// SPDX-License-Identifier: GPL-2.0 /* * Copyright (C) 2011 MediaTek Inc. */ /****************************************************************************** * INCLUDE LINUX HEADER ******************************************************************************/ #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include /* #include */ #include #include #include #include #include #include #include #include #include #include #ifdef CONFIG_OF #include #endif /****************************************************************************** * INCLUDE LIBRARY ******************************************************************************/ #include "sec_osal.h" #include "sec_mod.h" #include "sec_boot_lib.h" #include "sec_clk.h" #ifdef MTK_SECURITY_MODULE_LITE #include "masp_version.h" #endif #define SEC_DEV_NAME "sec" #define SEC_MAJOR 182 #define MOD "MASP" #define TRACE_FUNC() MSG_FUNC(SEC_DEV_NAME) /************************************************************************* * GLOBAL VARIABLE **************************************************************************/ static struct sec_mod sec = { 0 }; static struct cdev sec_dev; static struct class *sec_class; static struct device *sec_device; void __iomem *hacc_base; static const struct of_device_id masp_of_ids[] = { {.compatible = "mediatek,hacc",}, {} }; /************************************************************************** * SEC DRIVER OPEN **************************************************************************/ static int sec_open(struct inode *inode, struct file *file) { return 0; } /************************************************************************** * SEC DRIVER RELEASE **************************************************************************/ static int sec_release(struct inode *inode, struct file *file) { return 0; } /************************************************************************** * SEC DRIVER IOCTL **************************************************************************/ static long sec_ioctl(struct file *file, unsigned int cmd, unsigned long arg) { #ifdef MTK_SECURITY_MODULE_LITE return -EIO; #else return sec_core_ioctl(file, cmd, arg); #endif } static const struct file_operations sec_fops = { .owner = THIS_MODULE, .open = sec_open, .release = sec_release, .write = NULL, .read = NULL, .unlocked_ioctl = sec_ioctl }; /************************************************************************** * SEC RID PROC FUNCTION **************************************************************************/ static int sec_proc_rid_show(struct seq_file *m, void *v) { unsigned int rid[4] = { 0 }; unsigned int i = 0; sec_get_random_id((unsigned int *)rid); for (i = 0; i < 16; i++) seq_putc(m, *((char *)rid + i)); return 0; } static int sec_proc_rid_open(struct inode *inode, struct file *file) { return single_open(file, sec_proc_rid_show, NULL); } static const struct file_operations sec_proc_rid_fops = { .open = sec_proc_rid_open, .read = seq_read, .llseek = seq_lseek, .release = seq_release, }; /************************************************************************** * set_dmverity_reboot eio flag **************************************************************************/ // notify_call function static int reboot_handler_set_eio_flag(struct notifier_block *reboot, unsigned long mode, void *cmd) { int ret = 0; const char *dm_error_cmd = "dm-verity device corrupted"; if (cmd && !strcmp(cmd, dm_error_cmd)) ret = masp_hal_set_dm_verity_error(); return ret; } static struct notifier_block reboot_handler_notifier = { .notifier_call = reboot_handler_set_eio_flag, }; /************************************************************************** * SEC MODULE PARAMETER **************************************************************************/ static uint recovery_done; module_param(recovery_done, uint, 0644); /* rw-r--r-- */ MODULE_PARM_DESC(recovery_done, "recovery_done status(0 = complete, 1 = on-going, 2 = error)"); /* SEC DRIVER INIT */ static int sec_init(struct platform_device *dev) { int ret = 0; dev_t id; pr_debug("[%s] %s (%d)\n", SEC_DEV_NAME, __func__, ret); hacc_base = of_iomap(dev->dev.of_node, 0); if (!hacc_base) { pr_notice("[%s] hacc register remapping failed\n", SEC_DEV_NAME); return -ENXIO; } ret = sec_clk_enable(dev); if (ret) { pr_notice("[%s] Cannot get hacc clock\n", SEC_DEV_NAME); return ret; } id = MKDEV(SEC_MAJOR, 0); ret = register_chrdev_region(id, 1, SEC_DEV_NAME); if (ret) { pr_notice("[%s] Regist Failed (%d)\n", SEC_DEV_NAME, ret); return ret; } sec_class = class_create(THIS_MODULE, SEC_DEV_NAME); if (sec_class == NULL) { pr_notice("[%s] Create class failed(0x%x)\n", SEC_DEV_NAME, ret); ret = -1; return ret; } cdev_init(&sec_dev, &sec_fops); sec_dev.owner = THIS_MODULE; ret = cdev_add(&sec_dev, id, 1); if (ret < 0) goto exit; sec_device = device_create(sec_class, NULL, id, NULL, SEC_DEV_NAME); if (sec_class == NULL) { pr_notice("[%s] Create device failed(0x%x)\n", SEC_DEV_NAME, ret); class_destroy(sec_class); ret = -1; return ret; } sec.id = id; sec.init = 1; spin_lock_init(&sec.lock); proc_create("rid", 0444, NULL, &sec_proc_rid_fops); #ifdef MTK_SECURITY_MODULE_LITE pr_debug("[MASP Lite] version '%s%s', enter.\n", BUILD_TIME, BUILD_BRANCH); #endif exit: if (ret != 0) { device_destroy(sec_class, id); class_destroy(sec_class); unregister_chrdev_region(id, 1); memset(&sec, 0, sizeof(sec)); } return ret; } /************************************************************************** * SEC DRIVER EXIT **************************************************************************/ static void sec_exit(void) { remove_proc_entry("rid", NULL); cdev_del(&sec_dev); unregister_chrdev_region(sec.id, 1); memset(&sec, 0, sizeof(sec)); #ifdef MTK_SECURITY_MODULE_LITE pr_debug("[MASP Lite] version '%s%s', exit.\n", BUILD_TIME, BUILD_BRANCH); #else sec_core_exit(); #endif } /************************************************************************** * MASP PLATFORM DRIVER WRAPPER, FOR BUILD-IN SEQUENCE **************************************************************************/ int masp_probe(struct platform_device *dev) { int ret = 0; ret = sec_init(dev); return ret; } int masp_remove(struct platform_device *dev) { sec_exit(); return 0; } static struct platform_driver masp_driver = { .driver = { .name = "masp", .owner = THIS_MODULE, .of_match_table = masp_of_ids, }, .probe = masp_probe, .remove = masp_remove, }; static int __init masp_init(void) { int ret; ret = platform_driver_register(&masp_driver); if (ret) { pr_notice("[%s] Reg platform driver failed (%d)\n", SEC_DEV_NAME, ret); return ret; } register_reboot_notifier(&reboot_handler_notifier); return ret; } #ifdef CONFIG_OF static int __init masp_parse_dt(unsigned long node, const char *uname, int depth, void *data) { struct masp_tag *tags; int i; if (depth != 1 || (strcmp(uname, "chosen") != 0 && strcmp(uname, "chosen@0") != 0)) return 0; tags = (struct masp_tag *)of_get_flat_dt_prop(node, "atag,masp", NULL); if (tags) { g_rom_info_sbc_attr = tags->rom_info_sbc_attr; g_rom_info_sdl_attr = tags->rom_info_sdl_attr; g_hw_sbcen = tags->hw_sbcen; g_lock_state = tags->lock_state; lks = tags->lock_state; for (i = 0; i < NUM_RID; i++) g_random_id[i] = tags->rid[i]; for (i = 0; i < NUM_CRYPTO_SEED; i++) g_crypto_seed[i] = tags->crypto_seed[i]; for (i = 0; i < NUM_SBC_PUBK_HASH; i++) g_sbc_pubk_hash[i] = tags->sbc_pubk_hash[i]; } return 1; } static int __init masp_of_init(void) { of_scan_flat_dt(masp_parse_dt, NULL); return 0; } #endif static void __exit masp_exit(void) { /*platform_driver_unregister(&es_driver);*/ platform_driver_unregister(&masp_driver); unregister_reboot_notifier(&reboot_handler_notifier); } module_init(masp_init); module_exit(masp_exit); /************************************************************************** * EXPORT FUNCTION **************************************************************************/ EXPORT_SYMBOL(sec_get_random_id); MODULE_LICENSE("GPL"); MODULE_AUTHOR("MediaTek Inc."); #ifdef CONFIG_OF early_initcall(masp_of_init); #endif #ifdef MTK_SECURITY_MODULE_LITE MODULE_DESCRIPTION("Mediatek Security Module Lite"); #else MODULE_DESCRIPTION("Mediatek Security Module"); #endif