diff options
author | Seema Khowala <seemaj@nvidia.com> | 2017-11-09 17:13:25 -0500 |
---|---|---|
committer | mobile promotions <svcmobile_promotions@nvidia.com> | 2017-11-22 03:59:28 -0500 |
commit | 8fe633449f92d35b60a60de647a4e8fc1b5c8936 (patch) | |
tree | f29ee0ed1c9eba66b99033a17d3b2854662b0a15 /drivers/gpu/nvgpu/gp10b | |
parent | f34a4d0b125ebf45373e40478925b3eb75b7898a (diff) |
gpu: nvgpu: Add check_priv_security fuse ops
-New fuse ops is added to set NVGPU_SEC_PRIVSECURITY
and NVGPU_SEC_SECUREGPCCS bits in g->enabled_flags
during hal initialization
-For igpu non simulation platforms, fuses are read
to decide if gpu should be allowed to boot or not.
--Do not boot gpu if priv_sec_en is set but wpr_enabled
is not set to 1 or vpr_auto_fetch_disable is not set to 0
--With priv_sec_en set, all falcons have to boot
in LS mode and this needs wpr_enabled set to 1
AND vpr_auto_fetch_disable set to 0. In this case
gmmu tries to pull wpr and vpr settings from tegra mc
Bug 2018223
Change-Id: Iceaa1b0b3214e9a3d6cef5d77a82e034302f748b
Signed-off-by: Seema Khowala <seemaj@nvidia.com>
Reviewed-on: https://git-master.nvidia.com/r/1595454
Reviewed-by: mobile promotions <svcmobile_promotions@nvidia.com>
Tested-by: mobile promotions <svcmobile_promotions@nvidia.com>
Diffstat (limited to 'drivers/gpu/nvgpu/gp10b')
-rw-r--r-- | drivers/gpu/nvgpu/gp10b/fuse_gp10b.c | 91 | ||||
-rw-r--r-- | drivers/gpu/nvgpu/gp10b/fuse_gp10b.h | 32 | ||||
-rw-r--r-- | drivers/gpu/nvgpu/gp10b/hal_gp10b.c | 27 |
3 files changed, 132 insertions, 18 deletions
diff --git a/drivers/gpu/nvgpu/gp10b/fuse_gp10b.c b/drivers/gpu/nvgpu/gp10b/fuse_gp10b.c new file mode 100644 index 00000000..7743c5df --- /dev/null +++ b/drivers/gpu/nvgpu/gp10b/fuse_gp10b.c | |||
@@ -0,0 +1,91 @@ | |||
1 | /* | ||
2 | * GP10B FUSE | ||
3 | * | ||
4 | * Copyright (c) 2017, NVIDIA CORPORATION. All rights reserved. | ||
5 | * | ||
6 | * Permission is hereby granted, free of charge, to any person obtaining a | ||
7 | * copy of this software and associated documentation files (the "Software"), | ||
8 | * to deal in the Software without restriction, including without limitation | ||
9 | * the rights to use, copy, modify, merge, publish, distribute, sublicense, | ||
10 | * and/or sell copies of the Software, and to permit persons to whom the | ||
11 | * Software is furnished to do so, subject to the following conditions: | ||
12 | * | ||
13 | * The above copyright notice and this permission notice shall be included in | ||
14 | * all copies or substantial portions of the Software. | ||
15 | * | ||
16 | * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR | ||
17 | * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, | ||
18 | * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL | ||
19 | * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER | ||
20 | * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING | ||
21 | * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER | ||
22 | * DEALINGS IN THE SOFTWARE. | ||
23 | */ | ||
24 | |||
25 | #include <nvgpu/types.h> | ||
26 | #include <nvgpu/fuse.h> | ||
27 | #include <nvgpu/enabled.h> | ||
28 | |||
29 | #include "gk20a/gk20a.h" | ||
30 | |||
31 | #include "gm20b/fuse_gm20b.h" | ||
32 | |||
33 | #include <nvgpu/hw/gp10b/hw_fuse_gp10b.h> | ||
34 | |||
35 | int gp10b_fuse_check_priv_security(struct gk20a *g) | ||
36 | { | ||
37 | u32 gcplex_config; | ||
38 | |||
39 | if (nvgpu_is_enabled(g, NVGPU_IS_FMODEL)) { | ||
40 | __nvgpu_set_enabled(g, NVGPU_SEC_PRIVSECURITY, false); | ||
