[U-Boot] [PATCH 5/6] board: ti: am43xx: Add TEE loading and firewall setup

[Andrew F. Davis]

On 06/17/2017 02:35 AM, Lokesh Vutla wrote:
> 
> 
> On Saturday 17 June 2017 12:57 AM, Andrew F. Davis wrote:
>> Add support for loading a TEE and setting up firewalled regions to
>> AM43xx HS boards.
>>
>> Signed-off-by: Andrew F. Davis <afd at ti.com>
>> ---
>>  board/ti/am43xx/board.c         | 7 +++++++
>>  configs/am43xx_hs_evm_defconfig | 3 +++
>>  2 files changed, 10 insertions(+)
>>
>> diff --git a/board/ti/am43xx/board.c b/board/ti/am43xx/board.c
>> index 54f40e64a4..96032215a6 100644
>> --- a/board/ti/am43xx/board.c
>> +++ b/board/ti/am43xx/board.c
>> @@ -859,4 +859,11 @@ void board_fit_image_post_process(void **p_image, size_t *p_size)
>>  {
>>  	secure_boot_verify_image(p_image, p_size);
>>  }
>> +
>> +void board_tee_image_process(ulong tee_image, size_t tee_size)
>> +{
>> +	secure_tee_install((u32)tee_image);
>> +}
>> +
>> +U_BOOT_FIT_LOADABLE_HANDLER(IH_TYPE_TEE, board_tee_image_process);
>>  #endif
>> diff --git a/configs/am43xx_hs_evm_defconfig b/configs/am43xx_hs_evm_defconfig
>> index 6f3cb516fd..37d8e484db 100644
>> --- a/configs/am43xx_hs_evm_defconfig
>> +++ b/configs/am43xx_hs_evm_defconfig
>> @@ -4,6 +4,9 @@ CONFIG_SYS_MALLOC_F_LEN=0x2000
>>  CONFIG_AM43XX=y
>>  CONFIG_TI_COMMON_CMD_OPTIONS=y
>>  CONFIG_TI_SECURE_DEVICE=y
>> +CONFIG_TI_SECURE_EMIF_REGION_START=0xbdb00000
> 
> You might want to include CONFIG_PRAM inorder to not overlap relocation
> with this region?
> 

I think I'll add this in a separate patch, I'm still not sure that is
the best solution to avoid relocation overlap just yet.

Thanks,
Andrew

> Thanks and regards,
> Lokesh
> 
>> +CONFIG_TI_SECURE_EMIF_TOTAL_REGION_SIZE=0x02000000
>> +CONFIG_TI_SECURE_EMIF_PROTECTED_REGION_SIZE=0x01c00000
>>  CONFIG_TARGET_AM43XX_EVM=y
>>  CONFIG_ISW_ENTRY_ADDR=0x403018e0
>>  CONFIG_SPL_STACK_R_ADDR=0x82000000
>>