aboutsummaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2015-07-01virtio-ring: 32bit cleanupGerd Hoffmann1-31/+30
Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
2015-07-01virtio-scsi: 32bit cleanupGerd Hoffmann1-6/+6
Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
2015-07-01virtio-blk: 32bit cleanupGerd Hoffmann1-4/+4
Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
2015-07-01virtio: legacy cleanupGerd Hoffmann2-33/+1
Now that all code is switched over to use vp_read/write we can drop the ioaddr field from vp_device and the offset #defines. Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
2015-07-01virtio: also probe version 1.0 pci idsGerd Hoffmann3-6/+12
Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
2015-07-01virtio: use version 1.0 if available (flip the big switch)Gerd Hoffmann1-7/+10
Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
2015-07-01virtio-blk: fix initialization for version 1.0Gerd Hoffmann2-28/+75
Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
2015-07-01virtio-scsi: fix initialization for version 1.0Gerd Hoffmann1-2/+23
Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
2015-07-01virtio: add version 1.0 support to vp_find_vqGerd Hoffmann1-15/+43
Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
2015-07-01virtio: remove unused vp_del_vqGerd Hoffmann1-11/+0
Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
2015-07-01virtio: add version 1.0 support to vp_notifyGerd Hoffmann4-7/+25
Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
2015-07-01virtio: add version 1.0 support to vp_resetGerd Hoffmann2-8/+12
Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
2015-07-01virtio: add version 1.0 support to vp_get_isrGerd Hoffmann2-5/+10
Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
2015-07-01virtio: add version 1.0 support to vp_{get,set}_statusGerd Hoffmann2-11/+22
Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
2015-07-01virtio: make features 64bit, support version 1.0 featuresGerd Hoffmann3-10/+37
Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
2015-07-01virtio: add read/write functions and macrosGerd Hoffmann1-0/+86
Add macros to read/write virtio registers. Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
2015-07-01virtio: create vp_cap struct for legacy barGerd Hoffmann2-2/+5
Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
2015-07-01virtio: find version 1.0 virtio capabilitiesGerd Hoffmann2-0/+64
virtio 1.0 specifies the location of the various virtio regions using pci capabilities. Look them up and store the results. Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
2015-07-01virtio: add version 0.9.5 structGerd Hoffmann1-0/+14
Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
2015-07-01virtio: add version 1.0 structs and #definesGerd Hoffmann2-0/+66
Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
2015-07-01virtio: pass struct pci_device to vp_init_simpleGerd Hoffmann4-6/+7
... instead of the bdf only. Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
2015-07-01virtio: add struct vp_deviceGerd Hoffmann6-53/+68
For virtio 1.0 support we will need more state than just the (legacy mode) ioaddr for each virtio-pci device. Prepare for that by adding a new struct for it. For now it carries the ioaddr only. Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
2015-07-01virtio: run drivers in 32bit modeGerd Hoffmann4-7/+10
virtio version 1.0 registers can (and actually do in the qemu implementation) live in mmio space. So we must run the blk and scsi virtio drivers in 32bit mode, otherwise we can't access them. This also allows to drop a bunch of GET_LOWFLAT calls from the virtio code in the following patches. Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
2015-06-30pci: allow to loop over capabilitiesGerd Hoffmann3-6/+11
Add a parameter to pci_find_capability, to specify the start point. This allows to find multiple capabilities of the same type, by calling pci_find_capability again with the offset of the last capability found. Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
