| /optee_os/.github/workflows/ |
| H A D | ci.yml | 6 group: ci-${{ github.ref }} # unique per branch 7 cancel-in-progress: true # cancel previous runs on the same branch 11 runs-on: ubuntu-latest 14 - name: Checkout 17 fetch-depth: 0 # full history so checkpatch can check commit IDs in commit messages 18 - name: Update Git config 19 run: git config --globa [all...] |
| /optee_os/core/arch/arm/plat-hikey/ |
| H A D | platform_config.h | 1 /* SPDX-License-Identifier: BSD-2-Clause */ 54 * TZDRAM is secured (firewalled) by the DDR controller, see ARM-TF, but note 58 * protection may be reverted by the non-secure kernel with a piece of 59 * code similar to the one that sets the protection in ARM-TF (we're 61 * configuration until the next SoC reset). 62 * TZSRAM is emulated in the TZDRAM area, because the on-chip SRAM of the 63 * HiKey SoC is too small to run OP-TEE (72K total with 64K available, see 64 * "SRAM Memory Region Layout" in ARM-TF plat/hikey/include/hisi_sram_map.h), 70 * 0x4000_0000 - 74 * 0x3F00_0000 [TZDRAM_BASE, BL32_LOAD_ADDR] - [all …]
|
| /optee_os/lib/libutils/ext/include/ |
| H A D | config.h | 1 /* SPDX-License-Identifier: Apache-2.0 */ 10 * @brief Check for macro definition in compiler-visible expressions 12 * This trick was pioneered in Linux as the config_enabled() macro. 27 * value to be e.g. a literal "1" at expansion time in the next macro, 47 * two-argument tuple to the preprocessor only in the case where the 49 * ENABLED: _YYYY, <--- note comma!
|
| /optee_os/lib/libutils/isoc/arch/arm/softfloat/doc/ |
| H A D | SoftFloat-source.html | 34 <TR><TD></TD><TD>5.2. Specializing Floating-Point Behavior</TD></TR> 38 <TD></TD><TD>5.5. Target-Specific Optimization of Primitive Functions</TD> 53 SoftFloat, a library of C functions implementing binary floating-point 54 conforming to the IEEE Standard for Floating-Point Arithmetic. 60 The source code for SoftFloat is intended to be relatively machine-independent 61 and should be compilable with any ISO-Standard C compiler that also supports 62 <NOBR>64-bit</NOBR> integers. 81 (Nearly all computers in use today have <NOBR>8-bit</NOBR> bytes.) 88 arithmetic on <NOBR>64-bit</NOBR> integers. 89 Earlier releases of SoftFloat included implementations of <NOBR>32-bit</NOBR> [all …]
|
| /optee_os/scripts/ |
| H A D | get_maintainer.py | 5 # SPDX-License-Identifier: BSD-2-Clause 17 DIFF_GIT_RE = re.compile(r'^diff --git a/(?P<path>.*) ') 18 REVIEWED_RE = re.compile(r'^Reviewed-by: (?P<approver>.*>)') 19 ACKED_RE = re.compile(r'^Acked-by: (?P<approver>.*>)') 20 PATCH_START = re.compile(r'^From [0-9a-f]{40}') 28 '(With -m) Check if a patch or pull ' 31 parser.add_argument('-m', '--merge-check', action='store_true', 32 help='use Reviewed-by: and Acked-by: tags found in ' 35 parser.add_argument('-p', '--show-paths', action='store_true', 37 parser.add_argument('-s', '--strict', action='store_true', [all …]
|
| H A D | symbolize.py | 2 # SPDX-License-Identifier: BSD-2-Clause 18 TEE_LOAD_ADDR_RE = re.compile(r'TEE load address @ (?P<load_addr>0x[0-9a-f]+)') 22 r'[UEIDFM]/(TC|LD):([0-9]+ )?(\?*|[0-9]*) [0-9]* +(?P<addr>0x[0-9a-f]+)') 23 ABORT_ADDR_RE = re.compile(r'-abort at address (?P<addr>0x[0-9a-f]+)') 24 TA_PANIC_RE = re.compile(r'TA panicked with code (?P<code>0x[0-9a-f]+)') 25 REGION_RE = re.compile(r'region +[0-9]+: va (?P<addr>0x[0-9a-f]+) ' 26 r'pa 0x[0-9a-f]+ size (?P<size>0x[0-9a-f]+)' 27 r'( flags .{4} (\[(?P<elf_idx>[0-9]+)\])?)?') 28 ELF_LIST_RE = re.compile(r'\[(?P<idx>[0-9]+)\] (?P<uuid>[0-9a-f\-]+)' 29 r' @ (?P<load_addr>0x[0-9a-f\-]+)') [all …]
