| e68e414d | 04-Feb-2026 |
Christian Zoia <czoia@amazon.com> |
ta: pkcs11: fix eddsa key reusage
EdDsa key weren't enabled to be re-used in the same session in the
load_tee_key function, forcing the client to close the session and
open it again whenever the sam
ta: pkcs11: fix eddsa key reusage
EdDsa key weren't enabled to be re-used in the same session in the
load_tee_key function, forcing the client to close the session and
open it again whenever the same operation should have been done
multiple times.
Closes: https://github.com/OP-TEE/optee_os/issues/7686
Fixes: 03e07432b68f ("ta: pkcs11: Add Ed25519 support")
Signed-off-by: Christian Zoia <czoia@amazon.com>
Reviewed-by: Etienne Carriere <etienne.carriere@st.com>
show more ...
|
| 1e3f36b0 | 20-Feb-2026 |
Georges Savoundararadj <savoundg@amazon.com> |
ta: pkcs11: fix memory leak in close_persistent_db()
close_persistent_db() is a no-op stub that never frees the db_main and
db_objs structures allocated by init_persistent_db(). In normal TA
operati
ta: pkcs11: fix memory leak in close_persistent_db()
close_persistent_db() is a no-op stub that never frees the db_main and
db_objs structures allocated by init_persistent_db(). In normal TA
operation this is harmless since the TEE framework reclaims all TA
memory on unload, which is likely why it was left unimplemented.
However, the leak becomes visible when running the TA in a host-based
test environment (e.g. with AddressSanitizer) where the TEE memory
reclamation does not occur. ASan reports 264 leaked allocations
totalling ~24 KiB per TA lifecycle.
Implement close_persistent_db() to free token->db_main and
token->db_objs and NULL the pointers. Add a NULL check on the token
argument for robustness.
Fixes: c84ccd0a805e ("ta: pkcs11: persistent database for the pkcs11 tokens")
Signed-off-by: Georges Savoundararadj <savoundg@amazon.com>
Reviewed-by: Jerome Forissier <jerome.forissier@arm.com>
show more ...
|
| 5597ed38 | 03-Feb-2026 |
Jens Wiklander <jens.wiklander@linaro.org> |
ta: remoteproc: fix ELF parser
Add stricter range checks for section headers in when parsing an ELF in
e32_parser_find_rsc_table().
Signed-off-by: Jens Wiklander <jens.wiklander@linaro.org>
Tested-
ta: remoteproc: fix ELF parser
Add stricter range checks for section headers in when parsing an ELF in
e32_parser_find_rsc_table().
Signed-off-by: Jens Wiklander <jens.wiklander@linaro.org>
Tested-by: Arnaud Pouliquen <arnaud.pouliquen@foss.st.com>
Reviewed-by: Etienne Carriere <etienne.carriere@st.com>
show more ...
|
| b1c2e659 | 03-Feb-2026 |
Jens Wiklander <jens.wiklander@linaro.org> |
ta: avb: fix memory copied in read_persist_value()
read_persist_value() allocates a temporary buffer and reads persistent
value from secure storage into that buffer. Next it copies the content
of th
ta: avb: fix memory copied in read_persist_value()
read_persist_value() allocates a temporary buffer and reads persistent
value from secure storage into that buffer. Next it copies the content
of the buffer into an out memref, but it copies the number of allocated
bytes instead of the size of the persistent value. No unintended
information leaks though, since Temporary buffer was zero-initialized by
TEE_Malloc(). To avoid unnecessary copying, copy only the number of read
bytes from secure storage.
Fixes: ddcd07a27aa6 ("ta: avb: copy data to temporary buffers")
Signed-off-by: Jens Wiklander <jens.wiklander@linaro.org>
Reviewed-by: Jerome Forissier <jerome.forissier@arm.com>
Reviewed-by: Etienne Carriere <etienne.carriere@st.com>
show more ...
|
| c2c23cd4 | 14-Oct-2025 |
Etienne Carriere <etienne.carriere@st.com> |
ta: pkcs11: be flexible on RSA private key optional attributes
Allow RSA private key to partially store the RSA private key optional
attributes without facing complaints from the GP TEE API.
On one
ta: pkcs11: be flexible on RSA private key optional attributes
Allow RSA private key to partially store the RSA private key optional
attributes without facing complaints from the GP TEE API.
On one hand, in the PKCS#11 specification, RSA private key attributes
CKA_PRIME_1, CKA_PRIME_2, CKA_EXPONENT_1, CKA_EXPONENT_2 and
CKA_COEFFICIENT are optional and the spec does not add much constraints
on their presence.
