1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
|
/*
* Copyright (C) 2020 The Android Open Source Project
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
#pragma once
#include <stdint.h>
#define APPLOADER_PORT "com.android.trusty.apploader"
enum apploader_command : uint32_t {
APPLOADER_REQ_SHIFT = 1,
APPLOADER_RESP_BIT = 1,
APPLOADER_CMD_LOAD_APPLICATION = (0 << APPLOADER_REQ_SHIFT),
APPLOADER_CMD_GET_VERSION = (1 << APPLOADER_REQ_SHIFT),
APPLOADER_CMD_UNLOAD_APPLICATION = (2 << APPLOADER_REQ_SHIFT),
};
/**
* enum apploader_error - error codes for apploader
* @APPLOADER_NO_ERROR: no error
* @APPLOADER_ERR_UNKNOWN_CMD: unknown or not implemented command
* @APPLOADER_ERR_INVALID_CMD: invalid arguments or inputs passed to
* command
* @APPLOADER_ERR_NO_MEMORY: failed to allocate memory
* @APPLOADER_ERR_VERIFICATION_FAILED: failed to verify input application
* package for any reason, e.g., signature
* verification failed
* @APPLOADER_ERR_LOADING_FAILED: Trusty kernel or apploader service
* failed to load application
* @APPLOADER_ERR_ALREADY_EXISTS: application has already been loaded
* @APPLOADER_ERR_INTERNAL: miscellaneous or internal apploader
* error not covered by the above
* @APPLOADER_ERR_INVALID_VERSION: invalid application version
* @APPLOADER_ERR_POLICY_VIOLATION: signature verification succeeded but
* key+manifest combination not allowed
* by app loader policy engine
* @APPLOADER_ERR_NOT_ENCRYPTED: unmet application encryption requirement
*/
enum apploader_error : uint32_t {
APPLOADER_NO_ERROR = 0,
APPLOADER_ERR_UNKNOWN_CMD,
APPLOADER_ERR_INVALID_CMD,
APPLOADER_ERR_NO_MEMORY,
APPLOADER_ERR_VERIFICATION_FAILED,
APPLOADER_ERR_LOADING_FAILED,
APPLOADER_ERR_ALREADY_EXISTS,
APPLOADER_ERR_INTERNAL,
APPLOADER_ERR_INVALID_VERSION,
APPLOADER_ERR_POLICY_VIOLATION,
APPLOADER_ERR_NOT_ENCRYPTED,
};
/**
* apploader_header - Serial header for communicating with apploader
* @cmd: the command; one of &enum apploader_command values.
*/
struct apploader_header {
uint32_t cmd;
} __packed;
/**
* apploader_load_app_req - Serial arguments for LOAD_APPLICATION command
* @package_size: size of the application package.
*
* Load an application from a given memory region. The request message also
* contains a handle for a memfd that contains the application package.
*
* The response is a &struct apploader_resp with the error code or
* %APPLOADER_NO_ERROR on success.
*/
struct apploader_load_app_req {
uint64_t package_size;
} __packed;
/**
* apploader_resp - Common header for all apploader responses
* @hdr - header with command value.
* @error - error code returned by peer; one of &enum apploader_error values.
*
* This structure is followed by the response-specific payload, if the command
* has one.
*/
struct apploader_resp {
struct apploader_header hdr;
uint32_t error;
} __packed;
|
