1/*
 2 * Copyright © 2016-2017 Intel Corporation
 3 *
 4 * Permission is hereby granted, free of charge, to any person obtaining a
 5 * copy of this software and associated documentation files (the "Software"),
 6 * to deal in the Software without restriction, including without limitation
 7 * the rights to use, copy, modify, merge, publish, distribute, sublicense,
 8 * and/or sell copies of the Software, and to permit persons to whom the
 9 * Software is furnished to do so, subject to the following conditions:
10 *
11 * The above copyright notice and this permission notice (including the next
12 * paragraph) shall be included in all copies or substantial portions of the
13 * Software.
14 *
15 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
16 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
17 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL
18 * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
19 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
20 * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS
21 * IN THE SOFTWARE.
22 *
23 */
24
25#include <linux/types.h>
26
27#include "intel_huc.h"
28#include "i915_drv.h"
29
30void intel_huc_init_early(struct intel_huc *huc)
31{
32	intel_huc_fw_init_early(huc);
33}
34
35/**
36 * intel_huc_auth() - Authenticate HuC uCode
37 * @huc: intel_huc structure
38 *
39 * Called after HuC and GuC firmware loading during intel_uc_init_hw().
40 *
41 * This function pins HuC firmware image object into GGTT.
42 * Then it invokes GuC action to authenticate passing the offset to RSA
43 * signature through intel_guc_auth_huc(). It then waits for 50ms for
44 * firmware verification ACK and unpins the object.
45 */
46int intel_huc_auth(struct intel_huc *huc)
47{
48	struct drm_i915_private *i915 = huc_to_i915(huc);
49	struct intel_guc *guc = &i915->guc;
50	struct i915_vma *vma;
51	u32 status;
52	int ret;
53
54	if (huc->fw.load_status != INTEL_UC_FIRMWARE_SUCCESS)
55		return -ENOEXEC;
56
57	vma = i915_gem_object_ggtt_pin(huc->fw.obj, NULL, 0, 0,
58				PIN_OFFSET_BIAS | GUC_WOPCM_TOP);
59	if (IS_ERR(vma)) {
60		ret = PTR_ERR(vma);
61		DRM_ERROR("HuC: Failed to pin huc fw object %d\n", ret);
62		goto fail;
63	}
64
65	ret = intel_guc_auth_huc(guc,
66				 guc_ggtt_offset(vma) + huc->fw.rsa_offset);
67	if (ret) {
68		DRM_ERROR("HuC: GuC did not ack Auth request %d\n", ret);
69		goto fail_unpin;
70	}
71
72	/* Check authentication status, it should be done by now */
73	ret = __intel_wait_for_register(i915,
74					HUC_STATUS2,
75					HUC_FW_VERIFIED,
76					HUC_FW_VERIFIED,
77					2, 50, &status);
78	if (ret) {
79		DRM_ERROR("HuC: Firmware not verified %#x\n", status);
80		goto fail_unpin;
81	}
82
83	i915_vma_unpin(vma);
84	return 0;
85
86fail_unpin:
87	i915_vma_unpin(vma);
88fail:
89	huc->fw.load_status = INTEL_UC_FIRMWARE_FAIL;
90
91	DRM_ERROR("HuC: Authentication failed %d\n", ret);
92	return ret;
93}