diff options
| author | Joel Hutton <Joel.Hutton@Arm.com> | 2019-02-20 11:56:46 +0000 |
|---|---|---|
| committer | Joel Hutton <Joel.Hutton@Arm.com> | 2019-04-08 14:21:21 +0100 |
| commit | 0b6377d1c60c01dd456a1a88dac5b1e83c0e3273 (patch) | |
| tree | 5ada22f18f89be7c39d61dab4456cc7cb292c98d /include/drivers | |
| parent | c48991e1fe918f48508c088b443742622b9f2181 (diff) | |
Reduce memory needed for CoT description
When Trusted Board Boot is enabled, we need to specify the Chain of
Trust (CoT) of the BL1 and BL2 images. A CoT consists of an array
of image descriptors. The authentication module assumes that each
image descriptor in this array is indexed by its unique image
identifier. For example, the Trusted Boot Firmware Certificate has to
be at index [TRUSTED_BOOT_FW_CERT_ID].
Unique image identifiers may not necessarily be consecutive. Also,
a given BL image might not use all image descriptors. For example, BL1
does not need any of the descriptors related to BL31. As a result, the
CoT array might contain holes, which unnecessarily takes up space in
the BL binary.
Using pointers to auth_img_desc_t structs (rather than structs
themselves) means these unused elements only use 1 pointer worth of
space, rather than one struct worth of space. This patch also changes
the code which accesses this array to reflect the change to pointers.
Image descriptors not needed in BL1 or BL2 respectively are also
ifdef'd out in this patch. For example, verifying the BL31 image is
the responsibility of BL2 so BL1 does not need any of the data
structures describing BL31.
memory diff:
bl1: bl2:
text text
-20 -20
bss bss
-1463 0
data data
-256 -48
rodata rodata
-5240 -1952
total total
-6979 -2020
Change-Id: I163668b174dc2b9bbb183acec817f2126864aaad
Signed-off-by: Joel Hutton <Joel.Hutton@Arm.com>
Diffstat (limited to 'include/drivers')
| -rw-r--r-- | include/drivers/auth/auth_mod.h | 10 |
1 files changed, 5 insertions, 5 deletions
diff --git a/include/drivers/auth/auth_mod.h b/include/drivers/auth/auth_mod.h index 90899539..0119ed2e 100644 --- a/include/drivers/auth/auth_mod.h +++ b/include/drivers/auth/auth_mod.h @@ -1,5 +1,5 @@ /* - * Copyright (c) 2015-2018, ARM Limited and Contributors. All rights reserved. + * Copyright (c) 2015-2019, ARM Limited and Contributors. All rights reserved. * * SPDX-License-Identifier: BSD-3-Clause */ @@ -38,13 +38,13 @@ int auth_mod_verify_img(unsigned int img_id, void *img_ptr, unsigned int img_len); -/* Macro to register a CoT defined as an array of auth_img_desc_t */ +/* Macro to register a CoT defined as an array of auth_img_desc_t pointers */ #define REGISTER_COT(_cot) \ - const auth_img_desc_t *const cot_desc_ptr = \ - (const auth_img_desc_t *const)&_cot[0]; \ + const auth_img_desc_t **const cot_desc_ptr = \ + (const auth_img_desc_t **const)_cot; \ unsigned int auth_img_flags[MAX_NUMBER_IDS] -extern const auth_img_desc_t *const cot_desc_ptr; +extern const auth_img_desc_t **const cot_desc_ptr; extern unsigned int auth_img_flags[MAX_NUMBER_IDS]; #endif /* TRUSTED_BOARD_BOOT */ |