]>
Commit | Line | Data |
---|---|---|
9703d9d7 CM |
1 | /* |
2 | * Low-level CPU initialisation | |
3 | * Based on arch/arm/kernel/head.S | |
4 | * | |
5 | * Copyright (C) 1994-2002 Russell King | |
6 | * Copyright (C) 2003-2012 ARM Ltd. | |
7 | * Authors: Catalin Marinas <catalin.marinas@arm.com> | |
8 | * Will Deacon <will.deacon@arm.com> | |
9 | * | |
10 | * This program is free software; you can redistribute it and/or modify | |
11 | * it under the terms of the GNU General Public License version 2 as | |
12 | * published by the Free Software Foundation. | |
13 | * | |
14 | * This program is distributed in the hope that it will be useful, | |
15 | * but WITHOUT ANY WARRANTY; without even the implied warranty of | |
16 | * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the | |
17 | * GNU General Public License for more details. | |
18 | * | |
19 | * You should have received a copy of the GNU General Public License | |
20 | * along with this program. If not, see <http://www.gnu.org/licenses/>. | |
21 | */ | |
22 | ||
23 | #include <linux/linkage.h> | |
24 | #include <linux/init.h> | |
021f6537 | 25 | #include <linux/irqchip/arm-gic-v3.h> |
9703d9d7 CM |
26 | |
27 | #include <asm/assembler.h> | |
08cdac61 | 28 | #include <asm/boot.h> |
9703d9d7 CM |
29 | #include <asm/ptrace.h> |
30 | #include <asm/asm-offsets.h> | |
c218bca7 | 31 | #include <asm/cache.h> |
0359b0e2 | 32 | #include <asm/cputype.h> |
1e48ef7f | 33 | #include <asm/elf.h> |
87d1587b | 34 | #include <asm/kernel-pgtable.h> |
1f364c8c | 35 | #include <asm/kvm_arm.h> |
9703d9d7 | 36 | #include <asm/memory.h> |
9703d9d7 CM |
37 | #include <asm/pgtable-hwdef.h> |
38 | #include <asm/pgtable.h> | |
39 | #include <asm/page.h> | |
bb905274 | 40 | #include <asm/smp.h> |
4bf8b96e SP |
41 | #include <asm/sysreg.h> |
42 | #include <asm/thread_info.h> | |
f35a9205 | 43 | #include <asm/virt.h> |
9703d9d7 | 44 | |
6f4d57fa | 45 | #define __PHYS_OFFSET (KERNEL_START - TEXT_OFFSET) |
9703d9d7 | 46 | |
4190312b AB |
47 | #if (TEXT_OFFSET & 0xfff) != 0 |
48 | #error TEXT_OFFSET must be at least 4KB aligned | |
49 | #elif (PAGE_OFFSET & 0x1fffff) != 0 | |
da57a369 | 50 | #error PAGE_OFFSET must be at least 2MB aligned |
4190312b | 51 | #elif TEXT_OFFSET > 0x1fffff |
da57a369 | 52 | #error TEXT_OFFSET must be less than 2MB |
9703d9d7 CM |
53 | #endif |
54 | ||
9703d9d7 CM |
55 | /* |
56 | * Kernel startup entry point. | |
57 | * --------------------------- | |
58 | * | |
59 | * The requirements are: | |
60 | * MMU = off, D-cache = off, I-cache = on or off, | |
61 | * x0 = physical address to the FDT blob. | |
62 | * | |
63 | * This code is mostly position independent so you call this at | |
64 | * __pa(PAGE_OFFSET + TEXT_OFFSET). | |
65 | * | |
66 | * Note that the callee-saved registers are used for storing variables | |
67 | * that are useful before the MMU is enabled. The allocations are described | |
68 | * in the entry routines. | |
69 | */ | |
70 | __HEAD | |
2bf31a4a | 71 | _head: |
9703d9d7 CM |
72 | /* |
73 | * DO NOT MODIFY. Image header expected by Linux boot-loaders. | |
74 | */ | |
3c7f2550 | 75 | #ifdef CONFIG_EFI |
3c7f2550 MS |
76 | /* |
77 | * This add instruction has no meaningful effect except that | |
78 | * its opcode forms the magic "MZ" signature required by UEFI. | |
79 | */ | |
80 | add x13, x18, #0x16 | |
81 | b stext | |
82 | #else | |
9703d9d7 CM |
83 | b stext // branch to kernel start, magic |
84 | .long 0 // reserved | |
3c7f2550 | 85 | #endif |
6ad1fe5d AB |
86 | le64sym _kernel_offset_le // Image load offset from start of RAM, little-endian |
87 | le64sym _kernel_size_le // Effective size of kernel image, little-endian | |
88 | le64sym _kernel_flags_le // Informative flags, little-endian | |
4370eec0 RF |
89 | .quad 0 // reserved |
90 | .quad 0 // reserved | |
91 | .quad 0 // reserved | |
92 | .byte 0x41 // Magic number, "ARM\x64" | |
93 | .byte 0x52 | |
94 | .byte 0x4d | |
95 | .byte 0x64 | |
3c7f2550 | 96 | #ifdef CONFIG_EFI |
2bf31a4a | 97 | .long pe_header - _head // Offset to the PE header. |
3c7f2550 | 98 | #else |
4370eec0 | 99 | .word 0 // reserved |
3c7f2550 MS |
100 | #endif |
101 | ||
102 | #ifdef CONFIG_EFI | |
103 | .align 3 | |
104 | pe_header: | |
105 | .ascii "PE" | |
106 | .short 0 | |
107 | coff_header: | |
108 | .short 0xaa64 // AArch64 | |
109 | .short 2 // nr_sections | |
110 | .long 0 // TimeDateStamp | |
111 | .long 0 // PointerToSymbolTable | |
112 | .long 1 // NumberOfSymbols | |