2015-06-15build: CONFIG_VGA_FIXUP_ASM should depend on CONFIG_BUILD_VGABIOSKevin O'Connor1-0/+1
Add the dependency to CONFIG_VGA_FIXUP_ASM so the menu option only appears when appropriate. Signed-off-by: Kevin O'Connor <kevin@koconnor.net>
2015-06-11tcg: Use seabios setup()/prepboot() calling convention for tcgKevin O'Connor3-29/+23
Rename tcg externally called functions to more closely match other subsystems. Signed-off-by: Kevin O'Connor <kevin@koconnor.net> Tested-by: Stefan Berger <stefanb@linux.vnet.ibm.com>
2015-06-11tpm: Move call to tpm_option_rom into init_optionromStefan Berger1-1/+2
Move the call to measure the option ROM 'tpm_option_rom' into init_optionrom. Signed-off-by: Stefan Berger <stefanb@linux.vnet.ibm.com>
2015-06-11tpm: Clean up in tcgbios.hStefan Berger1-20/+0
Remove some unused #defines and remove comments pointing to sections in specs. Signed-off-by: Stefan Berger <stefanb@linux.vnet.ibm.com>
2015-06-11tpm: clean up parameters to build_and_send_cmdStefan Berger1-14/+10
Clean up the parameters to the build_and_send_cmd function call. Use the sizeof() on the preceding buffer parameter. If the buffer is NULL, we pass 0. Signed-off-by: Stefan Berger <stefanb@linux.vnet.ibm.com>
2015-06-11tpm: Be consistent with array sizes in tcgbios.cStefan Berger1-9/+9
Remove the array size from all arrays. Replace the magic 12 with sizeof(GetCapability_Timeouts), which represents the maximum number of bytes that need to be reserved. Signed-off-by: Stefan Berger <stefanb@linux.vnet.ibm.com>
2015-06-11tpm: Introduce a #define for command tagStefan Berger2-1/+3
Introduce a #define for the TPM command tag 0x00c1. Signed-off-by: Stefan Berger <stefanb@linux.vnet.ibm.com>
2015-06-11vga: add virtio-vga to kconfigGerd Hoffmann1-0/+5
Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
2015-06-11vga: rework virtio-vga supportGerd Hoffmann1-4/+1
Unlike planned earlier virtio-vga will be compatible with the qemu stdvga, with the framebuffer in bar 0. Drop the virtio-vga chunk, update comment accordingly. Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
2015-06-11vga: simplify vga buildsGerd Hoffmann1-2/+22
Add a kconfig menu to pick the vga variant, stick the vendorr and device ids as defaults into Kconfig. Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
2015-06-03build: Support "make VERSION=xyz" to override the default build versionKevin O'Connor2-8/+12
Add a build option to explicitly set the version information compiled into the seabios and seavgabios binaries. This may assist in reproducible builds or to better link builds to distribution packages. If the new "VERSION=" parameter is not provided then the default build version remains unchanged. Signed-off-by: Kevin O'Connor <kevin@koconnor.net>
2015-06-03Don't forward declare functions with "inline" in headersKevin O'Connor2-8/+8
Don't mark function definitions in headers with "inline" - it causes compile warnings on gcc v5. Signed-off-by: Kevin O'Connor <kevin@koconnor.net> Acked-by: Paul Menzel <paulepanter@sourceforge.net>
2015-06-01Add 'measurement' code to the BIOSStefan Berger5-3/+390
This patch adds invocations of functions that measure various parts of the code and data through various parts of the BIOS code. It follows TCG specifications on what needs to be measured. It also adds the implementation of the called functions. Reference for what needs to be measured can be found in specs found here: http://www.trustedcomputinggroup.org/resources/pc_client_work_group_specific_implementation_specification_for_conventional_bios The first measurements are done once the ACPI tables have been initialized. Once booted into Linux, the current measurements produce the following logs which can be found in /sys/kernel/security/tpm0/ascii_bios_measurements. The below log also shows measurements from trusted