core: sp: fix FFA_MEM_RECLAIM checks

Currently it is assumed that a NS endpoint's ID is always 0. This is not
true if multiple VMs are present in the NWd, so the check will fail when
reclaiming shar

core: sp: fix FFA_MEM_RECLAIM checks

Currently it is assumed that a NS endpoint's ID is always 0. This is not
true if multiple VMs are present in the NWd, so the check will fail when
reclaiming shared memory from an SP. Fix this by removing the owner ID
check if the reclaim call comes from NWd, in this case the necessary
checks are done by the hypervisor.

Acked-by: Jens Wiklander <jens.wiklander@linaro.org>
Signed-off-by: Balint Dobszay <balint.dobszay@arm.com>

show more ...

Squashed commit upgrading to mbedtls-3.4.0

Squash merging branch import/mbedtls-3.4.0

8225713449d3 ("libmbedtls: fix unrecognized compiler option")
f03730842d7b ("core: ltc: configure internal MD5"

Squashed commit upgrading to mbedtls-3.4.0

Squash merging branch import/mbedtls-3.4.0

8225713449d3 ("libmbedtls: fix unrecognized compiler option")
f03730842d7b ("core: ltc: configure internal MD5")
2b0d0c50127c ("core: ltc: configure internal SHA-1 and SHA-224")
0e48a6e17630 ("libmedtls: core: update to mbedTLS 3.4.0 API")
049882b143af ("libutee: update to mbedTLS 3.4.0 API")
982307bf6169 ("core: LTC mpi_desc.c: update to mbedTLS 3.4.0 API")
33218e9eff7b ("ta: pkcs11: update to mbedTLS 3.4.0 API")
6956420cc064 ("libmbedtls: fix cipher_wrap.c for NIST AES Key Wrap mode")
ad67ef0b43fd ("libmbedtls: fix cipher_wrap.c for chacha20 and chachapoly")
7300f4d97bbf ("libmbedtls: add fault mitigation in mbedtls_rsa_rsassa_pkcs1_v15_verify()")
cec89b62a86d ("libmbedtls: add fault mitigation in mbedtls_rsa_rsassa_pss_verify_ext()")
e7e048796c44 ("libmbedtls: add SM2 curve")
096beff2cd31 ("libmbedtls: mbedtls_mpi_exp_mod(): optimize mempool usage")
7108668efd3f ("libmbedtls: mbedtls_mpi_exp_mod(): reduce stack usage")
0ba4eb8d0572 ("libmbedtls: mbedtls_mpi_exp_mod() initialize W")
3fd6ecf00382 ("libmbedtls: fix no CRT issue")
d5ea7e9e9aa7 ("libmbedtls: add interfaces in mbedtls for context memory operation")
2b0fb3f1fa3d ("libmedtls: mpi_miller_rabin: increase count limit")
2c3301ab99bb ("libmbedtls: add mbedtls_mpi_init_mempool()")
9a111f0da04b ("libmbedtls: make mbedtls_mpi_mont*() available")
804fe3a374f5 ("mbedtls: configure mbedtls to reach for config")
b28a41531427 ("mbedtls: remove default include/mbedtls/config.h")
dfafe507bbef ("Import mbedtls-3.4.0")

Signed-off-by: Jens Wiklander <jens.wiklander@linaro.org>
Acked-by: Jerome Forissier <jerome.forissier@linaro.org>
Tested-by: Jerome Forissier <jerome.forissier@linaro.org> (vexpress-qemu_armv8a)

show more ...

core: optee_ffa.h: fix a spell error in ABI description

Fixes a spell error in the comment describing OPTEE_FFA_UNREGISTER_SHM ABI.

Signed-off-by: Jens Wiklander <jens.wiklander@linaro.org>
Acked-b

core: optee_ffa.h: fix a spell error in ABI description

Fixes a spell error in the comment describing OPTEE_FFA_UNREGISTER_SHM ABI.

Signed-off-by: Jens Wiklander <jens.wiklander@linaro.org>
Acked-by: Etienne Carriere <etienne.carriere@foss.st.com>

show more ...

core: ffa: return an error on unknown blocking calls

Until now we have panicked on unknown blocking calls. The caller can't
recover from that so return an error instead.