On the other hand, the GP TEE Internal Core API requests that these
5 optional attributes are all present or none is present at all.
As a trade-off, allow PKCS#11 client to partially provide them but do not
load them into the TEE object unless they are all present.
Fixes: 3dc4089afde2 ("ta: pkcs11: correct RSA keys extended attributes sanitation")
Closes: https://github.com/OP-TEE/optee_os/issues/5418
Closes: https://github.com/OP-TEE/optee_os/issues/7520
Signed-off-by: Etienne Carriere <etienne.carriere@st.com>
show more ...
|
| 14a1a72b | 15-Oct-2025 |
Etienne Carriere <etienne.carriere@st.com> |
ta: remoteproc: clarify remoteproc_get_tlv() behavior
Add an inline comment to explicitly state that TA remoteproc local
function remoteproc_get_tlv() loads specific values in its output
arguments w
ta: remoteproc: clarify remoteproc_get_tlv() behavior
Add an inline comment to explicitly state that TA remoteproc local
function remoteproc_get_tlv() loads specific values in its output
arguments when it returns with error code TEE_ERROR_NO_DATA.
This way it is clearer that caller expect such values on such error
cases.
Signed-off-by: Etienne Carriere <etienne.carriere@st.com>
Acked-by: Arnaud Pouliquen <arnaud.pouliquen@foss.st.com>
show more ...
|
| 68dc1d62 | 17-Sep-2025 |
Etienne Carriere <etienne.carriere@st.com> |
ta: remoteproc: clarify case empty key info is last TLV cell
Clarify case when remote processor firmware key info
TLV RPROC_TLV_PKEYINFO is present but empty (size = 0) and is placed
last in the TLV
ta: remoteproc: clarify case empty key info is last TLV cell
Clarify case when remote processor firmware key info
TLV RPROC_TLV_PKEYINFO is present but empty (size = 0) and is placed
last in the TLVs memory area hence its value cell start address matches
the TLV area end address. The previous implementation was fine but
it looked odd the main loop does not address the case.
Signed-off-by: Etienne Carriere <etienne.carriere@st.com>
Acked-by: Arnaud Pouliquen <arnaud.pouliquen@foss.st.com>
show more ...
|
| 07917406 | 05-Aug-2025 |
Alexandre Gonzalo <alexandre.gonzalo@arm.com> |
remoteproc: fix potential overflows in TLV parsing
This commit is fixing two issues:
- Verify that the end of the buffer is not reached before reading the
tag and value.
- Verify that the entire TLV
remoteproc: fix potential overflows in TLV parsing
This commit is fixing two issues:
- Verify that the end of the buffer is not reached before reading the
tag and value.
- Verify that the entire TLV fits into the TLV chunk
Signed-off-by: Alexandre Gonzalo <alexandre.gonzalo@arm.com>
Acked-by: Jerome Forissier <jerome.forissier@linaro.org>
Reviewed-by: Jens Wiklander <jens.wiklander@linaro.org>
Reviewed-by: Etienne Carriere <etienne.carriere@foss.st.com>
show more ...
|
| f03a2aca | 09-Jul-2025 |
Jerome Forissier <jerome.forissier@linaro.org> |
ta/link.mk: update the default TA encryption key
When the TA signing key for OP-TEE was changed [1], the TA encryption
key (which is a derived key) was not updated. As a result,
CFG_ENCRYPT_TA=y is
ta/link.mk: update the default TA encryption key
When the TA signing key for OP-TEE was changed [1], the TA encryption
key (which is a derived key) was not updated. As a result,
CFG_ENCRYPT_TA=y is broken. Fix that by updating TA_ENC_KEY to reflect
the output of tee_otp_get_ta_enc_key().
The key value is obtained by adding 'DHEXDUMP(buffer, len);' to
tee_otp_get_ta_enc_key() then running any test involving loading an
encrypted TA. For example:
build$ make check CFG_ENCRYPT_TA=y CHECK_TESTS=xtest XTEST_ARGS=4002
build$ vi ../out/bin/serial0.log
Fixes: 5d5d7d0b1c03 ("keys: increase default RSA key size to 4096 bits") [1]
Signed-off-by: Jerome Forissier <jerome.forissier@linaro.org>
Reviewed-by: Jens Wiklander <jens.wiklander@linaro.org>
show more ...
|
| 941a58d7 | 04-Apr-2025 |
Jens Wiklander <jens.wiklander@linaro.org> |
Add optee.ta.instanceKeepCrashed property
Add the optee.ta.instanceKeepCrashed property to prevent a TA with
gpd.ta.instanceKeepAlive=true to be restarted. This prevents unexpected
resetting of the
Add optee.ta.instanceKeepCrashed property
Add the optee.ta.instanceKeepCrashed property to prevent a TA with
gpd.ta.instanceKeepAlive=true to be restarted. This prevents unexpected
resetting of the state of the TA.
