diff options
author | Patrick Williams <patrick@stwcx.xyz> | 2023-06-26 00:20:36 +0300 |
---|---|---|
committer | Patrick Williams <patrick@stwcx.xyz> | 2023-07-05 23:14:51 +0300 |
commit | 520786cc6f5e5078825972134b1ec6fd81a6022a (patch) | |
tree | 07d3f525ee77fa94f7cd8792291b2d102be649a6 /meta-arm/meta-arm-bsp/recipes-bsp/trusted-firmware-a | |
parent | 92a3faaa54f016e7e4f49961dc8c6d777b4bffd4 (diff) | |
download | openbmc-520786cc6f5e5078825972134b1ec6fd81a6022a.tar.xz |
subtree updates
meta-arm: 3fcafa3a94..d6fac49541:
Abdellatif El Khlifi (1):
arm-bsp/u-boot: corstone1000: upgrade NVMXIP support
Denys Dmytriyenko (1):
optee-os: do not explicitly set CFG_MAP_EXT_DT_SECURE=y
Emekcan Aras (8):
arm-bsp/u-boot: corstone1000: Fix EFI multiple protocol install failure
arm-bsp/u-boot: corstone1000: Enable EFI set/get time services
arm-bsp/trusted-services: corstone1000: GetNextVariableName Fix
arm-bsp/optee-os:corstone1000: Drop SPMC non secure interrupt patches
arm-bsp/u-boot: corstone1000: Fix u-boot compilation warnings
arm-bsp/trusted-services: corstone1000: Fix PSA_RAW_KEY agreement test
arm-bsp/trusted-services: corstone1000: Fix Capsule Update
arm-bsp/trusted-firmware-a: corstone1000: Fix Trusted-Firmware-A version for corstone1000
Jon Mason (3):
trusted-firmware-a: update to the latest TF-A LTS
arm-bsp/tc1: update to use the latest tf-a
arm/scp-firmware: update to v2.12.0
Khem Raj (2):
gn: update to latest
gn: Fix build with gcc13
Ross Burton (8):
arm/trusted-firmware-m: remove -fcanon-prefix-map from DEBUG_PREFIX_MAP
arm-bsp/external-system: remove -fcanon-prefix-map from DEBUG_PREFIX_MAP
arm-toolchain/external-arm: remove -fcanon-prefix-map from DEBUG_PREFIX_MAP
arm/scp-firmware: use concerete toolchain
arm-toolchain/gcc-arm-12.2: remove
arm/gn: fix build with GCC <13
CI: always put the build logs in an artifact
CI: print the name of the documentation when building
Sumit Garg (1):
external-arm-toolchain: Enforce absolute path check
meta-openembedded: def4759e95..2638d458a5:
Adrian Zaharia (2):
meta-python: Add stopit
python3-stopit: add missing run-time dependencies
Alex Kiernan (1):
ostree: Upgrade 2023.3 -> 2023.4
Bartosz Golaszewski (55):
python3-pywbemtools: remove build-time dependencies
python3-pywbem: drop unneeded class from RDEPENDS
python3-pywbem: don't use PYTHON_PN
python3-pywbem: order RDEPENDS alphabetically
python3-pywbem: add missing run-time dependencies
python3-padatious: add missing run-time dependencies
python3-pako: add missing run-time dependencies
python3-paramiko: stop using PYTHON_PN
python3-paramiko: add missing run-time dependencies
python3-path: fix coding style
python3-path: add missing run-time dependencies
python3-ecdsa: don't install tests
python3-et-xmlfile: fix coding style
python3-et-xmlfile: add missing run-time dependencies
python3-flask-user: fix coding style
python3-flask-user: add missing run-time dependencies
python3-isort: fix coding style
python3-isort: add missing run-time dependencies
python3-isodate: stop using PYTHON_PN
python3-isodate: add missing run-time dependencies
python-idna-ssl: add missing run-time dependencies
python3-hpack: add missing run-time dependencies
python3-h11: add missing run-time dependencies
python3-gsocketpool: drop unneeded DEPENDS
python3-gsocketpool: stop using PYTHON_PN
python3-gsocketpool: add missing run-time dependencies
python3-flask-mail: stop using PYTHON_PN
python3-flask-mail: add missing run-time dependencies
python3-flask-sijax: stop using PYTHON_PN
python3-flask-sijax: add missing run-time dependencies
python3-flask-script: remove recipe
python3-aioserial: fix coding style
python3-aioserial: add missing run-time dependencies
python3-aspectlib: add missing run-time dependencies
python3-asyncio-throttle: add missing run-time dependencies
python3-attrdict3: add missing run-time dependencies
python3-betamax: add missing run-time dependencies
python3-binwalk: add missing run-time dependencies
python3-can: fix coding style
python3-can: add missing run-time dependencies
python3-click-spinner: add missing run-time dependencies
python3-colorlog: add missing run-time dependencies
python3-colorzero: add missing run-time dependencies
python3-configobj: fix coding style
python3-configobj: add missing run-time dependencies
python3-configshell-fb: add missing run-time dependencies
python3-coverage: fix coding style and RDEPENDS
python3-custom-inherit: add missing run-time dependencies
python3-dateparser: fix coding style
python3-dateparser: add missing run-time dependencies
python3-tzlocal: fix coding style
python3-tzlocal: add missing run-time dependencies
python3-dbus-next: add missing run-time dependencies
python3-defusedxml: add missing run-time dependencies
python3-setuptools-scm-git-archive: add missing run-time dependencies
Beniamin Sandu (5):
lmsensors: do not pull in unneeded perl modules for run-time dependencies
mdns: remove unneeded headers
mbedtls: add support for v3.x
rasdaemon: upgrade to 0.8.0
unbound: add option to build with libevent
Chen Qi (1):
redis: use the files path correctly
Denys Dmytriyenko (1):
grpc: point to the native protobuf compiler binary
Enguerrand de Ribaucourt (4):
cukinia: remove trailing whitespaces
cukinia: upgrade 0.6.1 -> 0.6.2
cukinia: inherit allarch
cukinia: add libgpiod-tools to RRECOMMENDS
Etienne Cordonnier (1):
uutils-coreutils: upgrade 0.0.18 -> 0.0.19
Joe Slater (2):
libgpiod: modify test 'gpioset: toggle (continuous)'
python3-sqlparse: fix CVE-2023-30608
Johannes Kauffmann (3):
open62541: add multithreading PACKAGECONFIG option
open62541: allow disabling subscriptions
ntpd: switch service type from forking to simple
Khem Raj (16):
ply: Demand BFD linker explicitly
crucible: Upgrade to 2023.04.12 release
schroedinger: Fix building tests
fwts: Fix build issues found with lld linker
xfce4-sensors-plugin: Use bfd linker instead of lld
ostree: Fix build errors found with lld linker
spice-gtk: Fix build with lld linker
sblim-sfcb: Fix build with lld linker
libtracefs: Fix build with clang+musl
gosu: Upgrade to 1.16 release
