[linux-2.6-block.git] / arch / x86 / kernel / tboot.c

/*
 * tboot.c: main implementation of helper functions used by kernel for
 *          runtime support of Intel(R) Trusted Execution Technology
 *
 * Copyright (c) 2006-2009, Intel Corporation
 *
 * This program is free software; you can redistribute it and/or modify it
 * under the terms and conditions of the GNU General Public License,
 * version 2, as published by the Free Software Foundation.
 *
 * This program is distributed in the hope it will be useful, but WITHOUT
 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
 * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License for
 * more details.
 *
 * You should have received a copy of the GNU General Public License along with
 * this program; if not, write to the Free Software Foundation, Inc.,
 * 51 Franklin St - Fifth Floor, Boston, MA 02110-1301 USA.
 *
 */

#include <linux/dma_remapping.h>
#include <linux/init_task.h>
#include <linux/spinlock.h>
#include <linux/sched.h>
#include <linux/init.h>
#include <linux/dmar.h>
#include <linux/pfn.h>
#include <linux/mm.h>

#include <asm/trampoline.h>
#include <asm/processor.h>
#include <asm/bootparam.h>
#include <asm/pgtable.h>
#include <asm/pgalloc.h>
#include <asm/fixmap.h>
#include <asm/proto.h>
#include <asm/setup.h>
#include <asm/tboot.h>
#include <asm/e820.h>
#include <asm/io.h>

#include "acpi/realmode/wakeup.h"

/* Global pointer to shared data; NULL means no measured launch. */
struct tboot *tboot __read_mostly;

/* timeout for APs (in secs) to enter wait-for-SIPI state during shutdown */
#define AP_WAIT_TIMEOUT		1

#undef pr_fmt
#define pr_fmt(fmt)	"tboot: " fmt

static u8 tboot_uuid[16] __initdata = TBOOT_UUID;

void __init tboot_probe(void)
{
	/* Look for valid page-aligned address for shared page. */
	if (!boot_params.tboot_addr)
		return;
	/*
	 * also verify that it is mapped as we expect it before calling
	 * set_fixmap(), to reduce chance of garbage value causing crash
	 */
	if (!e820_any_mapped(boot_params.tboot_addr,
			     boot_params.tboot_addr, E820_RESERVED)) {
		pr_warning("non-0 tboot_addr but it is not of type E820_RESERVED\n");
		return;
	}

	/* only a natively booted kernel should be using TXT */
	if (paravirt_enabled()) {
		pr_warning("non-0 tboot_addr but pv_ops is enabled\n");
		return;
	}

	/* Map and check for tboot UUID. */
	set_fixmap(FIX_TBOOT_BASE, boot_params.tboot_addr);
	tboot = (struct tboot *)fix_to_virt(FIX_TBOOT_BASE);
	if (memcmp(&tboot_uuid, &tboot->uuid, sizeof(tboot->uuid))) {
		pr_warning("tboot at 0x%llx is invalid\n",
			   boot_params.tboot_addr);
		tboot = NULL;
		return;
	}
	if (tboot->version < 5) {
		pr_warning("tboot version is invalid: %u\n", tboot->version);
		tboot = NULL;
		return;
	}

	pr_info("found shared page at phys addr 0x%llx:\n",
		boot_params.tboot_addr);
	pr_debug("version: %d\n", tboot->version);
	pr_debug("log_addr: 0x%08x\n", tboot->log_addr);
	pr_debug("shutdown_entry: 0x%x\n", tboot->shutdown_entry);
	pr_debug("tboot_base: 0x%08x\n", tboot->tboot_base);
	pr_debug("tboot_size: 0x%x\n", tboot->tboot_size);
}