|
| /optee_os/core/lib/qcbor/inc/qcbor/ |
| H A D | qcbor_private.h | 1 // SPDX-License-Identifier: BSD-3-Clause 3 * Copyright (c) 2016-2018, The Linux Foundation. 4 * Copyright (c) 2018-2024, Laurence Lundblade. 17 * * Neither the name of The Linux Foundation nor the names of its 24 * MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT 164 * less than UINT32_MAX so the error condition can be tested on 32-bit 168 * This will cause trouble on a machine where size_t is less than 32-bits. 170 #define QCBOR_MAX_ARRAY_OFFSET (UINT32_MAX - 100) 173 /* The number of tags that are 16-bit or larger that can be handled 196 * 64-bit machine: (15 + 1) * (4 + 2 + 1 + 1 pad) + 8 = 136 bytes [all …]
|
| H A D | qcbor_decode.h | 1 // SPDX-License-Identifier: BSD-3-Clause 3 * Copyright (c) 2016-2018, The Linux Foundation. 4 * Copyright (c) 2018-2024, Laurence Lundblade. 17 * * Neither the name of The Linux Foundation nor the names of its 24 * MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT 60 * general description of this encoder-decoder in section @ref 64 * non-aggregate types like integers and strings and the intermediate 66 * pre-order traversal of this tree with CBOR sequences a minor 74 * - The data itself, integer, string, floating-point number... 75 * - The label if present [all …]
|
| H A D | qcbor_encode.h | 1 // SPDX-License-Identifier: BSD-3-Clause 3 * Copyright (c) 2016-2018, The Linux Foundation. 4 * Copyright (c) 2018-2024, Laurence Lundblade. 17 * * Neither the name of The Linux Foundation nor the names of its 24 * MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT 60 * This implements CBOR -- Concise Binary Object Representation as 62 * information is at http://cbor.io. This is a near-complete implementation of 68 * and @ref SpiffyDecode for general discussion on the easier-to-use 85 * Decoding of indefinite-length strings is a special case that requires 88 * indefinite-length string is encountered (indefinite-length maps and [all …]
|
| H A D | UsefulBuf.h | 1 // SPDX-License-Identifier: BSD-3-Clause 3 * Copyright (c) 2016-2018, The Linux Foundation. 4 * Copyright (c) 2018-2024, Laurence Lundblade. 17 * * Neither the name of The Linux Foundation nor the names of its 24 * MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT 46 -------- ---- -------------------------------------------------- 53 3/6/2021 mcr/llundblade Fix warnings related to --Wcast-qual 84 * This code is written so it will work correctly on big- and 85 * little-endian CPUs without configuration or any auto-detection of 98 * integers and floating-point values. [all …]
|
| /optee_os/core/include/ |
| H A D | optee_rpc_cmd.h | 1 /* SPDX-License-Identifier: BSD-2-Clause */ 3 * Copyright (c) 2016-2021, Linaro Limited 14 * RPC communication with tee-supplicant is reversed compared to normal 25 * [in] value[0].a-b UUID 47 * 1970-01-01 00:00:00 +0000 (UTC). 63 * which instead is sent via a non-secure interrupt. 96 /* Memory that can be shared with a non-secure user space application */ 98 /* Memory only shared with non-secure kernel */ 101 * Memory shared with non-secure kernel and exported to a non-secure user 123 * returned on success. Re-use this value [all …]
|
| /optee_os/lib/libmbedtls/mbedtls/ |
