)]}' { "log": [ { "commit": "f9dd867ac7062ea7cb79b006db651518086e0ab7", "tree": "65331f0b29e1c16fd1f965efd74281cd0f251f76", "parents": [ "aa3f8997fcb2eefcb588db69a7158b51355d6985" ], "author": { "name": "Alex Van Damme", "email": "atv@google.com", "time": "Tue Sep 29 15:04:20 2020 -0700" }, "committer": { "name": "Alex Van Damme", "email": "atv@google.com", "time": "Tue Sep 29 15:04:20 2020 -0700" }, "message": "Set baud rate to 115200\n\nChange-Id: I5accd3ed6e8b87058b1addbbde85b23c79f45d76\n" }, { "commit": "aa3f8997fcb2eefcb588db69a7158b51355d6985", "tree": "ff1d0d7523ff5a8fd8922456623a32955270c894", "parents": [ "d98812247c6a5ee48f89bb6aa6df565c9d305066" ], "author": { "name": "Fabien Parent", "email": "fparent@baylibre.com", "time": "Fri Jul 05 10:56:42 2019 +0200" }, "committer": { "name": "Fabien Parent", "email": "fparent@baylibre.com", "time": "Mon Feb 17 12:24:36 2020 +0100" }, "message": "mediatek: add support for MT8183 SoC\n\nAdd OP-TEE support for MT8183 SoC.\n\nSigned-off-by: Fabien Parent \u003cfparent@baylibre.com\u003e\n" }, { "commit": "d98812247c6a5ee48f89bb6aa6df565c9d305066", "tree": "e9baedda0e6eb5e1377597165245fd6766c7a853", "parents": [ "d34fc3a15fe57d548d950dba3dfcc8b525e13279" ], "author": { "name": "Fabien Parent", "email": "fparent@baylibre.com", "time": "Sun Feb 24 19:41:08 2019 +0100" }, "committer": { "name": "Fabien Parent", "email": "fparent@baylibre.com", "time": "Mon Feb 17 12:24:14 2020 +0100" }, "message": "mediatek: add support for MT8516 SoC\n\nAdd OP-TEE support for MT8516 SoC.\n\nSigned-off-by: Fabien Parent \u003cfparent@baylibre.com\u003e\n" }, { "commit": "d34fc3a15fe57d548d950dba3dfcc8b525e13279", "tree": "a3ac25f5bf947d75e8e1960e1035b676fdb6c99f", "parents": [ "023e33656e2c9557ce50ad63a98b2e2c9b51c118" ], "author": { "name": "Fabien Parent", "email": "fparent@baylibre.com", "time": "Thu Feb 13 17:43:20 2020 +0100" }, "committer": { "name": "Fabien Parent", "email": "fparent@baylibre.com", "time": "Mon Feb 17 12:23:52 2020 +0100" }, "message": "plat-mediatek: Add support for GIC\n\nAdd the support for the GIC for the MediaTek platforms.\n\nSigned-off-by: Fabien Parent \u003cfparent@baylibre.com\u003e\n" }, { "commit": "023e33656e2c9557ce50ad63a98b2e2c9b51c118", "tree": "d5bdcb290290df6eed60b53a5a634b4f2c03ad3a", "parents": [ "e9866d8fc47ff2a656273787ec1e3d86f7d76b1e" ], "author": { "name": "Jerome Forissier", "email": "jerome@forissier.org", "time": "Mon Jan 06 14:53:30 2020 +0100" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Fri Jan 24 18:00:52 2020 +0100" }, "message": "Update CHANGELOG for 3.8.0\n\nUpdate CHANGELOG for 3.8.0 and collect Tested-by tags.\n\nSigned-off-by: Jerome Forissier \u003cjerome@forissier.org\u003e\nTested-by: Joakim Bech \u003cjoakim.bech@linaro.org\u003e (RPi3b)\nTested-by: Igor Opaniuk \u003cigor.opaniuk@gmail.com\u003e (Poplar)\nTested-by: Andrew F. Davis \u003cafd@ti.com\u003e (plat-ti)\nTested-by: Jerome Forissier \u003cjerome@forissier.org\u003e (HiKey)\nTested-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e (Juno)\nTested-by: Jerome Forissier \u003cjerome@forissier.org\u003e (HiKey960, GP)\nTested-by: Sumit Garg \u003csumit.garg@linaro.org\u003e (Developerbox)\nTested-by: Jerome Forissier \u003cjerome@forissier.org\u003e (QEMUv8)\nTested-by: Bryan O\u0027Donoghue \u003cbryan.odonoghue@linaro.org\u003e WaRP7\nTested-by: Volodymyr Babchuk \u003cvolodymyr_babchuk@epam.com\u003e (Rcar H3)\n" }, { "commit": "e9866d8fc47ff2a656273787ec1e3d86f7d76b1e", "tree": "b50eb325570c9c42aa9b1335bdbe0790f4d4a903", "parents": [ "9c619b2c69ee1110eb851d735b04c740e8e71688" ], "author": { "name": "Rouven Czerwinski", "email": "r.czerwinski@pengutronix.de", "time": "Fri Jan 24 12:43:32 2020 +0100" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Fri Jan 24 14:46:02 2020 +0100" }, "message": "core: calculate size/address cells with overlay\n\nIn case an external device tree overlay is configured within OP-TEE,\nfdt_{size,address}_cells will return the defaults from the device tree\nspecification. These will be wrong for 32-bit ARM platforms, instead\ncalculate them from the paddr_t size instead.\n\nSigned-off-by: Rouven Czerwinski \u003cr.czerwinski@pengutronix.de\u003e\nReviewed-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\n" }, { "commit": "9c619b2c69ee1110eb851d735b04c740e8e71688", "tree": "a4bba1c6fbc11d21a794f1c8a9a9b6588de531fc", "parents": [ "4b2d89454dac0fea86a6b1f8dfa42f904f9a23c4" ], "author": { "name": "Volodymyr Babchuk", "email": "volodymyr_babchuk@epam.com", "time": "Thu Jan 23 20:05:02 2020 +0200" }, "committer": { "name": "Jerome Forissier", "email": "jerome@forissier.org", "time": "Fri Jan 24 14:42:18 2020 +0100" }, "message": "virt: core_mmu: use nexus memory area for temporary map\n\nIf CFG_VIRTUALIZATION is enabled, page allocator code will\ntry to allocate pages from nexus sections, which were not\nmapped by default.\n\nSigned-off-by: Volodymyr Babchuk \u003cvolodymyr_babchuk@epam.com\u003e\nReviewed-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\n" }, { "commit": "4b2d89454dac0fea86a6b1f8dfa42f904f9a23c4", "tree": "115782d6f0b30f3f4188f993cae2f9809910d745", "parents": [ "4f562c571b01ea38974018164ecf02385503ffd5" ], "author": { "name": "Volodymyr Babchuk", "email": "volodymyr_babchuk@epam.com", "time": "Thu Jan 23 19:05:38 2020 +0200" }, "committer": { "name": "Jerome Forissier", "email": "jerome@forissier.org", "time": "Fri Jan 24 14:41:25 2020 +0100" }, "message": "gen_tee_bin: include .nex_data section\n\n.nex_data section were missing in the resulting binary, which lead to\nbroken OP-TEE image that was unable to boot.\n\nSigned-off-by: Volodymyr Babchuk \u003cvolodymyr_babchuk@epam.com\u003e\nReviewed-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\n[jf: fix spelling mistake in subject]\nSigned-off-by: Jerome Forissier \u003cjerome@forissier.org\u003e\n" }, { "commit": "4f562c571b01ea38974018164ecf02385503ffd5", "tree": "803b9c6c4839d2463072d006ebe1fc712957f563", "parents": [ "da76876023b21051c8589479fa828787a0dff620" ], "author": { "name": "Fangsuo Wu", "email": "fangsuowu@asrmicro.com", "time": "Fri Jan 10 10:25:30 2020 +0800" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Fri Jan 24 09:53:41 2020 +0100" }, "message": "core: fix typo error in nsec ddr discovery\n\nIn core_mmu_set_discovered_nsec_ddr(), core_mmap_is_end_of_table\nalways returns false and the loop body cannot be executed, which\nis unexpected.\n\nReviewed-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\nSigned-off-by: Fangsuo Wu \u003cfangsuowu@asrmicro.com\u003e\n" }, { "commit": "da76876023b21051c8589479fa828787a0dff620", "tree": "5ad098e456f7e35ee93f0dfa30d0a4e2ece571c4", "parents": [ "6e934fb4866c578ea8f020e207aaa5b7bf196cf6" ], "author": { "name": "Fangsuo Wu", "email": "fangsuowu@asrmicro.com", "time": "Mon Jan 20 17:26:06 2020 +0800" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Fri Jan 24 09:53:41 2020 +0100" }, "message": "core: introduce a new memory type for external dtb image\n\nWhen CFG_DT\u003dy, the external dtb image is mapped as\nIO_NSEC memory type in init_external_dt function,\nwhich may conflicts with dynamic shared memory check.\nBelow is the panic log with qemu boot:\n\n\tE/TC:0 0 check_phys_mem_is_outside:333 Non-sec mem (0x40000000:0x3fe00000) overlaps map (type 13 0x40000000:0x100000)\n\tE/TC:0 0 Panic at core/arch/arm/mm/core_mmu.c:334 \u003ccheck_phys_mem_is_outside\u003e\n\tE/TC:0 0 TEE load address @ 0x1bd0f000\n\nThis patch introduces a new memory type MEM_AREA_EXT_DT\nwhich is used to map external dtb image. This memory type\nwill be skipped over in core_mmu_set_discovered_nsec_ddr()\nin order to avoid the above panic.\n\nReviewed-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\nSigned-off-by: Fangsuo Wu \u003cfangsuowu@asrmicro.com\u003e\n" }, { "commit": "6e934fb4866c578ea8f020e207aaa5b7bf196cf6", "tree": "9055f6cd4404b3b3e4fe2e7352bc42d4927d9fe7", "parents": [ "941dec3a7f6fd8d8645fa0de158e48c2f845bbeb" ], "author": { "name": "Fangsuo Wu", "email": "fangsuowu@asrmicro.com", "time": "Fri Jan 10 13:37:48 2020 +0800" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Fri Jan 24 09:53:41 2020 +0100" }, "message": "core: fix compiling error if reserved SHM not used\n\nFix compiling error when only use dynamic shared memory\n(i.e: CFG_CORE_DYN_SHM\u003dy \u0026\u0026 CFG_CORE_RESERVED_SHM\u003dn) with\nCFG_SHMEM_START and CFG_SHMEM_SIZE not defined.\n\nReviewed-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\nSigned-off-by: Fangsuo Wu \u003cfangsuowu@asrmicro.com\u003e\n" }, { "commit": "941dec3a7f6fd8d8645fa0de158e48c2f845bbeb", "tree": "5c1107d47621c7ffbd82fb0edc33b3bc3bfeee17", "parents": [ "6b6195cbd3a5f4a63f9b63e0737d11a907a34f71" ], "author": { "name": "Fangsuo Wu", "email": "fangsuowu@asrmicro.com", "time": "Fri Jan 10 10:42:24 2020 +0800" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Fri Jan 24 09:53:41 2020 +0100" }, "message": "core: adjust nsec ddr memory size correctly\n\nIn carve_out_phys_mem(), when pa has the same address\nwith m[n].addr, the m[n].size should also be adjusted.\n\nReviewed-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\nSigned-off-by: Fangsuo Wu \u003cfangsuowu@asrmicro.com\u003e\n" }, { "commit": "6b6195cbd3a5f4a63f9b63e0737d11a907a34f71", "tree": "9fbfc38faca69e4d926319638fa32ea5ee3d2b3c", "parents": [ "7d5f25b72dab8509faea0537eed93cc2835262f9" ], "author": { "name": "Jerome Forissier", "email": "jerome@forissier.org", "time": "Wed Jan 22 09:43:58 2020 +0100" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Thu Jan 23 18:52:32 2020 +0100" }, "message": "core: ltc: sm2: add missing status check\n\ncrypto_acipher_sm2_pke_decrypt() fails to check a return status from\nLibTomCrypt. Add the missing check.\n\nFixes: f9a78287dd12 (\"core: ltc: add support for SM2 PKE\")\nSigned-off-by: Jerome Forissier \u003cjerome@forissier.org\u003e\nAcked-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\n" }, { "commit": "7d5f25b72dab8509faea0537eed93cc2835262f9", "tree": "9bfdb371fd962eaa58bb52b4daa5013cebc57a46", "parents": [ "e66c2639b6bb87b0622582b6f57ded8a05ef6ab0" ], "author": { "name": "Volodymyr Babchuk", "email": "volodymyr_babchuk@epam.com", "time": "Wed Jan 22 19:52:28 2020 +0200" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Thu Jan 23 15:12:40 2020 +0100" }, "message": "plat: rcar: force disable core ALSR\n\nWe need to disable core ASLR for two reasons:\n1. There is no source for ALSR seed, as Rcar platform\n does not provide DTB to OP-TEE\n2. OP-TEE crashes during boot with enabled CFG_CORE_ASLR\n\nMainly we are disabling ASLR for the second reason. Further\ninvestigation is needed to see why enabled ASLR causes data\nabort in MMIO functions.\n\nSigned-off-by: Volodymyr Babchuk \u003cvolodymyr_babchuk@epam.com\u003e\nReviewed-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\n" }, { "commit": "e66c2639b6bb87b0622582b6f57ded8a05ef6ab0", "tree": "c746afc9dbb2598e067797715428f058c96218e0", "parents": [ "82fa806bf9768d8a7497ae430f09d1101b72ff60" ], "author": { "name": "Volodymyr Babchuk", "email": "volodymyr_babchuk@epam.com", "time": "Wed Jan 22 19:57:29 2020 +0200" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Thu Jan 23 15:12:40 2020 +0100" }, "message": "plat: rcar: generate .srec file using gen_tee_bin\n\nAfter recent changes, we are not able to use raw binary generated\nfrom the elf file. Instead we need to use gen_tee_bin script to\ngenerate the header-less binary with the correct layout.