1 /* 2 * Copyright (C) 2017 Linaro 3 * Bryan O'Donoghue <bryan.odonoghue@linaro.org> 4 * 5 * SPDX-License-Identifier: GPL-2.0+ 6 */ 7 8 #include <common.h> 9 #include <tee/optee.h> 10 11 #define optee_hdr_err_msg \ 12 "OPTEE verification error:" \ 13 "\n\thdr=%p image=0x%08lx magic=0x%08x tzdram 0x%08lx-0x%08lx " \ 14 "\n\theader lo=0x%08x hi=0x%08x size=0x%08lx arch=0x%08x" \ 15 "\n\tuimage params 0x%08lx-0x%08lx\n" 16 17 int optee_verify_image(struct optee_header *hdr, unsigned long tzdram_start, 18 unsigned long tzdram_len, unsigned long image_len) 19 { 20 unsigned long tzdram_end = tzdram_start + tzdram_len; 21 uint32_t tee_file_size; 22 23 tee_file_size = hdr->init_size + hdr->paged_size + 24 sizeof(struct optee_header); 25 26 if (hdr->magic != OPTEE_MAGIC || 27 hdr->version != OPTEE_VERSION || 28 hdr->init_load_addr_hi > tzdram_end || 29 hdr->init_load_addr_lo < tzdram_start || 30 tee_file_size > tzdram_len || 31 tee_file_size != image_len || 32 (hdr->init_load_addr_lo + tee_file_size) > tzdram_end) { 33 return -EINVAL; 34 } 35 36 return 0; 37 } 38 39 int optee_verify_bootm_image(unsigned long image_addr, 40 unsigned long image_load_addr, 41 unsigned long image_len) 42 { 43 struct optee_header *hdr = (struct optee_header *)image_addr; 44 unsigned long tzdram_start = CONFIG_OPTEE_TZDRAM_BASE; 45 unsigned long tzdram_len = CONFIG_OPTEE_TZDRAM_SIZE; 46 47 int ret; 48 49 ret = optee_verify_image(hdr, tzdram_start, tzdram_len, image_len); 50 if (ret) 51 goto error; 52 53 if (image_load_addr + sizeof(*hdr) != hdr->init_load_addr_lo) { 54 ret = -EINVAL; 55 goto error; 56 } 57 58 return ret; 59 error: 60 printf(optee_hdr_err_msg, hdr, image_addr, hdr->magic, tzdram_start, 61 tzdram_start + tzdram_len, hdr->init_load_addr_lo, 62 hdr->init_load_addr_hi, image_len, hdr->arch, image_load_addr, 63 image_load_addr + image_len); 64 65 return ret; 66 } 67