layers: Move READMEs to markdown format
xdg-desktop-portal-wlr: Fix build with older mesa
geary: Fix build with vala >= 0.56.8
libforms: Replace hardcoded dep on mesa with virtual/libgl
syzkaller: Upgrade to latest tip of trunk
ristretto: Upgrade to 0.13.1 release
Markus Volk (1):
gnome-software: upgrade 44.1 -> 44.2
Martin Jansa (5):
asio: fix malformed Upstream-Status
libgpiod: fix malformed Upstream-Status
postfix: fix malformed Upstream-Status
*.patch: add Upstream-Status to all patches
postfix: remove 2nd Upstream-Status
Michael Heimpold (1):
php: drop explicite ARM_INSTRUCTION_SET
Patrick Williams (1):
libplist_2.3.0: compile fix for version
Peter Kjellerstedt (1):
glog: Correct the packaging of /usr/share/glog/cmake/FindUnwind.cmake
Peter Marko (1):
python3-stopit: fix override syntax
Randolph Sapp (1):
opengl-es-cts: 3.2.8.0 -> 3.2.9.3
Remi Peuvergne (2):
zeromq: consider license exception over LGPL-3.0
zeromq: consider license exception over LGPL-3.0
Sandeep Gundlupet Raju (1):
opencv: Revert fix runtime dependencies
Soumya (1):
opencv: Fix for CVE-2023-2617
Wang Mingyu (57):
ctags: upgrade 6.0.20230604.0 -> 6.0.20230611.0
gjs: upgrade 1.76.0 -> 1.76.1
ipcalc: upgrade 1.0.2 -> 1.0.3
libadwaita: upgrade 1.3.2 -> 1.3.3
libjcat: upgrade 0.1.13 -> 0.1.14
libqb: upgrade 2.0.6 -> 2.0.7
mbpoll: upgrade 1.5.0 -> 1.5.2
mpich: upgrade 4.1.1 -> 4.1.2
nautilus: upgrade 44.2 -> 44.2.1
ntp: upgrade 4.2.8p16 -> 4.2.8p17
python3-eth-account: upgrade 0.8.0 -> 0.9.0
python3-eth-hash: upgrade 0.5.1 -> 0.5.2
python3-eth-typing: upgrade 3.3.0 -> 3.4.0
python3-eth-utils: upgrade 2.1.0 -> 2.1.1
python3-platformdirs: upgrade 3.5.1 -> 3.5.3
pcsc-lite: upgrade 1.9.9 -> 2.0.0
php: upgrade 8.2.6 -> 8.2.7
python3-argcomplete: upgrade 3.0.8 -> 3.1.0
python3-autobahn: upgrade 23.1.2 -> 23.6.1
python3-cassandra-driver: upgrade 3.27.0 -> 3.28.0
python3-cmake: upgrade 3.26.3 -> 3.26.4
python3-django: upgrade 4.2.1 -> 4.2.2
python3-hexbytes: upgrade 0.3.0 -> 0.3.1
python3-imageio: upgrade 2.30.0 -> 2.31.0
python3-pykickstart: upgrade 3.47 -> 3.48
python3-pymisp: upgrade 2.4.171 -> 2.4.172
python3-pymodbus: upgrade 3.3.0 -> 3.3.1
python3-sentry-sdk: upgrade 1.25.0 -> 1.25.1
python3-websocket-client: upgrade 1.5.2 -> 1.5.3
python3-zeroconf: upgrade 0.63.0 -> 0.64.1
remmina: upgrade 1.4.30 -> 1.4.31
tio: upgrade 2.5 -> 2.6
libtracefs: upgrade 1.6.4 -> 1.7.0
adw-gtk3: upgrade 4.7 -> 4.8
evince: upgrade 44.1 -> 44.2
gensio: upgrade 2.6.5 -> 2.6.6
redis-plus-plus: upgrade 1.3.8 -> 1.3.9
python3-click-repl: upgrade 0.2.0 -> 0.3.0
python3-platformdirs: upgrade 3.5.3 -> 3.6.0
python3-pytest-mock: upgrade 3.10.0 -> 3.11.1
python3-croniter: upgrade 1.3.15 -> 1.4.1
python3-elementpath: upgrade 4.1.2 -> 4.1.3
python3-google-api-core: upgrade 2.11.0 -> 2.11.1
python3-google-api-python-client: upgrade 2.88.0 -> 2.89.0
python3-googleapis-common-protos: upgrade 1.59.0 -> 1.59.1
python3-google-auth: upgrade 2.19.1 -> 2.20.0
python3-imageio: upgrade 2.31.0 -> 2.31.1
python3-protobuf: upgrade 4.23.2 -> 4.23.3
python3-pyproj: upgrade 3.5.0 -> 3.6.0
python3-rich: upgrade 13.4.1 -> 13.4.2
python3-robotframework: upgrade 6.0.2 -> 6.1
python3-ujson: upgrade 5.7.0 -> 5.8.0
python3-xmlschema: upgrade 2.3.0 -> 2.3.1
python3-xmodem: upgrade 0.4.6 -> 0.4.7
python3-zeroconf: upgrade 0.64.1 -> 0.68.0
strongswan: upgrade 5.9.10 -> 5.9.11
rdfind: upgrade 1.5.0 -> 1.6.0
Xiangyu Chen (1):
meta-oe: add pahole to NON_MULTILIB_RECIPES
Zoltán Böszörményi (3):
mpich: Upgrade to 4.1.1
python3-meson-python: New recipe
python_mesonpy: New class
poky: 00f3d58064..13b646c0e1:
Adrian Freihofer (9):
runqemu-ifup: remove uid parameter
runqemu-ifup: configurable tap names
runqemu-ifup: fix tap index
runqemu-ifup: remove only our taps
runqemu-gen-tapdevs: remove staging dir parameter
runqemu-gen-tapdevs: remove uid parameter
runqemu-gen-tapdevs: configurable tap names
runqemu-gen-tapdevs: remove only our taps
runqemu: configurable tap names
Alberto Planas (2):
bitbake.conf: add unzstd in HOSTTOOLS
rpm2cpio.sh: update to the last 4.x version
Alejandro Hernandez Samaniego (2):
baremetal-helloworld: Update SRCREV to fix entry addresses for ARM architectures
runqemu: Stop passing bindir to the runqemu-ifup call
Alex Kiernan (1):
eudev: Upgrade 3.2.11 -> 3.2.12
Alexander Kanavin (60):
scripts/runqemu: split lock dir creation into a reusable function
scripts/runqemu: allocate unfsd ports in a way that doesn't race or clash with unrelated processes
apmd: remove recipe and apm MACHINE_FEATURE
qemu: a pending patch was submitted and accepted upstream
maintainers.inc: unassign Adrian Bunk from wireless-regdb
maintainers.inc: unassign Alistair Francis from opensbi
maintainers.inc: unassign Chase Qi from libc-test
maintainers.inc: unassign Oleksandr Kravchuk from python3 and all other items
maintainers.inc: unassign Ricardo Neri from ovmf
grub: submit determinism.patch upstream
apr: upgrade 1.7.3 -> 1.7.4
at-spi2-core: upgrade 2.48.0 -> 2.48.3
btrfs-tools: upgrade 6.3 -> 6.3.1
attr: package /etc/xattr.conf with the library that consumes it
glib-2.0: backport a patch to address ptest fails caused by coreutils 9.2+
diffoscope: upgrade 236 -> 242
dnf: upgrade 4.14.0 -> 4.16.1
ethtool: upgrade 6.2 -> 6.3
gawk: upgrade 5.2.1 -> 5.2.2
strace: upgrade 6.2 -> 6.3
coreutils: upgrade 9.1 -> 9.3
gnupg: upgrade 2.4.0 -> 2.4.2
gobject-introspection: upgrade 1.74.0 -> 1.76.1
kmscube: upgrade to latest revision
libmodulemd: upgrade 2.14.0 -> 2.15.0
libuv: license file was split in two in the 1.45.0 version update
libx11: upgrade 1.8.4 -> 1.8.5
libxslt: upgrade 1.1.37 -> 1.1.38
linux-firmware: upgrade 20230404 -> 20230515
ltp: upgrade 20230127 -> 20230516
mesa: upgrade 23.0.3 -> 23.1.1
meson: upgrade 1.1.0 -> 1.1.1
mmc-utils: upgrade to latest revision
nettle: upgrade 3.8.1 -> 3.9
nghttp2: upgrade 1.52.0 -> 1.53.0
parted: upgrade 3.5 -> 3.6
puzzles: upgrade to latest revision
python3: upgrade 3.11.2 -> 3.11.3
python3-certifi: upgrade 2022.12.7 -> 2023.5.7
python3-docutils: upgrade 0.19 -> 0.20.1
python3-flit-core: upgrade 3.8.0 -> 3.9.0
python3-importlib-metadata: upgrade 6.2.0 -> 6.6.0
