1 #include <linux/acpi.h> 2 #include "tpm.h" 3 4 #define TPM_PPI_REVISION_ID 1 5 #define TPM_PPI_FN_VERSION 1 6 #define TPM_PPI_FN_SUBREQ 2 7 #define TPM_PPI_FN_GETREQ 3 8 #define TPM_PPI_FN_GETACT 4 9 #define TPM_PPI_FN_GETRSP 5 10 #define TPM_PPI_FN_SUBREQ2 7 11 #define TPM_PPI_FN_GETOPR 8 12 #define PPI_TPM_REQ_MAX 22 13 #define PPI_VS_REQ_START 128 14 #define PPI_VS_REQ_END 255 15 #define PPI_VERSION_LEN 3 16 17 static const u8 tpm_ppi_uuid[] = { 18 0xA6, 0xFA, 0xDD, 0x3D, 19 0x1B, 0x36, 20 0xB4, 0x4E, 21 0xA4, 0x24, 22 0x8D, 0x10, 0x08, 0x9D, 0x16, 0x53 23 }; 24 25 static char tpm_ppi_version[PPI_VERSION_LEN + 1]; 26 static acpi_handle tpm_ppi_handle; 27 28 static acpi_status ppi_callback(acpi_handle handle, u32 level, void *context, 29 void **return_value) 30 { 31 union acpi_object *obj; 32 33 if (!acpi_check_dsm(handle, tpm_ppi_uuid, TPM_PPI_REVISION_ID, 34 1 << TPM_PPI_FN_VERSION)) 35 return AE_OK; 36 37 /* Cache version string */ 38 obj = acpi_evaluate_dsm_typed(handle, tpm_ppi_uuid, 39 TPM_PPI_REVISION_ID, TPM_PPI_FN_VERSION, 40 NULL, ACPI_TYPE_STRING); 41 if (obj) { 42 strlcpy(tpm_ppi_version, obj->string.pointer, 43 PPI_VERSION_LEN + 1); 44 ACPI_FREE(obj); 45 } 46 47 *return_value = handle; 48 49 return AE_CTRL_TERMINATE; 50 } 51 52 static inline union acpi_object * 53 tpm_eval_dsm(int func, acpi_object_type type, union acpi_object *argv4) 54 { 55 BUG_ON(!tpm_ppi_handle); 56 return acpi_evaluate_dsm_typed(tpm_ppi_handle, tpm_ppi_uuid, 57 TPM_PPI_REVISION_ID, func, argv4, type); 58 } 59 60 static ssize_t tpm_show_ppi_version(struct device *dev, 61 struct device_attribute *attr, char *buf) 62 { 63 return scnprintf(buf, PAGE_SIZE, "%s\n", tpm_ppi_version); 64 } 65 66 static ssize_t tpm_show_ppi_request(struct device *dev, 67 struct device_attribute *attr, char *buf) 68 { 69 ssize_t size = -EINVAL; 70 union acpi_object *obj; 71 72 obj = tpm_eval_dsm(TPM_PPI_FN_GETREQ, ACPI_TYPE_PACKAGE, NULL); 73 if (!obj) 74 return -ENXIO; 75 76 /* 77 * output.pointer should be of package type, including two integers. 78 * The first is function return code, 0 means success and 1 means 79 * error. The second is pending TPM operation requested by the OS, 0 80 * means none and >0 means operation value. 81 */ 82 if (obj->package.count == 2 && 83 obj->package.elements[0].type == ACPI_TYPE_INTEGER && 84 obj->package.elements[1].type == ACPI_TYPE_INTEGER) { 85 if (obj->package.elements[0].integer.value) 86 size = -EFAULT; 87 else 88 size = scnprintf(buf, PAGE_SIZE, "%llu\n", 89 obj->package.elements[1].integer.value); 90 } 91 92 ACPI_FREE(obj); 93 94 return size; 95 } 96 97 static ssize_t tpm_store_ppi_request(struct device *dev, 98 struct device_attribute *attr, 99 const char *buf, size_t count) 100 { 101 u32 req; 102 u64 ret; 103 int func = TPM_PPI_FN_SUBREQ; 104 union acpi_object *obj, tmp; 105 union acpi_object argv4 = ACPI_INIT_DSM_ARGV4(1, &tmp); 106 107 /* 108 * the function to submit TPM operation request to pre-os environment 109 * is updated with function index from SUBREQ to SUBREQ2 since PPI 110 * version 1.1 111 */ 112 if (acpi_check_dsm(tpm_ppi_handle, tpm_ppi_uuid, TPM_PPI_REVISION_ID, 113 1 << TPM_PPI_FN_SUBREQ2)) 114 func = TPM_PPI_FN_SUBREQ2; 115 116 /* 117 * PPI spec defines params[3].type