<feed xmlns='http://www.w3.org/2005/Atom'>
<title>linux/meta-freescale.git/recipes-security, branch fix-boot-container</title>
<subtitle>Mirror of github.com/Freescale/meta-freescale</subtitle>
<id>https://git.enea.com/cgit/linux/meta-freescale.git/atom?h=fix-boot-container</id>
<link rel='self' href='https://git.enea.com/cgit/linux/meta-freescale.git/atom?h=fix-boot-container'/>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-freescale.git/'/>
<updated>2023-03-13T04:38:47+00:00</updated>
<entry>
<title>optee-test: Fix build with clang compiler</title>
<updated>2023-03-13T04:38:47+00:00</updated>
<author>
<name>Khem Raj</name>
<email>raj.khem@gmail.com</email>
</author>
<published>2023-03-13T04:38:47+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-freescale.git/commit/?id=0a89440a9b74010e12c9882233fce9cf1f635cea'/>
<id>urn:sha1:0a89440a9b74010e12c9882233fce9cf1f635cea</id>
<content type='text'>
Signed-off-by: Khem Raj &lt;raj.khem@gmail.com&gt;
</content>
</entry>
<entry>
<title>optee-os: Fix build with clang</title>
<updated>2023-01-09T07:04:24+00:00</updated>
<author>
<name>Khem Raj</name>
<email>raj.khem@gmail.com</email>
</author>
<published>2023-01-09T07:04:24+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-freescale.git/commit/?id=39470ba479f5f5a658bec286571b2fba43b0ed04'/>
<id>urn:sha1:39470ba479f5f5a658bec286571b2fba43b0ed04</id>
<content type='text'>
Bring in the needed patches from meta-arm

Signed-off-by: Khem Raj &lt;raj.khem@gmail.com&gt;
</content>
</entry>
<entry>
<title>Revert "optee-os,optee-test: Use gcc compiler"</title>
<updated>2023-01-06T15:08:40+00:00</updated>
<author>
<name>Oleksandr Suvorov</name>
<email>oleksandr.suvorov@foundries.io</email>
</author>
<published>2023-01-06T15:08:40+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-freescale.git/commit/?id=c92b517f6a2cbe3c65a7c83333922f0958c58834'/>
<id>urn:sha1:c92b517f6a2cbe3c65a7c83333922f0958c58834</id>
<content type='text'>
After updating op-tee to 3.19, it is able to be built with clang
toolchain.

This reverts commit 86680b12d44ffe2831244a2f7f7dcaaa1a1440c5.
</content>
</entry>
<entry>
<title>optee: Upgrade 3.17.0.imx to 3.19.0.imx</title>
<updated>2023-01-06T12:33:00+00:00</updated>
<author>
<name>Oleksandr Suvorov</name>
<email>oleksandr.suvorov@foundries.io</email>
</author>
<published>2023-01-06T09:17:58+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-freescale.git/commit/?id=667a28c32f118ca64cbc88eaea9dcc2fa2a4cd1c'/>
<id>urn:sha1:667a28c32f118ca64cbc88eaea9dcc2fa2a4cd1c</id>
<content type='text'>
NXP BSP lf-5.15.71_2.2.0 uses op-tee 3.19.0.imx.
Upgrade optee-os, optee-client, and optee-test accordingly.

Add missed support for imx93evk platform.

Relevant changes for optee-os:
- 00919403f LF-7525 drivers: dcp: do not modify DCP node status in the DTB
- 842961521 core: mm: fix error flushing unused pgt's
- 96d9b4c19 libutils: util.h: fix the ROUNDUP_OVERFLOW() macro
- 2885fd08e LFOPTEE-203 drivers: ele: align HUK output buffer
- 7e41f6603 drivers: imx_ele: add HUK support for imx93
- ab1525d14 core: imx: remove SC_IPC_BASE_SECURE definition
- 382a7ae57 LFOPTEE-181 drivers: imx_ele: re-work imx_ele_session_get_device_info()
- b27da7b0d LFOPTEE-181 drivers: imx_ele: remove RNG support for 8ulp A0
- 4a9f3e387 LFOPTEE-181 drivers: imx_ele: add MU infos for imx93
- 8c4caec41 LFOPTEE-181 core: imx: enable MU and ELE drivers for imx93
- f5bc45d6d LFOPTEE-181 core: imx: add MU_BASE and MU_SIZE for imx93
- b19786dfb LFOPTEE-181 drivers: imx_mu: add support for imx93
- 4c598c905 core: imx_ele: remove addition of word for CRC
- 9f9fb3899 LFU-368: core: imx93: enable trusted_keys as early TA
- 23889478f LFU-368: core: imx: enabled dynamic share memory for i.MX93

