Accessing GPIO from TA in Raspberry Pi 3 #1496

utkarshagrawalwsu · 2017-04-24T21:02:59Z

Hello,

I have been trying to access the Raspberry Pi3 GPIO from TA. What would be a secure manner to do so?

I tried using the sysfs method mentioned in the following link:
http://elinux.org/RPi_GPIO_Code_Samples#sysfs
But it requires the use of C file operations. Does OP-TEE support file operations in TA?

Thank You

The text was updated successfully, but these errors were encountered:

jforissier · 2017-04-24T22:29:47Z

I have been trying to access the Raspberry Pi3 GPIO from TA. What would be a secure manner to do so?

Do the GPIO stuff in a pseudo-TA (EL1), where you can access the hardware registers. The pseudo-TA can then be invoked from a client app or a user TA.

I tried using the sysfs method mentioned in the following link:
http://elinux.org/RPi_GPIO_Code_Samples#sysfs
But it requires the use of C file operations. Does OP-TEE support file operations in TA?

sysfs is a Linux (normal world) interface, so it obviously cannot work.

utkarshagrawalwsu · 2017-04-25T21:12:49Z

Hello @jforissier

Thank you for your response.

I don't have any experience to access a register directly from C. Though, let me try it and get back to you with it. Also, the link below(and some other search results) mentions about accessing GPIO through direct register access. It still uses file operation as open("/dev/mem", O_RDWR|O_SYNC). I wanted to know if it is still possible to access the GPIO this way, as there is no definition for open() function.
http://elinux.org/RPi_GPIO_Code_Samples#Direct_register_access

I was under the impression that the TA's can access resources in the normal world. Is there any way to do so from the TA? Or is there any other way to access the GPIO from the dynamic TA?

I appreciate your help with it.

jforissier · 2017-04-26T07:53:33Z

Also, the link below(and some other search results) mentions about accessing GPIO through direct register access. It still uses file operation as open("/dev/mem", O_RDWR|O_SYNC). I wanted to know if it is still possible to access the GPIO this way, as there is no definition for open() function.
http://elinux.org/RPi_GPIO_Code_Samples#Direct_register_access

No. A "dynamic" or "user" TA is not a regular Linux application. The runtime environment is very different (although some standard libc functions such as assert() or malloc() are available). In a TA, you are supposed to use the GlobalPlatform API only. There is no open() function. The normal world devices (/dev/*) are not accessible. You can't access the hardware (GPIO...) directly from a TA, because it is running in user mode (SEL0) and the hardware registers are not mapped to the TA virtual address space.

A pseudo-TA, however, allows hardware access. It is a bit of code that is statically linked with OP-TEE, runs in secure "kernel" mode (SEL1) and therefore may access physical addresses (hence the memory-mapped hardware registers). See also https://github.com/OP-TEE/optee_os/blob/master/documentation/optee_design.md#12-trusted-applications. For examples of pseudo-TAs, see https://github.com/OP-TEE/optee_os/tree/master/core/arch/arm/pta. There you could create an app that would access the GPIO as you wish, possibly similar to what is done in https://github.com/OP-TEE/optee_os/blob/master/core/arch/arm/plat-hikey/spi_test.c, and exposes a service that can be invoked from a client application in normal world or a dynamic TA.

Note that another option to control the hardware from a dynamic TA is to add a system call to the OP-TEE kernel, and invoke it from the TA. But it is not recommended because it involves extending the kernel/user interface (syscall, syscall wrapper, new function in libutee...).

I was under the impression that the TA's can access resources in the normal world. Is there any way to do so from the TA? Or is there any other way to access the GPIO from the dynamic TA?

No. Only indirect access is possible: as I said above, your dynamic TA may call a pseudo-TA specifically designed for that purpose, for instance.

utkarshagrawalwsu · 2017-04-26T21:09:38Z

@jforissier

Thank you for clarifying about the user and pseudo TA. I wrote my first pseudo TA(I have been working with user TA only since past few months), and was able to successfully expose a dummy service to the user TA. That's one step.

I looked at the spi_test.c, and honestly I could not understand much, as I do not have much low level programming experience. So please bear with me if I pose any dumb question.

I have been looking at some guides to directly access GPIO by writing your own driver:
http://sysprogs.com/VisualKernel/tutorials/raspberry/leddriver/
In the above instruction, at step 4, they do the following:
s_pGpioRegisters = (struct GpioRegisters *)__io_address(GPIO_BASE);
Where do I find the __io_address() function?

Right now all I am trying is to light up a LED from the pseudo TA.

