1 // SPDX-License-Identifier: GPL-2.0-only
3 * Copyright (C) 2004 IBM Corporation
4 * Copyright (C) 2014 Intel Corporation
7 * Jarkko Sakkinen <jarkko.sakkinen@linux.intel.com>
8 * Leendert van Doorn <leendert@watson.ibm.com>
9 * Dave Safford <safford@watson.ibm.com>
10 * Reiner Sailer <sailer@watson.ibm.com>
11 * Kylene Hall <kjhall@us.ibm.com>
13 * Maintained by: <tpmdd-devel@lists.sourceforge.net>
15 * TPM chip management routines.
18 #include <linux/poll.h>
19 #include <linux/slab.h>
20 #include <linux/mutex.h>
21 #include <linux/spinlock.h>
22 #include <linux/freezer.h>
23 #include <linux/major.h>
24 #include <linux/tpm_eventlog.h>
25 #include <linux/hw_random.h>
28 DEFINE_IDR(dev_nums_idr
);
29 static DEFINE_MUTEX(idr_lock
);
31 struct class *tpm_class
;
32 struct class *tpmrm_class
;
35 static int tpm_request_locality(struct tpm_chip
*chip
)
39 if (!chip
->ops
->request_locality
)
42 rc
= chip
->ops
->request_locality(chip
, 0);
50 static void tpm_relinquish_locality(struct tpm_chip
*chip
)
54 if (!chip
->ops
->relinquish_locality
)
57 rc
= chip
->ops
->relinquish_locality(chip
, chip
->locality
);
59 dev_err(&chip
->dev
, "%s: : error %d\n", __func__
, rc
);
64 static int tpm_cmd_ready(struct tpm_chip
*chip
)
66 if (!chip
->ops
->cmd_ready
)
69 return chip
->ops
->cmd_ready(chip
);
72 static int tpm_go_idle(struct tpm_chip
*chip
)
74 if (!chip
->ops
->go_idle
)
77 return chip
->ops
->go_idle(chip
);
80 static void tpm_clk_enable(struct tpm_chip
*chip
)
82 if (chip
->ops
->clk_enable
)
83 chip
->ops
->clk_enable(chip
, true);
86 static void tpm_clk_disable(struct tpm_chip
*chip
)
88 if (chip
->ops
->clk_enable
)
89 chip
->ops
->clk_enable(chip
, false);
93 * tpm_chip_start() - power on the TPM
94 * @chip: a TPM chip to use
97 * * The response length - OK
98 * * -errno - A system error
100 int tpm_chip_start(struct tpm_chip
*chip
)
104 tpm_clk_enable(chip
);
106 if (chip
->locality
== -1) {
107 ret
= tpm_request_locality(chip
);
109 tpm_clk_disable(chip
);
114 ret
= tpm_cmd_ready(chip
);
116 tpm_relinquish_locality(chip
);
117 tpm_clk_disable(chip
);
123 EXPORT_SYMBOL_GPL(tpm_chip_start
);
126 * tpm_chip_stop() - power off the TPM
127 * @chip: a TPM chip to use
130 * * The response length - OK
131 * * -errno - A system error
133 void tpm_chip_stop(struct tpm_chip
*chip
)
136 tpm_relinquish_locality(chip
);
137 tpm_clk_disable(chip
);
139 EXPORT_SYMBOL_GPL(tpm_chip_stop
);
142 * tpm_try_get_ops() - Get a ref to the tpm_chip
145 * The caller must already have some kind of locking to ensure that chip is
146 * valid. This function will lock the chip so that the ops member can be
147 * accessed safely. The locking prevents tpm_chip_unregister from
148 * completing, so it should not be held for long periods.
150 * Returns -ERRNO if the chip could not be got.
152 int tpm_try_get_ops(struct tpm_chip
*chip
)
156 get_device(&chip
->dev
);
158 down_read(&chip
->ops_sem
);
162 mutex_lock(&chip
->tpm_mutex
);
163 rc
= tpm_chip_start(chip
);
169 mutex_unlock(&chip
->tpm_mutex
);
171 up_read(&chip
->ops_sem
);
172 put_device(&chip
->dev
);
175 EXPORT_SYMBOL_GPL(tpm_try_get_ops
);
178 * tpm_put_ops() - Release a ref to the tpm_chip
181 * This is the opposite pair to tpm_try_get_ops(). After this returns chip may
184 void tpm_put_ops(struct tpm_chip
*chip
)
187 mutex_unlock(&chip
->tpm_mutex
);
188 up_read(&chip
->ops_sem
);
189 put_device(&chip
->dev
);
191 EXPORT_SYMBOL_GPL(tpm_put_ops
);
194 * tpm_default_chip() - find a TPM chip and get a reference to it
196 struct tpm_chip
*tpm_default_chip(void)
198 struct tpm_chip
*chip
, *res
= NULL
;
202 mutex_lock(&idr_lock
);
205 chip_prev
= chip_num
;
206 chip
= idr_get_next(&dev_nums_idr
, &chip_num
);
208 get_device(&chip
->dev
);
212 } while (chip_prev
!= chip_num
);
214 mutex_unlock(&idr_lock
);
218 EXPORT_SYMBOL_GPL(tpm_default_chip
);
221 * tpm_find_get_ops() - find and reserve a TPM chip
222 * @chip: a &struct tpm_chip instance, %NULL for the default chip
224 * Finds a TPM chip and reserves its class device and operations. The chip must
225 * be released with tpm_put_ops() after use.
