4 files changed, 89 insertions, 0 deletions
diff --git a/src/drivers/pcie/generic/Kconfig b/src/drivers/pcie/generic/Kconfig
new file mode 100644
index 0000000000..2a68708f61
--- /dev/null
+++ b/src/drivers/pcie/generic/Kconfig
@@ -0,0 +1,11 @@
+config DRIVERS_PCIE_GENERIC
+	bool
+	default n
+	depends on HAVE_ACPI_TABLES
+	help
+	  This driver allows attaching arbitrary ACPI properties to
+	  arbitrary PCI root ports or devices. Currently it supports one
+	  property, "UntrustedDevice". This property indicates to the
+	  operating system that the PCIe device may be considered
+	  untrusted, and appropriate policies, e.g. IOMMU isolation,
+	  should take place.
diff --git a/src/drivers/pcie/generic/Makefile.inc b/src/drivers/pcie/generic/Makefile.inc
new file mode 100644
index 0000000000..f634f256a8
--- /dev/null
+++ b/src/drivers/pcie/generic/Makefile.inc
@@ -0,0 +1 @@
+ramstage-$(CONFIG_DRIVERS_PCIE_GENERIC) += generic.c
diff --git a/src/drivers/pcie/generic/chip.h b/src/drivers/pcie/generic/chip.h
new file mode 100644
index 0000000000..3be57de530
--- /dev/null
+++ b/src/drivers/pcie/generic/chip.h
@@ -0,0 +1,12 @@
+/* SPDX-License-Identifier: GPL-2.0-only */
+
+#ifndef _PCIE_GENERIC_H_
+#define _PCIE_GENERIC_H_
+
+#include <types.h>
+
+struct drivers_pcie_generic_config {
+	bool is_untrusted;
+};
+
+#endif /* _PCIE_GENERIC_H_ */
diff --git a/src/drivers/pcie/generic/generic.c b/src/drivers/pcie/generic/generic.c
new file mode 100644
index 0000000000..2daebdae04
--- /dev/null
+++ b/src/drivers/pcie/generic/generic.c
@@ -0,0 +1,65 @@
+/* SPDX-License-Identifier: GPL-2.0-only */
+
+#include <acpi/acpi.h>
+#include <acpi/acpigen.h>
+#include <acpi/acpigen_pci.h>
+#include <device/device.h>
+#include <device/pci.h>
+#include "chip.h"
+
+static const char *pcie_generic_acpi_name(const struct device *dev)
+{
+	return "DEV0";
+}
+
+static void pcie_generic_fill_ssdt(const struct device *dev)
+{
+	struct drivers_pcie_generic_config *config;
+	struct acpi_dp *dsd;
+
+	if (!is_dev_enabled(dev))
+		return;
+
+	pci_rom_ssdt(dev);
+
+	config = dev->chip_info;
+	if (!config || !config->is_untrusted || !dev->bus || !dev->bus->dev)
+		return;
+
+	const char *scope = acpi_device_path(dev->bus->dev);
+	const char *name = acpi_device_name(dev);
+
+	acpigen_write_scope(scope);
+	acpigen_write_device(name);
+	acpigen_write_ADR_pci_device(dev);
+
+	dsd = acpi_dp_new_table("_DSD");
+	acpi_dp_add_integer(dsd, "UntrustedDevice", 1);
+	acpi_dp_write(dsd);
+
+	acpigen_write_device_end();
+	acpigen_write_scope_end();
+
+	printk(BIOS_INFO, "%s.%s: Enable ACPI properties for %s (%s)\n", scope, name,
+	       dev_path(dev), dev->chip_ops->name);
+}
+
+struct device_operations pcie_generic_ops = {
+	.read_resources		= pci_dev_read_resources,
+	.set_resources		= pci_dev_set_resources,
+	.enable_resources	= pci_dev_enable_resources,
+	.init			= pci_dev_init,
+	.ops_pci		= &pci_dev_ops_pci,
+	.acpi_name		= pcie_generic_acpi_name,
+	.acpi_fill_ssdt		= pcie_generic_fill_ssdt,
+};
+
+static void pcie_generic_enable(struct device *dev)
+{
+	dev->ops = &pcie_generic_ops;
+}
+
+struct chip_operations drivers_pcie_generic_ops = {
+	CHIP_NAME("PCIe Device")
+	.enable_dev = pcie_generic_enable
+};