UefiCpuPkg: Add SecCore module

Add SecCore module that uses the PlatformSecLib class for platform
specific actions.  The SecCore module also uses a new PCD to
configure the size of the stack used in the SEC phase.  If the
stack size PCD is set to 0, the stack is configured to use half
of the available temporary RAM.

Contributed-under: TianoCore Contribution Agreement 1.0
Signed-off-by: Michael Kinney <michael.d.kinney@intel.com>
Reviewed-by: Jeff Fan <jeff.fan@intel.com>

git-svn-id: https://svn.code.sf.net/p/edk2/code/trunk/edk2@18636 6f19259b-4bc3-4df7-8a09-765794883524

8 files changed, 883 insertions, 0 deletions

diff --git a/UefiCpuPkg/SecCore/FindPeiCore.c b/UefiCpuPkg/SecCore/FindPeiCore.c
new file mode 100644
index 0000000000..60ccaa9667
--- /dev/null
+++ b/UefiCpuPkg/SecCore/FindPeiCore.c
@@ -0,0 +1,198 @@
+/** @file

+  Locate the entry point for the PEI Core

+

+  Copyright (c) 2008 - 2011, Intel Corporation. All rights reserved.<BR>

+  This program and the accompanying materials

+  are licensed and made available under the terms and conditions of the BSD License

+  which accompanies this distribution.  The full text of the license may be found at

+  http://opensource.org/licenses/bsd-license.php

+

+  THE PROGRAM IS DISTRIBUTED UNDER THE BSD LICENSE ON AN "AS IS" BASIS,

+  WITHOUT WARRANTIES OR REPRESENTATIONS OF ANY KIND, EITHER EXPRESS OR IMPLIED.

+

+**/

+

+#include <PiPei.h>

+#include <Library/BaseLib.h>

+#include <Library/PeCoffGetEntryPointLib.h>

+

+#include "SecMain.h"

+

+/**

+  Find core image base.

+

+  @param   BootFirmwareVolumePtr    Point to the boot firmware volume.

+  @param   SecCoreImageBase         The base address of the SEC core image.

+  @param   PeiCoreImageBase         The base address of the PEI core image.

+

+**/

+EFI_STATUS

+EFIAPI

+FindImageBase (

+  IN  EFI_FIRMWARE_VOLUME_HEADER       *BootFirmwareVolumePtr,

+  OUT EFI_PHYSICAL_ADDRESS             *SecCoreImageBase,

+  OUT EFI_PHYSICAL_ADDRESS             *PeiCoreImageBase

+  )

+{

+  EFI_PHYSICAL_ADDRESS        CurrentAddress;

+  EFI_PHYSICAL_ADDRESS        EndOfFirmwareVolume;

+  EFI_FFS_FILE_HEADER         *File;

+  UINT32                      Size;

+  EFI_PHYSICAL_ADDRESS        EndOfFile;

+  EFI_COMMON_SECTION_HEADER   *Section;

+  EFI_PHYSICAL_ADDRESS        EndOfSection;

+

+  *SecCoreImageBase = 0;

+  *PeiCoreImageBase = 0;

+

+  CurrentAddress = (EFI_PHYSICAL_ADDRESS)(UINTN) BootFirmwareVolumePtr;

+  EndOfFirmwareVolume = CurrentAddress + BootFirmwareVolumePtr->FvLength;

+

+  //

+  // Loop through the FFS files in the Boot Firmware Volume

+  //

+  for (EndOfFile = CurrentAddress + BootFirmwareVolumePtr->HeaderLength; ; ) {

+

+    CurrentAddress = (EndOfFile + 7) & 0xfffffffffffffff8ULL;

+    if (CurrentAddress > EndOfFirmwareVolume) {

+      return EFI_NOT_FOUND;

+    }

+

+    File = (EFI_FFS_FILE_HEADER*)(UINTN) CurrentAddress;

+    if (IS_FFS_FILE2 (File)) {

+      Size = FFS_FILE2_SIZE (File);

+      if (Size <= 0x00FFFFFF) {

+        return EFI_NOT_FOUND;

+      }

+    } else {

+      Size = FFS_FILE_SIZE (File);

+      if (Size < sizeof (EFI_FFS_FILE_HEADER)) {

+        return EFI_NOT_FOUND;

+      }

+    }

+

+    EndOfFile = CurrentAddress + Size;

+    if (EndOfFile > EndOfFirmwareVolume) {

+      return EFI_NOT_FOUND;

+    }

+

+    //

+    // Look for SEC Core / PEI Core files

+    //

+    if (File->Type != EFI_FV_FILETYPE_SECURITY_CORE &&

+        File->Type != EFI_FV_FILETYPE_PEI_CORE) {

+      continue;

