2019-09-03 11:58:42 +02:00
|
|
|
/** @file
|
|
|
|
Instance of SMM IO check library.
|
|
|
|
|
|
|
|
SMM IO check library library implementation. This library consumes GCD to collect all valid
|
|
|
|
IO space defined by a platform.
|
|
|
|
A platform may have its own SmmIoLib instance to exclude more IO space.
|
|
|
|
|
|
|
|
Copyright (c) 2017, Intel Corporation. All rights reserved.<BR>
|
|
|
|
SPDX-License-Identifier: BSD-2-Clause-Patent
|
|
|
|
|
|
|
|
**/
|
|
|
|
|
|
|
|
|
|
|
|
#include <PiSmm.h>
|
|
|
|
|
|
|
|
#include <Library/BaseLib.h>
|
|
|
|
#include <Library/BaseMemoryLib.h>
|
|
|
|
#include <Library/DebugLib.h>
|
|
|
|
#include <Library/MemoryAllocationLib.h>
|
|
|
|
#include <Library/UefiBootServicesTableLib.h>
|
|
|
|
#include <Library/SmmServicesTableLib.h>
|
|
|
|
#include <Library/HobLib.h>
|
|
|
|
#include <Library/DxeServicesTableLib.h>
|
|
|
|
#include <Protocol/SmmReadyToLock.h>
|
|
|
|
#include <Protocol/SmmEndOfDxe.h>
|
|
|
|
|
|
|
|
EFI_GCD_MEMORY_SPACE_DESCRIPTOR *mSmmIoLibGcdMemSpace = NULL;
|
|
|
|
UINTN mSmmIoLibGcdMemNumberOfDesc = 0;
|
|
|
|
|
|
|
|
EFI_PHYSICAL_ADDRESS mSmmIoLibInternalMaximumSupportMemAddress = 0;
|
|
|
|
|
|
|
|
VOID *mSmmIoLibRegistrationEndOfDxe;
|
|
|
|
VOID *mSmmIoLibRegistrationReadyToLock;
|
|
|
|
|
|
|
|
BOOLEAN mSmmIoLibReadyToLock = FALSE;
|
|
|
|
|
|
|
|
/**
|
|
|
|
Calculate and save the maximum support address.
|
|
|
|
|
|
|
|
**/
|
|
|
|
VOID
|
|
|
|
SmmIoLibInternalCalculateMaximumSupportAddress (
|
|
|
|
VOID
|
|
|
|
)
|
|
|
|
{
|
|
|
|
VOID *Hob;
|
|
|
|
UINT32 RegEax;
|
|
|
|
UINT8 MemPhysicalAddressBits;
|
|
|
|
|
|
|
|
//
|
|
|
|
// Get physical address bits supported.
|
|
|
|
//
|
|
|
|
Hob = GetFirstHob (EFI_HOB_TYPE_CPU);
|
|
|
|
if (Hob != NULL) {
|
|
|
|
MemPhysicalAddressBits = ((EFI_HOB_CPU *) Hob)->SizeOfMemorySpace;
|
|
|
|
} else {
|
|
|
|
AsmCpuid (0x80000000, &RegEax, NULL, NULL, NULL);
|
|
|
|
if (RegEax >= 0x80000008) {
|
|
|
|
AsmCpuid (0x80000008, &RegEax, NULL, NULL, NULL);
|
|
|
|
MemPhysicalAddressBits = (UINT8) RegEax;
|
|
|
|
} else {
|
|
|
|
MemPhysicalAddressBits = 36;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
//
|
|
|
|
// IA-32e paging translates 48-bit linear addresses to 52-bit physical addresses.