static pgd_t *tboot_pg_dir;
static struct mm_struct tboot_mm = {
	.mm_rb          = RB_ROOT,
	.pgd            = swapper_pg_dir,
	.mm_users       = ATOMIC_INIT(2),
	.mm_count       = ATOMIC_INIT(1),
	.mmap_sem       = __RWSEM_INITIALIZER(init_mm.mmap_sem),
	.page_table_lock =  __SPIN_LOCK_UNLOCKED(init_mm.page_table_lock),
	.mmlist         = LIST_HEAD_INIT(init_mm.mmlist),
	.cpu_vm_mask    = CPU_MASK_ALL,
};

static inline void switch_to_tboot_pt(void)
{
	write_cr3(virt_to_phys(tboot_pg_dir));
}

static int map_tboot_page(unsigned long vaddr, unsigned long pfn,
			  pgprot_t prot)
{
	pgd_t *pgd;
	pud_t *pud;
	pmd_t *pmd;
	pte_t *pte;

	pgd = pgd_offset(&tboot_mm, vaddr);
	pud = pud_alloc(&tboot_mm, pgd, vaddr);
	if (!pud)
		return -1;
	pmd = pmd_alloc(&tboot_mm, pud, vaddr);
	if (!pmd)
		return -1;
	pte = pte_alloc_map(&tboot_mm, pmd, vaddr);
	if (!pte)
		return -1;
	set_pte_at(&tboot_mm, vaddr, pte, pfn_pte(pfn, prot));
	pte_unmap(pte);
	return 0;
}

static int map_tboot_pages(unsigned long vaddr, unsigned long start_pfn,
			   unsigned long nr)
{
	/* Reuse the original kernel mapping */
	tboot_pg_dir = pgd_alloc(&tboot_mm);
	if (!tboot_pg_dir)
		return -1;

	for (; nr > 0; nr--, vaddr += PAGE_SIZE, start_pfn++) {
		if (map_tboot_page(vaddr, start_pfn, PAGE_KERNEL_EXEC))
			return -1;
	}

	return 0;
}

void tboot_create_trampoline(void)
{
	u32 map_base, map_size;

	if (!tboot_enabled())
		return;

	/* Create identity map for tboot shutdown code. */
	map_base = PFN_DOWN(tboot->tboot_base);
	map_size = PFN_UP(tboot->tboot_size);
	if (map_tboot_pages(map_base << PAGE_SHIFT, map_base, map_size))
		panic("tboot: Error mapping tboot pages (mfns) @ 0x%x, 0x%x\n",
		      map_base, map_size);
}

#ifdef CONFIG_ACPI_SLEEP

static void add_mac_region(phys_addr_t start, unsigned long size)
{
	struct tboot_mac_region *mr;
	phys_addr_t end = start + size;

	if (start && size) {
		mr = &tboot->mac_regions[tboot->num_mac_regions++];
		mr->start = round_down(start, PAGE_SIZE);
		mr->size  = round_up(end, PAGE_SIZE) - mr->start;
	}
}

static int tboot_setup_sleep(void)
{
	tboot->num_mac_regions = 0;

	/* S3 resume code */
	add_mac_region(acpi_wakeup_address, WAKEUP_SIZE);

#ifdef CONFIG_X86_TRAMPOLINE
	/* AP trampoline code */
	add_mac_region(virt_to_phys(trampoline_base), TRAMPOLINE_SIZE);
#endif

	/* kernel code + data + bss */
	add_mac_region(virt_to_phys(_text), _end - _text);

	tboot->acpi_sinfo.kernel_s3_resume_vector = acpi_wakeup_address;

	return 0;
}

#else /* no CONFIG_ACPI_SLEEP */

static int tboot_setup_sleep(void)
{
	/* S3 shutdown requested, but S3 not supported by the kernel... */
	BUG();
	return -1;
}

#endif

void tboot_shutdown(u32 shutdown_type)
{
	void (*shutdown)(void);

	if (!tboot_enabled())
		return;

	/*
	 * if we're being called before the 1:1 mapping is set up then just
	 * return and let the normal shutdown happen; this should only be
	 * due to very early panic()
	 */
	if (!tboot_pg_dir)
		return;

