Change-Id: I0adb2c6bf21e840d6b795292357f3615361b767e
Signed-off-by: Yann Gautier <yann.gautier@st.com>

Avoid possible lock when the capture is not stable.
Base the capture value to a define threshold.

Signed-off-by: Lionel Debieve <lionel.debieve@st.com>
Change-Id: I11814031ba8ea17bd648e4829c86444c2a1b6e4a
Reviewed-on: https://gerrit.st.com/c/mpu/oe/st/tf-a/+/170651


Reviewed-by: CITOOLS <smet-aci-reviews@lists.codex.cro.st.com>
Reviewed-by: CIBUILD <smet-aci-builds@lists.codex.cro.st.com>
Reviewed-by: Yann GAUTIER <yann.gautier@st.com>

Use errno values, or the return of called functions, instead of -1.

Change-Id: If7b53de5cbfb4d2c9979bce0e594dd92bf07a77a
Signed-off-by: Yann Gautier <yann.gautier@st.com>
Reviewed-on: https://gerrit.st.com/c/mpu/oe/st/tf-a/+/161571


Reviewed-by: CITOOLS <smet-aci-reviews@lists.codex.cro.st.com>
Reviewed-by: CIBUILD <smet-aci-builds@lists.codex.cro.st.com>
Reviewed-by: Etienne CARRIERE <etienne.carriere@st.com>
Reviewed-by: Lionel DEBIEVE <lionel.debieve@st.com>

A variable hdr_sz is created in stm32image_partition_read() function.
It just represents the size of the stm32 image header but it really
increases the readability of the function.

Change-Id: I95ec62a78a4b6c6a75b0d8c8aa0faef8bee424da
Signed-off-by: Yann Gautier <yann.gautier@st.com>
Reviewed-on: https://gerrit.st.com/c/mpu/oe/st/tf-a/+/170469


Reviewed-by: CITOOLS <smet-aci-reviews@lists.codex.cro.st.com>
Reviewed-by: Etienne CARRIERE <etienne.carriere@st.com>

The backup partition will be checked only by the default
load process. It is removed from io_stm32image.c
to clarify the load processing.

Signed-off-by: Lionel Debieve <lionel.debieve@st.com>
Change-Id: Ia5b155e7ffd958923c6078d935576af749c91b1c
Reviewed-on: https://gerrit.st.com/c/mpu/oe/st/tf-a/+/159359


Reviewed-by: CITOOLS <smet-aci-reviews@lists.codex.cro.st.com>
Reviewed-by: CIBUILD <smet-aci-builds@lists.codex.cro.st.com>
Reviewed-by: Yann GAUTIER <yann.gautier@st.com>

Use plat_try_next_boot_source() to look for a backup
partition if available.

Signed-off-by: Lionel Debieve <lionel.debieve@st.com>
Change-Id: I3e3a3ee42c81d0195cad16432754ffa3e9f50e3f
Reviewed-on: https://gerrit.st.com/c/mpu/oe/st/tf-a/+/159358


Reviewed-by: CITOOLS <smet-aci-reviews@lists.codex.cro.st.com>
Reviewed-by: CIBUILD <smet-aci-builds@lists.codex.cro.st.com>
Reviewed-by: Yann GAUTIER <yann.gautier@st.com>

Make sure that i2c->i2c_state is correctly initialized
with I2C_STATE_RESET value this avoid hi2c->lock to not
be set to 0 when calling stm32_i2c_init during platform
suspend/resume operations.

Signed-off-by: Benjamin Gaignard <benjamin.gaignard@st.com>
Change-Id: I3b4c1f9115589325eb256789a1764c322741db7d
Reviewed-on: https://gerrit.st.com/c/mpu/oe/st/tf-a/+/161037


Reviewed-by: CITOOLS <smet-aci-reviews@lists.codex.cro.st.com>
Reviewed-by: CIBUILD <smet-aci-builds@lists.codex.cro.st.com>
Reviewed-by: Nicolas LE BAYON <nicolas.le.bayon@st.com>
Reviewed-by: Yann GAUTIER <yann.gautier@st.com>

Enable TRUSTED_BOARD_BOOT. This change removes calls to
stm32mp_check_header() and stm32mp_auth_image() when boot images
are loaded since images are now verified from the authentication
framework.

