sdfw_services: Add SUIT invoke services handlers

Add implementation of SUIT SSF invoke services.

Ref: NCSDK-29996

Signed-off-by: Tomasz Chyrowicz <[email protected]>

Author: tomchy

include/sdfw/sdfw_services/suit_service.h

@@ -177,6 +177,45 @@ suit_ssf_err_t suit_get_supported_manifest_roles(suit_manifest_role_t *roles, si
 suit_ssf_err_t suit_get_supported_manifest_info(suit_manifest_role_t role,
 						suit_ssf_manifest_class_info_t *class_info);
 
+/** @brief Read the current boot mode value.
+ *
+ * @param[out]  mode  Current boot mode.
+ *
+ * @retval SUIT_PLAT_SUCCESS if successful.
+ * @retval SUIT_PLAT_ERR_INVAL if input parameter is invalid.
+ * @retval SUIT_PLAT_ERR_IPC in case of SSF protocol error.
+ */
+suit_ssf_err_t suit_boot_mode_read(suit_boot_mode_t *mode);
+
+/** @brief Confirm that the invoke command finished.
+ *
+ * @param[in]  ret  Invoke command return code. Pass zero if successful.
+ *
+ * @retval SUIT_PLAT_SUCCESS if successful.
+ * @retval SUIT_PLAT_ERR_IPC in case of SSF protocol error.
+ */
+suit_ssf_err_t suit_invoke_confirm(int ret);
+
+/** @brief Reset SUIT boot flags.
+ *
+ * @note After resetting the SUIT boot flags the system will be reset and a regular boot procedure
+ *       will be executed.
+ *
+ * @retval SUIT_PLAT_SUCCESS if successful.
+ * @retval SUIT_PLAT_ERR_IPC in case of SSF protocol error.
+ */
+suit_ssf_err_t suit_boot_flags_reset(void);
+
+/** @brief Request a foreground DFU procedure.
+ *
+ * @note After setting the foreground DFU boot flag the system will be reset and a recovery image
+ *       will be booted.
+ *
+ * @retval SUIT_PLAT_SUCCESS if successful.
+ * @retval SUIT_PLAT_ERR_IPC in case of SSF protocol error.
+ */
+suit_ssf_err_t suit_foreground_dfu_required(void);
+
 #ifdef __cplusplus
 }
 #endif

subsys/sdfw_services/services/suit_service/CMakeLists.txt

@@ -9,6 +9,7 @@ zephyr_library()
 zephyr_library_sources(suit_service.c)
 zephyr_library_sources(suit_update.c)
 zephyr_library_sources(suit_mci.c)
+zephyr_library_sources(suit_invoke.c)
 zephyr_library_sources_ifdef(CONFIG_SUIT_PROCESSOR suit_auth.c)
 
 zephyr_library_link_libraries(suit_utils)

subsys/sdfw_services/services/suit_service/Kconfig

@@ -9,7 +9,6 @@ menuconfig SSF_SUIT_SERVICE_ENABLED
 	depends on SDFW_SERVICES_ENABLED
 	depends on SUIT_UTILS
 	depends on SUIT_METADATA
-	depends on ZCBOR_CANONICAL
 
 if SSF_SUIT_SERVICE_ENABLED
 

subsys/sdfw_services/services/suit_service/suit_auth.c

@@ -16,6 +16,13 @@
 #include <zephyr/logging/log.h>
 LOG_MODULE_REGISTER(suit_srvc_auth, CONFIG_SSF_SUIT_SERVICE_LOG_LEVEL);
 
+/* __ALIGNED macro is not defined on NATIVE POSIX. This platform uses __aligned macro. */
+#ifndef __ALIGNED
+#ifdef __aligned
+#define __ALIGNED __aligned
+#endif
+#endif
+
 #ifdef CONFIG_DCACHE_LINE_SIZE
 #define CACHE_ALIGNMENT CONFIG_DCACHE_LINE_SIZE
 #else
@@ -39,6 +46,10 @@ int suit_plat_authenticate_manifest(struct zcbor_string *manifest_component_id,
 		return SUIT_ERR_DECODING;
 	}
 