|
|
|
|
//
|
|
|
|
ASSERT (MemPhysicalAddressBits <= 52);
|
|
|
|
if (MemPhysicalAddressBits > 48) {
|
|
|
|
MemPhysicalAddressBits = 48;
|
|
|
|
}
|
|
|
|
|
|
|
|
//
|
|
|
|
// Save the maximum support address in one global variable
|
|
|
|
//
|
|
|
|
mSmmIoLibInternalMaximumSupportMemAddress = (EFI_PHYSICAL_ADDRESS)(UINTN)(LShiftU64 (1, MemPhysicalAddressBits) - 1);
|
|
|
|
DEBUG ((DEBUG_INFO, "mSmmIoLibInternalMaximumSupportMemAddress = 0x%lx\n", mSmmIoLibInternalMaximumSupportMemAddress));
|
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
|
|
|
This function check if the MMIO resource is valid per processor architecture and
|
|
|
|
valid per platform design.
|
|
|
|
|
|
|
|
@param BaseAddress The MMIO start address to be checked.
|
|
|
|
@param Length The MMIO length to be checked.
|
|
|
|
@param Owner A GUID representing the owner of the resource.
|
|
|
|
This GUID may be used by producer to correlate the device ownership of the resource.
|
|
|
|
NULL means no specific owner.
|
|
|
|
|
|
|
|
@retval TRUE This MMIO resource is valid per processor architecture and valid per platform design.
|
|
|
|
@retval FALSE This MMIO resource is not valid per processor architecture or valid per platform design.
|
|
|
|
**/
|
|
|
|
BOOLEAN
|
|
|
|
EFIAPI
|
|
|
|
SmmIsMmioValid (
|
|
|
|
IN EFI_PHYSICAL_ADDRESS BaseAddress,
|
|
|
|
IN UINT64 Length,
|
|
|
|
IN EFI_GUID *Owner OPTIONAL
|
|
|
|
)
|
|
|
|
{
|
|
|
|
UINTN Index;
|
|
|
|
EFI_GCD_MEMORY_SPACE_DESCRIPTOR *Desc;
|
|
|
|
BOOLEAN InValidRegion;
|
|
|
|
|
|
|
|
//
|
|
|
|
// Check override.
|
|
|
|
// NOTE: (B:0->L:4G) is invalid for IA32, but (B:1->L:4G-1)/(B:4G-1->L:1) is valid.
|
|
|
|
//
|
|
|
|
if ((Length > mSmmIoLibInternalMaximumSupportMemAddress) ||
|
|
|
|
(BaseAddress > mSmmIoLibInternalMaximumSupportMemAddress) ||
|
|
|
|
((Length != 0) && (BaseAddress > (mSmmIoLibInternalMaximumSupportMemAddress - (Length - 1)))) ) {
|
|
|
|
//
|
|
|
|
// Overflow happen
|
|
|
|
//
|
|
|
|
DEBUG ((
|
|
|
|
DEBUG_ERROR,
|
|
|
|
"SmmIsMmioValid: Overflow: BaseAddress (0x%lx) - Length (0x%lx), MaximumSupportMemAddress (0x%lx)\n",
|
|
|
|
BaseAddress,
|
|
|
|
Length,
|
|
|
|
mSmmIoLibInternalMaximumSupportMemAddress
|
|
|
|
));
|
|
|
|
return FALSE;
|
|
|
|
}
|
|
|
|
|
|
|
|
//
|
|
|
|
// Check override for valid MMIO region
|
|
|
|
//
|
|
|
|
if (mSmmIoLibReadyToLock) {
|
|
|
|
InValidRegion = FALSE;
|
|
|
|
for (Index = 0; Index < mSmmIoLibGcdMemNumberOfDesc; Index ++) {
|
|
|
|
Desc = &mSmmIoLibGcdMemSpace[Index];
|
|
|
|
if ((Desc->GcdMemoryType == EfiGcdMemoryTypeMemoryMappedIo) &&
|
|
|
|
(BaseAddress >= Desc->BaseAddress) &&
|
|
|
|
((BaseAddress + Length) <= (Desc->BaseAddress + Desc->Length))) {
|
|
|
|
InValidRegion = TRUE;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
if (!InValidRegion) {
|
|
|
|
DEBUG ((
|
|
|
|
DEBUG_ERROR,
|
|
|
|
"SmmIsMmioValid: Not in valid MMIO region: BaseAddress (0x%lx) - Length (0x%lx)\n",
|
|
|
|
BaseAddress,
|
|
|
|
Length
|
|
|
|
));
|
|
|
|
return FALSE;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
return TRUE;
|
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
|
|
|
Merge continuous entries whose type is EfiGcdMemoryTypeMemoryMappedIo.
