333 lines
		
	
	
		
			9.5 KiB
		
	
	
	
		
			C
		
	
	
	
			
		
		
	
	
			333 lines
		
	
	
		
			9.5 KiB
		
	
	
	
		
			C
		
	
	
	
| /*
 | |
|  * Copyright (C) 2016 The Android Open Source Project
 | |
|  *
 | |
|  * Permission is hereby granted, free of charge, to any person
 | |
|  * obtaining a copy of this software and associated documentation
 | |
|  * files (the "Software"), to deal in the Software without
 | |
|  * restriction, including without limitation the rights to use, copy,
 | |
|  * modify, merge, publish, distribute, sublicense, and/or sell copies
 | |
|  * of the Software, and to permit persons to whom the Software is
 | |
|  * furnished to do so, subject to the following conditions:
 | |
|  *
 | |
|  * The above copyright notice and this permission notice shall be
 | |
|  * included in all copies or substantial portions of the Software.
 | |
|  *
 | |
|  * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
 | |
|  * EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
 | |
|  * MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
 | |
|  * NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS
 | |
|  * BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN
 | |
|  * ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
 | |
|  * CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 | |
|  * SOFTWARE.
 | |
|  */
 | |
| 
 | |
| #include <trusty/rpmb.h>
 | |
| #include <trusty/trusty_ipc.h>
 | |
| #include <trusty/util.h>
 | |
| #include <interface/storage/storage.h>
 | |
| 
 | |
| #define LOCAL_LOG 0
 | |
| 
 | |
| static bool initialized;
 | |
| /* Address of rpmb device */
 | |
| static void *proxy_rpmb;
 | |
| struct trusty_ipc_chan proxy_chan;
 | |
| 
 | |
| struct storage_msg req_msg;
 | |
| static uint8_t req_buf[4096];
 | |
| static uint8_t read_buf[4096];
 | |
| 
 | |
| /*
 | |
|  * Read RPMB request from storage service. Writes message to @msg
 | |
|  * and @req.
 | |
|  *
 | |
|  * @chan:    proxy ipc channel
 | |
|  * @msg:     address of storage message header
 | |
|  * @req:     address of storage message request
 | |
|  * @req_len: length of req in bytes
 | |
|  */
 | |
| static int proxy_read_request(struct trusty_ipc_chan *chan,
 | |
|                               struct storage_msg *msg, void *req,
 | |
|                               size_t req_len)
 | |
| {
 | |
|     int rc;
 | |
| 
 | |
|     struct trusty_ipc_iovec req_iovs[2] = {
 | |
|         { .base = msg, .len = sizeof(*msg) },
 | |
|         { .base = req, .len = req_len },
 | |
|     };
 | |
|     rc = trusty_ipc_recv(chan, req_iovs, 2, false);
 | |
|     if (rc < 0) {
 | |
|         /* recv message failed */
 | |
|         trusty_error("%s: failed (%d) to recv request\n", __func__, rc);
 | |
|         return rc;
 | |
|     }
 | |
| 
 | |
|     if ((size_t)rc < sizeof(*msg)) {
 | |
|         /* malformed message */
 | |
|         trusty_error("%s: malformed request (%zu)\n", __func__, (size_t)rc);
 | |
|         return TRUSTY_ERR_GENERIC;
 | |
|     }
 | |
| 
 | |
|     return rc - sizeof(*msg); /* return payload size */
 | |
| }
 | |
| 
 | |
| /*
 | |
|  * Send RPMB response to storage service
 | |
|  *
 | |
|  * @chan:     proxy ipc channel
 | |
|  * @msg:      address of storage message header
 | |
|  * @resp:     address of storage message response
 | |
|  * @resp_len: length of resp in bytes
 | |
|  */
 | |
| static int proxy_send_response(struct trusty_ipc_chan *chan,
 | |
|                                struct storage_msg *msg, void *resp,
 | |
|                                size_t resp_len)
 | |
| {
 | |
|     struct trusty_ipc_iovec resp_iovs[2] = {
 | |
|         { .base = msg, .len = sizeof(*msg) },
 | |
|         { .base = resp, .len = resp_len }
 | |
|     };
 | |
| 
 | |
|     msg->cmd |= STORAGE_RESP_BIT;
 | |
|     return trusty_ipc_send(chan, resp_iovs, resp ? 2 : 1, false);
 | |
| }
 | |
| 
 | |
| /*
 | |
|  * Executes the RPMB request at @r, sends response to storage service.
 | |
|  *
 | |
|  * @chan:    proxy ipc channel