Thank you again for your assistance.

jforissier · 2017-04-26T21:15:27Z

@vchong I think this is for you ;) Would you please share your experience re. HiKey GPIO programming in OP-TEE?

vchong · 2017-04-27T07:21:28Z

@utkarshagrawalwsu If I did my research correctly, rpi3 uses a broadcom bcm2837 soc (https://www.raspberrypi.org/documentation/hardware/raspberrypi/bcm2837). It seems like there's no spec (hardware datasheet) for the 2837, but the url says that its underlying architecture is identical to bcm2836 from rpi2 model b, which is identical to bcm2835 from rpi, which brings us to https://www.raspberrypi.org/documentation/hardware/raspberrypi/bcm2835/BCM2835-ARM-Peripherals.pdf. In section 6, you can see all the register addresses and values you would need to write to these registers in order to control the gpio functionalities.

I'm not familiar with the bcm283x, but basically, you would need to understand how these register works, e.g. if you want to configure gpio pin number 2 to be an output pin, what value do you need to write to configure a gpio pin as output (vs input), and to which register address you need to write that value to, i.e. which bit in which register address refers to pin 2. Then you will do this in your pseudo TA using write32() and friends functions from io.h in optee_os. See pl061_gpio.c for examples of how this is done in Hikey.

I actually couldn't find where the gpio driver for 2835 is in https://github.com/raspberrypi/linux :(, but you can find useful reference code in http://www.airspayce.com/mikem/bcm2835/, which is a straightforward (relatively simple) implementation of the above BCM2835-ARM-Peripherals.pdf, and port the necessary functions to your pseudo TA. The code there seems to be updated to rpi2 only so I'm not sure if it's a 1:1 match to rpi3. Most probably not, so you'll have to adjust the addresses, pin numbers, etc properly to adapt it to rpi3 (e.g. in bcm2835.h), but the basic functions and framework are there. There are a lot bit manipulations (shifting, masking, etc) in the code, common to most low level programming, which is why, again, you really have to understand how the register works first before you can understand the code. It will involve a fair amount of research and reading the specs and code, especially more so if you're new to this, so please take things one step at a time.

vchong · 2017-04-27T07:59:35Z

@utkarshagrawalwsu Once you're done with the above, to light up an LED from a GPIO software perspective, you would normally:

Find out the gpio pin number you need
Configure the function for that pin number as gpio. Usually this is the default. If so, you don't need to do this step. Other functions are like spi, i2c, uart, etc.
Disable interrupt on the pin if necessary, but maybe optional in most cases I think.
Configure the gpio pin as output. Usually the default is input.
Set the gpio pin level to high to light up the LED connected, or low to turn it off.

Steps 3-5 for the hikey platform are done in spi_test.c lines 51, 52 and 62 respectively, which was why you were referred to it earlier, but these are done through driver function calls which you might not want to worry about atm. For now, you would just use functions in io.h to write the appropriate values to the appropriate registers directly.

jforissier · 2017-04-27T08:25:41Z

@vchong thanks for doing all the research work, I'm sorry I am just realizing the OP is using rpi3 and not HiKey! Doh! ;)

vchong · 2017-04-27T08:48:00Z

@jforissier yep, np. ;) It was good info to find out and know.

utkarshagrawalwsu · 2017-04-28T00:10:06Z

@jforissier Thank you for introducing @vchong to the issue

Hey @vchong !
Thank you for your elaborate reply. Your research aligns with what I have found too.

I have come up with the following code to set GPIO pin 18 as output pin, and give it a high value.

// Set the GPIO Pin 18 in output mode
static void SetAsOutput() {
    // Because we are accessing GPIO 18,
    // we need base address for GPFSEL1
    vaddr_t base_addr_GPFSEL1 = 0x7E200004;

    // Bits 26-24 need to be cleared
    // 00 000 111 000 000 000 000 000 000 000 000
    uint32_t clearMask = 0x7000000;

    // Bits 26-24 need to be set to output mode 001
    // 00 000 001 000 000 000 000 000 000 000 000
    uint32_t enableWrite = 0x1000000;

    uint32_t data;

    data = read32(base_addr_GPFSEL1);
    data = data & ~clearMask;
    data = data | enableWrite;

    write32(data, base_addr_GPFSEL1);
}

// Set the GPIO Pin 18 with a high value
static void SetGPIOOutputValue() {
    // Because we are accessing GPIO 18,
    // we need base address for GPSET0
    vaddr_t base_addr_GPSET0 = 0x7E20001C;

    // Bit 18 needs to be cleared
    uint32_t clearMask = 0x40000;

    // Bit 18 needs to be set to 1
    uint32_t makeHigh = 0x40000;

    uint32_t data;

    data = read32(base_addr);
    data = data & ~clearMask;
    data = data | makeHigh;

    write32(data, base_addr_GPSET0);
}

The above code doesn't work though. The screen freezes for sometime and then the outputs as follows:
mmc0: timeout waiting for hardware interrupt

Just as a note, I invoke two commands in the pseudo TA from the host. The first command I invoke is similar to the hello world program and it is just to make sure that the pseudo TA calls are successful. The second command actually tries to play around with the GPIO stuff.

