b/configs/k2e_hs_evm_defconfig index 87050ef489..d4b5a5fddd 100644 --- a/configs/k2e_hs_evm_defconfig +++ b/configs/k2e_hs_evm_defconfig @@ -29,8 +29,6 @@ CONFIG_MTDPARTS_DEFAULT="mtdparts=davinci_nand.0:1024k(bootloader)ro,512k(params CONFIG_CMD_UBI=y CONFIG_OF_CONTROL=y CONFIG_DEFAULT_DEVICE_TREE="keystone-k2e-evm" -CONFIG_DTB_RESELECT=y -CONFIG_MULTI_DTB_FIT=y CONFIG_ENV_IS_IN_NAND=y CONFIG_SYS_RELOC_GD_ENV_ADDR=y CONFIG_NET_RANDOM_ETHADDR=y diff --git a/configs/k2hk_evm_defconfig b/configs/k2hk_evm_defconfig index 4cd8647d0f..0635f4a976 100644 --- a/configs/k2hk_evm_defconfig +++ b/configs/k2hk_evm_defconfig @@ -37,8 +37,6 @@ CONFIG_MTDPARTS_DEFAULT="mtdparts=davinci_nand.0:1024k(bootloader)ro,512k(params CONFIG_CMD_UBI=y CONFIG_OF_CONTROL=y CONFIG_DEFAULT_DEVICE_TREE="keystone-k2hk-evm" -CONFIG_DTB_RESELECT=y -CONFIG_MULTI_DTB_FIT=y CONFIG_ENV_IS_IN_NAND=y CONFIG_SYS_RELOC_GD_ENV_ADDR=y CONFIG_NET_RANDOM_ETHADDR=y diff --git a/configs/k2hk_hs_evm_defconfig b/configs/k2hk_hs_evm_defconfig index bd60aa86a3..96cab51687 100644 --- a/configs/k2hk_hs_evm_defconfig +++ b/configs/k2hk_hs_evm_defconfig @@ -29,8 +29,6 @@ CONFIG_MTDPARTS_DEFAULT="mtdparts=davinci_nand.0:1024k(bootloader)ro,512k(params CONFIG_CMD_UBI=y CONFIG_OF_CONTROL=y CONFIG_DEFAULT_DEVICE_TREE="keystone-k2hk-evm" -CONFIG_DTB_RESELECT=y -CONFIG_MULTI_DTB_FIT=y CONFIG_ENV_IS_IN_NAND=y CONFIG_SYS_RELOC_GD_ENV_ADDR=y CONFIG_NET_RANDOM_ETHADDR=y diff --git a/configs/k2l_evm_defconfig b/configs/k2l_evm_defconfig index b564b23dca..66f778fa0b 100644 --- a/configs/k2l_evm_defconfig +++ b/configs/k2l_evm_defconfig @@ -37,8 +37,6 @@ CONFIG_MTDPARTS_DEFAULT="mtdparts=davinci_nand.0:1024k(bootloader)ro,512k(params CONFIG_CMD_UBI=y CONFIG_OF_CONTROL=y CONFIG_DEFAULT_DEVICE_TREE="keystone-k2l-evm" -CONFIG_DTB_RESELECT=y -CONFIG_MULTI_DTB_FIT=y CONFIG_ENV_IS_IN_NAND=y CONFIG_SYS_RELOC_GD_ENV_ADDR=y CONFIG_NET_RANDOM_ETHADDR=y -- 2.17.1

2 1

[PATCH] misc: k3_avs: Fix possible NULL pointer deference
by Vignesh Raghavendra 27 Feb '20

27 Feb '20

Its possible that k3_avs_priv is NULL because the driver may not have been probed yet. Therefore check if pointer is valid before dereferencing it. Signed-off-by: Vignesh Raghavendra <vigneshr(a)ti.com> --- drivers/misc/k3_avs.c | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/drivers/misc/k3_avs.c b/drivers/misc/k3_avs.c index c19c3c0646b7..adaf75b7165d 100644 --- a/drivers/misc/k3_avs.c +++ b/drivers/misc/k3_avs.c @@ -190,6 +190,10 @@ int k3_avs_notify_freq(int dev_id, int clk_id, u32 freq) struct k3_avs_privdata *priv = k3_avs_priv; struct vd_data *vd; + /* Driver may not be probed yet */ + if (!priv) + return -EINVAL; + for (vd = priv->vd_config->vds; vd->id >= 0; vd++) { if (vd->dev_id != dev_id || vd->clk_id != clk_id) continue; -- 2.25.0