113 | .short section_table - optional_header // SizeOfOptionalHeader | |
114 | .short 0x206 // Characteristics. | |
115 | // IMAGE_FILE_DEBUG_STRIPPED | | |
116 | // IMAGE_FILE_EXECUTABLE_IMAGE | | |
117 | // IMAGE_FILE_LINE_NUMS_STRIPPED | |
118 | optional_header: | |
119 | .short 0x20b // PE32+ format | |
120 | .byte 0x02 // MajorLinkerVersion | |
121 | .byte 0x14 // MinorLinkerVersion | |
546c8c44 | 122 | .long _end - efi_header_end // SizeOfCode |
3c7f2550 MS |
123 | .long 0 // SizeOfInitializedData |
124 | .long 0 // SizeOfUninitializedData | |
2bf31a4a | 125 | .long __efistub_entry - _head // AddressOfEntryPoint |
546c8c44 | 126 | .long efi_header_end - _head // BaseOfCode |
3c7f2550 MS |
127 | |
128 | extra_header_fields: | |
129 | .quad 0 // ImageBase | |
ea6bc80d | 130 | .long 0x1000 // SectionAlignment |
a352ea3e | 131 | .long PECOFF_FILE_ALIGNMENT // FileAlignment |
3c7f2550 MS |
132 | .short 0 // MajorOperatingSystemVersion |
133 | .short 0 // MinorOperatingSystemVersion | |
134 | .short 0 // MajorImageVersion | |
135 | .short 0 // MinorImageVersion | |
136 | .short 0 // MajorSubsystemVersion | |
137 | .short 0 // MinorSubsystemVersion | |
138 | .long 0 // Win32VersionValue | |
139 | ||
2bf31a4a | 140 | .long _end - _head // SizeOfImage |
3c7f2550 MS |
141 | |
142 | // Everything before the kernel image is considered part of the header | |
546c8c44 | 143 | .long efi_header_end - _head // SizeOfHeaders |
3c7f2550 MS |
144 | .long 0 // CheckSum |
145 | .short 0xa // Subsystem (EFI application) | |
146 | .short 0 // DllCharacteristics | |
147 | .quad 0 // SizeOfStackReserve | |
148 | .quad 0 // SizeOfStackCommit | |
149 | .quad 0 // SizeOfHeapReserve | |
150 | .quad 0 // SizeOfHeapCommit | |
151 | .long 0 // LoaderFlags | |
757b435a | 152 | .long (section_table - .) / 8 // NumberOfRvaAndSizes |
3c7f2550 MS |
153 | |
154 | .quad 0 // ExportTable | |
155 | .quad 0 // ImportTable | |
156 | .quad 0 // ResourceTable | |
157 | .quad 0 // ExceptionTable | |
158 | .quad 0 // CertificationTable | |
159 | .quad 0 // BaseRelocationTable | |
160 | ||
757b435a AB |
161 | #ifdef CONFIG_DEBUG_EFI |
162 | .long efi_debug_table - _head // DebugTable | |
163 | .long efi_debug_table_size | |
164 | #endif | |
165 | ||
3c7f2550 MS |
166 | // Section table |
167 | section_table: | |
168 | ||
169 | /* | |
170 | * The EFI application loader requires a relocation section | |
171 | * because EFI applications must be relocatable. This is a | |
172 | * dummy section as far as we are concerned. | |
173 | */ | |
174 | .ascii ".reloc" | |
175 | .byte 0 | |
176 | .byte 0 // end of 0 padding of section name | |
177 | .long 0 | |
178 | .long 0 | |
179 | .long 0 // SizeOfRawData | |
180 | .long 0 // PointerToRawData | |
181 | .long 0 // PointerToRelocations | |
182 | .long 0 // PointerToLineNumbers | |
183 | .short 0 // NumberOfRelocations | |
184 | .short 0 // NumberOfLineNumbers | |
185 | .long 0x42100040 // Characteristics (section flags) | |
186 | ||
187 | ||
188 | .ascii ".text" | |
189 | .byte 0 | |
190 | .byte 0 | |
191 | .byte 0 // end of 0 padding of section name | |
546c8c44 AB |
192 | .long _end - efi_header_end // VirtualSize |
193 | .long efi_header_end - _head // VirtualAddress | |
194 | .long _edata - efi_header_end // SizeOfRawData | |
195 | .long efi_header_end - _head // PointerToRawData | |
3c7f2550 MS |
196 | |
197 | .long 0 // PointerToRelocations (0 for executables) | |
198 | .long 0 // PointerToLineNumbers (0 for executables) | |
199 | .short 0 // NumberOfRelocations (0 for executables) | |
200 | .short 0 // NumberOfLineNumbers (0 for executables) | |
201 | .long 0xe0500020 // Characteristics (section flags) | |
ea6bc80d | 202 | |
757b435a AB |
203 | #ifdef CONFIG_DEBUG_EFI |
204 | /* | |
205 | * The debug table is referenced via its Relative Virtual Address (RVA), | |
206 | * which is only defined for those parts of the image that are covered | |
207 | * by a section declaration. Since this header is not covered by any | |
208 | * section, the debug table must be emitted elsewhere. So stick it in | |
209 | * the .init.rodata section instead. | |
210 | * | |
211 | * Note that the EFI debug entry itself may legally have a zero RVA, | |
212 | * which means we can simply put it right after the section headers. | |
213 | */ | |
214 | __INITRODATA | |
215 | ||
216 | .align 2 | |
217 | efi_debug_table: | |
218 | // EFI_IMAGE_DEBUG_DIRECTORY_ENTRY | |
219 | .long 0 // Characteristics | |
220 | .long 0 // TimeDateStamp | |
221 | .short 0 // MajorVersion | |
