1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
|
/* Copyright 2018 The Chromium OS Authors. All rights reserved.
* Use of this source code is governed by a BSD-style license that can be
* found in the LICENSE file.
*/
/* CCD factory enable */
#include "ccd_config.h"
#include "console.h"
#include "extension.h"
#include "hooks.h"
#include "system.h"
#include "tpm_registers.h"
#include "tpm_vendor_cmds.h"
#define CPRINTS(format, args...) cprints(CC_CCD, format, ## args)
static uint8_t ccd_hook_active;
static uint8_t reset_required_;
static void ccd_config_changed(void)
{
if (!ccd_hook_active)
return;
ccd_hook_active = 0;
if (!reset_required_)
return;
CPRINTS("%s: saved, rebooting\n", __func__);
cflush();
system_reset(SYSTEM_RESET_HARD);
}
DECLARE_HOOK(HOOK_CCD_CHANGE, ccd_config_changed, HOOK_PRIO_LAST);
static void factory_enable_failed(void)
{
ccd_hook_active = 0;
CPRINTS("factory enable failed");
if (reset_required_)
reset_required_ = 0;
}
DECLARE_DEFERRED(factory_enable_failed);
/* The below time constants are way longer than should be required in practice:
*
* Time it takes to finish processing TPM command
*/
#define TPM_PROCESSING_TIME (1 * SECOND)
/*
* Time it takse TPM reset function to wipe out the NVMEM and reboot the
* device.
*/
#define TPM_RESET_TIME (10 * SECOND)
/* Total time deep sleep should not be allowed. */
#define DISABLE_SLEEP_TIME (TPM_PROCESSING_TIME + TPM_RESET_TIME)
static void factory_enable_deferred(void)
{
int rv;
if (board_wipe_tpm(reset_required_) != EC_SUCCESS)
return;
CPRINTS("%s: TPM reset done, enabling factory mode", __func__);
ccd_hook_active = 1;
rv = ccd_reset_config(CCD_RESET_FACTORY);
if (rv != EC_SUCCESS)
factory_enable_failed();
if (reset_required_) {
/*
* Cr50 will reset once factory mode is enabled. If it hasn't in
* TPM_RESET_TIME, declare factory enable failed.
*/
hook_call_deferred(&factory_enable_failed_data, TPM_RESET_TIME);
}
}
DECLARE_DEFERRED(factory_enable_deferred);
void enable_ccd_factory_mode(int reset_required)
{
delay_sleep_by(DISABLE_SLEEP_TIME);
reset_required_ |= !!reset_required;
hook_call_deferred(&factory_enable_deferred_data,
TPM_PROCESSING_TIME);
}
|