grub. 1 3fb240d2a04085a4e84f81e4398e070ed5a18163 06 [SMBIOS] 2 cc812353fc277c1fab99e0b721752a1392984566 06 [Option ROM] 2 9dbd87163112e5670378abe4510491259a61f411 05 [Start Option ROM Scan] 2 6f74e357331b8dee11bbad85f27bc66cb873106c 06 [Option ROM] 2 5626eb7ac05c7231e46d7461e7d3839b03ae9fad 06 [Option ROM] 4 c1e25c3f6b0dc78d57296aa2870ca6f782ccf80f 05 [Calling INT 19h] 0 d9be6524a5f5047db5866813acf3277892a7a30a 04 [] 1 d9be6524a5f5047db5866813acf3277892a7a30a 04 [] 2 d9be6524a5f5047db5866813acf3277892a7a30a 04 [] 3 d9be6524a5f5047db5866813acf3277892a7a30a 04 [] 4 d9be6524a5f5047db5866813acf3277892a7a30a 04 [] 5 d9be6524a5f5047db5866813acf3277892a7a30a 04 [] 6 d9be6524a5f5047db5866813acf3277892a7a30a 04 [] 7 d9be6524a5f5047db5866813acf3277892a7a30a 04 [] 4 8cf2fe6c87d4d0b2998a43da630292e6d85ee8b6 05 [Booting BCV device 80h (HDD)] 4 5dff94459a3e2d13a433ef94afdc306144565bf7 0d [IPL] 5 d1b33afde65ad47502332af957c60f20c84c1edc 0e [IPL Partition Data] 4 487ce764b527ccad17f1d04243d0136fa981e6c4 0d [IPL] 4 91d285e4dead566324c8938a3cc75803f462d9a1 0d [IPL] 4 8ba79ac98bb491524fef29defc724daaf6263d35 0d [IPL] 4 c591c15b82e4ff30e7383a4ff1ef3b41b38521ac 06 [] 4 8cdc27ec545eda33fbba1e8b8dae4da5c7206972 04 [Grub Event Separator] 5 8cdc27ec545eda33fbba1e8b8dae4da5c7206972 04 [Grub Event Separator] 5 e8673b9e14b02dc12d8ccfd0176bca7a3de7fc3c 0e [IPL Partition Data] 5 0163e375a0af7525c5dac1a8e74b277359e40d1d 1105 [] 8 4be30f67c3d48ab7f04d9c0fd07f06d4c68379be 1205 [] 8 54c83965978de9708d026016ecb0e70660e04388 1305 [] 5 2431ed60130faeaf3a045f21963f71cacd46a029 04 [OS Event Separator] 8 2431ed60130faeaf3a045f21963f71cacd46a029 04 [OS Event Separator] 8 f3973cae05d6e2055062119d6e6e1e077b7df876 1005 [] Signed-off-by: Stefan Berger <stefanb@linux.vnet.ibm.com>
2015-06-01Add multiboot support.Vladimir Serbinenko8-1/+393
I've been successfully using SeaBIOS as secondary bootloader. In more details I have GRUB2-as-payload in flash together with coreboot. SeaBIOS binary is on the HDD and loaded by GRUB when needed. This has an unfortunate consequence that I have to keep vga oprom in flash even if usually I boot without it. This patches makes bios.bin.elf multiboot executable with files passed as modules. Example: menuentry "SeaBIOS (mb)" --unrestricted { root=ahci0,2 multiboot /bios.bin.elf module /vgabios_x230.rom name=pci8086,0166.rom } the parameter name= specifies under which name SeaBIOS will see it. Signed-off-by: Vladimir Serbinenko <phcoder@gmail.com> Signed-off-by: Kevin O'Connor <kevin@koconnor.net>
2015-05-21make SeaBios compatible with Xen vTPM.Quan Xu1-1/+3
Signed-off-by: Quan Xu <quan.xu@intel.com>
2015-05-21Support for BIOS interrupt handlerStefan Berger8-14/+738
This patch implements the TCG BIOS interrupt handler 1ah. It is for example used by trusted grub. This patch adds an implementation of SHA1 (following NIST specs., IETF RFC 3147 and Wikipedia) for speeding up measurements of code. Trusted Grub for example makes use of this interface and measures (calculates SHA1) of the Linux kernel and initrd. Those files can be rather large and hunting their bytes through the TIS interface as part of the int handler commands invoked by trusted grub does take quite some time due to the many vmexits the interface is creating (one per byte). There is also a threshold for the size of data to hash (100k) below which the TPM is used and above the internal faster SHA1 algorithm is used. This patch for example enables trusted grub to interact with the TPM and take additional measurements. Signed-off-by: Stefan Berger <stefanb@linux.vnet.ibm.com> Signed-off-by: Kevin O'Connor <kevin@koconnor.net>
2015-05-21Implementation of the TCG BIOS extensionsStefan Berger9-2/+1032
