From patchwork Fri Apr 22 17:38:34 2022 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Sean Anderson X-Patchwork-Id: 1621046 Return-Path: X-Original-To: incoming@patchwork.ozlabs.org Delivered-To: patchwork-incoming@bilbo.ozlabs.org Authentication-Results: bilbo.ozlabs.org; dkim=pass (2048-bit key; unprotected) header.d=seco.com header.i=@seco.com header.a=rsa-sha256 header.s=selector1 header.b=NzXD0enD; dkim-atps=neutral Authentication-Results: ozlabs.org; spf=pass (sender SPF authorized) smtp.mailfrom=lists.denx.de (client-ip=85.214.62.61; helo=phobos.denx.de; envelope-from=u-boot-bounces@lists.denx.de; receiver=) Received: from phobos.denx.de (phobos.denx.de [85.214.62.61]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits)) (No client certificate requested) by bilbo.ozlabs.org (Postfix) with ESMTPS id 4KlM8p2fsjz9s0w for ; Sat, 23 Apr 2022 03:39:06 +1000 (AEST) Received: from h2850616.stratoserver.net (localhost [IPv6:::1]) by phobos.denx.de (Postfix) with ESMTP id B642483DC8; Fri, 22 Apr 2022 19:38:58 +0200 (CEST) Authentication-Results: phobos.denx.de; dmarc=pass (p=reject dis=none) header.from=seco.com Authentication-Results: phobos.denx.de; spf=pass smtp.mailfrom=u-boot-bounces@lists.denx.de Authentication-Results: phobos.denx.de; dkim=pass (2048-bit key; unprotected) header.d=seco.com header.i=@seco.com header.b="NzXD0enD"; dkim-atps=neutral Received: by phobos.denx.de (Postfix, from userid 109) id 9469F83DC8; Fri, 22 Apr 2022 19:38:56 +0200 (CEST) X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on phobos.denx.de X-Spam-Level: X-Spam-Status: No, score=-2.1 required=5.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,SPF_HELO_PASS,SPF_PASS autolearn=ham autolearn_force=no version=3.4.2 Received: from EUR05-AM6-obe.outbound.protection.outlook.com (mail-am6eur05on20608.outbound.protection.outlook.com [IPv6:2a01:111:f400:7e1b::608]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by phobos.denx.de (Postfix) with ESMTPS id 70A4F81D4B for ; Fri, 22 Apr 2022 19:38:53 +0200 (CEST) Authentication-Results: phobos.denx.de; dmarc=pass (p=reject dis=none) header.from=seco.com Authentication-Results: phobos.denx.de; spf=pass smtp.mailfrom=sean.anderson@seco.com ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=jp1Fu11KzlYwy7cDg/Szk/mN0WfjyMD9uJ8XQZC07D2p0ouwAqKCft6QJA63KPQBcm9BucdUGmKz3vCvk2GLFiSx48OZuuAby/NUttWiBe9ZvjXC+uRS3Lsg6o+zjCGD47qbzu9nvM+stBPzt/2VeOkpTAKmiIua2N1AlWVAQUNZRG0a8l6z3fdZOSeJJzrZneNDR7yji5LL4471WVsdhEB8kP12LhID8qs8EPbPj6JrlwxOmCroTxU5POhwmVvM1TTAOrd2lr+6tCjsUuK2F/zJPdOMlouTQuPkcQmPVdof8nYwiyqJ1LmaskL/z86N/KdN2jMhC5S63CoWo0147Q== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=TI2noTXdc4hEBB8D4fBXN3g9/Sxjz07hgTmCqu4fhI0=; b=kL8ucQLR+0q8B1fAX41s6LAX5ZkB3iJ3Ep4U6Ip4yrlSZk5ixQpYKQYPiyoyIToWYem5G4WhnKBcLuJYuc9Wrvop0WK4YQh6y0uCm7fkFWju2o+grL/GIcVDjHzXQKbEPgqqzlvsPsd4yByhTnMSityl9ectpGB7vS8Uei1rIX3M49XFrVGPU+lGxq9CHvf0F1UQAYmpLrMlUBXFXxyOGsqnXShhk9mAx5JyaZgPQLEfgaQbB86ClFVMRq9hsrE8LoI0LFZIJcamYlkLTjfqK02PIuyfOalCA/uoVQg+3tB8VtU0q+von+SR68T6/wDi3n0k0ONkUwQmiLpp7n5mrA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=seco.com; dmarc=pass action=none header.from=seco.com; dkim=pass header.d=seco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=seco.