|
|
|
|
|
|
|
|
@param[in, out] GcdMemoryMap A pointer to the buffer in which firmware places
|
|
|
|
the current GCD memory map.
|
|
|
|
@param[in, out] NumberOfDescriptors A pointer to the number of the
|
|
|
|
GcdMemoryMap buffer. On input, this is the number of
|
|
|
|
the current GCD memory map. On output,
|
|
|
|
it is the number of new GCD memory map after merge.
|
|
|
|
**/
|
|
|
|
STATIC
|
|
|
|
VOID
|
|
|
|
MergeGcdMmioEntry (
|
|
|
|
IN OUT EFI_GCD_MEMORY_SPACE_DESCRIPTOR *GcdMemoryMap,
|
|
|
|
IN OUT UINTN *NumberOfDescriptors
|
|
|
|
)
|
|
|
|
{
|
|
|
|
EFI_GCD_MEMORY_SPACE_DESCRIPTOR *GcdMemoryMapEntry;
|
|
|
|
EFI_GCD_MEMORY_SPACE_DESCRIPTOR *GcdMemoryMapEnd;
|
|
|
|
EFI_GCD_MEMORY_SPACE_DESCRIPTOR *NewGcdMemoryMapEntry;
|
|
|
|
EFI_GCD_MEMORY_SPACE_DESCRIPTOR *NextGcdMemoryMapEntry;
|
|
|
|
|
|
|
|
GcdMemoryMapEntry = GcdMemoryMap;
|
|
|
|
NewGcdMemoryMapEntry = GcdMemoryMap;
|
|
|
|
GcdMemoryMapEnd = (EFI_GCD_MEMORY_SPACE_DESCRIPTOR *) ((UINT8 *) GcdMemoryMap + (*NumberOfDescriptors) * sizeof(EFI_GCD_MEMORY_SPACE_DESCRIPTOR));
|
|
|
|
while ((UINTN)GcdMemoryMapEntry < (UINTN)GcdMemoryMapEnd) {
|
|
|
|
CopyMem (NewGcdMemoryMapEntry, GcdMemoryMapEntry, sizeof(EFI_GCD_MEMORY_SPACE_DESCRIPTOR));
|
|
|
|
NextGcdMemoryMapEntry = GcdMemoryMapEntry + 1;
|
|
|
|
|
|
|
|
do {
|
|
|
|
if (((UINTN)NextGcdMemoryMapEntry < (UINTN)GcdMemoryMapEnd) &&
|
|
|
|
(GcdMemoryMapEntry->GcdMemoryType == EfiGcdMemoryTypeMemoryMappedIo) && (NextGcdMemoryMapEntry->GcdMemoryType == EfiGcdMemoryTypeMemoryMappedIo) &&
|
|
|
|
((GcdMemoryMapEntry->BaseAddress + GcdMemoryMapEntry->Length) == NextGcdMemoryMapEntry->BaseAddress)) {
|
|
|
|
GcdMemoryMapEntry->Length += NextGcdMemoryMapEntry->Length;
|
|
|
|
if (NewGcdMemoryMapEntry != GcdMemoryMapEntry) {
|
|
|
|
NewGcdMemoryMapEntry->Length += NextGcdMemoryMapEntry->Length;
|
|
|
|
}
|
|
|
|
|
|
|
|
NextGcdMemoryMapEntry = NextGcdMemoryMapEntry + 1;
|
|
|
|
continue;
|
|
|
|
} else {
|
|
|
|
GcdMemoryMapEntry = NextGcdMemoryMapEntry - 1;
|
|
|
|
break;
|
|
|
|
}
|
|
|
|
} while (TRUE);
|
|
|
|
|
|
|
|
GcdMemoryMapEntry = GcdMemoryMapEntry + 1;
|
|
|
|
NewGcdMemoryMapEntry = NewGcdMemoryMapEntry + 1;
|
|
|
|
}
|
|
|
|
|
|
|
|
*NumberOfDescriptors = ((UINTN)NewGcdMemoryMapEntry - (UINTN)GcdMemoryMap) / sizeof(EFI_GCD_MEMORY_SPACE_DESCRIPTOR);
|
|
|
|
|
|
|
|
return ;
|
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
|
|
|
Notification for SMM EndOfDxe protocol.