\n\nThis change also generates tee-raw.bin as byproduct. This file is\nusable also, because it allows to flash OP-TEE using JTAG.\n\nFixes: 5dd1570ac5b (\"core: add embedded data region\")\nSigned-off-by: Volodymyr Babchuk \u003cvolodymyr_babchuk@epam.com\u003e\nReviewed-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\n" }, { "commit": "82fa806bf9768d8a7497ae430f09d1101b72ff60", "tree": "d971aa207282535f428b3099fa1825566732d106", "parents": [ "490b9f949c894708f74b0c8d2e2924c4ffc30aae" ], "author": { "name": "Volodymyr Babchuk", "email": "volodymyr_babchuk@epam.com", "time": "Wed Jan 22 19:17:40 2020 +0200" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Thu Jan 23 15:12:40 2020 +0100" }, "message": "gen_tee_bin: generate tee-raw.bin\n\nSome platforms (like Rcar Gen3) still does not support OP-TEE images\nwrapped into any type of container. In the past we were able to\ngenerate raw binary straight from the resulting elf file. But with\nrecent changes, OP-TEE expects some additional data past the __end, so\nwee need to use gen_tee_bin.py to generate header-less OP-TEE binary.\n\nThis patch adds `--out_tee_raw_bin` option, which generates needed\nfile.\n\nSigned-off-by: Volodymyr Babchuk \u003cvolodymyr_babchuk@epam.com\u003e\nReviewed-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\n" }, { "commit": "490b9f949c894708f74b0c8d2e2924c4ffc30aae", "tree": "3d17066b6f70d747297bd02fe2426027dbce190f", "parents": [ "5b385b3f835df16fad1922cfbe6dbe112d2047b5" ], "author": { "name": "Jerome Forissier", "email": "jerome@forissier.org", "time": "Fri Jan 17 17:45:16 2020 +0100" }, "committer": { "name": "Jerome Forissier", "email": "jerome@forissier.org", "time": "Fri Jan 17 17:45:16 2020 +0100" }, "message": "Update revision for release tag 3.8.0-rc1\n\nSigned-off-by: Jerome Forissier \u003cjerome@forissier.org\u003e\n" }, { "commit": "5b385b3f835df16fad1922cfbe6dbe112d2047b5", "tree": "854ab1447a0eedc7e6afff9c3ab506ea8b630257", "parents": [ "c2c877db0f5e24a3e7720ff71b320facce823999" ], "author": { "name": "Jerome Forissier", "email": "jerome@forissier.org", "time": "Mon Jan 06 17:03:47 2020 +0100" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Fri Jan 17 17:26:06 2020 +0100" }, "message": "core: crypto: add support for SM2 KEP\n\nAdds SM2 Key Exchange Protocol [1] using LibTomCrypt. The TA interface\ncomplies with the GlobalPlatform TEE Internal Core API version 1.2.\n\nSM2 KEP is enabled with CFG_CRYPTO_SM2_KEP\u003dy (default y) wich currently\nrequires that CFG_CRYPTOLIB_NAME\u003dtomcrypt. An Mbed TLS implementation\ncould be added later if needed.\n\n[1] http://www.gmbz.org.cn/main/postDetail.html?id\u003d20180724110812\n\nSigned-off-by: Jerome Forissier \u003cjerome@forissier.org\u003e\nAcked-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\n" }, { "commit": "c2c877db0f5e24a3e7720ff71b320facce823999", "tree": "df2b3d6f1a1805cd304cd2eafcc676f17a051b82", "parents": [ "eee2e03ba7d463a6cc20cd4d60cdd437fdb36507" ], "author": { "name": "Jerome Forissier", "email": "jerome@forissier.org", "time": "Wed Jan 15 16:46:11 2020 +0100" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Fri Jan 17 17:26:06 2020 +0100" }, "message": "core: ltc: add support for SM2 KEP\n\nAdds support for the SM3 Key Exchange Protocol [1] for use by\nOP-TEE core based on LibTomCrypt.\n\n[1] http://www.gmbz.org.cn/main/postDetail.html?id\u003d20180724110812\n\nSigned-off-by: Jerome Forissier \u003cjerome@forissier.org\u003e\nAcked-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\n" }, { "commit": "eee2e03ba7d463a6cc20cd4d60cdd437fdb36507", "tree": "afbfa184f62477d63db840eb3ec0991809eeb33d", "parents": [ "72d11d95d44fd079dd4dce7b98d8422feb8c1804" ], "author": { "name": "Jerome Forissier", "email": "jerome@forissier.org", "time": "Tue Jan 14 11:35:18 2020 +0100" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Fri Jan 17 17:26:06 2020 +0100" }, "message": "core: ltc: SM2 PKE: export sm2_kdf()\n\nThe Key Derivation Function used by the SM2 Public Key Encryption\nalgorithm is also used by the Key Exchange Protocol. Move it to its\nfile in order to be able to re-use it.\n\nSigned-off-by: Jerome Forissier \u003cjerome@forissier.org\u003e\nAcked-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\n" }, { "commit": "72d11d95d44fd079dd4dce7b98d8422feb8c1804", "tree": "ee7c20c87507e2ae69c15985f29ce8cad303644c", "parents": [ "7ecec8946f78ea064a9314527d83153cdfa31025" ], "author": { "name": "Jerome Forissier", "email": "jerome@forissier.org", "time": "Tue Jan 14 13:32:19 2020 +0100" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Fri Jan 17 17:26:06 2020 +0100" }, "message": "core: ltc: SM2 DSA: fix configuration variable name\n\nThe name of the config variable indicating support for SM2 DSA is\n_CFG_CORE_LTC_SM2_DSA, not _CFG_CORE_LTC_SM2_DSA_SM3.\n\nFixes: 76c7ba4b9ff7 (\"core: ltc: add support for SM2 DSA\")\nSigned-off-by: Jerome Forissier \u003cjerome@forissier.org\u003e\nAcked-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\n" }, { "commit": "7ecec8946f78ea064a9314527d83153cdfa31025", "tree": "67440a4dda693f7811d06fae77145f7b7780557f", "parents": [ "8cda2ac42aaaf0328b00347a6b08759458a4fc20" ], "author": { "name": "Jerome Forissier", "email": "jerome@forissier.org", "time": "Tue Jan 14 17:27:27 2020 +0100" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Fri Jan 17 17:26:06 2020 +0100" }, "message": "core: ltc: ecc_populate_ltc_private_key(): copy public part\n\nA private key alone is not always useful; the public part of the\nkey is often needed. Adjust ecc_populate_ltc_private_key() accordingly.\n\nSigned-off-by: Jerome Forissier \u003cjerome@forissier.org\u003e\nAcked-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\n" }, { "commit": "8cda2ac42aaaf0328b00347a6b08759458a4fc20", "tree": "1a87b2af5169b7f411b8f01013cb92ef9d8bddf4", "parents": [ "a72295ea7645c65f0f030d344b4ba5f4171adbe6" ], "author": { "name": "Jerome Forissier", "email": "jerome@forissier.org", "time": "Thu Jan 16 22:29:52 2020 +0100" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Fri Jan 17 15:16:37 2020 +0100" }, "message": "core: ltc: SM2 DSA: fix bignum conversions\n\nAll integers used in the SM2 algorithms are encoded as 32 byte buffers\nin big endian format. The current code does not properly pad the buffer\nwith zeros when a value does not need the whole 32 bytes. Fix that.\n\nFixes: 76c7ba4b9ff7 (\"core: ltc: add support for SM2 DSA\")\nSigned-off-by: Jerome Forissier \u003cjerome@forissier.org\u003e\nAcked-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\n" }, { "commit": "a72295ea7645c65f0f030d344b4ba5f4171adbe6", "tree": "99c3a43e2163752a35720069765a233f8690db61", "parents": [ "463acb4d50929fc3d3c803c7de8a55c07694c951" ], "author": { "name": "Jerome Forissier", "email": "jerome@forissier.org", "time": "Thu Jan 16 22:29:52 2020 +0100" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Fri Jan 17 15:16:37 2020 +0100" }, "message": "core: ltc: SM2 PKE: fix bignum conversions\n\nAll integers used in the SM2 algorithms are encoded as 32 byte buffers\nin big endian format. The current code does not properly pad the buffer\nwith zeros when a value does not need the whole 32 bytes and has a few\nother related issues. Fix that.\n\nFixes: f9a78287dd12 (\"core: ltc: add support for SM2 PKE\")\nSigned-off-by: Jerome Forissier \u003cjerome@forissier.org\u003e\nAcked-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\n" }, { "commit": "463acb4d50929fc3d3c803c7de8a55c07694c951", "tree": "4b557a6168e0764fbd68211e5e5e351f93bfd707", "parents": [ "e9c0b5d76918acd90e51e44d9d1b67dbfdb77419" ], "author": { "name": "Jerome Forissier", "email": "jerome@forissier.org", "time": "Fri Jan 17 10:05:37 2020 +0100" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Fri Jan 17 15:16:37 2020 +0100" }, "message": "core: ltc: acipher_helpers.h: add macro mp_to_unsigned_bin2()\n\nWriting a bignum to a fixed size integer buffer in big endian order is\nslightly cumbersome, because one has to take into account the actual\nsize of the bignum in order to have the zero padding on the left.\nLet\u0027s say I am working with 256-bit numbers:\n\n unsigned char buf[32] \u003d { };\n void *n \u003d compute_some_bignum(...);\n\n mp_to_unsigned_bin(n, buf + sizeof(buf) - mp_unsigned_bin_size(n));\n\nThis commit introduces mp_to_unsigned_bin2() which can be used like so:\n\n unsigned char buf[32] \u003d { };\n void *n \u003d compute_some_bignum(...);\n\n mp_to_unsigned_bin2(n, buf, sizeof(buf));\n\nSigned-off-by: Jerome Forissier \u003cjerome@forissier.org\u003e\nAcked-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\n" }, { "commit": "e9c0b5d76918acd90e51e44d9d1b67dbfdb77419", "tree": "d1c0df1347889703412c23c6eda0781249459d66", "parents": [ "ba8c25ac259aec163cb63da1bbfe19128a0ae724" ], "author": { "name": "Jens Wiklander", "email": "jens.wiklander@linaro.org", "time": "Thu Jan 16 15:13:22 2020 +0100" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Fri Jan 17 12:21:29 2020 +0100" }, "message": "core: generic_entry_a{32,64}.S: use correct cached_mem_end\n\nStores the correct register at cached_mem_end at boot. This avoids usage\nof stale dcache content.\n\nFixes: 5dd1570ac5b0 (\"core: add embedded data region\")\nReviewed-by: Jerome Forissier \u003cjerome@forissier.org\u003e\nSigned-off-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\n" }, { "commit": "ba8c25ac259aec163cb63da1bbfe19128a0ae724", "tree": "1cd33d144a52a24bc28340f75bc6a66babcf8062", "parents": [ "4518cdc1ff64614942239f40568baa603fb1d101" ], "author": { "name": "Andrew F. Davis", "email": "afd@ti.com", "time": "Mon Jan 13 17:18:10 2020 -0600" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Thu Jan 16 17:10:06 2020 +0100" }, "message": "core: generic_entry_a64.S: use CIVAC over IVAC to clean cache data\n\nAfter moving some initial sections around in memory we clean out the new\ndata and invalidate the cache so it can be seen by other cores when they\nenable caches. The instruction used was invalidate; on most systems this\nwill behave the same as clean/invalidate, but on some with L3 caches this\ncan cause the just written data to be invalidated. Use the\nclean+invalidate to prevent this on such systems.\n\nSigned-off-by: Andrew F. Davis \u003cafd@ti.com\u003e\nReviewed-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\n" }, { "commit": "4518cdc1ff64614942239f40568baa603fb1d101", "tree": "56c65eb00caa332ea6d69de498cc4dbcfba03f21", "parents": [ "67283c2753f42e049c32c116d34666adf9d9e3fd" ], "author": { "name": "Jens Wiklander", "email": "jens.wiklander@linaro.org", "time": "Tue Jan 14 19:41:55 2020 +0100" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Thu Jan 16 12:49:10 2020 +0100" }, "message": "core: arm64: introduce CFG_CORE_ARM64_PA_BITS\n\nIntroduces CFG_CORE_ARM64_PA_BITS which replaces the max_pa global\nvariable which was used to configure TCR_EL1.IPS.\n\nPrior to 520860f (\"core: generic_entry: add enable_mmu()\") TCR_EL1.IPS\nwas calculated and even updated later in the boot flow to automatically\ncover the needed physical address space. But now it\u0027s calculated before\nMMU is enabled and once MMU it\u0027s kept in read only memory.\n\nWith CFG_CORE_ARM64_PA_BITS TCR_EL1.IPS can be determined early and\nlater it is enough to check that physical addresses to be mapped are\ncovered by CFG_CORE_ARM64_PA_BITS.