	/* if this is S3 then set regions to MAC */
	if (shutdown_type == TB_SHUTDOWN_S3)
		if (tboot_setup_sleep())
			return;

	tboot->shutdown_type = shutdown_type;

	switch_to_tboot_pt();

	shutdown = (void(*)(void))(unsigned long)tboot->shutdown_entry;
	shutdown();

	/* should not reach here */
	while (1)
		halt();
}

static void tboot_copy_fadt(const struct acpi_table_fadt *fadt)
{
#define TB_COPY_GAS(tbg, g)			\
	tbg.space_id     = g.space_id;		\
	tbg.bit_width    = g.bit_width;		\
	tbg.bit_offset   = g.bit_offset;	\
	tbg.access_width = g.access_width;	\
	tbg.address      = g.address;

	TB_COPY_GAS(tboot->acpi_sinfo.pm1a_cnt_blk, fadt->xpm1a_control_block);
	TB_COPY_GAS(tboot->acpi_sinfo.pm1b_cnt_blk, fadt->xpm1b_control_block);
	TB_COPY_GAS(tboot->acpi_sinfo.pm1a_evt_blk, fadt->xpm1a_event_block);
	TB_COPY_GAS(tboot->acpi_sinfo.pm1b_evt_blk, fadt->xpm1b_event_block);

	/*
	 * We need phys addr of waking vector, but can't use virt_to_phys() on
	 * &acpi_gbl_FACS because it is ioremap'ed, so calc from FACS phys
	 * addr.
	 */
	tboot->acpi_sinfo.wakeup_vector = fadt->facs +
		offsetof(struct acpi_table_facs, firmware_waking_vector);
}

void tboot_sleep(u8 sleep_state, u32 pm1a_control, u32 pm1b_control)
{
	static u32 acpi_shutdown_map[ACPI_S_STATE_COUNT] = {
		/* S0,1,2: */ -1, -1, -1,
		/* S3: */ TB_SHUTDOWN_S3,
		/* S4: */ TB_SHUTDOWN_S4,
		/* S5: */ TB_SHUTDOWN_S5 };

	if (!tboot_enabled())
		return;

	tboot_copy_fadt(&acpi_gbl_FADT);
	tboot->acpi_sinfo.pm1a_cnt_val = pm1a_control;
	tboot->acpi_sinfo.pm1b_cnt_val = pm1b_control;
	/* we always use the 32b wakeup vector */
	tboot->acpi_sinfo.vector_width = 32;

	if (sleep_state >= ACPI_S_STATE_COUNT ||
	    acpi_shutdown_map[sleep_state] == -1) {
		pr_warning("unsupported sleep state 0x%x\n", sleep_state);
		return;
	}

	tboot_shutdown(acpi_shutdown_map[sleep_state]);
}

int tboot_wait_for_aps(int num_aps)
{
	unsigned long timeout;

	if (!tboot_enabled())
		return 0;

	timeout = jiffies + AP_WAIT_TIMEOUT*HZ;
	while (atomic_read((atomic_t *)&tboot->num_in_wfs) != num_aps &&
	       time_before(jiffies, timeout))
		cpu_relax();

	return time_before(jiffies, timeout) ? 0 : 1;
}

/*
 * TXT configuration registers (offsets from TXT_{PUB, PRIV}_CONFIG_REGS_BASE)
 */

#define TXT_PUB_CONFIG_REGS_BASE       0xfed30000
#define TXT_PRIV_CONFIG_REGS_BASE      0xfed20000

/* # pages for each config regs space - used by fixmap */
#define NR_TXT_CONFIG_PAGES     ((TXT_PUB_CONFIG_REGS_BASE -                \
				  TXT_PRIV_CONFIG_REGS_BASE) >> PAGE_SHIFT)

/* offsets from pub/priv config space */
#define TXTCR_HEAP_BASE             0x0300
#define TXTCR_HEAP_SIZE             0x0308