222 | .short 0 // MinorVersion | |
223 | .long 2 // Type == EFI_IMAGE_DEBUG_TYPE_CODEVIEW | |
224 | .long efi_debug_entry_size // SizeOfData | |
225 | .long 0 // RVA | |
226 | .long efi_debug_entry - _head // FileOffset | |
227 | ||
228 | .set efi_debug_table_size, . - efi_debug_table | |
229 | .previous | |
230 | ||
231 | efi_debug_entry: | |
232 | // EFI_IMAGE_DEBUG_CODEVIEW_NB10_ENTRY | |
233 | .ascii "NB10" // Signature | |
234 | .long 0 // Unknown | |
235 | .long 0 // Unknown2 | |
236 | .long 0 // Unknown3 | |
237 | ||
238 | .asciz VMLINUX_PATH | |
239 | ||
240 | .set efi_debug_entry_size, . - efi_debug_entry | |
241 | #endif | |
242 | ||
ea6bc80d | 243 | /* |
546c8c44 | 244 | * EFI will load .text onwards at the 4k section alignment |
ea6bc80d AB |
245 | * described in the PE/COFF header. To ensure that instruction |
246 | * sequences using an adrp and a :lo12: immediate will function | |
546c8c44 | 247 | * correctly at this alignment, we must ensure that .text is |
ea6bc80d AB |
248 | * placed at a 4k boundary in the Image to begin with. |
249 | */ | |
250 | .align 12 | |
546c8c44 | 251 | efi_header_end: |
3c7f2550 | 252 | #endif |
9703d9d7 | 253 | |
546c8c44 AB |
254 | __INIT |
255 | ||
a9be2ee0 AB |
256 | /* |
257 | * The following callee saved general purpose registers are used on the | |
258 | * primary lowlevel boot path: | |
259 | * | |
260 | * Register Scope Purpose | |
261 | * x21 stext() .. start_kernel() FDT pointer passed at boot in x0 | |
262 | * x23 stext() .. start_kernel() physical misalignment/KASLR offset | |
263 | * x28 __create_page_tables() callee preserved temp register | |
264 | * x19/x20 __primary_switch() callee preserved temp registers | |
265 | */ | |
9703d9d7 | 266 | ENTRY(stext) |
da9c177d | 267 | bl preserve_boot_args |
23c8a500 | 268 | bl el2_setup // Drop to EL1, w0=cpu_boot_mode |
b929fe32 AB |
269 | adrp x23, __PHYS_OFFSET |
270 | and x23, x23, MIN_KIMG_ALIGN - 1 // KASLR offset, defaults to 0 | |
828e9834 | 271 | bl set_cpu_boot_mode_flag |
aea73abb | 272 | bl __create_page_tables |
9703d9d7 | 273 | /* |
a591ede4 MZ |
274 | * The following calls CPU setup code, see arch/arm64/mm/proc.S for |
275 | * details. | |
9703d9d7 CM |
276 | * On return, the CPU will be ready for the MMU to be turned on and |
277 | * the TCR will have been set. | |
278 | */ | |
0cd3defe | 279 | bl __cpu_setup // initialise processor |
3c5e9f23 | 280 | b __primary_switch |
9703d9d7 CM |
281 | ENDPROC(stext) |
282 | ||
da9c177d AB |
283 | /* |
284 | * Preserve the arguments passed by the bootloader in x0 .. x3 | |
285 | */ | |
286 | preserve_boot_args: | |
287 | mov x21, x0 // x21=FDT | |
288 | ||
289 | adr_l x0, boot_args // record the contents of | |
290 | stp x21, x1, [x0] // x0 .. x3 at kernel entry | |
291 | stp x2, x3, [x0, #16] | |
292 | ||
293 | dmb sy // needed before dc ivac with | |
294 | // MMU off | |
295 | ||
296 | add x1, x0, #0x20 // 4 x 8 bytes | |
297 | b __inval_cache_range // tail call | |
298 | ENDPROC(preserve_boot_args) | |
299 | ||
034edabe LA |
300 | /* |
301 | * Macro to create a table entry to the next page. | |
302 | * | |
303 | * tbl: page table address | |
304 | * virt: virtual address | |
305 | * shift: #imm page table shift | |
306 | * ptrs: #imm pointers per table page | |
307 | * | |
308 | * Preserves: virt | |
309 | * Corrupts: tmp1, tmp2 | |
310 | * Returns: tbl -> next level table page address | |
311 | */ | |
312 | .macro create_table_entry, tbl, virt, shift, ptrs, tmp1, tmp2 | |
313 | lsr \tmp1, \virt, #\shift | |
314 | and \tmp1, \tmp1, #\ptrs - 1 // table index | |
315 | add \tmp2, \tbl, #PAGE_SIZE | |
316 | orr \tmp2, \tmp2, #PMD_TYPE_TABLE // address of next table and entry type | |
317 | str \tmp2, [\tbl, \tmp1, lsl #3] | |
318 | add \tbl, \tbl, #PAGE_SIZE // next level table page | |
319 | .endm | |
320 | ||
321 | /* | |
322 | * Macro to populate the PGD (and possibily PUD) for the corresponding | |
323 | * block entry in the next level (tbl) for the given virtual address. | |
324 | * | |
325 | * Preserves: tbl, next, virt | |
326 | * Corrupts: tmp1, tmp2 | |
327 | */ | |
328 | .macro create_pgd_entry, tbl, virt, tmp1, tmp2 | |
329 | create_table_entry \tbl, \virt, PGDIR_SHIFT, PTRS_PER_PGD, \tmp1, \tmp2 | |
6a3fd402 SP |
330 | #if SWAPPER_PGTABLE_LEVELS > 3 |
331 | create_table_entry \tbl, \virt, PUD_SHIFT, PTRS_PER_PUD, \tmp1, \tmp2 | |
332 | #endif | |
333 | #if SWAPPER_PGTABLE_LEVELS > 2 | |
87d1587b | 334 | create_table_entry \tbl, \virt, SWAPPER_TABLE_SHIFT, PTRS_PER_PTE, \tmp1, \tmp2 |