\n\nFixes: 520860f658be (\"core: generic_entry: add enable_mmu()\")\nAcked-by: Jerome Forissier \u003cjerome@forissier.org\u003e\nSigned-off-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\n" }, { "commit": "67283c2753f42e049c32c116d34666adf9d9e3fd", "tree": "a26ac2e1c18c9a3464a69293f3cc81b670ca3d74", "parents": [ "1c832d7c41cdb2f617bffa74c3d70f7c4a5667fc" ], "author": { "name": "Jens Wiklander", "email": "jens.wiklander@linaro.org", "time": "Tue Jan 14 14:31:50 2020 +0100" }, "committer": { "name": "Jerome Forissier", "email": "jerome@forissier.org", "time": "Tue Jan 14 19:25:40 2020 +0100" }, "message": "core: make SMALL_PAGE_MASK and friends of type paddr_t\n\nMakes SMALL_PAGE_MASK, CORE_MMU_PGDIR_MASK, CORE_MMU_USER_CODE_MASK and\nCORE_MMU_USER_PARAM_MASK of type paddr_t to allow correct masking of\nsignificant bits.\n\nExample:\n\textern paddr_t addr;\n\tpaddr_t page_addr \u003d addr \u0026 ~SMALL_PAGE_MASK\n\nIf paddr_t is a 64-bit type SMALL_PAGE_MASK must also be 64-bit wide or\nthe ~ operation will not set all the higher bits.\n\nSigned-off-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\nReviewed-by: Jerome Forissier \u003cjerome@forissier.org\u003e\n" }, { "commit": "1c832d7c41cdb2f617bffa74c3d70f7c4a5667fc", "tree": "92e98d264d164cad022cf9598f0c9a9ca151eacf", "parents": [ "8e08d8e1a901493a290be76adc452f7abd597854" ], "author": { "name": "davidwang", "email": "davidwang@realtek.com", "time": "Tue Dec 17 10:45:15 2019 +0800" }, "committer": { "name": "Jerome Forissier", "email": "jerome@forissier.org", "time": "Fri Jan 10 18:15:30 2020 +0100" }, "message": "core: support shared irq\n\nWith some platforms would have multiplexed interrupts\nand software implement difference interrupt handler.\nCurrently the interrupt mechanism only handle the first\nmatched handler, and can not support shared irq.\n\nNew change to keep find another matched handler if the\nprevious handler return none.\n\nReviewed-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\nSigned-off-by: davidwang \u003cdavidwang@realtek.com\u003e\n" }, { "commit": "8e08d8e1a901493a290be76adc452f7abd597854", "tree": "58d4942dfb99be41f0082b317acb1275b6785591", "parents": [ "0b38353cb066899d09b926b7c87e29cecfc83f1c" ], "author": { "name": "Joakim Bech", "email": "joakim.bech@linaro.org", "time": "Thu Jan 09 09:12:58 2020 +0100" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Thu Jan 09 14:03:42 2020 +0100" }, "message": "GitHub: use GitHub actions to close stale issues and PRs\n\nIt\u0027s not uncommon that people ask questions or send pull requests that\nbecomes stale for various reasons. Some examples can be:\n - Original Poster (OP) doesn\u0027t close the ticket.\n - OP doesn\u0027t get back when maintainers asked for more information.\n - OP gets busy with other things and have to put the work a side.\n\nHaving lots of open issues and pull request makes it almost impossible\nto figure out where help and input is needed, since things simply\nbecomes overwhelming. By using GitHub actions [1] we enable a tool that\ncan:\n - Automatically close issues that no one cares about.\n - Help us bring attention back to issues that are of importance.\n - Push patch creators to not drop their proposed patches.\n - Remind maintainers and other OP-TEE users that reviews are needed.\n\nThis patch set propose actions that will warn after 30 days of no\nactivity, together with that warning the GitHub bot will add a \"stale\"\nlabel. If that label isn\u0027t removed within 5 days, then the GitHub bot\nwill close the issue or pull request.\n\nPeople who are admins in the OP-TEE project can remove the label by\nthemselves, other people have to add a comment telling that their issue\nis still relevant and that they would like to have the stale label\nremoved.\n\nWhen we first enable this, hundreds of issues and pull requests will be\naffected, but after a first round the list of open issues and pull\nrequest should be much smaller and should only contain things that are\nor relevance to continue working with.\n\nLink: [1] https://help.github.com/en/actions/automating-your-workflow-with-github-actions/about-github-actions\n\nSigned-off-by: Joakim Bech \u003cjoakim.bech@linaro.org\u003e\nAcked-by: Jerome Forissier \u003cjerome@forissier.org\u003e\nAcked-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\n" }, { "commit": "0b38353cb066899d09b926b7c87e29cecfc83f1c", "tree": "0b254ce2c8d8bcfca78d260033ff185a86999f1a", "parents": [ "80d47d0aba0f7810a1c56caa0cf86a280d8b9d0b" ], "author": { "name": "Jerome Forissier", "email": "jerome@forissier.org", "time": "Thu Jan 09 10:43:42 2020 +0100" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Thu Jan 09 13:49:59 2020 +0100" }, "message": "core: ltc: SM2 DSA: fix bignum memory leaks\n\ncrypto_acipher_sm2_dsa_sign() and crypto_acipher_sm2_dsa_verify() leak\nsome bignum memory due to missing calls to ecc_free().\nThis is all the more problematic that bignum allocations use a special\nmemory pool [1] that can easily cause deadlocks when misused.\n\nThis commit adds the missing calls.\n\n[1] Commit a2eb5b55d169 (\"libutils: add mempool API\")\n\nFixes: 76c7ba4b9ff7 (\"core: ltc: add support for SM2 DSA\")\nSigned-off-by: Jerome Forissier \u003cjerome@forissier.org\u003e\nReviewed-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\n" }, { "commit": "80d47d0aba0f7810a1c56caa0cf86a280d8b9d0b", "tree": "6f1c3c823aab96b98122a68936adcd163b31f7f4", "parents": [ "17d4286fd991ce36d91d98943bf0059b577c9599" ], "author": { "name": "Jerome Forissier", "email": "jerome@forissier.org", "time": "Thu Jan 09 10:43:42 2020 +0100" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Thu Jan 09 13:49:59 2020 +0100" }, "message": "core: ltc: SM2 PKE: fix bignum memory leaks\n\ncrypto_acipher_sm2_pke_encrypt() and crypto_acipher_sm2_pke_decrypt()\nleak some bignum memory due to missing calls to ecc_free() and also due\nto the fact that the x and y fields of an ecc_point are overwritten.\nThis is all the more problematic that bignum allocations use a special\nmemory pool [1] that can easily cause deadlocks when misused.\n\nThis commit fixes these problems.\n\n[1] Commit a2eb5b55d169 (\"libutils: add mempool API\")\n\nFixes: f9a78287dd12 (\"core: ltc: add support for SM2 PKE\")\nSigned-off-by: Jerome Forissier \u003cjerome@forissier.org\u003e\nReviewed-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\n" }, { "commit": "17d4286fd991ce36d91d98943bf0059b577c9599", "tree": "ad8c7ef19671ce0858064c226dfa4bcc20508db5", "parents": [ "0f1519439f5bff0608f4a24baaaed108a0d0be5c" ], "author": { "name": "Jerome Forissier", "email": "jerome@forissier.org", "time": "Thu Jan 09 10:39:00 2020 +0100" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Thu Jan 09 13:49:59 2020 +0100" }, "message": "core: ltc: SM2 PKE: add missing return status check\n\nThe status of function ltc_ecc_is_point_at_infinity() is not checked in\ncrypto_acipher_sm2_pke_encrypt(). Fix that.\n\nFixes: f9a78287dd12 (\"core: ltc: add support for SM2 PKE\")\nSigned-off-by: Jerome Forissier \u003cjerome@forissier.org\u003e\nReviewed-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\n" }, { "commit": "0f1519439f5bff0608f4a24baaaed108a0d0be5c", "tree": "88fa84c7bef3d4986e7b80c522c303a629e26634", "parents": [ "76c7ba4b9ff76dc053e34ad9f9c790a6c59febf5" ], "author": { "name": "Jerome Forissier", "email": "jerome@forissier.org", "time": "Tue Dec 17 09:19:56 2019 +0100" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Thu Jan 09 09:17:39 2020 +0100" }, "message": "core: crypto add support for SM2 DSA\n\nAdds SM2 Digital Signature Algorithm [1] using LibTomCrypt. The TA\ninterface complies with the GlobalPlatform TEE Internal Core API\nversion 1.2.\n\nSM2 DSA is enabled with CFG_CRYPTO_SM2_DSA\u003dy (default y) which currently\nrequires that CFG_CRYPTOLIB_NAME\u003dtomcrypt. An Mbed TLS implementation\ncould be added later if needed.\n\n[1] http://www.gmbz.org.cn/main/postDetail.html?id\u003d20180724110812\n\nSigned-off-by: Jerome Forissier \u003cjerome@forissier.org\u003e\nAcked-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\n" }, { "commit": "76c7ba4b9ff76dc053e34ad9f9c790a6c59febf5", "tree": "8b3bb7ff2c005b4273405e03502c38879df6542f", "parents": [ "c0c57c8fa58346f3b0837a02c313e447c91b74c9" ], "author": { "name": "Jerome Forissier", "email": "jerome@forissier.org", "time": "Mon Jan 06 09:29:25 2020 +0100" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Thu Jan 09 09:17:39 2020 +0100" }, "message": "core: ltc: add support for SM2 DSA\n\nAdds support for the SM2 Digital Signature Algorithm [1] for use by\nOP-TEE core based on LibTomCrypt.\n\n[1] http://www.gmbz.org.cn/main/postDetail.html?id\u003d20180724110812\n\nSigned-off-by: Jerome Forissier \u003cjerome@forissier.org\u003e\nAcked-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\n" }, { "commit": "c0c57c8fa58346f3b0837a02c313e447c91b74c9", "tree": "2540d14b935424dc5c41f6f956c29c16e43f7c00", "parents": [ "824b34c04a9451983460de00a4f112c025eea311" ], "author": { "name": "Jerome Forissier", "email": "jerome@forissier.org", "time": "Wed Jan 08 14:57:32 2020 +0100" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Wed Jan 08 17:10:29 2020 +0100" }, "message": "symbolize.py: fix stack dump of TEE core with pager\n\nCommit 105e09c24479 (\"symbolize.py: add support for TEE core ASLR\") has\nintroduced support for ASLR by using addresses relative to the .text\nsection. To this end, the \u0027-j.text\u0027 option is passed to addr2line.\nUnfortunately, it happens that addr2line does not like to be given\naddresses that are outside the specified section. This can happen when\nCFG_WITH_PAGER\u003dy as shown in the following example:\n\n D/TC:4 0 TEE load address @ 0x3f000000\n D/TC:4 0 Call stack:\n D/TC:4 0 0x000000003f0080ac read_pc at optee_os/core/arch/arm/include/arm64.h:237\n D/TC:4 0 0x000000003f062984 ?? ??:0\n D/TC:4 0 0x000000003f007be4 wq_wait_final at optee_os/core/arch/arm/kernel/wait_queue.c:88\n D/TC:4 0 0x000000003f007698 __mutex_lock at optee_os/core/arch/arm/kernel/mutex.c:57\n D/TC:4 0 0x000000003f06c204 ?? ??:0\n D/TC:4 0 0x000000003f067160 ?? ??:0\n D/TC:4 0 0x000000003f06221c ?? ??:0\n D/TC:4 0 0x000000003f006298 thread_std_smc_entry at optee_os/core/arch/arm/kernel/thread_optee_smc_a64.S:162\n\nThe addresses that cannot be resolved happen to be inside section\n.text_pageable, not .text (excerpt from readelf -e tee.elf):\n\n [Nr] Name Type Address Offset\n [ 1] .text PROGBITS 000000003f000000 00010000\n [11] .text_pageable PROGBITS 000000003f05f388 0006f388\n\nThis commit choses a different approch. Instead of using relative\naddresses, we keep absolute ones but correct them with the load address\nin the ELF file:\n\n corrected address \u003d supplied address - runtime start address\n + link time load address\n\nFixes: 105e09c24479 (\"symbolize.py: add support for TEE core ASLR\")\nSigned-off-by: Jerome Forissier \u003cjerome@forissier.org\u003e\nAcked-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\n" }, { "commit": "824b34c04a9451983460de00a4f112c025eea311", "tree": "ee3461549dc7cf4af4c208f099827e5629c68a54", "parents": [ "0b2486d66e984473fb100d615ea6ad3106b34daa" ], "author": { "name": "Jerome Forissier", "email": "jerome@forissier.org", "time": "Wed Jan 08 08:53:03 2020 +0100" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Wed Jan 08 12:45:40 2020 +0100" }, "message": "MAINTAINERS: update Aijun Sun\u0027s email address\n\nSpreadtrum has become Unisoc. Update Aijun\u0027s email accordingly.