Cover Letter Detail
Show a cover letter.
GET /api/covers/2147592/?format=api
{ "id": 2147592, "url": "http://patchwork.ozlabs.org/api/covers/2147592/?format=api", "web_url": "http://patchwork.ozlabs.org/project/uboot/cover/20251009115846.897186-1-anshuld@ti.com/", "project": { "id": 18, "url": "http://patchwork.ozlabs.org/api/projects/18/?format=api", "name": "U-Boot", "link_name": "uboot", "list_id": "u-boot.lists.denx.de", "list_email": "u-boot@lists.denx.de", "web_url": null, "scm_url": null, "webscm_url": null, "list_archive_url": "", "list_archive_url_format": "", "commit_url_format": "" }, "msgid": "<20251009115846.897186-1-anshuld@ti.com>", "list_archive_url": null, "date": "2025-10-09T11:58:42", "name": "[v2,0/3] Add support for secure falcon mode: disable args file", "submitter": { "id": 90324, "url": "http://patchwork.ozlabs.org/api/people/90324/?format=api", "name": "Anshul Dalal", "email": "anshuld@ti.com" }, "mbox": "http://patchwork.ozlabs.org/project/uboot/cover/20251009115846.897186-1-anshuld@ti.com/mbox/", "series": [ { "id": 476899, "url": "http://patchwork.ozlabs.org/api/series/476899/?format=api", "web_url": "http://patchwork.ozlabs.org/project/uboot/list/?series=476899", "date": "2025-10-09T11:58:42", "name": "Add support for secure falcon mode: disable args file", "version": 2, "mbox": "http://patchwork.ozlabs.org/series/476899/mbox/" } ], "comments": "http://patchwork.ozlabs.org/api/covers/2147592/comments/", "headers": { "Return-Path": "<u-boot-bounces@lists.denx.de>", "X-Original-To": "incoming@patchwork.ozlabs.org", "Delivered-To": "patchwork-incoming@legolas.ozlabs.org", "Authentication-Results": [ "legolas.ozlabs.org;\n\tdkim=pass (1024-bit key;\n unprotected) header.d=ti.com header.i=@ti.com header.a=rsa-sha256\n header.s=ti-com-17Q1 header.b=O/GStfls;\n\tdkim-atps=neutral", "legolas.ozlabs.org;\n spf=pass (sender SPF authorized) smtp.mailfrom=lists.denx.de\n (client-ip=85.214.62.61; helo=phobos.denx.de;\n envelope-from=u-boot-bounces@lists.denx.de; receiver=patchwork.ozlabs.org)", "phobos.denx.de;\n dmarc=pass (p=quarantine dis=none) header.from=ti.com", "phobos.denx.de;\n spf=pass smtp.mailfrom=u-boot-bounces@lists.denx.de", "phobos.denx.de;\n\tdkim=pass (1024-bit key;\n unprotected) header.d=ti.com header.i=@ti.com header.b=\"O/GStfls\";\n\tdkim-atps=neutral", "phobos.denx.de;\n dmarc=pass (p=quarantine dis=none) header.from=ti.com", "phobos.denx.de; spf=pass smtp.mailfrom=anshuld@ti.com" ], "Received": [ "from phobos.denx.de (phobos.denx.de [85.214.62.61])\n\t(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n\t key-exchange X25519 server-signature ECDSA (secp384r1))\n\t(No client certificate requested)\n\tby legolas.ozlabs.org (Postfix) with ESMTPS id 4cj7h56B70z1yGS\n\tfor <incoming@patchwork.ozlabs.org>; Thu, 9 Oct 2025 22:59:01 +1100 (AEDT)", "from h2850616.stratoserver.net (localhost [IPv6:::1])\n\tby phobos.denx.de (Postfix) with ESMTP id 1F03684497;\n\tThu, 9 Oct 2025 13:58:59 +0200 (CEST)", "by phobos.denx.de (Postfix, from userid 109)\n id 3B40E844D2; Thu, 9 Oct 2025 13:58:57 +0200 (CEST)", "from lelvem-ot02.ext.ti.com (lelvem-ot02.ext.ti.com [198.47.23.235])\n (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256\n bits)) (No client certificate requested)\n by phobos.denx.de (Postfix) with ESMTPS id 93FAC84459\n for <u-boot@lists.denx.de>; Thu, 9 Oct 2025 13:58:54 +0200 (CEST)", "from lelvem-sh01.itg.ti.com ([10.180.77.71])\n by lelvem-ot02.ext.ti.com (8.15.2/8.15.2) with ESMTP id 599BwoH0527505;\n Thu, 9 Oct 2025 06:58:50 -0500", "from DFLE204.ent.ti.com (dfle204.ent.ti.com [10.64.6.62])\n by lelvem-sh01.itg.ti.com (8.18.1/8.18.1) with ESMTPS id 599BwoMv281684\n (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=FAIL);\n Thu, 9 Oct 2025 06:58:50 -0500", "from DFLE205.ent.ti.com (10.64.6.63) by DFLE204.ent.ti.com\n (10.64.6.62) with Microsoft SMTP Server (version=TLS1_2,\n cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.2562.20; Thu, 9 Oct\n 2025 06:58:50 -0500", "from lelvem-mr06.itg.ti.com (10.180.75.8) by DFLE205.ent.ti.com\n (10.64.6.63) with Microsoft SMTP Server (version=TLS1_2,\n cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.2562.20 via Frontend\n Transport; Thu, 9 Oct 2025 06:58:50 -0500", "from localhost (dhcp-172-24-233-105.dhcp.ti.com [172.24.233.105])\n by