python3-pyasn1: upgrade 0.4.8 -> 0.5.0
python3-pyopenssl: upgrade 23.1.1 -> 23.2.0
python3-sphinx: remove BSD-3-Clause from LICENSE
serf: upgrade 1.3.9 -> 1.3.10
shaderc: upgrade 2023.2 -> 2023.4
squashfs-tools: upgrade 4.5.1 -> 4.6.1
vala: upgrade 0.56.6 -> 0.56.8
vulkan: upgrade 1.3.243.0 -> 1.3.250.0
wget: upgrade 1.21.3 -> 1.21.4
wireless-regdb: upgrade 2023.02.13 -> 2023.05.03
xf86-input-libinput: upgrade 1.2.1 -> 1.3.0
xf86-input-mouse: upgrade 1.9.4 -> 1.9.5
zstd: upgrade 1.5.4 -> 1.5.5
gdb: upgrade 13.1 -> 13.2
libxcrypt: upgrade 4.4.33 -> 4.4.34
zstd: fix a reproducibility issue in 1.5.5
sysfsutils: fetch a supported fork from github
sysfsutils: update 2.1.0 -> 2.1.1
Alexandre Belloni (1):
base-passwd: fix patchreview warning
Alexis Lothoré (3):
oeqa/core/runner: add helper to know about expected failures
oeqa/target/ssh: update options for SCP
testimage: implement test artifacts retriever for failing tests
Anuj Mittal (1):
glib-2.0: upgrade 2.76.2 -> 2.76.3
BELOUARGA Mohamed (1):
meta: lib: oe: npm_registry: Add more safe caracters
Bruce Ashfield (4):
linux-yocto/6.1: update to v6.1.33
linux-yocto/6.1: fix intermittent x86 boot hangs
linux-yocto/6.1: update to v6.1.34
linux-yocto/6.1: update to v6.1.35
Charlie Wu (1):
devtool: Fix the wrong variable in srcuri_entry
Chen Qi (7):
sdk.py: error out when moving file fails
sdk.py: fix moving dnf contents
rpm: write macros under libdir
zip: fix configure check by using _Static_assert
zip: remove unnecessary LARGE_FILE_SUPPORT CLFAGS
unzip: fix configure check for cross compilation
unzip: remove hardcoded LARGE_FILE_SUPPORT
Denys Dmytriyenko (1):
binutils: move packaging of gprofng static lib into common .inc
Ed Beroset (1):
Add clarification for SRCREV
Fabien Mahot (2):
useradd-example: package typo correction
oeqa/selftest/bbtests: add non-existent prefile/postfile tests
Hannu Lounento (1):
profile-manual: fix blktrace remote usage instructions
Ian Ray (1):
systemd-systemctl: support instance expansion in WantedBy
Jermain Horsman (1):
logrotate: Do not create logrotate.status file
Jose Quaresma (1):
selftest/reproducible: Allow chose the package manager
Jörg Sommer (2):
runqemu-gen-tapdevs: Refactoring
runqemu-ifupdown/get-tapdevs: Add support for ip tuntap
Khem Raj (12):
llvm: Upgrade to 16.0.5
glibc: Pass linker choice via compiler flags
libgcc: Always use BFD linker
efivar: Upgrade to tip of trunk
babeltrace2: Always use BFD linker when building tests with ld-is-lld distro feature
parted: Add missing libuuid to linker cmdline for libparted-fs-resize.so
kernel: Add kernel specific STRIP variable
libxml2: Do not use lld linker when building with tests on rv64
llvm: Bump to 16.0.6
go-helloworld: Upgrade to tip of trunk
rpcsvc-proto: Upgrade to 1.4.4
python3-bcrypt: Use BFD linker when building tests
Louis Rannou (3):
rootfs-postcommands: change sysusers.d command
systemd: replace the sysusers.d basic configuration
base-passwd: add the wheel group
Luca Ceresoli (1):
ref-manual: classes: devicetree: fix sentence saying the same thing twice
Markus Volk (2):
gtk4: upgrade 4.10.3 -> 4.10.4
gstreamer1.0-plugins-bad: use oneVPL instead of intel-mediasdk for msdk
Martin Jansa (1):
libstd-rs, rust: use bfd linker instead of gold
Michael Opdenacker (5):
psplash: replace Yocto .h by .png splashscreen
migration-guides: release-notes-4.3: update documentation notes
bitbake: bitbake-user-manual: explicit variables taking a colon separated list
bitbake: bitbake-user-manual: revert change about PREFERRED_PROVIDERS
ref-manual: variables.rst: explicit variables accepting colon separated lists
Mikko Rapeli (4):
useradd-staticids.bbclass: improve error message
selftest reproducible.py: support different build targets
variables.rst: document OEQA_REPRODUCIBLE_TEST_TARGET and OEQA_REPRODUCIBLE_TEST_SSTATE_TARGETS
reproducible-builds.rst: document OEQA_REPRODUCIBLE_TEST_TARGET and OEQA_REPRODUCIBLE_TEST_SSTATE_TARGETS
Ming Liu (2):
weston-init: introduce xwayland PACKAGECONFIG
meta: introduce KCONFIG_CONFIG_ENABLE_MENUCONFIG
Mingli Yu (2):
qemu: Split the qemu package
u-boot-tools: Use PATH_MAX for path length
Petr Gotthard (1):
lighttpd: upgrade 1.4.69 -> 1.4.71
Quentin Schulz (5):
bitbake: docs: bitbake-user-manual: bitbake-user-manual-hello: add links and highlights for variables
docs: bsp-guide: bsp: fix typo
docs: ref-manual: terms: fix typos in SPDX term
docs: fix unnecessary double white space
docs: ref-manual: terms: fix incorrect note directive
Randolph Sapp (6):
weston-init: make sure the render group exists
weston-init: add weston user to the render group
weston-init: add the weston user to the wayland group
weston-init: fix the mixed indentation
weston-init: guard against systemd configs
weston-init: add profile to point users to global socket
Remi Peuvergne (1):
common-licenses: Add LGPL-3.0-with-zeromq-exception
Richard Purdie (18):
runqemu/qemu-helper: Drop tunctl
runqemu-if*: Rename confusing variable name
oeqa/selftest/oescripts: Fix qemu-helper selftest
oeqa/logparser: Fix ptest No-section exception
strace: Disable failing test
strace: Merge two similar patches
testimage: Only note missing target directories, don't warn
ptest-runner: Pull in sync fix to improve log warnings
scripts/runqemu-ifup: Fix extra parameter issue
scripts/runqemu-ifup: Fix 10 or more tap devices
bitbake: runqueue: Fix handling of virtual files in layername calculation
ptest-runner: Ensure data writes don't race
bitbake.conf: Add layer-<layername> override support
insane: Improve patch-status layer filtering
genericx86: Drop gma500-gfx-check
bitbake: doc: Document FILE_LAYERNAME
migration-guides: add notes on FILE_LAYERNAME
migration-guides: add notes on systemd/usrmerge changes
Ross Burton (15):
nettle: rewrite ptest integration
nettle: inherit lib_package
cve-extra-exclusions: add more ignores for 2023 kernel CVEs
cve-extra-exclusions: remove 2019 blanket ignores
poky-altconfig: enable usrmerge DISTRO_FEATURE
gi-docgen: correct comment
gobject-introspection: remove obsolete DEPENDS
coreutils: fix build when the host has fr_FR.
