brain-hackers_pepepper-mirror/u-boot-brain
1
0
Fork 0
mirror of https://github.com/brain-hackers/u-boot-brain synced 2024-07-07 19:56:18 +09:00
Code Issues Projects Releases Wiki Activity
b2ca8907d9
u-boot-brain/arch
History
Breno Matheus Lima b2ca8907d9 imx: hab: Convert non-NULL IVT DCD pointer warning to an error 
The following NXP application notes and manual recommend to ensure the
IVT DCD pointer is Null prior to calling HAB API authenticate_image()
function:

- AN12263: HABv4 RVT Guidelines and Recommendations
- AN4581: Secure Boot on i.MX50, i.MX53, i.MX 6 and i.MX7 Series using
  HABv4
- CST docs: High Assurance Boot Version 4 Application Programming
  Interface Reference Manual

Commit ca89df7dd4 ("imx: hab: Convert DCD non-NULL error to warning")
converted DCD non-NULL error to warning due to the lack of documentation
at the time of first patch submission. We have warned U-Boot users since
v2018.03, and it makes sense now to follow the NXP recommendation to
ensure the IVT DCD pointer is Null.

DCD commands should only be present in the initial boot image loaded by
the SoC ROM. Starting in HAB v4.3.7 the HAB code  will generate an error
if a DCD pointer is present in an image being authenticated by calling the
HAB RVT API. Older versions of HAB will process and run DCD if it is
present, and this could lead to an incorrect authentication boot flow.

Signed-off-by: Breno Lima <breno.lima@nxp.com>
Reviewed-by: Fabio Estevam <festevam@gmail.com>
2019-01-28 12:45:45 +01:00
..
arc Kconfig: Migrate BOUNCE_BUFFER 2019-01-19 09:49:26 -05:00
arm imx: hab: Convert non-NULL IVT DCD pointer warning to an error 2019-01-28 12:45:45 +01:00
m68k m68k: ColdFire mcf5441x, add eSDHC support 2018-09-16 00:01:13 +02:00
microblaze arch: types.h: factor out fixed width typedefs to int-ll64.h 2018-09-10 20:48:16 -04:00
mips MSCC: Add board support for Serval SoC family. 2019-01-23 18:28:09 +01:00
nds32 nds32: dts: Fix mmc node compatible string 2019-01-22 17:36:20 +08:00
nios2 .gitignore: move *.dtb and *.dtb.S patterns to the top-level .gitignore 2018-06-18 14:43:12 -04:00
powerpc mpc85xx: Add support for -msingle-pic-base 2019-01-23 10:48:48 -08:00
riscv riscv: qemu: define standalone load address 2019-01-15 09:36:31 +08:00
sandbox Fix recent changes to serial API for driver model 2019-01-15 22:05:34 -05:00
sh Kbuild: add LDFLAGS_STANDALONE 2018-11-18 16:02:23 +01:00
x86 x86: Kconfig: spelling fixes 2019-01-18 09:16:15 -05:00
xtensa xtensa: use asm-generic/atomic.h 2018-09-25 21:49:18 -04:00
.gitignore
Kconfig dm: sound: Create an option to use driver model for sound 2018-12-13 16:32:49 -07:00