+	if (data->len > sizeof(aligned_auth_data)) {
+		return SUIT_ERR_DECODING;
+	}
+
 	memset(&req, 0, sizeof(struct suit_req));
 	req.suit_req_msg_choice = SSF_SUIT_REQ_CHOICE(authenticate_manifest);
 

subsys/sdfw_services/services/suit_service/suit_invoke.c

@@ -0,0 +1,105 @@
+/*
+ * Copyright (c) 2024 Nordic Semiconductor ASA
+ *
+ * SPDX-License-Identifier: LicenseRef-Nordic-5-Clause
+ */
+
+#include <sdfw/sdfw_services/ssf_client.h>
+#include "suit_service_types.h"
+#include <sdfw/sdfw_services/suit_service.h>
+#include "suit_service_utils.h"
+
+#include <zephyr/logging/log.h>
+LOG_MODULE_REGISTER(suit_srvc_invoke, CONFIG_SSF_SUIT_SERVICE_LOG_LEVEL);
+
+extern const struct ssf_client_srvc suit_srvc;
+
+suit_ssf_err_t suit_boot_mode_read(suit_boot_mode_t *mode)
+{
+	int ret;
+	struct suit_req req;
+	struct suit_rsp rsp;
+	struct suit_boot_mode_read_rsp *rsp_data;
+	const uint8_t *rsp_pkt;
+
+	if (mode == NULL) {
+		return SUIT_PLAT_ERR_INVAL;
+	}
+
+	memset(&req, 0, sizeof(struct suit_req));
+	req.suit_req_msg_choice = SSF_SUIT_REQ_CHOICE(boot_mode_read);
+
+	ret = ssf_client_send_request(&suit_srvc, &req, &rsp, &rsp_pkt);
+	if (ret != 0) {
+		ssf_client_decode_done(rsp_pkt);
+		return SUIT_PLAT_ERR_IPC;
+	}
+
+	rsp_data = &rsp.SSF_SUIT_RSP(boot_mode_read);
+	ret = rsp_data->SSF_SUIT_RSP_ARG(boot_mode_read, ret);
+	if (ret != SUIT_PLAT_SUCCESS) {
+		ssf_client_decode_done(rsp_pkt);
+		return ret;
+	}
+
+	*mode = (suit_boot_mode_t)rsp_data->SSF_SUIT_RSP_ARG(boot_mode_read, boot_mode);
+
+	ssf_client_decode_done(rsp_pkt);
+
+	return ret;
+}
+
+suit_ssf_err_t suit_invoke_confirm(int ret)
+{
+	int ssf_ret;
+	struct suit_req req;
+	struct suit_rsp rsp;
+	struct suit_invoke_confirm_req *req_data;
+
+	memset(&req, 0, sizeof(struct suit_req));
+	req.suit_req_msg_choice = SSF_SUIT_REQ_CHOICE(invoke_confirm);
+	req_data = &req.SSF_SUIT_REQ(invoke_confirm);
+	req_data->SSF_SUIT_REQ_ARG(invoke_confirm, ret) = ret;
+
+	ssf_ret = ssf_client_send_request(&suit_srvc, &req, &rsp, NULL);
+	if (ssf_ret != 0) {
+		return SUIT_PLAT_ERR_IPC;
+	}
+
+	return rsp.SSF_SUIT_RSP(invoke_confirm).SSF_SUIT_RSP_ARG(invoke_confirm, ret);
+}
+
+suit_ssf_err_t suit_boot_flags_reset(void)
+{
+	int ret;
+	struct suit_req req;
+	struct suit_rsp rsp;
+
+	memset(&req, 0, sizeof(struct suit_req));
+	req.suit_req_msg_choice = SSF_SUIT_REQ_CHOICE(boot_flags_reset);
+
+	ret = ssf_client_send_request(&suit_srvc, &req, &rsp, NULL);
+	if (ret != 0) {
+		return SUIT_PLAT_ERR_IPC;
+	}
+
+	return rsp.SSF_SUIT_RSP(boot_flags_reset).SSF_SUIT_RSP_ARG(boot_flags_reset, ret);
+}
+
+suit_ssf_err_t suit_foreground_dfu_required(void)
+{
+	int ret;
+	struct suit_req req;
+	struct suit_rsp rsp;
+
+	memset(&req, 0, sizeof(struct suit_req));
+	req.suit_req_msg_choice = SSF_SUIT_REQ_CHOICE(foreground_dfu_required);
+
+	ret = ssf_client_send_request(&suit_srvc, &req, &rsp, NULL);
+	if (ret != 0) {
+		return SUIT_PLAT_ERR_IPC;
+	}
+
+	return rsp.SSF_SUIT_RSP(foreground_dfu_required)
+		.SSF_SUIT_RSP_ARG(foreground_dfu_required, ret);
+}