What base address should I use for the GPIO? Should it be the virtual address(0x3F000000 + 0x200000) or the physical address(0x7E200000)?

vchong · 2017-04-28T03:46:36Z

@utkarshagrawalwsu You're welcome! Sounds like you made good progress! :) I only browsed through the spec so can't say for sure if the bits selection is right or not (although it looks ok from a quick glance). You'll have to trial and error until you find the right combinations.

Off the top of my head, several things to look at.

mmc0: timeout waiting for hardware interrupt

Not sure if this is related, but is it possible to disable interrupt on the pin? I don't see any interrupt related registers for gpio, but they might be located elsewhere. There are mentions of gpio_int in the spec, but I didn't look further.

What base address should I use for the GPIO? Should it be the virtual address(0x3F000000 + 0x200000) or the physical address(0x7E200000)?

I wish the article explained how Dom managed to find out 0x3F200000 for rpi3, but it's not the va. It is actually the pa. 0x7E200000 is the bus address. Read Section 1, especially 1.2 and 1.3, of the spec too, not just the gpio section. The address mapping is multiple layered and hard to figure out (at least for me). I think the pa (0x3F200000) should be used, since there's no dma engines involved, but I might be wrong.

If using pa, and it doesn't work (you might get a core dump), you might also to consider trying something like:
register_phys_mem(MEM_AREA_IO_SEC, 0x3F200000, CORE_MMU_DEVICE_SIZE);

and translate the base address from pa to va before using them in your functions. Something like:

vaddr_t nsec_periph_base(paddr_t pa)
{
	if (cpu_mmu_enabled())
		return (vaddr_t)phys_to_virt(pa, MEM_AREA_IO_NSEC);
	return (vaddr_t)pa;
}

vaddr_t base_addr_GPFSEL0 = nsec_periph_base(0x3F200004);
vaddr_t base_addr_GPSET0 = nsec_periph_base(0x3F20001C);

Again, mostly guesswork here so you'll have to play around a bit to see what works.

utkarshagrawalwsu · 2017-05-01T18:37:51Z

@vchong

Success! The LED blinks!

The nsec_periph_base() was the key. Including register_phys_mem() function did not seem to work. I couldn't even build the code with it. I get the following error:

/home/wsu/PiOptee1/build/../toolchains/aarch64/bin/aarch64-linux-gnu-ld: BFD (Linaro_Binutils-2016.11) 2.27.0.20161019 assertion fail /home/tcwg-buildslave/workspace/tcwg-make-release/label/docker-trusty-amd64-tcwg-build/target/aarch64-linux-gnu/snapshots/binutils-gdb.git~linaro_binutils-2_27-branch/bfd/elflink.c:8380
core/arch/arm/kernel/link.mk:90: recipe for target 'out/arm/core/init.o' failed

I do not have /home/tcwg-buildslave folder on my system.

It still bothers me where 0x3F200000 comes from. When the system boots up, I do see something like this:

pinctrl-bcm2835 3f200000.gpio: Starting probe
pinctrl-bcm2835 3f200000.gpio: Probe successful

Well, the working code is as follows. Might help someone else. Two commands GPIO_ON and GPIO_OFF are defined, and the GPIO Pin 18 is controlled.

#define GPIO_ON             0
#define GPIO_OFF            1

#define RPI3_PERI_BASE      0x3F000000
#define GPIO_BASE           (RPI3_PERI_BASE + 0x200000)

typedef enum {
    GPIO_FSEL_INPT  = 0x00,
    GPIO_FSEL_OUTP  = 0x01
} FunctionSelect_GPFSEL;

typedef enum {
    GPIO_LOW     =  0x0,
    GPIO_HIGH    =  0x1
} GPIO_Value;

struct GpioRegister {
    uint32_t GPFSEL[6];
    uint32_t Reserved1;
    uint32_t GPSET[2];
    uint32_t Reserved2;
    uint32_t GPCLR[2];
};

struct GpioRegister *gpioRegister;

static vaddr_t nsec_periph_base(paddr_t pa) {
    if (cpu_mmu_enabled()) {
        return (vaddr_t)phys_to_virt(pa, MEM_AREA_IO_NSEC);
    }
    return (vaddr_t)pa;
}

static vaddr_t get_base_address_GPFSEL(uint8_t index) {
    return nsec_periph_base((paddr_t)&(gpioRegister->GPFSEL[index]));
}

static vaddr_t get_base_address_GPSET(uint8_t index) {
    return nsec_periph_base((paddr_t)&(gpioRegister->GPSET[index]));
}

static vaddr_t get_base_address_GPCLR(uint8_t index) {
    return nsec_periph_base((paddr_t)&(gpioRegister->GPCLR[index]));
}

static void set_gpio_pin_function(uint8_t pinNumber, FunctionSelect_GPFSEL functionCode) {
    uint32_t index_GPFSEL = pinNumber / 10;
    uint32_t bit_GPFSEL = (pinNumber % 10) * 3;