Signed-off-by: Jens Wikland

core: ffa: return an error on unknown blocking calls

Until now we have panicked on unknown blocking calls. The caller can't
recover from that so return an error instead.

Signed-off-by: Jens Wiklander <jens.wiklander@linaro.org>
Acked-by: Etienne Carriere <etienne.carriere@foss.st.com>

show more ...

core: ffa: fix race in mobj_put() and ffa_inactivate()

Prior to this patch there was a race condition when mobj_put()
is calling ffa_inactivate().
D/TC:0 0 ffa_inactivate:525 cookie 0x100000000000
D

core: ffa: fix race in mobj_put() and ffa_inactivate()

Prior to this patch there was a race condition when mobj_put()
is calling ffa_inactivate().
D/TC:0 0 ffa_inactivate:525 cookie 0x100000000000
D/TC:0 1 mobj_ffa_get_by_cookie:401 cookie 0x100000000000 active: refc 1
D/TC:? 1 read_console:114 got 0xd
D/TC:0 1 ffa_inactivate:525 cookie 0x100000000000
D/TC:0 0 ffa_inactivate:525 cookie 0x100000000000
E/TC:0 0 Panic at core/arch/arm/mm/mobj_ffa.c:527 <ffa_inactivate>
E/TC:0 0 TEE load address @ 0xe100000
E/TC:0 0 Call stack:
E/TC:0 0 0x0e108c0c print_kernel_stack at ??:?
E/TC:0 0 0x0e115b8c __do_panic at core/kernel/panic.c:24
E/TC:0 0 0x0e10a238 ffa_inactivate at mobj_ffa.c:?
E/TC:0 0 0x0e107318 __thread_std_smc_entry at ??:?

As now explained in ffa_inactivate():
/*
* pop_from_list() can fail to find the mobj if we had just
* decreased the refcount to 0 in mobj_put() and was going to
* acquire the shm_lock but another thread found this mobj and
* reinitialized the refcount to 1. Then before we got cpu time the
* other thread called mobj_put() and deactivated the mobj again.
* ...
*/

If our thread is delayed even further we may even inactivate an
unrelated mobj that happened to reuse the same piece of memory.

Fix this by adding another guarding condition so that the mobj is
guaranteed to be valid until ffa_inactivate() has returned. By adding a
new member in struct mobj_ffa, inactive_refs, we keep track of
references even when the mobj have been moved to the inactive list.

Adds a comment describing the non-trivial life cycle of struct mobj_ffa.

Signed-off-by: Jens Wiklander <jens.wiklander@linaro.org>
Acked-by: Etienne Carriere <etienne.carriere@foss.st.com>

show more ...

drivers: saic: remove stubbed functions

With the commit b2d6db21ec5e ("core: interrupt: helper function for
raise_pi, raise_sgi, set_affinity") the struct itr_ops .raise_pi,
.raise_sgi, and .set_aff

drivers: saic: remove stubbed functions

With the commit b2d6db21ec5e ("core: interrupt: helper function for
raise_pi, raise_sgi, set_affinity") the struct itr_ops .raise_pi,
.raise_sgi, and .set_affinity are now optional so remove the stubbed
functions.

Signed-off-by: Jens Wiklander <jens.wiklander@linaro.org>
Reviewed-by: Etienne Carriere <etienne.carriere@foss.st.com>

show more ...

drivers: hfic: remove stubbed functions

With the commit b2d6db21ec5e ("core: interrupt: helper function for
raise_pi, raise_sgi, set_affinity") the struct itr_ops .raise_pi,
.raise_sgi, and .set_aff

drivers: hfic: remove stubbed functions

With the commit b2d6db21ec5e ("core: interrupt: helper function for
raise_pi, raise_sgi, set_affinity") the struct itr_ops .raise_pi,
.raise_sgi, and .set_affinity are now optional so remove the stubbed
functions.

Signed-off-by: Jens Wiklander <jens.wiklander@linaro.org>
Reviewed-by: Etienne Carriere <etienne.carriere@foss.st.com>

show more ...

drivers: imx: mu: add support for mx8dxl

Add MU support for mx8dxl platforms.

Signed-off-by: Clement Faure <clement.faure@nxp.com>
Acked-by: Jerome Forissier <jerome.forissier@linaro.org>
Acked-by:

drivers: imx: mu: add support for mx8dxl

Add MU support for mx8dxl platforms.