cve-extra-exclusions: call out an Ubuntu-specific issue explicitly
cve-extra-exclusions: CVE-2023-3141 was backported in Linux 6.1.30
erofs-utils: backport fixes for CVE-2023-33551 and CVE-2023-33552
ghostscript: mostly rewrite recipe
python3-dbusmock: only recommend python3-pygobject
sysfsutils: don't install to base_libdir
base: improve LICENSE_FLAGS_DETAILS output
Sakib Sajal (1):
go: Upgrade 1.20.4 -> 1.20.5
Soumya (1):
perl: fix CVE-2023-31484
Stefano Babic (2):
libubootenv: upgrade 0.3.3 -> 0.3.4
mtd-utils: export headers and libraries for MTD and UBI
Sudip Mukherjee (2):
dpkg: upgrade to v1.21.22
cmake: upgrade to v3.26.4
Tan Wen Yan (1):
linux-yocto/6.1: update genericx86* machines to v6.1.30
Tom Hochstein (1):
weston: Cleanup and fix x11 and xwayland dependencies
Trevor Gamblin (2):
runqemu-gen-tapdevs: fix missing variable quote
glib-networking: use correct error code in ptest
Vincent Davis Jr (4):
spirv-tools: fix INTERFACE_LINK_LIBRARIES cmake prop
vulkan-validation-layers: add new recipe v1.3.243.0
spirv-tools: Use baselib instead of base_libdir
vulkan-validation-layers: cleanup recipe
Xiangyu Chen (1):
dbus: upgrade 1.14.6 -> 1.14.8
nikhil (1):
libwebp: Fix CVE-2023-1999
schitrod=cisco.com@lists.openembedded.org (1):
cups: Fix CVE-2023-32324
meta-security: 180dac9aec..405cca4028:
Ahmed Abdelfattah (1):
swtpm: fix parser error when using USERADDEXTENSION="useradd-staticids"
Armin Kuster (25):
scap-security-guide: update to 0.1.67
scap-security-guide: update to tip
scap-security-guide_git: drop oe version
openscap-daemon: This is now obsolete
oe-scap: Not maintained nor upstreamed
openscap: Fix native build missing depends
openscap: Drop OE specific recipe
lynis: move to main meta-security layer
openscap: move to main meta-security layer
meta-security-compliance: remove layer
openscap: add support for OpenEmbedded nodistro and Poky
scap-security-guide: add OE support
packagegroup-core-security: add compliance pkg group
kas: ci changes do to meta-security-compliance being removed
meta-security-isafw: drop layer isafw project archived
openscap: Update to tip to get OE/Poky support
scap-security-guide: bump the number of test that pass
clamav: drop unused patch
isic: fine tune Upstream-Status
scap-security-guide: Add Poky
arpwatch: Fix typo in COMPATIBLE_HOST:libc-musl = "null"
scap-security-guide: add Upstream-Status
scap-security-guide: Does not build for musl
openscap: update to 1.3.8
packagegroup-core-security: add os-release
Chen Qi (1):
complicance/isafw: remove oeqa addpylib
Kevin Hao (1):
dmverity: Suppress the realpath errors
Martin Jansa (5):
*.patch: add Upstream-Status to all patches
meta-tpm: *.patch: fix malformed Upstream-Status lines
dynamic-layers: *.patch: fix malformed and missing Upstream-Status lines
*.patch: fix malformed Upstream-Status and SOB lines
.patch: remove probably unused patches
Paul Gortmaker (7):
dm-verity: add descriptive strings for "wic list images"
dm-verity: restructure the veritysetup arg parsing
dm-verity: save veritysetup args beside runtime environment
dm-verity: add support for hash storage on separate partition
dm-verity: add wks.in fragment with dynamic build hash data
dm-verity: hook separate hash into initramfs framework
dm-verity: add sample systemd separate hash example and doc
Samantha Jalabert (1):
buck-security: fix missing dependencies to perl modules
meta-raspberrypi: 8e07f0d328..dff85b9a9f:
Khem Raj (1):
linux-raspberrypi-6.1: Update to 6.1.34 release
Martin Jansa (1):
*.patch: add Upstream-Status to all patches
Signed-off-by: Patrick Williams <patrick@stwcx.xyz>
Change-Id: If34dfa008a81d778c7bc02627388238f5125d85c
Diffstat (limited to 'meta-arm/meta-arm-bsp/recipes-bsp/trusted-firmware-a')
11 files changed, 4 insertions, 562 deletions
diff --git a/meta-arm/meta-arm-bsp/recipes-bsp/trusted-firmware-a/files/tc/0001-plat-tc-Increase-maximum-BL2-size.patch b/meta-arm/meta-arm-bsp/recipes-bsp/trusted-firmware-a/files/tc/0001-plat-tc-Increase-maximum-BL2-size.patch deleted file mode 100644 index 74ab3612c1..0000000000 --- a/meta-arm/meta-arm-bsp/recipes-bsp/trusted-firmware-a/files/tc/0001-plat-tc-Increase-maximum-BL2-size.patch +++ /dev/null @@ -1,43 +0,0 @@ -From 008cfc6457c239466ca62610d59aaf1a78f6b2f6 Mon Sep 17 00:00:00 2001 -From: Tudor Cretu <tudor.cretu@arm.com> -Date: Fri, 21 May 2021 14:56:37 +0000 -Subject: [PATCH 1/7] plat: tc: Increase maximum BL2 size. - -BL2 size gets increased due to the firmware update changes. -Increase the MAX_BL2_SIZE by 8Kb. - -Signed-off-by: Tudor Cretu <tudor.cretu@arm.com> -Change-Id: I1cb28b0eb7f834426873ff9f4c40bd496413806f -Upstream-Status: Pending [Not submitted to upstream yet] ---- - plat/arm/board/tc/include/platform_def.h | 6 +++--- - 1 file changed, 3 insertions(+), 3 deletions(-) - -diff --git a/plat/arm/board/tc/include/platform_def.h b/plat/arm/board/tc/include/platform_def.h -index 745d91cab..cd77773aa 100644 ---- a/plat/arm/board/tc/include/platform_def.h -+++ b/plat/arm/board/tc/include/platform_def.h -@@ -120,9 +120,9 @@ - * little space for growth. - */ - #if TRUSTED_BOARD_BOOT --# define PLAT_ARM_MAX_BL2_SIZE 0x20000 -+# define PLAT_ARM_MAX_BL2_SIZE 0x25000 - #else --# define PLAT_ARM_MAX_BL2_SIZE 0x14000 -+# define PLAT_ARM_MAX_BL2_SIZE 0x19000 - #endif - - /* -@@ -130,7 +130,7 @@ - * calculated using the current BL31 PROGBITS debug size plus the sizes of - * BL2 and BL1-RW - */ --#define PLAT_ARM_MAX_BL31_SIZE 0x3F000 -+#define PLAT_ARM_MAX_BL31_SIZE 0x4F000 - - /* - * Size of cacheable stacks --- -2.30.2 - diff --git a/meta-arm/meta-arm-bsp/recipes-bsp/trusted-firmware-a/files/tc/0002-Makefile-add-trusty_sp_fw_config-build-option.patch b/meta-arm/meta-arm-bsp/recipes-bsp/trusted-firmware-a/files/tc/0002-Makefile-add-trusty_sp_fw_config-build-option.patch deleted file mode 100644 index 75cabdd8d1..0000000000 --- a/meta-arm/meta-arm-bsp/recipes-bsp/trusted-firmware-a/files/tc/0002-Makefile-add-trusty_sp_fw_config-build-option.patch +++ /dev/null @@ -1,46 +0,0 @@ -From 2f8b0cc6be3787717247d1c02a45181a5ac6f125 Mon Sep 17 00:00:00 2001 -From: Arunachalam Ganapathy <arunachalam.ganapathy@arm.com> -Date: Mon, 11 Apr 2022 14:36:54 +0100 -Subject: [PATCH 2/7] Makefile: add trusty_sp_fw_config build option - -Signed-off-by: Arunachalam Ganapathy <arunachalam.ganapathy@arm.com> -Change-Id: Ief90ae9113d32265ee2200f35f3e517b7b9a4bea -Upstream-Status: Pending [Not submitted to upstream yet] ---- - Makefile | 4 ++++ - docs/plat/arm/arm-build-options.rst | 4 ++++ - 2 files changed, 8 insertions(+) - -diff --git a/Makefile b/Makefile -index 3941f8698..a20d647a2 100644 ---- a/Makefile -+++ b/Makefile -@@ -531,6 +531,10 @@ ifneq (${SPD},none) - DTC_CPPFLAGS += -DOPTEE_SP_FW_CONFIG - endif - -+ ifeq ($(findstring trusty_sp,$(ARM_SPMC_MANIFEST_DTS)),trusty_sp) -+ DTC_CPPFLAGS += -DTRUSTY_SP_FW_CONFIG -+ endif -+ - ifeq ($(TS_SP_FW_CONFIG),1) - DTC_CPPFLAGS += -DTS_SP_FW_CONFIG - endif -diff --git a/docs/plat/arm/arm-build-options.rst b/docs/plat/arm/arm-build-options.rst -index 339ebbe33..3c9a41fb8 100644 ---- a/docs/plat/arm/arm-build-options.rst -+++ b/docs/plat/arm/arm-build-options.rst -@@ -107,6 +107,10 @@ Arm Platform Build Options - device tree. This flag is defined only when ``ARM_SPMC_MANIFEST_DTS`` manifest - file name contains pattern optee_sp. - -+- ``TRUSTY_SP_FW_CONFIG``: DTC build flag to include Trusty as SP in -+ tb_fw_config device tree. This flag is defined only when -+ ``ARM_SPMC_MANIFEST_DTS`` manifest file name contains pattern trusty_sp. -+ - - ``TS_SP_FW_CONFIG``: DTC build flag to include Trusted Services (Crypto and - internal-trusted-storage) as SP in tb_fw_config device tree. - --- -2.30.2 - diff --git a/meta-arm/meta-arm-bsp/recipes-bsp/trusted-firmware-a/files/tc/0003-fix-plat-arm-increase-sp-max-image-size.patch b/meta-arm/meta-arm-bsp/recipes-bsp/trusted-firmware-a/files/tc/0003-fix-plat-arm-increase-sp-max-image-size.patch deleted file mode 100644 index 6807191e6c..0000000000 --- a/meta-arm/meta-arm-bsp/recipes-bsp/trusted-firmware-a/files/tc/0003-fix-plat-arm-increase-sp-max-image-size.patch +++ /dev/null @@ -1,30 +0,0 @@ -From 0060b1a4fbe3bc9992f59a2d4cb986821f7bcf13 Mon Sep 17 00:00:00 2001 -From: Arunachalam Ganapathy <arunachalam.ganapathy@arm.com> -Date: Mon, 11 Apr 2022 18:31:01 +0100 -Subject: [PATCH 3/7] fix(plat/arm): increase sp max image size - -Increase ARM_SP_MAX_SIZE to support Trusty image. - -Signed-off-by: Arunachalam Ganapathy <arunachalam.ganapathy@arm.com> -Change-Id: I9ef9e755769445aee998062a7fba508fad50b33e -Upstream-Status: Pending [Not submitted to upstream yet] ---- - include/plat/arm/common/fconf_arm_sp_getter.h | 2 +- - 1 file changed, 1 insertion(+), 1 deletion(-) - -diff --git a/include/plat/arm/common/fconf_arm_sp_getter.h b/include/plat/arm/common/fconf_arm_sp_getter.h -index aa628dfd3..3ed953d1c 100644 ---- a/include/plat/arm/common/fconf_arm_sp_getter.h -+++ b/include/plat/arm/common/fconf_arm_sp_getter.h -@@ -13,7 +13,7 @@ - /* arm_sp getter */ - #define arm__sp_getter(prop) arm_sp.prop - --#define ARM_SP_MAX_SIZE U(0xb0000) -+#define ARM_SP_MAX_SIZE U(0x2000000) - #define ARM_SP_OWNER_NAME_LEN U(8) - - struct arm_sp_t { --- -2.30.2 - diff --git a/meta-arm/meta-arm-bsp/recipes-bsp/trusted-firmware-a/files/tc/0004-fix-plat-tc-increase-tc_tzc_dram1_size.patch b/meta-arm/meta-arm-bsp/recipes-bsp/trusted-firmware-a/files/tc/0004-fix-plat-tc-increase-tc_tzc_dram1_size.patch deleted file mode 100644 index aec8be0c60..0000000000 --- a/meta-arm/meta-arm-bsp/recipes-bsp/trusted-firmware-a/files/tc/0004-fix-plat-tc-increase-tc_tzc_dram1_size.patch +++ /dev/null @@ -1,69 +0,0 @@ -From 000e19d360a5ad9abd7d823af86a364bac2afc58 Mon Sep 17 00:00:00 2001 -From: Arunachalam Ganapathy <arunachalam.ganapathy@arm.com> -Date: Mon, 11 Apr 2022 17:38:17 +0100 -Subject: [PATCH 4/7] fix(plat/tc): increase tc_tzc_dram1_size - -Increase TC_TZC_DRAM1_SIZE for Trusty image and its memory size. -Update OP-TEE reserved memory range in DTS - -Signed-off-by: Arunachalam Ganapathy <arunachalam.ganapathy@arm.com> -Change-Id: Iad433c3c155f28860b15bde2398df653487189dd -Upstream-Status: Pending [Not submitted to upstream yet] ---- - fdts/tc.dts | 4 ++-- - plat/arm/board/tc/include/platform_def.h | 10 ++++++---- - 2 files changed, 8 insertions(+), 6 deletions(-) - -diff --git a/fdts/tc.dts b/fdts/tc.dts -index 20992294b..af64504a4 100644 ---- a/fdts/tc.dts -+++ b/fdts/tc.dts -@@ -213,8 +213,8 @@ - linux,cma-default; - }; - -- optee@0xfce00000 { -- reg = <0x00000000 0xfce00000 0 0x00200000>; -+ optee@0xf8e00000 { -+ reg = <0x00000000 0xf8e00000 0 