ra8_nsc_veneer.h

Go to the documentation of this file.

 
#pragma once
 
#ifdef __cplusplus
extern "C" {
#endif
 
#include <stdint.h>
 
#include "ra8_attributes.h"
 
/* ra8_attributes.h carries a generic, annotation-only RA8_NSC_VENEER so that
 * translation units which never touch the NSC boundary can still be scanned by
 * the libclang annotation gate. This header is the single authority for the
 * macro: the Secure-world form must also carry
 * __attribute__((cmse_nonsecure_entry)), which is what actually emits the
 * secure-gateway (SG) veneer. Undefining first makes this file win regardless
 * of include order -- without it, a TU that reached ra8_attributes.h after this
 * header would silently replace the cmse form with the annotation-only form and
 * drop the SG veneer, breaking the S/NS boundary with no diagnostic beyond a
 * macro-redefinition warning. Both branches below re-attach the annotation so
 * the gate still sees every veneer. */
#undef RA8_NSC_VENEER
 
/* __ARM_FEATURE_CMSE bit 1 marks a Secure-world (-mcmse) compile: only there
 * is cmse_nonsecure_entry meaningful. NS TUs share RA8_TRUSTZONE_ENABLE but
 * compile without -mcmse and must take the plain-declaration branch. */
#if defined(RA8_TRUSTZONE_ENABLE) && defined(__ARM_FEATURE_CMSE) && ((__ARM_FEATURE_CMSE & 2) != 0)
 
#include <arm_cmse.h>

#define RA8_NSC_VENEER RA8_INTERNAL_ANNOTATE("ra8_nsc_veneer") __attribute__((cmse_nonsecure_entry))

#define RA8_NSC_CHECK_NS_RANGE_R(ptr, len)                                                         \
  do {                                                                                             \
    if (cmse_check_address_range((void*)(uintptr_t)(ptr),                                          \
                                 (uint32_t)(len),                                                  \
                                 CMSE_NONSECURE | CMSE_MPU_READ) == nullptr) {                     \
      return k_ra8_err_invalid_arg;                                                                \
    }                                                                                              \
  } while (0)

#define RA8_NSC_CHECK_NS_RANGE_RW(ptr, len)                                                        \
  do {                                                                                             \
    if (cmse_check_address_range((void*)(uintptr_t)(ptr),                                          \
                                 (uint32_t)(len),                                                  \
                                 CMSE_NONSECURE | CMSE_MPU_READWRITE) == nullptr) {                \
      return k_ra8_err_invalid_arg;                                                                \
    }                                                                                              \
  } while (0)
 
#else /* !RA8_TRUSTZONE_ENABLE or a non-Secure-world compile */

#define RA8_NSC_VENEER                      RA8_INTERNAL_ANNOTATE("ra8_nsc_veneer")
#define RA8_NSC_CHECK_NS_RANGE_R(ptr, len)  ((void)(ptr), (void)(len))
#define RA8_NSC_CHECK_NS_RANGE_RW(ptr, len) ((void)(ptr), (void)(len))
 
#endif /* RA8_TRUSTZONE_ENABLE && Secure-world (-mcmse) compile */
 
#ifdef __cplusplus
}
#endif