#define SHA1_SIZE      20

struct sha1_hash {
	u8 hash[SHA1_SIZE];
};

struct sinit_mle_data {
	u32               version;             /* currently 6 */
	struct sha1_hash  bios_acm_id;
	u32               edx_senter_flags;
	u64               mseg_valid;
	struct sha1_hash  sinit_hash;
	struct sha1_hash  mle_hash;
	struct sha1_hash  stm_hash;
	struct sha1_hash  lcp_policy_hash;
	u32               lcp_policy_control;
	u32               rlp_wakeup_addr;
	u32               reserved;
	u32               num_mdrs;
	u32               mdrs_off;
	u32               num_vtd_dmars;
	u32               vtd_dmars_off;
} __packed;

struct acpi_table_header *tboot_get_dmar_table(struct acpi_table_header *dmar_tbl)
{
	void *heap_base, *heap_ptr, *config;

	if (!tboot_enabled())
		return dmar_tbl;

	/*
	 * ACPI tables may not be DMA protected by tboot, so use DMAR copy
	 * SINIT saved in SinitMleData in TXT heap (which is DMA protected)
	 */

	/* map config space in order to get heap addr */
	config = ioremap(TXT_PUB_CONFIG_REGS_BASE, NR_TXT_CONFIG_PAGES *
			 PAGE_SIZE);
	if (!config)
		return NULL;

	/* now map TXT heap */
	heap_base = ioremap(*(u64 *)(config + TXTCR_HEAP_BASE),
			    *(u64 *)(config + TXTCR_HEAP_SIZE));
	iounmap(config);
	if (!heap_base)
		return NULL;

	/* walk heap to SinitMleData */
	/* skip BiosData */
	heap_ptr = heap_base + *(u64 *)heap_base;
	/* skip OsMleData */
	heap_ptr += *(u64 *)heap_ptr;
	/* skip OsSinitData */
	heap_ptr += *(u64 *)heap_ptr;
	/* now points to SinitMleDataSize; set to SinitMleData */
	heap_ptr += sizeof(u64);
	/* get addr of DMAR table */
	dmar_tbl = (struct acpi_table_header *)(heap_ptr +
		   ((struct sinit_mle_data *)heap_ptr)->vtd_dmars_off -
		   sizeof(u64));

	/* don't unmap heap because dmar.c needs access to this */

	return dmar_tbl;
}

int tboot_force_iommu(void)
{
	if (!tboot_enabled())
		return 0;

	if (no_iommu || swiotlb || dmar_disabled)
		pr_warning("Forcing Intel-IOMMU to enabled\n");

	dmar_disabled = 0;
#ifdef CONFIG_SWIOTLB
	swiotlb = 0;
#endif
	no_iommu = 0;