Relevant changes in optee-client:
- 644022f teeacl: fix include path
- 140bf46 libckteec: Add EDDSA attribute serialization
- 1fc38c6 libteeacl: Add function to resolve name to gid_t
- 1560582 libteeacl: function to encode a group login UUID
- e58b158 libteeacl: Add new ACL helper library
- 5364e61 tee-supplicant: read rpmb dev info from sysfs
- a46239c tee-supplicant: android: make RPMB_EMU a conditional assignment
- 30abe6c cmake: Use separate generator expression for lib targets
- f2755fe cmake: Don't set teec include_directory from libseteec
- 1dcb80a Use CMake project command to set version
- 492410d tee-supplicant: -d: return after TEE device is opened
- d59ed2d cmake: fix log level don't take effect
- e7cba71 tee-supplicant: fs: use errno instead of returning TEEC_ERROR_GENERIC
- f7ed8e3 tee-supplicant: support multiple TA load paths
- a5c30b1 Makefile: Makefile: only preserve links when installing output files
- dc58de2 tee-supplicant: close shm fd before freeing memory
- f2a7c94 tee-supplicant/src/tee_supplicant.c: fix build without plugins

Relevant changes in optee-test:
- 5c1dbb5 LFOPTEE-129 Make MP test use embedded crypto instead of openssl
- 661a7b3 LFOPTEE-131 Fix ta_keygen compilation warnings
- 6fcbcb1 LFOPTEE-123 Reset the handle when freed
- 980dbbb LFOPTEE-123 Handle benchmark logging for key generation measures
- ebf619a LFOPTEE-95 Add performance measure of key generation
- 28ba903 LFOPTEE-93 Check MP is functional
- d7f6c03 LFOPTEE-84 xtest: Add test of MP feature
- d928ce2 LFOPTEE-84 ta: Add test of MP
- b060fc4 MMIOT-789 xtest: crypto_perf: fix resource leak in read_random
- f9d2ab0 TEE-641 regression_nxp: add AES CTR in place tests
- dd158a7 LFOPTEE-65 xtest: add DIGPROG tests
- e1492fa LFOPTEE-65 xtest: add OCOTP tests
- c520c98 YOCIMX-5658 regression_nxp: replace malloc() calls with calloc() calls
- 09dbac1 LFOPTEE-55: crypto-perf: RSA: Fix for RSA Encryption/Decryption  error
- 63dcd10 LFOPTEE-55: crypto-perf: add domain parameters for dsa
- c88fb78 LFOPTEE-55: crypto-perf: DH: Remove non-essential attributes passed during key generation
- b7b285a LFOPTEE-55: crypto-perf: ta: ECDSA, ECDH: Remove non-essential attributes passed during key generation
- 8350e03 LFOPTEE-55: crypto-perf: xtest: ECDH: RoundUp key size
- 7a9c375 LFOPTEE-39 regression_nxp: Add test of DEK blob generation
- 61e5ede MMIOT-723 regression_nxp: crypto: Fixing memory corruption in nxp_crypto_003
- 7d9ff08 LFOPTEE-17: xtest: regression_nxp: add test case for I2C driver testing
- 6ae8e95 xtest: enable PKCS11 tests
- 35173ba regression_nxp: enable CFG_REGRESSION_NXP flag
- cfb6e7b LFOPTEE-16: fix warning where uint32_t is expected
- a740498 LFOPTEE-16: fix trace compilation warnings
- 0fa4d73 LFOPTEE-13 crypto-perf: fix command line algorithm search
- 6a28f3c LFOPTEE-13 crypto-perf: fix compilation warnings
- e78f18d TEE-127 CAAM Crypto Performance
- 5ec9bce TEE-606 xtest: define a 'regression_nxp' test suite in xtest
- e562b26 TEE-606 xtest: add CFG_REGRESSION_NXP flag
- d9d73a8 TEE-367 crypto: cipher memory leakage verification
- f3e776b TEE-548 regression_nxp: Cipher operation with a big buffer
- 5312feb TEE-577 regression_nxp: AES CTR streaming byte per byte
- 6df2c3f TEE-418 regression_nxp: add cipher streaming byte incremental
- ab9863c Add ED25519 test cases
- eb3d01f xtest: Add FF-A memory test
- 252faa9 xtest: SPMC Add basic test
- 13cce36 xtest: remove ADBG_REQUIRE* macros
- d9d269e xtest: fix compilation issue
- 2055d75 xtest: fix compilation issue
- c7f733c xtest: fix compilation issue
- d09b43b host: supp_plugin: fix cross compilation
- da5282a sdp: Add dmabuf support
- 366179c regression 4007_x25519: do not fail if X25519 is not supported
- 00b3f2c Add x25519 test cases

