[U-Boot] [PATCH 5/6] board: ti: am43xx: Add TEE loading and firewall setup

[Lokesh Vutla]

On Saturday 17 June 2017 12:57 AM, Andrew F. Davis wrote:
> Add support for loading a TEE and setting up firewalled regions to
> AM43xx HS boards.
> 
> Signed-off-by: Andrew F. Davis <afd at ti.com>
> ---
>  board/ti/am43xx/board.c         | 7 +++++++
>  configs/am43xx_hs_evm_defconfig | 3 +++
>  2 files changed, 10 insertions(+)
> 
> diff --git a/board/ti/am43xx/board.c b/board/ti/am43xx/board.c
> index 54f40e64a4..96032215a6 100644
> --- a/board/ti/am43xx/board.c
> +++ b/board/ti/am43xx/board.c
> @@ -859,4 +859,11 @@ void board_fit_image_post_process(void **p_image, size_t *p_size)
>  {
>  	secure_boot_verify_image(p_image, p_size);
>  }
> +
> +void board_tee_image_process(ulong tee_image, size_t tee_size)
> +{
> +	secure_tee_install((u32)tee_image);
> +}
> +
> +U_BOOT_FIT_LOADABLE_HANDLER(IH_TYPE_TEE, board_tee_image_process);
>  #endif
> diff --git a/configs/am43xx_hs_evm_defconfig b/configs/am43xx_hs_evm_defconfig
> index 6f3cb516fd..37d8e484db 100644
> --- a/configs/am43xx_hs_evm_defconfig
> +++ b/configs/am43xx_hs_evm_defconfig
> @@ -4,6 +4,9 @@ CONFIG_SYS_MALLOC_F_LEN=0x2000
>  CONFIG_AM43XX=y
>  CONFIG_TI_COMMON_CMD_OPTIONS=y
>  CONFIG_TI_SECURE_DEVICE=y
> +CONFIG_TI_SECURE_EMIF_REGION_START=0xbdb00000

You might want to include CONFIG_PRAM inorder to not overlap relocation
with this region?

Thanks and regards,
Lokesh

> +CONFIG_TI_SECURE_EMIF_TOTAL_REGION_SIZE=0x02000000
> +CONFIG_TI_SECURE_EMIF_PROTECTED_REGION_SIZE=0x01c00000
>  CONFIG_TARGET_AM43XX_EVM=y
>  CONFIG_ISW_ENTRY_ADDR=0x403018e0
>  CONFIG_SPL_STACK_R_ADDR=0x82000000
>