MSM8937系统启动流程【转】
本文转载自:https://blog.csdn.net/chenzhen1080/article/details/54945992?utm_source=blogxgwz8
1 Boot Address for Processors使用的处理器
chipsets里有不同的处理器,下图显示了处理器的类型以及启动地址
Subsystem Processor Boot address
APPS Cortex-A53 0x00100000*
RPM Cortex-M3 0x00200000 |
(Subsystem view) | 0x0(System view)
Modem MSS_QDSP6 Configurable*
WCNSS (Pronto) ARM9 0x0 or 0xFFFF0000 or hardware remap*
LPASS LPASS_QDSP6 Configurable* | LPASS
*No change in the boot address in system and subsystem views
APPS:应用处理器
RPM:resource and power management 用来进行电源管理
Modem:打电话2G 3G 4G的相关功能 (由dsp实现)
WCNSS:wireless connectivity network subsystem,wifi上网
LPASS:low power audio subsystem,低功耗音频子系统(sensorhub也在这里实现)(由dsp实现)
2 Boot Call Stack
Component
组件 Based on
processor
哪个处理器执行 Loaded from
从哪加载 Executes in
再哪里执行 Function
功能
Application Processor
Primary Boot Loader
(APPS PBL)
AP的第一个Bootloader Cortex-A53
(AArch32) NA APPS ROM Boot device and interface detection,
Emergency Download mode support,
loads and authenticates SBL1 ELF
segments across L2TCM, and RPM
code RAM
Secondary Boot
Loader stage 1 (SBL1)
第二个bootloader的
第一阶段 Cortex-A53
(AArch32) eMMC
L2 TCM
(segment1) L2 TCM
OCIMEM —
RPM code RAM
(segment2) RPM code
RAM
Initial memory subsystem (buses,
DDR, clocks, and CDT), loads/
authorizes TrustZone, DEVCFG,
RPM_FW, APPS BL images, memory
dump via USB 2.0 and Sahara,
Watchdog debug retention, e.gfor
example, L2 flush, RAM dump to
eMMC/SD support, USB driver
support, USB charging, thermal
check, PMIC driver support,
configures DDR, and flushes
L1/L2/ETB to crash debug
support-related configuration
QSEE/TrustZone Cortex-A53
(AArch64) eMMC LPDDR3 Equivalent to TZBSP; sets up secure
runtime environment, configures xPU,
supports fuse driver, authenticates
any subsystem images; abnormal
RESET debug functionality is added
DEVCFG Cortex-A53
(AArch64) eMMC LPDDR3 OEM configurable data, for example,
xPU configuration, PIL loading image
regions
Component Based on
processor Loaded from Executes in Function
Debug policy1
(fuse的机器可以调试,
是可选的) Cortex-A53
(Aarch 32) eMMC LPDDR3 Enables debugging on commercial
secure devices
Resource Power
Manager Firmware
(RPM_FW) Cortex-M3 eMMC RPM code RAM Resource power management
APPSBL/boot
manager and
OS loader
(就是lk) Cortex-A532
(AArch32/
AArch64) eMMC LPDDR3 Splash screen, loads and
authenticates the kernel, and
provides HLOS-specific boot loader
features using UEFI
High-Level Operating
System (HLOS)
(就是android) Cortex-A53
(AArch32/
AArch64) eMMC LPDDR3 Boots HLOS images, for example,
A53 HLOS kernel image, WCNSS
(Pronto) image, and so on.
Modem Primary Boot
Loader (Modem PBL)
(modem的bootloader) MSS_QDSP6 NA Modem ROM
Qualcomm® Hexagon™ TCM
(data and stack) Sets up Hexagon TCM, copies MBA
from LPDDR3 into Hexagon TCM,
and authenticates MBA in Hexagon
TCM
Modem Boot
Authenticator (MBA)
(modem验证) MSS_QDSP6 eMMC Hexagon TCM Authenticates the modem image, xPU
protects the DDR regions for modem,
and memory dump
1Debug policy image is an optional image loaded by the SBL. See Debug Policy User Guide for MSM8996, MSM8976, MSM8956
(80-NV396-72).