Signed-off-by: Clement Faure <clement.faure@nxp.com>
Acked-by: Jerome Forissier <jerome.forissier@linaro.org>
Acked-by: Jens Wiklander <jens.wiklander@linaro.org>
Acked-by: Etienne Carriere <etienne.carriere@foss.st.com>

show more ...

drivers: caam: add support for mx8dxl

Add support for mx8dxl platforms.
The HAL support is identical to mx8qm/qxp platforms.

Signed-off-by: Clement Faure <clement.faure@nxp.com>
Acked-by: Jerome Fo

drivers: caam: add support for mx8dxl

Add support for mx8dxl platforms.
The HAL support is identical to mx8qm/qxp platforms.

Signed-off-by: Clement Faure <clement.faure@nxp.com>
Acked-by: Jerome Forissier <jerome.forissier@linaro.org>
Acked-by: Jens Wiklander <jens.wiklander@linaro.org>
Acked-by: Etienne Carriere <etienne.carriere@foss.st.com>

show more ...

core: imx: fix the DDR configuration of the mx8dxl

Add base address and size of the second DDR size.
Set the physical address size to 40 bits instead of 32 bits. This is
required for platforms with

core: imx: fix the DDR configuration of the mx8dxl

Add base address and size of the second DDR size.
Set the physical address size to 40 bits instead of 32 bits. This is
required for platforms with more and 4G of DDR.

Signed-off-by: Clement Faure <clement.faure@nxp.com>
Acked-by: Jerome Forissier <jerome.forissier@linaro.org>
Acked-by: Jens Wiklander <jens.wiklander@linaro.org>
Acked-by: Etienne Carriere <etienne.carriere@foss.st.com>

show more ...

core: imx: allow CAAM driver compilation on mx8dxl

Allow the compilation of the CAAM driver for mx8dxl platforms.

Signed-off-by: Clement Faure <clement.faure@nxp.com>
Acked-by: Jerome Forissier <je

core: imx: allow CAAM driver compilation on mx8dxl

Allow the compilation of the CAAM driver for mx8dxl platforms.

Signed-off-by: Clement Faure <clement.faure@nxp.com>
Acked-by: Jerome Forissier <jerome.forissier@linaro.org>
Acked-by: Jens Wiklander <jens.wiklander@linaro.org>
Acked-by: Etienne Carriere <etienne.carriere@foss.st.com>

show more ...

plat-stm32mp1: stm32mp1_pmic: register to DT_DRIVER

Initialize stm32mp1_pmic device driver from DT_DRIVER instead of
fixed initcall level. This change requires stm32_i2c bus driver
to also be probed

plat-stm32mp1: stm32mp1_pmic: register to DT_DRIVER

Initialize stm32mp1_pmic device driver from DT_DRIVER instead of
fixed initcall level. This change requires stm32_i2c bus driver
to also be probed from the DT_DRIVER framework.

Acked-by: Gatien Chevallier <gatien.chevallier@foss.st.com>
Acked-by: Thomas Bourgoin <thomas.bourgoin@foss.st.com>
Signed-off-by: Etienne Carriere <etienne.carriere@foss.st.com>

show more ...

plat-stm32mp1: stm32mp1_pmic: allocate I2C handle

Allocates I2C handle in stm32mp1_pmic driver. This changes prepares
at later change replacing initcall initialization for dt_driver probing
initiali

plat-stm32mp1: stm32mp1_pmic: allocate I2C handle

Allocates I2C handle in stm32mp1_pmic driver. This changes prepares
at later change replacing initcall initialization for dt_driver probing
initialization.

By the way, remove unused variables and reorder included header files.

Acked-by: Gatien Chevallier <gatien.chevallier@foss.st.com>
Acked-by: Thomas Bourgoin <thomas.bourgoin@foss.st.com>
Signed-off-by: Etienne Carriere <etienne.carriere@foss.st.com>

show more ...

plat-stm32mp1: stm32mp1_pmic: save DT status once for all

Saves PMIC DT node status during initialization. This changes prepares
at later change replacing initcall initialization for dt_driver probi

plat-stm32mp1: stm32mp1_pmic: save DT status once for all

Saves PMIC DT node status during initialization. This changes prepares
at later change replacing initcall initialization for dt_driver probing
initialization.

