1 // SPDX-License-Identifier: GPL-2.0+
3 * EFI application memory management
5 * Copyright (c) 2016 Alexander Graf
9 #include <efi_loader.h>
13 #include <linux/list_sort.h>
14 #include <linux/sizes.h>
16 DECLARE_GLOBAL_DATA_PTR;
18 /* Magic number identifying memory allocated from pool */
19 #define EFI_ALLOC_POOL_MAGIC 0x1fe67ddf6491caa2
21 efi_uintn_t efi_memory_map_key;
24 struct list_head link;
25 struct efi_mem_desc desc;
28 #define EFI_CARVE_NO_OVERLAP -1
29 #define EFI_CARVE_LOOP_AGAIN -2
30 #define EFI_CARVE_OVERLAPS_NONRAM -3
32 /* This list contains all memory map items */
35 #ifdef CONFIG_EFI_LOADER_BOUNCE_BUFFER
36 void *efi_bounce_buffer;
40 * efi_pool_allocation - memory block allocated from pool
42 * @num_pages: number of pages allocated
45 * U-Boot services each EFI AllocatePool request as a separate
46 * (multiple) page allocation. We have to track the number of pages
47 * to be able to free the correct amount later.
48 * EFI requires 8 byte alignment for pool allocations, so we can
49 * prepend each allocation with an 64 bit header tracking the
50 * allocation size, and hand out the remainder to the caller.
52 struct efi_pool_allocation {
55 char data[] __aligned(ARCH_DMA_MINALIGN);
59 * checksum() - calculate checksum for memory allocated from pool
61 * @alloc: allocation header
62 * Return: checksum, always non-zero
64 static u64 checksum(struct efi_pool_allocation *alloc)
66 u64 addr = (uintptr_t)alloc;
67 u64 ret = (addr >> 32) ^ (addr << 32) ^ alloc->num_pages ^
75 * Sorts the memory list from highest address to lowest address
77 * When allocating memory we should always start from the highest
78 * address chunk, so sort the memory list such that the first list
79 * iterator gets the highest address and goes lower from there.
81 static int efi_mem_cmp(void *priv, struct list_head *a, struct list_head *b)
83 struct efi_mem_list *mema = list_entry(a, struct efi_mem_list, link);
84 struct efi_mem_list *memb = list_entry(b, struct efi_mem_list, link);
86 if (mema->desc.physical_start == memb->desc.physical_start)
88 else if (mema->desc.physical_start < memb->desc.physical_start)
94 static uint64_t desc_get_end(struct efi_mem_desc *desc)
96 return desc->physical_start + (desc->num_pages << EFI_PAGE_SHIFT);
99 static void efi_mem_sort(void)
101 struct list_head *lhandle;
102 struct efi_mem_list *prevmem = NULL;
103 bool merge_again = true;
105 list_sort(NULL, &efi_mem, efi_mem_cmp);
107 /* Now merge entries that can be merged */
108 while (merge_again) {
110 list_for_each(lhandle, &efi_mem) {
111 struct efi_mem_list *lmem;
112 struct efi_mem_desc *prev = &prevmem->desc;
113 struct efi_mem_desc *cur;
116 lmem = list_entry(lhandle, struct efi_mem_list, link);
124 if ((desc_get_end(cur) == prev->physical_start) &&
125 (prev->type == cur->type) &&
126 (prev->attribute == cur->attribute)) {
127 /* There is an existing map before, reuse it */
128 pages = cur->num_pages;
129 prev->num_pages += pages;
130 prev->physical_start -= pages << EFI_PAGE_SHIFT;
131 prev->virtual_start -= pages << EFI_PAGE_SHIFT;
132 list_del(&lmem->link);
144 /** efi_mem_carve_out - unmap memory region
147 * @carve_desc: memory region to unmap
148 * @overlap_only_ram: the carved out region may only overlap RAM
149 * Return Value: the number of overlapping pages which have been
150 * removed from the map,
151 * EFI_CARVE_NO_OVERLAP, if the regions don't overlap,
152 * EFI_CARVE_OVERLAPS_NONRAM, if the carve and map overlap,
153 * and the map contains anything but free ram
154 * (only when overlap_only_ram is true),
155 * EFI_CARVE_LOOP_AGAIN, if the mapping list should be
156 * traversed again, as it has been altered.
