| 7a443fef | 01-Jul-2022 |
Marco Felsch <m.felsch@pengutronix.de> |
feat(imx8mp): add BL31 PIE support
Enable PIE support so the BL31 firmware can be loaded from anywhere within the OCRAM (SRAM). How important this is shows the back and forth of the BL31_BASE addres
feat(imx8mp): add BL31 PIE support
Enable PIE support so the BL31 firmware can be loaded from anywhere within the OCRAM (SRAM). How important this is shows the back and forth of the BL31_BASE address starting with TF-A v2.5. Since then the BL31_BASE address wasn't stable and choosing the correct combination of SPL version loadaddress and TF-A version loadaddr was tricky.
For the PIE support we only need to replace the BL31_BASE by the BL31_START which is a relocatable symbol and to enable it by setting ENABLE_PIE := 1.
Signed-off-by: Marco Felsch <m.felsch@pengutronix.de> Change-Id: I4214db1f27120f9f9cd1413ccd7a5a7d095ff45d
show more ...
|
| 5fe51c93 | 04-Jul-2022 |
Marco Felsch <m.felsch@pengutronix.de> |
refactor(imx8mp): introduce BL2_SIZE and BL31_SIZE
No functional change.
Introduce BLx_SIZE defines and calculate the limits based on the BLx_BASE and the BLx_SIZE define. Also make use of SZ_128K
refactor(imx8mp): introduce BL2_SIZE and BL31_SIZE
No functional change.
Introduce BLx_SIZE defines and calculate the limits based on the BLx_BASE and the BLx_SIZE define. Also make use of SZ_128K to make it easier to read. This is required for later BL31 PIE support since it drops the calculation based on the BL31_LIMIT and BL31_BASE.
Signed-off-by: Marco Felsch <m.felsch@pengutronix.de> Change-Id: Idae34c1dfcedd35238fe083149080a199d50eed0
show more ...
|
| c52966f9 | 01-Jul-2022 |
Marco Felsch <m.felsch@pengutronix.de> |
refactor(imx8mp): make use of setup_page_tables()
No functional change. Use the setup_page_tables() helper function which does the three calls for us. Also the function has some logging support whic
refactor(imx8mp): make use of setup_page_tables()
No functional change. Use the setup_page_tables() helper function which does the three calls for us. Also the function has some logging support which will be nice during debugging.
Signed-off-by: Marco Felsch <m.felsch@pengutronix.de> Change-Id: I350965414939865220f745ef5b24d2cdc3095e7b
show more ...
|
| 720e7b66 | 26-Sep-2022 |
Andrey Zhizhikin <andrey.zhizhikin@leica-geosystems.com> |
feat(imx8m): add support for high assurance boot
Introduce support for High Assurance Boot (HABv4), which is used to establish and extend the Root-of-Trust during FW loading at any given boot stage.
feat(imx8m): add support for high assurance boot
Introduce support for High Assurance Boot (HABv4), which is used to establish and extend the Root-of-Trust during FW loading at any given boot stage.
This commit introduces support for HAB ROM Vector Table (RVT) API, which is normally used by post-ROM code to authenticate additional boot images (Kernel, FDT, FIT, etc.) that are taking part in the Root-of-Trust.
Signed-off-by: Andrey Zhizhikin <andrey.zhizhikin@leica-geosystems.com> Change-Id: I780d308369824fa4850844eb9e91768e417166a0
show more ...
|
| d5ede92d | 16-Apr-2021 |
Jacky Bai <ping.bai@nxp.com> |
feat(imx8m): enable the coram_s tz by default on imx8mn/mp
Enable the OCRAM_S TZ for secure protection by default on i.MX8MN/i.MX8MP. And lock the ocram secure access configure on i.MX8MM/i.MX8MP.
feat(imx8m): enable the coram_s tz by default on imx8mn/mp
Enable the OCRAM_S TZ for secure protection by default on i.MX8MN/i.MX8MP. And lock the ocram secure access configure on i.MX8MM/i.MX8MP.
Signed-off-by: Jacky Bai <ping.bai@nxp.com> Change-Id: I2e24f4b823ee5f804415218d5c2e371f4e4c6fe1
show more ...
|