034edabe LA |
335 | #endif |
336 | .endm | |
337 | ||
338 | /* | |
339 | * Macro to populate block entries in the page table for the start..end | |
340 | * virtual range (inclusive). | |
341 | * | |
342 | * Preserves: tbl, flags | |
343 | * Corrupts: phys, start, end, pstate | |
344 | */ | |
345 | .macro create_block_map, tbl, flags, phys, start, end | |
87d1587b SP |
346 | lsr \phys, \phys, #SWAPPER_BLOCK_SHIFT |
347 | lsr \start, \start, #SWAPPER_BLOCK_SHIFT | |
034edabe | 348 | and \start, \start, #PTRS_PER_PTE - 1 // table index |
87d1587b SP |
349 | orr \phys, \flags, \phys, lsl #SWAPPER_BLOCK_SHIFT // table entry |
350 | lsr \end, \end, #SWAPPER_BLOCK_SHIFT | |
034edabe LA |
351 | and \end, \end, #PTRS_PER_PTE - 1 // table end index |
352 | 9999: str \phys, [\tbl, \start, lsl #3] // store the entry | |
353 | add \start, \start, #1 // next entry | |
87d1587b | 354 | add \phys, \phys, #SWAPPER_BLOCK_SIZE // next block |
034edabe LA |
355 | cmp \start, \end |
356 | b.ls 9999b | |
357 | .endm | |
358 | ||
359 | /* | |
360 | * Setup the initial page tables. We only setup the barest amount which is | |
361 | * required to get the kernel running. The following sections are required: | |
362 | * - identity mapping to enable the MMU (low address, TTBR0) | |
363 | * - first few MB of the kernel linear mapping to jump to once the MMU has | |
61bd93ce | 364 | * been enabled |
034edabe LA |
365 | */ |
366 | __create_page_tables: | |
f80fb3a3 | 367 | mov x28, lr |
034edabe LA |
368 | |
369 | /* | |
370 | * Invalidate the idmap and swapper page tables to avoid potential | |
371 | * dirty cache lines being evicted. | |
372 | */ | |
aea73abb | 373 | adrp x0, idmap_pg_dir |
4b65a5db | 374 | adrp x1, swapper_pg_dir + SWAPPER_DIR_SIZE + RESERVED_TTBR0_SIZE |
034edabe LA |
375 | bl __inval_cache_range |
376 | ||
377 | /* | |
378 | * Clear the idmap and swapper page tables. | |
379 | */ | |
aea73abb | 380 | adrp x0, idmap_pg_dir |
4b65a5db | 381 | adrp x6, swapper_pg_dir + SWAPPER_DIR_SIZE + RESERVED_TTBR0_SIZE |
034edabe LA |
382 | 1: stp xzr, xzr, [x0], #16 |
383 | stp xzr, xzr, [x0], #16 | |
384 | stp xzr, xzr, [x0], #16 | |
385 | stp xzr, xzr, [x0], #16 | |
386 | cmp x0, x6 | |
387 | b.lo 1b | |
388 | ||
b03cc885 | 389 | mov x7, SWAPPER_MM_MMUFLAGS |
034edabe LA |
390 | |
391 | /* | |
392 | * Create the identity mapping. | |
393 | */ | |
aea73abb | 394 | adrp x0, idmap_pg_dir |
5dfe9d7d | 395 | adrp x3, __idmap_text_start // __pa(__idmap_text_start) |
dd006da2 AB |
396 | |
397 | #ifndef CONFIG_ARM64_VA_BITS_48 | |
398 | #define EXTRA_SHIFT (PGDIR_SHIFT + PAGE_SHIFT - 3) | |
399 | #define EXTRA_PTRS (1 << (48 - EXTRA_SHIFT)) | |
400 | ||
401 | /* | |
402 | * If VA_BITS < 48, it may be too small to allow for an ID mapping to be | |
403 | * created that covers system RAM if that is located sufficiently high | |
404 | * in the physical address space. So for the ID map, use an extended | |
405 | * virtual range in that case, by configuring an additional translation | |
406 | * level. | |
407 | * First, we have to verify our assumption that the current value of | |
408 | * VA_BITS was chosen such that all translation levels are fully | |
409 | * utilised, and that lowering T0SZ will always result in an additional | |
410 | * translation level to be configured. | |
411 | */ | |
412 | #if VA_BITS != EXTRA_SHIFT | |
413 | #error "Mismatch between VA_BITS and page size/number of translation levels" | |
414 | #endif | |
415 | ||
416 | /* | |
417 | * Calculate the maximum allowed value for TCR_EL1.T0SZ so that the | |
5dfe9d7d | 418 | * entire ID map region can be mapped. As T0SZ == (64 - #bits used), |
dd006da2 | 419 | * this number conveniently equals the number of leading zeroes in |
5dfe9d7d | 420 | * the physical address of __idmap_text_end. |
dd006da2 | 421 | */ |
5dfe9d7d | 422 | adrp x5, __idmap_text_end |
dd006da2 AB |
423 | clz x5, x5 |
424 | cmp x5, TCR_T0SZ(VA_BITS) // default T0SZ small enough? | |
425 | b.ge 1f // .. then skip additional level | |
426 | ||
0c20856c MR |
427 | adr_l x6, idmap_t0sz |
428 | str x5, [x6] | |
429 | dmb sy | |
430 | dc ivac, x6 // Invalidate potentially stale cache line | |
dd006da2 AB |
431 | |
432 | create_table_entry x0, x3, EXTRA_SHIFT, EXTRA_PTRS, x5, x6 | |
433 | 1: | |
434 | #endif | |
435 | ||
034edabe | 436 | create_pgd_entry x0, x3, x5, x6 |
5dfe9d7d AB |
437 | mov x5, x3 // __pa(__idmap_text_start) |
438 | adr_l x6, __idmap_text_end // __pa(__idmap_text_end) | |