 | |
|  * @msg:     address of storage message header
 | |
|  * @r:       address of storage message request
 | |
|  * @req_len: length of resp in bytes
 | |
|  */
 | |
| static int proxy_handle_rpmb(struct trusty_ipc_chan *chan,
 | |
|                              struct storage_msg *msg, const void *r,
 | |
|                              size_t req_len)
 | |
| {
 | |
|     int rc;
 | |
|     size_t exp_len;
 | |
|     const void *write_data = NULL;
 | |
|     const void *rel_write_data = NULL;
 | |
|     const struct storage_rpmb_send_req *req = r;
 | |
| 
 | |
|     if (req_len < sizeof(req)) {
 | |
|         msg->result = STORAGE_ERR_NOT_VALID;
 | |
|         goto err_response;
 | |
|     }
 | |
| 
 | |
|     exp_len = sizeof(*req) + req->reliable_write_size + req->write_size;
 | |
|     if (req_len != exp_len) {
 | |
|         trusty_error(
 | |
|             "%s: malformed rpmb request: invalid length (%zu != %zu)\n",
 | |
|             __func__, req_len, exp_len);
 | |
|         msg->result = STORAGE_ERR_NOT_VALID;
 | |
|         goto err_response;
 | |
|     }
 | |
| 
 | |
|     if (req->reliable_write_size) {
 | |
|         if ((req->reliable_write_size % MMC_BLOCK_SIZE) != 0) {
 | |
|             trusty_error("%s: invalid reliable write size %u\n", __func__,
 | |
|                          req->reliable_write_size);
 | |
|             msg->result = STORAGE_ERR_NOT_VALID;
 | |
|             goto err_response;
 | |
|         }
 | |
|         rel_write_data = req->payload;
 | |
|     }
 | |
| 
 | |
|     if (req->write_size) {
 | |
|         if ((req->write_size % MMC_BLOCK_SIZE) != 0) {
 | |
|             trusty_error("%: invalid write size %u\n", __func__,
 | |
|                          req->write_size);
 | |
|             msg->result = STORAGE_ERR_NOT_VALID;
 | |
|             goto err_response;
 | |
|         }
 | |
|         write_data = req->payload + req->reliable_write_size;
 | |
|     }
 | |
| 
 | |
|     if (req->read_size) {
 | |
|         if (req->read_size % MMC_BLOCK_SIZE != 0 ||
 | |
|             req->read_size > sizeof(read_buf)) {
 | |
|             trusty_error("%s: invalid read size %u\n", __func__,
 | |
|                          req->read_size);
 | |
|             msg->result = STORAGE_ERR_NOT_VALID;
 | |
|             goto err_response;
 | |
|         }
 | |
|     }
 | |
| 
 | |
|     /* execute rpmb command */
 | |
|     rc = rpmb_storage_send(proxy_rpmb,
 | |
|                            rel_write_data, req->reliable_write_size,
 | |
|                            write_data, req->write_size,
 | |
|                            read_buf, req->read_size);
 | |
|     if (rc) {
 | |
|         trusty_error("%s: rpmb_storage_send failed: %d\n", __func__, rc);
 | |
|         msg->result = STORAGE_ERR_GENERIC;
 | |
|         goto err_response;
 | |
|     }
 | |
| 
 | |
|     if (msg->flags & STORAGE_MSG_FLAG_POST_COMMIT) {
 | |
|         /*
 | |
|          * Nothing todo for post msg commit request as MMC_IOC_MULTI_CMD
 | |
|          * is fully synchronous in this implementation.
 | |
|          */
 | |
|     }
 | |
| 
 | |
|     msg->result = STORAGE_NO_ERROR;
 | |
|     return proxy_send_response(chan, msg, read_buf, req->read_size);
 | |
| 
 | |
| err_response:
 | |
|     return proxy_send_response(chan, msg, NULL, 0);
 | |
| }
 | |
| 
 | |
| /*
 | |
|  * Handles storage request.
 | |
|  *
 | |
|  * @chan:    proxy ipc channel
 | |
|  * @msg:     address of storage message header
 | |
|  * @req:     address of storage message request
 | |
|  * @req_len: length of resp in bytes
 | |
|  */
 | |
| static int proxy_handle_req(struct trusty_ipc_chan *chan,
 | |
|                             struct storage_msg *msg, const void *req,
 | |
|                             size_t req_len)
 | |
| {
 | |
|     int rc;
 | |
| 
 | |
|     if (msg->flags & STORAGE_MSG_FLAG_PRE_COMMIT) {
 | |
|         /* nothing to do */
 | |
|     }
 | |
| 
 | |
|     switch (msg->cmd) {
 | |
|     case STORAGE_RPMB_SEND:
 | |