+    }

+

+    //

+    // Loop through the FFS file sections within the FFS file

+    //

+    if (IS_FFS_FILE2 (File)) {

+      EndOfSection = (EFI_PHYSICAL_ADDRESS) (UINTN) ((UINT8 *) File + sizeof (EFI_FFS_FILE_HEADER2));

+    } else {

+      EndOfSection = (EFI_PHYSICAL_ADDRESS) (UINTN) ((UINT8 *) File + sizeof (EFI_FFS_FILE_HEADER));

+    }

+    for (;;) {

+      CurrentAddress = (EndOfSection + 3) & 0xfffffffffffffffcULL;

+      Section = (EFI_COMMON_SECTION_HEADER*)(UINTN) CurrentAddress;

+

+      if (IS_SECTION2 (Section)) {

+        Size = SECTION2_SIZE (Section);

+        if (Size <= 0x00FFFFFF) {

+          return EFI_NOT_FOUND;

+        }

+      } else {

+        Size = SECTION_SIZE (Section);

+        if (Size < sizeof (EFI_COMMON_SECTION_HEADER)) {

+          return EFI_NOT_FOUND;

+        }

+      }

+

+      EndOfSection = CurrentAddress + Size;

+      if (EndOfSection > EndOfFile) {

+        return EFI_NOT_FOUND;

+      }

+

+      //

+      // Look for executable sections

+      //

+      if (Section->Type == EFI_SECTION_PE32 || Section->Type == EFI_SECTION_TE) {

+        if (File->Type == EFI_FV_FILETYPE_SECURITY_CORE) {

+          if (IS_SECTION2 (Section)) {

+            *SecCoreImageBase = (PHYSICAL_ADDRESS) (UINTN) ((UINT8 *) Section + sizeof (EFI_COMMON_SECTION_HEADER2));

+          } else {

+            *SecCoreImageBase = (PHYSICAL_ADDRESS) (UINTN) ((UINT8 *) Section + sizeof (EFI_COMMON_SECTION_HEADER));

+          }

+        } else {

+          if (IS_SECTION2 (Section)) {

+            *PeiCoreImageBase = (PHYSICAL_ADDRESS) (UINTN) ((UINT8 *) Section + sizeof (EFI_COMMON_SECTION_HEADER2));

+          } else {

+            *PeiCoreImageBase = (PHYSICAL_ADDRESS) (UINTN) ((UINT8 *) Section + sizeof (EFI_COMMON_SECTION_HEADER));

+          }

+        }

+        break;

+      }

+    }

+

+    //

+    // Both SEC Core and PEI Core images found

+    //

+    if (*SecCoreImageBase != 0 && *PeiCoreImageBase != 0) {

+      return EFI_SUCCESS;

+    }

+  }

+}

+

+/**

+  Find and return Pei Core entry point.

+

+  It also find SEC and PEI Core file debug information. It will report them if

+  remote debug is enabled.

+

+  @param   BootFirmwareVolumePtr    Point to the boot firmware volume.

+  @param   PeiCoreEntryPoint        The entry point of the PEI core.

+

+**/

+VOID

+EFIAPI

+FindAndReportEntryPoints (

+  IN  EFI_FIRMWARE_VOLUME_HEADER       *BootFirmwareVolumePtr,

+  OUT EFI_PEI_CORE_ENTRY_POINT         *PeiCoreEntryPoint

+  )

+{

+  EFI_STATUS                       Status;

+  EFI_PHYSICAL_ADDRESS             SecCoreImageBase;

+  EFI_PHYSICAL_ADDRESS             PeiCoreImageBase;

+  PE_COFF_LOADER_IMAGE_CONTEXT     ImageContext;

+

+  //

+  // Find SEC Core and PEI Core image base

+  //

+  Status = FindImageBase (BootFirmwareVolumePtr, &SecCoreImageBase, &PeiCoreImageBase);

+  ASSERT_EFI_ERROR (Status);

+

+  ZeroMem ((VOID *) &ImageContext, sizeof (PE_COFF_LOADER_IMAGE_CONTEXT));

+  //

+  // Report SEC Core debug information when remote debug is enabled

+  //

+  ImageContext.ImageAddress = SecCoreImageBase;

+  ImageContext.PdbPointer = PeCoffLoaderGetPdbPointer ((VOID*) (UINTN) ImageContext.ImageAddress);

+  PeCoffLoaderRelocateImageExtraAction (&ImageContext);

+

+  //

+  // Report PEI Core debug information when remote debug is enabled

+  //

+  ImageContext.ImageAddress = PeiCoreImageBase;

+  ImageContext.PdbPointer = PeCoffLoaderGetPdbPointer ((VOID*) (UINTN) ImageContext.ImageAddress);

