fix(gic): init the GIC before the platform with a hook

While GIC setup is generic across platforms, its usage is not. Some
platforms won't use it at EL3, while others need to configure interrupts
(l

fix(gic): init the GIC before the platform with a hook

While GIC setup is generic across platforms, its usage is not. Some
platforms won't use it at EL3, while others need to configure interrupts
(like RAS) in the standard platform hooks. To do that, the GIC needs to
be set up and ready to use before calling the platform hooks but
currently that is only done after. Annoyingly, a handful of platforms
need to set their GIC up before initialising it necessitating the
platform hooks to be called before GIC init.

This patch resolves this contradiction by moving the general GIC setup
calls to before the platform hooks and adding a GIC-specific platform
hook just before GIC per CPU init. This way both types of platforms can
do their business at the same time.

Change-Id: I361f587ab4603162ee880addb074800cbbb97b49
Signed-off-by: Boyan Karatotev <boyan.karatotev@arm.com>

show more ...

Merge changes I86dcf7b5,Id498d588 into integration

* changes:
chore: bump tpm library + interface changes
chore: bump eventlog library and interface changes

Merge "style(imx8mq): use the DSM constant that refers to the right register" into integration

Merge "fix(imx9): set GICR frames" into integration

style(imx8mq): use the DSM constant that refers to the right register

Although DSM_MODE_MASK and SLPCR_EN_DSM happen to have the same value,
the former is named after LPCR_A53/LPCR_M4 registers. For

style(imx8mq): use the DSM constant that refers to the right register

Although DSM_MODE_MASK and SLPCR_EN_DSM happen to have the same value,
the former is named after LPCR_A53/LPCR_M4 registers. For clarity,
use SLPCR's bit name when working with SLPCR.

Change-Id: I8601d83cde0ba58be541bc776611a9db71b0e0c0
Signed-off-by: Sebastian Krzyszkowiak <sebastian.krzyszkowiak@puri.sm>

show more ...

chore: bump eventlog library and interface changes

The eventlog library exposed macros TPM_ALG_SHA*. These will clash
with libTPM, so must be namespaced by prefixing them with EVLOG_

Change-Id: Id4

chore: bump eventlog library and interface changes

The eventlog library exposed macros TPM_ALG_SHA*. These will clash
with libTPM, so must be namespaced by prefixing them with EVLOG_

Change-Id: Id498d5882edda056c2d78c916193053655b3eb89
Signed-off-by: Matthew Ellis <Matthew.Ellis@arm.com>

show more ...

fix(imx9): set GICR frames

For MX9, although the GICR base addresses are discovered as part of the
GIC platform workaround during bl31_platform_setup(), gic_pcpu_init()
(called as part of bl31_main(

fix(imx9): set GICR frames

For MX9, although the GICR base addresses are discovered as part of the
GIC platform workaround during bl31_platform_setup(), gic_pcpu_init()
(called as part of bl31_main()) requires the GICR frames be set.
Not doing so will result in a NULL pointer dereference (or assert failure)

Therefore, make sure GICR frames are set before gic_pcpu_init() gets
executed.

After workaround is finished, make sure GICR base is set to 0 to avoid an
assertion failure during gicv3_rdistif_probe(). GICR base addresses are
discovered using the GICR frames anyways.

Change-Id: I444f2f9cce8fb9e38eed25ff52ed35bff7b12358
Signed-off-by: Laurentiu Mihalcea <laurentiu.mihalcea@nxp.com>

show more ...

chore(imx8mq): replace a magic number with SCR_FIQ_BIT constant

Aside of obvious readability improvement, this also makes it consistent
with its mirrored use in imx_domain_suspend.

Change-Id: Idcbf

chore(imx8mq): replace a magic number with SCR_FIQ_BIT constant

Aside of obvious readability improvement, this also makes it consistent
with its mirrored use in imx_domain_suspend.

Change-Id: Idcbf195b3bd3902554e795c26bd1ce243368f090
Signed-off-by: Sebastian Krzyszkowiak <sebastian.krzyszkowiak@puri.sm>

show more ...

feat(bl2): support RESET_TO_BL2 and ENABLE_RME

When RSE is used as the root of trust along with CPU that supports RME
there is a need to enable both RESET_TO_BL2 and ENABLE_RME.

In current bl2_main

feat(bl2): support RESET_TO_BL2 and ENABLE_RME

When RSE is used as the root of trust along with CPU that supports RME
there is a need to enable both RESET_TO_BL2 and ENABLE_RME.

In current bl2_main there are two different code paths for RESET_BL2,
one handles BL2 running in EL1 and other for BL2 running in EL3.

When RME is enabled, BL2 always runs at EL3 but the current flow calls
bl2_early_platform_setup2, bl2_plat_arch_setup instead of
bl2_el3_early_platform_setup, bl2_el3_plat_arch_setup. Adding RME,
TRANSFER_LIST, ROMLIB support in bl2_el3_* helpers makes
arm_bl2_el3_setup.c almost identical to arm_bl2_setup.c.