Change-Id: Iec5b645e1581543c99ae59bdb4dd033c577f2295
Signed-off-by: Nicolas Toromanoff <nicolas.toromanoff@st.com>
Signed-off-by: Lionel Debieve <lionel.debieve@st.com>

Replace hard-coded regulator names by stm32mp_get_cpu_supply_name()
platform service which gets CPU regulator name from DT and finds its
related supply name.

Change-Id: I8a0ed4cbb9c4df729ecda95220a24b9c2f429d0f
Signed-off-by: Nicolas Le Bayon <nicolas.le.bayon@st.com>

dt_get_cpu_regulator_name() parses DT and retrieves the CPU regulator
name, so that software is easily able to get/set its voltage.
CPU0 is taken as reference, because it's active in both single and multi
core configurations.

Change-Id: If155547f4de5d6fb0f1407433ec87fe09e3938c9
Signed-off-by: Nicolas Le Bayon <nicolas.le.bayon@st.com>

dt_pmic_find_supply() finds in the FDT the supply name related to a
regulator name.
pmic_set_regulator_min_voltage() sets target supply to its min voltage
specified in the FDT by property "regulator-min-microvolt".

Change-Id: Ic5fcabb7b2353deb1af20b7cc76e5bceca70bc77
Signed-off-by: Nicolas Le Bayon <nicolas.le.bayon@st.com>
Reviewed-on: https://gerrit.st.com/c/mpu/oe/st/tf-a/+/160673


Reviewed-by: CITOOLS <smet-aci-reviews@lists.codex.cro.st.com>
Reviewed-by: CIBUILD <smet-aci-builds@lists.codex.cro.st.com>
Reviewed-by: Yann GAUTIER <yann.gautier@st.com>

Alignment with Kernel DT bindings.

Change-Id: Iae246dbc9c55c4ed7e52ccbee1d77e7e478c1dd9
Signed-off-by: Gabriel Fernandez <gabriel.fernandez@st.com>
Reviewed-on: https://gerrit.st.com/c/mpu/oe/st/tf-a/+/160719


Reviewed-by: CITOOLS <smet-aci-reviews@lists.codex.cro.st.com>
Reviewed-by: CIBUILD <smet-aci-builds@lists.codex.cro.st.com>
Reviewed-by: Yann GAUTIER <yann.gautier@st.com>
Tested-by: Yann GAUTIER <yann.gautier@st.com>

In pmic_operate(), "regulators" node value must be checked before entering
in the fdt_for_each_subnode loop.

Change-Id: I1460cd24ec56ec47ab644f396b71b92973e75fb4
Signed-off-by: Nicolas Le Bayon <nicolas.le.bayon@st.com>
Reviewed-on: https://gerrit.st.com/c/mpu/oe/st/tf-a/+/160672


Reviewed-by: CITOOLS <smet-aci-reviews@lists.codex.cro.st.com>
Reviewed-by: CIBUILD <smet-aci-builds@lists.codex.cro.st.com>
Reviewed-by: Yann GAUTIER <yann.gautier@st.com>

Define DDR Self Refresh (SR) mode read/set/save/restore API functions.
At the end of DDR initialization in BL2, switch SR mode to the one
indicated by DDR updated registers. Save mode at BL32 init.
When entering in cstop/cstandby, switch to SSR (Software).
When exiting, go back to the saved mode.

Change-Id: Iadd795d20fdea2d7be30c1ba6f02eb172e33f4b1
Signed-off-by: Nicolas Le Bayon <nicolas.le.bayon@st.com>

Remove unused stm32mp_ddr_supports_ssr_asr(), since this support is
enabled by DDR settings defined in DT.