+  PeCoffLoaderRelocateImageExtraAction (&ImageContext);

+

+  //

+  // Find PEI Core entry point

+  //

+  Status = PeCoffLoaderGetEntryPoint ((VOID *) (UINTN) PeiCoreImageBase, (VOID**) PeiCoreEntryPoint);

+  if (EFI_ERROR (Status)) {

+    *PeiCoreEntryPoint = 0;

+  }

+

+  return;

+}

diff --git a/UefiCpuPkg/SecCore/Ia32/ResetVec.asm16 b/UefiCpuPkg/SecCore/Ia32/ResetVec.asm16
new file mode 100644
index 0000000000..d90613c4d0
--- /dev/null
+++ b/UefiCpuPkg/SecCore/Ia32/ResetVec.asm16
@@ -0,0 +1,106 @@
+;------------------------------------------------------------------------------

+;

+; Copyright (c) 2014, Intel Corporation. All rights reserved.<BR>

+; This program and the accompanying materials

+; are licensed and made available under the terms and conditions of the BSD License

+; which accompanies this distribution.  The full text of the license may be found at

+; http://opensource.org/licenses/bsd-license.php.

+;

+; THE PROGRAM IS DISTRIBUTED UNDER THE BSD LICENSE ON AN "AS IS" BASIS,

+; WITHOUT WARRANTIES OR REPRESENTATIONS OF ANY KIND, EITHER EXPRESS OR IMPLIED.

+;

+; Module Name:

+;

+;  ResetVec.asm

+;

+; Abstract:

+;

+;  Reset Vector Data structure

+;  This structure is located at 0xFFFFFFC0

+;

+;------------------------------------------------------------------------------

+

+    .model  tiny

+    .686p

+    .stack  0h

+    .code

+

+;

+; The layout of this file is fixed. The build tool makes assumption of the layout.

+;

+

+    ORG     0h

+;

+; Reserved

+;

+ReservedData         DD 0eeeeeeeeh, 0eeeeeeeeh

+

+    ORG     10h

+;

+; This is located at 0xFFFFFFD0h

+;

+    mov     di, "AP"

+    jmp     ApStartup

+

+    ORG     20h

+;

+; Pointer to the entry point of the PEI core

+; It is located at 0xFFFFFFE0, and is fixed up by some build tool

+; So if the value 8..1 appears in the final FD image, tool failure occurs.

+;

+PeiCoreEntryPoint       DD      87654321h

+

+;

+; This is the handler for all kinds of exceptions. Since it's for debugging

+; purpose only, nothing except a dead loop would be done here. Developers could

+; analyze the cause of the exception if a debugger had been attached.

+;

+InterruptHandler    PROC

+    jmp     $

+    iret

+InterruptHandler    ENDP

+

+    ORG     30h

+;

+; For IA32, the reset vector must be at 0xFFFFFFF0, i.e., 4G-16 byte

+; Execution starts here upon power-on/platform-reset.

+;

+ResetHandler:

+    nop

+    nop

+ApStartup:

+    ;

+    ; Jmp Rel16 instruction

+    ; Use machine code directly in case of the assembler optimization

+    ; SEC entry point relative address will be fixed up by some build tool.

+    ;

+    ; Typically, SEC entry point is the function _ModuleEntryPoint() defined in

+    ; SecEntry.asm

+    ;

+    DB      0e9h

+    DW      -3

+

+

+    ORG     38h

+;

+; Ap reset vector segment address is at 0xFFFFFFF8

+; This will be fixed up by some build tool,

+; so if the value 1..8 appears in the final FD image,

+; tool failure occurs

+;

+ApSegAddress    dd      12345678h

+

+    ORG     3ch

+;

+; BFV Base is at 0xFFFFFFFC

+; This will be fixed up by some build tool,

+; so if the value 1..8 appears in the final FD image,

+; tool failure occurs.

+;

+BfvBase     DD      12345678h

+

+;

+; Nothing can go here, otherwise the layout of this file would change.

+;

+

+    END

diff --git a/UefiCpuPkg/SecCore/Ia32/ResetVec.nasmb b/UefiCpuPkg/SecCore/Ia32/ResetVec.nasmb
new file mode 100644
index 0000000000..2fcdc85e47
--- /dev/null
+++ b/UefiCpuPkg/SecCore/Ia32/ResetVec.nasmb
@@ -0,0 +1,103 @@
+;------------------------------------------------------------------------------

+;

+; Copyright (c) 2014, Intel Corporation. All rights reserved.<BR>

+; This program and the accompanying materials

+; are licensed and made available under the terms and conditions of the BSD License

+; which accompanies this distribution.  The full text of the license may be found at

+; http://opensource.org/licenses/bsd-license.php.

