Removing legacy pub_ddr init code

Secure side doesn't manage anything related to the public DDR any longer
and therefore the complete memory area as defined in TEE core shall be
available to the non

Removing legacy pub_ddr init code

Secure side doesn't manage anything related to the public DDR any longer
and therefore the complete memory area as defined in TEE core shall be
available to the non-secure side (i.e., Linux kernel).

Signed-off-by: Joakim Bech <joakim.bech@linaro.org>
Tested-by: Joakim Bech <joakim.bech@linaro.org>
Suggested-by: Sandeep Tripathy <sandeep.tripathy@broadcom.com>
Reviewed-by: Jens Wiklander <jens.wiklander@linaro.org>
Reviewed-by: Jerome Forissier <jerome.forissier@linaro.org>

show more ...

hikey: enable 8 threads by default

Set CFG_NUM_THREADS to 8 by default for HiKey since the board has
8 cores. By maximizing the concurrency level, we can better stress
test the secure code.

Signed-

hikey: enable 8 threads by default

Set CFG_NUM_THREADS to 8 by default for HiKey since the board has
8 cores. By maximizing the concurrency level, we can better stress
test the secure code.

Signed-off-by: Jerome Forissier <jerome.forissier@linaro.org>
Reviewed-by: Jens Wiklander <jens.wiklander@linaro.org>

show more ...

tee_obj_attr_to_binary: fix short buffer check

Fixes short buffer check at end of tee_obj_attr_to_binary().

Reviewed-by: Jerome Forissier <jerome.forissier@linaro.org>
Tested-by: Jens Wiklander <je

tee_obj_attr_to_binary: fix short buffer check

Fixes short buffer check at end of tee_obj_attr_to_binary().

Reviewed-by: Jerome Forissier <jerome.forissier@linaro.org>
Tested-by: Jens Wiklander <jens.wiklander@linaro.org> (QEMU)
Signed-off-by: Jens Wiklander <jens.wiklander@linaro.org>

show more ...

tee_obj_attr_to_binary: fix undefined behavior with data == NULL

To query the size needed for some attribute, one may set data to NULL
and pass the address of an uninitialized buffer as data_len.
In

tee_obj_attr_to_binary: fix undefined behavior with data == NULL

To query the size needed for some attribute, one may set data to NULL
and pass the address of an uninitialized buffer as data_len.
In this case, *data_len should not be read but only written to.

Signed-off-by: Jerome Forissier <jerome.forissier@linaro.org>
Reviewed-by: Jens Wiklander <jens.wiklander@linaro.org>

show more ...

RPMB: rpmb_fs_read: return 0 if position is after end of file

Signed-off-by: Jerome Forissier <jerome.forissier@linaro.org>
Reviewed-by: Jens Wiklander <jens.wiklander@linaro.org>

RPMB: rpmb_fs_read: don't forget to increment file position

Signed-off-by: Jerome Forissier <jerome.forissier@linaro.org>
Reviewed-by: Jens Wiklander <jens.wiklander@linaro.org>

core: fix tee object attribute management

Prior to the patch the attribute management of tee objects occasionally
assumed that the attribute data didn't contain any addresses. This
assumption is inc

core: fix tee object attribute management

Prior to the patch the attribute management of tee objects occasionally
assumed that the attribute data didn't contain any addresses. This
assumption is incorrect for asymmetric key objects. This patch fixes
that by introducing an operation struct for each basic attribute type.

Tested-by: Jens Wiklander <jens.wiklander@linaro.org> (QEMU)
Signed-off-by: Jens Wiklander <jens.wiklander@linaro.org>

show more ...

core: generate ta_pub_key.c with new build facility

Generates ta_pub_key.c using the new build facility for generated
source files.

Reviewed-by: Joakim Bech <joakim.bech@linaro.org>
Reviewed-by: Je

core: generate ta_pub_key.c with new build facility

Generates ta_pub_key.c using the new build facility for generated
source files.

Reviewed-by: Joakim Bech <joakim.bech@linaro.org>
Reviewed-by: Jerome Forissier <jerome.forissier@linaro.org>
Signed-off-by: Jens Wiklander <jens.wiklander@linaro.org>

show more ...

Add support for ZynqMP

Add support for Xilinx UltraScale+ Zynq MPSoC.

Signed-off-by: Soren Brinkmann <soren.brinkmann@xilinx.com>
Reviewed-by: Joakim Bech <joakim.bech@linaro.org>
Reviewed-by: Jero

Add support for ZynqMP

Add support for Xilinx UltraScale+ Zynq MPSoC.

Signed-off-by: Soren Brinkmann <soren.brinkmann@xilinx.com>
Reviewed-by: Joakim Bech <joakim.bech@linaro.org>
Reviewed-by: Jerome Forissier <jerome.forissier@linaro.org>
Reviewed-by: Jens Wiklander <jens.wiklander@linaro.org>

show more ...