Change-Id: I1759e2d6009539e2dfcaa1c4100da72368db8aa4
Signed-off-by: Nicolas Le Bayon <nicolas.le.bayon@st.com>
Reviewed-on: https://gerrit.st.com/c/mpu/oe/st/tf-a/+/160620


Reviewed-by: Yann GAUTIER <yann.gautier@st.com>
Reviewed-by: CITOOLS <smet-aci-reviews@lists.codex.cro.st.com>
Reviewed-by: CIBUILD <smet-aci-builds@lists.codex.cro.st.com>
Reviewed-by: Etienne CARRIERE <etienne.carriere@st.com>

DDR Self Refresh mode capabilities are related to DDR settings defined
in DT and not to DDR type. So remove checking this before executing a
Self Refresh mode transition.

Change-Id: I3e0b55304044de323f72fe12ee0d6fc9e191c183
Signed-off-by: Nicolas Le Bayon <nicolas.le.bayon@st.com>
Reviewed-on: https://gerrit.st.com/c/mpu/oe/st/tf-a/+/160619


Reviewed-by: CITOOLS <smet-aci-reviews@lists.codex.cro.st.com>
Reviewed-by: CIBUILD <smet-aci-builds@lists.codex.cro.st.com>
Reviewed-by: Yann GAUTIER <yann.gautier@st.com>

Change-Id: Iad0dc8dda5f2f7e30a2397e1b096ec7ca6a042b2
Signed-off-by: Yann Gautier <yann.gautier@st.com>

Change-Id: I0816efd1fa43e4982e0d6ccaf0051835abaebac5
Signed-off-by: Yann Gautier <yann.gautier@st.com>

This was previously done in ddr_standby_sr_entry().
It is now done as a separate function.
This will ease the DDR Self-Refresh entry for platforms having monitor in
DDR.

Change-Id: I69ccf0f33d20584579626b973a4295ede351a803
Signed-off-by: Yann Gautier <yann.gautier@st.com>
Signed-off-by: Nicolas Toromanoff <nicolas.toromanoff@st.com>

AXI, MPU and MCU clocks are always on, put them in the list in the function
clock_is_always_on().

Change-Id: I969a442274d2da6c59636f3293de1c31b4c8e3b1
Signed-off-by: Yann Gautier <yann.gautier@st.com>

The function stm32mp1_clk_init() returns an int. Return an error value
if the device tree is not found.

Change-Id: I422d5fea46c4d63d55a5b62e1db154c1f53f41b7
Signed-off-by: Yann Gautier <yann.gautier@st.com>

Instead of transmitting an 'enum stm32mp_osc_id', just send
directly the clock name with a 'const char *'

Change-Id: I866b05cbb1685a9b9f80e63dcd5ba7b1d35fc932
Signed-off-by: Gabriel Fernandez <gabriel.fernandez@st.com>
Reviewed-on: https://gerrit.st.com/c/mpu/oe/st/tf-a/+/170250


Reviewed-by: CITOOLS <smet-aci-reviews@lists.codex.cro.st.com>
Reviewed-by: Etienne CARRIERE <etienne.carriere@st.com>
Reviewed-by: Lionel DEBIEVE <lionel.debieve@st.com>

Don't switch to MPUDIV/PLL1P in suspend/resume mode.
Non-secure is in charge of requesting MPU lowest OPP when suspending.

Change-Id: Iad47122c25d6f03247b7754a77e8d415c3720850
Signed-off-by: Gabriel Fernandez <gabriel.fernandez@st.com>

When non-secure OS asks for a change of the MPU frequency,check that MPU
divider can be used, instead of changing the VCO of the PLL.

Change-Id: I3ceda67731705376952cc2a395a525393f00554e
Signed-off-by: Gabriel Fernandez <gabriel.fernandez@st.com>
Reviewed-on: https://gerrit.st.com/c/mpu/oe/st/tf-a/+/159548


Reviewed-by: CITOOLS <smet-aci-reviews@lists.codex.cro.st.com>
Reviewed-by: CIBUILD <smet-aci-builds@lists.codex.cro.st.com>
Reviewed-by: Etienne CARRIERE <etienne.carriere@st.com>
Reviewed-by: Yann GAUTIER <yann.gautier@st.com>

Use a switch/case with all the timer clocks, instead of checking their
relative indexes.