This patch removes bl2_el3_plat helpers and related files. Now different
combinations of RESET_TO_BL2, ENABLE_RME are handled in common bl2_setup
routines in arm_bl2_setup.c. This helps to have common place to support
new features and build flags for BL2 irrespective of which EL the BL2
runs.

BREAKING-CHANGE: This patch also changes all existing platform files and
functions that use format bl2_el3_* to bl2_plat helpers. If any platform
or out-of-tree platforms that need to support running BL2 in EL1 or EL3
must now handle it in bl2_early_platform_setup2 and bl2_plat_arch_setup.

Signed-off-by: Arunachalam Ganapathy <arunachalam.ganapathy@arm.com>
Change-Id: I8d332dbe2de1db3b69319496c8d04626cdcf4140

show more ...

refactor(imx): use crypto-agile measured boot

Update the i.MX measured boot flow to use the crypto-agile API. Replace
the previous single-algorithm hash configuration with dynamic algorithm
selectio

refactor(imx): use crypto-agile measured boot

Update the i.MX measured boot flow to use the crypto-agile API. Replace
the previous single-algorithm hash configuration with dynamic algorithm
selection. Align image measurement and event log header generation with
the new hashing model and update platform glue code accordingly.

Change-Id: Ia60b5c927c1d7e4262562fb1eee2e4602b832e78
Signed-off-by: Harrison Mutai <harrison.mutai@arm.com>

show more ...

feat(imx8m): keep console at runtime when building TF-A/bl31 with DEBUG

Have informal console output at runtime is useful when searching
errors in TF-A.

Change-Id: I56b5c4fc184e571f79d92bd0aa4fc74f

feat(imx8m): keep console at runtime when building TF-A/bl31 with DEBUG

Have informal console output at runtime is useful when searching
errors in TF-A.

Change-Id: I56b5c4fc184e571f79d92bd0aa4fc74ff4ed6074
Signed-off-by: Markus Niebel <Markus.Niebel@ew.tq-group.com>
Signed-off-by: Alexander Stein <alexander.stein@ew.tq-group.com>

show more ...

Merge changes from topic "little-build-fixes" into integration

* changes:
fix(build): don't rely on Event Log build tree
fix(build): link Event Log library directly
fix(build): scan symbols un

Merge changes from topic "little-build-fixes" into integration

* changes:
fix(build): don't rely on Event Log build tree
fix(build): link Event Log library directly
fix(build): scan symbols until all are resolved
fix(build): add include directory dependencies

show more ...

fix(build): link Event Log library directly

The `libraries` target is a `.PHONY` target to which various real
library targets, including the Event Log library, have been added over
the years. This t

fix(build): link Event Log library directly

The `libraries` target is a `.PHONY` target to which various real
library targets, including the Event Log library, have been added over
the years. This target is added as a dependency to any target created
with the `MAKE_BL` function. While this might look convenient on the
surface, it also dictates that a library must be linked even to images
it is totally irrelevant for.

The Event Log library is a good example of this; the library is not
typically used by all images, but by attaching itself to the `libraries`
target it becomes mandatory for all of them.

This change returns some of the control over when and where the Event
Log goes to platform maintainers via the introduction of two new
variables:

- `LIBEVLOG_LIBS`: the path to the Event Log static library.
- `LIBEVLOG_INCLUDE_DIRS`: include directories for the public API.

These can be appended to `BLx_LIBS` and `BLx_INCLUDE_DIRS` to include
the Event Log library in the relevant bootloaders.

Change-Id: I3e1a48cd45493334590b34b2ade0c6e29cbfd47a
Signed-off-by: Chris Kay <chris.kay@arm.com>

show more ...

chore(libfdt): update libfdt to v1.7.2

Where previously we cherry-picked individual sources from the libfdt
project tree, this change instead integrates the entire project tree
into the TF-A reposit

chore(libfdt): update libfdt to v1.7.2

Where previously we cherry-picked individual sources from the libfdt
project tree, this change instead integrates the entire project tree
into the TF-A repository. Doing so reduces the manual overhead of
updating libfdt in the future, as we avoid the need to analyse
individual source-level dependencies.

libfdt, conveniently, also provides a Makefile designed to ease its
integration into foreign build systems (like TF-A's), which we also make
use of in this change.

Source: https://git.kernel.org/pub/scm/utils/dtc/dtc.git/tree/?h=v1.7.2
Change-Id: I8babcfd27019fdd6d255d550491e1bb733745f27
Signed-off-by: Chris Kay <chris.kay@arm.com>

show more ...

Merge "fix(imx): check if the cluster id is valid" into integration

Merge changes I92c3e293,I95149f5e into integration

* changes:
fix(imx): match function parameters to declaration
fix(intel): match declaration with definition

fix(imx): match function parameters to declaration

The gic helpers always take core_pos as an argument.

Change-Id: I92c3e293c03ae788e6eaa0d251c9867d53c3139f
Signed-off-by: Boyan Karatotev <boyan.ka

fix(imx): match function parameters to declaration

The gic helpers always take core_pos as an argument.