+;

+; THE PROGRAM IS DISTRIBUTED UNDER THE BSD LICENSE ON AN "AS IS" BASIS,

+; WITHOUT WARRANTIES OR REPRESENTATIONS OF ANY KIND, EITHER EXPRESS OR IMPLIED.

+;

+; Module Name:

+;

+;  ResetVec.nasmb

+;

+; Abstract:

+;

+;  Reset Vector Data structure

+;  This structure is located at 0xFFFFFFC0

+;

+;------------------------------------------------------------------------------

+

+;    .stack  0x0

+;    SECTION .text

+USE16

+

+;

+; The layout of this file is fixed. The build tool makes assumption of the layout.

+;

+

+    ORG     0h

+;

+; Reserved

+;

+ReservedData:            DD 0eeeeeeeeh, 0eeeeeeeeh

+

+    TIMES 0x10-($-$$) DB 0

+;

+; This is located at 0xFFFFFFD0h

+;

+    mov     di, "PA"

+    jmp     ApStartup

+

+    TIMES 0x20-($-$$) DB 0

+;

+; Pointer to the entry point of the PEI core

+; It is located at 0xFFFFFFE0, and is fixed up by some build tool

+; So if the value 8..1 appears in the final FD image, tool failure occurs.

+;

+PeiCoreEntryPoint:       DD      87654321h

+

+;

+; This is the handler for all kinds of exceptions. Since it's for debugging

+; purpose only, nothing except a dead loop would be done here. Developers could

+; analyze the cause of the exception if a debugger had been attached.

+;

+global ASM_PFX(InterruptHandler)

+ASM_PFX(InterruptHandler):

+    jmp     $

+    iret

+

+    TIMES 0x30-($-$$) DB 0

+;

+; For IA32, the reset vector must be at 0xFFFFFFF0, i.e., 4G-16 byte

+; Execution starts here upon power-on/platform-reset.

+;

+ResetHandler:

+    nop

+    nop

+ApStartup:

+    ;

+    ; Jmp Rel16 instruction

+    ; Use machine code directly in case of the assembler optimization

+    ; SEC entry point relative address will be fixed up by some build tool.

+    ;

+    ; Typically, SEC entry point is the function _ModuleEntryPoint() defined in

+    ; SecEntry.asm

+    ;

+    DB      0e9h

+    DW      -3

+

+

+    TIMES 0x38-($-$$) DB 0

+;

+; Ap reset vector segment address is at 0xFFFFFFF8

+; This will be fixed up by some build tool,

+; so if the value 1..8 appears in the final FD image,

+; tool failure occurs

+;

+ApSegAddress:    dd      12345678h

+

+    TIMES 0x3c-($-$$) DB 0

+;

+; BFV Base is at 0xFFFFFFFC

+; This will be fixed up by some build tool,

+; so if the value 1..8 appears in the final FD image,

+; tool failure occurs.

+;

+BfvBase:     DD      12345678h

+

+;

+; Nothing can go here, otherwise the layout of this file would change.

+;

diff --git a/UefiCpuPkg/SecCore/SecCore.inf b/UefiCpuPkg/SecCore/SecCore.inf
new file mode 100644
index 0000000000..bf08a4cc49
--- /dev/null
+++ b/UefiCpuPkg/SecCore/SecCore.inf
@@ -0,0 +1,72 @@
+## @file

+#  SecCore module that implements the SEC phase.

+#

+#  This is the first module taking control of the platform upon power-on/reset.

+#  It implements the first phase of the security phase. The entry point function is

+#  _ModuleEntryPoint in PlatformSecLib. The entry point function will switch to

+#  protected mode, setup flat memory model, enable temporary memory and

+#  call into SecStartup().

+#

+#  Copyright (c) 2006 - 2015, Intel Corporation. All rights reserved.<BR>

+#  This program and the accompanying materials

+#  are licensed and made available under the terms and conditions of the BSD License

+#  which accompanies this distribution.  The full text of the license may be found at

+#  http://opensource.org/licenses/bsd-license.php

+#

+#  THE PROGRAM IS DISTRIBUTED UNDER THE BSD LICENSE ON AN "AS IS" BASIS,

+#  WITHOUT WARRANTIES OR REPRESENTATIONS OF ANY KIND, EITHER EXPRESS OR IMPLIED.

+#

+##

+

+[Defines]

+  INF_VERSION                    = 0x00010005

+  BASE_NAME                      = SecCore

+  MODULE_UNI_FILE                = SecCore.uni

+  FILE_GUID                      = 1BA0062E-C779-4582-8566-336AE8F78F09

+  MODULE_TYPE                    = SEC

+  VERSION_STRING                 = 1.0

+

+

+#

+# The following information is for reference only and not required by the build tools.

