[PATCH v4 05/11] EFI: FMP: Add provision to update image's ImageTypeId in image descriptor
Sughosh Ganu
sughosh.ganu at linaro.org
Mon Feb 14 06:42:22 CET 2022
hi Takahiro,
On Mon, 14 Feb 2022 at 08:54, AKASHI Takahiro
<takahiro.akashi at linaro.org> wrote:
>
> Sughosh,
>
> On Thu, Feb 10, 2022 at 03:40:00PM +0530, Sughosh Ganu wrote:
> > On Thu, 10 Feb 2022 at 13:28, AKASHI Takahiro
> > <takahiro.akashi at linaro.org> wrote:
> > >
> > > On Thu, Feb 10, 2022 at 12:48:13PM +0530, Sughosh Ganu wrote:
> > > > hi Takahiro,
> > > >
> > > > On Thu, 10 Feb 2022 at 08:18, AKASHI Takahiro
> > > > <takahiro.akashi at linaro.org> wrote:
> > > > >
> > > > > Hi Sughosh,
> > > > >
> > > > > On Mon, Feb 07, 2022 at 11:49:55PM +0530, Sughosh Ganu wrote:
> > > > > > The FWU Multi Banks Update feature allows updating different types of
> > > > > > updatable firmware images on the platform. These image types are
> > > > > > identified using the ImageTypeId GUID value. Add support in the
> > > > > > GetImageInfo function of the FMP protocol to get the GUID values for
> > > > > > the individual images and populate these in the image descriptor for
> > > > > > the corresponding images.
> > > > >
> > > > > After re-thinking of your approach here, I would have to say NAK.
> > > > >
> > > > > You use ImageTypeId to identify a particular firmware object.
> > > > > (By "object," I mean one of firmware instances represented by "dfu_alto_info".
> > > > > Please don't confuse it with the binary blob embedded in a capsule file.)
> > > > > But ImageTypeId is not for that purpose, at least, as my intention
> > > > > in initially implementing capsule framework and FMP drivers.
> > > > >
> > > > > 1) ImageTypeId is used to uniquely identify a corresponding FMP driver,
> > > > > either FIT FMP driver or Raw FMP driver.
> > > >
> > > > I believe the identification of an FMP protocol should be done by the
> > > > FMP GUID,
> > >
> > > What does FMP GUID stand for?
> >
> > EFI_FIRMWARE_MANAGEMENT_PROTOCOL_GUID, defined in include/efi_api.h.
> > What I mean is that even when installing the FMP protocol, the call to
> > efi_install_multiple_protocol_interfaces takes the above FMP GUID as
> > an argument -- nowhere is the ImageTypeId considered when installing
> > the protocol.
>
> Okay.
>
> > >
> > > > which is what is done in efi_fmp_find. The ImageTypeId is
> > > > nowhere involved in this identification.
> > >
> > > Please take a look at efi_capsule_update_firmware() carefully.
> > > efi_find_fmp() is called with the image's update_image_type_id
> > > which is to be set to EFI_FIRMWARE_IMAGE_TYPE_UBOOT_FIT_GUID or
> > > EFI_FIRMWARE_IMAGE_TYPE_UBOOT_RAW_GUID by mkeficapsule
> > > (see create_fwbin()).
> >
> > I think you are thinking from the point of view of the '--guid' value
> > that is being passed to the capsule generation tool. But the thing is
> > that it is the current design(or limitation) of the tool that it takes
> > only a single guid parameter. So the mkeficapsule tool currently can
> > generate only a single payload capsule.
>
> That is exactly what I intended to do here.
> We have only one FMP driver (either FIT or RAW) which is based on
> U-Boot's DFU framework and we need only one payload since, for
> multiple objects of firmware, we can use FIT format as a payload.
> That is what FIT is aimed for.
> Or you can use multiple RAW capsule files with different indexes
> ("--index" exists for this purpose).
Yes, we can use --index when we know the index value corresponding to
the firmware image that we need to update. But like I mentioned in my
earlier reply, for A/B updates, we do not know what the index value is
going to be. That is going to be determined at runtime.
Also, the point I was making is that we can have a capsule which is
consumed by an FMP protocol which has more than one image, and those
images have different ImageTypeId/UpdateImageTypeId.
>
> > Please check the
> > GenerateCapsule script in EDK2. In case of a multi payload based
> > capsule, individual parameters like the UpdateImageTypeId are passed
> > through the json file, where each of the UpdateImageTypeId has a
> > different value per payload.
