chore: update to use Arm word across TF-AAlign entire TF-A to use Arm in copyright header.Change-Id: Ief9992169efdab61d0da6bd8c5180de7a4bc2244Signed-off-by: Govindraj Raja <govindraj.raja@arm.co
chore: update to use Arm word across TF-AAlign entire TF-A to use Arm in copyright header.Change-Id: Ief9992169efdab61d0da6bd8c5180de7a4bc2244Signed-off-by: Govindraj Raja <govindraj.raja@arm.com>
show more ...
Use SPDX license identifiersTo make software license auditing simpler, use SPDX[0] licenseidentifiers instead of duplicating the license text in every file.NOTE: Files that have been imported by
Use SPDX license identifiersTo make software license auditing simpler, use SPDX[0] licenseidentifiers instead of duplicating the license text in every file.NOTE: Files that have been imported by FreeBSD have not been modified.[0]: https://spdx.org/Change-Id: I80a00e1f641b8cc075ca5a95b10607ed9ed8761aSigned-off-by: dp-arm <dimitris.papastamos@arm.com>
Add support for GCC stack protectionIntroduce new build option ENABLE_STACK_PROTECTOR. It enablescompilation of all BL images with one of the GCC -fstack-protector-*options.A new platform funct
Add support for GCC stack protectionIntroduce new build option ENABLE_STACK_PROTECTOR. It enablescompilation of all BL images with one of the GCC -fstack-protector-*options.A new platform function plat_get_stack_protector_canary() is introduced.It returns a value that is used to initialize the canary for stackcorruption detection. Returning a random value will prevent an attackerfrom predicting the value and greatly increase the effectiveness of theprotection.A message is printed at the ERROR level when a stack corruption isdetected.To be effective, the global data must be stored at an addresslower than the base of the stacks. Failure to do so would allow anattacker to overwrite the canary as part of an attack which would voidthe protection.FVP implementation of plat_get_stack_protector_canary is weak asthere is no real source of entropy on the FVP. It therefore relies on atimer's value, which could be predictable.Change-Id: Icaaee96392733b721fa7c86a81d03660d3c1bc06Signed-off-by: Douglas Raillard <douglas.raillard@arm.com>