\n\nSigned-off-by: Jerome Forissier \u003cjerome@forissier.org\u003e\nAcked-by: Aijun Sun \u003caijun.sun@unisoc.com\u003e\nAcked-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\n" }, { "commit": "0b2486d66e984473fb100d615ea6ad3106b34daa", "tree": "edab884400e2aff8cdb2f1e4339cd200c1b03d0f", "parents": [ "91fc6bd89309eebdfbe3d7203a046958b8c5a3eb" ], "author": { "name": "Jerome Forissier", "email": "jerome@forissier.org", "time": "Wed Jan 08 08:49:18 2020 +0100" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Wed Jan 08 12:45:40 2020 +0100" }, "message": "MAINTAINERS: update my email address\n\nMy @linaro.org address has been invalid for some time now.\n\nSigned-off-by: Jerome Forissier \u003cjerome@forissier.org\u003e\nAcked-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\n" }, { "commit": "91fc6bd89309eebdfbe3d7203a046958b8c5a3eb", "tree": "9a216c84c284809895210d04bc2b3bba7768a338", "parents": [ "f9a78287dd1217877e079f0c3cc83f6181a51dc7" ], "author": { "name": "Jerome Forissier", "email": "jerome@forissier.org", "time": "Tue Dec 17 09:19:56 2019 +0100" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Tue Jan 07 14:14:36 2020 +0100" }, "message": "core: crypto: add support for SM2 PKE\n\nAdds SM2 Public Key Encryption [1] using LibTomCrypt. The TA interface\ncomplies with the GlobalPlatform TEE Internal Core API version 1.2.\n\nSM2 is enabled with CFG_CRYPTO_SM2_PKE\u003dy (default y) which currently\nrequires that CFG_CRYPTOLIB_NAME\u003dtomcrypt. An Mbed TLS implementation\ncould be added later if needed.\n\n[1] http://www.gmbz.org.cn/main/postDetail.html?id\u003d20180724110812\n\nSigned-off-by: Jerome Forissier \u003cjerome@forissier.org\u003e\nAcked-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\n" }, { "commit": "f9a78287dd1217877e079f0c3cc83f6181a51dc7", "tree": "403bac7eab399feab8af86028ca3b8f1e02505bb", "parents": [ "c0691130969b2629f6a772dd9543244e6c92a57b" ], "author": { "name": "Jerome Forissier", "email": "jerome@forissier.org", "time": "Tue Dec 17 09:19:56 2019 +0100" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Tue Jan 07 14:14:36 2020 +0100" }, "message": "core: ltc: add support for SM2 PKE\n\nSM2 is a set of public key cryptographic algorithms based on elliptic\ncurves published by the Chinese Commercial Cryptography Administration\nOffice [1]. The standard has three main parts which define:\n\n - A Digital Signature Algorithm (part 2)\n - A Key Exchange Protocol (part 3)\n - A Public Key Encryption method (part 4)\n\nThis commit implements the PKE LibTomcrypt for use by the OP-TEE core.\nIt uses the LibTomCrypt ECC and arithmetic helper functions as well as\nthe OP-TEE hash interface for the SM3 algorithm.\n\nAs far as the ECC point encoding goes, only the uncompressed form is\nsupported, as permitted by the standard. In practice, it means that the\ncipher text always starts with the byte value 0x04. Other forms cannot\nbe decrypted by this implementation.\n\nSigned-off-by: Jerome Forissier \u003cjerome@forissier.org\u003e\nAcked-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\n" }, { "commit": "c0691130969b2629f6a772dd9543244e6c92a57b", "tree": "3e10b772e1a170a81853a44705f438d490364d29", "parents": [ "d8ab8de74af5d07426d0f2da7edbeda1193875ff" ], "author": { "name": "Jerome Forissier", "email": "jerome@forissier.org", "time": "Sat Jan 04 15:52:18 2020 +0100" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Tue Jan 07 14:14:36 2020 +0100" }, "message": "core: ltc: export ECC key helper functions\n\nThe static functions ecc_populate_ltc_private_key() and\necc_populate_ltc_public_key() will be useful for other ECC algorithms\nthan the ones currently handled by core/lib/libtomcrypt/ecc.c, namely:\nthe SM2 family of algorithms. Therefore, export these functions in\n\"acipher_helpers.h\".\n\nSigned-off-by: Jerome Forissier \u003cjerome@forissier.org\u003e\nAcked-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\n" }, { "commit": "d8ab8de74af5d07426d0f2da7edbeda1193875ff", "tree": "eea6721a02af0af9baafe6a3c8c2505d7cd8f3b7", "parents": [ "43be6453dd3e98d39721c8bc6725416772f4205c" ], "author": { "name": "Jerome Forissier", "email": "jerome@forissier.org", "time": "Fri Dec 20 17:46:18 2019 +0100" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Tue Jan 07 14:14:36 2020 +0100" }, "message": "core: ltc: add implementations for .addmod and .submod\n\nAdds the addmod() and submod() functions which are missing from the\nltc_mp descriptor. It is a bug, because crypto functions never check the\nfunctions pointers before using them.\n\nSigned-off-by: Jerome Forissier \u003cjerome@forissier.org\u003e\nReviewed-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\n" }, { "commit": "43be6453dd3e98d39721c8bc6725416772f4205c", "tree": "441fa9e415a3ff154919b5f092d8dc8c1518216a", "parents": [ "682f256caaf6addb665ec81b9f96a2b04d5c1010" ], "author": { "name": "Jerome Forissier", "email": "jerome@forissier.org", "time": "Wed Jan 01 16:35:58 2020 +0100" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Tue Jan 07 14:14:36 2020 +0100" }, "message": "core: ltc: add SM2 curve parameters\n\nAdds the recommended curve parameters for SM2 [1] [2].\n\n[1] http://www.gmbz.org.cn/main/postDetail.html?id\u003d20180724110812\n[2] https://tools.ietf.org/id/draft-ribose-openpgp-oscca-00.html\n\nSigned-off-by: Jerome Forissier \u003cjerome@forissier.org\u003e\n" }, { "commit": "682f256caaf6addb665ec81b9f96a2b04d5c1010", "tree": "d9d8e6d9007b475bd3aa12cf448ec04f98aee3c8", "parents": [ "183398139c9cffd3ff35536c70941a0961fac99f" ], "author": { "name": "Sumit Garg", "email": "sumit.garg@linaro.org", "time": "Tue Nov 26 17:51:06 2019 +0530" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Tue Jan 07 13:09:29 2020 +0100" }, "message": "TA dev kit: expose CFG_TA_VERSION build option\n\nAllow to configure version of a TA via CFG_TA_VERSION as TA compile\ntime option.\n\nSigned-off-by: Sumit Garg \u003csumit.garg@linaro.org\u003e\nReviewed-by: Jerome Forissier \u003cjerome@forissier.org\u003e\nReviewed-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\n" }, { "commit": "183398139c9cffd3ff35536c70941a0961fac99f", "tree": "068e532a08e4f656a9ffc4532515fdf0e2930dda", "parents": [ "abfd092aa19f9c0251e3d5551e2d68a9ebcfec8a" ], "author": { "name": "Sumit Garg", "email": "sumit.garg@linaro.org", "time": "Tue Nov 26 15:54:48 2019 +0530" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Tue Jan 07 13:09:29 2020 +0100" }, "message": "core: enable rollback protection for REE-FS TAs\n\nAdd check for TA version while loading TA from REE-FS and compare\nagainst secure storage based TA version database to prevent against\nany TA version downgrades.\n\nSigned-off-by: Sumit Garg \u003csumit.garg@linaro.org\u003e\nReviewed-by: Jerome Forissier \u003cjerome@forissier.org\u003e\nReviewed-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\n" }, { "commit": "abfd092aa19f9c0251e3d5551e2d68a9ebcfec8a", "tree": "df7f7110a9a72a08756a091f9ef8db755db87643", "parents": [ "ce50e716c5895e01795691d5c10c3ac736456d30" ], "author": { "name": "Anthony Steinhauser", "email": "asteinhauser@google.com", "time": "Mon Dec 23 07:15:22 2019 -0800" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Mon Jan 06 21:32:59 2020 +0100" }, "message": "core: arm64: fix speculative execution past ERET vulnerability\n\nEven though ERET always causes a jump to another address, aarch64 CPUs\nspeculatively execute following instructions as if the ERET\ninstruction was not a jump instruction.\nThe speculative execution does not cross privilege-levels (to the jump\ntarget as one would expect), but it continues on the kernel privilege\nlevel as if the ERET instruction did not change the control flow -\nthus execution anything that is accidentally linked after the ERET\ninstruction. Later, the results of this speculative execution are\nalways architecturally discarded, however they can leak data using\nmicroarchitectural side channels. This speculative execution is very\nreliable (seems to be unconditional) and it manages to complete even\nrelatively performance-heavy operations (e.g. multiple dependent\nfetches from uncached memory).\n\nIt was fixed by Linux [1], FreeBSD [2] and OpenBSD [3]. The misbehavior\nis demonstrated in [4] and [5].\n\nLink: [1] https://github.com/torvalds/linux/commit/679db70801da9fda91d26caf13bf5b5ccc74e8e8\nLink: [2] https://github.com/freebsd/freebsd/commit/29fb48ace4186a41c409fde52bcf4216e9e50b61\nLink: [3] https://github.com/openbsd/src/commit/3a08873ece1cb28ace89fd65e8f3c1375cc98de2\nLink: [4] https://github.com/google/safeside/blob/master/demos/eret_hvc_smc_wrapper.cc\nLink: [5] https://github.com/google/safeside/blob/master/kernel_modules/kmod_eret_hvc_smc/eret_hvc_smc_module.c\n\nSigned-off-by: Anthony Steinhauser \u003casteinhauser@google.com\u003e\nReviewed-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\n" }, { "commit": "ce50e716c5895e01795691d5c10c3ac736456d30", "tree": "37146523a10055a224ac54db57edeb28dbc550de", "parents": [ "bf7298044beca7a4501ece95c6146b5987cecaa4" ], "author": { "name": "Jerome Forissier", "email": "jerome@forissier.org", "time": "Sat Dec 28 19:14:36 2019 +0100" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Mon Dec 30 15:01:11 2019 +0100" }, "message": "ci: shippable: remove CCACHE_UNIFY\u003dtrue\n\nThe ccache unify mode does not increase cache hits in the Shippable\nbuild, contrary to what is claimed in commit a2a52e198719 (\"ci:\nshippable: enable ccache\u0027s \u0027unify\u0027 option\"). Disable this mode,\nbecause it is slower than the default mode [1] and might cause\ncorrupted builds [2].\n\nUnify mode was enabled in the above commit, but that commit also set\nCFG_DEBUG_INFO\u003dn. It was in fact this configuration flag that allowed\nbetter caching, by preventing -g3 from being added to the C flags.\nWith -g3, the preprocessor output contains all the macro definitions\n(such as the configuration variables from config.h). Without it (or\nwith -g), those defines are not visible after the preprocessing stage\nand therefore adding defines that do not change the actual code has no\nimpact and cached objects can be re-used.\n\n $ echo \u0027#define FOO 1\u0027 | gcc -x c -E - | grep \u0027#define FOO 1\u0027\n $ echo \u0027#define FOO 1\u0027 | gcc -x c -g3 -E - | grep \u0027#define FOO 1\u0027\n #define FOO 1\n\n [1] ccache(1) man page\n [2] .incbin directive bug: https://github.com/ccache/ccache/issues/497\n\nSigned-off-by: Jerome Forissier \u003cjerome@forissier.org\u003e\nAcked-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\n" }, { "commit": "bf7298044beca7a4501ece95c6146b5987cecaa4", "tree": "d3c4d8d98acd177ca704ae8e0c85a8c3e7fb52dc", "parents": [ "378e007d13d178be2001da93ea8844357b45eecf" ], "author": { "name": "Jens Wiklander", "email": "jens.wiklander@linaro.org", "time": "Tue Dec 03 17:19:33 2019 +0100" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Thu Dec 19 10:20:21 2019 +0100" }, "message": "core: add core_mmu_map_contiguous_pages()\n\nAdds core_mmu_map_contiguous_pages() which maps a range of physical\naddresses.