3 2

sunxi: Pine A64 LTS crashes for make pine64-lts_defconfig + CONFIG_LOG
by Heinrich Schuchardt 26 Feb '20

26 Feb '20

Hello Jagan, hello Maxime, when I try to enable additional options in .config for the Pine A64 LTS I end up in an endless loop returning into the ARM trusted firmware (ATF) and then SPL. Do you have an idea where to search? Do we run into an image size problem? Here is an example: make pine64-lts_defconfig CONFIG_LOG=y CONFIG_LOG_MAX_LEVEL=6 CONFIG_LOG_CONSOLE=y make U-Boot SPL 2020.04-rc3-dirty (Feb 26 2020 - 22:23:31 +0000) DRAM:MBUS port 0 cfg0 00a0000d cfg1 00500064 MBUS port 1 cfg0 06000008 cfg1 01000578 MBUS port 2 cfg0 0200000d cfg1 00600100 MBUS port 3 cfg0 01000009 cfg1 00640050 MBUS port 4 cfg0 07000009 cfg1 01000640 MBUS port 5 cfg0 01000009 cfg1 00000080 MBUS port 6 cfg0 01000009 cfg1 00400080 MBUS port 7 cfg0 0100000d cfg1 00400080 MBUS port 8 cfg0 0100000d cfg1 00400080 MBUS port 9 cfg0 04000009 cfg1 00400100 MBUS port 10 cfg0 20000209 cfg1 08001800 MBUS port 11 cfg0 05000009 cfg1 00400090 2048 MiB SPL malloc() before relocation used 0x0 bytes (0 KB) >>SPL: board_init_r() Trying to boot from MMC1 init mmc 0 resource init mmc 0 clock and io mmc 0 set mod-clk req 24000000 parent 24000000 n 1 m 1 rate 24000000 init mmc 2 resource init mmc 2 clock and io mmc 2 set mod-clk req 24000000 parent 24000000 n 1 m 1 rate 24000000 clock is disabled (0Hz) set ios: bus_width: 0, clock: 0 set ios: bus_width: 1, clock: 0 clock is enabled (400000Hz) set ios: bus_width: 1, clock: 400000 mmc 0 set mod-clk req 400000 parent 24000000 n 4 m 15 rate 400000 mmc 0, cmd 0(0x80008000), arg 0x00000000 mmc resp 0x00000000 mmc 0, cmd 8(0x80000148), arg 0x000001aa mmc resp 0x000001aa mmc 0, cmd 55(0x80000177), arg 0x00000000 mmc resp 0x00000120 mmc 0, cmd 41(0x80000069), arg 0x40300000 mmc resp 0x40ff8000 mmc 0, cmd 55(0x80000177), arg 0x00000000 mmc resp 0x00000120 mmc 0, cmd 41(0x80000069), arg 0x40300000 mmc resp 0xc0ff8000 mmc 0, cmd 2(0x800001c2), arg 0x00000000 mmc resp 0x0600db0b 0x80009d5a 0x55333247 0x03534453 mmc 0, cmd 3(0x80000143), arg 0x00000000 mmc resp 0xaaaa0520 mmc 0, cmd 9(0x800001c9), arg 0xaaaa0000 mmc resp 0x0a4040c3 0xedc87f80 0x5b590000 0x400e0032 mmc 0, cmd 7(0x80000147), arg 0xaaaa0000 mmc resp 0x00000700 mmc 0, cmd 55(0x80000177), arg 0xaaaa0000 mmc resp 0x00000920 mmc 0, cmd 51(0x80002373), arg 0x00000000 trans data 8 bytes cacl timeout 78 msec mmc resp 0x00000920 mmc 0, cmd 6(0x80002346), arg 0x00fffff1 trans data 64 bytes cacl timeout 78 msec mmc resp 0x00000900 mmc 0, cmd 55(0x80000177), arg 0xaaaa0000 mmc resp 0x00000920 mmc 0, cmd 6(0x80000146), arg 0x00000002 mmc resp 0x00000920 set ios: bus_width: 4, clock: 400000 mmc 0 set mod-clk req 400000 parent 24000000 n 4 m 15 rate 400000 mmc 0, cmd 6(0x80002346), arg 0x80fffff1 trans data 64 bytes cacl timeout 78 msec mmc resp 0x00000900 clock is enabled (50000000Hz) set ios: bus_width: 4, clock: 50000000 mmc 0 set mod-clk req 50000000 parent 600000000 