OvmfPkg: require self-signed PK when secure boot is enabled

[mirror_edk2.git] / OvmfPkg / TdxDxe / TdxAcpiTable.c

/** @file\r
  OVMF ACPI QEMU support\r
\r
  Copyright (c) 2008 - 2014, Intel Corporation. All rights reserved.<BR>\r
\r
  Copyright (C) 2012-2014, Red Hat, Inc.\r
\r
  SPDX-License-Identifier: BSD-2-Clause-Patent\r
\r
**/\r
\r
#include <Library/DebugLib.h>\r
#include <Library/BaseLib.h>\r
#include <Library/BaseMemoryLib.h>\r
#include <Library/MemoryAllocationLib.h>\r
#include <Library/QemuFwCfgLib.h>\r
#include <Library/DxeServicesTableLib.h>\r
#include <Library/PcdLib.h>\r
#include <Library/OrderedCollectionLib.h>\r
#include <Library/TdxLib.h>\r
#include <IndustryStandard/Acpi.h>\r
#include <Protocol/AcpiSystemDescriptionTable.h>\r
#include <Protocol/AcpiTable.h>\r
#include <Library/UefiBootServicesTableLib.h>\r
#include <Library/UefiLib.h>\r
#include <Library/TdxMailboxLib.h>\r
#include <Protocol/Cpu.h>\r
#include <Uefi.h>\r
#include <TdxAcpiTable.h>\r
\r
/**\r
  At the beginning of system boot, a 4K-aligned, 4K-size memory (Td mailbox) is\r
  pre-allocated by host VMM. BSP & APs do the page accept together in that memory\r
  region.\r
\r
  After that TDVF is designed to relocate the mailbox to a 4K-aligned, 4K-size\r
  memory block which is allocated in the ACPI Nvs memory. APs are waken up and\r
  spin around the relocated mailbox for further command.\r
\r
  @return   EFI_PHYSICAL_ADDRESS    Address of the relocated mailbox\r
**/\r
EFI_PHYSICAL_ADDRESS\r
EFIAPI\r
RelocateMailbox (\r
  VOID\r
  )\r
{\r
  EFI_PHYSICAL_ADDRESS  Address;\r
  VOID                  *ApLoopFunc;\r
  UINT32                RelocationPages;\r
  MP_RELOCATION_MAP     RelocationMap;\r
  MP_WAKEUP_MAILBOX     *RelocatedMailBox;\r
  EFI_STATUS            Status;\r
\r
  Address    = 0;\r
  ApLoopFunc = NULL;\r
  ZeroMem (&RelocationMap, sizeof (RelocationMap));\r
\r
  //\r
  // Get information needed to setup aps running in their\r
  // run loop in allocated acpi reserved memory\r
  // Add another page for mailbox\r
  //\r
  AsmGetRelocationMap (&RelocationMap);\r
  if ((RelocationMap.RelocateApLoopFuncAddress == 0) || (RelocationMap.RelocateApLoopFuncSize == 0)) {\r
    DEBUG ((DEBUG_ERROR, "Failed to get the RelocationMap.\n"));\r
    return 0;\r
  }\r
\r
  RelocationPages = EFI_SIZE_TO_PAGES ((UINT32)RelocationMap.RelocateApLoopFuncSize) + 1;\r
\r
  Status = gBS->AllocatePages (AllocateAnyPages, EfiACPIMemoryNVS, RelocationPages, &Address);\r
  if (EFI_ERROR (Status)) {\r
    DEBUG ((DEBUG_ERROR, "Failed to allocate pages for MailboxRelocation. %r\n", Status));\r
    return 0;\r
  }\r
\r
  ZeroMem ((VOID *)Address, EFI_PAGES_TO_SIZE (RelocationPages));\r
\r
  ApLoopFunc = (VOID *)((UINTN)Address + EFI_PAGE_SIZE);\r
\r
  CopyMem (\r
    ApLoopFunc,\r
    RelocationMap.RelocateApLoopFuncAddress,\r
    RelocationMap.RelocateApLoopFuncSize\r
    );\r
\r
  DEBUG ((\r
    DEBUG_INFO,\r
    "Ap Relocation: mailbox %llx, loop %p\n",\r
    Address,\r
    ApLoopFunc\r
    ));\r
\r
  //\r
  // Initialize mailbox\r
  //\r
  RelocatedMailBox               = (MP_WAKEUP_MAILBOX *)Address;\r
  RelocatedMailBox->Command      = MpProtectedModeWakeupCommandNoop;\r
  RelocatedMailBox->ApicId       = MP_CPU_PROTECTED_MODE_MAILBOX_APICID_INVALID;\r
  RelocatedMailBox->WakeUpVector = 0;\r
\r
  //\r
  // Wakup APs and have been move to the finalized run loop\r
  // They will spin until guest OS wakes them\r
  //\r
  MpSerializeStart ();\r
\r
  MpSendWakeupCommand (\r
    MpProtectedModeWakeupCommandWakeup,\r
    (UINT64)ApLoopFunc,\r
    (UINT64)RelocatedMailBox,\r
    0,\r
    0,\r
    0\r
    );\r
\r
  return Address;\r
}\r
\r
/**\r
  Alter the MADT when ACPI Table from QEMU is available.\r
