mirror of
https://github.com/Telecominfraproject/OpenCellular.git
synced 2025-12-30 18:41:11 +00:00
a75f7c8680
When invoking vendor command handlers in try_vendor_command(), the
buffer containing the command is passed to the handler to communicate
the command contents and to hold the command execution return data. It
was fine when invoking vendor command handlers from the TPM stack, as
the receive buffer is 4K in size and is large enough for any expected
vendor command response.
It is different in case of USB: the command is in the receive buffer
of the USB queue, and the response data could easily exceed the
command size, which would cause corruption of the USB receive queue
contents when the response data is placed into the same buffer where
the command is.
Let's introduce a local storage to pass the command and receive the
response data from the handler. 32 bytes is enough for the foreseeable
future, should a need arise for a larger buffer, testing would result
in an error (a new error type is added to indicate insufficient buffer
space for command processing).
BRANCH=none
BUG=b:35587387,b:35587053
TEST=with the rest of the patches applied verified proper processing
of the 'Get Board ID' command for which response size exceeds the
request size.
Change-Id: I2131496f3a99c7f3a1869905120a453d75efbdce
Signed-off-by: Vadim Bendebury <vbendeb@chromium.org>
Reviewed-on: https://chromium-review.googlesource.com/525092
Reviewed-by: Aseda Aboagye <aaboagye@chromium.org>
96 lines
2.8 KiB
C
96 lines
2.8 KiB
C
/* Copyright 2016 The Chromium OS Authors. All rights reserved.
|
|
* Use of this source code is governed by a BSD-style license that can be
|
|
* found in the LICENSE file.
|
|
*/
|
|
|
|
#ifndef __INCLUDE_TPM_VENDOR_CMDS_H
|
|
#define __INCLUDE_TPM_VENDOR_CMDS_H
|
|
|
|
/*
|
|
* This file includes definitions of extended/vendor TPM2 commands and their
|
|
* return codes. The definitions are shared between the embedded code and the
|
|
* usb_updater utility running on the host.
|
|
*/
|
|
|
|
/* Extension and vendor commands. */
|
|
enum vendor_cmd_cc {
|
|
/* Original extension commands */
|
|
EXTENSION_AES = 0,
|
|
EXTENSION_HASH = 1,
|
|
EXTENSION_RSA = 2,
|
|
EXTENSION_ECC = 3,
|
|
EXTENSION_FW_UPGRADE = 4,
|
|
EXTENSION_HKDF = 5,
|
|
EXTENSION_ECIES = 6,
|
|
EXTENSION_POST_RESET = 7,
|
|
|
|
LAST_EXTENSION_COMMAND = 15,
|
|
|
|
/* Our TPMv2 vendor-specific command codes. 16 bits available. */
|
|
VENDOR_CC_GET_LOCK = 16,
|
|
VENDOR_CC_SET_LOCK = 17,
|
|
VENDOR_CC_SYSINFO = 18,
|
|
VENDOR_CC_IMMEDIATE_RESET = 19,
|
|
VENDOR_CC_INVALIDATE_INACTIVE_RW = 20,
|
|
VENDOR_CC_COMMIT_NVMEM = 21,
|
|
|
|
/* A gap left for the deep sleep control command. */
|
|
|
|
VENDOR_CC_REPORT_TPM_STATE = 23,
|
|
VENDOR_CC_TURN_UPDATE_ON = 24,
|
|
VENDOR_CC_GET_BOARD_ID = 25,
|
|
VENDOR_CC_SET_BOARD_ID = 26,
|
|
|
|
LAST_VENDOR_COMMAND = 65535,
|
|
};
|
|
|
|
/* Error codes reported by extension and vendor commands. */
|
|
enum vendor_cmd_rc {
|
|
/* EXTENSION_HASH error codes */
|
|
/* Attempt to start a session on an active handle. */
|
|
EXC_HASH_DUPLICATED_HANDLE = 1,
|
|
EXC_HASH_TOO_MANY_HANDLES = 2, /* No room to allocate a new context. */
|
|
/* Continuation/finish on unknown context. */
|
|
EXC_HASH_UNKNOWN_CONTEXT = 3,
|
|
|
|
/* Our TPMv2 vendor-specific response codes. */
|
|
VENDOR_RC_SUCCESS = 0,
|
|
VENDOR_RC_BOGUS_ARGS = 1,
|
|
VENDOR_RC_READ_FLASH_FAIL = 2,
|
|
VENDOR_RC_WRITE_FLASH_FAIL = 3,
|
|
VENDOR_RC_REQUEST_TOO_BIG = 4,
|
|
VENDOR_RC_RESPONSE_TOO_BIG = 5,
|
|
/* Only 7 bits available; max is 127 */
|
|
VENDOR_RC_NO_SUCH_COMMAND = 127,
|
|
};
|
|
|
|
/*
|
|
* The TPMv2 Spec mandates that vendor-specific command codes have bit 29 set,
|
|
* while bits 15-0 indicate the command. All other bits should be zero.
|
|
* We will define one of those 16-bit command values for Cr50 purposes, and use
|
|
* the subcommand_code in struct tpm_cmd_header to further distinguish the
|
|
* desired operation.
|
|
*/
|
|
#define TPM_CC_VENDOR_BIT_MASK 0x20000000
|
|
#define VENDOR_CC_MASK 0x0000ffff
|
|
/* Our vendor-specific command codes go here */
|
|
#define TPM_CC_VENDOR_CR50 0x0000
|
|
|
|
/*
|
|
* The TPM response code is all zero for success.
|
|
* Errors are a little complicated:
|
|
*
|
|
* Bits 31:12 must be zero.
|
|
*
|
|
* Bit 11 S=0 Error
|
|
* Bit 10 T=1 Vendor defined response code
|
|
* Bit 9 r=0 reserved
|
|
* Bit 8 V=1 Conforms to TPMv2 spec
|
|
* Bit 7 F=0 Confirms to Table 14, Format-Zero Response Codes
|
|
* Bits 6:0 num 128 possible failure reasons
|
|
*/
|
|
#define VENDOR_RC_ERR 0x00000500
|
|
|
|
|
|
#endif /* __INCLUDE_TPM_VENDOR_CMDS_H */
|