    vaddr_t base_addr_GPFSEL = get_base_address_GPFSEL(index_GPFSEL);
    uint32_t mask = 0x7 << bit_GPFSEL;

    uint32_t data;

    data = read32(base_addr_GPFSEL);

    data = data & ~mask;
    data = data | (functionCode << bit_GPFSEL);
    write32(data, base_addr_GPFSEL);
}

static void set_gpio_pin_value(uint8_t pinNumber, GPIO_Value value) {
    uint32_t index_register = pinNumber / 32;
    uint32_t bit_register = pinNumber % 32;

    vaddr_t base_addr = (value == GPIO_LOW) ? get_base_address_GPCLR(index_register) : get_base_address_GPSET(index_register);
    uint32_t mask = 0x1 << bit_register;

    uint32_t data;

    data = read32(base_addr);

    data = data & ~mask;
    data = data | (0x1 << bit_register);
    write32(data, base_addr);
}

static void initializeGpio(void) {
    gpioRegister = (struct GpioRegister *)(GPIO_BASE);
}

static TEE_Result testGpioOn(void) {
    static const int LedGpioPin = 18;

    initializeGpio();

    set_gpio_pin_function(LedGpioPin, GPIO_FSEL_OUTP);
    set_gpio_pin_value(LedGpioPin, GPIO_HIGH);
    
    return TEE_SUCCESS;
}

static TEE_Result testGpioOff(void) {
    static const int LedGpioPin = 18;

    initializeGpio();

    set_gpio_pin_function(LedGpioPin, GPIO_FSEL_OUTP);
    set_gpio_pin_value(LedGpioPin, GPIO_LOW);
    
    return TEE_SUCCESS;
}

static TEE_Result invoke_command(
	void *psess __unused,
	uint32_t cmd,
	uint32_t ptypes, TEE_Param params[TEE_NUM_PARAMS]
) {
	(void)ptypes;
	(void)params;

	switch (cmd) {
		case GPIO_ON:
			return testGpioOn();
		case GPIO_OFF:
			return testGpioOff();
		default:
			break;
	}
	return TEE_ERROR_BAD_PARAMETERS;
}

Thank you so much for your patience and your help @vchong and @jforissier

vchong · 2017-05-02T04:35:38Z

Great! You're welcome and thanks for sharing!

register_phys_mem() function did not seem to work.

I think this is because it's already done in main.c for rpi3. The registration of CONSOLE_UART_BASE is probably large enough to cover that of the gpio as well, so you don't have to do it again.

Now, if you want to go a step further and do things the 'proper' way, you would write a gpio driver for the bcm2835, and control the gpio in your pseudo TA via the driver instead of directly modifying the registers. The contribution would definitely be appreciated!

AnishKumarAkGk · 2020-02-25T10:39:14Z

Hello @utkarshagrawalwsu @vchong @jforissier,

I was trying to access Rpi3 gpio using pta with the help of above mentioned details.

I have placed my client application in optee_examples/led_blink/host/main.c

#include <err.h>
#include <stdio.h>
#include <string.h>

/* OP-TEE TEE client API (built by optee_client) */
#include <tee_client_api.h>

/* To the the UUID (found the the TA's h-file(s)) */

#define GPIO_SERVICE_UUID \
		{ 0x44c9884e, 0x9e5f, 0x48d9, \
			{ 0x9b, 0x78, 0x4d, 0x14, 0x1a, 0x2f, 0xec, 0xab } }

/* The function IDs implemented in this TA */

#define GPIO_ON             0
#define GPIO_OFF            1
#define TEST_PSEUDO_TA      2

int main(void)
{
	TEEC_Result res;
	TEEC_Context ctx;
	TEEC_Session sess;
	TEEC_Operation op;
	TEEC_UUID uuid = GPIO_SERVICE_UUID;
	uint32_t err_origin;

	/* Initialize a context connecting us to the TEE */
	res = TEEC_InitializeContext(NULL, &ctx);
	if (res != TEEC_SUCCESS)
		errx(1, "TEEC_InitializeContext failed with code 0x%x", res);

	res = TEEC_OpenSession(&ctx, &sess, &uuid,
			       TEEC_LOGIN_PUBLIC, NULL, NULL, &err_origin);
	if (res != TEEC_SUCCESS)
		errx(1, "TEEC_Opensession failed with code 0x%x origin 0x%x",
			res, err_origin);

	/*
	 * Execute a function in the TA by invoking it, 
	 *
	 * The value of command ID part and how the parameters are
	 * interpreted is part of the interface provided by the TA.
	 */

