summaryrefslogtreecommitdiff
path: root/board/cr50/dcrypto/fips_module.ld
blob: 7199beb107a2ae6c55f378ec0ad8cd32c1fe230d (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
SECTIONS
{
	.text.fips :  ALIGN(4)  SUBALIGN(4)
	{
		. = ALIGN(4);
		*(SORT_BY_NAME(.text*) .gnu.linkonce.t.*)
		. = ALIGN(4);
	} =0xffffffff

	/* Special EC sections should be placed
         * in the properly named sections. */
	.rodata.HOOK_INIT : {
		*(.rodata.HOOK_INIT)
	}
	.rodata.cmds.fips : {
		*(.rodata.cmds.*)
	}
	.rodata.extensioncmds : {
		*(.rodata.extensioncmds)
	}
	.rodata.irqprio : {
		*(.rodata.irqprio)
	}

	/* FIPS integrity placeholder should be in separate section. */
	.rodata.fips.checksum : {
		*(.rodata.fips.checksum)
	}

	/* Rest of the FIPS module data. */
	.rodata.fips : {
		/* Combine read-only data. */
		*(SORT_BY_NAME(.rodata*) SORT_BY_NAME(.srodata*) \
		 .gnu.linkonce.r.*)
	} =0xffffffff
	.data.fips :
	{
		*(SORT_BY_NAME(.data*) \
		  SORT_BY_NAME(.sdata*) \
		  SORT_BY_NAME(.ramfunc*))
	}
	ASSERT(SIZEOF(.data.fips) == 0, "No .data for FIPS module is allowed")
	.bss.fips (NOLOAD) :
	{
		. = ALIGN(4);
		*(SORT_BY_NAME(.sbss*) SORT_BY_NAME(.bss*))
		*(COMMON)
		. = ALIGN(4);
	}
	/* Debug data; this is stripped from the final binary. */
	.debug_abbrev 0 : { *(.debug_abbrev) }
	.debug_aranges 0 : { *(.debug_aranges) }
	.debug_frame 0 : { *(.debug_frame) }
	.debug_info 0 : { *(.debug_info) }
	.debug_line 0 : { *(.debug_line) }
	.debug_loc 0 : { *(.debug_loc) }
	.debug_ranges 0 : { *(.debug_ranges) }
	.debug_str 0 : { *(.debug_str) }
	.debug_macinfo 0 : { *(.debug_macinfo) }
	.debug_pubnames 0 : { *(.debug_pubnames) }
	.debug_pubtypes 0 : { *(.debug_pubtypes) }
	.symtab 0 : { *(.symtab) }
	.symtab_shndx 0 : { *(.symtab_shndx) }
	.shstrtab 0 : { *(.shstrtab) }
	.strtab 0 : { *(.strtab) }
	/* .stack_sizes (INFO)  makes the section not allocatable so
	 * it won't be loaded into memory. */
	.stack_sizes 0 :
	{
		KEEP(*(.stack_sizes));
	}
	/DISCARD/ :
	{
	*(.eh_frame);
	*(.comment*)
	*(.ARM.attributes*)
	*(.riscv.attributes*)
	*(.llvm_addrsig*)
	*(.note.GNU-stack*)
	*(.note.gnu.build-id)
	}
}