Acked-by: Gatien Chevallier <gatien.chevallier@foss.st.com>
Acked-by: Thomas Bourgoin <thomas.bourgoin@foss.st.com>
Signed-off-by: Etienne Carriere <etienne.carriere@foss.st.com>

show more ...

plat-stm32mp1: stm32mp1_pmic: remove unused stm32mp_dt_pmic_status()

Removes unused function stm32mp_dt_pmic_status().

Acked-by: Gatien Chevallier <gatien.chevallier@foss.st.com>
Acked-by: Thomas B

plat-stm32mp1: stm32mp1_pmic: remove unused stm32mp_dt_pmic_status()

Removes unused function stm32mp_dt_pmic_status().

Acked-by: Gatien Chevallier <gatien.chevallier@foss.st.com>
Acked-by: Thomas Bourgoin <thomas.bourgoin@foss.st.com>
Signed-off-by: Etienne Carriere <etienne.carriere@foss.st.com>

show more ...

plat-stm32mp1: conf: default enable CFG_DRIVERS_I2C

Default enable I2C bus framework on platform stm32mp1.

Acked-by: Gatien Chevallier <gatien.chevallier@foss.st.com>
Acked-by: Thomas Bourgoin <tho

plat-stm32mp1: conf: default enable CFG_DRIVERS_I2C

Default enable I2C bus framework on platform stm32mp1.

Acked-by: Gatien Chevallier <gatien.chevallier@foss.st.com>
Acked-by: Thomas Bourgoin <thomas.bourgoin@foss.st.com>
Signed-off-by: Etienne Carriere <etienne.carriere@foss.st.com>

show more ...

drivers: stm32_i2c: register a DT_DRIVER_I2C driver

Registers stm32_i2c driver as a DT_DRIVER_I2C driver.

Acked-by: Gatien Chevallier <gatien.chevallier@foss.st.com>
Acked-by: Thomas Bourgoin <thom

drivers: stm32_i2c: register a DT_DRIVER_I2C driver

Registers stm32_i2c driver as a DT_DRIVER_I2C driver.

Acked-by: Gatien Chevallier <gatien.chevallier@foss.st.com>
Acked-by: Thomas Bourgoin <thomas.bourgoin@foss.st.com>
Signed-off-by: Etienne Carriere <etienne.carriere@foss.st.com>

show more ...

plat-stm32mp1: shared_resources: simplify GPIOZ bank pin count

Changes initialization of GPIOZ bank pin count from the DT bank
node now using the GPIO bank driver probing to get and save the
informa

plat-stm32mp1: shared_resources: simplify GPIOZ bank pin count

Changes initialization of GPIOZ bank pin count from the DT bank
node now using the GPIO bank driver probing to get and save the
information rather than service_init() initcall level as prior
this change.

Acked-by: Gatien Chevallier <gatien.chevallier@foss.st.com>
Acked-by: Thomas Bourgoin <thomas.bourgoin@foss.st.com>
Signed-off-by: Etienne Carriere <etienne.carriere@foss.st.com>

show more ...

drivers: regulator: add regulator_dt_get_supply()

Implements regulator_dt_get_supply() API function for consumer
drivers to get a regulator supply using the driver device DT node
data. The function

drivers: regulator: add regulator_dt_get_supply()

Implements regulator_dt_get_supply() API function for consumer
drivers to get a regulator supply using the driver device DT node
data. The function returns TEE_ERROR_DEFER_DRIVER_INIT when the
target supply exists but is yet not initialized.

Acked-by: Gatien Chevallier <gatien.chevallier@foss.st.com>
Co-developed-by: Pascal Paillet <p.paillet@foss.st.com>
Signed-off-by: Pascal Paillet <p.paillet@foss.st.com>
Signed-off-by: Etienne Carriere <etienne.carriere@foss.st.com>

show more ...

drivers: regulator: fixed regulator

Implements fixed voltage level regulator driver to register DT
compatible "regulator-fixed" devices into the regulator framework.
These regulators may be enabled/

drivers: regulator: fixed regulator

Implements fixed voltage level regulator driver to register DT
compatible "regulator-fixed" devices into the regulator framework.
These regulators may be enabled/disabled using a GPIO pin in which
cases CFG_DRIVERS_GPIO shall be enabled.

