Changes in Makefile

430f246e58d146949d399d72294f56403672bee0 - Merge changes from topic "feat_rme" into integration

Thu, 09 Apr 2026 09:43:21 +0000

Merge changes from topic "feat_rme" into integration* changes: fix(firme): granule management service feat(gpt): move gpt support under ENABLE_FEAT_RME feat(rmmd): replace ENABLE_RME with ENABLE_RMM feat(rme): split off ENABLE_FEAT_RME List of files: /rk3399_ARM-atf/Makefile

d63c2960c147244d5e8edfd6744d661e5986f5d1 - feat(gpt): move gpt support under ENABLE_FEAT_RME

Fri, 14 Nov 2025 11:45:02 +0000

feat(gpt): move gpt support under ENABLE_FEAT_RMEGranule Protection Tables (GPT) library support is enabled only whenENABLE_RMM is set (previously this build option was ENABLE_RME). SinceRME related support is now enabled using feature detection optionENABLE_FEAT_RME, this patch moves GPT support under ENABLE_FEAT_RME.This change brings in below benefits:- single TF-A build that works for RME and non-RME systems, when build with ENABLE_FEAT_RME=2 (FEAT_STATE_CHECK)- RMM loading is optional on RME systems- SiP calls that leverages RME features to change the PAS of a memory range from non-secure to secure is supported without need to enable Realm PAS or RMM.- FIRME Granule Management Interface (GMI) ABIs that handles FEAT_RME_GPC2/FEAT_RME_GDI can be enabled without need to enable RMMSigned-off-by: Arunachalam Ganapathy Change-Id: I88d9d4e0491af2b4ae0307c018f2d4a71ee6693f List of files: /rk3399_ARM-atf/Makefile

b0ddba24fe15ae6dd1d23eae165496de86e3a923 - feat(rmmd): replace ENABLE_RME with ENABLE_RMM

Tue, 04 Nov 2025 13:41:47 +0000

feat(rmmd): replace ENABLE_RME with ENABLE_RMMRME architectural requirements are now handled under the featuredetection option ENABLE_FEAT_RME. However, the existing ENABLE_RME buildoption performs RMM-specific tasks such as GPT setup, loading the RMM,and enabling RMMD support.Since ENABLE_RME now only controls RMM-related functionality, rename itto ENABLE_RMM to better reflect its purpose and avoid confusion withENABLE_FEAT_RME.For backward compatibility, setting the legacy ENABLE_RME=1 (until it isdeprecated) will automatically enable both ENABLE_FEAT_RME andENABLE_RMM.Signed-off-by: Arunachalam Ganapathy Change-Id: Iac945bdffe5002161bf1161b81a5aa7abec68192 List of files: /rk3399_ARM-atf/Makefile

dfdbda02e5ae770c510520ff8f697ae634373fc7 - feat(rme): split off ENABLE_FEAT_RME

Fri, 06 Dec 2024 18:29:51 +0000

feat(rme): split off ENABLE_FEAT_RMEENABLE_RME currently controls multiple, distinct aspects of RME support,including forcing BL2 to EL3, ROOT world page table setup, GPTinitialization, and full RMM loading and handling.While full CCA support requires all of these steps, some systems runningon FEAT_RME-capable cores do not need or want an RMM. However, suchsystems still require TF-A page table entries to set the .NSE bit sothat TF-A accesses are correctly attributed to the ROOT world,otherwise, enabling the MMU may cause the system to hang.To address this, a new build option, ENABLE_FEAT_RME, is introduced. Ithandles only the .NSE PTE setup and ignores the rest of the RME/RMMinitialization. ENABLE_FEAT_RME follows the ENABLE_FEAT_* convention andsupports values 0–2, with 2 enabling runtime detection.Full RME functionality remains gated by ENABLE_RME, which now implicitlyenables ENABLE_FEAT_RME, allowing TF-A to run safely on FEAT_RME systemswithout requiring an RMM.Change-Id: I8391652842ff2e62a73b61829c6250c3805d4a4eSigned-off-by: Andre Przywara List of files: /rk3399_ARM-atf/Makefile

0c8e4ac7f85efee611422549f9a1a596e339a511 - Merge "fix: enable FIRME interface for CCA" into integration

Tue, 31 Mar 2026 11:30:59 +0000

Merge "fix: enable FIRME interface for CCA" into integration List of files: /rk3399_ARM-atf/Makefile

f474a5a0a0d1690c53bf1686630274372bdf9651 - fix: enable FIRME interface for CCA

Mon, 30 Mar 2026 15:14:06 +0000

fix: enable FIRME interface for CCASet FIRME_SUPPORT to 1 under ENABLE_RME block to enable FIRMEinterface as mandated by FIRME specification[1].[1] https://developer.arm.com/documentation/den0149/latest/Change-Id: I743251c202f5d8f48baab59e8ad57882c0b8374bSigned-off-by: Soby Mathew List of files: /rk3399_ARM-atf/Makefile