+#

+#  VALID_ARCHITECTURES           = IA32 X64 IPF EBC

+#

+

+[Sources]

+  SecMain.c

+  SecMain.h

+  FindPeiCore.c

+

+[Sources.IA32]

+  Ia32/ResetVec.asm16 | MSFT

+  Ia32/ResetVec.asm16 | INTEL

+  Ia32/ResetVec.nasmb | GCC

+

+[Packages]

+  MdePkg/MdePkg.dec

+  MdeModulePkg/MdeModulePkg.dec

+  UefiCpuPkg/UefiCpuPkg.dec

+

+[LibraryClasses]

+  BaseMemoryLib

+  DebugLib

+  BaseLib

+  PlatformSecLib

+  PcdLib

+  DebugAgentLib

+  UefiCpuLib

+  PeCoffGetEntryPointLib

+  PeCoffExtraActionLib

+  CpuExceptionHandlerLib

+  ReportStatusCodeLib

+

+[Ppis]

+  gEfiSecPlatformInformationPpiGuid                    ## PRODUCES

+  gEfiTemporaryRamDonePpiGuid                          ## PRODUCES

+

+[Pcd]

+  gUefiCpuPkgTokenSpaceGuid.PcdPeiTemporaryRamStackSize  ## CONSUMES

+

+[UserExtensions.TianoCore."ExtraFiles"]

+  SecCoreExtra.uni

diff --git a/UefiCpuPkg/SecCore/SecCore.uni b/UefiCpuPkg/SecCore/SecCore.uni
new file mode 100644
index 0000000000..dff756a3b3
--- /dev/null
+++ b/UefiCpuPkg/SecCore/SecCore.uni
diff --git a/UefiCpuPkg/SecCore/SecCoreExtra.uni b/UefiCpuPkg/SecCore/SecCoreExtra.uni
new file mode 100644
index 0000000000..15e22ed852
--- /dev/null
+++ b/UefiCpuPkg/SecCore/SecCoreExtra.uni
diff --git a/UefiCpuPkg/SecCore/SecMain.c b/UefiCpuPkg/SecCore/SecMain.c
new file mode 100644
index 0000000000..ec252cf719
--- /dev/null
+++ b/UefiCpuPkg/SecCore/SecMain.c
@@ -0,0 +1,295 @@
+/** @file

+  C functions in SEC

+

+  Copyright (c) 2008 - 2015, Intel Corporation. All rights reserved.<BR>

+  This program and the accompanying materials

+  are licensed and made available under the terms and conditions of the BSD License

+  which accompanies this distribution.  The full text of the license may be found at

+  http://opensource.org/licenses/bsd-license.php

+

+  THE PROGRAM IS DISTRIBUTED UNDER THE BSD LICENSE ON AN "AS IS" BASIS,

+  WITHOUT WARRANTIES OR REPRESENTATIONS OF ANY KIND, EITHER EXPRESS OR IMPLIED.

+

+**/

+

+#include "SecMain.h"

+

+EFI_PEI_TEMPORARY_RAM_DONE_PPI gSecTemporaryRamDonePpi = {

+  SecTemporaryRamDone

+};

+

+EFI_SEC_PLATFORM_INFORMATION_PPI  mSecPlatformInformationPpi = { SecPlatformInformation };

+

+EFI_PEI_PPI_DESCRIPTOR            mPeiSecPlatformInformationPpi[] = {

+  {

+    EFI_PEI_PPI_DESCRIPTOR_PPI,

+    &gEfiTemporaryRamDonePpiGuid,

+    &gSecTemporaryRamDonePpi

+  },

+  {

+    (EFI_PEI_PPI_DESCRIPTOR_PPI | EFI_PEI_PPI_DESCRIPTOR_TERMINATE_LIST),

+    &gEfiSecPlatformInformationPpiGuid,

+    &mSecPlatformInformationPpi

+  }

+};

+

+//

+// These are IDT entries pointing to 10:FFFFFFE4h.

+//

+UINT64  mIdtEntryTemplate = 0xffff8e000010ffe4ULL;

+

+/**

+  Caller provided function to be invoked at the end of InitializeDebugAgent().

+

+  Entry point to the C language phase of SEC. After the SEC assembly

+  code has initialized some temporary memory and set up the stack,

+  the control is transferred to this function.

+

+  @param[in] Context    The first input parameter of InitializeDebugAgent().

+

+**/

+VOID

+EFIAPI

+SecStartupPhase2(

+  IN VOID                     *Context

+  );

+

+/**

+

+  Entry point to the C language phase of SEC. After the SEC assembly

+  code has initialized some temporary memory and set up the stack,

+  the control is transferred to this function.