Add Cadence UART driver

Signed-off-by: Soren Brinkmann <soren.brinkmann@xilinx.com>
Reviewed-by: Joakim Bech <joakim.bech@linaro.org>
Reviewed-by: Jerome Forissier <jerome.forissier@linaro.org>
Revi

Add Cadence UART driver

Signed-off-by: Soren Brinkmann <soren.brinkmann@xilinx.com>
Reviewed-by: Joakim Bech <joakim.bech@linaro.org>
Reviewed-by: Jerome Forissier <jerome.forissier@linaro.org>
Reviewed-by: Jens Wiklander <jens.wiklander@linaro.org>

show more ...

core: fix undef behavior in tee_time_ta_set_offs()

Fixes undefined behavior in tee_time_ta_set_offs() when
tee_time_offs is initially NULL.

Reviewed-by: Joakim Bech <joakim.bech@linaro.org>
Tested-

core: fix undef behavior in tee_time_ta_set_offs()

Fixes undefined behavior in tee_time_ta_set_offs() when
tee_time_offs is initially NULL.

Reviewed-by: Joakim Bech <joakim.bech@linaro.org>
Tested-by: Jens Wiklander <jens.wiklander@linaro.org> (QEMU, FVP)
Signed-off-by: Jens Wiklander <jens.wiklander@linaro.org>

show more ...

core: tee_svc_do_call fix unaligned sp

Fixes problem with unaligned sp when number of parameters to
a syscall is odd.

Reviewed-by: Joakim Bech <joakim.bech@linaro.org>
Signed-off-by: Jens Wiklander

core: tee_svc_do_call fix unaligned sp

Fixes problem with unaligned sp when number of parameters to
a syscall is odd.

Reviewed-by: Joakim Bech <joakim.bech@linaro.org>
Signed-off-by: Jens Wiklander <jens.wiklander@linaro.org>

show more ...

core: thread: fix unaligned stack pointer

Fixes unaligned stack pointer in __thread_enter_user_mode. The
stack pointer must always be 8 byte aligned when entering a new
function.

Reviewed-by: Joaki

core: thread: fix unaligned stack pointer

Fixes unaligned stack pointer in __thread_enter_user_mode. The
stack pointer must always be 8 byte aligned when entering a new
function.

Reviewed-by: Joakim Bech <joakim.bech@linaro.org>
Signed-off-by: Jens Wiklander <jens.wiklander@linaro.org>

show more ...

core: fixes undefined behavior

Fixes undefined behavior detected with CFG_CORE_SANITIZE_UNDEFINED=y

Reviewed-by: Joakim Bech <joakim.bech@linaro.org>
Signed-off-by: Jens Wiklander <jens.wiklander@l

core: fixes undefined behavior

Fixes undefined behavior detected with CFG_CORE_SANITIZE_UNDEFINED=y

Reviewed-by: Joakim Bech <joakim.bech@linaro.org>
Signed-off-by: Jens Wiklander <jens.wiklander@linaro.org>

show more ...

core: add CFG_CORE_SANITIZE_UNDEFINED

Adds CFG_CORE_SANITIZE_UNDEFINED to enabled undefined behavior
santizer with -fsanitize=undefined as option to compiler with
supporting routines in core/kernel/

core: add CFG_CORE_SANITIZE_UNDEFINED

Adds CFG_CORE_SANITIZE_UNDEFINED to enabled undefined behavior
santizer with -fsanitize=undefined as option to compiler with
supporting routines in core/kernel/ubsan.c.

This option consumes a lot of memory, expect link problems unless pager
and debug is disabled.

Reviewed-by: Joakim Bech <joakim.bech@linaro.org>
Signed-off-by: Jens Wiklander <jens.wiklander@linaro.org>

show more ...

core: arm32: fix masking exceptions on exit

Before this patch FIQ and asynchronous abort wasn't masked on
all exit paths. This patch fixes that.

Reviewed-by: Joakim Bech <joakim.bech@linaro.org>
Te

core: arm32: fix masking exceptions on exit

Before this patch FIQ and asynchronous abort wasn't masked on
all exit paths. This patch fixes that.

Reviewed-by: Joakim Bech <joakim.bech@linaro.org>
Tested-by: Jens Wiklander <jens.wiklander@linaro.org> (QEMU)
Signed-off-by: Jens Wiklander <jens.wiklander@linaro.org>

show more ...

drivers: gpio: fix write8 function argument order

Signed-off-by: Victor Chong <victor.chong@linaro.org>
Reviewed-by: Jerome Forissier <jerome.forissier@linaro.org>

core: fix TEE_ALG_RSASSA_PKCS1_* signing

Signing with the algorithms TEE_ALG_RSASSA_PKCS1_* allows an optional
parameter, salt length. If the salt lengths isn't supplied the default
value should be

core: fix TEE_ALG_RSASSA_PKCS1_* signing

Signing with the algorithms TEE_ALG_RSASSA_PKCS1_* allows an optional
parameter, salt length. If the salt lengths isn't supplied the default
value should be the length of the digest.