	return 1;
}
Commit	Line	Data
31625340 JC	1	/*
	2	* tboot.c: main implementation of helper functions used by kernel for
	3	* runtime support of Intel(R) Trusted Execution Technology
	4	*
	5	* Copyright (c) 2006-2009, Intel Corporation
	6	*
	7	* This program is free software; you can redistribute it and/or modify it
	8	* under the terms and conditions of the GNU General Public License,
	9	* version 2, as published by the Free Software Foundation.
	10	*
	11	* This program is distributed in the hope it will be useful, but WITHOUT
	12	* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
	13	* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
	14	* more details.
	15	*
	16	* You should have received a copy of the GNU General Public License along with
	17	* this program; if not, write to the Free Software Foundation, Inc.,
	18	* 51 Franklin St - Fifth Floor, Boston, MA 02110-1301 USA.
	19	*
	20	*/
	21
	22	#include <linux/dma_remapping.h>
	23	#include <linux/init_task.h>
	24	#include <linux/spinlock.h>
	25	#include <linux/sched.h>
	26	#include <linux/init.h>
	27	#include <linux/dmar.h>
	28	#include <linux/pfn.h>
	29	#include <linux/mm.h>
	30
	31	#include <asm/trampoline.h>
	32	#include <asm/processor.h>
	33	#include <asm/bootparam.h>
	34	#include <asm/pgtable.h>
	35	#include <asm/pgalloc.h>
81e2d7b3	36	#include <asm/fixmap.h>
58c41d28	37	#include <asm/proto.h>
31625340 JC	38	#include <asm/setup.h>
	39	#include <asm/tboot.h>
	40	#include <asm/e820.h>
	41	#include <asm/io.h>
	42
	43	#include "acpi/realmode/wakeup.h"
	44
	45	/* Global pointer to shared data; NULL means no measured launch. */
	46	struct tboot *tboot __read_mostly;
	47
	48	/* timeout for APs (in secs) to enter wait-for-SIPI state during shutdown */
	49	#define AP_WAIT_TIMEOUT 1
	50
	51	#undef pr_fmt
	52	#define pr_fmt(fmt) "tboot: " fmt
	53
	54	static u8 tboot_uuid[16] __initdata = TBOOT_UUID;
	55
	56	void __init tboot_probe(void)
	57	{
	58	/* Look for valid page-aligned address for shared page. */
	59	if (!boot_params.tboot_addr)
	60	return;
	61	/*
	62	* also verify that it is mapped as we expect it before calling
	63	* set_fixmap(), to reduce chance of garbage value causing crash
	64	*/
	65	if (!e820_any_mapped(boot_params.tboot_addr,
	66	boot_params.tboot_addr, E820_RESERVED)) {
	67	pr_warning("non-0 tboot_addr but it is not of type E820_RESERVED\n");
	68	return;
	69	}
	70
	71	/* only a natively booted kernel should be using TXT */
	72	if (paravirt_enabled()) {
	73	pr_warning("non-0 tboot_addr but pv_ops is enabled\n");
	74	return;
	75	}
	76
	77	/* Map and check for tboot UUID. */
	78	set_fixmap(FIX_TBOOT_BASE, boot_params.tboot_addr);
	79	tboot = (struct tboot *)fix_to_virt(FIX_TBOOT_BASE);
	80	if (memcmp(&tboot_uuid, &tboot->uuid, sizeof(tboot->uuid))) {
	81	pr_warning("tboot at 0x%llx is invalid\n",
	82	boot_params.tboot_addr);
	83	tboot = NULL;
	84	return;
	85	}
	86	if (tboot->version < 5) {
	87	pr_warning("tboot version is invalid: %u\n", tboot->version);
	88	tboot = NULL;
	89	return;
	90	}
	91