158 * Unmaps all memory occupied by the carve_desc region from the list entry
161 * In case of EFI_CARVE_OVERLAPS_NONRAM it is the callers responsibility
162 * to re-add the already carved out pages to the mapping.
164 static s64 efi_mem_carve_out(struct efi_mem_list *map,
165 struct efi_mem_desc *carve_desc,
166 bool overlap_only_ram)
168 struct efi_mem_list *newmap;
169 struct efi_mem_desc *map_desc = &map->desc;
170 uint64_t map_start = map_desc->physical_start;
171 uint64_t map_end = map_start + (map_desc->num_pages << EFI_PAGE_SHIFT);
172 uint64_t carve_start = carve_desc->physical_start;
173 uint64_t carve_end = carve_start +
174 (carve_desc->num_pages << EFI_PAGE_SHIFT);
176 /* check whether we're overlapping */
177 if ((carve_end <= map_start) || (carve_start >= map_end))
178 return EFI_CARVE_NO_OVERLAP;
180 /* We're overlapping with non-RAM, warn the caller if desired */
181 if (overlap_only_ram && (map_desc->type != EFI_CONVENTIONAL_MEMORY))
182 return EFI_CARVE_OVERLAPS_NONRAM;
184 /* Sanitize carve_start and carve_end to lie within our bounds */
185 carve_start = max(carve_start, map_start);
186 carve_end = min(carve_end, map_end);
188 /* Carving at the beginning of our map? Just move it! */
189 if (carve_start == map_start) {
190 if (map_end == carve_end) {
191 /* Full overlap, just remove map */
192 list_del(&map->link);
195 map->desc.physical_start = carve_end;
196 map->desc.virtual_start = carve_end;
197 map->desc.num_pages = (map_end - carve_end)
201 return (carve_end - carve_start) >> EFI_PAGE_SHIFT;
205 * Overlapping maps, just split the list map at carve_start,
206 * it will get moved or removed in the next iteration.
208 * [ map_desc |__carve_start__| newmap ]
211 /* Create a new map from [ carve_start ... map_end ] */
212 newmap = calloc(1, sizeof(*newmap));
213 newmap->desc = map->desc;
214 newmap->desc.physical_start = carve_start;
215 newmap->desc.virtual_start = carve_start;
216 newmap->desc.num_pages = (map_end - carve_start) >> EFI_PAGE_SHIFT;
217 /* Insert before current entry (descending address order) */
218 list_add_tail(&newmap->link, &map->link);
220 /* Shrink the map to [ map_start ... carve_start ] */
221 map_desc->num_pages = (carve_start - map_start) >> EFI_PAGE_SHIFT;
223 return EFI_CARVE_LOOP_AGAIN;
226 uint64_t efi_add_memory_map(uint64_t start, uint64_t pages, int memory_type,
227 bool overlap_only_ram)
229 struct list_head *lhandle;
230 struct efi_mem_list *newlist;
232 uint64_t carved_pages = 0;
234 EFI_PRINT("%s: 0x%llx 0x%llx %d %s\n", __func__,
235 start, pages, memory_type, overlap_only_ram ? "yes" : "no");
237 if (memory_type >= EFI_MAX_MEMORY_TYPE)
238 return EFI_INVALID_PARAMETER;
243 ++efi_memory_map_key;
244 newlist = calloc(1, sizeof(*newlist));
245 newlist->desc.type = memory_type;
246 newlist->desc.physical_start = start;
247 newlist->desc.virtual_start = start;
248 newlist->desc.num_pages = pages;
250 switch (memory_type) {
251 case EFI_RUNTIME_SERVICES_CODE:
252 case EFI_RUNTIME_SERVICES_DATA:
253 newlist->desc.attribute = EFI_MEMORY_WB | EFI_MEMORY_RUNTIME;
256 newlist->desc.attribute = EFI_MEMORY_RUNTIME;
259 newlist->desc.attribute = EFI_MEMORY_WB;
263 /* Add our new map */
266 list_for_each(lhandle, &efi_mem) {
267 struct efi_mem_list *lmem;
270 lmem = list_entry(lhandle, struct efi_mem_list, link);
271 r = efi_mem_carve_out(lmem, &newlist->desc,
274 case EFI_CARVE_OVERLAPS_NONRAM:
276 * The user requested to only have RAM overlaps,
277 * but we hit a non-RAM region. Error out.