> >
> > >
> > > > > 2) Each firmware object handled by a given FMP driver can further be
> > > > > identified by ImageIndex.
> > > > >
> > > > > My implementation of efi_fmp_find() does (1) and Raw FMP driver does
> > > > > (2) in efi_firmware_raw_set_image() which takes "image_index" as
> > > > > a parameter.
> > > > >
> > > > > Using ImageTypeId as an identifier is simply wrong in my opinion and
> > > > > doesn't meet the UEFI specification.
> > > >
> > > > So, as per what you are stating, all payloads under a given
> > > > EFI_FIRMWARE_MANAGEMENT_CAPSULE_HEADER should have the same
> > > > ImageTypeId, either EFI_FIRMWARE_IMAGE_TYPE_UBOOT_FIT_GUID or
> > > > EFI_FIRMWARE_IMAGE_TYPE_UBOOT_RAW_GUID. Same applies for all images in
> > > > the EFI_FIRMWARE_IMAGE_DESCRIPTOR. Because, without one of the two
> > > > values, > the check in efi_fmp_find to compare the UpdateImageTypeId
> > > > with the ImageTypeId retrieved from the image descriptor would simply
> > > > fail.
> > >
> > > I don't follow your point.
> > > Please elaborate a bit more.
> >
> > The current implementation of GetImageInfo, passes either of
> > EFI_FIRMWARE_IMAGE_TYPE_UBOOT_FIT_GUID or
> > EFI_FIRMWARE_IMAGE_TYPE_UBOOT_RAW_GUID for all the images of the image
> > descriptor array. So, in case the capsule is generated with a '--guid'
> > value which is different from these two values, the check in
> > efi_fmp_find on line 204 will fail.
>
> That is an expected behavior, isn't it?
Yes it is. Do not contest that.
> If you want to use a different FMP driver (with another GUID),
> you naturally need to add your own FMP driver.
This is where I differ. We can use the same FMP protocol instance for
any type of ImageTypeId. I do not see why we need to define a
different FMP protocol instance for a GUID value other than what has
been defined for u-boot raw and u-boot FIT GUIDs.
The platform can give us the image descriptor array, and with that,
the same FMP instance can be used for any type of image(ImageTypeId).
>
>
> > This means that unless the --guid
> > value passed to the capsule generation is either of u-boot FIT or
> > u-boot raw, the current FMP protocol for raw devices cannot be used.
> > Why do we need that restriction. It should be possible to use the raw
> > FMP protocol for any other type of image types as well.
> >
> >
> > >
> > > > I think this interpretation of the UEFI spec is incorrect, since the
> > > > spec states that the ImageTypeId and the UpdateImageTypeId are fields
> > > > used to identify the firmware component targeted for the update. If
> > > > all values in the image descriptor array and the UpdateImageTypeId are
> > > > the same, why have this field in the first place for individual
> > > > images.
> > >
> > > As I said, ImageIndex is for that purpose.
> >
> > Yes, that is one possible way in the scenario where the ImageIndex is
> > determined at the capsule generation time. But, for the A/B update
> > scenario, we do not know the ImageIndex at build time
>
> "Build time" of what?
Of the capsule.
> I think that users should know how "dfu_alt_info" is defined
> (in other words, where the firmware be located on the target system)
> when capsule files are created.
That is true for a non A/B scenario. And that is how it works in the
non A/B updates case. But for A/B updates, since the determination of
the "location" where the firmware image has to be written will be done
only at runtime, we cannot use the --index to differentiate.
Like I mentioned earlier, this is not breaking the existing behaviour
-- for the non A/B updates, the update procedure remains exactly the
same, of using the index value to determine the location of the
update. I have only extended the behaviour to use the same FMP
instance for the A/B update(FWU) feature using ImageTypeId's.
-sughosh
>
> -Takahiro Akashi
>
>
> > -- this is
> > determined only at runtime, and is based on the bank to which the
> > image is to be updated. Which is why I am finding out the alt_num at
> > runtime in case the FWU Multi Bank feature is enabled. Like I said
> > above, I do not see a reason why the current FMP protocols should be
> > restricted to only the u-boot FIT and u-boot raw image types. It is
> > being extended, without affecting the default non FWU behaviour.