\n\nReviewed-by: Jerome Forissier \u003cjerome@forissier.org\u003e\nSigned-off-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\n" }, { "commit": "378e007d13d178be2001da93ea8844357b45eecf", "tree": "9672aeb8a3523a8155b7d13d7f79a6e9b4b22a24", "parents": [ "76c49973f7f648a3c08b239087ee5810d6c7235d" ], "author": { "name": "Jens Wiklander", "email": "jens.wiklander@linaro.org", "time": "Tue Dec 03 19:27:02 2019 +0100" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Thu Dec 19 10:20:21 2019 +0100" }, "message": "stdint.h: add U() ULL() L() LL() macros\n\nAdds U() ULL() L() and LL() macros with a separate implementation for\nassembly. Brushes up {,U}INT{8,16,32,64}_C() macros to use the new\nprimitive macros instead.\n\nReviewed-by: Jerome Forissier \u003cjerome@forissier.org\u003e\nSigned-off-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\n" }, { "commit": "76c49973f7f648a3c08b239087ee5810d6c7235d", "tree": "5d36d4ff30aa22aa13595fd6075778b7f54346e0", "parents": [ "c891a67c01f6d5d6ed3a33ac5d0b496018b51801" ], "author": { "name": "Jens Wiklander", "email": "jens.wiklander@linaro.org", "time": "Thu Dec 12 14:56:43 2019 +0100" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Thu Dec 19 10:20:21 2019 +0100" }, "message": "core: rename to mobj_{inc,dec}_map()\n\nRenames mobj_reg_shm_inc_map() and mobj_reg_shm_dec_map() to\nmobj_inc_map() and mobj_dec_map() respectively. This makes room for\nother implementations of registered shared memory.\n\nReviewed-by: Jerome Forissier \u003cjerome@forissier.org\u003e\nSigned-off-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\n" }, { "commit": "c891a67c01f6d5d6ed3a33ac5d0b496018b51801", "tree": "689b183c9ab2fd7aee8da29740bc90073ce620f8", "parents": [ "989ac108b0efce902bd40a5a5678ec1fbb4a9663" ], "author": { "name": "Victor Chong", "email": "victor.chong@linaro.org", "time": "Thu Dec 19 01:34:04 2019 +0900" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Wed Dec 18 18:43:52 2019 +0100" }, "message": "core: crypto: sm3: remove unused header\n\nRemoved unused mbedtls/md.h header file to fix error:\n\n core/crypto/sm3-hmac.c:12:10: fatal error: mbedtls/md.h: No such file or directory\n\nwhen building with CFG_CORE_MBEDTLS_MPI\u003dn. To prevent future similar\nregression, also add a test case to Shippable.\n\nFixes: https://github.com/OP-TEE/optee_os/issues/3487\nFixes: 47645577c806 (\"core: crypto: add support for SM3\")\nSigned-off-by: Victor Chong \u003cvictor.chong@linaro.org\u003e\nReviewed-by: Jerome Forissier \u003cjerome@forissier.org\u003e\n" }, { "commit": "989ac108b0efce902bd40a5a5678ec1fbb4a9663", "tree": "f33d9a32d8ad2545bcaa20678ded10988acbaf04", "parents": [ "47645577c806e80b6477193eff5ebc7de710ddf2" ], "author": { "name": "Jerome Forissier", "email": "jerome@forissier.org", "time": "Wed Dec 18 14:56:26 2019 +0100" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Wed Dec 18 16:35:42 2019 +0100" }, "message": "mk/compile.mk: add cc-option macro\n\nAdds a macro to test the availability of a compiler option. For example:\n\n $(call cc-option,-opt1,-opt2)\n\n...will evaluate to \u0027-opt1\u0027 if the C compiler supports option -opt1, or\n\u0027-opt2\u0027 otherwise. The second argument (-opt2) is optional.\n\nSigned-off-by: Jerome Forissier \u003cjerome@forissier.org\u003e\nAcked-by: Etienne Carriere \u003cetienne.carriere@linaro.org\u003e\nAcked-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\n" }, { "commit": "47645577c806e80b6477193eff5ebc7de710ddf2", "tree": "41890e84b58c99866cc0170a3c3aae339c979073", "parents": [ "ade6f848e084d7c63f1e3866d7c059b8a9f9e834" ], "author": { "name": "Jerome Forissier", "email": "jerome@forissier.org", "time": "Fri Dec 13 10:11:11 2019 +0100" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Wed Dec 18 11:14:08 2019 +0100" }, "message": "core: crypto: add support for SM3\n\nAdds support for the SM3 cryptographic hash function [1] using the API\ndefined in the GlobalPlatform TEE Internal Core API v1.2, as well as the\nHMAC based on this hash.\n\nThis implementation is based on code published on Gitlab [2]. See commit\nade6f848e084 (\"core: crypto: add support for SM4\") for details.\n\n[1] https://tools.ietf.org/html/draft-sca-cfrg-sm3-02\n[2] https://gitlab.com/otpfree/sm234\n\nSigned-off-by: Jerome Forissier \u003cjerome@forissier.org\u003e\nReviewed-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\nAcked-by: Etienne Carriere \u003cetienne.carriere@linaro.org\u003e\n" }, { "commit": "ade6f848e084d7c63f1e3866d7c059b8a9f9e834", "tree": "c0c9a6fd077210699f762a824bce49e0c19814c2", "parents": [ "026e3556652dd5d70fda1304e4639dd8c1a38483" ], "author": { "name": "Jerome Forissier", "email": "jerome@forissier.org", "time": "Thu Dec 12 10:30:49 2019 +0100" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Tue Dec 17 19:39:59 2019 +0100" }, "message": "core: crypto: add support for SM4\n\nAdds support for the SM4 cipher [1] using the API defined in the\nGlobalPlatform TEE Internal Core API v1.2.\n\nECB, CBC and CTR modes are implemented. Other modes are valid but are\nnot included in the GP specification, so they are not considered here.\n\nThis implementation is based on code published on Gitlab [2]. The\nproject contains no licensing terms, so I contacted the author\n(goldboar@163.com), asking for permission to re-use the code in OP-TEE\nunder a BSD-2-Clause license. I received the following reply:\n\n \"[...] If you like you can use it [...]\"\n\nI have reworked the source to better fit the OP-TEE coding style. I\nhave also added the CTR mode of operation.\n\nI do not think we will need to merge any change from upstream in the\nfuture.\n\n[1] https://tools.ietf.org/html/draft-ribose-cfrg-sm4-10\n[2] https://gitlab.com/otpfree/sm234\n\nSigned-off-by: Jerome Forissier \u003cjerome@forissier.org\u003e\nReviewed-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\nAcked-by: Etienne Carriere \u003cetienne.carriere@linaro.org\u003e\n" }, { "commit": "026e3556652dd5d70fda1304e4639dd8c1a38483", "tree": "496a8af395b9bdf7a76cfc02b2d63f341c91913d", "parents": [ "3196a2d15c867f3d9331ab9cf1155523c30c58b6" ], "author": { "name": "Andrew F. Davis", "email": "afd@ti.com", "time": "Thu Oct 10 18:42:48 2019 -0400" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Tue Dec 17 18:11:29 2019 +0100" }, "message": "plat-ti: Switch to using SMCCC compatible calls\n\nPreviously on our TI evil vendor Linux tree we would use a sentinel value\nin r12 to signal if a call was meant for OP-TEE or the legacy ROM. A path\nto using SMCCC compatible calls from Linux is being implemented.\nSwitch the OP-TEE side over.\n\nSigned-off-by: Andrew F. Davis \u003cafd@ti.com\u003e\nAcked-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\n" }, { "commit": "3196a2d15c867f3d9331ab9cf1155523c30c58b6", "tree": "e03f6033cb64a501aec48cd97b89ac8de1b10143", "parents": [ "8108ed32754e34b327e5efe035a51144df4e96b2" ], "author": { "name": "Jens Wiklander", "email": "jens.wiklander@linaro.org", "time": "Tue Dec 17 10:04:55 2019 +0100" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Tue Dec 17 13:28:47 2019 +0100" }, "message": "scripts: add --input argument to tee_bin_parser.py\n\nAdds an optional --input argument to tee_bin_parser.py to select a\ndifferent file to parse than the default \"../out/arm/core/tee.bin\".\n\nReviewed-by: Jerome Forissier \u003cjerome@forissier.org\u003e\nSigned-off-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\n" }, { "commit": "8108ed32754e34b327e5efe035a51144df4e96b2", "tree": "25d46e41199de44c4d5e0200aaef5e58e2d77400", "parents": [ "87372da451d45c2c32964c6b5030bc16e56ebd8b" ], "author": { "name": "Jens Wiklander", "email": "jens.wiklander@linaro.org", "time": "Tue Dec 17 10:00:54 2019 +0100" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Tue Dec 17 13:28:47 2019 +0100" }, "message": "scripts: fix tee_bin_parser.py string formatting\n\nFixes string formatting errors like:\n File \"./scripts/tee_bin_parser.py\", line 24, in main\n print(\"Magic: \\t\\t0x{:08x}\".format(magic))\nTypeError: unsupported format string passed to tuple.__format__\n\nAcked-by: Jerome Forissier \u003cjerome@forissier.org\u003e\nSigned-off-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\n" }, { "commit": "87372da451d45c2c32964c6b5030bc16e56ebd8b", "tree": "b98f0ad8b2016da7c5d3f2a4e6845e401ec3f3ed", "parents": [ "5502aad4020d10545f7a3a7df9fab3af25e10aff" ], "author": { "name": "Jens Wiklander", "email": "jens.wiklander@linaro.org", "time": "Fri Nov 22 14:02:00 2019 +0100" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Tue Dec 17 13:23:46 2019 +0100" }, "message": "Enable ASLR by default\n\nWith this patch both CFG_TA_ASLR and CFG_CORE_ASLR are set to \u0027y\u0027 by\ndefault.\n\nRemoves CFG_TA_ASLR?\u003dy for plat-hikey and plat-vexpress (qemu_virt).\n\nIf the current platform doesn\u0027t use CFG_DT\u003dy and hasn\u0027t overridden\nget_aslr_seed() a warning message will be printed on the secure uart and\nexecution will resume with the default load address.\n\nReviewed-by: Jerome Forissier \u003cjerome@forissier.org\u003e\nSigned-off-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\n" }, { "commit": "5502aad4020d10545f7a3a7df9fab3af25e10aff", "tree": "8022834b1aaf44d913898217a9797019051fdbfa", "parents": [ "e996d189d39922c24ed8b2b46c502ac94b5ea713" ], "author": { "name": "Jens Wiklander", "email": "jens.wiklander@linaro.org", "time": "Mon Nov 25 10:17:25 2019 +0100" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Tue Dec 17 13:23:46 2019 +0100" }, "message": "core: link.mk: Make sure to link without relro\n\nPasses -z norelro to linker to make sure that the relro option isn\u0027t\nenabled. With relro enabled all relro sections has to be contiguous\nwith each other. This would prevent us from removing .dynamic from the\nbinary created with scripts/gen_tee_bin.py. Regardless of the relro\noption OP-TEE itself uses the equivalent of relro when mapping its\nmemory.\n\nReviewed-by: Jerome Forissier \u003cjerome@forissier.org\u003e\nSigned-off-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\n" }, { "commit": "e996d189d39922c24ed8b2b46c502ac94b5ea713", "tree": "927a24d9d22ce3821051dbb957d62d2a43977598", "parents": [ "9438dbdb59dc3bbf4fb58e0e1c00989abb7713bc" ], "author": { "name": "Jens Wiklander", "email": "jens.wiklander@linaro.org", "time": "Fri Nov 22 14:01:59 2019 +0100" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Tue Dec 17 13:23:46 2019 +0100" }, "message": "core: support ASLR and paging\n\nAdds support for CFG_WITH_PAGER\u003dy and CFG_CORE_ASLR\u003dy.\n\nAcked-by: Jerome Forissier \u003cjerome@forissier.org\u003e\nSigned-off-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\n" }, { "commit": "9438dbdb59dc3bbf4fb58e0e1c00989abb7713bc", "tree": "e8aa8a945683d73df06077b0417700525b16daf5", "parents": [ "83471b2965f943348064e153c31573282cd753fc" ], "author": { "name": "Jens Wiklander", "email": "jens.wiklander@linaro.org", "time": "Wed Dec 04 11:25:01 2019 +0100" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Tue Dec 17 13:23:46 2019 +0100" }, "message": "core: fix tee_pager_release_one_phys() assert\n\nPrior to this patch it was assumed in tee_pager_release_one_phys() that\na locked fobj would not span multiple page directories. This is not\ncorrect since it depends on the base address and size of the locked\nfobj. If the base address is close to the end of a page directory it can\nvery well happen. With CFG_CORE_ASLR\u003dy this is bound to happen sooner or\nlater even if everything seems to work with CFG_CORE_ASLR\u003dn. This patch\nfixes this by instead counting the number of areas which uses the pmem\nto be released. The number should be exactly one.