+

+

+  @param SizeOfRam           Size of the temporary memory available for use.

+  @param TempRamBase         Base address of temporary ram

+  @param BootFirmwareVolume  Base address of the Boot Firmware Volume.

+**/

+VOID

+EFIAPI

+SecStartup (

+  IN UINT32                   SizeOfRam,

+  IN UINT32                   TempRamBase,

+  IN VOID                     *BootFirmwareVolume

+  )

+{

+  EFI_SEC_PEI_HAND_OFF        SecCoreData;

+  IA32_DESCRIPTOR             IdtDescriptor;

+  SEC_IDT_TABLE               IdtTableInStack;

+  UINT32                      Index;

+  UINT32                      PeiStackSize;

+  EFI_STATUS                  Status;

+

+  //

+  // Report Status Code to indicate entering SEC core

+  //

+  REPORT_STATUS_CODE (

+    EFI_PROGRESS_CODE,

+    EFI_SOFTWARE_SEC | EFI_SW_SEC_PC_ENTRY_POINT

+    );

+

+  PeiStackSize = PcdGet32 (PcdPeiTemporaryRamStackSize);

+  if (PeiStackSize == 0) {

+    PeiStackSize = (SizeOfRam >> 1);

+  }

+

+  ASSERT (PeiStackSize < SizeOfRam);

+

+  //

+  // Process all libraries constructor function linked to SecCore.

+  //

+  ProcessLibraryConstructorList ();

+

+  //

+  // Initialize floating point operating environment

+  // to be compliant with UEFI spec.

+  //

+  InitializeFloatingPointUnits ();

+

+  // |-------------------|---->

+  // |IDT Table          |

+  // |-------------------|

+  // |PeiService Pointer |    PeiStackSize

+  // |-------------------|

+  // |                   |

+  // |      Stack        |

+  // |-------------------|---->

+  // |                   |

+  // |                   |

+  // |      Heap         |    PeiTemporayRamSize

+  // |                   |

+  // |                   |

+  // |-------------------|---->  TempRamBase

+

+  IdtTableInStack.PeiService = 0;

+  for (Index = 0; Index < SEC_IDT_ENTRY_COUNT; Index ++) {

+    CopyMem ((VOID*)&IdtTableInStack.IdtTable[Index], (VOID*)&mIdtEntryTemplate, sizeof (UINT64));

+  }

+

+  IdtDescriptor.Base  = (UINTN) &IdtTableInStack.IdtTable;

+  IdtDescriptor.Limit = (UINT16)(sizeof (IdtTableInStack.IdtTable) - 1);

+

+  AsmWriteIdtr (&IdtDescriptor);

+

+  //

+  // Setup the default exception handlers

+  //

+  Status = InitializeCpuExceptionHandlers (NULL);

+  ASSERT_EFI_ERROR (Status);

+

+  //

+  // Update the base address and length of Pei temporary memory

+  //

+  SecCoreData.DataSize               = (UINT16) sizeof (EFI_SEC_PEI_HAND_OFF);

+  SecCoreData.BootFirmwareVolumeBase = BootFirmwareVolume;

+  SecCoreData.BootFirmwareVolumeSize = (UINTN)(0x100000000ULL - (UINTN) BootFirmwareVolume);

+  SecCoreData.TemporaryRamBase       = (VOID*)(UINTN) TempRamBase;

+  SecCoreData.TemporaryRamSize       = SizeOfRam;

+  SecCoreData.PeiTemporaryRamBase    = SecCoreData.TemporaryRamBase;

+  SecCoreData.PeiTemporaryRamSize    = SizeOfRam - PeiStackSize;

+  SecCoreData.StackBase              = (VOID*)(UINTN)(TempRamBase + SecCoreData.PeiTemporaryRamSize);

+  SecCoreData.StackSize              = PeiStackSize;

+

+  //

+  // Initialize Debug Agent to support source level debug in SEC/PEI phases before memory ready.

+  //

+  InitializeDebugAgent (DEBUG_AGENT_INIT_PREMEM_SEC, &SecCoreData, SecStartupPhase2);

+}

+

+/**

+  Caller provided function to be invoked at the end of InitializeDebugAgent().

+

+  Entry point to the C language phase of SEC. After the SEC assembly

+  code has initialized some temporary memory and set up the stack,

+  the control is transferred to this function.

+

+  @param[in] Context    The first input parameter of InitializeDebugAgent().