n 1 m 12 rate 50000000 spl: mmc boot mode: raw mmc 0, cmd 16(0x80000150), arg 0x00000200 mmc resp 0x00000900 mmc 0, cmd 17(0x80002351), arg 0x00000050 trans data 512 bytes cacl timeout 78 msec mmc resp 0x00000900 hdr read sector 50, count=1 Found FIT mmc 0, cmd 16(0x80000150), arg 0x00000200 mmc resp 0x00000900 mmc 0, cmd 18(0x80003352), arg 0x00000050 trans data 1024 bytes cacl timeout 78 msec mmc resp 0x00000900 mmc cmd 12 check rsp busy fit read sector 50, sectors=2, dst=49fffa40, count=2, size=0x394 Selecting config 'sun50i-a64-pine64-lts'firmware: 'uboot' mmc 0, cmd 16(0x80000150), arg 0x00000200 mmc resp 0x00000900 mmc 0, cmd 18(0x80003352), arg 0x00000051 trans data 635904 bytes cacl timeout 78 msec mmc resp 0x00000900 mmc cmd 12 check rsp busy External data: dst=4a000000, offset=394, size=9b218 Selecting config 'sun50i-a64-pine64-lts'fdt: 'fdt_1' Can't get 'load' property from FIT 0x49fffa40, node: offset 436, name fdt_1 (FDT_ERR_NOTFOUND) mmc 0, cmd 16(0x80000150), arg 0x00000200 mmc resp 0x00000900 mmc 0, cmd 18(0x80003352), arg 0x00000583 trans data 19968 bytes cacl timeout 78 msec mmc resp 0x00000900 mmc cmd 12 check rsp busy External data: dst=4a09b240, offset=a6734, size=4b6d Selecting config 'sun50i-a64-pine64-lts'loadables: 'atf' mmc 0, cmd 16(0x80000150), arg 0x00000200 mmc resp 0x00000900 mmc 0, cmd 18(0x80003352), arg 0x0000052a trans data 46080 bytes cacl timeout 78 msec mmc resp 0x00000900 mmc cmd 12 check rsp busy External data: dst=44000, offset=9b5ac, size=b185 Selecting config 'sun50i-a64-pine64-lts'fdt: 'fdt_1' Can't get 'load' property from FIT 0x49fffa40, node: offset 436, name fdt_1 (FDT_ERR_NOTFOUND) mmc 0, cmd 16(0x80000150), arg 0x00000200 mmc resp 0x00000900 mmc 0, cmd 18(0x80003352), arg 0x00000583 trans data 19968 bytes cacl timeout 78 msec mmc resp 0x00000900 mmc cmd 12 check rsp busy External data: dst=4f1c0, offset=a6734, size=4b6d Selecting config 'sun50i-a64-pine64-lts'no string for index 1 Jumping to U-Boot SPL malloc() used 0x330 bytes (0 KB) loaded - jumping to U-Boot... image entry point: 0x44000 NOTICE: BL31: v2.2(debug):v2.2-784-g896d684de NOTICE: BL31: Built : 20:11:27, Feb 26 2020 NOTICE: BL31: Detected Allwinner A64/H64/R18 SoC (1689) NOTICE: BL31: Found U-Boot DTB at 0x409b218, model: Pine64 LTS INFO: ARM GICv2 driver initialized INFO: Configuring SPC Controller INFO: PMIC: Probing AXP803 on RSB INFO: PMIC: dcdc1 voltage: 3.300V INFO: PMIC: dcdc5 voltage: 1.200V INFO: PMIC: dcdc6 voltage: 1.100V INFO: PMIC: dldo1 voltage: 3.300V INFO: PMIC: Enabling DC SW INFO: BL31: Platform setup done INFO: BL31: Initializing runtime services INFO: BL31: cortex_a53: CPU workaround for 843419 was applied INFO: BL31: cortex_a53: CPU workaround for 855873 was applied INFO: BL31: Preparing for EL3 exit to normal world INFO: Entry point address = 0x4a000000 INFO: SPSR = 0x3c9 U-Boot SPL 2020.04-rc3-dirty (Feb 26 2020 - 22:23:31 +0000) DRAM:MBUS port 0 cfg0 00a0000d cfg1 00500064 Best regards Heinrich

