linux-toradex.git/drivers/firmware/qcom/Kconfig, branch master

firmware: qcom: Add a PAS TEE service

2026-07-09T19:12:58+00:00

Add support for Peripheral Authentication Service (PAS) driver based
on TEE bus with OP-TEE providing the backend PAS service implementation.

The TEE PAS service ABI is designed to be extensible with additional API
as PTA_QCOM_PAS_CAPABILITIES. This allows to accommodate any future
extensions of the PAS service needed while still maintaining backwards
compatibility.

Reviewed-by: Mukesh Ojha 
Tested-by: Mukesh Ojha  # Lemans
Reviewed-by: Harshal Dev 
Tested-by: Vignesh Viswanathan  # IPQ9650
Signed-off-by: Sumit Garg 
Link: https://lore.kernel.org/r/20260702115835.167602-4-sumit.garg@kernel.org
Signed-off-by: Bjorn Andersson

firmware: qcom_scm: Migrate to generic PAS service

2026-07-09T19:12:58+00:00

With the availability of generic PAS service, let's add SCM calls as
a backend to keep supporting legacy QTEE interfaces. The exported
qcom_scm* wrappers will get dropped once all the client drivers get
migrated as part of future patches.

Tested-by: Mukesh Ojha  # Lemans
Reviewed-by: Harshal Dev 
Tested-by: Vignesh Viswanathan  # IPQ9650
Reviewed-by: Konrad Dybcio 
Signed-off-by: Sumit Garg 
Link: https://lore.kernel.org/r/20260702115835.167602-3-sumit.garg@kernel.org
Signed-off-by: Bjorn Andersson

firmware: qcom: Add a generic PAS service

2026-07-09T19:12:58+00:00

Qcom platforms has the legacy of using non-standard SCM calls
splintered over the various kernel drivers. These SCM calls aren't
compliant with the standard SMC calling conventions which is a
prerequisite to enable migration to the FF-A specifications from Arm.

OP-TEE as an alternative trusted OS to Qualcomm TEE (QTEE) can't
support these non-standard SCM calls. And even for newer architectures
using S-EL2 with Hafnium support, QTEE won't be able to support SCM
calls either with FF-A requirements coming in. And with both OP-TEE
and QTEE drivers well integrated in the TEE subsystem, it makes further
sense to reuse the TEE bus client drivers infrastructure.

The added benefit of TEE bus infrastructure is that there is support
for discoverable/enumerable services. With that client drivers don't
have to manually invoke a special SCM call to know the service status.

So enable the generic Peripheral Authentication Service (PAS) provided
by the firmware. It acts as the common layer with different TZ
backends plugged in whether it's an SCM implementation or a proper
TEE bus based PAS service implementation.

Reviewed-by: Mukesh Ojha 
Tested-by: Mukesh Ojha  # Lemans
Reviewed-by: Harshal Dev 
Tested-by: Vignesh Viswanathan  # IPQ9650
Signed-off-by: Sumit Garg 
Reviewed-by: Konrad Dybcio 
Link: https://lore.kernel.org/r/20260702115835.167602-2-sumit.garg@kernel.org
Signed-off-by: Bjorn Andersson

firmware: qcom: scm: Refactor code to support multiple dload mode

2024-08-15T03:14:42+00:00

Currently on Qualcomm SoC, download_mode is enabled if
CONFIG_QCOM_SCM_DOWNLOAD_MODE_DEFAULT is selected or
passed a boolean value from command line.

Refactor the code such that it supports multiple download
modes and drop CONFIG_QCOM_SCM_DOWNLOAD_MODE_DEFAULT config
instead, give interface to set the download mode from
module parameter while being backword compatible at the
same time.

Signed-off-by: Mukesh Ojha 
Link: https://lore.kernel.org/r/20240715155655.1811178-1-quic_mojha@quicinc.com
Signed-off-by: Bjorn Andersson

firmware: qcom: tzmem: don't ask about allocator mode when not enabled

2024-07-17T00:35:45+00:00

The Qualcomm firmware code shouldn't ask about what memory allocator
mode should be used when the code isn't even enabled.

Get rid of pointless config-time question.

