1 // SPDX-License-Identifier: GPL-2.0+
2 /*
3 * Copyright 2015 Freescale Semiconductor, Inc.
4 */
5
6 #include <common.h>
7 #include <command.h>
8 #include <env.h>
9 #include <fsl_validate.h>
10
do_esbc_halt(struct cmd_tbl * cmdtp,int flag,int argc,char * const argv[])11 int do_esbc_halt(struct cmd_tbl *cmdtp, int flag, int argc,
12 char *const argv[])
13 {
14 if (fsl_check_boot_mode_secure() == 0) {
15 printf("Boot Mode is Non-Secure. Not entering spin loop.\n");
16 return 0;
17 }
18
19 printf("Core is entering spin loop.\n");
20 loop:
21 goto loop;
22
23 return 0;
24 }
25
26 #ifndef CONFIG_SPL_BUILD
do_esbc_validate(struct cmd_tbl * cmdtp,int flag,int argc,char * const argv[])27 static int do_esbc_validate(struct cmd_tbl *cmdtp, int flag, int argc,
28 char *const argv[])
29 {
30 char *hash_str = NULL;
31 uintptr_t haddr;
32 int ret;
33 uintptr_t img_addr = 0;
34 char buf[20];
35
36 if (argc < 2)
37 return cmd_usage(cmdtp);
38 else if (argc > 2)
39 /* Second arg - Optional - Hash Str*/
40 hash_str = argv[2];
41
42 /* First argument - header address -32/64bit */
43 haddr = (uintptr_t)simple_strtoul(argv[1], NULL, 16);
44
45 /* With esbc_validate command, Image address must be
46 * part of header. So, the function is called
47 * by passing this argument as 0.
48 */
49 ret = fsl_secboot_validate(haddr, hash_str, &img_addr);
50
51 /* Need to set "img_addr" even if validation failure.
52 * Required when SB_EN in RCW set and non-fatal error
53 * to continue U-Boot
54 */
55 sprintf(buf, "%lx", img_addr);
56 env_set("img_addr", buf);
57
58 if (ret)
59 return 1;
60
61 printf("esbc_validate command successful\n");
62 return 0;
63 }
64
65 /***************************************************/
66 static char esbc_validate_help_text[] =
67 "esbc_validate hdr_addr <hash_val> - Validates signature using\n"
68 " RSA verification\n"
69 " $hdr_addr Address of header of the image\n"
70 " to be validated.\n"
71 " $hash_val -Optional\n"
72 " It provides Hash of public/srk key to be\n"
73 " used to verify signature.\n";
74
75 U_BOOT_CMD(
76 esbc_validate, 3, 0, do_esbc_validate,
77 "Validates signature on a given image using RSA verification",
78 esbc_validate_help_text
79 );
80
81 U_BOOT_CMD(
82 esbc_halt, 1, 0, do_esbc_halt,
83 "Put the core in spin loop (Secure Boot Only)",
84 ""
85 );
86 #endif
87