Reviewed-by: Joakim Bech <joakim.bech@linaro.org>
Reviewed-by: Jerome Forissier <jerome.forissier@linaro.org>
Tested-by: Jens Wiklander <jens.wiklander@linaro.org> (QEMU)
Suggested-by: Cedric Chaumont <cedric.chaumont@st.com>
Signed-off-by: Jens Wiklander <jens.wiklander@linaro.org>

show more ...

core: ltc: dsa_sign() check size of hash

Checks size of supplied message to match the size of the digest prior
to signing the message. Similar to what is done in rsassa_sign() except
that the digest

core: ltc: dsa_sign() check size of hash

Checks size of supplied message to match the size of the digest prior
to signing the message. Similar to what is done in rsassa_sign() except
that the digest size must not exceed the modulus (q) size.

Reviewed-by: Joakim Bech <joakim.bech@linaro.org>
Reviewed-by: Jerome Forissier <jerome.forissier@linaro.org>
Signed-off-by: Jens Wiklander <jens.wiklander@linaro.org>

show more ...

core: fix attribute size check of transient object

Fixes bad check of attribute size when populating a transient object.

Reviewed-by: Joakim Bech <joakim.bech@linaro.org>
Reviewed-by: Jerome Foriss

core: fix attribute size check of transient object

Fixes bad check of attribute size when populating a transient object.

Reviewed-by: Joakim Bech <joakim.bech@linaro.org>
Reviewed-by: Jerome Forissier <jerome.forissier@linaro.org>
Signed-off-by: Jens Wiklander <jens.wiklander@linaro.org>

show more ...

Change some fs messages to debug

Trying to open a file that doesn't exist, or trying to write to a file
that does exist are part of normal use of a filesystem. Demote these
two messages to debug in

Change some fs messages to debug

Trying to open a file that doesn't exist, or trying to write to a file
that does exist are part of normal use of a filesystem. Demote these
two messages to debug instead of error to avoid flooding the error log
with messages that come from ordinary use.

Signed-off-by: David Brown <david.brown@linaro.org>
Reviewed-by: Jerome Forissier <jerome.forissier@linaro.org>
Reviewed-by: Jens Wiklander <jens.wiklander@linaro.org>

show more ...

core: arm: invalidate i-cache inner shareable

When invalidating i-cache and branch predictor use inner shareable
(icialluis and bpiallis) versions of the operations to make it visible
to other cores

core: arm: invalidate i-cache inner shareable

When invalidating i-cache and branch predictor use inner shareable
(icialluis and bpiallis) versions of the operations to make it visible
to other cores.

Fixes occasional problem with pager with multiple active threads.

Reviewed-by: Jerome Forissier <jerome.forissier@linaro.org>
Reviewed-by: Pascal Brand <pascal.brand@linaro.org>
Tested-by: Jens Wiklander <jens.wiklander@linaro.org> (HiKey)
Signed-off-by: Jens Wiklander <jens.wiklander@linaro.org>

show more ...

drivers: add gpio framework and pl061 driver

Suggested-by: Haojian Zhuang <haojian.zhuang@linaro.org>
Signed-off-by: Victor Chong <victor.chong@linaro.org>
Reviewed-by: Jens Wiklander <jens.wiklande

drivers: add gpio framework and pl061 driver

Suggested-by: Haojian Zhuang <haojian.zhuang@linaro.org>
Signed-off-by: Victor Chong <victor.chong@linaro.org>
Reviewed-by: Jens Wiklander <jens.wiklander@linaro.org>
Reviewed-by: Pascal Brand <pascal.brand@linaro.org>

show more ...

Persistent objects: save handle information

When creating a Persistent Object (TEE_CreatePersistentObject)
using an object handle, the information and attributes related
to the handle are saved.

Th

Persistent objects: save handle information

When creating a Persistent Object (TEE_CreatePersistentObject)
using an object handle, the information and attributes related
to the handle are saved.

The information are restored when opening the object
(TEE_OpenPersistentObject)

Fixes #785

Reviewed-by: Jens Wiklander <jens.wiklander@linaro.org>
Signed-off-by: Pascal Brand <pascal.brand@st.com>

show more ...

core: fix fiq delivery in Aarch64

Prior to this patch reception of a FIQ while in secure user mode (secure
EL0) would be treated as if an IRQ was received instead. This resulted
in an exit to normal

core: fix fiq delivery in Aarch64

Prior to this patch reception of a FIQ while in secure user mode (secure
EL0) would be treated as if an IRQ was received instead. This resulted
in an exit to normal world and when FIQ was unmasked it would be
re-triggered but this time received as an FIQ received while in normal
world.

This patch fixes this and handles FIQ directly when received while in
secure user mode.

Reviewed-by: Pascal Brand <pascal.brand@linaro.org>
Tested-by: Jens Wiklander <jens.wiklander@linaro.org> (FVP)
Signed-off-by: Jens Wiklander <jens.wiklander@linaro.org>

show more ...