	/* Clear the TEEC_Operation struct */
	memset(&op, 0, sizeof(op));

	op.paramTypes = TEEC_PARAM_TYPES(TEEC_VALUE_OUTPUT,
                                                   TEEC_NONE,
                                                   TEEC_NONE,
                                                   TEEC_NONE);


	res = TEEC_InvokeCommand(&sess, TEST_PSEUDO_TA, &op,
				 &err_origin);
	if (res != TEEC_SUCCESS)
		errx(1, "TEEC_InvokeCommand failed with code 0x%x origin 0x%x",
			res, err_origin);
	
	
	printf("\n*****TA value = %d\n******", op.params[0].value.a);


	memset(&op, 0, sizeof(op));

	op.paramTypes = TEEC_PARAM_TYPES(TEEC_VALUE_INPUT,
                                                   TEEC_NONE,
                                                   TEEC_NONE,
                                                   TEEC_NONE);


	res = TEEC_InvokeCommand(&sess, GPIO_ON, &op,
				 &err_origin);
	if (res != TEEC_SUCCESS)
		errx(1, "TEEC_InvokeCommand failed with code 0x%x origin 0x%x",
			res, err_origin);


	/*
	 * We're done with the TA, close the session and
	 * destroy the context.
	 *
	 */

	TEEC_CloseSession(&sess);

	TEEC_FinalizeContext(&ctx);

	return 0;
}

pta I have placed in optee_os/core/pta/led.c

#include <compiler.h>
#include <stdio.h>
#include <trace.h>
#include <kernel/pseudo_ta.h>
#include <mm/tee_pager.h>
#include <mm/tee_mm.h>
#include <string.h>
#include <string_ext.h>
#include <malloc.h>

#include <mm/core_mmu.h>
#include <mm/core_memprot.h>
#include <io.h>
// #include <mach/platform.h>

#define TA_NAME     "led.ta"


#define GPIO_SERVICE_UUID \
		{ 0x44c9884e, 0x9e5f, 0x48d9, \
			{ 0x9b, 0x78, 0x4d, 0x14, 0x1a, 0x2f, 0xec, 0xab } }


#define GPIO_ON             0
#define GPIO_OFF            1
#define TEST_PSEUDO_TA      2

#define RPI3_PERI_BASE      0x3F000000
#define GPIO_BASE           (RPI3_PERI_BASE + 0x200000)

typedef enum {
	GPIO_FSEL_INPT  = 0x00,
	GPIO_FSEL_OUTP  = 0x01
} FunctionSelect_GPFSEL;

typedef enum {
	GPIO_LOW     =  0x0,
	GPIO_HIGH    =  0x1
} GPIO_Value;

struct GpioRegister {
	uint32_t GPFSEL[6];
	uint32_t Reserved1;
	uint32_t GPSET[2];
	uint32_t Reserved2;
	uint32_t GPCLR[2];
};

struct GpioRegister *gpioRegister;

static vaddr_t nsec_periph_base(paddr_t pa) {
	if (cpu_mmu_enabled()) {
		return (vaddr_t)phys_to_virt(pa, MEM_AREA_IO_NSEC);
	}
	return (vaddr_t)pa;
}

static vaddr_t get_base_address_GPFSEL(uint8_t index) {
	return nsec_periph_base((paddr_t)&(gpioRegister->GPFSEL[index]));
}

static vaddr_t get_base_address_GPSET(uint8_t index) {
	return nsec_periph_base((paddr_t)&(gpioRegister->GPSET[index]));
}

static vaddr_t get_base_address_GPCLR(uint8_t index) {
	return nsec_periph_base((paddr_t)&(gpioRegister->GPCLR[index]));
}

static void set_gpio_pin_function(uint8_t pinNumber, FunctionSelect_GPFSEL functionCode) {
	uint32_t index_GPFSEL = pinNumber / 10;
	uint32_t bit_GPFSEL = (pinNumber % 10) * 3;

	vaddr_t base_addr_GPFSEL = get_base_address_GPFSEL(index_GPFSEL);
	uint32_t mask = 0x7 << bit_GPFSEL;

	uint32_t data;

	data = io_read32(base_addr_GPFSEL);

	data = data & ~mask;
	data = data | (functionCode << bit_GPFSEL);
	io_write32(data, base_addr_GPFSEL);
}

static void set_gpio_pin_value(uint8_t pinNumber, GPIO_Value value) {
	uint32_t index_register = pinNumber / 32;
	uint32_t bit_register = pinNumber % 32;

	vaddr_t base_addr = (value == GPIO_LOW) ? get_base_address_GPCLR(index_register) : get_base_address_GPSET(index_register);
	uint32_t mask = 0x1 << bit_register;

	uint32_t data;

	data = io_read32(base_addr);

	data = data & ~mask;
	data = data | (0x1 << bit_register);
	io_write32(data, base_addr);
}

static void initializeGpio(void) {
	gpioRegister = (struct GpioRegister *)(GPIO_BASE);
}

static TEE_Result testGpioOn(void) {
	static const int LedGpioPin = 18;

	initializeGpio();