	92	pr_info("found shared page at phys addr 0x%llx:\n",
	93	boot_params.tboot_addr);
	94	pr_debug("version: %d\n", tboot->version);
	95	pr_debug("log_addr: 0x%08x\n", tboot->log_addr);
	96	pr_debug("shutdown_entry: 0x%x\n", tboot->shutdown_entry);
	97	pr_debug("tboot_base: 0x%08x\n", tboot->tboot_base);
	98	pr_debug("tboot_size: 0x%x\n", tboot->tboot_size);
	99	}
	100
	101	static pgd_t *tboot_pg_dir;
102	static struct mm_struct tboot_mm = {
103	.mm_rb = RB_ROOT,
104	.pgd = swapper_pg_dir,
105	.mm_users = ATOMIC_INIT(2),
106	.mm_count = ATOMIC_INIT(1),
107	.mmap_sem = __RWSEM_INITIALIZER(init_mm.mmap_sem),
108	.page_table_lock = __SPIN_LOCK_UNLOCKED(init_mm.page_table_lock),
109	.mmlist = LIST_HEAD_INIT(init_mm.mmlist),
110	.cpu_vm_mask = CPU_MASK_ALL,
111	};
112
113	static inline void switch_to_tboot_pt(void)
114	{
115	write_cr3(virt_to_phys(tboot_pg_dir));
116	}
117
118	static int map_tboot_page(unsigned long vaddr, unsigned long pfn,
119	pgprot_t prot)
120	{
121	pgd_t *pgd;
122	pud_t *pud;
123	pmd_t *pmd;
124	pte_t *pte;
125
126	pgd = pgd_offset(&tboot_mm, vaddr);
127	pud = pud_alloc(&tboot_mm, pgd, vaddr);
128	if (!pud)
129	return -1;
130	pmd = pmd_alloc(&tboot_mm, pud, vaddr);
131	if (!pmd)
132	return -1;
133	pte = pte_alloc_map(&tboot_mm, pmd, vaddr);
134	if (!pte)
135	return -1;
136	set_pte_at(&tboot_mm, vaddr, pte, pfn_pte(pfn, prot));
137	pte_unmap(pte);
138	return 0;
139	}
140
141	static int map_tboot_pages(unsigned long vaddr, unsigned long start_pfn,
142	unsigned long nr)
143	{
144	/* Reuse the original kernel mapping */
145	tboot_pg_dir = pgd_alloc(&tboot_mm);
146	if (!tboot_pg_dir)
147	return -1;
148
149	for (; nr > 0; nr--, vaddr += PAGE_SIZE, start_pfn++) {
150	if (map_tboot_page(vaddr, start_pfn, PAGE_KERNEL_EXEC))
151	return -1;
152	}
153
154	return 0;
155	}
156
157	void tboot_create_trampoline(void)
158	{
159	u32 map_base, map_size;
160
161	if (!tboot_enabled())
162	return;
163
164	/* Create identity map for tboot shutdown code. */
165	map_base = PFN_DOWN(tboot->tboot_base);
166	map_size = PFN_UP(tboot->tboot_size);
167	if (map_tboot_pages(map_base << PAGE_SHIFT, map_base, map_size))
58c41d28 PA	168	panic("tboot: Error mapping tboot pages (mfns) @ 0x%x, 0x%x\n",
58c41d28 PA	169	map_base, map_size);
31625340 JC	170	}
31625340 JC	171
58c41d28 PA	172	#ifdef CONFIG_ACPI_SLEEP
	173
	174	static void add_mac_region(phys_addr_t start, unsigned long size)
31625340	175	{
58c41d28 PA	176	struct tboot_mac_region *mr;
	177	phys_addr_t end = start + size;
	178
	179	if (start && size) {
	180	mr = &tboot->mac_regions[tboot->num_mac_regions++];
	181	mr->start = round_down(start, PAGE_SIZE);
	182	mr->size = round_up(end, PAGE_SIZE) - mr->start;
	183	}
	184	}
	185
	186	static int tboot_setup_sleep(void)
	187	{
	188	tboot->num_mac_regions = 0;
	189
31625340	190	/* S3 resume code */
58c41d28	191	add_mac_region(acpi_wakeup_address, WAKEUP_SIZE);
62a3207b PA	192
62a3207b PA	193	#ifdef CONFIG_X86_TRAMPOLINE
31625340	194	/* AP trampoline code */
58c41d28	195	add_mac_region(virt_to_phys(trampoline_base), TRAMPOLINE_SIZE);