Signed-off-by: Jens Wiklander <jens.wiklander@linaro.org>
Reviewed-by: Jerome Forissier <jerome.forissier@linaro.org>
Reviewed-by: Alex Lewontin <alex.lewontin@canonical.com>
Reviewed-by: Etienne Carriere <etienne.carriere@foss.st.com>
show more ...
|
| 0ae5ef34 | 03-Apr-2025 |
Thomas Bourgoin <thomas.bourgoin@foss.st.com> |
tree wide: fix header files dependencies in linker files
When linking with a generated linker script like kern.ld.S, dependencies
with header file are not regenerated.
Same issue as
commit acdc32afe
tree wide: fix header files dependencies in linker files
When linking with a generated linker script like kern.ld.S, dependencies
with header file are not regenerated.
Same issue as
commit acdc32afe18f ("mk/compile.mk: fix header dependency in .d file")
Add option -MP used to fix error generated when removing header files.
Signed-off-by: Thomas Bourgoin <thomas.bourgoin@foss.st.com>
Reviewed-by: Jerome Forissier <jerome.forissier@linaro.org>
Acked-by: Jens Wiklander <jens.wiklander@linaro.org>
show more ...
|
| 228cf40e | 28-Mar-2025 |
Rouven Czerwinski <r.czerwinski@pengutronix.de> |
tree-wide: use /usr/bin/env bash in bash scripts
Some distributions don't provide bash inside of /bin, increase
compatibility by using env to resolve the correct path at runtime.
Fixes running the s
tree-wide: use /usr/bin/env bash in bash scripts
Some distributions don't provide bash inside of /bin, increase
compatibility by using env to resolve the correct path at runtime.
Fixes running the scripts on my NixOS systems.
Signed-off-by: Rouven Czerwinski <r.czerwinski@pengutronix.de>
Reviewed-by: Jerome Forissier <jerome.forissier@linaro.org>
Acked-by: Jens Wiklander <jens.wiklander@linaro.org>
Acked-by: Etienne Carriere <etienne.carriere@foss.st.com>
show more ...
|
| f84dc262 | 27-Mar-2025 |
Alvin Chang <alvinga@andestech.com> |
ta: Compile TA with "-fno-stack-protector" if TA stack protector is off
Depends on compiler version and OS distributions, the stack protector
may be enabled by default. This means TA is always compi
ta: Compile TA with "-fno-stack-protector" if TA stack protector is off
Depends on compiler version and OS distributions, the stack protector
may be enabled by default. This means TA is always compiled with
"-fstack-protector", even if _CFG_TA_STACK_PROTECTOR is not 'y'.
To solve this issue, we explicitly provide "-fno-stack-protector"
compile option when _CFG_TA_STACK_PROTECTOR is not 'y'. Thus, the TA
stack protector is definitely disabled.
Signed-off-by: Alvin Chang <alvinga@andestech.com>
Reviewed-by: Yu-Chien Peter Lin <peter.lin@sifive.com>
Reviewed-by: Jerome Forissier <jerome.forissier@linaro.org>
show more ...
|
| ab03d590 | 27-Mar-2025 |
Alvin Chang <alvinga@andestech.com> |
ta: Export _CFG_TA_STACK_PROTECTOR
_CFG_TA_STACK_PROTECTOR is config variable referenced in __ta_entry() to
generate random stack canary. Thus, it needs to be exported to TA
makefile.
Signed-off-by
ta: Export _CFG_TA_STACK_PROTECTOR
_CFG_TA_STACK_PROTECTOR is config variable referenced in __ta_entry() to
generate random stack canary. Thus, it needs to be exported to TA
makefile.
Signed-off-by: Alvin Chang <alvinga@andestech.com>
Reviewed-by: Yu-Chien Peter Lin <peter.lin@sifive.com>
Reviewed-by: Jerome Forissier <jerome.forissier@linaro.org>
show more ...
|
| 1283e108 | 27-Mar-2025 |
Alvin Chang <alvinga@andestech.com> |
ta: Pass config variables prefixed as _CFG_ from conf.mk to build flags
In addition to config variables prefixed as CFG_, some other config
variables are prefixed as _CFG_ and also referenced during
ta: Pass config variables prefixed as _CFG_ from conf.mk to build flags
In addition to config variables prefixed as CFG_, some other config
variables are prefixed as _CFG_ and also referenced during TA
compilation. Add _CFG_ config variables to be compiler flags.