034edabe LA |
439 | create_block_map x0, x7, x3, x5, x6 |
440 | ||
441 | /* | |
442 | * Map the kernel image (starting with PHYS_OFFSET). | |
443 | */ | |
aea73abb | 444 | adrp x0, swapper_pg_dir |
18b9c0d6 | 445 | mov_q x5, KIMAGE_VADDR + TEXT_OFFSET // compile time __va(_text) |
f80fb3a3 | 446 | add x5, x5, x23 // add KASLR displacement |
034edabe | 447 | create_pgd_entry x0, x5, x3, x6 |
18b9c0d6 AB |
448 | adrp x6, _end // runtime __pa(_end) |
449 | adrp x3, _text // runtime __pa(_text) | |
450 | sub x6, x6, x3 // _end - _text | |
451 | add x6, x6, x5 // runtime __va(_end) | |
034edabe LA |
452 | create_block_map x0, x7, x3, x5, x6 |
453 | ||
034edabe LA |
454 | /* |
455 | * Since the page tables have been populated with non-cacheable | |
456 | * accesses (MMU disabled), invalidate the idmap and swapper page | |
457 | * tables again to remove any speculatively loaded cache lines. | |
458 | */ | |
aea73abb | 459 | adrp x0, idmap_pg_dir |
4b65a5db | 460 | adrp x1, swapper_pg_dir + SWAPPER_DIR_SIZE + RESERVED_TTBR0_SIZE |
91d57155 | 461 | dmb sy |
034edabe LA |
462 | bl __inval_cache_range |
463 | ||
f80fb3a3 | 464 | ret x28 |
034edabe LA |
465 | ENDPROC(__create_page_tables) |
466 | .ltorg | |
467 | ||
034edabe | 468 | /* |
a871d354 | 469 | * The following fragment of code is executed with the MMU enabled. |
b929fe32 AB |
470 | * |
471 | * x0 = __PHYS_OFFSET | |
034edabe | 472 | */ |
0cd3defe | 473 | __primary_switched: |
60699ba1 AB |
474 | adrp x4, init_thread_union |
475 | add sp, x4, #THREAD_SIZE | |
c02433dd MR |
476 | adr_l x5, init_task |
477 | msr sp_el0, x5 // Save thread_info | |
60699ba1 | 478 | |
2bf31a4a AB |
479 | adr_l x8, vectors // load VBAR_EL1 with virtual |
480 | msr vbar_el1, x8 // vector table address | |
481 | isb | |
482 | ||
60699ba1 AB |
483 | stp xzr, x30, [sp, #-16]! |
484 | mov x29, sp | |
485 | ||
b929fe32 AB |
486 | str_l x21, __fdt_pointer, x5 // Save FDT pointer |
487 | ||
488 | ldr_l x4, kimage_vaddr // Save the offset between | |
489 | sub x4, x4, x0 // the kernel virtual and | |
490 | str_l x4, kimage_voffset, x5 // physical mappings | |
491 | ||
2a803c4d MR |
492 | // Clear BSS |
493 | adr_l x0, __bss_start | |
494 | mov x1, xzr | |
495 | adr_l x2, __bss_stop | |
496 | sub x2, x2, x0 | |
497 | bl __pi_memset | |
5227cfa7 | 498 | dsb ishst // Make zero page visible to PTW |
2a803c4d | 499 | |
39d114dd AR |
500 | #ifdef CONFIG_KASAN |
501 | bl kasan_early_init | |
f80fb3a3 AB |
502 | #endif |
503 | #ifdef CONFIG_RANDOMIZE_BASE | |
08cdac61 AB |
504 | tst x23, ~(MIN_KIMG_ALIGN - 1) // already running randomized? |
505 | b.ne 0f | |
f80fb3a3 | 506 | mov x0, x21 // pass FDT address in x0 |
08cdac61 | 507 | mov x1, x23 // pass modulo offset in x1 |
f80fb3a3 AB |
508 | bl kaslr_early_init // parse FDT for KASLR options |
509 | cbz x0, 0f // KASLR disabled? just proceed | |
08cdac61 | 510 | orr x23, x23, x0 // record KASLR offset |
60699ba1 AB |
511 | ldp x29, x30, [sp], #16 // we must enable KASLR, return |
512 | ret // to __primary_switch() | |
f80fb3a3 | 513 | 0: |
39d114dd | 514 | #endif |
034edabe | 515 | b start_kernel |
0cd3defe | 516 | ENDPROC(__primary_switched) |
034edabe LA |
517 | |
518 | /* | |
519 | * end early head section, begin head code that is also used for | |
520 | * hotplug and needs to have the same protections as the text region | |
521 | */ | |
b6113038 | 522 | .section ".idmap.text","ax" |
f80fb3a3 AB |
523 | |
524 | ENTRY(kimage_vaddr) | |
525 | .quad _text - TEXT_OFFSET | |
526 | ||
9703d9d7 CM |
527 | /* |
528 | * If we're fortunate enough to boot at EL2, ensure that the world is | |
529 | * sane before dropping to EL1. | |
828e9834 | 530 | * |
510224c2 | 531 | * Returns either BOOT_CPU_MODE_EL1 or BOOT_CPU_MODE_EL2 in w0 if |
828e9834 | 532 | * booted in EL1 or EL2 respectively. |
9703d9d7 CM |
533 | */ |
534 | ENTRY(el2_setup) | |
535 | mrs x0, CurrentEL | |
974c8e45 | 536 | cmp x0, #CurrentEL_EL2 |
3ad47d05 MR |
537 | b.eq 1f |
538 | mrs x0, sctlr_el1 | |
9cf71728 ML |
539 | CPU_BE( orr x0, x0, #(3 << 24) ) // Set the EE and E0E bits for EL1 |
540 | CPU_LE( bic x0, x0, #(3 << 24) ) // Clear the EE and E0E bits for EL1 | |
541 | msr sctlr_el1, x0 | |
23c8a500 | 542 | mov w0, #BOOT_CPU_MODE_EL1 // This cpu booted in EL1 |
9cf71728 | 543 | isb |
9703d9d7 CM |
544 | ret |
545 | ||
3ad47d05 MR |
546 | 1: mrs x0, sctlr_el2 |
547 | CPU_BE( orr x0, x0, #(1 << 25) ) // Set the EE bit for EL2 | |
548 | CPU_LE( bic x0, x0, #(1 << 25) ) // Clear the EE bit for EL2 | |