280 case EFI_CARVE_NO_OVERLAP:
281 /* Just ignore this list entry */
283 case EFI_CARVE_LOOP_AGAIN:
285 * We split an entry, but need to loop through
286 * the list again to actually carve it.
291 /* We carved a number of pages */
298 /* The list changed, we need to start over */
302 } while (carve_again);
304 if (overlap_only_ram && (carved_pages != pages)) {
306 * The payload wanted to have RAM overlaps, but we overlapped
307 * with an unallocated region. Error out.
312 /* Add our new map */
313 list_add_tail(&newlist->link, &efi_mem);
315 /* And make sure memory is listed in descending order */
321 static uint64_t efi_find_free_memory(uint64_t len, uint64_t max_addr)
323 struct list_head *lhandle;
326 * Prealign input max address, so we simplify our matching
327 * logic below and can just reuse it as return pointer.
329 max_addr &= ~EFI_PAGE_MASK;
331 list_for_each(lhandle, &efi_mem) {
332 struct efi_mem_list *lmem = list_entry(lhandle,
333 struct efi_mem_list, link);
334 struct efi_mem_desc *desc = &lmem->desc;
335 uint64_t desc_len = desc->num_pages << EFI_PAGE_SHIFT;
336 uint64_t desc_end = desc->physical_start + desc_len;
337 uint64_t curmax = min(max_addr, desc_end);
338 uint64_t ret = curmax - len;
340 /* We only take memory from free RAM */
341 if (desc->type != EFI_CONVENTIONAL_MEMORY)
344 /* Out of bounds for max_addr */
345 if ((ret + len) > max_addr)
348 /* Out of bounds for upper map limit */
349 if ((ret + len) > desc_end)
352 /* Out of bounds for lower map limit */
353 if (ret < desc->physical_start)
356 /* Return the highest address in this map within bounds */
364 * Allocate memory pages.
366 * @type type of allocation to be performed
367 * @memory_type usage type of the allocated memory
368 * @pages number of pages to be allocated
369 * @memory allocated memory
370 * @return status code
372 efi_status_t efi_allocate_pages(int type, int memory_type,
373 efi_uintn_t pages, uint64_t *memory)
375 u64 len = pages << EFI_PAGE_SHIFT;
376 efi_status_t r = EFI_SUCCESS;
380 return EFI_INVALID_PARAMETER;
383 case EFI_ALLOCATE_ANY_PAGES:
385 addr = efi_find_free_memory(len, -1ULL);
391 case EFI_ALLOCATE_MAX_ADDRESS:
393 addr = efi_find_free_memory(len, *memory);
399 case EFI_ALLOCATE_ADDRESS:
400 /* Exact address, reserve it. The addr is already in *memory. */
404 /* UEFI doesn't specify other allocation types */
405 r = EFI_INVALID_PARAMETER;
409 if (r == EFI_SUCCESS) {
412 /* Reserve that map in our memory maps */
413 ret = efi_add_memory_map(addr, pages, memory_type, true);
417 /* Map would overlap, bail out */
418 r = EFI_OUT_OF_RESOURCES;
425 void *efi_alloc(uint64_t len, int memory_type)
428 uint64_t pages = efi_size_in_pages(len);
431 r = efi_allocate_pages(EFI_ALLOCATE_ANY_PAGES, memory_type, pages,
433 if (r == EFI_SUCCESS)
434 return (void*)(uintptr_t)ret;
440 * efi_free_pages() - free memory pages
442 * @memory: start of the memory area to be freed
443 * @pages: number of pages to be freed
444 * Return: status code
446 efi_status_t efi_free_pages(uint64_t memory, efi_uintn_t pages)
451 if (!memory || (memory & EFI_PAGE_MASK)) {
452 printf("%s: illegal free 0x%llx, 0x%zx\n", __func__,
454 return EFI_INVALID_PARAMETER;
