Hi,

Based on sbsa spec for level-3 firmware specification watchdog signals NS WS1 and S WS0 to be handled at EL3 firmware.

I have some query on how TF-A plans to implement this.

Ref: Excerpt DEN0029D_SBSA_6.0 https://developer.arm.com/documentation/den0029/d/?lang=en

3.2.3 Watchdogs The required behavior of watchdog signal 1 of the Non-secure watchdog is modified in level 3– firmware and is required to be routed as an SPI to the GIC. It is expected that this SPI be configured as an EL3 interrupt, directly targeting a single PE. A system compatible with level 3- firmware must implement a second watchdog, and is referred to as the Secure watchdog. It must have both its register frames mapped in the Secure memory address space and must not be aliased to the Non-secure address space. Watchdog Signal 0 of the Secure watchdog must be routed as an SPI to the GIC and it is expected this will be configured as an EL3 interrupt, directly targeting a single PE.

Q1- What happens if core is stuck and interrupts are not taken. Non-secure watchdog will expire and ultimately results in a WS1 which is also not taken as the core is not responding.

If WS1 were to another subsystem (eg: SCP) then it would take action.

In current scheme is it the secure sbsa wdg expected to detect such hang ?

Q2- How to handle sbsa watchdog interrupt at EL3. Please suggest if I should make a patch in following approach to start with. Or it has to be registered as a RAS priority exception.

diff --git a/drivers/arm/sbsa/sbsa.c b/drivers/arm/sbsa/sbsa.c

index 79c6f26..9683ef8 100644

--- a/drivers/arm/sbsa/sbsa.c

+++ b/drivers/arm/sbsa/sbsa.c

@@ -40,3 +40,26 @@

+

+#define weak plat_sbsa_nt_wdog_ws1_handle

+#define weak plat_sbsa_t_wdog_ws0_handle

+void sbsa_wdog_handler(int id)

+{

+ if (id == SBSA_NT_WDG_WS1_INT) {

+ /* PUBLISH_EVENT */

+ plat_sbsa_nt_wdog_ws1_handle();

+ } else if (id == SBSA_T_WDG_WS0_INT) {

+ /* PUBLISH_EVENT */

+ plat_sbsa_t_wdog_ws0_handle();

+ }

+ /* EOI and reset , log what else */

+ psci_systrem_reset2();

+}

+

+void sbsa_wdog_hander_init(void)

+{

+#if EXCEPTION_HANDLING_FRAMEWORK

+ ehf_register_priority_handler(SBSA_WDG_PRI, sbsa_wdog_handler);

+#endif

+}

Thanks

Sandeep