549 | msr sctlr_el2, x0 | |
550 | ||
1f364c8c MZ |
551 | #ifdef CONFIG_ARM64_VHE |
552 | /* | |
553 | * Check for VHE being present. For the rest of the EL2 setup, | |
554 | * x2 being non-zero indicates that we do have VHE, and that the | |
555 | * kernel is intended to run at EL2. | |
556 | */ | |
557 | mrs x2, id_aa64mmfr1_el1 | |
558 | ubfx x2, x2, #8, #4 | |
559 | #else | |
560 | mov x2, xzr | |
561 | #endif | |
562 | ||
9703d9d7 | 563 | /* Hyp configuration. */ |
1f364c8c MZ |
564 | mov x0, #HCR_RW // 64-bit EL1 |
565 | cbz x2, set_hcr | |
566 | orr x0, x0, #HCR_TGE // Enable Host Extensions | |
567 | orr x0, x0, #HCR_E2H | |
568 | set_hcr: | |
9703d9d7 | 569 | msr hcr_el2, x0 |
1f364c8c | 570 | isb |
9703d9d7 | 571 | |
1650ac49 J |
572 | /* |
573 | * Allow Non-secure EL1 and EL0 to access physical timer and counter. | |
574 | * This is not necessary for VHE, since the host kernel runs in EL2, | |
575 | * and EL0 accesses are configured in the later stage of boot process. | |
576 | * Note that when HCR_EL2.E2H == 1, CNTHCTL_EL2 has the same bit layout | |
577 | * as CNTKCTL_EL1, and CNTKCTL_EL1 accessing instructions are redefined | |
578 | * to access CNTHCTL_EL2. This allows the kernel designed to run at EL1 | |
579 | * to transparently mess with the EL0 bits via CNTKCTL_EL1 access in | |
580 | * EL2. | |
581 | */ | |
582 | cbnz x2, 1f | |
9703d9d7 CM |
583 | mrs x0, cnthctl_el2 |
584 | orr x0, x0, #3 // Enable EL1 physical timers | |
585 | msr cnthctl_el2, x0 | |
1650ac49 | 586 | 1: |
1f75ff0a | 587 | msr cntvoff_el2, xzr // Clear virtual offset |
9703d9d7 | 588 | |
021f6537 MZ |
589 | #ifdef CONFIG_ARM_GIC_V3 |
590 | /* GICv3 system register access */ | |
591 | mrs x0, id_aa64pfr0_el1 | |
592 | ubfx x0, x0, #24, #4 | |
593 | cmp x0, #1 | |
594 | b.ne 3f | |
595 | ||
72c58395 | 596 | mrs_s x0, ICC_SRE_EL2 |
021f6537 MZ |
597 | orr x0, x0, #ICC_SRE_EL2_SRE // Set ICC_SRE_EL2.SRE==1 |
598 | orr x0, x0, #ICC_SRE_EL2_ENABLE // Set ICC_SRE_EL2.Enable==1 | |
72c58395 | 599 | msr_s ICC_SRE_EL2, x0 |
021f6537 | 600 | isb // Make sure SRE is now set |
d271976d MZ |
601 | mrs_s x0, ICC_SRE_EL2 // Read SRE back, |
602 | tbz x0, #0, 3f // and check that it sticks | |
72c58395 | 603 | msr_s ICH_HCR_EL2, xzr // Reset ICC_HCR_EL2 to defaults |
021f6537 MZ |
604 | |
605 | 3: | |
606 | #endif | |
607 | ||
9703d9d7 CM |
608 | /* Populate ID registers. */ |
609 | mrs x0, midr_el1 | |
610 | mrs x1, mpidr_el1 | |
611 | msr vpidr_el2, x0 | |
612 | msr vmpidr_el2, x1 | |
613 | ||
9703d9d7 CM |
614 | #ifdef CONFIG_COMPAT |
615 | msr hstr_el2, xzr // Disable CP15 traps to EL2 | |
616 | #endif | |
617 | ||
d10bcd47 | 618 | /* EL2 debug */ |
2bf47e19 WD |
619 | mrs x1, id_aa64dfr0_el1 // Check ID_AA64DFR0_EL1 PMUVer |
620 | sbfx x0, x1, #8, #4 | |
f436b2ac LP |
621 | cmp x0, #1 |
622 | b.lt 4f // Skip if no PMU present | |
d10bcd47 WD |
623 | mrs x0, pmcr_el0 // Disable debug access traps |
624 | ubfx x0, x0, #11, #5 // to EL2 and allow access to | |
f436b2ac | 625 | 4: |
2bf47e19 WD |
626 | csel x3, xzr, x0, lt // all PMU counters from EL1 |
627 | ||
628 | /* Statistical profiling */ | |
629 | ubfx x0, x1, #32, #4 // Check ID_AA64DFR0_EL1 PMSVer | |
630 | cbz x0, 6f // Skip if SPE not present | |
631 | cbnz x2, 5f // VHE? | |
632 | mov x1, #(MDCR_EL2_E2PB_MASK << MDCR_EL2_E2PB_SHIFT) | |
633 | orr x3, x3, x1 // If we don't have VHE, then | |
634 | b 6f // use EL1&0 translation. | |
635 | 5: // For VHE, use EL2 translation | |
636 | orr x3, x3, #MDCR_EL2_TPMS // and disable access from EL1 | |
637 | 6: | |
638 | msr mdcr_el2, x3 // Configure debug traps | |
d10bcd47 | 639 | |
7dbfbe5b MZ |
640 | /* Stage-2 translation */ |
641 | msr vttbr_el2, xzr | |
642 | ||
1f364c8c MZ |
643 | cbz x2, install_el2_stub |
644 | ||
23c8a500 | 645 | mov w0, #BOOT_CPU_MODE_EL2 // This CPU booted in EL2 |
1f364c8c MZ |
646 | isb |
647 | ret | |
648 | ||
649 | install_el2_stub: | |
d61c97a7 MR |
650 | /* |
651 | * When VHE is not in use, early init of EL2 and EL1 needs to be | |
652 | * done here. | |
653 | * When VHE _is_ in use, EL1 will not be used in the host and | |
654 | * requires no configuration, and all non-hyp-specific EL2 setup | |
655 | * will be done via the _EL1 system register aliases in __cpu_setup. | |
656 | */ | |
657 | /* sctlr_el1 */ | |
658 | mov x0, #0x0800 // Set/clear RES{1,0} bits | |
659 | CPU_BE( movk x0, #0x33d0, lsl #16 ) // Set EE and E0E on BE systems | |
660 | CPU_LE( movk x0, #0x30d0, lsl #16 ) // Clear EE and E0E on LE systems | |
