System and method for per-task memory protection for a non-programmable bus master
A system includes a non-programmable bus master. The non-programmable bus master includes a memory protection unit (MPU) to operate in a first configuration with a first set of access permissions and a second configuration with a second set of access permissions, and hardware logic. The hardware logic executes a first task and a second task. The tasks generate transactions and the hardware logic switches between executing the first and second tasks. The hardware logic also causes the MPU to operate in the first configuration when the hardware logic executes the first task and causes the MPU to operate in the second configuration when the hardware logic executes the second task.
1. A system, comprising:
a non-programmable bus master, comprising:
a memory protection unit (MPU) configured to operate in a first configuration with a first set of access permissions and a second configuration with a second set of access permissions, wherein:
the MPU operating in the first configuration with the first set of access permissions is configured to permit a transaction to access a bus slave; and
the MPU operating in the second configuration with the second set of access permissions is configured to:
deny a transaction access to the bus slave; and
communicate a response in response to denying the transaction access to the bus slave; and
a direct memory access (DMA) controller configured to:
execute a first task and a second task, wherein the first and second tasks are configured to generate transactions;
cause the MPU to operate in the first configuration when the DMA controller executes the first task; and
cause the MPU to operate in the second configuration when the DMA controller executes the second task.
2. The system of claim 1 wherein the DMA controller sends a task identification (ID) to the MPU and, upon receipt of a task ID, the MPU operates in one of the configurations based on the task ID.
3. The system of claim 1 wherein the DMA controller automatically changes the configuration of the MPU without sending a task identification (ID) to the MPU.
4. The system of claim 1 wherein the MPU is configured to permit or deny a transaction access to the bus slave based on one selected from the group consisting of:
an address to which the transaction is directed;
a privilege level associated with the task that generated the transaction;
a security level associated with the task that generated the transaction; and
whether the transaction was generated by a functional unit of the bus master or a debug unit of the bus master.