226 * This function is for internal use only. It supports existing TPM callers
227 * by accepting NULL, but those callers should be converted to pass in a chip
231 * A reserved &struct tpm_chip instance.
232 * %NULL if a chip is not found.
233 * %NULL if the chip is not available.
235 struct tpm_chip
*tpm_find_get_ops(struct tpm_chip
*chip
)
240 if (!tpm_try_get_ops(chip
))
245 chip
= tpm_default_chip();
248 rc
= tpm_try_get_ops(chip
);
249 /* release additional reference we got from tpm_default_chip() */
250 put_device(&chip
->dev
);
257 * tpm_dev_release() - free chip memory and the device number
258 * @dev: the character device for the TPM chip
260 * This is used as the release function for the character device.
262 static void tpm_dev_release(struct device
*dev
)
264 struct tpm_chip
*chip
= container_of(dev
, struct tpm_chip
, dev
);
266 mutex_lock(&idr_lock
);
267 idr_remove(&dev_nums_idr
, chip
->dev_num
);
268 mutex_unlock(&idr_lock
);
270 kfree(chip
->log
.bios_event_log
);
271 kfree(chip
->work_space
.context_buf
);
272 kfree(chip
->work_space
.session_buf
);
273 kfree(chip
->allocated_banks
);
277 static void tpm_devs_release(struct device
*dev
)
279 struct tpm_chip
*chip
= container_of(dev
, struct tpm_chip
, devs
);
281 /* release the master device reference */
282 put_device(&chip
->dev
);
286 * tpm_class_shutdown() - prepare the TPM device for loss of power.
287 * @dev: device to which the chip is associated.
289 * Issues a TPM2_Shutdown command prior to loss of power, as required by the
290 * TPM 2.0 spec. Then, calls bus- and device- specific shutdown code.
292 * Return: always 0 (i.e. success)
294 static int tpm_class_shutdown(struct device
*dev
)
296 struct tpm_chip
*chip
= container_of(dev
, struct tpm_chip
, dev
);
298 down_write(&chip
->ops_sem
);
299 if (chip
->flags
& TPM_CHIP_FLAG_TPM2
) {
300 if (!tpm_chip_start(chip
)) {
301 tpm2_shutdown(chip
, TPM2_SU_CLEAR
);
306 up_write(&chip
->ops_sem
);
312 * tpm_chip_alloc() - allocate a new struct tpm_chip instance
313 * @pdev: device to which the chip is associated
314 * At this point pdev mst be initialized, but does not have to
316 * @ops: struct tpm_class_ops instance
318 * Allocates a new struct tpm_chip instance and assigns a free
319 * device number for it. Must be paired with put_device(&chip->dev).