|         rc = proxy_handle_rpmb(chan, msg, req, req_len);
 | |
|         break;
 | |
| 
 | |
|     case STORAGE_FILE_DELETE:
 | |
|     case STORAGE_FILE_OPEN:
 | |
|     case STORAGE_FILE_CLOSE:
 | |
|     case STORAGE_FILE_WRITE:
 | |
|     case STORAGE_FILE_READ:
 | |
|     case STORAGE_FILE_GET_SIZE:
 | |
|     case STORAGE_FILE_SET_SIZE:
 | |
|         /* Bulk filesystem is not supported */
 | |
|         msg->result = STORAGE_ERR_UNIMPLEMENTED;
 | |
|         rc = proxy_send_response(chan, msg, NULL, 0);
 | |
|         break;
 | |
| 
 | |
|     default:
 | |
|         msg->result = STORAGE_ERR_UNIMPLEMENTED;
 | |
|         rc = proxy_send_response(chan, msg, NULL, 0);
 | |
|     }
 | |
| 
 | |
|     return rc;
 | |
| }
 | |
| 
 | |
| /*
 | |
|  * Invalidates @chan on hangup event
 | |
|  *
 | |
|  * @chan:    proxy ipc channel
 | |
|  */
 | |
| static int proxy_on_disconnect(struct trusty_ipc_chan *chan)
 | |
| {
 | |
|     trusty_assert(chan);
 | |
| 
 | |
|     trusty_debug("%s: closed by peer\n", __func__);
 | |
|     chan->handle = INVALID_IPC_HANDLE;
 | |
|     return TRUSTY_EVENT_HANDLED;
 | |
| }
 | |
| 
 | |
| /*
 | |
|  * Handles received storage message on message event
 | |
|  *
 | |
|  * @chan:    proxy ipc channel
 | |
|  */
 | |
| static int proxy_on_message(struct trusty_ipc_chan *chan)
 | |
| {
 | |
|     int rc;
 | |
| 
 | |
|     trusty_assert(chan);
 | |
| 
 | |
|     /* read request */
 | |
|     rc = proxy_read_request(chan, &req_msg, req_buf, sizeof(req_buf));
 | |
|     if (rc < 0) {
 | |
|         trusty_error("%s: failed (%d) to read request\n", __func__, rc);
 | |
|         trusty_ipc_close(chan);
 | |
|         return rc;
 | |
|     }
 | |
| 
 | |
|     /* handle it and send reply */
 | |
|     rc = proxy_handle_req(chan, &req_msg, req_buf, rc);
 | |
|     if (rc < 0) {
 | |
|         trusty_error("%s: failed (%d) to handle request\n", __func__, rc);
 | |
|         trusty_ipc_close(chan);
 | |
|         return rc;
 | |
|     }
 | |
| 
 | |
|     return TRUSTY_EVENT_HANDLED;
 | |
| }
 | |
| 
 | |
| static struct trusty_ipc_ops proxy_ops = {
 | |
|     .on_message = proxy_on_message,
 | |
|     .on_disconnect = proxy_on_disconnect,
 | |
| };
 | |
| 
 | |
| /*
 | |
|  * Initialize RPMB storage proxy
 | |
|  */
 | |
| int rpmb_storage_proxy_init(struct trusty_ipc_dev *dev, void *rpmb_dev)
 | |
| {
 | |
|     int rc;
 | |
| 
 | |
|     trusty_assert(dev);
 | |
|     trusty_assert(!initialized);
 | |
| 
 | |
|     /* attach rpmb device  */
 | |
|     proxy_rpmb = rpmb_dev;
 | |
| 
 | |
|     /* init ipc channel */
 | |
|     trusty_ipc_chan_init(&proxy_chan, dev);
 | |
| 
 | |
|     /* connect to proxy service and wait for connect to complete */
 | |
|     rc = trusty_ipc_connect(&proxy_chan, STORAGE_DISK_PROXY_PORT, true);
 | |
|     if (rc < 0) {
 | |
|         trusty_error("%s: failed (%d) to connect to '%s'\n", __func__, rc,
 | |
|                      STORAGE_DISK_PROXY_PORT);
 | |
|         return rc;
 | |
|     }
 | |
| 
 | |
|     /* override default ops */
 | |
|     proxy_chan.ops = &proxy_ops;
 | |
| 
 | |
|     do {
 | |
|         /* Check for RPMB events */
 | |
|         rc = trusty_ipc_poll_for_event(proxy_chan.dev);
 | |
|         if (rc < 0) {
 | |
|             trusty_error("%s: failed (%d) to get rpmb event\n", __func__, rc);
 | |
|             return rc;
 | |
|         }
 | |
| 
 | |
|         if (proxy_chan.handle == INVALID_IPC_HANDLE) {
 | |
|             trusty_error("%s: unexpected proxy channel close\n", __func__);
 | |
|             return TRUSTY_ERR_CHANNEL_CLOSED;
 | |
|         }
 | |
|     }
 | |
|     while (rc != TRUSTY_EVENT_NONE);
 | |
| 
 | |
|     /* mark as initialized */
 | |
|     initialized = true;
 | |
| 
 | |
|     return TRUSTY_ERR_NONE;
 | |
| }
 | |
| 
 | |
| void rpmb_storage_proxy_shutdown(struct trusty_ipc_dev *dev)
 | |
| {
 | |
|     trusty_assert(initialized);
 | |
| 
 | |
|     /* close channel */
 | |
|     trusty_ipc_close(&proxy_chan);
 | |
| 
 | |
|     initialized = false;
 | |
| }
 |