{"id":2230947,"url":"http://patchwork.ozlabs.org/api/1.2/patches/2230947/?format=json","web_url":"http://patchwork.ozlabs.org/project/uboot/patch/20260430084414.1354490-21-richard.genoud@bootlin.com/","project":{"id":18,"url":"http://patchwork.ozlabs.org/api/1.2/projects/18/?format=json","name":"U-Boot","link_name":"uboot","list_id":"u-boot.lists.denx.de","list_email":"u-boot@lists.denx.de","web_url":null,"scm_url":null,"webscm_url":null,"list_archive_url":"","list_archive_url_format":"","commit_url_format":""},"msgid":"<20260430084414.1354490-21-richard.genoud@bootlin.com>","list_archive_url":null,"date":"2026-04-30T08:44:13","name":"[20/20] arm: dts: k3-j7200: Extend firewall for ATF region to TIFS","commit_ref":null,"pull_url":null,"state":"new","archived":false,"hash":"e8155e885e2d4ecb551c9640e0be57aea70b4aa7","submitter":{"id":88519,"url":"http://patchwork.ozlabs.org/api/1.2/people/88519/?format=json","name":"Richard Genoud (TI)","email":"richard.genoud@bootlin.com"},"delegate":{"id":3651,"url":"http://patchwork.ozlabs.org/api/1.2/users/3651/?format=json","username":"trini","first_name":"Tom","last_name":"Rini","email":"trini@ti.com"},"mbox":"http://patchwork.ozlabs.org/project/uboot/patch/20260430084414.1354490-21-richard.genoud@bootlin.com/mbox/","series":[{"id":502237,"url":"http://patchwork.ozlabs.org/api/1.2/series/502237/?format=json","web_url":"http://patchwork.ozlabs.org/project/uboot/list/?series=502237","date":"2026-04-30T08:43:53","name":"Introduce resume for J7xx SoCs","version":1,"mbox":"http://patchwork.ozlabs.org/series/502237/mbox/"}],"comments":"http://patchwork.ozlabs.org/api/patches/2230947/comments/","check":"pending","checks":"http://patchwork.ozlabs.org/api/patches/2230947/checks/","tags":{},"related":[],"headers":{"Return-Path":"","X-Original-To":"incoming@patchwork.ozlabs.org","Delivered-To":"patchwork-incoming@legolas.ozlabs.org","Authentication-Results":["legolas.ozlabs.org;\n\tdkim=pass (2048-bit key;\n unprotected) header.d=bootlin.com header.i=@bootlin.com header.a=rsa-sha256\n header.s=dkim header.b=JBxVeAkJ;\n\tdkim-atps=neutral","legolas.ozlabs.org;\n spf=pass (sender SPF authorized) smtp.mailfrom=lists.denx.de\n (client-ip=2a01:238:438b:c500:173d:9f52:ddab:ee01; helo=phobos.denx.de;\n envelope-from=u-boot-bounces@lists.denx.de; receiver=patchwork.ozlabs.org)","phobos.denx.de;\n dmarc=pass (p=reject dis=none) header.from=bootlin.com","phobos.denx.de;\n spf=pass smtp.mailfrom=u-boot-bounces@lists.denx.de","phobos.denx.de;\n\tdkim=pass (2048-bit key;\n unprotected) header.d=bootlin.com header.i=@bootlin.com header.b=\"JBxVeAkJ\";\n\tdkim-atps=neutral","phobos.denx.de;\n dmarc=pass (p=reject dis=none) header.from=bootlin.com","phobos.denx.de;\n spf=pass smtp.mailfrom=richard.genoud@bootlin.com"],"Received":["from phobos.denx.de (phobos.denx.de\n [IPv6:2a01:238:438b:c500:173d:9f52:ddab:ee01])\n\t(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n\t key-exchange x25519)\n\t(No client certificate requested)\n\tby legolas.ozlabs.org (Postfix) with ESMTPS id 4g5nqR4JT2z1yHZ\n\tfor ; Thu, 30 Apr 2026 18:47:31 +1000 (AEST)","from h2850616.stratoserver.net (localhost [IPv6:::1])\n\tby phobos.denx.de (Postfix) with ESMTP id A25D78468E;\n\tThu, 30 Apr 2026 10:45:23 +0200 (CEST)","by phobos.denx.de (Postfix, from userid 109)\n id 66252846E9; Thu, 30 Apr 2026 10:45:22 +0200 (CEST)","from smtpout-04.galae.net (smtpout-04.galae.net [185.171.202.116])\n (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits))\n (No client certificate requested)\n by phobos.denx.de (Postfix) with ESMTPS id 5CDD18466B\n for ; Thu, 30 Apr 2026 10:45:20 +0200 (CEST)","from smtpout-01.galae.net (smtpout-01.galae.net [212.83.139.233])\n by smtpout-04.galae.net (Postfix) with ESMTPS id 8DE1BC5CD62;\n Thu, 30 Apr 2026 08:46:04 +0000 (UTC)","from mail.galae.net (mail.galae.net [212.83.136.155])\n by smtpout-01.galae.net (Postfix) with ESMTPS id 16B6560495;\n Thu, 30 Apr 2026 08:45:20 +0000 (UTC)","from [127.0.0.1] (localhost [127.0.0.1]) by localhost (Mailerdaemon)\n with ESMTPSA id C0B8F1072B7B6;\n Thu, 30 Apr 2026 10:45:16 +0200 (CEST)"],"X-Spam-Checker-Version":"SpamAssassin 3.4.2 (2018-09-13) on phobos.denx.de","X-Spam-Level":"","X-Spam-Status":"No, score=-2.1 required=5.0 tests=BAYES_00,DKIM_SIGNED,\n DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,RCVD_IN_DNSWL_BLOCKED,\n SPF_HELO_PASS,SPF_PASS autolearn=ham autolearn_force=no version=3.4.2","DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed; d=bootlin.com; s=dkim;\n t=1777538719; h=from:subject:date:message-id:to:cc:mime-version:\n content-transfer-encoding:in-reply-to:references;\n bh=lj4VIh/Yag1EdNtO913bv/E0tZgKxdFAuP1govJqXx4=;\n b=JBxVeAkJgXCGf7oaiEnUBw9YBagrJt6sZ8To/cUcm6pMR9g6dFNegT3Q+bP5ER3GxSa0+U\n Iw+V11sJafCqEGVFHKR8vWBsV/1rYQ3SU7QeIAlfzijb8t05WCwtWPiSBbYPlrdcONw5kb\n fngg03h5scSI+HT+I55p/M0ZefV4ZxVxmJgIQb46P7xW7Myd74/fYgQBCvGchUxKMl7b1X\n ju9tywY7RBcQwzIZcVvUAFtuv+Zxr2dSzYzbm7ZvQIc6L9EuItzCoBhmduCcLl3DtRSUEq\n JSzTbFPnwBw7P8ayF9E3KJB4leJNokhmbrVx4MDOSxSCGOffSMP6Jm85xrPjyw==","From":"\"Richard Genoud (TI)\" ","To":"Tom Rini , Manorit Chawdhry ,\n Apurva Nandan , \"Andrew F . Davis\" ,\n Vignesh Raghavendra , Bryan Brattlof ,\n Vaishnav Achath , Jayesh Choudhary ,\n Simon Glass , Alper Nebi Yasak ","Cc":"Markus Schneider-Pargmann ,\n Udit Kumar ,\n Abhash Kumar ,\n Thomas Richard ,\n Gregory CLEMENT ,\n Thomas Petazzoni ,\n Richard Genoud , u-boot@lists.denx.de","Subject":"[PATCH 20/20] arm: dts: k3-j7200: Extend firewall for ATF region to\n TIFS","Date":"Thu, 30 Apr 2026 10:44:13 +0200","Message-ID":"<20260430084414.1354490-21-richard.genoud@bootlin.com>","X-Mailer":"git-send-email 2.47.3","In-Reply-To":"<20260430084414.1354490-1-richard.genoud@bootlin.com>","References":"<20260430084414.1354490-1-richard.genoud@bootlin.com>","MIME-Version":"1.0","Content-Transfer-Encoding":"8bit","X-Last-TLS-Session-Version":"TLSv1.3","X-BeenThere":"u-boot@lists.denx.de","X-Mailman-Version":"2.1.39","Precedence":"list","List-Id":"U-Boot discussion ","List-Unsubscribe":",\n ","List-Archive":"","List-Post":"","List-Help":"","List-Subscribe":",\n ","Errors-To":"u-boot-bounces@lists.denx.de","Sender":"\"U-Boot\" ","X-Virus-Scanned":"clamav-milter 0.103.8 at phobos.denx.de","X-Virus-Status":"Clean"},"content":"From: Prasanth Babu Mantena \n\nExtend the access to SRAM region of ATF to TIFS as well. This is\nneeded for TIFS for encryption and decryption of ATF as a part of\nlow power mode sequence. TIFS encrypts the ATF while entering into\nlow power mode and decrypts it back while resuming back.