|
|
|
|
|
|
|
|
@param[in] Protocol Points to the protocol's unique identifier.
|
|
|
|
@param[in] Interface Points to the interface instance.
|
|
|
|
@param[in] Handle The handle on which the interface was installed.
|
|
|
|
|
|
|
|
@retval EFI_SUCCESS Notification runs successfully.
|
|
|
|
@retval EFI_OUT_OF_RESOURCES No enough resources to save GCD MMIO map.
|
|
|
|
**/
|
|
|
|
EFI_STATUS
|
|
|
|
EFIAPI
|
|
|
|
SmmIoLibInternalEndOfDxeNotify (
|
|
|
|
IN CONST EFI_GUID *Protocol,
|
|
|
|
IN VOID *Interface,
|
|
|
|
IN EFI_HANDLE Handle
|
|
|
|
)
|
|
|
|
{
|
|
|
|
UINTN NumberOfDescriptors;
|
|
|
|
EFI_GCD_MEMORY_SPACE_DESCRIPTOR *MemSpaceMap;
|
|
|
|
EFI_STATUS Status;
|
|
|
|
|
|
|
|
Status = gDS->GetMemorySpaceMap (&NumberOfDescriptors, &MemSpaceMap);
|
2020-04-23 11:08:10 +02:00
|
|
|
if (!EFI_ERROR(Status)) {
|
2019-09-03 11:58:42 +02:00
|
|
|
|
|
|
|
MergeGcdMmioEntry (MemSpaceMap, &NumberOfDescriptors);
|
|
|
|
|
|
|
|
mSmmIoLibGcdMemSpace = AllocateCopyPool (NumberOfDescriptors * sizeof (EFI_GCD_MEMORY_SPACE_DESCRIPTOR), MemSpaceMap);
|
|
|
|
ASSERT (mSmmIoLibGcdMemSpace != NULL);
|
|
|
|
if (mSmmIoLibGcdMemSpace == NULL) {
|
2020-04-23 11:08:10 +02:00
|
|
|
gBS->FreePool(MemSpaceMap);
|
2019-09-03 11:58:42 +02:00
|
|
|
return EFI_OUT_OF_RESOURCES;
|
|
|
|
}
|
|
|
|
|
|
|
|
mSmmIoLibGcdMemNumberOfDesc = NumberOfDescriptors;
|
2020-04-23 11:08:10 +02:00
|
|
|
gBS->FreePool(MemSpaceMap);
|
2019-09-03 11:58:42 +02:00
|
|
|
}
|
|
|
|
|
|
|
|
return EFI_SUCCESS;
|
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
|
|
|
Notification for SMM ReadyToLock protocol.
|
|
|
|
|
|
|
|
@param[in] Protocol Points to the protocol's unique identifier.
|
|
|
|
@param[in] Interface Points to the interface instance.
|
|
|
|
@param[in] Handle The handle on which the interface was installed.
|
|
|
|
|
|
|
|
@retval EFI_SUCCESS Notification runs successfully.