661 | msr sctlr_el1, x0 | |
662 | ||
663 | /* Coprocessor traps. */ | |
664 | mov x0, #0x33ff | |
665 | msr cptr_el2, x0 // Disable copro. traps to EL2 | |
666 | ||
712c6ff4 | 667 | /* Hypervisor stub */ |
9bb00360 | 668 | adr_l x0, __hyp_stub_vectors |
712c6ff4 MZ |
669 | msr vbar_el2, x0 |
670 | ||
9703d9d7 CM |
671 | /* spsr */ |
672 | mov x0, #(PSR_F_BIT | PSR_I_BIT | PSR_A_BIT | PSR_D_BIT |\ | |
673 | PSR_MODE_EL1h) | |
674 | msr spsr_el2, x0 | |
675 | msr elr_el2, lr | |
23c8a500 | 676 | mov w0, #BOOT_CPU_MODE_EL2 // This CPU booted in EL2 |
9703d9d7 CM |
677 | eret |
678 | ENDPROC(el2_setup) | |
679 | ||
828e9834 ML |
680 | /* |
681 | * Sets the __boot_cpu_mode flag depending on the CPU boot mode passed | |
510224c2 | 682 | * in w0. See arch/arm64/include/asm/virt.h for more info. |
828e9834 | 683 | */ |
190c056f | 684 | set_cpu_boot_mode_flag: |
6f4d57fa | 685 | adr_l x1, __boot_cpu_mode |
23c8a500 | 686 | cmp w0, #BOOT_CPU_MODE_EL2 |
828e9834 ML |
687 | b.ne 1f |
688 | add x1, x1, #4 | |
23c8a500 | 689 | 1: str w0, [x1] // This CPU has booted in EL1 |
d0488597 WD |
690 | dmb sy |
691 | dc ivac, x1 // Invalidate potentially stale cache line | |
828e9834 ML |
692 | ret |
693 | ENDPROC(set_cpu_boot_mode_flag) | |
694 | ||
b6113038 JM |
695 | /* |
696 | * These values are written with the MMU off, but read with the MMU on. | |
697 | * Writers will invalidate the corresponding address, discarding up to a | |
698 | * 'Cache Writeback Granule' (CWG) worth of data. The linker script ensures | |
699 | * sufficient alignment that the CWG doesn't overlap another section. | |
700 | */ | |
701 | .pushsection ".mmuoff.data.write", "aw" | |
f35a9205 MZ |
702 | /* |
703 | * We need to find out the CPU boot mode long after boot, so we need to | |
704 | * store it in a writable variable. | |
705 | * | |
706 | * This is not in .bss, because we set it sufficiently early that the boot-time | |
707 | * zeroing of .bss would clobber it. | |
708 | */ | |
947bb758 | 709 | ENTRY(__boot_cpu_mode) |
f35a9205 | 710 | .long BOOT_CPU_MODE_EL2 |
424a3838 | 711 | .long BOOT_CPU_MODE_EL1 |
b6113038 JM |
712 | /* |
713 | * The booting CPU updates the failed status @__early_cpu_boot_status, | |
714 | * with MMU turned off. | |
715 | */ | |
716 | ENTRY(__early_cpu_boot_status) | |
717 | .long 0 | |
718 | ||
f35a9205 MZ |
719 | .popsection |
720 | ||
9703d9d7 CM |
721 | /* |
722 | * This provides a "holding pen" for platforms to hold all secondary | |
723 | * cores are held until we're ready for them to initialise. | |
724 | */ | |
725 | ENTRY(secondary_holding_pen) | |
23c8a500 | 726 | bl el2_setup // Drop to EL1, w0=cpu_boot_mode |
828e9834 | 727 | bl set_cpu_boot_mode_flag |
9703d9d7 | 728 | mrs x0, mpidr_el1 |
b03cc885 | 729 | mov_q x1, MPIDR_HWID_BITMASK |
0359b0e2 | 730 | and x0, x0, x1 |
b1c98297 | 731 | adr_l x3, secondary_holding_pen_release |
9703d9d7 CM |
732 | pen: ldr x4, [x3] |
733 | cmp x4, x0 | |
734 | b.eq secondary_startup | |
735 | wfe | |
736 | b pen | |
737 | ENDPROC(secondary_holding_pen) | |
652af899 MR |
738 | |
739 | /* | |
740 | * Secondary entry point that jumps straight into the kernel. Only to | |
741 | * be used where CPUs are brought online dynamically by the kernel. | |
742 | */ | |
743 | ENTRY(secondary_entry) | |
652af899 | 744 | bl el2_setup // Drop to EL1 |
85cc00ea | 745 | bl set_cpu_boot_mode_flag |
652af899 MR |
746 | b secondary_startup |
747 | ENDPROC(secondary_entry) | |
9703d9d7 | 748 | |
190c056f | 749 | secondary_startup: |
9703d9d7 CM |
750 | /* |
751 | * Common entry point for secondary CPUs. | |
752 | */ | |
a591ede4 | 753 | bl __cpu_setup // initialise processor |
9dcf7914 AB |
754 | bl __enable_mmu |
755 | ldr x8, =__secondary_switched | |
756 | br x8 | |
9703d9d7 CM |
757 | ENDPROC(secondary_startup) |
758 | ||
190c056f | 759 | __secondary_switched: |
2bf31a4a AB |
760 | adr_l x5, vectors |
761 | msr vbar_el1, x5 | |
762 | isb | |
763 | ||
bb905274 | 764 | adr_l x0, secondary_data |
c02433dd MR |
765 | ldr x1, [x0, #CPU_BOOT_STACK] // get secondary_data.stack |
766 | mov sp, x1 | |
767 | ldr x2, [x0, #CPU_BOOT_TASK] | |
768 | msr sp_el0, x2 | |
9703d9d7 CM |
769 | mov x29, #0 |
770 | b secondary_start_kernel | |
771 | ENDPROC(__secondary_switched) | |
9703d9d7 | 772 | |
bb905274 SP |
773 | /* |
774 | * The booting CPU updates the failed status @__early_cpu_boot_status, | |
775 | * with MMU turned off. | |
776 | * | |
777 | * update_early_cpu_boot_status tmp, status | |