62a3207b PA	196	#endif
62a3207b PA	197
31625340	198	/* kernel code + data + bss */
58c41d28 PA	199	add_mac_region(virt_to_phys(_text), _end - _text);
	200
	201	tboot->acpi_sinfo.kernel_s3_resume_vector = acpi_wakeup_address;
	202
	203	return 0;
	204	}
	205
	206	#else /* no CONFIG_ACPI_SLEEP */
	207
	208	static int tboot_setup_sleep(void)
	209	{
	210	/* S3 shutdown requested, but S3 not supported by the kernel... */
	211	BUG();
	212	return -1;
31625340 JC	213	}
31625340 JC	214
58c41d28 PA	215	#endif
58c41d28 PA	216
31625340 JC	217	void tboot_shutdown(u32 shutdown_type)
	218	{
	219	void (*shutdown)(void);
	220
	221	if (!tboot_enabled())
	222	return;
	223
	224	/*
	225	* if we're being called before the 1:1 mapping is set up then just
	226	* return and let the normal shutdown happen; this should only be
	227	* due to very early panic()
	228	*/
	229	if (!tboot_pg_dir)
	230	return;
	231
	232	/* if this is S3 then set regions to MAC */
	233	if (shutdown_type == TB_SHUTDOWN_S3)
58c41d28 PA	234	if (tboot_setup_sleep())
58c41d28 PA	235	return;
31625340 JC	236
	237	tboot->shutdown_type = shutdown_type;
	238
	239	switch_to_tboot_pt();
	240
	241	shutdown = (void(*)(void))(unsigned long)tboot->shutdown_entry;
	242	shutdown();
	243
	244	/* should not reach here */
	245	while (1)
	246	halt();
	247	}
	248
	249	static void tboot_copy_fadt(const struct acpi_table_fadt *fadt)
	250	{
	251	#define TB_COPY_GAS(tbg, g) \
	252	tbg.space_id = g.space_id; \
	253	tbg.bit_width = g.bit_width; \
	254	tbg.bit_offset = g.bit_offset; \
	255	tbg.access_width = g.access_width; \
	256	tbg.address = g.address;
	257
	258	TB_COPY_GAS(tboot->acpi_sinfo.pm1a_cnt_blk, fadt->xpm1a_control_block);
	259	TB_COPY_GAS(tboot->acpi_sinfo.pm1b_cnt_blk, fadt->xpm1b_control_block);
	260	TB_COPY_GAS(tboot->acpi_sinfo.pm1a_evt_blk, fadt->xpm1a_event_block);
	261	TB_COPY_GAS(tboot->acpi_sinfo.pm1b_evt_blk, fadt->xpm1b_event_block);
	262
	263	/*
	264	* We need phys addr of waking vector, but can't use virt_to_phys() on
	265	* &acpi_gbl_FACS because it is ioremap'ed, so calc from FACS phys
	266	* addr.
	267	*/
	268	tboot->acpi_sinfo.wakeup_vector = fadt->facs +
	269	offsetof(struct acpi_table_facs, firmware_waking_vector);
	270	}
	271
	272	void tboot_sleep(u8 sleep_state, u32 pm1a_control, u32 pm1b_control)
	273	{
	274	static u32 acpi_shutdown_map[ACPI_S_STATE_COUNT] = {
	275	/* S0,1,2: */ -1, -1, -1,
	276	/* S3: */ TB_SHUTDOWN_S3,
	277	/* S4: */ TB_SHUTDOWN_S4,
	278	/* S5: */ TB_SHUTDOWN_S5 };
	279
	280	if (!tboot_enabled())
	281	return;
	282
	283	tboot_copy_fadt(&acpi_gbl_FADT);
	284	tboot->acpi_sinfo.pm1a_cnt_val = pm1a_control;
	285	tboot->acpi_sinfo.pm1b_cnt_val = pm1b_control;
	286	/* we always use the 32b wakeup vector */
	287	tboot->acpi_sinfo.vector_width = 32;
31625340 JC	288
	289	if (sleep_state >= ACPI_S_STATE_COUNT \|\|
	290	acpi_shutdown_map[sleep_state] == -1) {
	291	pr_warning("unsupported sleep state 0x%x\n", sleep_state);
	292	return;
	293	}
	294
	295	tboot_shutdown(acpi_shutdown_map[sleep_state]);