	set_gpio_pin_function(LedGpioPin, GPIO_FSEL_OUTP);
	set_gpio_pin_value(LedGpioPin, GPIO_HIGH);
	
	return TEE_SUCCESS;
}

static TEE_Result testGpioOff(void) {
	static const int LedGpioPin = 18;

	initializeGpio();

	set_gpio_pin_function(LedGpioPin, GPIO_FSEL_OUTP);
	set_gpio_pin_value(LedGpioPin, GPIO_LOW);
	
	return TEE_SUCCESS;
}

static TEE_Result testPseudoTA(uint32_t type, TEE_Param p[TEE_NUM_PARAMS]) {
	if (TEE_PARAM_TYPES(
			TEE_PARAM_TYPE_VALUE_OUTPUT,
			TEE_PARAM_TYPE_NONE,
			TEE_PARAM_TYPE_NONE,
			TEE_PARAM_TYPE_NONE) != type) {
		EMSG("Invalid arguments");
		return TEE_ERROR_BAD_PARAMETERS;
	}
	p[0].value.a = 20;
	return TEE_SUCCESS;
}

static TEE_Result invoke_command(
	void *psess __unused,
	uint32_t cmd,
	uint32_t ptypes, TEE_Param params[TEE_NUM_PARAMS]
) {
	(void)ptypes;
	(void)params;

	switch (cmd) {
		case GPIO_ON:
			return testGpioOn();
		case GPIO_OFF:
			return testGpioOff();
		case TEST_PSEUDO_TA:
			return testPseudoTA(ptypes, params);
		default:
			break;
	}
	return TEE_ERROR_BAD_PARAMETERS;
}

pseudo_ta_register(.uuid = GPIO_SERVICE_UUID , .name = TA_NAME,
		   .flags = PTA_DEFAULT_FLAGS,
		   .invoke_command_entry_point = invoke_command);

make command :
make buildroot CFG_BCM_GPIO=y CFG_LED=y

After Loading image into Raspberry Pi , tried to execute optee_examples_led_blink

But getting following error. But if I invoke TEST_PSEUDO_TA from my client app then everything works fine.
whenever I tried to invoke GPIO_ON/GPIO_OFF getiing following error. complete error log attached as optee_error_log.txt and booting log as optee_boot_log.txt

D/TC:? 0 tee_ta_init_pseudo_ta_session:284 Lookup pseudo TA 44c9884e-9e5f-48d9-9b78-4d141a2fecab
D/TC:? 0 tee_ta_init_pseudo_ta_session:297 Open led.ta
D/TC:? 0 tee_ta_init_pseudo_ta_session:311 led.ta : 44c9884e-9e5f-48d9-9b78-4d141a2fecab

*****TA E/TC:3 0
E/TC:3 0 Core data-abort at address 0x1012000 (translation fault)
E/TC:3 0 esr 0x96000046 ttbr0 0x1018f060 ttbr1 0x00000000 cidr 0x0
E/TC:3 0 cpu #3 cpsr 0x60000104
E/TC:3 0 x0 0000000013e00004 x1 0000000001012000
E/TC:3 0 x2 0000000013ffffff x3 000000001015dc70
E/TC:3 0 x4 0000000000200000 x5 000000000000000d
E/TC:3 0 x6 000000003f200004 x7 0000000000000000
E/TC:3 0 x8 0000000008000000 x9 000000001015135e
E/TC:3 0 x10 0000000000000000 x11 0000000000000000
E/TC:3 0 x12 0000000000000000 x13 0000000010193dd8
E/TC:3 0 x14 0000000000000000 x15 0000000000000000
E/TC:3 0 x16 0000000010110b30 x17 0000000000000000
E/TC:3 0 x18 0000000000000000 x19 000000001016a8f8
E/TC:3 0 x20 0000000000000000 x21 0000000010194058
E/TC:3 0 x22 0000000010194060 x23 0000000010177eb0
E/TC:3 0 x24 0000000010177e48 x25 0000000010194150
E/TC:3 0 x26 0000000000000000 x27 0000000000000001
E/TC:3 0 x28 00000000000000fb x29 0000000010193fe0
E/TC:3 0 x30 0000000010119b94 elr 0000000010119ba4
E/TC:3 0 sp_el0 0000000010193fe0
E/TC:3 0 TEE load address @ 0x10100000

boot and error logs are attached here.
optee_boot_log.txt
optee_error_log.txt

Please help me to proceed further.

Thank You

jforissier · 2020-02-25T12:13:01Z

@AnishKumarAkGk

The crash dump has a call stack, you should try symbolize.py to see which line causes the abort:

$ ./optee_os/scripts/symbolize.py -d optee_os/out/arm/core
<paste the error dump here, cut from "Core data-abort" to "Panic">

You have an invalid virtual address -- have you declared the GPIO range with register_phys_mem() or register_phys_mem_pgdir() as mentioned above?