778 | * - Corrupts tmp1, tmp2 | |
779 | * - Writes 'status' to __early_cpu_boot_status and makes sure | |
780 | * it is committed to memory. | |
781 | */ | |
782 | ||
783 | .macro update_early_cpu_boot_status status, tmp1, tmp2 | |
784 | mov \tmp2, #\status | |
adb49070 AB |
785 | adr_l \tmp1, __early_cpu_boot_status |
786 | str \tmp2, [\tmp1] | |
bb905274 SP |
787 | dmb sy |
788 | dc ivac, \tmp1 // Invalidate potentially stale cache line | |
789 | .endm | |
790 | ||
9703d9d7 | 791 | /* |
8b0a9575 | 792 | * Enable the MMU. |
9703d9d7 | 793 | * |
8b0a9575 | 794 | * x0 = SCTLR_EL1 value for turning on the MMU. |
8b0a9575 | 795 | * |
9dcf7914 AB |
796 | * Returns to the caller via x30/lr. This requires the caller to be covered |
797 | * by the .idmap.text section. | |
4bf8b96e SP |
798 | * |
799 | * Checks if the selected granule size is supported by the CPU. | |
800 | * If it isn't, park the CPU | |
9703d9d7 | 801 | */ |
cabe1c81 | 802 | ENTRY(__enable_mmu) |
4bf8b96e SP |
803 | mrs x1, ID_AA64MMFR0_EL1 |
804 | ubfx x2, x1, #ID_AA64MMFR0_TGRAN_SHIFT, 4 | |
805 | cmp x2, #ID_AA64MMFR0_TGRAN_SUPPORTED | |
806 | b.ne __no_granule_support | |
bb905274 | 807 | update_early_cpu_boot_status 0, x1, x2 |
aea73abb AB |
808 | adrp x1, idmap_pg_dir |
809 | adrp x2, swapper_pg_dir | |
810 | msr ttbr0_el1, x1 // load TTBR0 | |
811 | msr ttbr1_el1, x2 // load TTBR1 | |
9703d9d7 | 812 | isb |
9703d9d7 CM |
813 | msr sctlr_el1, x0 |
814 | isb | |
8ec41987 WD |
815 | /* |
816 | * Invalidate the local I-cache so that any instructions fetched | |
817 | * speculatively from the PoC are discarded, since they may have | |
818 | * been dynamically patched at the PoU. | |
819 | */ | |
820 | ic iallu | |
821 | dsb nsh | |
822 | isb | |
9dcf7914 | 823 | ret |
8b0a9575 | 824 | ENDPROC(__enable_mmu) |
4bf8b96e SP |
825 | |
826 | __no_granule_support: | |
bb905274 SP |
827 | /* Indicate that this CPU can't boot and is stuck in the kernel */ |
828 | update_early_cpu_boot_status CPU_STUCK_IN_KERNEL, x1, x2 | |
829 | 1: | |
4bf8b96e | 830 | wfe |
bb905274 | 831 | wfi |
3c5e9f23 | 832 | b 1b |
4bf8b96e | 833 | ENDPROC(__no_granule_support) |
e5ebeec8 | 834 | |
0cd3defe | 835 | #ifdef CONFIG_RELOCATABLE |
3c5e9f23 | 836 | __relocate_kernel: |
0cd3defe AB |
837 | /* |
838 | * Iterate over each entry in the relocation table, and apply the | |
839 | * relocations in place. | |
840 | */ | |
0cd3defe AB |
841 | ldr w9, =__rela_offset // offset to reloc table |
842 | ldr w10, =__rela_size // size of reloc table | |
843 | ||
b03cc885 | 844 | mov_q x11, KIMAGE_VADDR // default virtual offset |
0cd3defe | 845 | add x11, x11, x23 // actual virtual offset |
0cd3defe AB |
846 | add x9, x9, x11 // __va(.rela) |
847 | add x10, x9, x10 // __va(.rela) + sizeof(.rela) | |
848 | ||
849 | 0: cmp x9, x10 | |
08cc55b2 | 850 | b.hs 1f |
0cd3defe AB |
851 | ldp x11, x12, [x9], #24 |
852 | ldr x13, [x9, #-8] | |
853 | cmp w12, #R_AARCH64_RELATIVE | |
08cc55b2 | 854 | b.ne 0b |
0cd3defe AB |
855 | add x13, x13, x23 // relocate |
856 | str x13, [x11, x23] | |
857 | b 0b | |
3c5e9f23 AB |
858 | 1: ret |
859 | ENDPROC(__relocate_kernel) | |
860 | #endif | |
0cd3defe | 861 | |
3c5e9f23 AB |
862 | __primary_switch: |
863 | #ifdef CONFIG_RANDOMIZE_BASE | |
864 | mov x19, x0 // preserve new SCTLR_EL1 value | |
865 | mrs x20, sctlr_el1 // preserve old SCTLR_EL1 value | |
866 | #endif | |
867 | ||
9dcf7914 | 868 | bl __enable_mmu |
3c5e9f23 AB |
869 | #ifdef CONFIG_RELOCATABLE |
870 | bl __relocate_kernel | |
871 | #ifdef CONFIG_RANDOMIZE_BASE | |
872 | ldr x8, =__primary_switched | |
b929fe32 | 873 | adrp x0, __PHYS_OFFSET |
3c5e9f23 AB |
874 | blr x8 |
875 | ||
876 | /* | |
877 | * If we return here, we have a KASLR displacement in x23 which we need | |
878 | * to take into account by discarding the current kernel mapping and | |
879 | * creating a new one. | |
880 | */ | |
881 | msr sctlr_el1, x20 // disable the MMU | |
882 | isb | |
883 | bl __create_page_tables // recreate kernel mapping | |
884 | ||
885 | tlbi vmalle1 // Remove any stale TLB entries | |
886 | dsb nsh | |
887 | ||
888 | msr sctlr_el1, x19 // re-enable the MMU | |
889 | isb | |
890 | ic iallu // flush instructions fetched | |
891 | dsb nsh // via old mapping | |
892 | isb | |
893 | ||
894 | bl __relocate_kernel | |
895 | #endif | |
0cd3defe AB |
896 | #endif |
897 | ldr x8, =__primary_switched | |
b929fe32 | 898 | adrp x0, __PHYS_OFFSET |
0cd3defe AB |
899 | br x8 |
900 | ENDPROC(__primary_switch) |