> >
> > -sughosh
> >
> > >
> > > -Takahiro Akashi
> > >
> > > >
> > > > -sughosh
> > > >
> > > > >
> > > > > -Takahiro Akashi
> > > > >
> > > > >
> > > > > > Signed-off-by: Sughosh Ganu <sughosh.ganu at linaro.org>
> > > > > > ---
> > > > > >
> > > > > > Changes since V3:
> > > > > > * Define a weak function fill_image_type_guid_array for populating the
> > > > > > image descriptor array with u-boot's raw and fit image GUIDs
> > > > > >
> > > > > > include/efi_loader.h | 2 +
> > > > > > lib/efi_loader/efi_firmware.c | 71 +++++++++++++++++++++++++++++++----
> > > > > > 2 files changed, 66 insertions(+), 7 deletions(-)
> > > > > >
> > > > > > diff --git a/include/efi_loader.h b/include/efi_loader.h
> > > > > > index f4860e87fc..ae60de0be5 100644
> > > > > > --- a/include/efi_loader.h
> > > > > > +++ b/include/efi_loader.h
> > > > > > @@ -992,4 +992,6 @@ efi_status_t efi_esrt_populate(void);
> > > > > > efi_status_t efi_load_capsule_drivers(void);
> > > > > >
> > > > > > efi_status_t platform_get_eventlog(struct udevice *dev, u64 *addr, u32 *sz);
> > > > > > +efi_status_t fill_image_type_guid_array(const efi_guid_t *default_guid,
> > > > > > + efi_guid_t **part_guid_arr);
> > > > > > #endif /* _EFI_LOADER_H */
> > > > > > diff --git a/lib/efi_loader/efi_firmware.c b/lib/efi_loader/efi_firmware.c
> > > > > > index a1b88dbfc2..5642be9f9a 100644
> > > > > > --- a/lib/efi_loader/efi_firmware.c
> > > > > > +++ b/lib/efi_loader/efi_firmware.c
> > > > > > @@ -96,6 +96,46 @@ efi_status_t EFIAPI efi_firmware_set_package_info_unsupported(
> > > > > > return EFI_EXIT(EFI_UNSUPPORTED);
> > > > > > }
> > > > > >
> > > > > > +efi_status_t __weak fill_image_type_guid_array(const efi_guid_t *guid,
> > > > > > + efi_guid_t **part_guid_arr)
> > > > > > +{
> > > > > > + int i;
> > > > > > + int dfu_num = 0;
> > > > > > + efi_guid_t *guid_arr;
> > > > > > + struct dfu_entity *dfu;
> > > > > > + efi_status_t ret = EFI_SUCCESS;
> > > > > > +
> > > > > > + dfu_init_env_entities(NULL, NULL);
> > > > > > +
> > > > > > + dfu_num = 0;
> > > > > > + list_for_each_entry(dfu, &dfu_list, list) {
> > > > > > + dfu_num++;
> > > > > > + }
> > > > > > +
> > > > > > + if (!dfu_num) {
> > > > > > + log_warning("Probably dfu_alt_info not defined\n");
> > > > > > + ret = EFI_NOT_READY;
> > > > > > + goto out;
> > > > > > + }
> > > > > > +
> > > > > > + *part_guid_arr = malloc(sizeof(efi_guid_t) * dfu_num);
> > > > > > + if (!*part_guid_arr) {
> > > > > > + ret = EFI_OUT_OF_RESOURCES;
> > > > > > + goto out;
> > > > > > + }
> > > > > > +
> > > > > > + guid_arr = *part_guid_arr;
> > > > > > + for (i = 0; i < dfu_num; i++) {
> > > > > > + guidcpy(guid_arr, guid);
> > > > > > + ++guid_arr;
> > > > > > + }
> > > > > > +
> > > > > > +out:
> > > > > > + dfu_free_entities();
> > > > > > +
> > > > > > + return ret;
> > > > > > +}
> > > > > > +
> > > > > > /**
> > > > > > * efi_get_dfu_info - return information about the current firmware image
> > > > > > * @this: Protocol instance
> > > > > > @@ -104,9 +144,9 @@ efi_status_t EFIAPI efi_firmware_set_package_info_unsupported(
> > > > > > * @descriptor_version: Pointer to version number
> > > > > > * @descriptor_count: Pointer to number of descriptors
> > > > > > * @descriptor_size: Pointer to descriptor size
> > > > > > - * package_version: Package version
> > > > > > - * package_version_name: Package version's name
> > > > > > - * image_type: Image type GUID
> > > > > > + * @package_version: Package version
> > > > > > + * @package_version_name: Package version's name
> > > > > > + * @guid_array: Image type GUID array
> > > > > > *
> > > > > > * Return information bout the current firmware image in @image_info.