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=TI2noTXdc4hEBB8D4fBXN3g9/Sxjz07hgTmCqu4fhI0=; b=NzXD0enD76DVNn3sAC9Gdt782jk9MM4HmQy2EE5ZEIgo1WIJCMMtTCBTg+qecfVV8lsltTak4FUwe5Y1ii9hkyTfdqcfqoTvc36vDVS+p48A8LrOxNZEWalYxZiFcYgZc53Ev1N8AhVYMwkD38gLDGPlQfsxeqQHDRYZ+E97XLSU9erqBzY1pS3icuNlQsL//NOGYLwaJr7fPNbyDYHrDcgATgrK+V7qEDbwrOn8CMcflREjxCkK/zG3TeUO3PddnZYgWiASxW4dO9uy77jPuLDWD8FtsYm+51CV2Y16PJhvK7fzz85UW5ZIEYXv42yMjofbDTenmi9QDj4H7mStSg== Authentication-Results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=seco.com; Received: from DB7PR03MB4972.eurprd03.prod.outlook.com (2603:10a6:10:7d::22) by PAXPR03MB7806.eurprd03.prod.outlook.com (2603:10a6:102:201::19) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5186.15; Fri, 22 Apr 2022 17:38:51 +0000 Received: from DB7PR03MB4972.eurprd03.prod.outlook.com ([fe80::714d:2b6:a995:51bd]) by DB7PR03MB4972.eurprd03.prod.outlook.com ([fe80::714d:2b6:a995:51bd%4]) with mapi id 15.20.5186.015; Fri, 22 Apr 2022 17:38:51 +0000 From: Sean Anderson To: Joe Hershberger , Ramon Fried , u-boot@lists.denx.de Cc: Simon Glass , Priyanka Jain , York Sun , Sean Anderson , Alexandru Gagniuc , Heinrich Schuchardt , Michal Simek Subject: [PATCH v2 0/6] net: fm: Verify Fman microcode Date: Fri, 22 Apr 2022 13:38:34 -0400 Message-Id: <20220422173840.2260582-1-sean.anderson@seco.com> X-Mailer: git-send-email 2.35.1.1320.gc452695387.dirty X-ClientProxiedBy: MN2PR18CA0009.namprd18.prod.outlook.com (2603:10b6:208:23c::14) To DB7PR03MB4972.eurprd03.prod.outlook.com (2603:10a6:10:7d::22) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-Office365-Filtering-Correlation-Id: 8fea5646-9967-4d15-4f8a-08da2486f6a1 X-MS-TrafficTypeDiagnostic: PAXPR03MB7806:EE_ X-Microsoft-Antispam-PRVS: X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:DB7PR03MB4972.eurprd03.prod.outlook.com; PTR:; CAT:NONE; SFS:(13230001)(366004)(83380400001)(966005)(6486002)(5660300002)(38350700002)(52116002)(2906002)(86362001)(15650500001)(6666004)(26005)(6512007)(8936002)(6506007)(498600001)(186003)(1076003)(66946007)(66476007)(8676002)(66556008)(4326008)(2616005)(38100700002)(110136005)(44832011)(54906003)(36756003); DIR:OUT; SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: xZ+pNGEPWXfw+Np0i4PQCgYpw83yD7oNQVSv32ia/gBofmfJHIqabMUi6XIleZgYQSm5683sBfzZstdsxTWFYJdiWXhNevSKH21M9gcKR6lNHwtHsEWPxIOB2rOanxMsfuy4DSlzZQDb7VHGvpijqGlIarrg0OCiec+MV60HRCY+NhBi8gKRMWPUry3Sd/bTeCPQj8GDUjhS0N+eXRKoqK9VdVw91RuAzH4FCqhKZ7LpeewnjlpVXnqLYsb4V61l0ScQvHBXVLzGzYqcR4Bq/mQ0Rxc7f2jZgG82BKqXGXSkD/dqm/7oeDwbqbI0JScZpNJ0oeIl31RxCPz1qu4BY35e0nrCyJ4+hyN1X1TB/0a0J5ZhFqiqpKG3UcXLugpeQujVsQu55tO4Z0wkynapDvDuSim5OLCkHRFJnYWYRr9xlmMjz+m6jxyvNCHO58mg7IejbKkO5Chh2LKbd3hcZnB2yq7rTuHPtmmPzr37lL/sssCv65t+tMPBLRM24QlZ5IgAEFjaIejV9JTvwoALQNDa7wgyVPqBS333DM/5ZkjiXu96Ir/Bjn5ATZLvRFj9IbKIO8sADP12F3i3EOzzCUo5bUE1MjuzH3IKBuTcNHXwP8kPMMVvn45E04G/OEExicAlfkCAkbzMGlXazbF96uQm9POjfwMgLeuf0G2E4X+u5/0hUi2sUPRUlFknk26xgvRUxwSFvyEdYbMHMaN44RmgpM6qG5epUwVpNHqmvOp4YrRtf6kIgYNWkFnKq7psqYgisL4UfaBJXxWFfUhBXB1f4IIwQGyBBvFqiDMQb1jgAFIjfOUnHerOdA51DEUQHMG297kFsjS/h/k2Q7JHxfwZ7VJRwCkynz7OCFWtGoRPLcTACZhBALITDLl6X7