321 struct tpm_chip
*tpm_chip_alloc(struct device
*pdev
,
322 const struct tpm_class_ops
*ops
)
324 struct tpm_chip
*chip
;
327 chip
= kzalloc(sizeof(*chip
), GFP_KERNEL
);
329 return ERR_PTR(-ENOMEM
);
331 mutex_init(&chip
->tpm_mutex
);
332 init_rwsem(&chip
->ops_sem
);
336 mutex_lock(&idr_lock
);
337 rc
= idr_alloc(&dev_nums_idr
, NULL
, 0, TPM_NUM_DEVICES
, GFP_KERNEL
);
338 mutex_unlock(&idr_lock
);
340 dev_err(pdev
, "No available tpm device numbers\n");
346 device_initialize(&chip
->dev
);
347 device_initialize(&chip
->devs
);
349 chip
->dev
.class = tpm_class
;
350 chip
->dev
.class->shutdown_pre
= tpm_class_shutdown
;
351 chip
->dev
.release
= tpm_dev_release
;
352 chip
->dev
.parent
= pdev
;
353 chip
->dev
.groups
= chip
->groups
;
355 chip
->devs
.parent
= pdev
;
356 chip
->devs
.class = tpmrm_class
;
357 chip
->devs
.release
= tpm_devs_release
;
358 /* get extra reference on main device to hold on
359 * behalf of devs. This holds the chip structure
360 * while cdevs is in use. The corresponding put
361 * is in the tpm_devs_release (TPM2 only)
363 if (chip
->flags
& TPM_CHIP_FLAG_TPM2
)
364 get_device(&chip
->dev
);
366 if (chip
->dev_num
== 0)
367 chip
->dev
.devt
= MKDEV(MISC_MAJOR
, TPM_MINOR
);
369 chip
->dev
.devt
= MKDEV(MAJOR(tpm_devt
), chip
->dev_num
);
372 MKDEV(MAJOR(tpm_devt
), chip
->dev_num
+ TPM_NUM_DEVICES
);
374 rc
= dev_set_name(&chip
->dev
, "tpm%d", chip
->dev_num
);
377 rc
= dev_set_name(&chip
->devs
, "tpmrm%d", chip
->dev_num
);
382 chip
->flags
|= TPM_CHIP_FLAG_VIRTUAL
;
384 cdev_init(&chip
->cdev
, &tpm_fops
);
385 cdev_init(&chip
->cdevs
, &tpmrm_fops
);
386 chip
->cdev
.owner
= THIS_MODULE
;
387 chip
->cdevs
.owner
= THIS_MODULE
;
389 chip
->work_space
.context_buf
= kzalloc(PAGE_SIZE
, GFP_KERNEL
);
390 if (!chip
->work_space
.context_buf
) {
394 chip
->work_space
.session_buf
= kzalloc(PAGE_SIZE
, GFP_KERNEL
);
395 if (!chip
->work_space
.session_buf
) {
404 put_device(&chip
->devs
);
405 put_device(&chip
->dev
);
408 EXPORT_SYMBOL_GPL(tpm_chip_alloc
);
411 * tpmm_chip_alloc() - allocate a new struct tpm_chip instance
412 * @pdev: parent device to which the chip is associated
413 * @ops: struct tpm_class_ops instance
415 * Same as tpm_chip_alloc except devm is used to do the put_device
417 struct tpm_chip
*tpmm_chip_alloc(struct device
*pdev
,
418 const struct tpm_class_ops
*ops
)
420 struct tpm_chip
*chip
;
423 chip
= tpm_chip_alloc(pdev
, ops
);
427 rc
= devm_add_action_or_reset(pdev
,
428 (void (*)(void *)) put_device
,
433 dev_set_drvdata(pdev
, chip
);
437 EXPORT_SYMBOL_GPL(tpmm_chip_alloc
);
439 static int tpm_add_char_device(struct tpm_chip
*chip
)
443 rc
= cdev_device_add(&chip
->cdev
, &chip
->dev
);
446 "unable to cdev_device_add() %s, major %d, minor %d, err=%d\n",
447 dev_name(&chip
->dev
), MAJOR(chip
->dev
.devt
),
448 MINOR(chip
->dev
.devt
), rc
);
452 if (chip
->flags
& TPM_CHIP_FLAG_TPM2
) {
453 rc
= cdev_device_add(&chip
->cdevs
, &chip
->devs
);
456 "unable to cdev_device_add() %s, major %d, minor %d, err=%d\n",
457 dev_name(&chip
->devs
), MAJOR(chip
->devs
.devt
),
458 MINOR(chip
->devs
.devt
), rc
);
463 /* Make the chip available. */
464 mutex_lock(&idr_lock
);
465 idr_replace(&dev_nums_idr
, chip
, chip
->dev_num
);
466 mutex_unlock(&idr_lock
);
471 static void tpm_del_char_device(struct tpm_chip
*chip
)
473 cdev_device_del(&chip
->cdev
, &chip
->dev
);
475 /* Make the chip unavailable. */
476 mutex_lock(&idr_lock
);
477 idr_replace(&dev_nums_idr
, NULL
, chip
->dev_num
);
478 mutex_unlock(&idr_lock
);
480 /* Make the driver uncallable. */
481 down_write(&chip
->ops_sem
);
482 if (chip
->flags
& TPM_CHIP_FLAG_TPM2
) {
483 if (!tpm_chip_start(chip
)) {
484 tpm2_shutdown(chip
, TPM2_SU_CLEAR
);
489 up_write(&chip
->ops_sem
);
492 static void tpm_del_legacy_sysfs(struct tpm_chip
*chip
)
494 struct attribute
**i
;
496 if (chip
->flags
& (TPM_CHIP_FLAG_TPM2
| TPM_CHIP_FLAG_VIRTUAL
))
499 sysfs_remove_link(&chip
->dev
.parent
->kobj
, "ppi");
501 for (i
= chip
->groups
[0]->attrs
; *i
!= NULL
; ++i
)
502 sysfs_remove_link(&chip
->dev
.parent
->kobj
, (*i
)->name
);
505 /* For compatibility with legacy sysfs paths we provide symlinks from the
506 * parent dev directory to selected names within the tpm chip directory. Old
507 * kernel versions created these files directly under the parent.