\r
  @param[in]  Event     Event whose notification function is being invoked\r
  @param[in]  Context   Pointer to the notification function's context\r
**/\r
VOID\r
EFIAPI\r
AlterAcpiTable (\r
  IN EFI_EVENT  Event,\r
  IN VOID       *Context\r
  )\r
{\r
  EFI_ACPI_SDT_PROTOCOL                                *AcpiSdtProtocol;\r
  EFI_ACPI_TABLE_PROTOCOL                              *AcpiTableProtocol;\r
  EFI_STATUS                                           Status;\r
  UINTN                                                Index;\r
  EFI_ACPI_SDT_HEADER                                  *Table;\r
  EFI_ACPI_TABLE_VERSION                               Version;\r
  UINTN                                                OriginalTableKey;\r
  UINTN                                                NewTableKey;\r
  UINT8                                                *NewMadtTable;\r
  UINTN                                                NewMadtTableLength;\r
  EFI_PHYSICAL_ADDRESS                                 RelocateMailboxAddress;\r
  EFI_ACPI_6_4_MULTIPROCESSOR_WAKEUP_STRUCTURE         *MadtMpWk;\r
  EFI_ACPI_1_0_MULTIPLE_APIC_DESCRIPTION_TABLE_HEADER  *MadtHeader;\r
\r
  Index        = 0;\r
  NewMadtTable = NULL;\r
  MadtHeader   = NULL;\r
\r
  Status = gBS->LocateProtocol (&gEfiAcpiSdtProtocolGuid, NULL, (void **)&AcpiSdtProtocol);\r
  if (EFI_ERROR (Status)) {\r
    DEBUG ((DEBUG_ERROR, "Unable to locate ACPI SDT protocol.\n"));\r
    return;\r
  }\r
\r
  RelocateMailboxAddress = RelocateMailbox ();\r
  if (RelocateMailboxAddress == 0) {\r
    ASSERT (FALSE);\r
    DEBUG ((DEBUG_ERROR, "Failed to relocate Td mailbox\n"));\r
    return;\r
  }\r
\r
  do {\r
    Status = AcpiSdtProtocol->GetAcpiTable (Index, &Table, &Version, &OriginalTableKey);\r
\r
    if (!EFI_ERROR (Status) && (Table->Signature == EFI_ACPI_1_0_APIC_SIGNATURE)) {\r
      Status = gBS->LocateProtocol (&gEfiAcpiTableProtocolGuid, NULL, (void **)&AcpiTableProtocol);\r
      if (EFI_ERROR (Status)) {\r
        DEBUG ((DEBUG_ERROR, "Unable to locate ACPI Table protocol.\n"));\r
        break;\r
      }\r
\r
      NewMadtTableLength = Table->Length + sizeof (EFI_ACPI_6_4_MULTIPROCESSOR_WAKEUP_STRUCTURE);\r
      NewMadtTable       = AllocatePool (NewMadtTableLength);\r
      if (NewMadtTable == NULL) {\r
        DEBUG ((DEBUG_ERROR, "%a: OUT_OF_SOURCES error.\n", __FUNCTION__));\r
        break;\r
      }\r
\r
      CopyMem (NewMadtTable, (UINT8 *)Table, Table->Length);\r
      MadtHeader                = (EFI_ACPI_1_0_MULTIPLE_APIC_DESCRIPTION_TABLE_HEADER *)NewMadtTable;\r
      MadtHeader->Header.Length = (UINT32)NewMadtTableLength;\r
\r
      MadtMpWk                 = (EFI_ACPI_6_4_MULTIPROCESSOR_WAKEUP_STRUCTURE *)(NewMadtTable + Table->Length);\r
      MadtMpWk->Type           = EFI_ACPI_6_4_MULTIPROCESSOR_WAKEUP;\r
      MadtMpWk->Length         = sizeof (EFI_ACPI_6_4_MULTIPROCESSOR_WAKEUP_STRUCTURE);\r
      MadtMpWk->MailBoxVersion = 1;\r
      MadtMpWk->Reserved       = 0;\r
      MadtMpWk->MailBoxAddress = RelocateMailboxAddress;\r
\r
      Status = AcpiTableProtocol->InstallAcpiTable (AcpiTableProtocol, NewMadtTable, NewMadtTableLength, &NewTableKey);\r
      if (EFI_ERROR (Status)) {\r
        DEBUG ((DEBUG_ERROR, "Failed to install new MADT table. %r\n", Status));\r
        break;\r
      }\r
\r
      Status = AcpiTableProtocol->UninstallAcpiTable (AcpiTableProtocol, OriginalTableKey);\r
      if (EFI_ERROR (Status)) {\r
        DEBUG ((DEBUG_ERROR, "Uninstall old MADT table error.\n"));\r
      }\r
\r
      break;\r
    }\r
\r
    Index++;\r
  } while (!EFI_ERROR (Status));\r
\r
  if (NewMadtTable != NULL) {\r
    FreePool (NewMadtTable);\r
  }\r
}\r