41 | __nvgpu_set_enabled(g, NVGPU_SEC_SECUREGPCCS, false); | ||
42 | nvgpu_log(g, gpu_dbg_info, "priv sec is disabled in fmodel"); | ||
43 | return 0; | ||
44 | } | ||
45 | |||
46 | if (nvgpu_tegra_fuse_read_gcplex_config_fuse(g, &gcplex_config)) { | ||
47 | nvgpu_err(g, "err reading gcplex config fuse, check fuse clk"); | ||
48 | return -EINVAL; | ||
49 | } | ||
50 | |||
51 | if (gk20a_readl(g, fuse_opt_priv_sec_en_r())) { | ||
52 | /* | ||
53 | * all falcons have to boot in LS mode and this needs | ||
54 | * wpr_enabled set to 1 and vpr_auto_fetch_disable | ||
55 | * set to 0. In this case gmmu tries to pull wpr | ||
56 | * and vpr settings from tegra mc | ||
57 | */ | ||
58 | __nvgpu_set_enabled(g, NVGPU_SEC_PRIVSECURITY, true); | ||
59 | __nvgpu_set_enabled(g, NVGPU_SEC_SECUREGPCCS, true); | ||
60 | if ((gcplex_config & | ||
61 | GCPLEX_CONFIG_WPR_ENABLED_MASK) && | ||
62 | !(gcplex_config & | ||
63 | GCPLEX_CONFIG_VPR_AUTO_FETCH_DISABLE_MASK)) { | ||
64 | if (gk20a_readl(g, fuse_opt_sec_debug_en_r())) | ||
65 | nvgpu_log(g, gpu_dbg_info, | ||
66 | "gcplex_config = 0x%08x, " | ||
67 | "secure mode: ACR debug", | ||
68 | gcplex_config); | ||
69 | else | ||
70 | nvgpu_log(g, gpu_dbg_info, | ||
71 | "gcplex_config = 0x%08x, " | ||
72 | "secure mode: ACR non debug", | ||
73 | gcplex_config); | ||
74 | |||
75 | } else { | ||
76 | nvgpu_err(g, "gcplex_config = 0x%08x " | ||
77 | "invalid wpr_enabled/vpr_auto_fetch_disable " | ||
78 | "with priv_sec_en", gcplex_config); | ||
79 | /* do not try to boot GPU */ | ||
80 | return -EINVAL; | ||
81 | } | ||
82 | } else { | ||
83 | __nvgpu_set_enabled(g, NVGPU_SEC_PRIVSECURITY, false); | ||
84 | __nvgpu_set_enabled(g, NVGPU_SEC_SECUREGPCCS, false); | ||
85 | nvgpu_log(g, gpu_dbg_info, | ||
86 | "gcplex_config = 0x%08x, non secure mode", | ||
87 | gcplex_config); | ||
88 | } | ||
89 | |||
90 | return 0; | ||
91 | } | ||
diff --git a/drivers/gpu/nvgpu/gp10b/fuse_gp10b.h b/drivers/gpu/nvgpu/gp10b/fuse_gp10b.h new file mode 100644 index 00000000..1acb45d1 --- /dev/null +++ b/drivers/gpu/nvgpu/gp10b/fuse_gp10b.h | |||
@@ -0,0 +1,32 @@ | |||
1 | /* | ||
2 | * GP10B FUSE | ||
3 | * | ||
4 | * Copyright (c) 2017, NVIDIA CORPORATION. All rights reserved. | ||
5 | * | ||
6 | * Permission is hereby granted, free of charge, to any person obtaining a | ||
7 | * copy of this software and associated documentation files (the "Software"), | ||
8 | * to deal in the Software without restriction, including without limitation | ||
9 | * the rights to use, copy, modify, merge, publish, distribute, sublicense, | ||
10 | * and/or sell copies of the Software, and to permit persons to whom the | ||
11 | * Software is furnished to do so, subject to the following conditions: | ||
12 | * | ||
13 | * The above copyright notice and this permission notice shall be included in | ||
14 | * all copies or substantial portions of the Software. | ||
15 | * | ||
16 | * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR | ||
17 | * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, | ||
18 | * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL | ||
19 | * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER | ||
20 | * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING | ||
21 | * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER | ||
22 | * DEALINGS IN THE SOFTWARE. | ||
23 | */ | ||
24 | |||
25 | #ifndef _NVGPU_GP10B_FUSE | ||
26 | #define _NVGPU_GP10B_FUSE | ||
27 | |||
28 | struct gk20a; | ||
29 | |||
30 | int gp10b_fuse_check_priv_security(struct gk20a *g); | ||
31 | |||
32 | #endif | ||