| H A D | README.md | 6 Mbed TLS includes a reference implementation of the [PSA Cryptography API](#psa-cryptography-api). … 9 ------------- 11 … more programmatic way using the Python 3 script `scripts/config.py` (use `--help` for usage instr… 15 We provide some non-standard configurations focused on specific use cases in the `configs/` directo… 18 ------------- 20 The main Mbed TLS documentation is available via [ReadTheDocs](https://mbed-tls.readthedocs.io/). 22 …or the PSA Cryptography API is available [on GitHub](https://arm-software.github.io/psa-api/crypto… 24 To generate a local copy of the library documentation in HTML format, tailored to your compile-time… 33 --------- 37 - GNU Make [all …]
|
| H A D | ChangeLog | 3 = Mbed TLS 3.6.4 branch released 2025-06-30 8 session, according to the TLS-Exporter specification in RFC 8446 and 5705. 15 CVE-2025-49601 19 CVE-2025-49600 30 CVE-2025-52496 31 * Fix possible use-after-free or double-free in code calling 36 they were free()d, resulting in high risk of use-after-free or double-free, 39 were affected (use-after-free if the san string contains more than one DN). 42 CVE-2025-47917 54 CVE-2025-48965 [all …]
|
| /optee_os/core/lib/libfdt/ |
| H A D | fdt_ro.c | 1 // SPDX-License-Identifier: (GPL-2.0-or-later OR BSD-2-Clause) 3 * libfdt - Flat Device Tree manipulation 47 err = -FDT_ERR_BADOFFSET; in fdt_get_string() 50 len = totalsize - absoffset; in fdt_get_string() 58 if ((fdt_size_dt_strings(fdt) - stroffset) < len) in fdt_get_string() 59 len = fdt_size_dt_strings(fdt) - stroffset; in fdt_get_string() 63 || (stroffset < -fdt_size_dt_strings(fdt))) in fdt_get_string() 65 if ((-stroffset) < len) in fdt_get_string() 66 len = -stroffset; in fdt_get_string() 68 err = -FDT_ERR_INTERNAL; in fdt_get_string() [all …]
|
| H A D | fdt_overlay.c | 1 // SPDX-License-Identifier: (GPL-2.0-or-later OR BSD-2-Clause) 3 * libfdt - Flat Device Tree manipulation 15 * overlay_get_target_phandle - retrieves the target phandle of a fragment 21 * property) instead of a path (target-path property). 26 * -1, if the phandle was malformed 37 if ((len != sizeof(*val)) || (fdt32_to_cpu(*val) == (uint32_t)-1)) in overlay_get_target_phandle() 38 return (uint32_t)-1; in overlay_get_target_phandle() 44 * overlay_get_target - retrieves the offset of a fragment's target 67 if (phandle == (uint32_t)-1) in overlay_get_target() 68 return -FDT_ERR_BADPHANDLE; in overlay_get_target() [all …]
|
| /optee_os/core/drivers/crypto/versal/ |
| H A D | authenc.c | 1 // SPDX-License-Identifier: BSD-2-Clause 10 #include <crypto/internal_aes-gcm.h> 30 * This driver does not queue/pad non-aligned data. 33 * the required changes, we might be able to do it in OP-TEE. 101 if (elist[err - AES_GCM_TAG_MISMATCH].name) in versal_aes_error() 102 return elist[err - AES_GCM_TAG_MISMATCH].name; in versal_aes_error() 234 arg.data[arg.dlen++] = p->mem.len % 16 ? p->mem.alloc_len : p->mem.len; in replay_aad() 235 arg.ibuf[0].mem = p->mem; in replay_aad() 251 arg.ibuf[0].mem = p->input_cmd; in replay_payload() 252 arg.ibuf[1].mem = p->dst; in replay_payload() [all …]
|
| /optee_os/core/arch/arm/crypto/ |
| H A D | sm4_armv8a_ce_a64.S | 1 /* SPDX-License-Identifier: BSD-2-Clause */ 5 * Copyright (C) 2022 Tianjia Zhang <tianjia.zhang@linux.alibaba.com> 8 * Cryptographic Extension for ARMv8.2-A. 10 * The CE implementation refers to Linux kernel (sm4-ce-core.S contributed 11 * by Tianjia Zhang <tianjia.zhang@linux.alibaba.com>). 16 .arch armv8.2-a+crypto+sm4 40 /* round keys: v0-v7 */ 50 /* plain blocks: v8-v15 */ 72 stp x15, x16, [sp, #-0x10]! 73 stp x17, x18, [sp, #-0x10]! [all …]