Acked-by: Gatien Chevallier <gatien.chevallier@foss.st.com>
Acked-by: Thomas Bourgoin <thomas.bourgoin@foss.st.com>
Co-developed-by: Pascal Paillet <p.paillet@foss.st.com>
Signed-off-by: Pascal Paillet <p.paillet@foss.st.com>
Signed-off-by: Etienne Carriere <etienne.carriere@linaro.org>

show more ...

core: interrupt: helper function for raise_pi, raise_sgi, set_affinity

Defines helper API functions to call .raise_pi, .raise_sgi and
.set_affinity handlers of a chip controller. Defines API functio

core: interrupt: helper function for raise_pi, raise_sgi, set_affinity

Defines helper API functions to call .raise_pi, .raise_sgi and
.set_affinity handlers of a chip controller. Defines API function
to query support of these handlers in the interrupt controller.

Acked-by: Jerome Forissier <jerome.forissier@linaro.org>
Reviewed-by: Jens Wiklander <jens.wiklander@linaro.org>
Signed-off-by: Etienne Carriere <etienne.carriere@foss.st.com>

show more ...

core: interrupt: helper function interrupt_alloc_add_conf_handler()

Adds interrupt API function interrupt_alloc_add_conf_handler() to
allocate, configure and register an interrupt handler, providing

core: interrupt: helper function interrupt_alloc_add_conf_handler()

Adds interrupt API function interrupt_alloc_add_conf_handler() to
allocate, configure and register an interrupt handler, providing
interrupt type and priority.

Acked-by: Jerome Forissier <jerome.forissier@linaro.org>
Reviewed-by: Jens Wiklander <jens.wiklander@linaro.org>
Signed-off-by: Etienne Carriere <etienne.carriere@foss.st.com>

show more ...

drivers: move to interrupt_call_handlers()

Removes itr_handle() in favor to interrupt_call_handlers(). This
changes updates all implemented main interrupt controller drivers that
are the GIC driver,

drivers: move to interrupt_call_handlers()

Removes itr_handle() in favor to interrupt_call_handlers(). This
changes updates all implemented main interrupt controller drivers that
are the GIC driver, the HFIC driver and Atmel SAIC driver.

Reviewed-by: Alvin Chang <alvinga@andestech.com>
Acked-by: Jerome Forissier <jerome.forissier@linaro.org>
Reviewed-by: Jens Wiklander <jens.wiklander@linaro.org>
Signed-off-by: Etienne Carriere <etienne.carriere@foss.st.com>

show more ...

plat-k3: drivers: Open TRNG firewall for TIFS

On devices with PLATFORM=k3-am62x, there is only one SA2UL instance,
which is being shared between TIFS and OP-TEE.

Blocking access to TRNG from all ot

plat-k3: drivers: Open TRNG firewall for TIFS

On devices with PLATFORM=k3-am62x, there is only one SA2UL instance,
which is being shared between TIFS and OP-TEE.

Blocking access to TRNG from all other entities other than OP-TEE
is causing firewall exception when being accessed by TIFS.

While there are other platforms with only one sa2ul instance, on AM62x
we support low power mode, in which TIFS access TRNG while waking up
from deep sleep. On other devices, use of TRNG by TIFS is limited to
the time till OP-TEE initializes and firewalls it for other entities.

Allow access to TIFS to use SA2UL TRNG along with OP-TEE.

Signed-off-by: Kamlesh Gurudasani <kamlesh@ti.com>
Reviewed-by: Manorit Chawdhry <m-chawdhry@ti.com>

show more ...

plat-k3: drivers: Fix values for FW_SECURE_ONLY and FW_NON_SECURE

Fix values for permission bits for secure user, secure supervisor,
non-secure user and non-secure supervisor.

0th-7th bits are for

plat-k3: drivers: Fix values for FW_SECURE_ONLY and FW_NON_SECURE

Fix values for permission bits for secure user, secure supervisor,
non-secure user and non-secure supervisor.

0th-7th bits are for secure user/supervisor permissions and
8th-15th bits are for non-secure user/supervisor permission.

Signed-off-by: Kamlesh Gurudasani <kamlesh@ti.com>
Reviewed-by: Manorit Chawdhry <m-chawdhry@ti.com>

show more ...