1 // SPDX-License-Identifier: GPL-2.0+
2 /*
3  * Copyright 2015 Freescale Semiconductor, Inc.
4  */
5 
6 #include <common.h>
7 #include <command.h>
8 #include <fsl_validate.h>
9 
10 int do_esbc_halt(cmd_tbl_t *cmdtp, int flag, int argc,
11 				char * const argv[])
12 {
13 	if (fsl_check_boot_mode_secure() == 0) {
14 		printf("Boot Mode is Non-Secure. Not entering spin loop.\n");
15 		return 0;
16 	}
17 
18 	printf("Core is entering spin loop.\n");
19 loop:
20 	goto loop;
21 
22 	return 0;
23 }
24 
25 #ifndef CONFIG_SPL_BUILD
26 static int do_esbc_validate(cmd_tbl_t *cmdtp, int flag, int argc,
27 				char * const argv[])
28 {
29 	char *hash_str = NULL;
30 	uintptr_t haddr;
31 	int ret;
32 	uintptr_t img_addr = 0;
33 	char buf[20];
34 
35 	if (argc < 2)
36 		return cmd_usage(cmdtp);
37 	else if (argc > 2)
38 		/* Second arg - Optional - Hash Str*/
39 		hash_str = argv[2];
40 
41 	/* First argument - header address -32/64bit */
42 	haddr = (uintptr_t)simple_strtoul(argv[1], NULL, 16);
43 
44 	/* With esbc_validate command, Image address must be
45 	 * part of header. So, the function is called
46 	 * by passing this argument as 0.
47 	 */
48 	ret = fsl_secboot_validate(haddr, hash_str, &img_addr);
49 
50 	/* Need to set "img_addr" even if validation failure.
51 	 * Required when SB_EN in RCW set and non-fatal error
52 	 * to continue U-Boot
53 	 */
54 	sprintf(buf, "%lx", img_addr);
55 	env_set("img_addr", buf);
56 
57 	if (ret)
58 		return 1;
59 
60 	printf("esbc_validate command successful\n");
61 	return 0;
62 }
63 
64 /***************************************************/
65 static char esbc_validate_help_text[] =
66 	"esbc_validate hdr_addr <hash_val> - Validates signature using\n"
67 	"                          RSA verification\n"
68 	"                          $hdr_addr Address of header of the image\n"
69 	"                          to be validated.\n"
70 	"                          $hash_val -Optional\n"
71 	"                          It provides Hash of public/srk key to be\n"
72 	"                          used to verify signature.\n";
73 
74 U_BOOT_CMD(
75 	esbc_validate,	3,	0,	do_esbc_validate,
76 	"Validates signature on a given image using RSA verification",
77 	esbc_validate_help_text
78 );
79 
80 U_BOOT_CMD(
81 	esbc_halt,	1,	0,	do_esbc_halt,
82 	"Put the core in spin loop (Secure Boot Only)",
83 	""
84 );
85 #endif
86