\n\nAcked-by: Jerome Forissier \u003cjerome@forissier.org\u003e\nSigned-off-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\n" }, { "commit": "83471b2965f943348064e153c31573282cd753fc", "tree": "98d4924047c1f0b8de50f92afb85e09b30d96949", "parents": [ "ff207c8dcf1499963d322cb97040b37429f9498d" ], "author": { "name": "Jens Wiklander", "email": "jens.wiklander@linaro.org", "time": "Fri Nov 22 14:01:58 2019 +0100" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Tue Dec 17 13:23:46 2019 +0100" }, "message": "core: fix pager vaspace start in assign_mem_va()\n\nMakes sure that MEM_AREA_PAGER_VASPACE follows directly after the static\nmappings of the OP-TEE ELF. This fixes the case where OP-TEE is mapped\nat higher addresses and thus tries to locate everything else at lower\naddresses. Without a fixed address for MEM_AREA_PAGER_VASPACE the\nreserved pager vaspace could end up at the wrong address.\n\nFixes: 5dd1570ac5b0 (\"core: add embedded data region\")\nAcked-by: Jerome Forissier \u003cjerome@forissier.org\u003e\nSigned-off-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\n" }, { "commit": "ff207c8dcf1499963d322cb97040b37429f9498d", "tree": "8e3f70e21443329dffa8299ad67dc1899e35a9e6", "parents": [ "c6744caa509bbd697ebf70b8d6e0b2e557b30864" ], "author": { "name": "Jens Wiklander", "email": "jens.wiklander@linaro.org", "time": "Fri Nov 22 14:01:57 2019 +0100" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Tue Dec 17 13:23:46 2019 +0100" }, "message": "core: pager: allocate pager_tables dynamically\n\nWith ASLR the number of pager_tables needed can differ from the number\nof pager_tables needed in an non-relocated configuration. Depending on\nthe value of VCORE_START_VA the range VCORE_START_VA..+TEE_RAM_VA_SIZE\nmay cover an extra table compared to VCORE_START_VA being aligned to the\nstart of a table. To avoid multiple configurations always calculate the\nnumber of tables needed and allocate pager_tables accordingly.\n\nReviewed-by: Jerome Forissier \u003cjerome@forissier.org\u003e\nSigned-off-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\n" }, { "commit": "c6744caa509bbd697ebf70b8d6e0b2e557b30864", "tree": "8f1da3187502aff489ea8bfda82b2649680c8ed1", "parents": [ "15ba8c1f4c9e41016104425e94dad2eedf2b38fd" ], "author": { "name": "Jens Wiklander", "email": "jens.wiklander@linaro.org", "time": "Fri Nov 22 14:01:49 2019 +0100" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Tue Dec 17 13:23:46 2019 +0100" }, "message": "core: add fobj_ro_reloc_paged_alloc()\n\nAdds a new type of fobj, struct fobj_ro_reloc_paged, which is created\nwith fobj_ro_reloc_paged_alloc(). It\u0027s like struct fobj_rop but with\nsupport for relocation too.\n\nAcked-by: Jerome Forissier \u003cjerome@forissier.org\u003e\nSigned-off-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\n" }, { "commit": "15ba8c1f4c9e41016104425e94dad2eedf2b38fd", "tree": "133e4271b9fcd0d670638e45b2f5834b758b5c6f", "parents": [ "7d2b71d6d30ffe2fdf05a81db7a698232ea34724" ], "author": { "name": "Jens Wiklander", "email": "jens.wiklander@linaro.org", "time": "Fri Nov 15 09:14:50 2019 +0100" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Mon Dec 16 09:36:08 2019 +0100" }, "message": "core: move VFP state into struct user_ta_ctx\n\nMoves the VFP state from struct user_ta_ctx to struct user_mode_ctx to make\nuser mode handling a bit more generic.\n\nAcked-by: Pipat Methavanitpong \u003cpipat.methavanitpong@linaro.org\u003e\nReviewed-by: Jerome Forissier \u003cjerome@forissier.org\u003e\nSigned-off-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\n" }, { "commit": "7d2b71d6d30ffe2fdf05a81db7a698232ea34724", "tree": "eaf7d7d5f66bcade0a9fd6395d5a7b11fa06f3e1", "parents": [ "79f22013907e23053ba22e8c70cda8de08b376b3" ], "author": { "name": "Jens Wiklander", "email": "jens.wiklander@linaro.org", "time": "Fri Nov 08 15:41:46 2019 +0100" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Mon Dec 16 09:36:08 2019 +0100" }, "message": "core: vm_set_prot() and friends works across VM regions\n\nUpdates vm_set_prot() and friends to work on memory ranges which doesn\u0027t\nnecessarily align with the underlying VM regions. VM regions are split\nas needed to perform the operations, with operations completed VM\nregions in the supplied memory range are merged if possible. The only\nrestriction on a supplied memory range is that the already present\nmapping is compatible with the change.\n\nNote that this also affect pager which also splits and merges pager\nareas as needed.\n\nAcked-by: Pipat Methavanitpong \u003cpipat.methavanitpong@linaro.org\u003e\nSigned-off-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\n" }, { "commit": "79f22013907e23053ba22e8c70cda8de08b376b3", "tree": "5418c3b54295087761935a42e082f78febf0e6e4", "parents": [ "7c732ee481c684dbc9cfb923e417b61148729372" ], "author": { "name": "Jens Wiklander", "email": "jens.wiklander@linaro.org", "time": "Wed Nov 13 09:55:30 2019 +0100" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Mon Dec 16 09:36:08 2019 +0100" }, "message": "core: system_pta: refuse changing kernel mappings\n\nAdds checks in system_unmap(), system_set_prot() and system_remap() to\nrefuse making changes to kernel mappings.\n\nAcked-by: Pipat Methavanitpong \u003cpipat.methavanitpong@linaro.org\u003e\nReviewed-by: Jerome Forissier \u003cjerome@forissier.org\u003e\nSigned-off-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\n" }, { "commit": "7c732ee481c684dbc9cfb923e417b61148729372", "tree": "b79d627aff0d9f6f6ced58a0ee2576c082ca11cb", "parents": [ "5343f09f458fa133e44ff22ca12d932aa4e7bc4c" ], "author": { "name": "Jens Wiklander", "email": "jens.wiklander@linaro.org", "time": "Mon Oct 07 21:53:55 2019 +0200" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Mon Dec 16 09:36:08 2019 +0100" }, "message": "core: get svc handler from the context of current session\n\nInstead of a single global syscalls definition, get the syscall handler\nfunction from the context of current active session.\n\nAn extra optional (mandatory for user mode TAs) function pointer is\nadded to struct tee_ta_ops, handle_svc, which handles the syscall.\n\ntee_svc_handler() is split into a generic thread_svc_handler() which is\nput in kernel/thread.c. The user TA specific part is put in\nuser_ta_handle_svc() which is kept in tee/arch_svc.c but made available\nvia the new .handle_svc function pointer of struct tee_ta_ops.\n\nAcked-by: Pipat Methavanitpong \u003cpipat.methavanitpong@linaro.org\u003e\nSigned-off-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\n" }, { "commit": "5343f09f458fa133e44ff22ca12d932aa4e7bc4c", "tree": "71fde748ac8b86e1b3d9f10e03c3fa939e068cbe", "parents": [ "2ccaf1af56235710bacef2e7c0bdee40307d5199" ], "author": { "name": "Jens Wiklander", "email": "jens.wiklander@linaro.org", "time": "Mon Oct 07 12:41:21 2019 +0200" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Mon Dec 16 09:36:08 2019 +0100" }, "message": "core: add common user_mode_ctx_print_mappings()\n\nAdds a common user_mode_ctx_print_mappings() which prints the current\nuser mode mappings.\n\nAcked-by: Pipat Methavanitpong \u003cpipat.methavanitpong@linaro.org\u003e\nReviewed-by: Jerome Forissier \u003cjerome@forissier.org\u003e\nSigned-off-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\n" }, { "commit": "2ccaf1af56235710bacef2e7c0bdee40307d5199", "tree": "605e92d9aa153f802ed1c7d92e02a1b8bf76c8f2", "parents": [ "1936dfc78d0689c0bc81e1c216bb0dd4775aa280" ], "author": { "name": "Jens Wiklander", "email": "jens.wiklander@linaro.org", "time": "Wed Sep 18 17:28:15 2019 +0200" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Mon Dec 16 09:36:08 2019 +0100" }, "message": "core: move struct thread_ctx_regs to thread.h\n\nMoves definition of struct thread_ctx_regs from thread_private.h to\n\u003ckernel/thread.h\u003e.\n\nAcked-by: Pipat Methavanitpong \u003cpipat.methavanitpong@linaro.org\u003e\nReviewed-by: Jerome Forissier \u003cjerome@forissier.org\u003e\nSigned-off-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\n" }, { "commit": "1936dfc78d0689c0bc81e1c216bb0dd4775aa280", "tree": "4b567992387e3d49796daecbc4cb469be9313d9b", "parents": [ "e94702a440c196c10c0a59927dcfde3427cab23b" ], "author": { "name": "Jens Wiklander", "email": "jens.wiklander@linaro.org", "time": "Mon Oct 07 23:50:07 2019 +0200" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Mon Dec 16 09:36:08 2019 +0100" }, "message": "core: add struct user_mode_ctx\n\nAdds struct user_mode_ctx which replaces user mode specific fields used\nfor memory mapping.\n\nAcked-by: Pipat Methavanitpong \u003cpipat.methavanitpong@linaro.org\u003e\nAcked-by: Jerome Forissier \u003cjerome@forissier.org\u003e\nSigned-off-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\n" }, { "commit": "e94702a440c196c10c0a59927dcfde3427cab23b", "tree": "d324efe157c0b473c5d677d0ca8bc07a257d1fdc", "parents": [ "c2c16e8742eddfdcd68fbcc9fdc497bf6c70f3b9" ], "author": { "name": "Jens Wiklander", "email": "jens.wiklander@linaro.org", "time": "Wed Sep 18 11:05:47 2019 +0200" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Mon Dec 16 09:36:08 2019 +0100" }, "message": "core: thread_enter_user_mode(): avoid leaking register content\n\nPrior to this patch not all registers passed to user mode where assigned\na new value. This allows user mode to see the value of some registers\nused by Core. With this patch all general purpose registers available in\nuser mode are either cleared or assigned a value.\n\nAcked-by: Pipat Methavanitpong \u003cpipat.methavanitpong@linaro.org\u003e\nAcked-by: Jerome Forissier \u003cjerome@forissier.org\u003e\nSigned-off-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\n" }, { "commit": "c2c16e8742eddfdcd68fbcc9fdc497bf6c70f3b9", "tree": "9f7fe54124432048af1ba99ee45b0bc7590deeb6", "parents": [ "ead7c47d483d0935333ea3e0512a051afef0019e" ], "author": { "name": "Andrew F. Davis", "email": "afd@ti.com", "time": "Mon Dec 09 15:06:07 2019 -0500" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Thu Dec 12 18:08:59 2019 +0100" }, "message": "core: link.mk: Un-deprecate tee.bin v1 image generation\n\nThe v1 OP-TEE image \"tee.bin\" is used by a couple platforms as the only\nsupported image version, until these platforms can migrate continue\nto build this image and do not mark it a deprecated. The tee-pager.bin\nand tee-pageable.bin are not used by these platforms and are properly\ndeprecated by the v2 versions, leave these images deprecated.\n\nSigned-off-by: Andrew F. Davis \u003cafd@ti.com\u003e\nReviewed-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\n" }, { "commit": "ead7c47d483d0935333ea3e0512a051afef0019e", "tree": "c7a7f4d7020888c94afb7903bee3c2ed0a5663c0", "parents": [ "d034099e36b590891336f08ac78a7f03e557dd21" ], "author": { "name": "Andrew F. Davis", "email": "afd@ti.com", "time": "Mon Dec 09 17:08:26 2019 -0500" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Thu Dec 12 16:36:50 2019 +0100" }, "message": "plat-ti: Restore non-secure entry address from saved copy in r5\n\nWhen resuming the only value we need to work with a new version of is the\nnon-secure context as it will have changed since boot. This value is\nstored on OP-TEE entry in r5, previously we saved this value by moving\nr5 to r3 then r3 to r4 basically just dodging getting overwritten by\nfunctions we call. This can be simplified now as nothing clobbers r5,\nso we can use it directly as the source for the non-secure context\npointer feed into init_sec_mon().