1 0

[PATCH 1/1] drivers/rng: add Amlogic hardware RNG driver
by Heinrich Schuchardt 26 Feb '20

26 Feb '20

Add support for the hardware random number generator of Amlogic SOCs. Signed-off-by: Heinrich Schuchardt <xypron.glpk(a)gmx.de> --- drivers/rng/Kconfig | 8 +++ drivers/rng/Makefile | 1 + drivers/rng/meson-rng.c | 120 ++++++++++++++++++++++++++++++++++++++++ 3 files changed, 129 insertions(+) create mode 100644 drivers/rng/meson-rng.c diff --git a/drivers/rng/Kconfig b/drivers/rng/Kconfig index c1aa43b823..edb6152bb9 100644 --- a/drivers/rng/Kconfig +++ b/drivers/rng/Kconfig @@ -8,6 +8,14 @@ config DM_RNG if DM_RNG +config RNG_MESON + bool "Amlogic Meson Random Number Generator support" + depends on ARCH_MESON + default y + help + Enable support for hardware random number generator + of Amlogic Meson SoCs. + config RNG_SANDBOX bool "Sandbox random number generator" depends on SANDBOX diff --git a/drivers/rng/Makefile b/drivers/rng/Makefile index 3517005541..6a8a66779b 100644 --- a/drivers/rng/Makefile +++ b/drivers/rng/Makefile @@ -4,5 +4,6 @@ # obj-$(CONFIG_DM_RNG) += rng-uclass.o +obj-$(CONFIG_RNG_MESON) += meson-rng.o obj-$(CONFIG_RNG_SANDBOX) += sandbox_rng.o obj-$(CONFIG_RNG_STM32MP1) += stm32mp1_rng.o diff --git a/drivers/rng/meson-rng.c b/drivers/rng/meson-rng.c new file mode 100644 index 0000000000..4b81a62353 --- /dev/null +++ b/drivers/rng/meson-rng.c @@ -0,0 +1,120 @@ +// SPDX-License-Identifier: GPL-2.0-or-later +/* + * Copyright 2020, Heinrich Schuchardt <xypron.glpk(a)gmx.de> + * + * Driver for Amlogic hardware random number generator + */ + +#include <common.h> +#include <clk.h> +#include <dm.h> +#include <rng.h> +#include <asm/io.h> + +struct meson_rng_platdata { + fdt_addr_t base; + struct clk clk; +}; + +/** + * meson_rng_read() - fill buffer with random bytes + * + * @buffer: buffer to receive data + * @size: size of buffer + * + * Return: 0 + */ +static int meson_rng_read(struct udevice *dev, void *data, size_t len) +{ + struct meson_rng_platdata *pdata = dev_get_platdata(dev); + char *buffer = (char *)data; + + while (len) { + u32 rand = readl(pdata->base); + size_t step; + + if (len >= 4) + step = 4; + else + step = len; + memcpy(buffer, &rand, step); + buffer += step; + len -= step; + } + return 0; +} + +/** + * meson_rng_probe() - probe rng device + * + * @dev: device + * Return: 0 if ok + */ +static int meson_rng_probe(struct udevice *dev) +{ + struct meson_rng_platdata *pdata = dev_get_platdata(dev); + int err; + + err = clk_enable(&pdata->clk); + if (err) + return err; + + return 0; +} + +/** + * meson_rng_remove() - deinitialize rng device + * + * @dev: device + * Return: 0 if ok + */ +static int meson_rng_remove(struct udevice *dev) +{ + struct meson_rng_platdata *pdata = dev_get_platdata(dev); + + return clk_disable(&pdata->clk); +} + +/** + * meson_rng_ofdata_to_platdata() - transfer device tree data to plaform data + * + * @dev: device + * Return: 0 if ok + */ +static int meson_rng_ofdata_to_platdata(struct udevice *dev) +{ + struct meson_rng_platdata *pdata = dev_get_platdata(dev); + int err; + + pdata->base = dev_read_addr(dev); + if (!pdata->base) + return -ENODEV; + + err = clk_get_by_name(dev, "core", &pdata->clk); + if (err) + return err; + + return 0; +} + +static const struct dm_rng_ops meson_rng_ops = { + .read = meson_rng_read, +}; + +static const struct udevice_id meson_rng_match[] = { + { + .compatible = "amlogic,meson-rng", + }, + {}, +}; + +U_BOOT_DRIVER(meson_rng) = { + .name = "meson-rng", + .id = UCLASS_RNG, + .of_match = meson_rng_match, + .ops = &meson_rng_ops, + .probe = meson_rng_probe, + .remove = meson_rng_remove, + .platdata_auto_alloc_size = sizeof(struct meson_rng_platdata), + .ofdata_to_platdata = meson_rng_ofdata_to_platdata, +}; -- 2.20.1

