]> git.baikalelectronics.ru Git - uboot.git/commit
arm: mach-k3: security: separate out validating binary logic
authorManorit Chawdhry <m-chawdhry@ti.com>
Thu, 18 May 2023 07:14:17 +0000 (12:44 +0530)
committerTom Rini <trini@konsulko.com>
Tue, 30 May 2023 19:13:44 +0000 (15:13 -0400)
commitfd99350e073d97249d16df8bca3800c636b7197f
tree88f79b1f04aa3830571cd2189fb3c1c30b4dd681
parentc451bac6d37f13923539c110845edd21ffa7b5da
arm: mach-k3: security: separate out validating binary logic

K3 GP devices allows booting the secure binaries on them by bypassing
the x509 header on them.

ATF and OPTEE firewalling required the rproc_load to be called before
authentication. This change caused the failure for GP devices that
strips off the headers. The boot vector had been set before the headers
were stripped off causing the runtime stripping to fail and stripping
becoming in-effective.

Separate out the secure binary check on GP/HS devices so that the
boot_vector could be stripped before calling rproc_load. This allows
keeping the authentication later when the cluster is on along with
allowing the stripping of the binaries in case of gp devices.

Fixes: 521811ce14bf ("arm: mach-k3: common: re-locate authentication for atf/optee")
Signed-off-by: Manorit Chawdhry <m-chawdhry@ti.com>
arch/arm/mach-k3/common.c
arch/arm/mach-k3/common.h
arch/arm/mach-k3/security.c