mirror of
https://github.com/tillitis/tillitis-key1.git
synced 2025-03-13 02:26:49 -04:00
76 lines
1.8 KiB
ArmAsm
76 lines
1.8 KiB
ArmAsm
|
/*
|
||
|
|
* Copyright (C) 2022, 2023 - Tillitis AB
|
||
|
|
* SPDX-License-Identifier: GPL-2.0-only
|
||
|
|
*/
|
||
|
|
|
||
|
|
// This firmware copies an app from ROM to app RAM. The app triggers both
|
||
|
|
// IRQ_SYSCALL_HI and IRQ_SYSCALL_LO. One after the other. Finally, the
|
||
|
|
// app tries to jump firmware. This should result in a trap since the
|
||
|
|
// app in executing in app mode.
|
||
|
|
//
|
||
|
|
|
||
|
|
#include "custom_ops.S" // PicoRV32 custom instructions
|
||
|
|
|
||
|
|
.section ".text.init"
|
||
|
|
.globl _start
|
||
|
|
_start:
|
||
|
|
j init
|
||
|
|
|
||
|
|
//
|
||
|
|
// IRQ handler
|
||
|
|
//
|
||
|
|
.=0x10 // IRQ handler at fixed address 0x10
|
||
|
|
irq_handler:
|
||
|
|
// PicoRV32 stores the IRQ bitmask in x4.
|
||
|
|
// If bit 31 is 1: IRQ31 was triggered.
|
||
|
|
// If bit 30 is 1: IRQ30 was triggered.
|
||
|
|
|
||
|
|
nop // NOPs are not necessary. Only added to make it easier to find
|
||
|
|
nop // when simulating.
|
||
|
|
nop
|
||
|
|
picorv32_retirq_insn() // Return from interrupt
|
||
|
|
|
||
|
|
//
|
||
|
|
// Init
|
||
|
|
//
|
||
|
|
.=0x20 // Setting location of init to 0x20. Makes it easier to find when
|
||
|
|
// simulating.
|
||
|
|
init:
|
||
|
|
li t0, 0x3fffffff // IRQ31 & IRQ30 mask
|
||
|
|
picorv32_maskirq_insn(zero, t0) // Enable IRQs
|
||
|
|
|
||
|
|
// Copy app to App RAM
|
||
|
|
la t0, app_start
|
||
|
|
la t1, app_end
|
||
|
|
li t2, 0x40000000 // 0x40000000: App RAM
|
||
|
|
copy_app:
|
||
|
|
lw t3, 0(t0)
|
||
|
|
sw t3, 0(t2)
|
||
|
|
addi t0, t0, 4
|
||
|
|
addi t2, t2, 4
|
||
|
|
bleu t0, t1, copy_app
|
||
|
|
|
||
|
|
// Jump to app
|
||
|
|
li t2, 0x40000000 // 0x40000000: App RAM
|
||
|
|
jalr zero, 0(t2)
|
||
|
|
|
||
|
|
//
|
||
|
|
// App
|
||
|
|
//
|
||
|
|
.align 4
|
||
|
|
app_start:
|
||
|
|
li t0, 0xe1000000 // IRQ_SYSCALL_HI (IRQ31) trigger address
|
||
|
|
sw zero, 0(t0) // Raise IRQ by writing to interrupt trigger address.
|
||
|
|
// Writing any data triggers an interrupt.
|
||
|
|
|
||
|
|
li t0, 0xe0000000 // IRQ_SYSCALL_LO (IRQ30) trigger address
|
||
|
|
sw zero, 0(t0) // Raise IRQ by writing to interrupt trigger address.
|
||
|
|
// Writing any data triggers an interrupt.
|
||
|
|
|
||
|
|
jalr zero, 0(zero) // Jumping to firmware. Expecting trap
|
||
|
|
app_loop:
|
||
|
|
j app_loop
|
||
|
|
.align 4
|
||
|
|
app_end:
|
||
|
|
|