3 6

[U-Boot] RFC: Migration target date for DM_ETH
by Heinrich Schuchardt 26 Feb '20

26 Feb '20

Currently dozens of boards still do not use the driver model for the network devices. This makes integration between devices in the UEFI sub-system with the U-Boot devices complicated. See: https://travis-ci.org/xypron2/u-boot/builds/569675547 In doc/driver-model/migration.rst I am missing a migration target day for DM_ETH. Shouldn't define one? 2020-07 should be realistic. Best regards Heinrich

4 5

[PATCH 1/1] include/ata.h: remove invalid links
by Heinrich Schuchardt 26 Feb '20

26 Feb '20

Remove invalid URLs for "Information Technology - AT Attachment-3 Interface (ATA-3)". Signed-off-by: Heinrich Schuchardt <xypron.glpk(a)gmx.de> --- include/ata.h | 4 ---- 1 file changed, 4 deletions(-) diff --git a/include/ata.h b/include/ata.h index 3f4e4a0234..aecb9cd589 100644 --- a/include/ata.h +++ b/include/ata.h @@ -7,10 +7,6 @@ /* * Most of the following information was derived from the document * "Information Technology - AT Attachment-3 Interface (ATA-3)" - * which can be found at: - * http://www.dt.wdc.com/ata/ata-3/ata3r5v.zip - * ftp://poctok.iae.nsk.su/pub/asm/Documents/IDE/ATA3R5V.ZIP - * ftp://ftp.fee.vutbr.cz/pub/doc/io/ata/ata-3/ata3r5v.zip */ #ifndef _ATA_H -- 2.25.0

2 4

[PATCH] raspberrypi: reserve first two pages in efi memory map
by kevans＠FreeBSD.org 26 Feb '20

26 Feb '20

From: Kyle Evans <kevans(a)FreeBSD.org> The psci stub provided by Raspberry Pi is around 5k in size, thus residing in the first two pages of memory. Without this reservation, the next stage or OS assume they're free to use the second page and may get catastrophic results from clobbering it. Signed-off-by: Kyle Evans <kevans(a)FreeBSD.org> Cc: Matthias Brugger <mbrugger(a)suse.com> --- board/raspberrypi/rpi/rpi.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/board/raspberrypi/rpi/rpi.c b/board/raspberrypi/rpi/rpi.c index e367ba3092..d3f9bd16ac 100644 --- a/board/raspberrypi/rpi/rpi.c +++ b/board/raspberrypi/rpi/rpi.c @@ -488,8 +488,8 @@ int ft_board_setup(void *blob, bd_t *bd) lcd_dt_simplefb_add_node(blob); #ifdef CONFIG_EFI_LOADER - /* Reserve the spin table */ - efi_add_memory_map(0, 1, EFI_RESERVED_MEMORY_TYPE, 0); + /* Reserve the first two pages for spin table/psci stub. */ + efi_add_memory_map(0, 2, EFI_RESERVED_MEMORY_TYPE, 0); #endif return 0; -- 2.25.1

3 3

[PATCH 16/18] arch: arm: dts: imxrt1050-evk: add lcdif node
by Giulio Benetti 26 Feb '20