0x00200000>; - no-map; - }; - }; -diff --git a/plat/arm/board/tc/include/platform_def.h b/plat/arm/board/tc/include/platform_def.h -index cd77773aa..35d8fd24e 100644 ---- a/plat/arm/board/tc/include/platform_def.h -+++ b/plat/arm/board/tc/include/platform_def.h -@@ -31,7 +31,7 @@ - */ - #define TC_TZC_DRAM1_BASE (ARM_AP_TZC_DRAM1_BASE - \ - TC_TZC_DRAM1_SIZE) --#define TC_TZC_DRAM1_SIZE UL(0x02000000) /* 32 MB */ -+#define TC_TZC_DRAM1_SIZE UL(0x06000000) /* 96 MB */ - #define TC_TZC_DRAM1_END (TC_TZC_DRAM1_BASE + \ - TC_TZC_DRAM1_SIZE - 1) - -@@ -68,7 +68,9 @@ - * max size of BL32 image. - */ - #if defined(SPD_spmd) --#define PLAT_ARM_SPMC_BASE TC_TZC_DRAM1_BASE -+#define TC_EL2SPMC_LOAD_ADDR (TC_TZC_DRAM1_BASE + 0x04000000) -+ -+#define PLAT_ARM_SPMC_BASE TC_EL2SPMC_LOAD_ADDR - #define PLAT_ARM_SPMC_SIZE UL(0x200000) /* 2 MB */ - #endif - -@@ -259,8 +261,8 @@ - (TZC_REGION_ACCESS_RDWR(TZC_NSAID_DEFAULT)) - - /* -- * The first region below, TC_TZC_DRAM1_BASE (0xfd000000) to -- * ARM_SCP_TZC_DRAM1_END (0xffffffff) will mark the last 48 MB of DRAM as -+ * The first region below, TC_TZC_DRAM1_BASE (0xf9000000) to -+ * ARM_SCP_TZC_DRAM1_END (0xffffffff) will mark the last 112 MB of DRAM as - * secure. The second and third regions gives non secure access to rest of DRAM. - */ - #define TC_TZC_REGIONS_DEF \ --- -2.30.2 - diff --git a/meta-arm/meta-arm-bsp/recipes-bsp/trusted-firmware-a/files/tc/0005-feat-plat-tc-add-spmc-manifest-with-trusty-sp.patch b/meta-arm/meta-arm-bsp/recipes-bsp/trusted-firmware-a/files/tc/0005-feat-plat-tc-add-spmc-manifest-with-trusty-sp.patch deleted file mode 100644 index 0b34683ee2..0000000000 --- a/meta-arm/meta-arm-bsp/recipes-bsp/trusted-firmware-a/files/tc/0005-feat-plat-tc-add-spmc-manifest-with-trusty-sp.patch +++ /dev/null @@ -1,169 +0,0 @@ -From a04466ceb81a04c5179e8064837c34a89c2b11bd Mon Sep 17 00:00:00 2001 -From: Arunachalam Ganapathy <arunachalam.ganapathy@arm.com> -Date: Mon, 11 Apr 2022 14:43:15 +0100 -Subject: [PATCH 5/7] feat(plat/tc): add spmc manifest with trusty sp - -Add SPMC manifest with Trusty SP. Define Trusty's load address, -vcpu count, memory size. - -Signed-off-by: Arunachalam Ganapathy <arunachalam.ganapathy@arm.com> -Change-Id: If4363580a478776d233f7f391a30e1cb345453c2 -Upstream-Status: Pending [Not submitted to upstream yet] ---- - .../tc/fdts/tc_spmc_trusty_sp_manifest.dts | 120 ++++++++++++++++++ - plat/arm/board/tc/fdts/tc_tb_fw_config.dts | 7 +- - 2 files changed, 126 insertions(+), 1 deletion(-) - create mode 100644 plat/arm/board/tc/fdts/tc_spmc_trusty_sp_manifest.dts - -diff --git a/plat/arm/board/tc/fdts/tc_spmc_trusty_sp_manifest.dts b/plat/arm/board/tc/fdts/tc_spmc_trusty_sp_manifest.dts -new file mode 100644 -index 000000000..e2ea7b811 ---- /dev/null -+++ b/plat/arm/board/tc/fdts/tc_spmc_trusty_sp_manifest.dts -@@ -0,0 +1,120 @@ -+/* -+ * Copyright (c) 2022, Arm Limited. All rights reserved. -+ * -+ * SPDX-License-Identifier: BSD-3-Clause -+ */ -+/dts-v1/; -+ -+/ { -+ compatible = "arm,ffa-core-manifest-1.0"; -+ #address-cells = <2>; -+ #size-cells = <1>; -+ -+ attribute { -+ spmc_id = <0x8000>; -+ maj_ver = <0x1>; -+ min_ver = <0x1>; -+ exec_state = <0x0>; -+ load_address = <0x0 0xfd000000>; -+ entrypoint = <0x0 0xfd000000>; -+ binary_size = <0x80000>; -+ }; -+ -+ hypervisor { -+ compatible = "hafnium,hafnium"; -+ vm1 { -+ is_ffa_partition; -+ debug_name = "trusty"; -+ load_address = <0xf901f000>; -+ vcpu_count = <8>; -+ mem_size = <0x3f00000>; /* 64MB TZC DRAM - 1MB align */ -+ }; -+#ifdef TS_SP_FW_CONFIG -+ vm2 { -+ is_ffa_partition; -+ debug_name = "internal-trusted-storage"; -+ load_address = <0xfee00000>; -+ vcpu_count = <1>; -+ mem_size = <2097152>; /* 2MB TZC DRAM */ -+ }; -+ vm3 { -+ is_ffa_partition; -+ debug_name = "crypto"; -+ load_address = <0xfec00000>; -+ vcpu_count = <1>; -+ mem_size = <2097152>; /* 2MB TZC DRAM */ -+ }; -+#endif -+ }; -+ -+ cpus { -+ #address-cells = <0x2>; -+ #size-cells = <0x0>; -+ -+ CPU0:cpu@0 { -+ device_type = "cpu"; -+ compatible = "arm,armv8"; -+ reg = <0x0 0x0>; -+ enable-method = "psci"; -+ }; -+ -+ /* -+ * SPMC (Hafnium) requires secondary cpu nodes are declared in -+ * descending order -+ */ -+ CPU7:cpu@700 { -+ device_type = "cpu"; -+ compatible = "arm,armv8"; -+ reg = <0x0 0x700>; -+ enable-method = "psci"; -+ }; -+ -+ CPU6:cpu@600 { -+ device_type = "cpu"; -+ compatible = "arm,armv8"; -+ reg = <0x0 0x600>; -+ enable-method = "psci"; -+ }; -+ -+ CPU5:cpu@500 { -+ device_type = "cpu"; -+ compatible = "arm,armv8"; -+ reg = <0x0 0x500>; -+ enable-method = "psci"; -+ }; -+ -+ CPU4:cpu@400 { -+ device_type = "cpu"; -+ compatible = "arm,armv8"; -+ reg = <0x0 0x400>; -+ enable-method = "psci"; -+ }; -+ -+ CPU3:cpu@300 { -+ device_type = "cpu"; -+ compatible = "arm,armv8"; -+ reg = <0x0 0x300>; -+ enable-method = "psci"; -+ }; -+ -+ CPU2:cpu@200 { -+ device_type = "cpu"; -+ compatible = "arm,armv8"; -+ reg = <0x0 0x200>; -+ enable-method = "psci"; -+ }; -+ -+ CPU1:cpu@100 { -+ device_type = "cpu"; -+ compatible = "arm,armv8"; -+ reg = <0x0 0x100>; -+ enable-method = "psci"; -+ }; -+ }; -+ -+ /* 96MB of TC_TZC_DRAM1_BASE */ -+ memory@f9000000 { -+ device_type = "memory"; -+ reg = <0x0 0xf9000000 0x6000000>; -+ }; -+}; -diff --git a/plat/arm/board/tc/fdts/tc_tb_fw_config.dts b/plat/arm/board/tc/fdts/tc_tb_fw_config.dts -index 4c6ccef25..a72772fb3 100644 ---- a/plat/arm/board/tc/fdts/tc_tb_fw_config.dts -+++ b/plat/arm/board/tc/fdts/tc_tb_fw_config.dts -@@ -1,5 +1,5 @@ - /* -- * Copyright (c) 2020-2021, Arm Limited. All rights reserved. -+ * Copyright (c) 2020-2022, Arm Limited. All rights reserved. - * - * SPDX-License-Identifier: BSD-3-Clause - */ -@@ -47,6 +47,11 @@ - uuid = "486178e0-e7f8-11e3-bc5e-0002a5d5c51b"; - load-address = <0xfd280000>; - }; -+#elif TRUSTY_SP_FW_CONFIG -+ trusty { -+ uuid = "40ee25f0-a2bc-304c-8c4c-a173c57d8af1"; -+ load-address = <0xf901f000>; -+ }; - #else - cactus-primary { - uuid = "b4b5671e-4a90-4fe1-b81f-fb13dae1dacb"; --- -2.30.2 - diff --git a/meta-arm/meta-arm-bsp/recipes-bsp/trusted-firmware-a/files/tc/0006-feat-plat-tc-update-dts-with-trusty-compatible-strin.patch b/meta-arm/meta-arm-bsp/recipes-bsp/trusted-firmware-a/files/tc/0006-feat-plat-tc-update-dts-with-trusty-compatible-strin.patch deleted file mode 100644 index e2bfb2c5f5..0000000000 --- a/meta-arm/meta-arm-bsp/recipes-bsp/trusted-firmware-a/files/tc/0006-feat-plat-tc-update-dts-with-trusty-compatible-strin.patch +++ /dev/null @@ -1,50 +0,0 @@ -From 96151af7eed28d63fdaa1ac6de2d14a9c71f1d4a Mon Sep 17 00:00:00 2001 -From: Arunachalam Ganapathy <arunachalam.ganapathy@arm.com> -Date: Wed, 30 Mar 2022 12:14:49 +0000 -Subject: [PATCH 6/7] feat(plat/tc): update dts with trusty compatible string - -Signed-off-by: Arunachalam Ganapathy <arunachalam.ganapathy@arm.com> -Change-Id: Ic6661df479e114bf3f464165c14df5fa02dc0139 -Upstream-Status: Pending [Not submitted to upstream yet] ---- - fdts/tc.dts | 26 ++++++++++++++++++++++++++ - 1 file changed, 26 insertions(+) - -diff --git a/fdts/tc.dts b/fdts/tc.dts -index af64504a4..dc86958bf 100644 ---- a/fdts/tc.dts -+++ b/fdts/tc.dts -@@ -555,4 +555,30 @@ - compatible = "arm,trace-buffer-extension"; - interrupts = <1 2 4>; - }; -+ -+ trusty { -+ #size-cells = <0x02>; -+ #address-cells = <0x02>; -+ ranges = <0x00>; -+ compatible = "android,trusty-v1"; -+ -+ virtio { -+ compatible = "android,trusty-virtio-v1"; -+ }; -+ -+ test { -+ compatible = "android,trusty-test-v1"; -+ }; -+ -+ log { -+ compatible = "android,trusty-log-v1"; -+ }; -+ -+ irq { -+ ipi-range = <0x08 0x0f 0x08>; -+ interrupt-ranges = <0x00 0x0f 0x00 0x10 0x1f 0x01 0x20 0x3f 0x02>; -+ interrupt-templates = <0x01 0x00 0x8001 0x01 0x01 0x04 0x8001 0x01 0x00 0x04>; -+ compatible = "android,trusty-irq-v1"; -+ }; -+ }; - }; --- -2.30.2 - diff --git a/meta-arm/meta-arm-bsp/recipes-bsp/trusted-firmware-a/files/tc/0007-feat-arm-tc-Update-trusty-load-address-in-dts-files.patch b/meta-arm/meta-arm-bsp/recipes-bsp/trusted-firmware-a/files/tc/0007-feat-arm-tc-Update-trusty-load-address-in-dts-files.patch deleted file mode 100644 index c5a25e9a1a..0000000000 --- a/meta-arm/meta-arm-bsp/recipes-bsp/trusted-firmware-a/files/tc/0007-feat-arm-tc-Update-trusty-load-address-in-dts-files.patch +++ /dev/null @@ -1,44 +0,0 @@ -From ea9556a14bec0249ac6e01e4a55cbb04fd15b51a Mon Sep 17 00:00:00 2001 -From: Rupinderjit Singh <rupinderjit.singh@arm.com> -Date: Wed, 27 Jul 2022 09:23:58 +0100 -Subject: [PATCH] feat(arm/tc): Update trusty load-address in dts files. - -Change is required to align with sp header size change from 0x1000 to 0x4000 - -Signed-off-by: Rupinderjit Singh <rupinderjit.singh@arm.com> -Change-Id: Ieeaa7450196b33ecff1612cf3b55cf173a7941e0 -Upstream-Status: Pending [Not submitted to upstream yet] ---- - plat/arm/board/tc/fdts/tc_spmc_trusty_sp_manifest.dts | 2 +- - plat/arm/board/tc/fdts/tc_tb_fw_config.dts | 2 +- - 2 files changed, 2 insertions(+), 2 deletions(-) - -diff --git a/plat/arm/board/tc/fdts/tc_spmc_trusty_sp_manifest.dts b/plat/arm/board/tc/fdts/tc_spmc_trusty_sp_manifest.dts -index e2ea7b811..66a686c9a 100644 ---- a/plat/arm/board/tc/fdts/tc_spmc_trusty_sp_manifest.dts -+++ b/plat/arm/board/tc/fdts/tc_spmc_trusty_sp_manifest.dts -@@ -25,7 +25,7 @@ - vm1 { - is_ffa_partition; - debug_name = "trusty"; -- load_address = <0xf901f000>; -+ load_address = <0xf901c000>; - vcpu_count = <8>; - mem_size = <0x3f00000>; /* 64MB TZC DRAM - 1MB align */ - }; -diff --git a/plat/arm/board/tc/fdts/tc_tb_fw_config.dts b/plat/arm/board/tc/fdts/tc_tb_fw_config.dts -index a72772fb3..a5bb520fe 100644 ---- a/plat/arm/board/tc/fdts/tc_tb_fw_config.dts -+++ b/plat/arm/board/tc/fdts/tc_tb_fw_config.dts -@@ -50,7 +50,7 @@ - #elif TRUSTY_SP_FW_CONFIG - trusty { - uuid = "40ee25f0-a2bc-304c-8c4c-a173c57d8af1"; -- load-address = <0xf901f000>; -+ load-address = <0xf901c000>; - }; - #else - cactus-primary { --- -2.25.1 - diff --git a/meta-arm/meta-arm-bsp/recipes-bsp/trusted-firmware-a/files/tc/0008-feat-plat-tc-add-firmware-update-secure-partition.patch b/meta-arm/meta-arm-bsp/recipes-bsp/trusted-firmware-a/files/tc/0008-feat-plat-tc-add-firmware-update-secure-partition.patch deleted file mode 100644 index d36d95910c..0000000000 --- a/meta-arm/meta-arm-bsp/recipes-bsp/trusted-firmware-a/files/tc/0008-feat-plat-tc-add-firmware-update-secure-partition.patch +++ /dev/null @@ -1,63 +0,0 @@ -From 16f183e3c09d64fee92638ea9d0017ac7973ddf8 Mon Sep 17 00:00:00 2001 -From: Tudor Cretu <tudor.cretu@arm.com> -Date: Fri, 24 Sep 2021 12:09:53 +0000 -Subject: [PATCH 1/2] feat(plat/tc): add firmware update secure partition - -Firmware update is a trusted