\n\nSigned-off-by: Andrew F. Davis \u003cafd@ti.com\u003e\nAcked-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\nAcked-by: Jerome Forissier \u003cjerome@forissier.org\u003e\n" }, { "commit": "d034099e36b590891336f08ac78a7f03e557dd21", "tree": "86d0ef6407d8cf792cc81a55d27a363d4cfef62d", "parents": [ "55c1b9479857869599b19f3442c5130f6d14e6ae" ], "author": { "name": "Jens Wiklander", "email": "jens.wiklander@linaro.org", "time": "Wed Dec 11 10:07:35 2019 +0100" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Wed Dec 11 15:47:13 2019 +0100" }, "message": "shippable: generate deprecated v1 images\n\nModifies two targets to also generate the deprecated v1 images.\n\nAcked-by: Jerome Forissier \u003cjerome@forissier.org\u003e\nSigned-off-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\n" }, { "commit": "55c1b9479857869599b19f3442c5130f6d14e6ae", "tree": "c6fcbe8d63c43e5cc9ff2883a0dd710d21a6fdb0", "parents": [ "8538799525b71ebac428e28c3997b4facf47eed6" ], "author": { "name": "Jens Wiklander", "email": "jens.wiklander@linaro.org", "time": "Tue Dec 10 10:17:00 2019 +0100" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Tue Dec 10 18:18:20 2019 +0100" }, "message": "core: fix generation of tee.bin\n\nPrior to this patch generation of tee.bin (CFG_WITH_PAGER\u003dn) fails with:\n GEN out/core/tee.bin\nCannot find symbol __init_end\ncore/arch/arm/kernel/link.mk:183: recipe for target \u0027out/core/tee.bin\u0027 failed\n\nIntroduce a special __get_tee_init_end to fix this and also avoid\nconfusion with __init_end used in the code for the pager case.\n\nFixes: 5dd1570ac5b0 (\"core: add embedded data region\")\nAcked-by: Jerome Forissier \u003cjerome@forissier.org\u003e\nSigned-off-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\n" }, { "commit": "8538799525b71ebac428e28c3997b4facf47eed6", "tree": "431c45f52e959df4f6f5a25174638e2eda26755e", "parents": [ "bc6f3bf2503251dd734289e0a429c9f7fe4aef83" ], "author": { "name": "Clement Faure", "email": "clement.faure@nxp.com", "time": "Mon Dec 09 15:45:36 2019 +0100" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Tue Dec 10 12:50:30 2019 +0100" }, "message": "core: imx: fix CFG_DRAM_BASE for imx8qm/qxp\n\nThe CFG_DRAM_BASE on imx8qm and imx8qxp is 0x80000000\n\nSigned-off-by: Clement Faure \u003cclement.faure@nxp.com\u003e\nAcked-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\n" }, { "commit": "bc6f3bf2503251dd734289e0a429c9f7fe4aef83", "tree": "cf52e4125236d302405394abb07642855fc09ef2", "parents": [ "2e42d8e79e5dfa78d221a08ef773685e8720bc0f" ], "author": { "name": "Jens Wiklander", "email": "jens.wiklander@linaro.org", "time": "Wed Nov 20 09:25:18 2019 +0100" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Thu Dec 05 14:12:45 2019 +0100" }, "message": "core: remove unreachable code from tee_tadb_ta_open()\n\nPrior to this patch tee_tadb_ta_open() had some unreachable code. With\nthis patch remove that code, but retain the behaviour of\ntee_tadb_ta_open().\n\nReviewed-by: Jerome Forissier \u003cjerome@forissier.org\u003e\nSigned-off-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\n" }, { "commit": "2e42d8e79e5dfa78d221a08ef773685e8720bc0f", "tree": "e0265ebe0e5c9aed40d6480547e3908dcbe16267", "parents": [ "b19db423a235b7125a92835be3a9ba0e0c9ec3ac" ], "author": { "name": "Jens Wiklander", "email": "jens.wiklander@linaro.org", "time": "Tue Nov 19 16:20:34 2019 +0100" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Thu Dec 05 14:12:45 2019 +0100" }, "message": "core: add description of struct tadb_entry\n\nAdds description of the fields in struct tadb_entry.\n\nReviewed-by: Jerome Forissier \u003cjerome@forissier.org\u003e\nSigned-off-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\n" }, { "commit": "b19db423a235b7125a92835be3a9ba0e0c9ec3ac", "tree": "8973a8ba8698454bc6f2b0c515cc9fe1f5ed9454", "parents": [ "479c49dd9247118109448e5be0883f08e80c5f46" ], "author": { "name": "Jens Wiklander", "email": "jens.wiklander@linaro.org", "time": "Mon Nov 18 14:51:29 2019 +0100" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Thu Dec 05 14:12:45 2019 +0100" }, "message": "core: add description of struct shdr_bootstrap_ta\n\nAdds a description of the fields in struct shdr_bootstrap_ta.\n\nReviewed-by: Jerome Forissier \u003cjerome@forissier.org\u003e\nSigned-off-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\n" }, { "commit": "479c49dd9247118109448e5be0883f08e80c5f46", "tree": "21ad4707b71ce0bb69305ce7670cabad34ab6005", "parents": [ "9579e400903d1ecb181671a4bc497f36fe365d3b" ], "author": { "name": "Jerome Forissier", "email": "jerome@forissier.org", "time": "Fri Nov 29 12:01:34 2019 +0000" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Fri Nov 29 16:46:20 2019 +0000" }, "message": "mem_usage.py: stop parsing file when _end_of_ram is reached\n\nSince commit 5966660c02b3 (\"core: move relocation to embedded data\nregion\"), when ASLR is enabled, some sections are stored at the end of\ntee.elf for use by gen_tee_bin.py which then discards them. As a\nresult, they are not present in the final binary and should not be\nreported by the memory usage script.\n\nBy ignoring any section past the _end_of_ram symbol, we avoid reporting\nthose discarded sections as well as a hole before them.\n\n Before:\n\n $ make -s CFG_CORE_ASLR\u003dy\n $ scripts/mem_usage.py out/arm-plat-vexpress/core/tee.elf\n RAM Usage 0E100000 - 0E301E04 size 00201E04 2056 KiB 514 pages\n .text 0E100000 - 0E12FA68 size 0002FA68 190 KiB\n *hole* 0E12FA68 - 0E130000 size 00000598 1 KiB\n .rodata 0E130000 - 0E140598 size 00010598 65 KiB\n .gnu.hash 0E140598 - 0E1405B0 size 00000018 0 KiB\n .got 0E1405B0 - 0E1406F8 size 00000148 0 KiB\n .ARM.exidx 0E1406F8 - 0E142B78 size 00002480 9 KiB\n .ARM.extab 0E142B78 - 0E143274 size 000006FC 1 KiB\n *hole* 0E143274 - 0E144000 size 00000D8C 3 KiB\n .data 0E144000 - 0E145410 size 00001410 5 KiB\n .bss 0E145410 - 0E1509A8 size 0000B598 45 KiB\n .heap1 0E1509A8 - 0E164000 size 00013658 77 KiB\n .nozi 0E164000 - 0E176B80 size 00012B80 74 KiB\n *hole* 0E176B80 - 0E300000 size 00189480 1573 KiB\n .dynamic 0E300000 - 0E300098 size 00000098 0 KiB\n .hash 0E300098 - 0E3000B0 size 00000018 0 KiB\n .dynsym 0E3000B0 - 0E3000E0 size 00000030 0 KiB\n .dynstr 0E3000E0 - 0E3000E1 size 00000001 0 KiB\n *hole* 0E3000E1 - 0E3000E4 size 00000003 0 KiB\n .rel 0E3000E4 - 0E301E04 size 00001D20 7 KiB\n\n After:\n\n $ make -s CFG_CORE_ASLR\u003dy\n $ scripts/mem_usage.py out/arm-plat-vexpress/core/tee.elf\n RAM Usage 0E100000 - 0E176B80 size 00076B80 475 KiB 119 pages\n .text 0E100000 - 0E12FA68 size 0002FA68 190 KiB\n *hole* 0E12FA68 - 0E130000 size 00000598 1 KiB\n .rodata 0E130000 - 0E140598 size 00010598 65 KiB\n .gnu.hash 0E140598 - 0E1405B0 size 00000018 0 KiB\n .got 0E1405B0 - 0E1406F8 size 00000148 0 KiB\n .ARM.exidx 0E1406F8 - 0E142B78 size 00002480 9 KiB\n .ARM.extab 0E142B78 - 0E143274 size 000006FC 1 KiB\n *hole* 0E143274 - 0E144000 size 00000D8C 3 KiB\n .data 0E144000 - 0E145410 size 00001410 5 KiB\n .bss 0E145410 - 0E1509A8 size 0000B598 45 KiB\n .heap1 0E1509A8 - 0E164000 size 00013658 77 KiB\n .nozi 0E164000 - 0E176B80 size 00012B80 74 KiB\n\nSigned-off-by: Jerome Forissier \u003cjerome@forissier.org\u003e\nReviewed-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\n" }, { "commit": "9579e400903d1ecb181671a4bc497f36fe365d3b", "tree": "5e45ae2dc69cc9fddef6dc003f9c06047e7041b6", "parents": [ "ababd72d2fd76cb2ded8e202b49db28d6545f6eb" ], "author": { "name": "Jens Wiklander", "email": "jens.wiklander@linaro.org", "time": "Tue Nov 26 11:15:48 2019 +0100" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Fri Nov 29 15:50:02 2019 +0000" }, "message": "scripts/sign_encrypt.py: remove pycrypto workaround\n\nRemoves workaround for a difference in how the size of a RSA key is\ndetermined in pycrypto compared to pycryptodome.\n\nReviewed-by: Jerome Forissier \u003cjerome@forissier.org\u003e\nSigned-off-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\n" }, { "commit": "ababd72d2fd76cb2ded8e202b49db28d6545f6eb", "tree": "df234304765c6cca43c9bbc90448a843b87b37ab", "parents": [ "2139aa8c314f8aeb3c87203abb88741844332f28" ], "author": { "name": "Jens Wiklander", "email": "jens.wiklander@linaro.org", "time": "Mon Nov 25 16:00:51 2019 +0100" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Fri Nov 29 15:50:02 2019 +0000" }, "message": "scripts/sign_encrypt.py: Sign TA using PSS\n\nSwitches from the algorithm TEE_ALG_RSASSA_PKCS1_V1_5_SHA256 to\nTEE_ALG_RSASSA_PKCS1_PSS_MGF1_SHA256 when signing TAs. Even though there\nare no known vulnerabilities in PCKS#1 RSASSA V1.5 at this date there\nhas been issues in the past (for instance Bleichenbacher).\n\nReviewed-by: Jerome Forissier \u003cjerome@forissier.org\u003e\nSigned-off-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\n" }, { "commit": "2139aa8c314f8aeb3c87203abb88741844332f28", "tree": "21ba291f56e90c0b490abf29c9ff34ad2241c947", "parents": [ "d77929ec2243b789b58b718d7cd50da87cd9cf97" ], "author": { "name": "Jens Wiklander", "email": "jens.wiklander@linaro.org", "time": "Mon Nov 25 16:04:42 2019 +0100" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Fri Nov 29 15:50:02 2019 +0000" }, "message": "core: shdr_verify_signature() supply hash length for salt length\n\nIn order to support the TEE_ALG_RSASSA_PKCS1_PSS_MGF1_* group of\nalgorithms supply the size of the hash as the size of the salt to\ncrypto_acipher_rsassa_verify().\n\nA salt is something introduced by PCKS1_PSS, PKCS1_V1.5 does not have a\nsalt and the parameter will be ignored by crypto_acipher_rsassa_verify()\nfor the latter.\n\nWith the PCKS1_PSS algorithm it is common practice to use a salt with\nthe same size as the hash, but it is not a requirement. The\nimplementation here depends on using a salt with the same size as the\nhash. This is a compromise to avoid extending the signed header with a\nsalt length field.\n\nReviewed-by: Jerome Forissier \u003cjerome@forissier.org\u003e\nSigned-off-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\n" }, { "commit": "d77929ec2243b789b58b718d7cd50da87cd9cf97", "tree": "71a761e05ba68d41b3a19329b5fd8b983837cbf4", "parents": [ "91068f86100f93b28677a043feef1d899c1eaf4e" ], "author": { "name": "Sumit Garg", "email": "sumit.garg@linaro.org", "time": "Wed Nov 27 21:01:27 2019 +0530" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Thu Nov 28 15:51:43 2019 +0000" }, "message": "core: ftrace: dump core load address to support ASLR\n\nAdditionally dump core address in ftrace buffer to support syscall\ntracing in case TEE core ASLR is enabled.\n\nSigned-off-by: Sumit Garg \u003csumit.garg@linaro.org\u003e\nReviewed-by: Jerome Forissier \u003cjerome@forissier.org\u003e\n[jf: s/Load address @/TEE load address @/]\nSigned-off-by: Jerome Forissier \u003cjerome@forissier.org\u003e\n" }, { "commit": "91068f86100f93b28677a043feef1d899c1eaf4e", "tree": "d2a77635b2f0c6072b1836ca4f878ad18156f0c0", "parents": [ "4f3fac24b53d747fd36632ee772ad9cf0d8a2ade" ], "author": { "name": "Jerome Forissier", "email": "jerome@forissier.org", "time": "Tue Nov 26 10:51:45 2019 +0100" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Thu Nov 28 15:51:43 2019 +0000" }, "message": "symbolize.py: fix decoding of ftrace dumps containing syscalls\n\nWhen decoding an ftrace file with syscall tracing enabled [1], the\nkernel functions are not resolved and show question marks instead.