as ACPI_TYPE_PACKAGE. Some BIOS 118 * accept buffer/string/integer type, but some BIOS accept buffer/ 119 * string/package type. For PPI version 1.0 and 1.1, use buffer type 120 * for compatibility, and use package type since 1.2 according to spec. 121 */ 122 if (strcmp(tpm_ppi_version, "1.2") < 0) { 123 if (sscanf(buf, "%d", &req) != 1) 124 return -EINVAL; 125 argv4.type = ACPI_TYPE_BUFFER; 126 argv4.buffer.length = sizeof(req); 127 argv4.buffer.pointer = (u8 *)&req; 128 } else { 129 tmp.type = ACPI_TYPE_INTEGER; 130 if (sscanf(buf, "%llu", &tmp.integer.value) != 1) 131 return -EINVAL; 132 } 133 134 obj = tpm_eval_dsm(func, ACPI_TYPE_INTEGER, &argv4); 135 if (!obj) { 136 return -ENXIO; 137 } else { 138 ret = obj->integer.value; 139 ACPI_FREE(obj); 140 } 141 142 if (ret == 0) 143 return (acpi_status)count; 144 145 return (ret == 1) ? -EPERM : -EFAULT; 146 } 147 148 static ssize_t tpm_show_ppi_transition_action(struct device *dev, 149 struct device_attribute *attr, 150 char *buf) 151 { 152 u32 ret; 153 acpi_status status; 154 union acpi_object *obj = NULL; 155 union acpi_object tmp = { 156 .buffer.type = ACPI_TYPE_BUFFER, 157 .buffer.length = 0, 158 .buffer.pointer = NULL 159 }; 160 161 static char *info[] = { 162 "None", 163 "Shutdown", 164 "Reboot", 165 "OS Vendor-specific", 166 "Error", 167 }; 168 169 /* 170 * PPI spec defines params[3].type as empty package, but some platforms 171 * (e.g. Capella with PPI 1.0) need integer/string/buffer type, so for 172 * compatibility, define params[3].type as buffer, if PPI version < 1.2 173 */ 174 if (strcmp(tpm_ppi_version, "1.2") < 0) 175 obj = &tmp; 176 obj = tpm_eval_dsm(TPM_PPI_FN_GETACT, ACPI_TYPE_INTEGER, obj); 177 if (!obj) { 178 return -ENXIO; 179 } else { 180 ret = obj->integer.value; 181 ACPI_FREE(obj); 182 } 183 184 if (ret < ARRAY_SIZE(info) - 1) 185 status = scnprintf(buf, PAGE_SIZE, "%d: %s\n", ret, info[ret]); 186 else 187 status = scnprintf(buf, PAGE_SIZE, "%d: %s\n", ret, 188 info[ARRAY_SIZE(info)-1]); 189 return status; 190 } 191 192 static ssize_t tpm_show_ppi_response(struct device *dev, 193 struct device_attribute *attr, 194 char *buf) 195 { 196 acpi_status status = -EINVAL; 197 union acpi_object *obj, *ret_obj; 198 u64 req, res; 199 200 obj = tpm_eval_dsm(TPM_PPI_FN_GETRSP, ACPI_TYPE_PACKAGE, NULL); 201 if (!obj) 202 return -ENXIO; 203 204 /* 205 * parameter output.pointer should be of package type, including 206 * 3 integers. The first means function return code, the second means 207 * most recent TPM operation request, and the last means response to 208 * the most recent TPM operation request. Only if the first is 0, and 209 * the second integer is not 0, the response makes sense. 210 */ 211 ret_obj = obj->package.elements; 212 if (obj->package.count < 3 || 213 ret_obj[0].type != ACPI_TYPE_INTEGER || 214 ret_obj[1].type != ACPI_TYPE_INTEGER || 215 ret_obj[2].type != ACPI_TYPE_INTEGER) 216 goto cleanup; 217 218 if (ret_obj[0].integer.value) { 219 status = -EFAULT; 220 goto cleanup; 221 } 222 223 req = ret_obj[1].integer.value; 224 res = ret_obj[2].integer.value; 225 if (req) { 226 if (res == 0) 227 status = scnprintf(buf, PAGE_SIZE, "%llu %s\n", req, 228 "0: Success"); 229 else if (res == 0xFFFFFFF0) 230 status = scnprintf(buf, PAGE_SIZE, "%llu %s\n", req, 231 "0xFFFFFFF0: User Abort"); 232 else if (res == 0xFFFFFFF1) 233 status = scnprintf(buf, PAGE_SIZE, "%llu %s\n", req, 234 "0xFFFFFFF1: BIOS Failure"); 235 else if (res >= 1 && res <= 0x00000FFF) 236 status = scnprintf(buf, PAGE_SIZE, "%llu %llu: %s\n", 237 req, res, "Corresponding TPM error"); 238 else 239 status = scnprintf(buf, PAGE_SIZE, "%llu %llu: %s\n", 240 req, res, "Error"); 241 } else { 242 status = scnprintf(buf, PAGE_SIZE, "%llu: %s\n", 243 req, "No Recent Request"); 244 } 245 246 cleanup: 247 ACPI_FREE(obj); 248 return status; 249 } 250 251 static ssize_t show_ppi_operations(char *buf, u32 start, u32 end) 252 { 253 int i; 254 u32 ret; 255 char *str = buf; 256 union acpi_object *obj, tmp; 257 union acpi_object argv = ACPI_INIT_DSM_ARGV4(1, &tmp); 258 259 static char *info[] = { 260 "Not implemented", 261 "BIOS only", 262 "Blocked for OS by BIOS", 263 "User required", 264 "User not required", 265 }; 266 267 if (!acpi_check_dsm(tpm_ppi_handle, tpm_ppi_uuid, TPM_PPI_REVISION_ID, 268 1 << TPM_PPI_FN_GETOPR)) 269 return -EPERM; 270 271 tmp.integer.type = ACPI_TYPE_INTEGER; 272 for (i = start; i <= end; i++) { 273 tmp.integer.value = i; 274 obj = tpm_eval_dsm(TPM_PPI_FN_GETOPR, ACPI_TYPE_INTEGER, &argv); 275 if (!obj) { 276 return -ENOMEM; 277 } else { 278 ret = obj->integer.value; 279 ACPI_FREE(obj); 280 } 281 282 if (ret > 0 && ret < ARRAY_SIZE(info)) 283 str += scnprintf(str, PAGE_SIZE, "%d %d: %s\n", 284 i, ret, info[ret]); 285 } 286 287 return str - buf; 288 } 289 290 static ssize_t tpm_show_ppi_tcg_operations(struct device *dev, 291 struct device_attribute *attr, 292 char *buf) 293 { 294 return show_ppi_operations(buf, 0, PPI_TPM_REQ_MAX); 295 } 296 297 static ssize_t tpm_show_ppi_vs_operations(struct device *dev, 298 struct device_attribute *attr, 299 char *buf) 300 { 301 return show_ppi_operations(buf, PPI_VS_REQ_START, PPI_VS_REQ_END); 302 } 303 304 static DEVICE_ATTR(version, S_IRUGO, tpm_show_ppi_version, NULL); 305 static DEVICE_ATTR(request, S_IRUGO | S_IWUSR | S_IWGRP, 306 tpm_show_ppi_request, tpm_store_ppi_request); 307 static DEVICE_ATTR(transition_action, S_IRUGO, 308 tpm_show_ppi_transition_action, NULL); 309 static DEVICE_ATTR(response, S_IRUGO, tpm_show_ppi_response, NULL); 310 static DEVICE_ATTR(tcg_operations, S_IRUGO, tpm_show_ppi_tcg_operations, NULL); 311 static DEVICE_ATTR(vs_operations, S_IRUGO, tpm_show_ppi_vs_operations, NULL); 312 313 static struct attribute *ppi_attrs[] = { 314 &dev_attr_version.attr, 315 &dev_attr_request.attr, 316 &dev_attr_transition_action.attr, 317 &dev_attr_response.attr, 318 &dev_attr_tcg_operations.attr, 319 &dev_attr_vs_operations.attr, NULL, 320 }; 321 static struct attribute_group ppi_attr_grp = { 322 .name = "ppi", 323 .attrs = ppi_attrs 324 }; 325 326 int tpm_add_ppi(struct kobject *parent) 327 { 328 /* Cache TPM ACPI handle and version string */ 329 acpi_walk_namespace(ACPI_TYPE_DEVICE, ACPI_ROOT_OBJECT, ACPI_UINT32_MAX, 330 ppi_callback, NULL, NULL, &tpm_ppi_handle); 331 return tpm_ppi_handle ? sysfs_create_group(parent, &ppi_attr_grp) : 0; 332 } 333 334 void tpm_remove_ppi(struct kobject *parent) 335 { 336 if (tpm_ppi_handle) 337 sysfs_remove_group(parent, &ppi_attr_grp); 338 } 339