457 r = efi_add_memory_map(memory, pages, EFI_CONVENTIONAL_MEMORY, false);
458 /* Merging of adjacent free regions is missing */
463 return EFI_NOT_FOUND;
467 * efi_allocate_pool - allocate memory from pool
469 * @pool_type: type of the pool from which memory is to be allocated
470 * @size: number of bytes to be allocated
471 * @buffer: allocated memory
472 * Return: status code
474 efi_status_t efi_allocate_pool(int pool_type, efi_uintn_t size, void **buffer)
478 struct efi_pool_allocation *alloc;
479 u64 num_pages = efi_size_in_pages(size +
480 sizeof(struct efi_pool_allocation));
483 return EFI_INVALID_PARAMETER;
490 r = efi_allocate_pages(EFI_ALLOCATE_ANY_PAGES, pool_type, num_pages,
492 if (r == EFI_SUCCESS) {
493 alloc = (struct efi_pool_allocation *)(uintptr_t)addr;
494 alloc->num_pages = num_pages;
495 alloc->checksum = checksum(alloc);
496 *buffer = alloc->data;
503 * efi_free_pool() - free memory from pool
505 * @buffer: start of memory to be freed
506 * Return: status code
508 efi_status_t efi_free_pool(void *buffer)
511 struct efi_pool_allocation *alloc;
514 return EFI_INVALID_PARAMETER;
516 alloc = container_of(buffer, struct efi_pool_allocation, data);
518 /* Check that this memory was allocated by efi_allocate_pool() */
519 if (((uintptr_t)alloc & EFI_PAGE_MASK) ||
520 alloc->checksum != checksum(alloc)) {
521 printf("%s: illegal free 0x%p\n", __func__, buffer);
522 return EFI_INVALID_PARAMETER;
524 /* Avoid double free */
527 r = efi_free_pages((uintptr_t)alloc, alloc->num_pages);
533 * Get map describing memory usage.
535 * @memory_map_size on entry the size, in bytes, of the memory map buffer,
536 * on exit the size of the copied memory map
537 * @memory_map buffer to which the memory map is written
538 * @map_key key for the memory map
539 * @descriptor_size size of an individual memory descriptor
540 * @descriptor_version version number of the memory descriptor structure
541 * @return status code
543 efi_status_t efi_get_memory_map(efi_uintn_t *memory_map_size,
544 struct efi_mem_desc *memory_map,
545 efi_uintn_t *map_key,
546 efi_uintn_t *descriptor_size,
547 uint32_t *descriptor_version)
549 efi_uintn_t map_size = 0;
551 struct list_head *lhandle;
552 efi_uintn_t provided_map_size;
554 if (!memory_map_size)
555 return EFI_INVALID_PARAMETER;
557 provided_map_size = *memory_map_size;
559 list_for_each(lhandle, &efi_mem)
562 map_size = map_entries * sizeof(struct efi_mem_desc);
564 *memory_map_size = map_size;
566 if (provided_map_size < map_size)
567 return EFI_BUFFER_TOO_SMALL;
570 return EFI_INVALID_PARAMETER;
573 *descriptor_size = sizeof(struct efi_mem_desc);
575 if (descriptor_version)
576 *descriptor_version = EFI_MEMORY_DESCRIPTOR_VERSION;
578 /* Copy list into array */
579 /* Return the list in ascending order */
580 memory_map = &memory_map[map_entries - 1];
581 list_for_each(lhandle, &efi_mem) {
582 struct efi_mem_list *lmem;
584 lmem = list_entry(lhandle, struct efi_mem_list, link);
585 *memory_map = lmem->desc;
590 *map_key = efi_memory_map_key;
595 __weak void efi_add_known_memory(void)
597 u64 ram_top = board_get_usable_ram_top(0) & ~EFI_PAGE_MASK;
601 * ram_top is just outside mapped memory. So use an offset of one for
602 * mapping the sandbox address.