Change-Id: I92c3e293c03ae788e6eaa0d251c9867d53c3139f
Signed-off-by: Boyan Karatotev <boyan.karatotev@arm.com>

show more ...

Merge changes from topic "imx8m-rdc" into integration

* changes:
refactor(imx8m): simplify RDC console config
fix(imx8m): add RDC entries for all missing UARTs

feat(imx9): add full system power control option

Add an optional build-time configuration to enable full system
shutdown and reset control through SCMI.

By default, only logical machine (cluster-le

feat(imx9): add full system power control option

Add an optional build-time configuration to enable full system
shutdown and reset control through SCMI.

By default, only logical machine (cluster-level) power-off and
reset are performed. When the SYS_PWR_FULL_CTRL option is set,
the PSCI implementation uses the full system power control
commands instead, allowing a complete system shutdown and reset.

Tested on iMX95 based modules.

Change-Id: I56b31f9b91def31784857f5a299c69f68db706a4
Signed-off-by: Emanuele Ghidoli <emanuele.ghidoli@toradex.com>

show more ...

fix(imx): check if the cluster id is valid

Check if the cluster id is valid, if not, return directly.

NXP would like to thank Giorgiomaria Cicero and Gabriele Serra from
Accelerat for their respons

fix(imx): check if the cluster id is valid

Check if the cluster id is valid, if not, return directly.

NXP would like to thank Giorgiomaria Cicero and Gabriele Serra from
Accelerat for their responsible disclosure

Signed-off-by: Jacky Bai <ping.bai@nxp.com>
Reviewed-by: Peng Fan <peng.fan@nxp.com>
Change-Id: I69997512fc080daa9579f92a4de9e47531185bcf

show more ...

build(measured-boot)!: move to ext event log lib

Removes in-tree Event Log library implementation and updates all
references to use the external submodule. Updates include paths,
Makefile macros, an

build(measured-boot)!: move to ext event log lib

Removes in-tree Event Log library implementation and updates all
references to use the external submodule. Updates include paths,
Makefile macros, and platform integration logic to link with lib as a
static library.

If you cloned TF-A without the `--recurse-submodules` flag, you can
ensure that this submodule is present by running:

git submodule update --init --recursive

BREAKING-CHANGE: LibEventLog is now included in TF-A as a submodule.
Please run `git submodule update --init --recursive` if you encounter
issues after migrating to the latest version of TF-A.

Change-Id: I723f493033c178759a45ea04118e7cc295dc2438
Signed-off-by: Harrison Mutai <harrison.mutai@arm.com>

show more ...

refactor(imx8m): simplify RDC console config

imx_rdc_console_access_enable() only updates the RDC configuration for
console UART. Early return was only happening when the correct
configuration was a

refactor(imx8m): simplify RDC console config

imx_rdc_console_access_enable() only updates the RDC configuration for
console UART. Early return was only happening when the correct
configuration was already set.
Return early once the correct entry has been found and updated.

Change-Id: Ic21dd8186b051dd0f51192df68a652ff79d8b8c0
Signed-off-by: Alexander Stein <alexander.stein@ew.tq-group.com>

show more ...

fix(imx8m): add RDC entries for all missing UARTs

Commit f7434fa13 ("fix(imx8m): ensure domain permissions for the
console") sets RDC domain to Cortex-A only for console UART. But
this only works if

fix(imx8m): add RDC entries for all missing UARTs

Commit f7434fa13 ("fix(imx8m): ensure domain permissions for the
console") sets RDC domain to Cortex-A only for console UART. But
this only works if there is an RDC configuration entry provided.
Add missing RDC entries using the (reset) default value, so
imx_rdc_console_access_enable() can actually configuration domain
access.

Fixes: f7434fa13507 ("fix(imx8m): ensure domain permissions for the console")
Change-Id: I550dbf2b53795ab43839139c455f2468442a3251
Signed-off-by: Alexander Stein <alexander.stein@ew.tq-group.com>

show more ...

Merge "fix(imx8mp): assign wdog1 to domain0 only" into integration

fix(imx8mp): assign wdog1 to domain0 only

Normally, wdog1 is used by A53 side, and it should be stopped when
A53 domain enters STOP mode. After Power-on-Reset this watchdog is owned
by both M7 & A53

fix(imx8mp): assign wdog1 to domain0 only

Normally, wdog1 is used by A53 side, and it should be stopped when
A53 domain enters STOP mode. After Power-on-Reset this watchdog is owned
by both M7 & A53 side. This watchdog can only enter STOP mode only when
both A53 & M7 enter STOP mode. This is not reasonable as this watchdog
is only used by A53 side, so assign wdog1 to domain0(a53 side) only.

Change-Id: I4c04a8c7f3cba4713f410866c18fef88fcbe9f11
Signed-off-by: Jacky Bai <ping.bai@nxp.com>
Signed-off-by: Alexander Stein <alexander.stein@ew.tq-group.com>

show more ...