Hi,
On 12/16/2014 08:39 AM, chirag garg wrote:
Hi all,
I am trying to run *tz_vmm* script on the *imx6 platform*. In which I have tried to put Genode (without trustzone) OS image instead of linux image as a guest OS which is configured according to normal world. we changed the CSU also according to imx6 security manual. So now we are getting the following error :
Starting kernel ...
kernel initialized Genode 14.08 int main(): --- create local services --- Core virtual memory allocator
Allocator 101318e4 dump: Block: [00001000,00002000) size=00001000 avail=00000000 max_avail=00000000 Block: [00002000,00003000) size=00001000 avail=00000000 max_avail=00000000 Block: [00003000,00004000) size=00001000 avail=00000000 max_avail=ef9c1000 Block: [00004000,00005000) size=00001000 avail=00000000 max_avail=00000000 Block: [00005000,00006000) size=00001000 avail=00000000 max_avail=00000000 Block: [00006000,10001000) size=0fffb000 avail=0fffb000 max_avail=ef9c1000 Block: [1062f000,ffff0000) size=ef9c1000 avail=ef9c1000 max_avail=ef9c1000 => mem_size=4288417792 (4089 MB) / mem_avail=4288397312 (4089 MB)
RAM memory allocator
Allocator 10130888 dump: Block: [10000000,10001000) size=00001000 avail=00000000 max_avail=00000000 Block: [1062f000,10630000) size=00001000 avail=00000000 max_avail=00000000 Block: [10630000,10631000) size=00001000 avail=00000000 max_avail=00000000 Block: [10631000,10632000) size=00001000 avail=00000000 max_avail=1f9cd000 Block: [10632000,10633000) size=00001000 avail=00000000 max_avail=00000000 Block: [10633000,30000000) size=1f9cd000 avail=1f9cd000 max_avail=1f9cd000 => mem_size=530391040 (505 MB) / mem_avail=530370560 (505 MB)
IO memory allocator
Allocator 1013294c dump: Block: [00000000,00a00000) size=00a00000 avail=00a00000 max_avail=00a00000 Block: [00a02000,020d0000) size=016ce000 avail=016ce000 max_avail=016ce000 Block: [020d4000,021c0000) size=000ec000 avail=000ec000 max_avail=20000000 Block: [021c1000,021e8000) size=00027000 avail=00027000 max_avail=00027000 Block: [021ec000,10000000) size=0de14000 avail=0de14000 max_avail=20000000 Block: [30000000,50000000) size=20000000 avail=20000000 max_avail=20000000 => mem_size=805261312 (767 MB) / mem_avail=805261312 (767 MB)
IRQ allocator
Allocator 101339a8 dump: Block: [00000000,00000400) size=00000400 avail=00000400 max_avail=00000400 => mem_size=1024 (0 MB) / mem_avail=1024 (0 MB)
int main(): --- start init --- int main(): transferred 505 MB to init int main(): --- init created, waiting for exit condition --- [init] Could not open file "ld.lib.so http://ld.lib.so" [init] parent provides [init] service "ROM" [init] service "RAM" [init] service "IRQ" [init] service "IO_MEM" [init] service "CAP" [init] service "PD" [init] service "RM" [init] service "CPU" [init] service "LOG" [init] service "SIGNAL" [init] service "VM" [init] child "tz_vmm" [init] RAM quota: 3932160 [init] ELF binary: tz_vmm [init] priority: 0 [init -> tz_vmm] Start virtual machine [init -> tz_vmm] *Vm tried to access 30008040 which isn't allowed* [init -> tz_vmm] Cpu state: [init -> tz_vmm] Register Virt Phys [init -> tz_vmm] --------------------------------- [init -> tz_vmm] r0 = 00000000 [00000000] [init -> tz_vmm] r1 = 00000eb9 [00000000] [init -> tz_vmm] r2 = 30000100 [00000000] [init -> tz_vmm] r3 = 00000000 [00000000] [init -> tz_vmm] r4 = 00000000 [00000000] [init -> tz_vmm] r5 = 00000000 [00000000] [init -> tz_vmm] r6 = 00000000 [00000000] [init -> tz_vmm] r7 = 00000000 [00000000] [init -> tz_vmm] r8 = 00000000 [00000000] [init -> tz_vmm] r9 = 00000000 [00000000] [init -> tz_vmm] r10 = 00000000 [00000000] [init -> tz_vmm] r11 = 00000000 [00000000] [init -> tz_vmm] r12 = 00000000 [00000000] [init -> tz_vmm] sp = 00000000 [00000000] [init -> tz_vmm] lr = 00000000 [00000000] [init -> tz_vmm] ip = 30008000 [00000000] [init -> tz_vmm] cpsr = 00000093 [init -> tz_vmm] sp_und = 00000000 [00000000] [init -> tz_vmm] lr_und = 00000000 [00000000] [init -> tz_vmm] spsr_und = 00000000 [00000000] [init -> tz_vmm] sp_svc = 00000000 [00000000] [init -> tz_vmm] lr_svc = 00000000 [00000000] [init -> tz_vmm] spsr_svc = 00000000 [00000000] [init -> tz_vmm] sp_abt = 00000000 [00000000] [init -> tz_vmm] lr_abt = 00000000 [00000000] [init -> tz_vmm] spsr_abt = 00000000 [00000000] [init -> tz_vmm] sp_irq = 00000000 [00000000] [init -> tz_vmm] lr_irq = 00000000 [00000000] [init -> tz_vmm] spsr_irq = 00000000 [00000000] [init -> tz_vmm] sp_fiq = 00000000 [00000000] [init -> tz_vmm] lr_fiq = 00000000 [00000000] [init -> tz_vmm] spsr_fiq = 00000000 [00000000] [init -> tz_vmm] ttbr0 = 112a1041 [init -> tz_vmm] ttbr1 = 93a2c043 [init -> tz_vmm] ttbrc = 00000000 [init -> tz_vmm] dfar = 00000000 [00000000] [init -> tz_vmm] *exception = data_abort* [init -> tz_vmm] *Could not handle data-abort will exit!* [init -> tz_vmm] *Destructing undissolved signal context*
I divided the RAM into two portions: 0x10000000-0x30000000 for secure world and 0x30000000-0x50000000 for Normal world.
After VM start, we are getting "*VM tried to access 30008040 which isn't allowed" *error. Also, tried to compile the image by changing this address to 0x10001000 in the file spec_hw_imx6.mk http://spec_hw_imx6.mk file (for the normal world OS image). We get the same error as above but only with the memory address changed in the error message. Kindly let us know the possible reasons behind getting this error.
If you want to run Genode's hw kernel as normal world OS beside the secure world version, you have to link it to the right address. For doing so, use the LD_TEXT_ADDR variable in the spec file you already mentioned. Nevertheless, of course you have to set the instruction pointer according to the binary's entrypoint which is probably not 0x30008000 as long as you didn't linked the kernel to that address.
The next question would be: how do you load the Genode normal world guest? Do you use an ELF image, a raw binary, or an u-boot image? The original VMM implementation only handles a raw Linux kernel binary, no ELF nor u-boot image.
I wonder what code base do you used for implementing the VMM for your example? In the mainline Genode repository there is one for i.MX53 and one for Versatile Express. Although both are looking quite similar they are using completely different TrustZone-aware devices of the related SoCs to provide protection. When looking at your print messages it seems you are using the Versatile Express code, do you?
Regards Stefan
Thanks in advance.
Regards
Chirag Garg IIT Madras , Rise Lab
Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server from Actuate! Instantly Supercharge Your Business Reports and Dashboards with Interactivity, Sharing, Native Excel Exports, App Integration & more Get technology previously reserved for billion-dollar corporations, FREE http://pubads.g.doubleclick.net/gampad/clk?id=164703151&iu=/4140/ostg.cl...
genode-main mailing list genode-main@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/genode-main