mbox series

[0/1] arm-bsp/trusted-firmware-a: Reserve OP-TEE memory from NWd on N1SDP

Message ID 20230726151725.1231013-1-adam.johnston@arm.com
Headers show
Series arm-bsp/trusted-firmware-a: Reserve OP-TEE memory from NWd on N1SDP | expand

Message

Adam Johnston July 26, 2023, 3:17 p.m. UTC
From: Adam Johnston <adam.johnston@arm.com>

The physical memory which is used to run OP-TEE on the N1SDP is known
to the secure world via TOS_FW_CONFIG, but it may not be known to the
normal world.

As a precaution, explicitly reserve this memory via NT_FW_CONFIG to
prevent the normal world from using it. This is not required on most
platforms as the Trusted OS is run from secure RAM.

Adam Johnston (1):
  arm-bsp/trusted-firmware-a: Reserve OP-TEE memory from NWd on N1SDP

 .../0001-Reserve-OP-TEE-memory-from-nwd.patch | 41 +++++++++++++++++++
 .../trusted-firmware-a-n1sdp.inc              |  6 +++
 2 files changed, 47 insertions(+)
 create mode 100644 meta-arm-bsp/recipes-bsp/trusted-firmware-a/files/n1sdp/0001-Reserve-OP-TEE-memory-from-nwd.patch

Comments

Jon Mason July 27, 2023, 3:29 a.m. UTC | #1
On Wed, 26 Jul 2023 16:17:24 +0100, adam.johnston@arm.com wrote:
> From: Adam Johnston <adam.johnston@arm.com>
> 
> The physical memory which is used to run OP-TEE on the N1SDP is known
> to the secure world via TOS_FW_CONFIG, but it may not be known to the
> normal world.
> 
> As a precaution, explicitly reserve this memory via NT_FW_CONFIG to
> prevent the normal world from using it. This is not required on most
> platforms as the Trusted OS is run from secure RAM.
> 
> [...]

Applied, thanks!

[1/1] arm-bsp/trusted-firmware-a: Reserve OP-TEE memory from NWd on N1SDP
      commit: 308e5d7145f2a1295283db445970dd181ecd67b3

Best regards,
Adam Johnston July 27, 2023, 8:03 a.m. UTC | #2
Can this fix be backported to mickledore please?

Thanks and Regards

Adam

-----Original Message-----
From: Jon Mason <jdmason@kudzu.us> 
Sent: Thursday, July 27, 2023 4:29 AM
To: meta-arm@lists.yoctoproject.org; Ross Burton <Ross.Burton@arm.com>; Adam Johnston <Adam.Johnston@arm.com>
Cc: nd <nd@arm.com>
Subject: Re: [PATCH 0/1] arm-bsp/trusted-firmware-a: Reserve OP-TEE memory from NWd on N1SDP


On Wed, 26 Jul 2023 16:17:24 +0100, adam.johnston@arm.com wrote:
> From: Adam Johnston <adam.johnston@arm.com>
> 
> The physical memory which is used to run OP-TEE on the N1SDP is known 
> to the secure world via TOS_FW_CONFIG, but it may not be known to the 
> normal world.
> 
> As a precaution, explicitly reserve this memory via NT_FW_CONFIG to 
> prevent the normal world from using it. This is not required on most 
> platforms as the Trusted OS is run from secure RAM.
> 
> [...]

Applied, thanks!

[1/1] arm-bsp/trusted-firmware-a: Reserve OP-TEE memory from NWd on N1SDP
      commit: 308e5d7145f2a1295283db445970dd181ecd67b3

Best regards,
--
Jon Mason <jon.mason@arm.com>