lelvem-mr06.itg.ti.com (8.18.1/8.18.1) with ESMTP id 599BwmRS4171921;\n Thu, 9 Oct 2025 06:58:49 -0500" ], "X-Spam-Checker-Version": "SpamAssassin 3.4.2 (2018-09-13) on phobos.denx.de", "X-Spam-Level": "", "X-Spam-Status": "No, score=-2.5 required=5.0 tests=BAYES_00,DKIMWL_WL_HIGH,\n DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,\n RCVD_IN_DNSWL_BLOCKED,RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,\n RCVD_IN_VALIDITY_RPBL_BLOCKED,SPF_HELO_PASS,SPF_PASS autolearn=ham\n autolearn_force=no version=3.4.2", "DKIM-Signature": "v=1; a=rsa-sha256; c=relaxed/relaxed; d=ti.com;\n s=ti-com-17Q1; t=1760011130;\n bh=vCE4eMCn30KZVXdKbIrHaygNaSSpgmwAizb7lIulYoo=;\n h=From:To:CC:Subject:Date;\n b=O/GStflsYn0jKNa9E293WWFkMTaVoZcBWRodAGDW7X1yDBH05LCAahw+ll38Xcbzm\n HrceRR+C1SrLISfMgWabFQKK3pPZpW5/nxflzcpURScQ0hpgwj7cLfAaN5lygvgsq8\n TaypQuFdX8+LUaGmPFyLA1fobUpT0KSbW4KGS9zI=", "From": "Anshul Dalal <anshuld@ti.com>", "To": "<u-boot@lists.denx.de>", "CC": "Anshul Dalal <anshuld@ti.com>, <vigneshr@ti.com>, <trini@konsulko.com>,\n <afd@ti.com>, <m-chawdhry@ti.com>, <n-francis@ti.com>, <b-liu@ti.com>,\n <nm@ti.com>, <bb@ti.com>, <kever.yang@rock-chips.com>,\n <hl@rock-chips.com>, <tim@feathertop.org>,\n <marek.vasut+renesas@mailbox.org>", "Subject": "[PATCH v2 0/3] Add support for secure falcon mode: disable args file", "Date": "Thu, 9 Oct 2025 17:28:42 +0530", "Message-ID": "<20251009115846.897186-1-anshuld@ti.com>", "X-Mailer": "git-send-email 2.51.0", "MIME-Version": "1.0", "Content-Transfer-Encoding": "8bit", "Content-Type": "text/plain", "X-C2ProcessedOrg": "333ef613-75bf-4e12-a4b1-8e3623f5dcea", "X-BeenThere": "u-boot@lists.denx.de", "X-Mailman-Version": "2.1.39", "Precedence": "list", "List-Id": "U-Boot discussion <u-boot.lists.denx.de>", "List-Unsubscribe": "<https://lists.denx.de/options/u-boot>,\n <mailto:u-boot-request@lists.denx.de?subject=unsubscribe>", "List-Archive": "<https://lists.denx.de/pipermail/u-boot/>", "List-Post": "<mailto:u-boot@lists.denx.de>", "List-Help": "<mailto:u-boot-request@lists.denx.de?subject=help>", "List-Subscribe": "<https://lists.denx.de/listinfo/u-boot>,\n <mailto:u-boot-request@lists.denx.de?subject=subscribe>", "Errors-To": "u-boot-bounces@lists.denx.de", "Sender": "\"U-Boot\" <u-boot-bounces@lists.denx.de>", "X-Virus-Scanned": "clamav-milter 0.103.8 at phobos.denx.de", "X-Virus-Status": "Clean" }, "content": "Hi all,\n\nContinuing from the last series[1], this patch series addresses the requirement\nto disable the args file in falcon mode.\n\nThe args file is used in falcon mode for loading the device-tree for the kernel.\nHowever in secure falcon mode, the expected payload is a FIT containing a signed\ndevice-tree and kernel image. Thus removing the need to load the extra args\nfile in the first place. Also, loading the extra file without any authentication\nmechanism exposes an attack vector and should therefore be disabled to keep the\nboot secure.\n\nThis patch set builds on the last few to first optionally allow for loading the\nargs file in non-secure falcon boot flow [1/3] and then disable them altogether\nin the next patch [2/3] for secure falcon mode.\n\n[1]: https://lore.kernel.org/u-boot/20251006101057.4172248-1-anshuld@ti.com/\nDepends on: https://lore.kernel.org/u-boot/20251006101057.4172248-1-anshuld@ti.com/\n\nRegards,\nAnshul\n---\nChanges in v2:\n - Address Tom's comments on [1/3]: https://lore.kernel.org/u-boot/20251008163820.GC298503@bill-the-cat/\n - Add call to spl_fixup_fdt with OS_BOOT_ARGS unset in [1/3]\n - Pick R-by tags on [2/3]\n - Add patch [3/3] to the series to fix the args being unset in falcon mode on\n certain boot modes\n\nv1: https://lore.kernel.org/u-boot/20251008113605.1055826-1-anshuld@ti.com/\n---\nAnshul Dalal (3):\n spl: make args file optional in falcon mode\n spl: prevent loading args file in secure falcon mode\n spl: set fdt address as spl_image arg in falcon mode\n\n common/spl/Kconfig | 22 +++++++++++++++-------\n common/spl/spl.c | 9 +++++++--\n common/spl/spl_ext.c | 4 ++++\n common/spl/spl_fat.c | 5 +++++\n common/spl/spl_nand.c | 5 ++++-\n common/spl/spl_nor.c | 4 ----\n common/spl/spl_spi.c | 5 +++++\n common/spl/spl_ubi.c | 4 ++++\n common/spl/spl_xip.c | 1 -\n include/system-constants.h | 2 +-\n 10 files changed, 45 insertions(+), 16 deletions(-)" }