702f2f33c5643edd744fee95073688c396bdaf72 - Merge "fix(cpus)!: make ERRATA_SME_POWER_DOWN work with the recommended state ID" into integration

Fri, 27 Mar 2026 13:53:02 +0000

Merge "fix(cpus)!: make ERRATA_SME_POWER_DOWN work with the recommended state ID" into integration List of files: /rk3399_ARM-atf/Makefile

93c7e701917c2658f9063a9eaeb1336588b1e4c4 - fix(cpus)!: make ERRATA_SME_POWER_DOWN work with the recommended state ID

Mon, 02 Mar 2026 17:57:15 +0000

fix(cpus)!: make ERRATA_SME_POWER_DOWN work with the recommended state IDThe ERRATA_SME_POWER_DOWN flag doesn't account for the recommended stateID encoding, only for the default one. This patch makes it work byremoving the generic flag and incorporating the functionality into theCPU and platform layers.The ERRATA_SME_POWER_DOWN is an awkward fix in generic code to aplatform problem. The PSCI layer shouldn't care about any CPU's innerworkings but it does. This isn't ideal once the issue is fixed sincewe'll have to carry the "legacy" fix in generic code.This patch is marked as breaking since the ERRATA_SME_POWER_DOWN flag isremoved and a couple of lines are required if CPU hotplug encounters apowerdown with live SME state (CPU suspend will work as before). Thiswill get discovered with a panic at EL3 so this patch leaves a commentto be able to trace it back.Change-Id: Ia52865f527e81a8be3727093ed370901e55c5fefSigned-off-by: Boyan Karatotev List of files: /rk3399_ARM-atf/Makefile

22bec15130e64d49d5085fa65796d2b88e2a6dd0 - Merge "test(bl): add short-read negative test scenario" into integration

Fri, 13 Mar 2026 08:26:28 +0000

Merge "test(bl): add short-read negative test scenario" into integration List of files: /rk3399_ARM-atf/Makefile

55eb4f56132377d980f022b878a3dcb7a5790add - test(bl): add short-read negative test scenario

Mon, 19 Jan 2026 13:05:21 +0000

test(bl): add short-read negative test scenarioAdd an opt-in negative test mode that simulates a short readfor a selected image_id during image loading. This exercisesthe partial-read error handling path and is intended for CIvalidation only.Disabled by default via build options.Change-Id: I219b75898e1778c0b263f99a9370425098d52f8fSigned-off-by: Manish V Badarkhe List of files: /rk3399_ARM-atf/Makefile

06bff7a78fbdeba9e413bc42339cb9adffc8f645 - Merge changes from topic "el3-rmm-itf" into integration

Fri, 06 Mar 2026 13:18:23 +0000

Merge changes from topic "el3-rmm-itf" into integration* changes: docs(rmm): update EL3-RMM contract feat(rmmd): expand RMM SMC return registers fix(cm): don't context switch GICv3 registers on NS<->RL transitions List of files: /rk3399_ARM-atf/Makefile

68eacbbf852603a61a6add94f91db093cf30e86f - fix(cm): don't context switch GICv3 registers on NS<->RL transitions

Mon, 17 Nov 2025 13:29:38 +0000

fix(cm): don't context switch GICv3 registers on NS<->RL transitionsThe GICv3 is architectured to solely manage interrupts targeted toNormal and Secure world. It doesn't manage interrupts targeting themore recently introduced Realm world. Hence the new RMMv2.0specification mandates that EL3 should not save and restorethe GIC registers on a world switch. This change is not backwardcompatible with RMMv1.x ABI.Note the change in implementation of cm_el2_sysregs_context_save()and cm_el2_sysregs_context_restore() API as GIC state is notmanaged by these APIs anymore.Add new build flag RMM_V1_COMPAT to support backward compatibilitywith RMMv1.x. This flag is currently enabled by default.This patch is a reworked version of the original patch at:https://review.trustedfirmware.org/c/TF-A/trusted-firmware-a/+/45658NOTE: If RMM_V1_COMPAT is not enabled, then RMM_EL3_IFC_VERSIONis bumped to 1.0 which makes it incompatible with an RMM supporting0.x.Change-Id: If4c53b85ef31091c254b383ed7b32c39124f0dbbSigned-off-by: Shruti Gupta List of files: /rk3399_ARM-atf/Makefile

cf0ce0c141679acf68e08e02c334dc131149a439 - Merge changes Iad777e77,I0eb24083 into integration

Wed, 04 Mar 2026 14:09:53 +0000

Merge changes Iad777e77,I0eb24083 into integration* changes: feat(build): add Mbed TLS submodule fix(brcm): fix bad Mbed TLS check List of files: /rk3399_ARM-atf/Makefile

aea8f36ccb999395ee8c47f4e8dc2363ac164953 - Merge changes from topic "mp/live_activate_sp" into integration