	296	}
	297
	298	int tboot_wait_for_aps(int num_aps)
	299	{
	300	unsigned long timeout;
	301
	302	if (!tboot_enabled())
	303	return 0;
	304
	305	timeout = jiffies + AP_WAIT_TIMEOUT*HZ;
	306	while (atomic_read((atomic_t *)&tboot->num_in_wfs) != num_aps &&
	307	time_before(jiffies, timeout))
	308	cpu_relax();
	309
	310	return time_before(jiffies, timeout) ? 0 : 1;
	311	}
	312
	313	/*
	314	* TXT configuration registers (offsets from TXT_{PUB, PRIV}_CONFIG_REGS_BASE)
	315	*/
	316
	317	#define TXT_PUB_CONFIG_REGS_BASE 0xfed30000
	318	#define TXT_PRIV_CONFIG_REGS_BASE 0xfed20000
	319
	320	/* # pages for each config regs space - used by fixmap */
	321	#define NR_TXT_CONFIG_PAGES ((TXT_PUB_CONFIG_REGS_BASE - \
	322	TXT_PRIV_CONFIG_REGS_BASE) >> PAGE_SHIFT)
	323
	324	/* offsets from pub/priv config space */
	325	#define TXTCR_HEAP_BASE 0x0300
	326	#define TXTCR_HEAP_SIZE 0x0308
	327
	328	#define SHA1_SIZE 20
	329
	330	struct sha1_hash {
	331	u8 hash[SHA1_SIZE];
	332	};
	333
	334	struct sinit_mle_data {
	335	u32 version; /* currently 6 */
	336	struct sha1_hash bios_acm_id;
	337	u32 edx_senter_flags;
	338	u64 mseg_valid;
	339	struct sha1_hash sinit_hash;
	340	struct sha1_hash mle_hash;
	341	struct sha1_hash stm_hash;
	342	struct sha1_hash lcp_policy_hash;
	343	u32 lcp_policy_control;
	344	u32 rlp_wakeup_addr;
	345	u32 reserved;
	346	u32 num_mdrs;
	347	u32 mdrs_off;
	348	u32 num_vtd_dmars;
	349	u32 vtd_dmars_off;
	350	} __packed;
	351
352	struct acpi_table_header tboot_get_dmar_table(struct acpi_table_header dmar_tbl)
353	{
354	void heap_base, heap_ptr, *config;
355
356	if (!tboot_enabled())
357	return dmar_tbl;
358
359	/*
360	* ACPI tables may not be DMA protected by tboot, so use DMAR copy
361	* SINIT saved in SinitMleData in TXT heap (which is DMA protected)
362	*/
363
364	/* map config space in order to get heap addr */
365	config = ioremap(TXT_PUB_CONFIG_REGS_BASE, NR_TXT_CONFIG_PAGES *
366	PAGE_SIZE);
367	if (!config)
368	return NULL;
369
370	/* now map TXT heap */
371	heap_base = ioremap((u64 )(config + TXTCR_HEAP_BASE),
372	(u64 )(config + TXTCR_HEAP_SIZE));
373	iounmap(config);
374	if (!heap_base)
375	return NULL;
376
377	/* walk heap to SinitMleData */
378	/* skip BiosData */
379	heap_ptr = heap_base + (u64 )heap_base;
380	/* skip OsMleData */
381	heap_ptr += (u64 )heap_ptr;
382	/* skip OsSinitData */
383	heap_ptr += (u64 )heap_ptr;
384	/* now points to SinitMleDataSize; set to SinitMleData */
385	heap_ptr += sizeof(u64);
386	/* get addr of DMAR table */
387	dmar_tbl = (struct acpi_table_header *)(heap_ptr +
388	((struct sinit_mle_data *)heap_ptr)->vtd_dmars_off -
389	sizeof(u64));
390
391	/* don't unmap heap because dmar.c needs access to this */
392
393	return dmar_tbl;
394	}
395
396	int tboot_force_iommu(void)
397	{
398	if (!tboot_enabled())
399	return 0;
400
401	if (no_iommu \|\| swiotlb \|\| dmar_disabled)
402	pr_warning("Forcing Intel-IOMMU to enabled\n");
403
404	dmar_disabled = 0;
405	#ifdef CONFIG_SWIOTLB
406	swiotlb = 0;
407	#endif
408	no_iommu = 0;
409
410	return 1;
411	}