Signed-off-by: Oleksandr Suvorov &lt;oleksandr.suvorov@foundries.io&gt;
</content>
</entry>
<entry>
<title>optee-os,optee-test: Use gcc compiler</title>
<updated>2023-01-06T07:49:00+00:00</updated>
<author>
<name>Khem Raj</name>
<email>raj.khem@gmail.com</email>
</author>
<published>2023-01-06T07:10:40+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-freescale.git/commit/?id=86680b12d44ffe2831244a2f7f7dcaaa1a1440c5'/>
<id>urn:sha1:86680b12d44ffe2831244a2f7f7dcaaa1a1440c5</id>
<content type='text'>
It does not compile with clang, all work to get it compiling with clang
has gone into 3.18+ ( see meta-arm ) until imx version revs up to 3.18
lets use gcc always to build it

Signed-off-by: Khem Raj &lt;raj.khem@gmail.com&gt;
</content>
</entry>
<entry>
<title>Switch NXP QorIQ repositories to github.com</title>
<updated>2022-12-15T03:47:18+00:00</updated>
<author>
<name>Jun Zhu</name>
<email>junzhu@nxp.com</email>
</author>
<published>2022-12-15T03:49:10+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-freescale.git/commit/?id=db67bdf59ca6e7c2da4a6fbadb53b5ae238219a6'/>
<id>urn:sha1:db67bdf59ca6e7c2da4a6fbadb53b5ae238219a6</id>
<content type='text'>
Fetch QorIQ's source code from github.com/nxp-qoriq,
as original source.codeaurora.org/external/qoriq will
stop to access from April 2023.

Signed-off-by: Jun Zhu &lt;junzhu@nxp.com&gt;
</content>
</entry>
<entry>
<title>optee-test: Update lf-5.15.32_2.0.0 -&gt; lf-5.15.52_2.1.0</title>
<updated>2022-10-31T21:00:38+00:00</updated>
<author>
<name>Tom Hochstein</name>
<email>tom.hochstein@nxp.com</email>
</author>
<published>2022-10-31T20:59:26+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-freescale.git/commit/?id=aac88e4d334a3eaf63342bd1cf3a2b4cde8c1fca'/>
<id>urn:sha1:aac88e4d334a3eaf63342bd1cf3a2b4cde8c1fca</id>
<content type='text'>
Changes:
```
41222c4 Makefile: fix ownership contamination when installing output files
ae3b1c6 xtest: create output dir before generating regression_8100 header files
```

Signed-off-by: Tom Hochstein &lt;tom.hochstein@nxp.com&gt;
</content>
</entry>
<entry>
<title>optee-client: Update lf-5.15.32_2.0.0 -&gt; lf-5.15.52_2.1.0</title>
<updated>2022-10-31T20:58:24+00:00</updated>
<author>
<name>Tom Hochstein</name>
<email>tom.hochstein@nxp.com</email>
</author>
<published>2022-10-31T20:58:24+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-freescale.git/commit/?id=9e4dae7a7bbb0135c7c2e009f9345d23ed8b03b5'/>
<id>urn:sha1:9e4dae7a7bbb0135c7c2e009f9345d23ed8b03b5</id>
<content type='text'>
Changes:
```
9d8f190 Makefile: Makefile: only preserve links when installing output files
9a33704 public: Fix simple typo in tee_client_api.h
8aed3ed tee-supplicant: accept -r as a short option for --rpmb-cid
5a69d55 tee-supplicant: add --rpmb-cid command line option
88d374e tee-supplicant: rpmb: read CID in one go
ba0ed67 tee-supplicant: rpmb: introduce readn() wrapper to the read() syscall
945704e tee-supplicant: fix plugin loading logic
edf3072 tee-supplicant: refactor argument parsing in main()
876b1ae tee-supplicant: introduce struct tee_supplicant_params for global config
8b3f7fe libckteec: add support for ECDH derive
06db73b libteec: copy out partial shadow buffer
f6e05d3 GitHub actions: fix incorrect version
975fa78 GitHub actions: add a stales.yml file
df537dd tee-supplicant: read_with_timeout(): fix non-blocking peeking
6d54f84 tee-supplicant: recv_with_out_flags(): check EINTR
f4f54e5 libseteec: Secure Element control
e532a51 tee-supplicant: tee_socket_recv(): report truncated datagrams
2a99339 libckteec: check for ckteec_alloc_shm rval
b3e9cee tee-supplicant: handle ftell() errors
9876c9c teec_ta_load: replace printfs with DMSGs
ae19e95 .gitignore: add tags and TAGS
```

