From patchwork Mon May 27 12:54:50 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Bartosz Golaszewski X-Patchwork-Id: 13675193 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from bombadil.infradead.org (bombadil.infradead.org [198.137.202.133]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.lore.kernel.org (Postfix) with ESMTPS id C3EE0C25B74 for ; Mon, 27 May 2024 12:57:08 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=lists.infradead.org; s=bombadil.20210309; h=Sender: Content-Transfer-Encoding:Content-Type:List-Subscribe:List-Help:List-Post: List-Archive:List-Unsubscribe:List-Id:Cc:To:MIME-Version:Message-Id:Date: Subject:From:Reply-To:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References: List-Owner; bh=ShLjpnNY6pOrX0x1LysLoTRrbbQdGNdpsm+PnRy/J/g=; b=OzXrR7P+R4odEj 6Ity2wS7otUJJyuD5aoDehalSdnPnDMOhH4ItgTA5dMDciR0yDXB8dfIKwCWi4uvBGwS71eWy+yGK GKckcgHCJ79me2pKCXmKQg7GDkINqGNs7jjt06DaIs7FWKExXGgIbokxwqXPfJGriEEiRZ9xzSlvr WKOV5L1KCQEqOcUSVcKYoDn6E0B//aUdAvlzm6kYwUWf+8VIsvKP7k6mY9HZdb+NpXXwSrI60NxK9 97TySBeKcay06WFd3n0yjTEXjX86rwP49k0CW5Wuzqlf28UuaNFLi4tNOpFLcNykzZBmn3B61iLPR Y6/q3t05QzIeL8rObanA==; Received: from localhost ([::1] helo=bombadil.infradead.org) by bombadil.infradead.org with esmtp (Exim 4.97.1 #2 (Red Hat Linux)) id 1sBZuF-0000000ExbZ-3WW4; Mon, 27 May 2024 12:56:51 +0000 Received: from mail-wm1-x32d.google.com ([2a00:1450:4864:20::32d]) by bombadil.infradead.org with esmtps (Exim 4.97.1 #2 (Red Hat Linux)) id 1sBZuC-0000000ExYg-0DU3 for linux-arm-kernel@lists.infradead.org; Mon, 27 May 2024 12:56:49 +0000 Received: by mail-wm1-x32d.google.com with SMTP id 5b1f17b1804b1-420180b5922so61332795e9.2 for ; Mon, 27 May 2024 05:56:46 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=bgdev-pl.20230601.gappssmtp.com; s=20230601; t=1716814605; x=1717419405; darn=lists.infradead.org; h=cc:to:content-transfer-encoding:mime-version:message-id:date :subject:from:from:to:cc:subject:date:message-id:reply-to; bh=GD82MM1VVjohnjRvbeZeJlkCdboh2s6SKcgpo4ScdJw=; b=OGGnW7MRGWBFsekU+maThHOEsWT4wb3z5RVKjOMBtsDlPErqtiv+/hwUyr7Zz2+3Zc 0sG9ahqy4GR2AqQtI7k/05Z7ngE3V6ri+Y/pmx+kVdgraypzuAPZCme4ZOetQF9eCpx+ z9HHrBSWbo8avUWzGM4rRfOtdnRS+6LdDZk2giivD8OTYeyRzq3t6AXfdwSu2yGXO8VD 4Tb7LiELBWp8Lzs0r78c0ucdgv6cYg5dhMMFE+kvmQhV4U+lJF2cUp0vkYcG6/yW3bYU PYZkV+xzB8sPRf8st06fV0v0zDag4w+CVL57NW5geTOyWYhkQ6zsjOcApCm7k/nHdUK6 Jczw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1716814605; x=1717419405; h=cc:to:content-transfer-encoding:mime-version:message-id:date :subject:from:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=GD82MM1VVjohnjRvbeZeJlkCdboh2s6SKcgpo4ScdJw=; b=mjQmreXpHMsw32SgY6Zg2smlMF3UC/murh9FseBTG6CL4/H33CQoo0H0zTzdvgMwwl dkEb8GjCjs75g6h5OhyW8uc7OYWecpQHz+3pBNyCE3ML1g5H/s1kjo+AmjHLJIdfYQgR rB7gIkfLuPGrauAseH4rNWWS1a/QB0T1C9ohnwXXRXXVreYIOJAV5LtOUstWWmrLp8gA qAlAHIlvknG2mX2fAOIBh0j7mrntWh10IY9GuUbf5wOco0oxDObov2vjsZFpO4PyRjoo