blob: 0b3c3d7e7b5eb949fc36379c55aa53c7a7139e46 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
|
/* IBM_PROLOG_BEGIN_TAG */
/* This is an automatically generated prolog. */
/* */
/* $Source: src/usr/runtime/fakepayload.C $ */
/* */
/* IBM CONFIDENTIAL */
/* */
/* COPYRIGHT International Business Machines Corp. 2013 */
/* */
/* p1 */
/* */
/* Object Code Only (OCO) source materials */
/* Licensed Internal Code Source Materials */
/* IBM HostBoot Licensed Internal Code */
/* */
/* The source code for this program is not published or otherwise */
/* divested of its trade secrets, irrespective of what has been */
/* deposited with the U.S. Copyright Office. */
/* */
/* Origin: 30 */
/* */
/* IBM_PROLOG_END_TAG */
#include "fakepayload.H"
#include <string.h>
#include <sys/mm.h>
#include <util/align.H>
#include <targeting/common/commontargeting.H>
namespace RUNTIME
{
void FakePayload::payload()
{
MAGIC_INSTRUCTION(MAGIC_FAKEPAYLOAD_ENTER); // instr 1
nap(); // instr 2
// Should never wake from nap, but just in case...
loop:
goto loop; // instr 3
}
const size_t FakePayload::size = 3 * sizeof(uint32_t); // 3 instructions.
const size_t FakePayload::safeClearArea = 1 * MEGABYTE;
void FakePayload::load()
{
TARGETING::Target* sys = NULL;
TARGETING::targetService().getTopLevelTarget(sys);
// Find payload base address and offset.
uint64_t base = sys->getAttr<TARGETING::ATTR_PAYLOAD_BASE>() * MEGABYTE;
uint64_t entry = sys->getAttr<TARGETING::ATTR_PAYLOAD_ENTRY>();
// Skip loading the payload if the address is 0.
if (0 == base)
{
return;
}
// Verify payload size.
assert(ALIGN_PAGE(entry + size) < safeClearArea);
// Map in the payload area.
void* memArea = mm_block_map(reinterpret_cast<void*>(base), safeClearArea);
// Clear out anything the FSP might have left around (for security).
memset(memArea, '\0', safeClearArea);
// Copy over the fake payload code.
uint8_t* dest = reinterpret_cast<uint8_t*>(memArea) + entry;
union fn_ptr
{
void (*opd)();
uint64_t** data;
};
fn_ptr payload_code = { payload };
memcpy(dest, *payload_code.data, size);
// Invalidate the icache since this is instructions.
mm_icache_invalidate(memArea, ALIGN_8(safeClearArea) / sizeof(uint64_t));
// Unmap the payload area.
assert(0 == mm_block_unmap(memArea));
}
}
|