service secure partition that implements -the PSA firmware update specification. It executes in the secure world -in total compute platform. - -Signed-off-by: Davidson K <davidson.kumaresan@arm.com> -Signed-off-by: Tudor Cretu <tudor.cretu@arm.com> -Change-Id: I6223d247b078de8c03b068185bf120b3d502f500 -Upstream-Status: Pending [Not submitted to upstream yet] ---- - plat/arm/board/tc/fdts/tc_spmc_optee_sp_manifest.dts | 9 ++++++++- - plat/arm/board/tc/fdts/tc_tb_fw_config.dts | 4 ++++ - 2 files changed, 12 insertions(+), 1 deletion(-) - -diff --git a/plat/arm/board/tc/fdts/tc_spmc_optee_sp_manifest.dts b/plat/arm/board/tc/fdts/tc_spmc_optee_sp_manifest.dts -index 92e2ddda6..23ad06888 100644 ---- a/plat/arm/board/tc/fdts/tc_spmc_optee_sp_manifest.dts -+++ b/plat/arm/board/tc/fdts/tc_spmc_optee_sp_manifest.dts -@@ -28,7 +28,7 @@ - load_address = <0xfd280000>; - vcpu_count = <8>; - #ifdef TS_SP_FW_CONFIG -- mem_size = <26738688>; /* 25MB TZC DRAM */ -+ mem_size = <20447232>; /* 19MB TZC DRAM */ - #else - mem_size = <30928896>; /* 29MB TZC DRAM */ - #endif -@@ -48,6 +48,13 @@ - vcpu_count = <1>; - mem_size = <2097152>; /* 2MB TZC DRAM */ - }; -+ vm4 { -+ is_ffa_partition; -+ debug_name = "firmware-update"; -+ load_address = <0xfe600000>; -+ vcpu_count = <1>; -+ mem_size = <6291456>; /* 6MB TZC DRAM */ -+ }; - #endif - }; - -diff --git a/plat/arm/board/tc/fdts/tc_tb_fw_config.dts b/plat/arm/board/tc/fdts/tc_tb_fw_config.dts -index a5bb520fe..2c640b363 100644 ---- a/plat/arm/board/tc/fdts/tc_tb_fw_config.dts -+++ b/plat/arm/board/tc/fdts/tc_tb_fw_config.dts -@@ -41,6 +41,10 @@ - uuid = "d9df52d5-16a2-4bb2-9aa4-d26d3b84e8c0"; - load-address = <0xfec00000>; - }; -+ firmware-update { -+ uuid = "6823a838-1b06-470e-9774-0cce8bfb53fd"; -+ load-address = <0xfe600000>; -+ }; - #endif - #if OPTEE_SP_FW_CONFIG - op-tee { --- -2.34.1 - diff --git a/meta-arm/meta-arm-bsp/recipes-bsp/trusted-firmware-a/files/tc/0009-feat-plat-tc-reserve-4-MB-for-stmm-communication-use.patch b/meta-arm/meta-arm-bsp/recipes-bsp/trusted-firmware-a/files/tc/0009-feat-plat-tc-reserve-4-MB-for-stmm-communication-use.patch deleted file mode 100644 index f20f9480a0..0000000000 --- a/meta-arm/meta-arm-bsp/recipes-bsp/trusted-firmware-a/files/tc/0009-feat-plat-tc-reserve-4-MB-for-stmm-communication-use.patch +++ /dev/null @@ -1,35 +0,0 @@ -From a8cdd6c67d26c15642338a45279db5e39cf4e565 Mon Sep 17 00:00:00 2001 -From: Davidson K <davidson.kumaresan@arm.com> -Date: Fri, 3 Jun 2022 18:16:31 +0530 -Subject: [PATCH 2/2] feat(plat/tc): reserve 4 MB for stmm communication used - for firmware update - -The firmware update secure partition and u-boot communicates using -the stmm communication layer and it needs a dedicated memory region. - -Signed-off-by: Davidson K <davidson.kumaresan@arm.com> -Change-Id: I8d4da5c26843d225983dcaee0757694a6d43234c -Upstream-Status: Pending [Not submitted to upstream yet] ---- - fdts/tc.dts | 5 +++++ - 1 file changed, 5 insertions(+) - -diff --git a/fdts/tc.dts b/fdts/tc.dts -index dc86958bf..cb504c4a2 100644 ---- a/fdts/tc.dts -+++ b/fdts/tc.dts -@@ -217,6 +217,11 @@ - reg = <0x00000000 0xf8e00000 0 0x00200000>; - no-map; - }; -+ -+ fwu_mm@0xfca00000 { -+ reg = <0x00000000 0xfca00000 0 0x00400000>; -+ no-map; -+ }; - }; - - psci { --- -2.34.1 - diff --git a/meta-arm/meta-arm-bsp/recipes-bsp/trusted-firmware-a/trusted-firmware-a-corstone1000.inc b/meta-arm/meta-arm-bsp/recipes-bsp/trusted-firmware-a/trusted-firmware-a-corstone1000.inc index 008103469e..3a5be11fd3 100644 --- a/meta-arm/meta-arm-bsp/recipes-bsp/trusted-firmware-a/trusted-firmware-a-corstone1000.inc +++ b/meta-arm/meta-arm-bsp/recipes-bsp/trusted-firmware-a/trusted-firmware-a-corstone1000.inc @@ -9,6 +9,10 @@ SRC_URI:append = " \ file://0002-feat-corstone1000-bl2-loads-fip-based-on-metadata.patch \ " +#Sets TF-A version to 2.8.0 +SRCREV_tfa = "9881bb93a3bc0a3ea37e9f093e09ab4b360a9e48" +PV = "2.8.0" + TFA_DEBUG = "1" TFA_UBOOT ?= "1" TFA_MBEDTLS = "1" diff --git a/meta-arm/meta-arm-bsp/recipes-bsp/trusted-firmware-a/trusted-firmware-a-tc.inc b/meta-arm/meta-arm-bsp/recipes-bsp/trusted-firmware-a/trusted-firmware-a-tc.inc index 301f97c8fe..e17a8f5996 100644 --- a/meta-arm/meta-arm-bsp/recipes-bsp/trusted-firmware-a/trusted-firmware-a-tc.inc +++ b/meta-arm/meta-arm-bsp/recipes-bsp/trusted-firmware-a/trusted-firmware-a-tc.inc @@ -1,22 +1,9 @@ # TC0 specific TFA configuration -# Intermediate SHA with 2.7 baseline version -SRCREV_tfa = "e95abc4c01822ef43e9e874d63d6596dc0b57279" -PV = "2.7+git${SRCPV}" - DEPENDS += "scp-firmware util-linux-native gptfdisk-native" FILESEXTRAPATHS:prepend := "${THISDIR}/files/tc:" SRC_URI:append = " \ - file://0001-plat-tc-Increase-maximum-BL2-size.patch \ - file://0002-Makefile-add-trusty_sp_fw_config-build-option.patch \ - file://0003-fix-plat-arm-increase-sp-max-image-size.patch \ - file://0004-fix-plat-tc-increase-tc_tzc_dram1_size.patch \ - file://0005-feat-plat-tc-add-spmc-manifest-with-trusty-sp.patch \ - file://0006-feat-plat-tc-update-dts-with-trusty-compatible-strin.patch \ - file://0007-feat-arm-tc-Update-trusty-load-address-in-dts-files.patch \ - file://0008-feat-plat-tc-add-firmware-update-secure-partition.patch \ - file://0009-feat-plat-tc-reserve-4-MB-for-stmm-communication-use.patch \ file://generate_metadata.py \ " |