|
|
|
|
**/
|
|
|
|
EFI_STATUS
|
|
|
|
EFIAPI
|
|
|
|
SmmIoLibInternalReadyToLockNotify (
|
|
|
|
IN CONST EFI_GUID *Protocol,
|
|
|
|
IN VOID *Interface,
|
|
|
|
IN EFI_HANDLE Handle
|
|
|
|
)
|
|
|
|
{
|
|
|
|
mSmmIoLibReadyToLock = TRUE;
|
|
|
|
return EFI_SUCCESS;
|
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
|
|
|
The constructor function initializes the Smm IO library
|
|
|
|
|
|
|
|
@param ImageHandle The firmware allocated handle for the EFI image.
|
|
|
|
@param SystemTable A pointer to the EFI System Table.
|
|
|
|
|
|
|
|
@retval EFI_SUCCESS The constructor always returns EFI_SUCCESS.
|
|
|
|
|
|
|
|
**/
|
|
|
|
EFI_STATUS
|
|
|
|
EFIAPI
|
|
|
|
SmmIoLibConstructor (
|
|
|
|
IN EFI_HANDLE ImageHandle,
|
|
|
|
IN EFI_SYSTEM_TABLE *SystemTable
|
|
|
|
)
|
|
|
|
{
|
|
|
|
EFI_STATUS Status;
|
|
|
|
|
|
|
|
//
|
|
|
|
// Calculate and save maximum support address
|
|
|
|
//
|
|
|
|
SmmIoLibInternalCalculateMaximumSupportAddress ();
|
|
|
|
|
|
|
|
//
|
|
|
|
// Register EndOfDxe to get GCD resource map
|
|
|
|
//
|
|
|
|
Status = gSmst->SmmRegisterProtocolNotify (&gEfiSmmEndOfDxeProtocolGuid, SmmIoLibInternalEndOfDxeNotify, &mSmmIoLibRegistrationEndOfDxe);
|
2020-04-23 11:08:10 +02:00
|
|
|
ASSERT_EFI_ERROR(Status);
|
2019-09-03 11:58:42 +02:00
|
|
|
|
|
|
|
//
|
|
|
|
// Register ready to lock so that we can know when to check valid resource region
|
|
|
|
//
|
|
|
|
Status = gSmst->SmmRegisterProtocolNotify (&gEfiSmmReadyToLockProtocolGuid, SmmIoLibInternalReadyToLockNotify, &mSmmIoLibRegistrationReadyToLock);
|
2020-04-23 11:08:10 +02:00
|
|
|
ASSERT_EFI_ERROR(Status);
|
2019-09-03 11:58:42 +02:00
|
|
|
|
|
|
|
return EFI_SUCCESS;
|
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
|
|
|
The destructor function frees resource used in the Smm IO library
|
|
|
|
|
|
|
|
@param[in] ImageHandle The firmware allocated handle for the EFI image.
|
|
|
|
@param[in] SystemTable A pointer to the EFI System Table.
|
|
|
|
|
|
|
|
@retval EFI_SUCCESS The deconstructor always returns EFI_SUCCESS.
|
|
|
|
**/
|
|
|
|
EFI_STATUS
|
|
|
|
EFIAPI
|
|
|
|
SmmIoLibDestructor (
|
|
|
|
IN EFI_HANDLE ImageHandle,
|
|
|
|
IN EFI_SYSTEM_TABLE *SystemTable
|
|
|
|
)
|
|
|
|
{
|
|
|
|
gSmst->SmmRegisterProtocolNotify (&gEfiSmmEndOfDxeProtocolGuid, NULL, &mSmmIoLibRegistrationEndOfDxe);
|
|
|
|
gSmst->SmmRegisterProtocolNotify (&gEfiSmmReadyToLockProtocolGuid, NULL, &mSmmIoLibRegistrationReadyToLock);
|
|
|
|
return EFI_SUCCESS;
|
|
|
|
}
|