Signed-off-by: Alvin Chang <alvinga@andestech.com>
Reviewed-by: Yu-Chien Peter Lin <peter.lin@sifive.com>
Reviewed-by: Jerome Forissier <jerome.forissier@linaro.org>
show more ...
|
| 886b8adb | 20-Mar-2025 |
Aleksandr Iashchenko <aleksandr.iashchenko@linutronix.de> |
build: always link in-tree TAs with the -static flag
Shared libraries may remain in the output directory as artifacts
from previous builds, causing unintended behavior. To prevent this,
in-tree TAs
build: always link in-tree TAs with the -static flag
Shared libraries may remain in the output directory as artifacts
from previous builds, causing unintended behavior. To prevent this,
in-tree TAs are now always linked using the -static flag, regardless
of whether shared libraries are enabled.
Signed-off-by: Aleksandr Iashchenko <aleksandr.iashchenko@linutronix.de>
Reviewed-by: Jens Wiklander <jens.wiklander@linaro.org>
Reviewed-by: Jerome Forissier <jerome.forissier@linaro.org>
Acked-by: Etienne Carriere <etienne.carriere@foss.st.com>
show more ...
|
| 949b0c0c | 15-Jan-2025 |
Aleksandr Iashchenko <aleksandr.iashchenko@linutronix.de> |
ta: enable ubsan support for TAs
Introduce CFG_TA_SANITIZE_UNDEFINED config to sanitize trusted
applications. If CFG_TA_SANITIZE_UNDEFINED is set sanitize flags are
propagated to internal TAs (avb,
ta: enable ubsan support for TAs
Introduce CFG_TA_SANITIZE_UNDEFINED config to sanitize trusted
applications. If CFG_TA_SANITIZE_UNDEFINED is set sanitize flags are
propagated to internal TAs (avb, pkcs11, remoteproc, trusted_keys) and
external TAs, which are built with the devkit.
Signed-off-by: Aleksandr Iashchenko <aleksandr.iashchenko@linutronix.de>
Reviewed-by: Jens Wiklander <jens.wiklander@linaro.org>
Reviewed-by: Jerome Forissier <jerome.forissier@linaro.org>
Acked-by: Etienne Carriere <etienne.carriere@foss.st.com>
show more ...
|
| 6b1c1858 | 06-Mar-2025 |
Jens Wiklander <jens.wiklander@linaro.org> |
Deprecate libgcc for TAs
By default keep linking with libgcc for TAs, but add CFG_TA_LIBGCC to
easily turn off linking with libgcc in configurations where it isn't
needed.
Signed-off-by: Jens Wikla
Deprecate libgcc for TAs
By default keep linking with libgcc for TAs, but add CFG_TA_LIBGCC to
easily turn off linking with libgcc in configurations where it isn't
needed.
Signed-off-by: Jens Wiklander <jens.wiklander@linaro.org>
Reviewed-by: Joakim Bech <joakim.bech@linaro.org>
Reviewed-by: Jerome Forissier <jerome.forissier@linaro.org>
show more ...
|
| 695be9d6 | 20-Jan-2025 |
Jens Wiklander <jens.wiklander@linaro.org> |
libutils: refactor the MDBG malloc functions
Replace the MDBG malloc functions and macros with a new function
__mdbg_alloc() handling all the memory allocations similar to
mem_alloc(). The old MDBG
libutils: refactor the MDBG malloc functions
Replace the MDBG malloc functions and macros with a new function
__mdbg_alloc() handling all the memory allocations similar to
mem_alloc(). The old MDBG macros are replace by new macros calling
__mdbg_alloc().
mem_alloc(), mem_alloc_unlocked(), and mem_free() are updated to handle
configuration with and without MDBG, removing the all the ENABLE_MDBG
ifdefs in the C file.
Signed-off-by: Jens Wiklander <jens.wiklander@linaro.org>
Reviewed-by: Jerome Forissier <jerome.forissier@linaro.org>
Reviewed-by: Etienne Carriere <etienne.carriere@foss.st.com>
show more ...
|
| c385a722 | 06-Jan-2025 |
Etienne Carriere <etienne.carriere@foss.st.com> |
ta: trusted_keys: Add TA version and description property values
Add meaningful values for Trusted Keys TA version and description
properties to replace previously embedded default respective values
ta: trusted_keys: Add TA version and description property values
Add meaningful values for Trusted Keys TA version and description
properties to replace previously embedded default respective values
"Undefined version" and "Undefined description".