26 Feb '20

Add lcdif node and its pinctrl. Signed-off-by: Giulio Benetti <giulio.benetti(a)benettiengineering.com> --- arch/arm/dts/imxrt1050-evk.dts | 57 ++++++++++++++++++++++++++++++++++ 1 file changed, 57 insertions(+) diff --git a/arch/arm/dts/imxrt1050-evk.dts b/arch/arm/dts/imxrt1050-evk.dts index 56b75986e2..f3e3baa6dc 100644 --- a/arch/arm/dts/imxrt1050-evk.dts +++ b/arch/arm/dts/imxrt1050-evk.dts @@ -185,6 +185,33 @@ 0x17061 >; }; + + pinctrl_lcdif: lcdifgrp { + u-boot,dm-spl; + fsl,pins = < + MXRT1050_IOMUXC_GPIO_B0_00_LCD_CLK 0x1b0b1 + MXRT1050_IOMUXC_GPIO_B0_01_LCD_ENABLE 0x1b0b1 + MXRT1050_IOMUXC_GPIO_B0_02_LCD_HSYNC 0x1b0b1 + MXRT1050_IOMUXC_GPIO_B0_03_LCD_VSYNC 0x1b0b1 + MXRT1050_IOMUXC_GPIO_B0_04_LCD_DATA00 0x1b0b1 + MXRT1050_IOMUXC_GPIO_B0_05_LCD_DATA01 0x1b0b1 + MXRT1050_IOMUXC_GPIO_B0_06_LCD_DATA02 0x1b0b1 + MXRT1050_IOMUXC_GPIO_B0_07_LCD_DATA03 0x1b0b1 + MXRT1050_IOMUXC_GPIO_B0_08_LCD_DATA04 0x1b0b1 + MXRT1050_IOMUXC_GPIO_B0_09_LCD_DATA05 0x1b0b1 + MXRT1050_IOMUXC_GPIO_B0_10_LCD_DATA06 0x1b0b1 + MXRT1050_IOMUXC_GPIO_B0_11_LCD_DATA07 0x1b0b1 + MXRT1050_IOMUXC_GPIO_B0_12_LCD_DATA08 0x1b0b1 + MXRT1050_IOMUXC_GPIO_B0_13_LCD_DATA09 0x1b0b1 + MXRT1050_IOMUXC_GPIO_B0_14_LCD_DATA10 0x1b0b1 + MXRT1050_IOMUXC_GPIO_B0_15_LCD_DATA11 0x1b0b1 + MXRT1050_IOMUXC_GPIO_B1_01_LCD_DATA13 0x1b0b1 + MXRT1050_IOMUXC_GPIO_B1_02_LCD_DATA14 0x1b0b1 + MXRT1050_IOMUXC_GPIO_B1_03_LCD_DATA15 0x1b0b1 + MXRT1050_IOMUXC_GPIO_B1_15_GPIO2_IO31 0x0b069 + MXRT1050_IOMUXC_GPIO_AD_B0_02_GPIO1_IO02 0x0b069 + >; + }; }; }; @@ -198,3 +225,33 @@ cd-gpios = <&gpio2 28 GPIO_ACTIVE_LOW>; }; + +&lcdif { + pinctrl-names = "default"; + pinctrl-0 = <&pinctrl_lcdif>; + display = <&display0>; + status = "okay"; + + display0: display0 { + bits-per-pixel = <16>; + bus-width = <16>; + + display-timings { + timing0: timing0 { + clock-frequency = <9300000>; + hactive = <480>; + vactive = <272>; + hback-porch = <4>; + hfront-porch = <8>; + vback-porch = <4>; + vfront-porch = <8>; + hsync-len = <41>; + vsync-len = <10>; + de-active = <1>; + pixelclk-active = <0>; + hsync-active = <0>; + vsync-active = <0>; + }; + }; + }; +}; -- 2.20.1

1 2

[ANN] U-Boot v2020.04-rc3 released
by Tom Rini 26 Feb '20

26 Feb '20

Hey all, It's two days late, but here is v2020.04-rc3. The series to add htmldocs tests to CI that I added on Monday took longer than I had expected to go all green in CI. I was going to do this yesterday after applying the fixes that I pushed but got side-tracked, so here we are. Once again, for a changelog, git log --merges v2020.04-rc2..v2020.04-rc3 and as always, I ask for more details in the PRs people send me so I can put them in the merge commit. The final release is still on schedule for April 6th and I plan to open my -next branch on March 2nd. Thanks all! -- Tom

4 6