yyFogBHVS0D2rvDYC3Z144MI0OhDPTaN6xUVTjT6eYaah79pPZ8NfIbeFuESt3a1OsqX hcEw== X-Forwarded-Encrypted: i=1; AJvYcCVjj/yX3neMBxnQqg+JiQiW0ZarSx33a/JGKfDTskatSDHXRT3VEZVFfjf7JTnQtBPLYb1dDBUzxCjuxHTHj3BEDM7yakwOa1NZxd9P40ag2IExEHs= X-Gm-Message-State: AOJu0YwvPNeo3PcXdsEF84dRTsaXFd6AvZMDl2CcXDIUOnNWGKUGohD8 bmcjEjbzfX0DHrC0jTTXimoeYtOWoGPpD1wFozr9KNYlgtfpKL+LG4lQM8IKvxs= X-Google-Smtp-Source: AGHT+IE5ugbBF1IRGuSLkrpLGi0B589uc1IvGTg3DvM/wSrGwWTLZuoK7IkX4Cupa1ZlCdYCe3k0VQ== X-Received: by 2002:a05:600c:5354:b0:420:f8:23d6 with SMTP id 5b1f17b1804b1-42108aa7589mr94703665e9.36.1716814604660; Mon, 27 May 2024 05:56:44 -0700 (PDT) Received: from [127.0.1.1] ([2a01:cb1d:75a:e000:c322:131e:ff9d:ef41]) by smtp.gmail.com with ESMTPSA id 5b1f17b1804b1-42100f64f98sm138753635e9.24.2024.05.27.05.56.43 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 27 May 2024 05:56:44 -0700 (PDT) From: Bartosz Golaszewski Subject: [PATCH v10 00/15] firmware: qcom: implement support for and enable SHM bridge Date: Mon, 27 May 2024 14:54:50 +0200 Message-Id: <20240527-shm-bridge-v10-0-ce7afaa58d3a@linaro.org> MIME-Version: 1.0 X-B4-Tracking: v=1; b=H4sIAJqCVGYC/6tWKk4tykwtVrJSqFYqSi3LLM7MzwNyDA10FJSSM xLz0lN1M1OAAkpGBkYmBqZG5rrFGbm6SUWZKUCZVCMTS5O05OQkgyRTJaCGgqLUtMwKsGnRsbW 1AHRGr/9dAAAA To: Bjorn Andersson , Konrad Dybcio , Rob Herring , Krzysztof Kozlowski , Conor Dooley , Robert Marko , Das Srinagesh , Bartosz Golaszewski , Maximilian Luz , Catalin Marinas , Will Deacon , Srini Kandagatla , Arnd Bergmann , Elliot Berman , Alex Elder Cc: linux-arm-msm@vger.kernel.org, devicetree@vger.kernel.org, linux-kernel@vger.kernel.org, linux-arm-kernel@lists.infradead.org, kernel@quicinc.com, Andrew Halaney , Deepti Jaggi X-Mailer: b4 0.13.0 X-Developer-Signature: v=1; a=openpgp-sha256; l=6070; i=bartosz.golaszewski@linaro.org; h=from:subject:message-id; bh=CA8042YIpnyj2ZXHYRDm1I27BUIfcazEW/6sonPev8Q=; b=owEBbQKS/ZANAwAKARGnLqAUcddyAcsmYgBmVIMEs510EWY0AP7N7UDVpxO2Si8KYg3b7HUsk D/JPsAZSw2JAjMEAAEKAB0WIQQWnetsC8PEYBPSx58Rpy6gFHHXcgUCZlSDBAAKCRARpy6gFHHX citoD/9Zd1+dMd+FnsjX5/jY0RWRlqxdoaDVqQWUwTdCnDssRbXefCUcB7LYJo9UXENpfuqwqJE ljZtDmSe+n4bp9RGKTJl0eLLKlDld4q430oe83vF2z0848OwCXGg9l/60Z0J5T8fBHizikYDrAO Sr2MaUUC5VS8ZqO/bKh5rMUtEQWgGcDNxIevAm2qBdlLCTbS3fMWP5TvmGPW34/ofkLgPK/P52C 6u9t2TOSceD6+Q5OvtBtev64l4X7MF2fNSklCKeeTXm2Xj5fRN9/ibIaczulaNW+DEtZGlyriU/ cF/PIHb6Z7j0c96czpKjtmgiIc6Tnwc3zi4JzVvxI6+QnP5W+ImEtnm3kXSv3TP+ML/9YBON1iB 9R3S/yHktXXgURFUwmFCEGHYledlk4onvVyRLF73BbNA0EifW7YVxuzAgtbZKFgB8yc6DdN22DZ kTUy8RGeTDEwFPs/H2KOmXQvwXRMklWMrG8v0zvrJgPp09Hpd0HXOZ6qckhCugr7elPGPAOxlKW UQcs3DWwiquvPeN6fpJEzW0bfZM5cGSBr7sKHX0NOY6tgrXw6lsIaIYggnMFri8eyQD/2B8GoU5 7Bb+YDN2nFAvDaWjEdKv+1gsbjheGWOq27MI6e/oLSkUQaTUIscbc5+MddJFA9GjRrenA3OBfbH dtX8F7ipq8BTXQA== X-Developer-Key: i=bartosz.golaszewski@linaro.org; a=openpgp; fpr=169DEB6C0BC3C46013D2C79F11A72EA01471D772 X-CRM114-Version: 20100106-BlameMichelson ( TRE 0.8.0 (BSD) ) MR-646709E3 X-CRM114-CacheID: sfid-20240527_055648_222505_63A37ED8 X-CRM114-Status: GOOD ( 28.38 ) X-BeenThere: linux-arm-kernel@lists.infradead.