2LK boot loader will start in 32-bit
PS:debug policy是针对fuse过的机器,让fuse过的机器也可以调试
3 Boot Code Flow启动流程
Boot Flowchart
1. The system powers on and takes the MSM8937/MSM8953/MSM8940 apps processor CPU out of reset.
按下power键后,MSM8937/MSM8953/MSM8940的apps处理器开始执行,APPS PBL在ROM里执行
2. In Cortex-A53, APPS PBL loads and authenticates the following:
a. SBL1 segment 1 from the boot device to L2 (as TCM)
将sbl1加载到l2中
b. SBL1 segment 2 (SDI equivalent) to RPM code RAM, then jumps to SBL1
将RPM的代码加载到RPM的code RAM中,跳转执行SBL1
3. SBL1 segment 1 initializes DDR and loads and authenticates the following:
a. QSEE/TrustZone image from the boot device to DDR
将QSEE/TrustZone加载到DDR
b. DEVCFG image from the boot device to DDR
将DEVCFG 加载到DDR
c. Debug Policy image from the boot device to DDR
将Debug Policy加载到DDR
d. HLOS APPSBL image from the boot device to DDR
将APPSBL(即lk)加载到DDR
e. RPM firmware image from the boot device to RPM code RAM
将RPM firmware image加载到DDR
4. SBL1 transfers the execution to QSEE/TrustZone. QSEE/TrustZone sets up a secure environment, configures xPU, and supports the fuse driver.
sbl1执行完后,执行QSEE,QSEE设置安全环境,配置xPU,
a. SBL1 runs in AArch32 mode. QSEE/TrustZone runs in AArc64 mode. For AArch64 mode switch, SBL1 sets boot remapper for QSEE entry and writes to RMR register, and then triggers warm-reset. QSEE now starts in AArch64 mode.
SBL1运行在AArch32 模式,QSEE/TrustZone运行在AArc64 模式,SBL1将QSEE 的入口remap,写RMR寄存器,warm-reset,这样QSEE就在AArch64 模式
5. QSEE notifies RPM to start the RPM firmware execution.
QSEE通知RPM执行RPM的固件
6. QSEE transfers execution to the HLOS APPSBL to initialize the system.
HLOS APPSBL (即lk)初始化系统
a. The Linux APPS boot loader (HLOS APPSBL) starts the execution in AArch32 mode only.
HLOS APPSBL运行在AArch32 模式
b. This is done by EL3/Monitor mode by looking at the ELF header for HLOS APPSBL, which indicates that it uses 32-bit instruction set architecture. EL3/Monitor mode changes to 32-bit mode and starts Linux APPS boot loader (HLOS APPSBL) execution in 32-bit mode.
通过查看 HLOS APPSBL的ELF的文件头,需要使用32位的指令集,系统切换到32位的模式
7. The HLOS APPSBL loads and authenticates the HLOS kernel. The Linux APPS boot loader (HLOS APPSBL) will indicate about the HLOS kernel AArch64 mode by making an SCM call to secure the monitor before exiting. LK does not jump into the kernel directly as it did previously.
HLOS APPSBL(即lk)加载内核,通过SCM调用切换到AArch64 模式
8. The HLOS kernel loads the MBA to DDR via PIL.
HLOS kernel 通过pil加载MBA到DDR
9. The HLOS kernel brings the Hexagon modem DSP out of reset.
HLOS kernel复位modem的DSP
10. The Modem PBL then continues its boot process.
Modem的PBL执行
11. The HLOS kernel loads the AMSS modem image to DDR via PIL.
HLOS kernel 通过pil加载AMSS modem image 到DDR
12. The Modem PBL authenticates MBA and then jumps to it.
modem的PBL验证MBA,然后跳进执行
13. HLOS loads the WCNSS (Pronto) image to DDR via PIL.
HLOS kernel 通过pil加载WCNSS 到DDR
14. HLOS brings the WCNSS (Pronto) image out of reset so that the Pronto image starts executing.
HLOS复位wifi的处理器,wifi的固件开始执行
15. HLOS loads the LPASS image to DDR via PIL.
HLOS kernel 通过pil加载LPASS(音频子系统)到DDR
16. HLOS brings the LPASS image out of reset so that the LPASS image starts executing.
HLOS kernel 复位处理音频的dsp,音频子系统开始运行
---------------------
作者:茫茫大士
来源:CSDN
原文:https://blog.csdn.net/chenzhen1080/article/details/54945992
版权声明:本文为博主原创文章,转载请附上博文链接!
MSM8937系统启动流程【转】的更多相关文章
- Linux操作系统启动流程梳理
接触linux系统运维已经好几年了,常常被问到linux系统启动流程问题,刚好今天有空来梳理下这个过程:一般来说,所有的操作系统的启动流程基本就是: 总的来说,linux系统启动流程可以简单总结为以下 ...