+

+**/

+VOID

+EFIAPI

+SecStartupPhase2(

+  IN VOID                     *Context

+  )

+{

+  EFI_SEC_PEI_HAND_OFF        *SecCoreData;

+  EFI_PEI_PPI_DESCRIPTOR      *PpiList;

+  UINT32                      Index;

+  EFI_PEI_PPI_DESCRIPTOR      *AllSecPpiList;

+  EFI_PEI_CORE_ENTRY_POINT    PeiCoreEntryPoint;

+

+  SecCoreData   = (EFI_SEC_PEI_HAND_OFF *) Context;

+  AllSecPpiList = (EFI_PEI_PPI_DESCRIPTOR *) SecCoreData->PeiTemporaryRamBase;

+  //

+  // Find Pei Core entry point. It will report SEC and Pei Core debug information if remote debug

+  // is enabled.

+  //

+  FindAndReportEntryPoints ((EFI_FIRMWARE_VOLUME_HEADER *) SecCoreData->BootFirmwareVolumeBase, &PeiCoreEntryPoint);

+  if (PeiCoreEntryPoint == NULL)

+  {

+    CpuDeadLoop ();

+  }

+

+  //

+  // Perform platform specific initialization before entering PeiCore.

+  //

+  PpiList = SecPlatformMain (SecCoreData);

+  if (PpiList != NULL) {

+    //

+    // Remove the terminal flag from the terminal PPI

+    //

+    CopyMem (AllSecPpiList, mPeiSecPlatformInformationPpi, sizeof (mPeiSecPlatformInformationPpi));

+    Index = sizeof (mPeiSecPlatformInformationPpi) / sizeof (EFI_PEI_PPI_DESCRIPTOR) - 1;

+    AllSecPpiList[Index].Flags = AllSecPpiList[Index].Flags & (~EFI_PEI_PPI_DESCRIPTOR_TERMINATE_LIST);

+

+    //

+    // Append the platform additional PPI list

+    //

+    Index += 1;

+    while (((PpiList->Flags & EFI_PEI_PPI_DESCRIPTOR_TERMINATE_LIST) != EFI_PEI_PPI_DESCRIPTOR_TERMINATE_LIST)) {

+      CopyMem (&AllSecPpiList[Index], PpiList, sizeof (EFI_PEI_PPI_DESCRIPTOR));

+      Index++;

+      PpiList++;

+    }

+

+    //

+    // Add the terminal PPI

+    //

+    CopyMem (&AllSecPpiList[Index ++], PpiList, sizeof (EFI_PEI_PPI_DESCRIPTOR));

+

+    //

+    // Set PpiList to the total PPI

+    //

+    PpiList = AllSecPpiList;

+

+    //

+    // Adjust PEI TEMP RAM Range.

+    //

+    ASSERT (SecCoreData->PeiTemporaryRamSize > Index * sizeof (EFI_PEI_PPI_DESCRIPTOR));

+    SecCoreData->PeiTemporaryRamBase = (VOID *)((UINTN) SecCoreData->PeiTemporaryRamBase + Index * sizeof (EFI_PEI_PPI_DESCRIPTOR));

+    SecCoreData->PeiTemporaryRamSize = SecCoreData->PeiTemporaryRamSize - Index * sizeof (EFI_PEI_PPI_DESCRIPTOR);

+  } else {

+    //

+    // No addition PPI, PpiList directly point to the common PPI list.

+    //

+    PpiList = &mPeiSecPlatformInformationPpi[0];

+  }

+

+  //

+  // Report Status Code to indicate transferring to PEI core

+  //

+  REPORT_STATUS_CODE (

+    EFI_PROGRESS_CODE,

+    EFI_SOFTWARE_SEC | EFI_SW_SEC_PC_HANDOFF_TO_NEXT

+    );

+

+  //

+  // Transfer the control to the PEI core

+  //

+  ASSERT (PeiCoreEntryPoint != NULL);

+  (*PeiCoreEntryPoint) (SecCoreData, PpiList);

+

+  //

+  // Should not come here.

+  //

+  return;

+}

+

+/**

+  TemporaryRamDone() disables the use of Temporary RAM. If present, this service is invoked

+  by the PEI Foundation after the EFI_PEI_PERMANANT_MEMORY_INSTALLED_PPI is installed.

+

+  @retval EFI_SUCCESS           Use of Temporary RAM was disabled.

+  @retval EFI_INVALID_PARAMETER Temporary RAM could not be disabled.

+

+**/

+EFI_STATUS

+EFIAPI

+SecTemporaryRamDone (

+  VOID

+  )

+{

+  BOOLEAN  State;

+

+  //

+  // Migrate DebugAgentContext.

+  //

+  InitializeDebugAgent (DEBUG_AGENT_INIT_POSTMEM_SEC, NULL, NULL);

+

+  //

+  // Disable interrupts and save current interrupt state

+  //

+  State = SaveAndDisableInterrupts();

+

+  //

+  // Disable Temporary RAM after Stack and Heap have been migrated at this point.