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: "linux-arm-kernel" Errors-To: linux-arm-kernel-bounces+linux-arm-kernel=archiver.kernel.org@lists.infradead.org SCM calls that take memory buffers as arguments require that they be page-aligned, physically continuous and non-cachable. The same requirements apply to the buffer used to pass additional arguments to SCM calls that take more than 4. To that end drivers typically use dma_alloc_coherent() to allocate memory of suitable format which is slow and inefficient space-wise. SHM Bridge is a safety mechanism that - once enabled - will only allow passing buffers to the TrustZone that have been explicitly marked as shared. It improves the overall system safety with SCM calls and is required by the upcoming scminvoke functionality. The end goal of this series is to enable SHM bridge support for those architectures that support it but to that end we first need to unify the way memory for SCM calls is allocated. This in itself is beneficial as the current approach of using dma_alloc_coherent() in most places is quite slow. First let's add a new TZ Memory allocator that allows users to create dynamic memory pools of format suitable for sharing with the TrustZone. Make it ready for implementing multiple build-time modes. Convert all relevant drivers to using it. Add separate pools for SCM core and for qseecom. Finally add support for SHM bridge and make it the default mode of operation with the generic allocator as fallback for the platforms that don't support SHM bridge. Tested on db410c, RB5, sm8550-qrd, sa8775p-ride (verified the memory is allocated from the dedicated pool) and lenovo X13s. I also tested on sc8180x with SHM bridge disabled to make sure we can still use this SoC with generic allocator. v9 -> v10: - add support for dedicated TZ FFI memory carveout and enable it for sa8775p - add a blacklist of SoC known to not support SHM bridge correctly (currently only sc8180x) v8 -> v9: - split the qseecom driver rework into two parts: first convert it to using the __free() helper and then make it switch to tzmem - use QCOM_SCM_PERM_RW instead of (QCOM_SCM_PERM_WRITE | QCOM_SCM_PERM_READ) - add the TZMEM MAINTAINERS entry in correct alphabetical order - add a missing break; in a switch case in the tzmem module v7 -> v8: - make the pool size dynamic and add different policies for pool growth - improve commit messages and the cover letter: describe what the SHM bridge is and why do we need it and the new allocator, explain why it's useful to merge these changes already, independently from scminvoke - improve kerneldoc format - improve the comment on the PIL SCM calls - fix license tags, drop "or-later" for GPL v2 - add lockdep and sleeping asserts - minor tweaks and improvements v6 -> v7: - fix a Kconfig issue: TZMEM must select GENERIC_ALLOCATOR v5 -> v6: Fixed two issues reported by autobuilders: - add a fix for memory leaks in the qseecom driver as the first patch for easier backporting to the v6.6.y branch - explicitly cast the bus address stored in a variable of type dma_addr_t to phys_addr_t expected by the genpool API v4 -> v5: - fix the return value from qcom_tzmem_init() if SHM Bridge is not supported - remove a comment that's no longer useful - collect tags v3 -> v4: - include linux/sizes.h for SZ_X macros - use dedicated RCU APIs to dereference radix tree slots - fix kerneldocs - fix the comment in patch 14/15: it's the hypervisor, not the TrustZone that creates the SHM bridge v2 -> v3: - restore pool management and use separate pools for different users - don't use the new allocator in qcom_scm_pas_init_image() as the TrustZone will create an SHM bridge for us here - rewrite the entire series again for most part v1 -> v2: - too many changes to list, it's a complete rewrite as explained above --- Bartosz Golaszewski (15): dt-bindings: firmware: qcom,scm: add memory-region for sa8775p firmware: qcom: add a dedicated TrustZone buffer allocator firmware: qcom: scm: enable the TZ mem allocator firmware: qcom: scm: smc: switch to using the SCM allocator firmware: qcom: scm: make qcom_scm_assign_mem() use the TZ allocator firmware: qcom: scm: make qcom_scm_ice_set_key() use the TZ allocator firmware: qcom: scm: make qcom_scm_lmh_dcvsh() use the TZ allocator firmware: qcom: scm: make qcom_scm_qseecom_app_get_id() use the TZ allocator firmware: qcom: qseecom: convert to using the TZ allocator firmware: qcom: scm: add support for SHM bridge operations firmware: qcom: tzmem: enable SHM Bridge support firmware: qcom: scm: add support for SHM bridge memory carveout firmware: qcom: scm: clarify the comment in qcom_scm_pas_init_image() arm64: defconfig: enable SHM Bridge support for the TZ memory allocator arm64: dts: qcom: sa8775p: add a dedicated memory carveout for TZ .../devicetree/bindings/firmware/qcom,scm.yaml | 15 + MAINTAINERS | 8 + arch/arm64/boot/dts/qcom/sa8775p.dtsi | 7 + arch/arm64/configs/defconfig | 1 + drivers/firmware/qcom/Kconfig | 31 ++ drivers/firmware/qcom/Makefile | 1 + drivers/firmware/qcom/qcom_qseecom_uefisecapp.c | 256 +++++------ drivers/firmware/qcom/qcom_scm-smc.c | 30 +- drivers/firmware/qcom/qcom_scm.c | 175 ++++++-- drivers/firmware/qcom/qcom_scm.h | 6 + drivers/firmware/qcom/qcom_tzmem.c | 466 +++++++++++++++++++++ drivers/firmware/qcom/qcom_tzmem.h | 13 + include/linux/firmware/qcom/qcom_qseecom.h | 8 +- include/linux/firmware/qcom/qcom_scm.h | 14 +- include/linux/firmware/qcom/qcom_tzmem.h | 56 +++ 15 files changed, 854 insertions(+), 233 deletions(-) --- base-commit: 3689b0ef08b70e4e03b82ebd37730a03a672853a change-id: 20240527-shm-bridge-e2494fccb0b5 Best regards,