> > > > > > * @image_info will consist of a number of descriptors.
> > > > > > @@ -122,7 +162,7 @@ static efi_status_t efi_get_dfu_info(
> > > > > > efi_uintn_t *descriptor_size,
> > > > > > u32 *package_version,
> > > > > > u16 **package_version_name,
> > > > > > - const efi_guid_t *image_type)
> > > > > > + const efi_guid_t *guid_array)
> > > > > > {
> > > > > > struct dfu_entity *dfu;
> > > > > > size_t names_len, total_size;
> > > > > > @@ -172,7 +212,7 @@ static efi_status_t efi_get_dfu_info(
> > > > > > next = name;
> > > > > > list_for_each_entry(dfu, &dfu_list, list) {
> > > > > > image_info[i].image_index = dfu->alt + 1;
> > > > > > - image_info[i].image_type_id = *image_type;
> > > > > > + image_info[i].image_type_id = guid_array[i];
> > > > > > image_info[i].image_id = dfu->alt;
> > > > > >
> > > > > > /* copy the DFU entity name */
> > > > > > @@ -250,6 +290,7 @@ efi_status_t EFIAPI efi_firmware_fit_get_image_info(
> > > > > > u16 **package_version_name)
> > > > > > {
> > > > > > efi_status_t ret;
> > > > > > + efi_guid_t *part_guid_arr = NULL;
> > > > > >
> > > > > > EFI_ENTRY("%p %p %p %p %p %p %p %p\n", this,
> > > > > > image_info_size, image_info,
> > > > > > @@ -264,12 +305,19 @@ efi_status_t EFIAPI efi_firmware_fit_get_image_info(
> > > > > > !descriptor_size || !package_version || !package_version_name))
> > > > > > return EFI_EXIT(EFI_INVALID_PARAMETER);
> > > > > >
> > > > > > + ret = fill_image_type_guid_array(&efi_firmware_image_type_uboot_fit,
> > > > > > + &part_guid_arr);
> > > > > > + if (ret != EFI_SUCCESS)
> > > > > > + goto out;
> > > > > > +
> > > > > > ret = efi_get_dfu_info(image_info_size, image_info,
> > > > > > descriptor_version, descriptor_count,
> > > > > > descriptor_size,
> > > > > > package_version, package_version_name,
> > > > > > - &efi_firmware_image_type_uboot_fit);
> > > > > > + part_guid_arr);
> > > > > >
> > > > > > +out:
> > > > > > + free(part_guid_arr);
> > > > > > return EFI_EXIT(ret);
> > > > > > }
> > > > > >
> > > > > > @@ -359,6 +407,7 @@ efi_status_t EFIAPI efi_firmware_raw_get_image_info(
> > > > > > u16 **package_version_name)
> > > > > > {
> > > > > > efi_status_t ret = EFI_SUCCESS;
> > > > > > + efi_guid_t *part_guid_arr = NULL;
> > > > > >
> > > > > > EFI_ENTRY("%p %p %p %p %p %p %p %p\n", this,
> > > > > > image_info_size, image_info,
> > > > > > @@ -373,12 +422,20 @@ efi_status_t EFIAPI efi_firmware_raw_get_image_info(
> > > > > > !descriptor_size || !package_version || !package_version_name))
> > > > > > return EFI_EXIT(EFI_INVALID_PARAMETER);
> > > > > >
> > > > > > + ret = fill_image_type_guid_array(
> > > > > > + &efi_firmware_image_type_uboot_raw,
> > > > > > + &part_guid_arr);
> > > > > > + if (ret != EFI_SUCCESS)
> > > > > > + goto out;
> > > > > > +
> > > > > > ret = efi_get_dfu_info(image_info_size, image_info,
> > > > > > descriptor_version, descriptor_count,
> > > > > > descriptor_size,
> > > > > > package_version, package_version_name,
> > > > > > - &efi_firmware_image_type_uboot_raw);
> > > > > > + part_guid_arr);
> > > > > >
> > > > > > +out:
> > > > > > + free(part_guid_arr);
> > > > > > return EFI_EXIT(ret);
> > > > > > }
> > > > > >
> > > > > > --
> > > > > > 2.17.1
> > > > > >
More information about the U-Boot
mailing list