dasharo/uefi_capsules.c: coalesce and store UEFI capsules

(After DEV_INIT:)
1. Capsules are parsed from CapsuleUpdateData* EFI variables and are
   validated for sanity
2. Capsule data is coalesced into a continuous piece of memory

(On BS_WRITE_TABLES via dasharo_add_capsules_to_bootmem() hook:)
3. Buffer with coalesced capsules is marked as reserved

(On BS_WRITE_TABLES via lb_uefi_capsules() hook:)
4. coreboot table entries are added for each of the discovered capsules

Change-Id: I162d678ae5c504906084b59c1a8d8c26dadb9433
Signed-off-by: Sergii Dmytruk <[email protected]>

src/lib/bootmem.c

@@ -3,6 +3,7 @@
 #include <console/console.h>
 #include <bootmem.h>
 #include <cbmem.h>
+#include <dasharo/uefi_capsules.h>
 #include <device/resource.h>
 #include <symbols.h>
 #include <assert.h>
@@ -80,6 +81,8 @@ static void bootmem_init(void)
 	/* Add memory used by CBMEM. */
 	cbmem_add_bootmem();
 
+	dasharo_add_capsules_to_bootmem();
+
 	bootmem_add_range((uintptr_t)_stack, REGION_SIZE(stack),
 			  BM_MEM_RAMSTAGE);
 	bootmem_add_range((uintptr_t)_program, REGION_SIZE(program),

src/security/memory/memory_clear.c

@@ -20,6 +20,7 @@
 #include <security/memory/memory.h>
 #include <cbmem.h>
 #include <acpi/acpi.h>
+#include <dasharo/uefi_capsules.h>
 
 /* Helper to find free space for memset_pae. */
 static uintptr_t get_free_memory_range(struct memranges *mem,
@@ -60,6 +61,10 @@ static void clear_memory(void *unused)
 	if (acpi_is_wakeup_s3())
 		return;
 
+	/* Process capsules before clearing memory and only if not waking up
+	 * from S3. */
+	dasharo_parse_capsules();
+
 	if (!security_clear_dram_request())
 		return;
 

src/vendorcode/dasharo/Makefile.inc

@@ -6,3 +6,5 @@ smm-y += options.c
 all-y += options.c
 
 ramstage-y += smbios.c
+
+ramstage-y += uefi_capsules.c

src/vendorcode/dasharo/include/dasharo/uefi_capsules.h

@@ -0,0 +1,10 @@
+/* SPDX-License-Identifier: GPL-2.0-only */
+
+#ifndef DASHARO_UEFI_CAPSULES_H
+#define DASHARO_UEFI_CAPSULES_H
+
+void dasharo_parse_capsules(void);
+
+void dasharo_add_capsules_to_bootmem(void);
+
+#endif /* DASHARO_UEFI_CAPSULES_H */