AnishKumarAkGk · 2020-02-26T07:39:40Z

@jforissier Thanks for quick replay.

I have included register_phys_mem() in optee_os/core/pta/led.c
register_phys_mem(MEM_AREA_IO_SEC, 0x3F200000, CORE_MMU_PGDIR_SIZE);

Still I am facing same issue. Please find symbolize.py output,

E/TC:1 0 Core data-abort at address 0x1012000 (translation fault)
E/TC:1 0 esr 0x96000046 ttbr0 0x1018e020 ttbr1 0x00000000 cidr 0x0
E/TC:1 0 cpu #1 cpsr 0x60000104
E/TC:1 0 x0 0000000013e00004 x1 0000000001012000
E/TC:1 0 x2 0000000013ffffff x3 000000001015ca30
E/TC:1 0 x4 0000000000200000 x5 000000000000000d
E/TC:1 0 x6 000000003f200004 x7 0000000000000000
E/TC:1 0 x8 0000000008000000 x9 000000001015135e
E/TC:1 0 x10 0000000000000000 x11 0000000000000000
E/TC:1 0 x12 0000000000000000 x13 0000000010192dd8
E/TC:1 0 x14 0000000000000000 x15 0000000000000000
E/TC:1 0 x16 0000000000000000 x17 0000000000000000
E/TC:1 0 x18 0000000000000000 x19 00000000101696b8
E/TC:1 0 x20 0000000000000000 x21 0000000010193058
E/TC:1 0 x22 0000000010193060 x23 0000000010177b00
E/TC:1 0 x24 0000000010177a98 x25 0000000010193150
E/TC:1 0 x26 0000000000000000 x27 0000000000000001
E/TC:1 0 x28 00000000000000fb x29 0000000010192fe0
E/TC:1 0 x30 0000000010119a40 elr 0000000010119a50
E/TC:1 0 sp_el0 0000000010192fe0
E/TC:1 0 TEE load address @ 0x10100000
E/TC:1 0 Call stack:
E/TC:1 0 0x0000000010119a50 io_write32 at optee_os/core/include/io.h:34
E/TC:1 0 0x0000000010104dd8 pseudo_ta_enter_invoke_cmd at optee_os/core/arch/arm/kernel/pseudo_ta.c:199
E/TC:1 0 0x0000000010117bc4 tee_ta_invoke_command at optee_os/core/kernel/tee_ta_manager.c:761
E/TC:1 0 0x00000000101113c0 entry_invoke_command at optee_os/core/arch/arm/tee/entry_std.c:387
E/TC:1 0 0x00000000101079dc std_smc_entry at optee_os/core/arch/arm/kernel/thread_optee_smc.c:193
E/TC:1 0 0x0000000010103328 thread_std_smc_entry at optee_os/core/arch/arm/kernel/thread_optee_smc_a64.S:162
E/TC:1 0 Panic 'unhandled pageable abort' at core/arch/arm/kernel/abort.c:546 <abort_handler>
E/TC:1 0 TEE load address @ 0x10100000
E/TC:1 0 Call stack:
E/TC:1 0 0x0000000010109cac read_pc at optee_os/core/arch/arm/include/arm64.h:237

Boot Log after adding register_phys_mem (),

D/TC:0 0 add_phys_mem:581 TEE_SHMEM_START type NSEC_SHM 0x08000000 size 0x00400000
D/TC:0 0 add_phys_mem:581 TA_RAM_START type TA_RAM 0x10800000 size 0x00800000
D/TC:0 0 add_phys_mem:581 VCORE_UNPG_RW_PA type TEE_RAM_RW 0x1015a000 size 0x006a6000
D/TC:0 0 add_phys_mem:581 VCORE_UNPG_RX_PA type TEE_RAM_RX 0x10100000 size 0x0005a000
D/TC:0 0 add_phys_mem:581 ROUNDDOWN(0x3f215040, CORE_MMU_PGDIR_SIZE) type IO_NSEC 0x3f200000 size 0x00200000
> D/TC:0 0 add_phys_mem:581 0x3F200000 type IO_SEC 0x3f200000 size 0x00200000
D/TC:0 0 verify_special_mem_areas:519 No NSEC DDR memory area defined
D/TC:0 0 add_va_space:620 type RES_VASPACE size 0x00a00000
D/TC:0 0 add_va_space:620 type SHM_VASPACE size 0x02000000
D/TC:0 0 dump_mmap_table:732 type TEE_RAM_RX va 0x10100000..0x10159fff pa 0x10100000..0x10159fff size 0x0005a000 (smallpg)
D/TC:0 0 dump_mmap_table:732 type TEE_RAM_RW va 0x1015a000..0x107fffff pa 0x1015a000..0x107fffff size 0x006a6000 (smallpg)
D/TC:0 0 dump_mmap_table:732 type SHM_VASPACE va 0x10800000..0x127fffff pa 0x00000000..0x01ffffff size 0x02000000 (pgdir)
D/TC:0 0 dump_mmap_table:732 type RES_VASPACE va 0x12800000..0x131fffff pa 0x00000000..0x009fffff size 0x00a00000 (pgdir)
D/TC:0 0 dump_mmap_table:732 type NSEC_SHM va 0x13200000..0x135fffff pa 0x08000000..0x083fffff size 0x00400000 (pgdir)
D/TC:0 0 dump_mmap_table:732 type TA_RAM va 0x13600000..0x13dfffff pa 0x10800000..0x10ffffff size 0x00800000 (pgdir)
> D/TC:0 0 dump_mmap_table:732 type IO_NSEC va 0x13e00000..0x13ffffff pa 0x3f200000..0x3f3fffff size 0x00200000 (pgdir)
D/TC:0 0 dump_mmap_table:732 type IO_SEC va 0x14000000..0x141fffff pa 0x3f200000..0x3f3fffff size 0x00200000 (pgdir)