+  //

+  SecPlatformDisableTemporaryMemory ();

+

+  //

+  // Restore original interrupt state

+  //

+  SetInterruptState (State);

+

+  return EFI_SUCCESS;

+}

diff --git a/UefiCpuPkg/SecCore/SecMain.h b/UefiCpuPkg/SecCore/SecMain.h
new file mode 100644
index 0000000000..05175d299d
--- /dev/null
+++ b/UefiCpuPkg/SecCore/SecMain.h
@@ -0,0 +1,109 @@
+/** @file

+  Master header file for SecCore.

+

+  Copyright (c) 2008 - 2013, Intel Corporation. All rights reserved.<BR>

+  This program and the accompanying materials

+  are licensed and made available under the terms and conditions of the BSD License

+  which accompanies this distribution.  The full text of the license may be found at

+  http://opensource.org/licenses/bsd-license.php

+

+  THE PROGRAM IS DISTRIBUTED UNDER THE BSD LICENSE ON AN "AS IS" BASIS,

+  WITHOUT WARRANTIES OR REPRESENTATIONS OF ANY KIND, EITHER EXPRESS OR IMPLIED.

+

+**/

+

+#ifndef _SEC_CORE_H_

+#define _SEC_CORE_H_

+

+#include <PiPei.h>

+

+#include <Ppi/SecPlatformInformation.h>

+#include <Ppi/TemporaryRamDone.h>

+

+#include <Library/BaseLib.h>

+#include <Library/DebugLib.h>

+#include <Library/PcdLib.h>

+#include <Library/BaseMemoryLib.h>

+#include <Library/PlatformSecLib.h>

+#include <Library/UefiCpuLib.h>

+#include <Library/PeCoffGetEntryPointLib.h>

+#include <Library/PeCoffExtraActionLib.h>

+#include <Library/DebugAgentLib.h>

+#include <Library/CpuExceptionHandlerLib.h>

+#include <Library/ReportStatusCodeLib.h>

+

+

+#define SEC_IDT_ENTRY_COUNT  34

+

+typedef struct _SEC_IDT_TABLE {

+  //

+  // Reserved 8 bytes preceding IDT to store EFI_PEI_SERVICES**, since IDT base

+  // address should be 8-byte alignment.

+  // Note: For IA32, only the 4 bytes immediately preceding IDT is used to store

+  // EFI_PEI_SERVICES**

+  //

+  UINT64            PeiService;

+  UINT64            IdtTable[SEC_IDT_ENTRY_COUNT];

+} SEC_IDT_TABLE;

+

+/**

+  TemporaryRamDone() disables the use of Temporary RAM. If present, this service is invoked

+  by the PEI Foundation after the EFI_PEI_PERMANANT_MEMORY_INSTALLED_PPI is installed.

+

+  @retval EFI_SUCCESS           Use of Temporary RAM was disabled.

+  @retval EFI_INVALID_PARAMETER Temporary RAM could not be disabled.

+

+**/

+EFI_STATUS

+EFIAPI

+SecTemporaryRamDone (

+  VOID

+  );

+

+/**

+  Entry point to the C language phase of SEC. After the SEC assembly

+  code has initialized some temporary memory and set up the stack,

+  the control is transferred to this function.

+

+  @param SizeOfRam           Size of the temporary memory available for use.

+  @param TempRamBase         Base address of temporary ram

+  @param BootFirmwareVolume  Base address of the Boot Firmware Volume.

+**/

+VOID

+EFIAPI

+SecStartup (

+  IN UINT32                   SizeOfRam,

+  IN UINT32                   TempRamBase,

+  IN VOID                     *BootFirmwareVolume

+  );

+

+/**

+  Find and return Pei Core entry point.

+

+  It also find SEC and PEI Core file debug information. It will report them if

+  remote debug is enabled.

+

+  @param  BootFirmwareVolumePtr  Point to the boot firmware volume.

+  @param  PeiCoreEntryPoint      Point to the PEI core entry point.

+

+**/

+VOID

+EFIAPI

+FindAndReportEntryPoints (

+  IN  EFI_FIRMWARE_VOLUME_HEADER       *BootFirmwareVolumePtr,

+  OUT EFI_PEI_CORE_ENTRY_POINT         *PeiCoreEntryPoint

+  );

+

+/**

+  Auto-generated function that calls the library constructors for all of the module's

+  dependent libraries.  This function must be called by the SEC Core once a stack has

+  been established.

+

+**/

+VOID

+EFIAPI

+ProcessLibraryConstructorList (

+  VOID

+  );

+

+#endif