This patch implements the main part of the TCG BIOS extensions. It provides the following functionality: - initialization of the TCPA ACPI table used for logging of measurements - initialization of the TPM by sending a sequence of commands to it - proper setup of the TPM before the BIOS hands over control to the bootloader - support for S3 resume; BIOS sends TPM_Startup(ST_STATE) to TPM - enable configuration of SeaBIOS to be built with TCGBIOS extensions All TCG BIOS extensions are activated with CONFIG_TCGBIOS. Structures that are needed in subsequent patches are also included in tcgbios.h at this point. The effect of this patch is that it initialized the TPM upon VM start and S3 resume. Signed-off-by: Stefan Berger <stefanb@linux.vnet.ibm.com>
2015-05-21Add an implementation of a TPM TIS driverStefan Berger2-0/+348
This patch adds an implementation of a TPM TIS driver for the TPM TIS emulation supported by QEMU. The driver is broken up into several small functions that have to be called in proper sequence. The driver is cleanly separated from the rest of the code through an interface holding pointers to the driver's functions. A client using this driver first probes whether the TPM TIS interface is available (probe function) and then invokes the interface function to initialze the interface and send requests and receive responses. Possible future extensions *could* include a virtio interface for the TPM with a corresponding driver here. Signed-off-by: Stefan Berger <stefanb@linux.vnet.ibm.com>
2015-05-21Link rom.o with -N option.Vladimir Serbinenko1-1/+1
This option tells linker not to align sections in a way optimied for OS. ls -lh out/bios.bin.elf -rwxr-xr-x 1 phcoder phcoder 90K Mai 19 20:38 out/bios.bin.elf Signed-off-by: Vladimir Serbinenko <phcoder@gmail.com>
2015-05-21ahci: Ignore max_ports.Vladimir Serbinenko1-1/+1
At least AHCI on Intel on some machines claim to support only 6 ports while in fact higher port numbers are present and work. This is needed to access CD-ROM on PackardBell MS2290. Both GRUB and Linux have a similar workaround. Signed-off-by: Vladimir Serbinenko <phcoder@gmail.com>
2015-05-11smm: ignore bits 16,18-31 of SMM revision IDPaolo Bonzini1-4/+11
Bits 16-31 of the SMM revision ID are feature bits. We only need to check that SMBASE relocation is supported, but do not care about other features. In particular, this allows the SMM I/O instruction restart feature to be present. Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
2015-04-17checkstack: Minor - continue if not a regular asm lineKevin O'Connor1-54/+54
Signed-off-by: Kevin O'Connor <kevin@koconnor.net>
2015-04-11vgabios: Emulate "leal" instructionKevin O'Connor2-26/+59
Emulate the "leal" instruction so that the vgabios can run on older versions of x86emu. (This removes the previous "leal" trap.) Signed-off-by: Kevin O'Connor <kevin@koconnor.net>
2015-04-10vgabios: Add config option for assembler fixupsKevin O'Connor3-10/+25
Add a kconfig build option (CONFIG_VGA_FIXUP_ASM) to allow users to build the vgabios without the complex assembler fixups that work around emulator bugs. Signed-off-by: Kevin O'Connor <kevin@koconnor.net>
2015-04-10vgabios: Don't use "smsww" instruction - it confuses x86emuKevin O'Connor1-1/+1
Commit 251e2638 introduced the "smsww" instruction to the vgabios. Unfortunately, it appears at least some versions of x86emu crash when executing that instruction (eg, FC13 installer crashes). That instruction wasn't required to work around the problem fixed in 251e2638, so just avoid it. Signed-off-by: Kevin O'Connor <kevin@koconnor.net>
2015-04-10smbios: Use integer signature instead of string signatureKevin O'Connor3-3/+5
Change the smbios structure to use a 4 byte u32 signature field instead of a 4 byte character string field. In practice, this allows the compiler to place the signature in the initialize code segment and thus makes it less likely the signature would be found in the f-segment. (If the smbios signature is found in the f-segment it can confuse some table scans.) Reviewed-by: Bruce Rogers <brogers@suse.com> Tested-by: Bruce Rogers <brogers@suse.com> Signed-off-by: Kevin O'Connor <kevin@koconnor.net>