Change-Id: If41338c38c81ca370ec149f8551bbb73a5b08a9d
Signed-off-by: Yann Gautier <yann.gautier@st.com>
Signed-off-by: Gabriel Fernandez <gabriel.fernandez@st.com>

MPUDIV dividers are stored in a constant array, under bit shifts form.
They must be used in this way by the clock driver.

Change-Id: If758f7a4048eff956067a10a42ab0983a20a000d
Signed-off-by: Gabriel Fernandez <gabriel.fernandez@st.com>
Signed-off-by: Nicolas Le Bayon <nicolas.le.bayon@st.com>
Reviewed-on: https://gerrit.st.com/c/mpu/oe/st/tf-a/+/159542


Reviewed-by: CITOOLS <smet-aci-reviews@lists.codex.cro.st.com>
Reviewed-by: CIBUILD <smet-aci-builds@lists.codex.cro.st.com>
Reviewed-by: Lionel DEBIEVE <lionel.debieve@st.com>
Reviewed-by: Yann GAUTIER <yann.gautier@st.com>

Remove the IMAGE_BL2 flag that was restricting the GPIO banks clock gating
in BL2 stage. The GPIO banks clocks can now be accessed from BL32.

Change-Id: Ia9f5261e2f267ec0e7aec30ae9f8ff2244251486
Signed-off-by: Yann Gautier <yann.gautier@st.com>
Reviewed-on: https://gerrit.st.com/c/mpu/oe/st/tf-a/+/176217


Reviewed-by: CITOOLS <smet-aci-reviews@lists.codex.cro.st.com>
Reviewed-by: Lionel DEBIEVE <lionel.debieve@st.com>
Reviewed-by: CIBUILD <smet-aci-builds@lists.codex.cro.st.com>
Tested-by: Lionel DEBIEVE <lionel.debieve@st.com>

Calibration uses the ARM counter which is 32 bit signed value.
Depending on the clock source, some required timing value cannot
be reached and must be limited to the INT32 max value.

Signed-off-by: Lionel Debieve <lionel.debieve@st.com>
Change-Id: If499d33b42c6abebd40b3d7947aa6f709fdeab8e
Reviewed-on: https://gerrit.st.com/c/mpu/oe/st/tf-a/+/171274


Reviewed-by: CITOOLS <smet-aci-reviews@lists.codex.cro.st.com>
Reviewed-by: Yann GAUTIER <yann.gautier@st.com>
Reviewed-by: CIBUILD <smet-aci-builds@lists.codex.cro.st.com>
Reviewed-by: Etienne CARRIERE <etienne.carriere@st.com>

If pinctrl is defined in device tree, add the tamper pin
configuration during the probe. It will manage or not
the potential out3 pin remap.

Signed-off-by: Lionel Debieve <lionel.debieve@st.com>
Change-Id: I06bb4f1b1f2a189fa2df949d9128ec0e892b35e7
Reviewed-on: https://gerrit.st.com/c/mpu/oe/st/tf-a/+/176240


Reviewed-by: CITOOLS <smet-aci-reviews@lists.codex.cro.st.com>
Reviewed-by: CIBUILD <smet-aci-builds@lists.codex.cro.st.com>
Reviewed-by: Yann GAUTIER <yann.gautier@st.com>

Allow to configure the retram state in standby-ddr-sr from
the device-tree. This is realized by introducing a new binding
property to stm32mp1 pwr node: st,retram-enabled-in-standby-ddr-sr.

Signed-off-by: Pascal Paillet <p.paillet@st.com>
Change-Id: Iacd15321bce06e071a82bdfa05e4b63c3bf8c4fa

Adding the MCU hold boot management through a SCMI dedicated
reset domain. Remove the associated RCC SMC service.

Minor: Fix the panic when trying to checking access to avoid
non-secure world panic trigger.

Signed-off-by: Lionel Debieve <lionel.debieve@st.com>
Change-Id: I70fe10602eaa0e76ef2aad9cd8c1b0454dae190a

Change-Id: I32ed528a8eeca2ae61aa0406e4c4578df61190ab
Signed-off-by: Yann Gautier <yann.gautier@st.com>
Reviewed-on: https://gerrit.st.com/c/mpu/oe/st/tf-a/+/175775


Reviewed-by: CITOOLS <smet-aci-reviews@lists.codex.cro.st.com>

Use the newly created function stm32mp_boot_action_is_wakeup_from_standby()
to check if the boot is a return from standby.

