1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
|
/*
* Copyright (C) 2016 The Android Open Source Project
*
* Permission is hereby granted, free of charge, to any person
* obtaining a copy of this software and associated documentation
* files (the "Software"), to deal in the Software without
* restriction, including without limitation the rights to use, copy,
* modify, merge, publish, distribute, sublicense, and/or sell copies
* of the Software, and to permit persons to whom the Software is
* furnished to do so, subject to the following conditions:
*
* The above copyright notice and this permission notice shall be
* included in all copies or substantial portions of the Software.
*
* THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
* EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
* MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
* NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS
* BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN
* ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
* CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
* SOFTWARE.
*/
#include <trusty/avb.h>
#include <trusty/rpmb.h>
#include <trusty/trusty_ipc.h>
#include <trusty/util.h>
#define LOCAL_LOG 0
static bool initialized;
static int avb_tipc_version = 1;
static struct trusty_ipc_chan avb_chan;
static int avb_send_request(struct avb_message *msg, void *req, size_t req_len)
{
struct trusty_ipc_iovec req_iovs[2] = {
{ .base = msg, .len = sizeof(*msg) },
{ .base = req, .len = req_len },
};
return trusty_ipc_send(&avb_chan, req_iovs, req ? 2 : 1, true);
}
static int avb_read_response(struct avb_message *msg, uint32_t cmd, void *resp,
size_t resp_len)
{
int rc;
struct trusty_ipc_iovec resp_iovs[2] = {
{ .base = msg, .len = sizeof(*msg) },
{ .base = resp, .len = resp_len },
};
rc = trusty_ipc_recv(&avb_chan, resp_iovs, resp ? 2 : 1, true);
if (rc < 0) {
trusty_error("failed (%d) to recv response\n", rc);
return rc;
}
if (msg->cmd != (cmd | AVB_RESP_BIT)) {
trusty_error("malformed response\n");
return TRUSTY_ERR_GENERIC;
}
/* return payload size */
return rc - sizeof(*msg);
}
/*
* Convenience function to send a request to the AVB service and read the
* response.
*
* @cmd: the command
* @req: the request buffer
* @req_size: size of the request buffer
* @resp: the response buffer
* @resp_size_p: pointer to the size of the response buffer. changed to the
actual size of the response read from the secure side
*/
static int avb_do_tipc(uint32_t cmd, void *req, uint32_t req_size, void *resp,
uint32_t *resp_size_p)
{
int rc;
struct avb_message msg = { .cmd = cmd };
if (!initialized && cmd != AVB_GET_VERSION) {
trusty_error("%s: AVB TIPC client not initialized\n", __func__);
return TRUSTY_ERR_GENERIC;
}
rc = avb_send_request(&msg, req, req_size);
if (rc < 0) {
trusty_error("%s: failed (%d) to send AVB request\n", __func__, rc);
return rc;
}
uint32_t resp_size = resp_size_p ? *resp_size_p : 0;
rc = avb_read_response(&msg, cmd, resp, resp_size);
if (rc < 0) {
trusty_error("%s: failed (%d) to read AVB response\n", __func__, rc);
return rc;
}
/* change response size to actual response size */
if (resp_size_p && rc != *resp_size_p) {
*resp_size_p = rc;
}
if (msg.result != AVB_ERROR_NONE) {
trusty_error("%s: AVB service returned error (%d)\n", __func__,
msg.result);
return TRUSTY_ERR_GENERIC;
}
return TRUSTY_ERR_NONE;
}
static int avb_get_version(uint32_t *version)
{
int rc;
struct avb_get_version_resp resp;
uint32_t resp_size = sizeof(resp);
rc = avb_do_tipc(AVB_GET_VERSION, NULL, 0, &resp, &resp_size);
*version = resp.version;
return rc;
}
int avb_tipc_init(struct trusty_ipc_dev *dev)
{
int rc;
uint32_t version = 0;
trusty_assert(dev);
trusty_assert(!initialized);
trusty_ipc_chan_init(&avb_chan, dev);
trusty_debug("Connecting to AVB service\n");
/* connect to AVB service and wait for connect to complete */
rc = trusty_ipc_connect(&avb_chan, AVB_PORT, true);
if (rc < 0) {
trusty_error("failed (%d) to connect to '%s'\n", rc, AVB_PORT);
return rc;
}
/* check for version mismatch */
rc = avb_get_version(&version);
if (rc != 0) {
trusty_error("Error getting version");
return TRUSTY_ERR_GENERIC;
}
if (version != avb_tipc_version) {
trusty_error("AVB TIPC version mismatch. Expected %u, received %u\n",
avb_tipc_version, version);
return TRUSTY_ERR_GENERIC;
}
/* mark as initialized */
initialized = true;
return TRUSTY_ERR_NONE;
}
void avb_tipc_shutdown(struct trusty_ipc_dev *dev)
{
if (!initialized)
return; /* nothing to do */
/* close channel */
trusty_ipc_close(&avb_chan);
initialized = false;
}
int trusty_read_rollback_index(uint32_t slot, uint64_t *value)
{
int rc;
struct avb_rollback_req req = { .slot = slot, .value = 0 };
struct avb_rollback_resp resp;
uint32_t resp_size = sizeof(resp);
rc = avb_do_tipc(READ_ROLLBACK_INDEX, &req, sizeof(req), &resp,
&resp_size);
*value = resp.value;
return rc;
}
int trusty_write_rollback_index(uint32_t slot, uint64_t value)
{
int rc;
struct avb_rollback_req req = { .slot = slot, .value = value };
struct avb_rollback_resp resp;
uint32_t resp_size = sizeof(resp);
rc = avb_do_tipc(WRITE_ROLLBACK_INDEX, &req, sizeof(req), &resp,
&resp_size);
return rc;
}
int trusty_read_permanent_attributes(uint8_t *attributes, uint32_t size)
{
uint8_t resp_buf[AVB_MAX_BUFFER_LENGTH];
uint32_t resp_size = AVB_MAX_BUFFER_LENGTH;
int rc = avb_do_tipc(READ_PERMANENT_ATTRIBUTES, NULL, 0, resp_buf,
&resp_size);
if (rc != 0) {
return rc;
}
/* ensure caller passed size matches size returned by Trusty */
if (size != resp_size) {
return TRUSTY_ERR_INVALID_ARGS;
}
trusty_memcpy(attributes, resp_buf, resp_size);
return rc;
}
int trusty_write_permanent_attributes(uint8_t *attributes, uint32_t size)
{
return avb_do_tipc(WRITE_PERMANENT_ATTRIBUTES, attributes, size, NULL,
NULL);
}
int trusty_read_lock_state(uint8_t *lock_state)
{
uint32_t resp_size = sizeof(*lock_state);
return avb_do_tipc(READ_LOCK_STATE, NULL, 0, lock_state,
&resp_size);
}
int trusty_write_lock_state(uint8_t lock_state)
{
return avb_do_tipc(WRITE_LOCK_STATE, &lock_state, sizeof(lock_state), NULL,
NULL);
}
int trusty_lock_boot_state(void)
{
return avb_do_tipc(LOCK_BOOT_STATE, NULL, 0, NULL, NULL);
}
|