Signed-off-by: Etienne Carriere <etienne.carriere@foss.st.com>
Acked-by: Jerome Forissier <jerome.forissier@linaro.org>
Acked-by: Jens Wiklander <jens.wiklander@linaro.org>
show more ...
|
| 1ed12b2e | 06-Jan-2025 |
Etienne Carriere <etienne.carriere@foss.st.com> |
ta: avb: Add TA version and description property values
Add meaningful values for AVB TA version and description properties
to replace previously embedded default respective values
"Undefined versio
ta: avb: Add TA version and description property values
Add meaningful values for AVB TA version and description properties
to replace previously embedded default respective values
"Undefined version" and "Undefined description".
Signed-off-by: Etienne Carriere <etienne.carriere@foss.st.com>
Acked-by: Jerome Forissier <jerome.forissier@linaro.org>
Acked-by: Jens Wiklander <jens.wiklander@linaro.org>
show more ...
|
| 04e46975 | 16-Dec-2024 |
Etienne Carriere <etienne.carriere@foss.st.com> |
tree-wide: use ROUNDUP_DIV() where applicable
Use ROUNDUP_DIV() instead of ROUNDUP(..., size) / size where applicable.
Signed-off-by: Etienne Carriere <etienne.carriere@foss.st.com>
Reviewed-by: Je
tree-wide: use ROUNDUP_DIV() where applicable
Use ROUNDUP_DIV() instead of ROUNDUP(..., size) / size where applicable.
Signed-off-by: Etienne Carriere <etienne.carriere@foss.st.com>
Reviewed-by: Jens Wiklander <jens.wiklander@linaro.org>
show more ...
|
| 5395f036 | 06-Jan-2025 |
Etienne Carriere <etienne.carriere@foss.st.com> |
ta: pkcs11: set TA version ID to 1.0.0
PKCS#11 TA version ID is 0.1.0 since its early integration. Let's
set it 1.0.0 since it now mature enough to deserve a non-zero major
version number.
Signed-o
ta: pkcs11: set TA version ID to 1.0.0
PKCS#11 TA version ID is 0.1.0 since its early integration. Let's
set it 1.0.0 since it now mature enough to deserve a non-zero major
version number.
Signed-off-by: Etienne Carriere <etienne.carriere@foss.st.com>
Acked-by: Jerome Forissier <jerome.forissier@linaro.org>
Acked-by: Jens Wiklander <jens.wiklander@linaro.org>
show more ...
|
| 8cf8403b | 11-Dec-2024 |
Etienne Carriere <etienne.carriere@foss.st.com> |
ta: pkcs11: default disable CFG_PKCS11_TA_RSA_X_509
Disable CFG_PKCS11_TA_RSA_X_509 in pkcs11 TA default configuration
since raw RSA signature (CKM_RSA_X_509) computation and verification
can be uns
ta: pkcs11: default disable CFG_PKCS11_TA_RSA_X_509
Disable CFG_PKCS11_TA_RSA_X_509 in pkcs11 TA default configuration
since raw RSA signature (CKM_RSA_X_509) computation and verification
can be unsafe. Target systems willing to embed its support (e.g. for
some TSL v1.2 support) will need to enable it explicitly.
Signed-off-by: Etienne Carriere <etienne.carriere@foss.st.com>
Acked-by: Jerome Forissier <jerome.forissier@linaro.org>
show more ...
|
| b7abff72 | 06-Sep-2024 |
Etienne Carriere <etienne.carriere@foss.st.com> |
ta: pkcs11: add CKM_RSA_X_509 ciphering
Add support for CKM_RSA_X_509 mechanism for encrypt/decrypt operations.
Signed-off-by: Alexandre Marechal <alexandre.marechal@st.com>
Signed-off-by: Etienne
ta: pkcs11: add CKM_RSA_X_509 ciphering
Add support for CKM_RSA_X_509 mechanism for encrypt/decrypt operations.
Signed-off-by: Alexandre Marechal <alexandre.marechal@st.com>
Signed-off-by: Etienne Carriere <etienne.carriere@foss.st.com>
Acked-by: Rouven Czerwinski <r.czerwinski@pengutronix.de>
show more ...
|