+sh5M8CfvJaaevL/AND2BeYP8Mlb94C4asxZCydXxHUIOtcOTp8BNacaHkg/lZBh4BLObdFKalXlCsA7OKmR+BJhsIDwEi6usA49W3exfCwCMdA4Oh9oNlaWwV80vG3HR4b/eHaS8MFirmGBUnWgkUJLdhUMb+c2TADSFI6grcgGwDMJwsDimtYUjyDDcQfFKowLggmCSc2r6if6sNXwMuyIW88L90ZM0i0OyV6d+U1R2Bma3VtozBYhd4bYiNjYOg6rY68IEj2fUCGmbOHVDL6ozHM2kGKllxlk8BERJQFDAUJahV1XvMzdob6m8KbuhqEE93+hUWk2BWjk53TUb/6iWMblsYs2iRiBtQp5bWck1ZxYhnrGzmNZl6ypkauza9Yxb1Ww4rpZPhba8CnTQScXhncp3Au2iVJ0MseXhZTE46/VAHsNcGAba5AbLwAu/Kr4CQJnWnU3dNULChOu5DI35Q7WbQ4N45tug97rYX4kO8NsdgY7BKuDoPRRoeittE40yl4CK96CZ61nXEj1ziCQrjuXSE9mBGvj0wGF43oMfYDypf0YxUbexEJyRma5WoOHv0unlbf4HSYaOnlWSvG+Yi7qyAN9EPQPiaHWhM2S1Yyh7oGfYYzKM7U5gEPgWEPSnTLhMvG62Uj8PzqcMCbGH3EbTg/v4w2PHO+PHmHK4RyP268u529TLb1Oa8IX4xzx4MHHNg5keW1v9zNeP3cfTbBS6Z5zOZg8fPyp7h0rkrzERzp+12PK5myvFxIKJi9s9xzjPvLNy+1JABZEhfAEvCCcvniewYWGCg4ZBDwu5iCqEKuo5n77Hr9JJgWDH/nSiEEnL6E6e7/co041UU9bOPptkABWdXGfqUW9UkuTs= X-OriginatorOrg: seco.com X-MS-Exchange-CrossTenant-Network-Message-Id: 8fea5646-9967-4d15-4f8a-08da2486f6a1 X-MS-Exchange-CrossTenant-AuthSource: DB7PR03MB4972.eurprd03.prod.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 22 Apr 2022 17:38:50.9580 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: bebe97c3-6438-442e-ade3-ff17aa50e733 X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: 2gbS8q7kDF0NK3o/SuE5qsWYdKfYZFq5854KqlH3UNmrBiptCgQvEICRH/tPngUpPIefTnNV17R7mayUpbwrAQ== X-MS-Exchange-Transport-CrossTenantHeadersStamped: PAXPR03MB7806 X-BeenThere: u-boot@lists.denx.de X-Mailman-Version: 2.1.39 Precedence: list List-Id: U-Boot discussion List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: u-boot-bounces@lists.denx.de Sender: "U-Boot" X-Virus-Scanned: clamav-milter 0.103.5 at phobos.denx.de X-Virus-Status: Clean Surprisingly, Fman microcode does not seem to be verified. This series aims to rectify this by introducing an optional FIT wrapper. This wrapper is made mandatory if FIT_SIGNATURE is enabled. NXP boards do not use this config, so the microcode will remain unverified for them. This is OK, since we do not want to break existing systems. This series depends on [1]. There is no logical dependency, but they modify adjacent #includes, so the past patch will not apply cleanly unless that series is applied. [1] https://lore.kernel.org/u-boot/20220422173032.2259019-1-sean.anderson@seco.com/ Changes in v2: - Document helpers - Split off Fman microcode verification patches into their own series - Split helper refactoring into a patch adding the helpers and one patch per subsystem. Sean Anderson (6): ARMv8/sec_firmware: Remove SEC_FIRMWARE_FIT_CNF_NAME image: fit: Add some helpers for getting data ARMv8/sec_firmware: Convert to use fit_get_data_conf_prop cmd: fpga: Convert to use fit_get_data_node net: Convert fit verification to use fit_get_data_* net: fm: Add support for FIT firmware arch/arm/cpu/armv8/sec_firmware.c | 52 ++-------------------- boot/image-fit.c | 37 ++++++++++++++++ cmd/fpga.c | 24 +++------- drivers/net/fm/fm.c | 18 ++++++++ drivers/net/fsl-mc/mc.c | 30 ++----------- drivers/net/pfe_eth/pfe_firmware.c | 40 +---------------- include/image.h | 70 ++++++++++++++++++++++++++++++ 7 files changed, 139 insertions(+), 132 deletions(-)