Changeset a640bc1 in mainline for kernel/arch/arm32/include/security_ext.h

Timestamp:

2013-01-18T20:06:55Z (12 years ago)

Author:

Jan Vesely <jano.vesely@…>

Branches:

lfn, master, serial, ticket/834-toolchain-update, topic/msim-upgrade, topic/simplify-dev-export

Children:

660e8fa

Parents:

cd8db93

Message:

arm, sec extensions: Add comments and remove use of sec extensions.

Revisit when we want to use this feature. U-boot locks the OS out of
the secure state at boot. This means we cannot change secure exception vector,
thus can only use SMC (secure monitor call) to request uboot/fw provided
functionality.

File:

• kernel/arch/arm32/include/security_ext.h (modified) (4 diffs)

kernel/arch/arm32/include/security_ext.h

@@ -40 +40 @@
 #include <arch/regutils.h>
 
+/** Test whether the current cpu supports security extensions.
+ * return true if security extensions are supported, false otherwise.
+ * @note The Processor Feature Register 1 that provides this information
+ * is available only on armv7+. This function returns false on all\
+ * older archs.
+ */
 static inline bool sec_ext_is_implemented()
 {
@@ -49 +55 @@
 }
 
+/** Test whether we are running in monitor mode.
+ * return true, if the current mode is Monitor mode, false otherwise.
+ * @note this is safe to call even on machines that do not implement monitor
+ * mode.
+ */
 static inline bool sec_ext_is_monitor_mode()
 {
@@ -54 +65 @@
 }
 
+/** Test whether we are running in a secure state.
+ * return true if the current state is secure, false otherwise.
+ *
+ * @note: This functions will cause undef isntruction trap if we
+ * are not running in the secure state.
+ *
+ * @note: u-boot enables non-secure access to cp 10/11, as well as some other
+ * features and switches to non-secure state during boot.
+ * Look for 'secureworld_exit' in arch/arm/cpu/armv7/omap3/board.c.
+ */
 static inline bool sec_ext_is_secure()
 {
@@ -60 +81 @@
 }
 
-typedef enum {
-        SECURITY_CALL_ENABLE_CP10_11 = 0xaaaa
-} sec_ext_call_t;
-
-static inline void sec_ext_call(sec_ext_call_t call)
-{
-        asm volatile ("mov r0, %0\nsmc #0" ::"r"(call));
-}
-
-int sec_ext_handle_call(sec_ext_call_t call);
-
 #endif
-
 /** @}
  */
-