Did I missed anything? I just wanted to turn ON an LED @GPIO18 of Rpi 3b model.
Please guide me to do that.

And How do you find that I have an invalid virtual address?

Since I'm a newbie in this area please bear with my questions.

Thanks in Advance

jforissier · 2020-02-26T22:22:30Z

gpioRegister is a PA, yet you are dereferencing it (gpioRegister->GPFSEL etc.).

kycsh123 · 2021-06-15T14:26:09Z

@AnishKumarAkGk hi,have you figure out this problem?i face this issue in stm32mp,thanks for you reply

kycsh123 · 2021-06-17T11:52:03Z

@AnishKumarAkGk io_write32(data, base_addr); you may use this function wrong( io_write32(base_addr,data))

yuralty mentioned this issue Apr 26, 2017

USB access from pseudo-TA #1499

Closed

utkarshagrawalwsu closed this as completed May 1, 2017

igoropaniuk mentioned this issue Jul 19, 2017

Compiling static lib (relic-toolkit) to TA #1691

Closed

pokitoz mentioned this issue Apr 19, 2018

RPI3: How to access second UART(PL011) and GPIOs from secure OS? #2230

Closed

JensVankeirsbilck mentioned this issue Oct 20, 2021

interrupt on Rpi3 #4930

Closed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Accessing GPIO from TA in Raspberry Pi 3 #1496

Accessing GPIO from TA in Raspberry Pi 3 #1496

utkarshagrawalwsu commented Apr 24, 2017

jforissier commented Apr 24, 2017

utkarshagrawalwsu commented Apr 25, 2017 •

edited

Loading

jforissier commented Apr 26, 2017

utkarshagrawalwsu commented Apr 26, 2017

jforissier commented Apr 26, 2017

vchong commented Apr 27, 2017 •

edited

Loading

vchong commented Apr 27, 2017 •

edited

Loading

jforissier commented Apr 27, 2017

vchong commented Apr 27, 2017

utkarshagrawalwsu commented Apr 28, 2017 •

edited

Loading

vchong commented Apr 28, 2017

utkarshagrawalwsu commented May 1, 2017

vchong commented May 2, 2017

AnishKumarAkGk commented Feb 25, 2020

jforissier commented Feb 25, 2020

AnishKumarAkGk commented Feb 26, 2020

jforissier commented Feb 26, 2020

kycsh123 commented Jun 15, 2021

kycsh123 commented Jun 17, 2021

Accessing GPIO from TA in Raspberry Pi 3 #1496

Accessing GPIO from TA in Raspberry Pi 3 #1496

Comments

utkarshagrawalwsu commented Apr 24, 2017

jforissier commented Apr 24, 2017

utkarshagrawalwsu commented Apr 25, 2017 • edited Loading

jforissier commented Apr 26, 2017

utkarshagrawalwsu commented Apr 26, 2017

jforissier commented Apr 26, 2017

vchong commented Apr 27, 2017 • edited Loading

vchong commented Apr 27, 2017 • edited Loading

jforissier commented Apr 27, 2017

vchong commented Apr 27, 2017

utkarshagrawalwsu commented Apr 28, 2017 • edited Loading

vchong commented Apr 28, 2017

utkarshagrawalwsu commented May 1, 2017

vchong commented May 2, 2017

AnishKumarAkGk commented Feb 25, 2020

jforissier commented Feb 25, 2020

AnishKumarAkGk commented Feb 26, 2020

jforissier commented Feb 26, 2020

kycsh123 commented Jun 15, 2021

kycsh123 commented Jun 17, 2021

utkarshagrawalwsu commented Apr 25, 2017 •

edited

Loading

vchong commented Apr 27, 2017 •

edited

Loading

vchong commented Apr 27, 2017 •

edited

Loading

utkarshagrawalwsu commented Apr 28, 2017 •

edited

Loading