\nSo, giving permissions for TIFS to access this region.\n\nSigned-off-by: Prasanth Babu Mantena \n---\n arch/arm/dts/k3-binman.dtsi | 18 ++++++++++++++++--\n arch/arm/dts/k3-j7200-binman.dtsi | 4 ++--\n arch/arm/dts/k3-security.h | 1 +\n 3 files changed, 19 insertions(+), 4 deletions(-)","diff":"diff --git a/arch/arm/dts/k3-binman.dtsi b/arch/arm/dts/k3-binman.dtsi\nindex 0fd93f9536a2..4ffd8ec9e1c1 100644\n--- a/arch/arm/dts/k3-binman.dtsi\n+++ b/arch/arm/dts/k3-binman.dtsi\n@@ -479,7 +479,21 @@\n \t\tstart_address = <0x0 CONFIG_K3_ATF_LOAD_ADDR>;\n \t\tend_address = <0x0 (CONFIG_K3_ATF_LOAD_ADDR + 0x1ffff)>;\n \t};\n-\tfirewall_armv8_optee_fg: template-8 {\n+\tfirewall_armv8_atf_tifs_fg: template-8 {\n+\t\tcontrol = <(FWCTRL_EN | FWCTRL_LOCK |\n+\t\t\t\t\tFWCTRL_CACHE)>;\n+\t\tpermissions = <((FWPRIVID_ARMV8 << FWPRIVID_SHIFT) |\n+\t\t\t\t\t\tFWPERM_SECURE_PRIV_RWCD |\n+\t\t\t\t\t\tFWPERM_SECURE_USER_RWCD)>,\n+\t\t\t\t\t<((FWPRIVID_TIFS << FWPRIVID_SHIFT) |\n+\t\t\t\t\t\tFWPERM_SECURE_PRIV_RWCD |\n+\t\t\t\t\t\tFWPERM_SECURE_USER_RWCD |\n+\t\t\t\t\t\tFWPERM_NON_SECURE_PRIV_RWCD |\n+\t\t\t\t\t\tFWPERM_NON_SECURE_USER_RWCD)>;\n+\t\tstart_address = <0x0 0x70000000>;\n+\t\tend_address = <0x0 0x7001ffff>;\n+\t};\n+\tfirewall_armv8_optee_fg: template-9 {\n \t\tcontrol = <(FWCTRL_EN | FWCTRL_LOCK |\n \t\t\t\t\tFWCTRL_CACHE)>;\n \t\tpermissions = <((FWPRIVID_ARMV8 << FWPRIVID_SHIFT) |\n@@ -489,7 +503,7 @@\n \t\tend_address = <0x0 (CONFIG_K3_OPTEE_LOAD_ADDR + 0x17fffff)>;\n \t};\n \n-\tti_falcon_template: template-9 {\n+\tti_falcon_template: template-10 {\n \t\tfilename = \"tifalcon.bin\";\n \t\tpad-byte = <0xff>;\n \ndiff --git a/arch/arm/dts/k3-j7200-binman.dtsi b/arch/arm/dts/k3-j7200-binman.dtsi\nindex c2b86339d593..68ce4aa0ff12 100644\n--- a/arch/arm/dts/k3-j7200-binman.dtsi\n+++ b/arch/arm/dts/k3-j7200-binman.dtsi\n@@ -259,7 +259,7 @@\n \n \t\t\t\t\t\tfirewall-4760-1 {\n \t\t\t\t\t\t\t/* nb_slv0__mem0 Foreground Firewall */\n-\t\t\t\t\t\t\tinsert-template = <&firewall_armv8_atf_fg>;\n+\t\t\t\t\t\t\tinsert-template = <&firewall_armv8_atf_tifs_fg>;\n \t\t\t\t\t\t\tid = <4760>;\n \t\t\t\t\t\t\tregion = <1>;\n \t\t\t\t\t\t};\n@@ -272,7 +272,7 @@\n \n \t\t\t\t\t\tfirewall-4761-1 {\n \t\t\t\t\t\t\t/* nb_slv1__mem0 Foreground Firewall */\n-\t\t\t\t\t\t\tinsert-template = <&firewall_armv8_atf_fg>;\n+\t\t\t\t\t\t\tinsert-template = <&firewall_armv8_atf_tifs_fg>;\n \t\t\t\t\t\t\tid = <4761>;\n \t\t\t\t\t\t\tregion = <1>;\n \t\t\t\t\t\t};\ndiff --git a/arch/arm/dts/k3-security.h b/arch/arm/dts/k3-security.h\nindex 33609caa8fb5..3e066bca6ad7 100644\n--- a/arch/arm/dts/k3-security.h\n+++ b/arch/arm/dts/k3-security.h\n@@ -7,6 +7,7 @@\n #define DTS_ARM64_TI_K3_FIREWALL_H\n \n #define FWPRIVID_ALL 0xc3\n+#define FWPRIVID_TIFS 0xca\n #define FWPRIVID_ARMV8 1\n #define FWPRIVID_SHIFT 16\n \n","prefixes":["20/20"]}