Tue, 03 Mar 2026 08:53:45 +0000

Merge changes from topic "mp/live_activate_sp" into integration* changes: docs(spm): describe support for SP live activation and relevant build flags docs(spm): document ff-a manifest binding for SP live activation feat(fvp): implement SP live activation callback feat(fvp): enable discovery of two Secure Partitions for live activation feat(fvp): introduce SP live activation component manager feat(spmd): helpers for SP live activation framework messages feat(lfa): build flags for SP live activation support chore(fvp): remove the dummy function fvp_get_partition_info feat(spmd): support for extended partition info descriptor List of files: /rk3399_ARM-atf/Makefile

bc9a699d9c2eb3d49945d66dc97f59311ee37794 - feat(build): add Mbed TLS submodule

Tue, 06 May 2025 16:30:33 +0000

feat(build): add Mbed TLS submoduleThis change adds Mbed TLS 3.6.5 as a submodule to the TF-A repository.It is no longer a requirement to pass `MBEDTLS_DIR` to the build systemwhen building configurations which require it, as the build system willnow look inside the `contrib` directory if the parameter is missing.If you cloned TF-A without the `--recurse-submodules` flag, you canensure that this submodule is present by running: git submodule update --init --recursiveBREAKING-CHANGE: Mbed TLS is now included in the TF-A repository, and it is no longer a requirement to pass `MBEDTLS_DIR` to the build system. Please run `git submodule update --init --recursive` if you encounter issues after migrating to the latest version of TF-A.Change-Id: Iad777e77936d1c373065f17fe5c4aadc45e56b64Signed-off-by: Chris Kay List of files: /rk3399_ARM-atf/Makefile

f5cb144df1d96c9adf45fbf2376b4068d16d8701 - feat(lfa): build flags for SP live activation support

Wed, 29 Oct 2025 20:49:46 +0000

feat(lfa): build flags for SP live activation supportThis patch introduces new build flags necessary for SP live activationsupport and ensures all constraints are met.BREAKING CHANGE: Temporarily fails to buildChange-Id: I17fba2ee935845816ae40067ca349b1eb9bb310cSigned-off-by: Madhukar Pappireddy List of files: /rk3399_ARM-atf/Makefile

f1761a5cd22983201c6f238c81ced8ce5acf673c - Merge changes from topic "feat_rme" into integration

Thu, 26 Feb 2026 12:55:29 +0000

Merge changes from topic "feat_rme" into integration* changes: fix(bl2): pie fixup size calculation fix(rme): do not force set ARM_ARCH_MAJOR/MINOR for ENABLE_RME List of files: /rk3399_ARM-atf/Makefile

f85f130a3031f8cf9c7aa257df6f1da5b179e102 - fix(rme): do not force set ARM_ARCH_MAJOR/MINOR for ENABLE_RME

Mon, 24 Nov 2025 11:51:05 +0000

fix(rme): do not force set ARM_ARCH_MAJOR/MINOR for ENABLE_RMEARM_ARCH_MAJOR/MINOR is set to 9.2 when ENABLE_RME=1. It is not clearwhy this is required and it is set early in the Makefile before theplatform specific Makefile. Also arch_features are setup based onARM_ARCH_MAJOR, ARM_ARCH_MINOR provided by the platform. So there is achance this could be overwritten by platform. This change removessetting ARM_ARCH_MAJOR/MINOR to 9.2. If ENABLE_RME depends on otherarchitecture features then it must use ENABLE_FEAT option.Signed-off-by: Arunachalam Ganapathy Change-Id: I1c74bb53e684d43c62e5f9b7259ebd76add84ff5 List of files: /rk3399_ARM-atf/Makefile

ab8e9f8410a37f907ad708c74d3d3bed54fbbafa - Merge changes from topic "bk/new_feats" into integration

Tue, 10 Feb 2026 16:25:39 +0000

Merge changes from topic "bk/new_feats" into integration* changes: feat(cpufeat): add support for FEAT_HACDBS feat(cpufeat): add support for FEAT_HDBSS feat(cpufeat): add support for FEAT_STEP2 feat(docs): update the feature guide to mention FEAT_IDTE3 fix(cpufeat): remove the feature list from arch_features.h docs(cpufeat): add analysis of 2022 features fix(cpus): use hint instruction instead of the psb mnemonic List of files: /rk3399_ARM-atf/Makefile

0c54fc3220b63a3d103659df799aa8a46bb2e149 - Merge "fix(build): use the correct value of host-poetry" into integration

Mon, 09 Feb 2026 12:17:57 +0000

Merge "fix(build): use the correct value of host-poetry" into integration List of files: /rk3399_ARM-atf/Makefile