509 static int tpm_add_legacy_sysfs(struct tpm_chip
*chip
)
511 struct attribute
**i
;
514 if (chip
->flags
& (TPM_CHIP_FLAG_TPM2
| TPM_CHIP_FLAG_VIRTUAL
))
517 rc
= compat_only_sysfs_link_entry_to_kobj(
518 &chip
->dev
.parent
->kobj
, &chip
->dev
.kobj
, "ppi", NULL
);
519 if (rc
&& rc
!= -ENOENT
)
522 /* All the names from tpm-sysfs */
523 for (i
= chip
->groups
[0]->attrs
; *i
!= NULL
; ++i
) {
524 rc
= compat_only_sysfs_link_entry_to_kobj(
525 &chip
->dev
.parent
->kobj
, &chip
->dev
.kobj
, (*i
)->name
, NULL
);
527 tpm_del_legacy_sysfs(chip
);
535 static int tpm_hwrng_read(struct hwrng
*rng
, void *data
, size_t max
, bool wait
)
537 struct tpm_chip
*chip
= container_of(rng
, struct tpm_chip
, hwrng
);
539 return tpm_get_random(chip
, data
, max
);
542 static int tpm_add_hwrng(struct tpm_chip
*chip
)
544 if (!IS_ENABLED(CONFIG_HW_RANDOM_TPM
))
547 snprintf(chip
->hwrng_name
, sizeof(chip
->hwrng_name
),
548 "tpm-rng-%d", chip
->dev_num
);
549 chip
->hwrng
.name
= chip
->hwrng_name
;
550 chip
->hwrng
.read
= tpm_hwrng_read
;
551 return hwrng_register(&chip
->hwrng
);
554 static int tpm_get_pcr_allocation(struct tpm_chip
*chip
)
558 rc
= (chip
->flags
& TPM_CHIP_FLAG_TPM2
) ?
559 tpm2_get_pcr_allocation(chip
) :
560 tpm1_get_pcr_allocation(chip
);
569 * tpm_chip_register() - create a character device for the TPM chip
570 * @chip: TPM chip to use.
572 * Creates a character device for the TPM chip and adds sysfs attributes for
573 * the device. As the last step this function adds the chip to the list of TPM
574 * chips available for in-kernel use.
576 * This function should be only called after the chip initialization is
579 int tpm_chip_register(struct tpm_chip
*chip
)
583 rc
= tpm_chip_start(chip
);
586 rc
= tpm_auto_startup(chip
);
592 rc
= tpm_get_pcr_allocation(chip
);
597 tpm_sysfs_add_device(chip
);
599 tpm_bios_log_setup(chip
);
603 rc
= tpm_add_hwrng(chip
);
607 rc
= tpm_add_char_device(chip
);
611 rc
= tpm_add_legacy_sysfs(chip
);
613 tpm_chip_unregister(chip
);
620 if (IS_ENABLED(CONFIG_HW_RANDOM_TPM
))
621 hwrng_unregister(&chip
->hwrng
);
623 tpm_bios_log_teardown(chip
);
627 EXPORT_SYMBOL_GPL(tpm_chip_register
);
630 * tpm_chip_unregister() - release the TPM driver
631 * @chip: TPM chip to use.
633 * Takes the chip first away from the list of available TPM chips and then
634 * cleans up all the resources reserved by tpm_chip_register().
636 * Once this function returns the driver call backs in 'op's will not be
637 * running and will no longer start.
639 * NOTE: This function should be only called before deinitializing chip
642 void tpm_chip_unregister(struct tpm_chip
*chip
)
644 tpm_del_legacy_sysfs(chip
);
645 if (IS_ENABLED(CONFIG_HW_RANDOM_TPM
))
646 hwrng_unregister(&chip
->hwrng
);
647 tpm_bios_log_teardown(chip
);
648 if (chip
->flags
& TPM_CHIP_FLAG_TPM2
)
649 cdev_device_del(&chip
->cdevs
, &chip
->devs
);
650 tpm_del_char_device(chip
);
652 EXPORT_SYMBOL_GPL(tpm_chip_unregister
);