|
| H A D | sm4_armv8a_aese_a64.S | 1 /* SPDX-License-Identifier: BSD-2-Clause */ 5 * Copyright (C) 2022 Tianjia Zhang <tianjia.zhang@linux.alibaba.com> 8 * optional Cryptographic Extension for ARMv8-A. 10 * The NEON implementation refers to Linux kernel (sm4-neon-core.S contributed 11 * by Tianjia Zhang <tianjia.zhang@linux.alibaba.com>). 21 .arch armv8-a+crypto 49 /* round keys: v0-v7 */ 59 /* plain blocks: v8-v15 */ 93 stp x15, x16, [sp, #-0x10]! 94 stp x17, x18, [sp, #-0x10]! [all …]
|
| /optee_os/core/lib/qcbor/src/ |
| H A D | qcbor_decode.c | 1 // SPDX-License-Identifier: BSD-3-Clause 3 Copyright (c) 2016-2018, The Linux Foundation. 4 Copyright (c) 2018-2024, Laurence Lundblade. 17 * Neither the name of The Linux Foundation nor the names of its 24 MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT 52 * This is how the -Wmaybe-uninitialized compiler warning is 54 * with -Wall which is a common and useful gcc warning option. It also 58 * The big problem with -Wmaybe-uninitialized is that it generates 63 * put it in gcc and worse to enable it with -Wall). 65 * One solution would be to change the code so -Wmaybe-uninitialized [all …]
|
| H A D | qcbor_encode.c | 1 // SPDX-License-Identifier: BSD-3-Clause 3 Copyright (c) 2016-2018, The Linux Foundation. 4 Copyright (c) 2018-2024, Laurence Lundblade. 17 * Neither the name of The Linux Foundation nor the names of its 24 MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT 65 * there is no top-level array or map. It starts out with a string, 66 * integer or other non-aggregate type. It may have an array or map 80 pNesting->pCurrentNesting = &pNesting->pArrays[0]; in Nesting_Init() 84 pNesting->pCurrentNesting->uMajorType = CBOR_MAJOR_TYPE_ARRAY; in Nesting_Init() 92 if(pNesting->pCurrentNesting == &pNesting->pArrays[QCBOR_MAX_ARRAY_NESTING]) { in Nesting_Increase() [all …]
|
| /optee_os/ |
| H A D | CHANGELOG.md | 1 # OP-TEE - version 4.8.0 (2025-10-24) 3 - Links to the release pages, commits and pull requests merged into this release for: 4 …- OP-TEE/optee_os: [release page][OP_TEE_optee_os_release_4_8_0], [commits][OP_TEE_optee_os_commit… 5 …- OP-TEE/optee_client: [release page][OP_TEE_optee_client_release_4_8_0], [commits][OP_TEE_optee_c… 6 …- OP-TEE/optee_test: [release page][OP_TEE_optee_test_release_4_8_0], [commits][OP_TEE_optee_test_… 7 …- OP-TEE/build: [release page][OP_TEE_build_release_4_8_0], [commits][OP_TEE_build_commits_4_8_0] … 8 …- linaro-swg/optee_examples: [release page][linaro_swg_optee_examples_release_4_8_0], [commits][li… 11 [OP_TEE_optee_os_release_4_8_0]: https://github.com/OP-TEE/optee_os/releases/tag/4.8.0 12 [OP_TEE_optee_os_commits_4_8_0]: https://github.com/OP-TEE/optee_os/compare/4.7.0...4.8.0 13 …s_pr_4_8_0]: https://github.com/OP-TEE/optee_os/pulls?q=is%3Apr+is%3Amerged+base%3Amaster+merged%3… [all …]
|
| /optee_os/lib/libutee/include/ |
| H A D | elf_common.h | 1 /* SPDX-License-Identifier: BSD-2-Clause */ 2 /*- 45 * next word boundary. Then comes n_descsz bytes of descriptor, again 57 * The header for GNU-style hash sections. 105 #define ELFCLASS32 1 /* 32-bit architecture. */ 106 #define ELFCLASS64 2 /* 64-bit architecture. */ 110 #define ELFDATA2LSB 1 /* 2's complement little-endian. */ 111 #define ELFDATA2MSB 2 /* 2's complement big-endian. */ 115 #define ELFOSABI_HPUX 1 /* HP-UX operating system */ 117 #define ELFOSABI_LINUX 3 /* GNU/Linux */ [all …]
|