Signed-off-by: Tom Hochstein &lt;tom.hochstein@nxp.com&gt;
</content>
</entry>
<entry>
<title>optee-os: Update lf-5.15.32_2.0.0 -&gt; lf-5.15.52_2.1.0</title>
<updated>2022-10-31T20:55:06+00:00</updated>
<author>
<name>Tom Hochstein</name>
<email>tom.hochstein@nxp.com</email>
</author>
<published>2022-10-31T20:55:06+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-freescale.git/commit/?id=282e2619f00fb7b1a006fa09627fd4d4a74ba107'/>
<id>urn:sha1:282e2619f00fb7b1a006fa09627fd4d4a74ba107</id>
<content type='text'>
Changes:
```
9e86c8b6b LFOPTEE-169 imx_ele: use get_info command to get the soc revision
74f662cf4 LFOPTEE-169 imx_ele: check ELE TRNG status before getting random numbers
f74752516 LFOPTEE-196 imx_ele: make the difference ELE_VERSION_BASELINE and ELE_VERSION_HSM
c3f658958 LFOPTEE-172 core: imx_ele: cache the die ID
96dc392d7 scripts: nxp_build: remove ls1012afrwy platform
31125f8be core: plat-ls: remove OP-TEE support for LS1012A-FRWY platform
bb2173330 core: plat-ls: correct expression CFG_NUM_THREADS ?= CFG_TEE_CORE_NB_CORE
2166caac3 core: plat-ls: set CFG_NUM_THREADS ?= 2 for LS1012ARDB
21059100b drivers: caam: increase the minimum entropy delay the imx6sx
a3d4b52b0 drivers: imx: dcp: disable the use of UNIQUE KEY after HUK generation
9162aecfd drivers: imx: dcp: clear OTP_KEY bit for unique key selection
d5144e4a9 drivers: imx: dcp: workaround DCP errata 051292
d61caabeb core: pta: return error code when failing to deserialize saved key
198e47860 core: pta: attestation: fix buffer size for generated key
c1e398428 drivers: pm: remove file with license issue
2a725689b LF-6067 drivers: caam: map the CAAM registers with the CAAM_SIZE value
639dfbc1f LF-6067 core: ls: add CAAM_SIZE values for LS platforms
42a864fd1 LF-6067 core: imx: add CAAM_SIZE values for i.MX platforms
6ebec0d2a LFOPTEE-159 drivers: imx_snvs: re-work security state for imx8m platforms
588403cd7 LFOPTEE-158 scripts: add imx93evk platform
18e11b984 LFOPTEE-158 core: imx: add support imx93evk platform
813af1a3c LFOPTEE-158 core: imx: add imx93 SoC ID
aea51ea0b LFOPTEE-158 core: imx: add imx93 registers
ede0b7183 LFOPTEE-158 core: imx: simplify the error macro message
742bee71c drivers: imx_snvs: fix the is_otpmk_valid() logic
6bb686a04 drivers: imx_snvs: fix SNVS register read operation
111482cfe LFOPTEE-146 drivers: imx_ele: add CRC computation and check for ELE calls
dd227c6c5 LFOPTEE-146 drivers: imx_ele: reformat code for consistency
907c2f86f LFOPTEE-146 drivers: imx_ele: ask the ELE for the unique device ID
b421225d9 LFOPTEE-146 drivers: remove imx_ele_mu_init() function
09e9d1b62 LFOPTEE-146 drivers: imx_mu: increase the message limit size
b6c4a695b core: plat-ls: correct CAAM JR interrupt numbers
13ce5deb6 LFOPTEE-147 core: imx: fix uninitialized return value
e5ea58a7b LFOPTEE-141 drivers: imx_mu: Disable foreign exception when sending message to MU
```

Signed-off-by: Tom Hochstein &lt;tom.hochstein@nxp.com&gt;
</content>
</entry>
<entry>
<title>optee-os: fix build with binutils 2.39</title>
<updated>2022-08-26T13:19:41+00:00</updated>
<author>
<name>Andrey Zhizhikin</name>
<email>andrey.z@gmail.com</email>
</author>
<published>2022-08-26T13:07:25+00:00</published>
<link rel='alternate' type='text/html' href='https://git.enea.com/cgit/linux/meta-freescale.git/commit/?id=42a054f5e3d18bdf0092dd29eff5980ba9af8db1'/>
<id>urn:sha1:42a054f5e3d18bdf0092dd29eff5980ba9af8db1</id>
<content type='text'>
binutils 2.39 started to produce warning on RWX LOAD segments, which
breaks the linking process of optee-os.

Upstream optee-os package has patch ac425901 ("arm/optee-os: backport
RWX permission error patch") [1] integrated, which has been
backported in OP-TEE from PR #5475 [2] targeting master in upstream.

Port upstream optee-os commit into NXP fork of optee-os.

Link: [1]: https://github.com/jonmason/meta-arm/commit/ac4259011f4c8cec01191828014487ccc5de73ca
Link: [2]: https://github.com/OP-TEE/optee_os/pull/5474
Signed-off-by: Andrey Zhizhikin &lt;andrey.z@gmail.com&gt;
Cc: Tom Hochstein &lt;tom.hochstein@nxp.com&gt;
</content>
</entry>
</feed>