604 ram_top = (uintptr_t)map_sysmem(ram_top - 1, 0) + 1;
606 /* Fix for 32bit targets with ram_top at 4G */
608 ram_top = 0x100000000ULL;
611 for (i = 0; i < CONFIG_NR_DRAM_BANKS; i++) {
612 u64 ram_end, ram_start, pages;
614 ram_start = (uintptr_t)map_sysmem(gd->bd->bi_dram[i].start, 0);
615 ram_end = ram_start + gd->bd->bi_dram[i].size;
617 /* Remove partial pages */
618 ram_end &= ~EFI_PAGE_MASK;
619 ram_start = (ram_start + EFI_PAGE_MASK) & ~EFI_PAGE_MASK;
621 if (ram_end <= ram_start) {
622 /* Invalid mapping, keep going. */
626 pages = (ram_end - ram_start) >> EFI_PAGE_SHIFT;
628 efi_add_memory_map(ram_start, pages,
629 EFI_CONVENTIONAL_MEMORY, false);
632 * Boards may indicate to the U-Boot memory core that they
633 * can not support memory above ram_top. Let's honor this
634 * in the efi_loader subsystem too by declaring any memory
635 * above ram_top as "already occupied by firmware".
637 if (ram_top < ram_start) {
638 /* ram_top is before this region, reserve all */
639 efi_add_memory_map(ram_start, pages,
640 EFI_BOOT_SERVICES_DATA, true);
641 } else if ((ram_top >= ram_start) && (ram_top < ram_end)) {
642 /* ram_top is inside this region, reserve parts */
643 pages = (ram_end - ram_top) >> EFI_PAGE_SHIFT;
645 efi_add_memory_map(ram_top, pages,
646 EFI_BOOT_SERVICES_DATA, true);
651 /* Add memory regions for U-Boot's memory and for the runtime services code */
652 static void add_u_boot_and_runtime(void)
654 unsigned long runtime_start, runtime_end, runtime_pages;
655 unsigned long runtime_mask = EFI_PAGE_MASK;
656 unsigned long uboot_start, uboot_pages;
657 unsigned long uboot_stack_size = 16 * 1024 * 1024;
660 uboot_start = (gd->start_addr_sp - uboot_stack_size) & ~EFI_PAGE_MASK;
661 uboot_pages = (gd->ram_top - uboot_start) >> EFI_PAGE_SHIFT;
662 efi_add_memory_map(uboot_start, uboot_pages, EFI_LOADER_DATA, false);
664 #if defined(__aarch64__)
666 * Runtime Services must be 64KiB aligned according to the
667 * "AArch64 Platforms" section in the UEFI spec (2.7+).
670 runtime_mask = SZ_64K - 1;
674 * Add Runtime Services. We mark surrounding boottime code as runtime as
675 * well to fulfill the runtime alignment constraints but avoid padding.
677 runtime_start = (ulong)&__efi_runtime_start & ~runtime_mask;
678 runtime_end = (ulong)&__efi_runtime_stop;
679 runtime_end = (runtime_end + runtime_mask) & ~runtime_mask;
680 runtime_pages = (runtime_end - runtime_start) >> EFI_PAGE_SHIFT;
681 efi_add_memory_map(runtime_start, runtime_pages,
682 EFI_RUNTIME_SERVICES_CODE, false);
685 int efi_memory_init(void)
687 efi_add_known_memory();
689 if (!IS_ENABLED(CONFIG_SANDBOX))
690 add_u_boot_and_runtime();
692 #ifdef CONFIG_EFI_LOADER_BOUNCE_BUFFER
693 /* Request a 32bit 64MB bounce buffer region */
694 uint64_t efi_bounce_buffer_addr = 0xffffffff;
696 if (efi_allocate_pages(EFI_ALLOCATE_MAX_ADDRESS, EFI_LOADER_DATA,
697 (64 * 1024 * 1024) >> EFI_PAGE_SHIFT,
698 &efi_bounce_buffer_addr) != EFI_SUCCESS)
701 efi_bounce_buffer = (void*)(uintptr_t)efi_bounce_buffer_addr;