diff --git a/drivers/gpu/nvgpu/gp10b/hal_gp10b.c b/drivers/gpu/nvgpu/gp10b/hal_gp10b.c index 0b2a5712..335eb465 100644 --- a/drivers/gpu/nvgpu/gp10b/hal_gp10b.c +++ b/drivers/gpu/nvgpu/gp10b/hal_gp10b.c | |||
@@ -64,6 +64,7 @@ | |||
64 | 64 | ||
65 | #include "gp10b.h" | 65 | #include "gp10b.h" |
66 | #include "hal_gp10b.h" | 66 | #include "hal_gp10b.h" |
67 | #include "fuse_gp10b.h" | ||
67 | 68 | ||
68 | #include <nvgpu/debug.h> | 69 | #include <nvgpu/debug.h> |
69 | #include <nvgpu/bug.h> | 70 | #include <nvgpu/bug.h> |
@@ -619,6 +620,9 @@ static const struct gpu_ops gp10b_ops = { | |||
619 | .priv_ring = { | 620 | .priv_ring = { |
620 | .isr = gp10b_priv_ring_isr, | 621 | .isr = gp10b_priv_ring_isr, |
621 | }, | 622 | }, |
623 | .fuse = { | ||
624 | .check_priv_security = gp10b_fuse_check_priv_security, | ||
625 | }, | ||
622 | .chip_init_gpu_characteristics = gp10b_init_gpu_characteristics, | 626 | .chip_init_gpu_characteristics = gp10b_init_gpu_characteristics, |
623 | .get_litter_value = gp10b_get_litter_value, | 627 | .get_litter_value = gp10b_get_litter_value, |
624 | }; | 628 | }; |
@@ -626,7 +630,6 @@ static const struct gpu_ops gp10b_ops = { | |||
626 | int gp10b_init_hal(struct gk20a *g) | 630 | int gp10b_init_hal(struct gk20a *g) |
627 | { | 631 | { |
628 | struct gpu_ops *gops = &g->ops; | 632 | struct gpu_ops *gops = &g->ops; |
629 | u32 val; | ||
630 | 633 | ||
631 | gops->ltc = gp10b_ops.ltc; | 634 | gops->ltc = gp10b_ops.ltc; |
632 | gops->ce2 = gp10b_ops.ce2; | 635 | gops->ce2 = gp10b_ops.ce2; |
@@ -654,6 +657,8 @@ int gp10b_init_hal(struct gk20a *g) | |||
654 | 657 | ||
655 | gops->priv_ring = gp10b_ops.priv_ring; | 658 | gops->priv_ring = gp10b_ops.priv_ring; |
656 | 659 | ||
660 | gops->fuse = gp10b_ops.fuse; | ||
661 | |||
657 | /* Lone Functions */ | 662 | /* Lone Functions */ |
658 | gops->chip_init_gpu_characteristics = | 663 | gops->chip_init_gpu_characteristics = |
659 | gp10b_ops.chip_init_gpu_characteristics; | 664 | gp10b_ops.chip_init_gpu_characteristics; |
@@ -662,23 +667,9 @@ int gp10b_init_hal(struct gk20a *g) | |||
662 | __nvgpu_set_enabled(g, NVGPU_GR_USE_DMA_FOR_FW_BOOTSTRAP, true); | 667 | __nvgpu_set_enabled(g, NVGPU_GR_USE_DMA_FOR_FW_BOOTSTRAP, true); |
663 | __nvgpu_set_enabled(g, NVGPU_PMU_PSTATE, false); | 668 | __nvgpu_set_enabled(g, NVGPU_PMU_PSTATE, false); |
664 | 669 | ||
665 | if (nvgpu_is_enabled(g, NVGPU_IS_FMODEL)) { | 670 | /* Read fuses to check if gpu needs to boot in secure/non-secure mode */ |
666 | __nvgpu_set_enabled(g, NVGPU_SEC_PRIVSECURITY, false); | 671 | if (gops->fuse.check_priv_security(g)) |
667 | __nvgpu_set_enabled(g, NVGPU_SEC_SECUREGPCCS, false); | 672 | return -EINVAL; /* Do not boot gpu */ |
668 | } else if (g->is_virtual) { | ||
669 | __nvgpu_set_enabled(g, NVGPU_SEC_PRIVSECURITY, true); | ||
670 | __nvgpu_set_enabled(g, NVGPU_SEC_SECUREGPCCS, true); | ||
671 | } else { | ||
672 | val = gk20a_readl(g, fuse_opt_priv_sec_en_r()); | ||
673 | if (val) { | ||
674 | __nvgpu_set_enabled(g, NVGPU_SEC_PRIVSECURITY, true); | ||
675 | __nvgpu_set_enabled(g, NVGPU_SEC_SECUREGPCCS, true); | ||
676 | } else { | ||
677 | gk20a_dbg_info("priv security is disabled in HW"); | ||
678 | __nvgpu_set_enabled(g, NVGPU_SEC_PRIVSECURITY, false); | ||
679 | __nvgpu_set_enabled(g, NVGPU_SEC_SECUREGPCCS, false); | ||
680 | } | ||
681 | } | ||
682 | 673 | ||
683 | /* priv security dependent ops */ | 674 | /* priv security dependent ops */ |
684 | if (nvgpu_is_enabled(g, NVGPU_SEC_PRIVSECURITY)) { | 675 | if (nvgpu_is_enabled(g, NVGPU_SEC_PRIVSECURITY)) { |