\n\n[1] $ make CFG_FTRACE_SUPPORT\u003dy CFG_SYSCALL_FTRACE\u003dy CFG_ULIBS_MCOUNT\u003dy \\\n CFLAGS_ta_arm32\u003d-pg\n [run test and copy content of /tmp/ftrace*]\n $ optee_os/scripts/symbolize.py -d optee_os/out/arm/core \\\n -d out-br/build/optee_test-1.0/ta/*/out\n [paste ftrace log here]\n\nFixes: 105e09c24479 (\"symbolize.py: add support for TEE core ASLR\")\nSigned-off-by: Jerome Forissier \u003cjerome@forissier.org\u003e\nAcked-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\nReviewed-by: Sumit Garg \u003csumit.garg@linaro.org\u003e\n" }, { "commit": "4f3fac24b53d747fd36632ee772ad9cf0d8a2ade", "tree": "a6afe4af75579ae41042fd5ebc04d5058878dad0", "parents": [ "e605fbdfd7a0a046e686222e857192bc97c070fd" ], "author": { "name": "Sheetal Tigadoli", "email": "sheetal.tigadoli@broadcom.com", "time": "Wed Nov 27 16:18:39 2019 +0530" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Wed Nov 27 14:40:39 2019 +0100" }, "message": "Update Broadcom DRAM2 base and size\n\nUpdate Broadcom DRAM2 base and size\nSigned-off-by: Sheetal Tigadoli \u003csheetal.tigadoli@broadcom.com\u003e\nAcked-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\n" }, { "commit": "e605fbdfd7a0a046e686222e857192bc97c070fd", "tree": "a3744dcbca2a7c64195a731cc71ee63d1dcae208", "parents": [ "15542a729763fbe326f0479e0263d9f57e6a3364" ], "author": { "name": "Sheetal Tigadoli", "email": "sheetal.tigadoli@broadcom.com", "time": "Fri Aug 02 10:01:38 2019 +0530" }, "committer": { "name": "Jerome Forissier", "email": "jerome@forissier.org", "time": "Mon Nov 25 14:59:05 2019 +0100" }, "message": "pta: bcm: Add PTA to handle Broadcom error logs\n\nAdd PTA to handle Broadcom error logs.\nThe PTA supports following ops:\n - Obtaining error logs\n - Obtaining crash dumps and\n - Loading firmware into secure ddr memory region\n\nSigned-off-by: Sheetal Tigadoli \u003csheetal.tigadoli@broadcom.com\u003e\nReviewed-by: Jerome Forissier \u003cjerome@forissier.org\u003e\n" }, { "commit": "15542a729763fbe326f0479e0263d9f57e6a3364", "tree": "4f9aded4f8130762da4a232c2b7d086cd07c28cd", "parents": [ "9246c1f6ff295755b4141032eb81e88476ab0ffd" ], "author": { "name": "Sheetal Tigadoli", "email": "sheetal.tigadoli@broadcom.com", "time": "Fri Nov 22 14:58:22 2019 +0530" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Mon Nov 25 14:53:16 2019 +0100" }, "message": "pta: bcm: Add Broadcom gpio PTA\n\nAdd Broadcom gpio PTA\nThe PTA supports below operations on the GPIO pin:\n - Configure gpio pin to input/output\n - Set value on output gpio pin\n - Get value from gpio pin\n\nSigned-off-by: Sheetal Tigadoli \u003csheetal.tigadoli@broadcom.com\u003e\nAcked-by: Jerome Forissier \u003cjerome@forissier.org\u003e\n" }, { "commit": "9246c1f6ff295755b4141032eb81e88476ab0ffd", "tree": "bb4bbc5b0059f7141362ebc748c748649e379538", "parents": [ "379d404d4ff179effd51cee5f5fd682aee9bc42d" ], "author": { "name": "Sheetal Tigadoli", "email": "sheetal.tigadoli@broadcom.com", "time": "Mon Nov 25 14:54:38 2019 +0530" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Mon Nov 25 14:53:16 2019 +0100" }, "message": "drivers: Add func to config gpio pin for secure access\n\nAdd func to config gpio pin for secure access\n\nSigned-off-by: Sheetal Tigadoli \u003csheetal.tigadoli@broadcom.com\u003e\nAcked-by: Jerome Forissier \u003cjerome@forissier.org\u003e\n" }, { "commit": "379d404d4ff179effd51cee5f5fd682aee9bc42d", "tree": "25902a79cb5a638c609052e417ee9e8cdbf99941", "parents": [ "2338a97153efe0007bd01237d8e485c2a70964ca" ], "author": { "name": "Sheetal Tigadoli", "email": "sheetal.tigadoli@broadcom.com", "time": "Fri Nov 22 14:51:42 2019 +0530" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Mon Nov 25 14:53:16 2019 +0100" }, "message": "drivers: Update Broadcom gpio base and num gpios\n\nUpdate Broadcom gpio base and num gpios\n\nSigned-off-by: Sheetal Tigadoli \u003csheetal.tigadoli@broadcom.com\u003e\nAcked-by: Jerome Forissier \u003cjerome@forissier.org\u003e\n" }, { "commit": "2338a97153efe0007bd01237d8e485c2a70964ca", "tree": "330795a8b1391ca04acb64f8a9b7d2177f3cecd7", "parents": [ "33017d856e8c30b4a0c550d636842409a0a3f6c2" ], "author": { "name": "Jerome Forissier", "email": "jerome@forissier.org", "time": "Fri Nov 22 17:29:24 2019 -0800" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Mon Nov 25 13:36:36 2019 +0100" }, "message": "scripts/gen_tee_bin.py: convert symbol and section name to strings\n\nOlder versions of pyelftools return symbol and section names as byte\narrays rather than plain strings. As a result, symbols are not found:\n\n $ make\n ...\n GEN out/arm/core/tee-header_v2.bin\n Cannot find symbol _start\n core/arch/arm/kernel/link.mk:191: recipe for target \u0027out/arm/core/tee-header_v2.bin\u0027 failed\n make[1]: *** [out/arm/core/tee-header_v2.bin] Error 1\n\n(This error was observed when building on Ubuntu 16.04.)\n\nSigned-off-by: Jerome Forissier \u003cjerome@forissier.org\u003e\nReviewed-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\n" }, { "commit": "33017d856e8c30b4a0c550d636842409a0a3f6c2", "tree": "85c3463a74d65fbcc78970aa2aca9bde7d631de4", "parents": [ "2de17fda55d2d902123e25b1036cd6ae00b7ea77" ], "author": { "name": "Jerome Forissier", "email": "jerome@forissier.org", "time": "Fri Nov 22 15:34:20 2019 +0100" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Fri Nov 22 17:18:53 2019 +0100" }, "message": "Remove script/llvm-objcopy-wrapper\n\nThe llvm-objcopy-wrapper script was introduced in commit 98d863a5c0b2\n(\"Experimental Clang support\") because llvm-objcopy would not support\nsome options needed to produce the final TEE binaries from tee.elf or\ncause errors when building them. However, since commit 1a9edabc0ed4\n(\"core: link.mk: use gen_tee_bin.py\"), objcopy is not used for this\npurpose anymore. Thus we can safely use llvm-objcopy.\n\nSigned-off-by: Jerome Forissier \u003cjerome@forissier.org\u003e\nReviewed-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\n" }, { "commit": "2de17fda55d2d902123e25b1036cd6ae00b7ea77", "tree": "824385e12558f8513928bdcc983af7b0d0222720", "parents": [ "e1afc43988aa7f8de9d0cab3ee77abf79cc5e3ee" ], "author": { "name": "Sumit Garg", "email": "sumit.garg@linaro.org", "time": "Wed Oct 23 12:47:24 2019 +0530" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Fri Nov 22 14:19:21 2019 +0100" }, "message": "TA dev kit: add support for TA encryption\n\nAdd CFG_ENCRYPT_TA as TA build time configuration option to enable\nencryption of TA using encryption key provided via TA_ENC_KEY build\ntime option. The default value of TA_ENC_KEY is derived from 16 zero\nbytes default hardware unique key.\n\nAlso rename scripts/sign.py to scripts/sign_encrypt.py to reflect\noptional encryption support along with signing of TAs.\n\nSigned-off-by: Sumit Garg \u003csumit.garg@linaro.org\u003e\nReviewed-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\n" }, { "commit": "e1afc43988aa7f8de9d0cab3ee77abf79cc5e3ee", "tree": "9c5d8b32142f79bee33374db0e029c2ec9f9df22", "parents": [ "c693a9d07dbf12c4fb01d8bc9b8d3338dadc67a9" ], "author": { "name": "Sumit Garg", "email": "sumit.garg@linaro.org", "time": "Mon Nov 18 18:32:03 2019 +0530" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Fri Nov 22 14:19:21 2019 +0100" }, "message": "core: add framework to load REE-FS encrypted TAs\n\nAdd framework to support loading of encrypted TAs from REE-FS using\nsymmetric authenticated encryption scheme supported by OP-TEE.\n\nThe default encryption key is derived from hardware unique key which\ncan be overridden via platform specific encryption key.\n\nSigned-off-by: Sumit Garg \u003csumit.garg@linaro.org\u003e\nReviewed-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\n" }, { "commit": "c693a9d07dbf12c4fb01d8bc9b8d3338dadc67a9", "tree": "693878123b1391ab8b9d0d86138e2d0620782992", "parents": [ "665fa2567a65c746a26ff700f8d7d537a54eecf9" ], "author": { "name": "Jens Wiklander", "email": "jens.wiklander@linaro.org", "time": "Wed Nov 20 19:57:00 2019 +0100" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Fri Nov 22 13:52:44 2019 +0100" }, "message": "core: arm32: bugfix booting second cpu with ASLR\n\nFixes crashing second cpu when booting with ASLR enabled.\n\nFixes: 170e9084a84f (\"core: add support for CFG_CORE_ASLR\")\nReviewed-by: Etienne Carriere \u003cetienne.carriere@linaro.org\u003e\nTested-by: Etienne Carriere \u003cetienne.carriere@linaro.org\u003e (b2260)\nSigned-off-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\n" }, { "commit": "665fa2567a65c746a26ff700f8d7d537a54eecf9", "tree": "232e01856f29361096f0c9987f6354f1d5388ca2", "parents": [ "f77987ae8c99f93a42f2085cf44c4a3116386b57" ], "author": { "name": "Jens Wiklander", "email": "jens.wiklander@linaro.org", "time": "Wed Nov 20 17:33:04 2019 +0100" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Fri Nov 22 13:52:44 2019 +0100" }, "message": "core: add plat_primary_init_early()\n\nAdds plat_primary_init_early() which replaces plat_cpu_reset_late().\nplat_cpu_reset_late() was called for each cpu, but\nplat_primary_init_early() is only called on the primary cpu.\n\nIn practice that\u0027s not a problem (except for plat-stm, more on that\nlater) since all the platform specific plat_cpu_reset_late() only does\nsomething if get_core_pos() returns 0, that is on the primary cpu.\n\nOn plat-stm SCR is now updated in plat_cpu_reset_early() instead.\n\nThis patch is needed because ASLR may relocate OP-TEE to a virtual base\naddress which differs from the physical base address. This means that\nit\u0027s not possible to execute C code before MMU has been enabled.\n\nReviewed-by: Etienne Carriere \u003cetienne.carriere@linaro.org\u003e\nSigned-off-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\n" }, { "commit": "f77987ae8c99f93a42f2085cf44c4a3116386b57", "tree": "2aa8634810a856d08a91c8dec271a77a7b7a01a1", "parents": [ "0df5cb304791982e610acb02f5a85cc7eca8deed" ], "author": { "name": "Jens Wiklander", "email": "jens.wiklander@linaro.org", "time": "Thu Nov 21 17:29:48 2019 +0100" }, "committer": { "name": "Jerome Forissier", "email": "jerome@forissier.org", "time": "Fri Nov 22 10:38:27 2019 +0100" }, "message": "core: fix gen_tee_bin.py to handle STB_LOCAL symbols\n\nPrior to this patch scripts/gen_tee_bin.py only looked for global\nsymbols (STB_GLOBAL). The linker in some older versions of the gcc\ntoolchain makes some of the symbols local (STB_LOCAL) instead. This\npatch fixes that by falling back to a local symbol in case a global\ncannot be found.\n\nReviewed-by: Jerome Forissier \u003cjerome@forissier.org\u003e\nReported-by: Victor Chong \u003cvictor.chong@linaro.org\u003e\nFixes: 3c51966baa03 (\"core: add scripts/gen_tee_bin.py for boot binaries\")\nSigned-off-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\n" }, { "commit": "0df5cb304791982e610acb02f5a85cc7eca8deed", "tree": "2a48c1dca8f5b2c88b2d99a44cbd4e62b81765ac", "parents": [ "549c2eb63a8b6eead10daeeed8a579fd8b607a03" ], "author": { "name": "Jerome Forissier", "email": "jerome@forissier.org", "time": "Thu Nov 21 15:10:25 2019 +0100" }, "committer": { "name": "Jérôme Forissier", "email": "jerome@forissier.org", "time": "Thu Nov 21 18:13:19 2019 +0100" }, "message": "core: remove unused user_ta_ctx::load_addr\n\nSince commit d1911a85142d (\"core: load TAs using ldelf\"), the load_addr\nfield in struct user_ta_ctx is not used anymore. Remove it.\n\nSigned-off-by: Jerome Forissier \u003cjerome@forissier.org\u003e\nReviewed-by: Jens Wiklander \u003cjens.wiklander@linaro.org\u003e\n" } ], "next": "549c2eb63a8b6eead10daeeed8a579fd8b607a03" }