- CentOS系统启动流程
CentOS系统启动流程 POST --> Boot Sequence(BIOS) --> Boot Loader(MBR) --> kernel(ramdisk) --> r ...
- CentOS系统启动流程你懂否
一.Linux内核的组成 相关概念: Linux系统的组成部分:内核+根文件系统 内核:进程管理.内存管理.网络协议栈.文件系统.驱动程序. IPC(Inter-Process Communicati ...
- linux基础-附件1 linux系统启动流程
附件1 linux系统启动流程 最初始阶段当我们打开计算机电源,计算机会自动从主板的BIOS(Basic Input/Output System)读取其中所存储的程序.这一程序通常知道一些直接连接在主 ...
- Linux系统启动流程及安装命令行版本
Debian安装 之前也安装过很多次linux不同版本的系统,但安装后都是直接带有桌面开发环境的版本,直接可以使用,正好最近项目不是很忙,想一直了解下Linux的整个启动流程,以及如何从命令行模式系统 ...
- 【转载】Linux系统启动流程
原文:Linux系统启动流程 POST(Power On Self Test/上电自检)-->BootLoader(MBR)-->Kernel(硬件探测.加载驱动.挂载根文件系统./sbi ...
- Linux系统启动流程及grub重建(1)
日志系统 Linux系统启动流程 PC: OS(Linux) POST-->BIOS(Boot Sequence)-->MBR(bootloader,446)-->Kernel--& ...
- Linux第八讲随笔 -tar / 系统启动流程
linux 第八讲1.tar 参考 作用:压缩和解压文件.tar本身不具有压缩功能.他是调用压缩功能实现的. 语法:tar[必要参数][选择参数][文件] 参数:必要参数有如下: -A 新增压缩文件到 ...
- 【Android 系统开发】 Android 系统启动流程简介
作者 : 万境绝尘 (octopus_truth@163.com) 转载请注明出处 : http://blog.csdn.net/shulianghan/article/details/3889548 ...
随机推荐
- django model field validator 设置
转自:http://blog.csdn.net/cwjcwj520/article/details/17330845 例子为想在创建用户名的时候验证输入字符是否有效,并且插入了even_field为C ...
- 四种数据库随机获取N条数据的方法
1.SQL Server: SELECT TOP n * FROM tableName ORDER BY NEWID(); 2.ORACLE: SELECT * FROM (SELECT * ...
- python脚本中为什么要在目录前加一个r
目的:为了避免转义,r后面的内容,全文输出: r是保持字符串原始值的意思,就是说不对其中的符号进行转义.因为windows下的目录字符串中通常有斜杠"\",比如,windows下的 ...
- AT2043 AND Grid 构造
正解:构造 解题报告: 传送门传送门! 这题psj讲了俩做法,一个是最常见的解法,还一种还不知道484对的QAQ 然后先把psj讲的不知正确性的做法港下QwQ 大概就是说,第一个图,先把底给染完 然后 ...
- JS模块化编程(三)
AMD&CMD 对象字面量 对象字面量表示,其实就是用一对大括号括起来的键值对,也就是JavaScript 声明对象的方式 var myObject = {variableKey : vari ...
- RSA加密常用的填充方式 以及 常见错误
一.RSA加密常用的填充方式 1.RSA_PKCS1_PADDING 输入:比 RSA modulus 短至少11个字节.如果输入的明文过长,必须切割,然后填充 输出:和modulus一样长 根据这个 ...
- scrapy的post登录:renren
# -*- coding: utf-8 -*- import scrapy class RenrenSpider(scrapy.Spider): name = 'renren' allowed_dom ...
- centos 基础修改文件权限
在centos 下 nginx 默认用户是user = apachegroup = apache 所以需要更改文件和文件夹权限时候需要满足apache用户才能进行 常用方式: $ chmod Runt ...
- HTTP API响应数据规范整理
概述 本文档为本人对长期开发API接口所整理的经验总结,如有不完善或不合理的地方,望各位多提意见. 文档目的为规范服务器端API接口,便于服务器端与客户端代码重用.服务器端和客户端可根据实际所定义规范 ...
- [adt]python实现栈-体验数据结构
经常使用py的一些数据结构,如list,及list的一些方法. 还有hash表等. 各类数据结构方法用的很6,然而不知道是底层是怎么实现的. 基于此,就开始研究一下py实现一些数据结构, 以便于对计算 ...