drivers/tee/qcomtee/async.c

// SPDX-License-Identifier: GPL-2.0-only
/*
 * Copyright (c) Qualcomm Technologies, Inc. and/or its subsidiaries.
 */

#define pr_fmt(fmt) KBUILD_MODNAME ": " fmt

#include "qcomtee.h"

#define QCOMTEE_ASYNC_VERSION_1_0 0x00010000U /* Maj: 0x0001, Min: 0x0000. */
#define QCOMTEE_ASYNC_VERSION_1_1 0x00010001U /* Maj: 0x0001, Min: 0x0001. */
#define QCOMTEE_ASYNC_VERSION_1_2 0x00010002U /* Maj: 0x0001, Min: 0x0002. */
#define QCOMTEE_ASYNC_VERSION_CURRENT QCOMTEE_ASYNC_VERSION_1_2

#define QCOMTEE_ASYNC_VERSION_MAJOR(n) upper_16_bits(n)
#define QCOMTEE_ASYNC_VERSION_MINOR(n) lower_16_bits(n)

#define QCOMTEE_ASYNC_VERSION_CURRENT_MAJOR \
	QCOMTEE_ASYNC_VERSION_MAJOR(QCOMTEE_ASYNC_VERSION_CURRENT)
#define QCOMTEE_ASYNC_VERSION_CURRENT_MINOR \
	QCOMTEE_ASYNC_VERSION_MINOR(QCOMTEE_ASYNC_VERSION_CURRENT)

/**
 * struct qcomtee_async_msg_hdr - Asynchronous message header format.
 * @version: current async protocol version of the remote endpoint.
 * @op: async operation.
 *
 * @version specifies the endpoint's (QTEE or driver) supported async protocol.
 * For example, if QTEE sets @version to %QCOMTEE_ASYNC_VERSION_1_1, QTEE
 * handles operations supported in %QCOMTEE_ASYNC_VERSION_1_1 or
 * %QCOMTEE_ASYNC_VERSION_1_0. @op determines the message format.
 */
struct qcomtee_async_msg_hdr {
	u32 version;
	u32 op;
};

/* Size of an empty async message. */
#define QCOMTEE_ASYNC_MSG_ZERO sizeof(struct qcomtee_async_msg_hdr)

/**
 * struct qcomtee_async_release_msg - Release asynchronous message.
 * @hdr: message header as &struct qcomtee_async_msg_hdr.
 * @counts: number of objects in @object_ids.
 * @object_ids: array of object IDs that should be released.
 *
 * Available in Maj = 0x0001, Min >= 0x0000.
 */
struct qcomtee_async_release_msg {
	struct qcomtee_async_msg_hdr hdr;
	u32 counts;
	u32 object_ids[] __counted_by(counts);
};

/**
 * qcomtee_get_async_buffer() - Get the start of the asynchronous message.
 * @oic: context used for the current invocation.
 * @async_buffer: return buffer to extract from or fill in async messages.
 *
 * If @oic is used for direct object invocation, the whole outbound buffer
 * is available for the async message. If @oic is used for a callback request,
 * the tail of the outbound buffer (after the callback request message) is
 * available for the async message.
 *
 * The start of the async buffer is aligned, see qcomtee_msg_offset_align().
 */
static void qcomtee_get_async_buffer(struct qcomtee_object_invoke_ctx *oic,
				     struct qcomtee_buffer *async_buffer)
{
	struct qcomtee_msg_callback *msg;
	unsigned int offset;
	int i;

	if (!(oic->flags & QCOMTEE_OIC_FLAG_BUSY)) {
		/* The outbound buffer is empty. Using the whole buffer. */
		offset = 0;
	} else {
		msg = (struct qcomtee_msg_callback *)oic->out_msg.addr;

		/* Start offset in a message for buffer arguments. */
		offset = qcomtee_msg_buffer_args(struct qcomtee_msg_callback,
						 qcomtee_msg_args(msg));

		/* Add size of IB arguments. */
		qcomtee_msg_for_each_input_buffer(i, msg)
			offset += qcomtee_msg_offset_align(msg->args[i].b.size);

		/* Add size of OB arguments. */
		qcomtee_msg_for_each_output_buffer(i, msg)
			offset += qcomtee_msg_offset_align(msg->args[i].b.size);
	}

	async_buffer->addr = oic->out_msg.addr + offset;
	async_buffer->size = oic->out_msg.size - offset;
}

/**
 * async_release() - Process QTEE async release requests.
 * @oic: context used for the current invocation.
 * @msg: async message for object release.
 * @size: size of the async buffer available.
 *
 * Return: Size of the outbound buffer used when processing @msg.
 */
static size_t async_release(struct qcomtee_object_invoke_ctx *oic,
			    struct qcomtee_async_msg_hdr *async_msg,
			    size_t size)
{
	struct qcomtee_async_release_msg *msg;
	struct qcomtee_object *object;
	int i;

	msg = (struct qcomtee_async_release_msg *)async_msg;

	for (i = 0; i < msg->counts; i++) {
		object = qcomtee_idx_erase(oic, msg->object_ids[i]);
		qcomtee_object_put(object);
	}

	return struct_size(msg, object_ids, msg->counts);
}

/**
 * qcomtee_fetch_async_reqs() - Fetch and process asynchronous messages.
 * @oic: context used for the current invocation.
 *
 * Calls handlers to process the requested operations in the async message.
 * Currently, only supports async release requests.
 */
void qcomtee_fetch_async_reqs(struct qcomtee_object_invoke_ctx *oic)
{
	struct qcomtee_async_msg_hdr *async_msg;
	struct qcomtee_buffer async_buffer;
	size_t consumed, used = 0;
	u16 major_ver;

	qcomtee_get_async_buffer(oic, &async_buffer);

	while (async_buffer.size - used > QCOMTEE_ASYNC_MSG_ZERO) {
		async_msg = (struct qcomtee_async_msg_hdr *)(async_buffer.addr +
							     used);
		/*
		 * QTEE assumes that the unused space of the async buffer is
		 * zeroed; so if version is zero, the buffer is unused.
		 */
		if (async_msg->version == 0)
			goto out;

		major_ver = QCOMTEE_ASYNC_VERSION_MAJOR(async_msg->version);
		/* Major version mismatch is a compatibility break. */
		if (major_ver != QCOMTEE_ASYNC_VERSION_CURRENT_MAJOR) {
			pr_err("Async message version mismatch (%u != %u)\n",
			       major_ver, QCOMTEE_ASYNC_VERSION_CURRENT_MAJOR);

			goto out;
		}

		switch (async_msg->op) {
		case QCOMTEE_MSG_OBJECT_OP_RELEASE:
			consumed = async_release(oic, async_msg,
						 async_buffer.size - used);
			break;
		default:
			pr_err("Unsupported async message %u\n", async_msg->op);
			goto out;
		}

		/* Supported operation but unable to parse the message. */
		if (!consumed) {
			pr_err("Unable to parse async message for op %u\n",
			       async_msg->op);
			goto out;
		}

		/* Next async message. */
		used += qcomtee_msg_offset_align(consumed);
	}

out:
	/* Reset the async buffer so async requests do not loop to QTEE. */
	memzero_explicit(async_buffer.addr, async_buffer.size);
}