TrustedFirmware Git Browser
Code Review Sign In
review.trustedfirmware.org / hafnium / hafnium.git / 7011b5a7caa90b8cfb0950ea0a15a36b2aac9c30
commit7011b5a7caa90b8cfb0950ea0a15a36b2aac9c30[log] [tgz]
authorDaniel Boulby <daniel.boulby@arm.com>Tue Oct 15 18:27:26 2024 +0100
committerDaniel Boulby <daniel.boulby@arm.com>Fri Dec 27 16:17:36 2024 +0000
treed8dc1739c0600dc1c2089cc12fc7a868832703b6
parenta483e3ba01ba4dcf088408aaf7b7924a83c17cbd [diff]
feat(ipi): enable multiple SP to send IPIs to the same CPU

For each CPU keep a list of the target_vcpus with pending IPIs. Such
that if multiple SPs target vCPUs on the same physical CPU all the
target vCPUs will receive the interrupt. When a physical IPI IRQ is
received we forward the IPI to the current vCPU if it has a pending IPI
and then for any vCPUs with pending IPIs on the CPU we inject the
interrupt and send one SRI for them all.

Signed-off-by: Daniel Boulby <daniel.boulby@arm.com>
Change-Id: I47c496d79b47fde1e906b11028fd0637e6b1a011
7 files changed
tree: d8dc1739c0600dc1c2089cc12fc7a868832703b6
  1. .vscode/
  2. build/
  3. docs/
  4. inc/
  5. kokoro/
  6. project/
  7. src/
  8. test/
  9. third_party/
  10. vmlib/
  11. prebuilts
  12. .clang-format
  13. .clang-tidy
  14. .gitignore
  15. .gitmodules
  16. .gn
  17. .readthedocs.yaml
  18. AUTHORS
  19. BUILD.gn
  20. CONTRIBUTING.md
  21. dco.txt
  22. LICENSE
  23. Makefile
  24. navbar.md
  25. pyproject.toml
  26. README.md
README.md

Hafnium

Hafnium is the Secure Partition Manager(SPM) reference implementation, following the Arm's Firmware Framework specification.

It leverages Arm's virtualization extensions in the secure world of Arm's A class of devices (feature introduced with Armv8.4 FEAT_SEL2) to allow multiple Trusted OSes or Applications to run concurrently, inside the Trusted Execution Environment, each running as a Secure Partition (SP). Its main goal is to control the system access given to Trusted OSes, and serve as a mediator to the rest of the system.

For example, it limits the memory use, and handles all system calls from Trusted OS. Thus the SPM can enforce spacial isolation, and enforce some level of access control, protecting other critical system resources such as: the secure monitor, the normal world software stack, the SPM itself and other SPs/Trusted Applications. Other important features are: secure interrupt handling, device assignment, inter-partition communication and with the Normal World Software stack, also known as Rich Execution Environment (REE).

The following diagram shows an overview of a typical aarch64-based system, and where Hafnium fits:

Hafnium Architecture

Get in touch and keep up-to-date at:

See feature requests and bugs through github.

Documentation

To find more about Hafnium, view the full documentation. It includes valuable resources such as: Getting Started guide, Threat Model, and other documentation.