Link: https://lore.kernel.org/all/CAHk-=wg+38EHPKGou1MqXwAAXC30cM8sMgZAGnZ7TcFO4L9J2w@mail.gmail.com/
Signed-off-by: Linus Torvalds

firmware: qcom: tzmem: enable SHM Bridge support

2024-06-23T21:08:21+00:00

SHM Bridge is a safety mechanism allowing to limit the amount of memory
shared between the kernel and the TrustZone to regions explicitly marked
as such.

Add a variant of the tzmem allocator that configures the memory pools as
SHM bridges. It also enables the SHM bridge globally so non-SHM bridge
memory will no longer work with SCM calls.

If enabled at build-time, it will still be checked for availability at
run-time. If the architecture doesn't support SHM Bridge, the allocator
will fall back to the generic mode.

Signed-off-by: Bartosz Golaszewski 
Tested-by: Andrew Halaney  # sc8280xp-lenovo-thinkpad-x13s
Tested-by: Deepti Jaggi  #sa8775p-ride
Reviewed-by: Elliot Berman 
Link: https://lore.kernel.org/r/20240527-shm-bridge-v10-11-ce7afaa58d3a@linaro.org
Signed-off-by: Bjorn Andersson

firmware: qcom: scm: enable the TZ mem allocator

2024-06-23T21:08:04+00:00

Select the TrustZone memory allocator in Kconfig and create a pool of
memory shareable with the TrustZone when probing the SCM driver.

This will allow a gradual conversion of all relevant SCM calls to using
the dedicated allocator.

The policy used for the pool is "on-demand" and the initial size is 0
as - depending on the config - it's possible that no SCM calls needing
to allocate memory will be called. The sizes of possible allocations also
vary substiantially further warranting the "on-demand" approach.

Signed-off-by: Bartosz Golaszewski 
Reviewed-by: Andrew Halaney 
Tested-by: Andrew Halaney  # sc8280xp-lenovo-thinkpad-x13s
Tested-by: Deepti Jaggi  #sa8775p-ride
Reviewed-by: Elliot Berman 
Link: https://lore.kernel.org/r/20240527-shm-bridge-v10-3-ce7afaa58d3a@linaro.org
Signed-off-by: Bjorn Andersson

firmware: qcom: add a dedicated TrustZone buffer allocator

2024-06-23T21:08:04+00:00

We have several SCM calls that require passing buffers to the TrustZone
on top of the SMC core which allocates memory for calls that require
more than 4 arguments.

Currently every user does their own thing which leads to code
duplication. Many users call dma_alloc_coherent() for every call which
is terribly unperformant (speed- and size-wise).

Provide a set of library functions for creating and managing pools of
memory which is suitable for sharing with the TrustZone, that is:
page-aligned, contiguous and non-cachable as well as provides a way of
mapping of kernel virtual addresses to physical space.

Make the allocator ready for extending with additional modes of operation
which will allow us to support the SHM bridge safety mechanism once all
users convert.

Signed-off-by: Bartosz Golaszewski 
Reviewed-by: Andrew Halaney 
Tested-by: Andrew Halaney  # sc8280xp-lenovo-thinkpad-x13s
Tested-by: Deepti Jaggi  #sa8775p-ride
Reviewed-by: Elliot Berman 
Link: https://lore.kernel.org/r/20240527-shm-bridge-v10-2-ce7afaa58d3a@linaro.org
Signed-off-by: Bjorn Andersson

firmware: qcom: move Qualcomm code into its own directory

2023-10-22T16:14:54+00:00

We're getting more and more qcom specific .c files in drivers/firmware/
and about to get even more. Create a separate directory for Qualcomm
firmware drivers and move existing sources in there.

Signed-off-by: Bartosz Golaszewski 
Acked-by: Elliot Berman 
Reviewed-by: Krzysztof Kozlowski 
Reviewed-by: Maximilian Luz 
Tested-by: Andrew Halaney  # sc8280xp-lenovo-thinkpad-x13s
Link: https://lore.kernel.org/r/20231017092732.19983-2-brgl@bgdev.pl
Signed-off-by: Bjorn Andersson