Change-Id: Idf16978ed43804c6418dbee4f57f1695d43d1b59
Signed-off-by: Yann Gautier <yann.gautier@st.com>

Some parameters from BootROM boot context can be required after boot.
To save space in SYSRAM, this context can be overwritten during images
load sequence. The needed information is then saved in local variables.
Another helper is also created to check if the boot is a return from
STANDBY or CSTANDBY.

Change-Id: I5e1ad4630ccf78480f415a0a83939005ae67729e
Signed-off-by: Yann Gautier <yann.gautier@st.com>

Device Tree address is now a parameter for dt_open_and_check() function.
This will allow better flexibility when introducing PIE.
The fdt pointer is now only assigned if the given address holds
a valid device tree file. This allows removing the fdt_checked variable,
as we now check fdt is not null.

Change-Id: I04cbb2fc05c9c711ae1c77d56368dbeb6dd4b01a
Signed-off-by: Yann Gautier <yann.gautier@st.com>
Reviewed-on: https://gerrit.st.com/c/mpu/oe/st/tf-a/+/175523


Reviewed-by: CITOOLS <smet-aci-reviews@lists.codex.cro.st.com>

This mapping is done to compute the DDR size and make some access tests.
The TZC400 configuration is also updated to reflect this.

Change-Id: Ic5ec614b218f733796feeab1cdc425d28cc7c103
Signed-off-by: Yann Gautier <yann.gautier@st.com>
Reviewed-on: https://gerrit.st.com/c/mpu/oe/st/tf-a/+/175522


Reviewed-by: CITOOLS <smet-aci-reviews@lists.codex.cro.st.com>
Reviewed-by: Lionel DEBIEVE <lionel.debieve@st.com>

Add new static functions to factorize code in stm32mp1_security.c.
New functions are also created and exported to easily configure TZC400.

Change-Id: Ifa5a1aaf7c56c25dba9a0ab8e985496d7cb06990
Signed-off-by: Yann Gautier <yann.gautier@st.com>

We have to enable kernel clocks before entering in stop mode
and clear them at resume.
In standby mode stm32mp1_clock_stopmode_save() is called before,
then it's not necessary to enable them in stm32mp1_clock_suspend().

Change-Id: I0099028be5ea036cb8fcbd3bc868b5e73eec76b3
Signed-off-by: Gabriel Fernandez <gabriel.fernandez@st.com>
Reviewed-on: https://gerrit.st.com/c/mpu/oe/st/tf-a/+/159064


Reviewed-by: CITOOLS <smet-aci-reviews@lists.codex.cro.st.com>
Reviewed-by: CIBUILD <smet-aci-builds@lists.codex.cro.st.com>
Reviewed-by: Lionel DEBIEVE <lionel.debieve@st.com>
Reviewed-by: Yann GAUTIER <yann.gautier@st.com>
Reviewed-by: Erwan LE RAY <erwan.leray@st.com>
Tested-by: Erwan LE RAY <erwan.leray@st.com>

Enable all the tampers around monitoring control.
Update also the platform max value to 6 internal tampers.

Signed-off-by: Lionel Debieve <lionel.debieve@st.com>
Change-Id: Ifba910ec3c6d3dd6cb8f014d310eeccdc446430e

In case of chip closed, the debug must not be opened. It impacts
the chip id and chip version. In case of chip closed, a default
chip version is used to avoid opening the debugger for software
access.

Signed-off-by: Lionel Debieve <lionel.debieve@st.com>
Change-Id: I7477881881bcd2f520614aea46247379f359a63c
Reviewed-on: https://gerrit.st.com/c/mpu/oe/st/tf-a/+/159073


Reviewed-by: CITOOLS <smet-aci-reviews@lists.codex.cro.st.com>
Reviewed-by: CIBUILD <smet-aci-builds@lists.codex.cro.st.com>
Reviewed-by: Yann GAUTIER <yann.gautier@st.com>