From patchwork Tue Aug 16 15:16:01 2022 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Sean Anderson X-Patchwork-Id: 1666899 Return-Path: X-Original-To: incoming@patchwork.ozlabs.org Delivered-To: patchwork-incoming@legolas.ozlabs.org Authentication-Results: legolas.ozlabs.org; spf=pass (sender SPF authorized) smtp.mailfrom=lists.denx.de (client-ip=85.214.62.61; helo=phobos.denx.de; envelope-from=u-boot-bounces@lists.denx.de; receiver=) Authentication-Results: legolas.ozlabs.org; dkim=pass (2048-bit key; unprotected) header.d=seco.com header.i=@seco.com header.a=rsa-sha256 header.s=selector1 header.b=oMPscyVy; dkim-atps=neutral Received: from phobos.denx.de (phobos.denx.de [85.214.62.61]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384)) (No client certificate requested) by legolas.ozlabs.org (Postfix) with ESMTPS id 4M6ZW9265nz1ygF for ; Wed, 17 Aug 2022 01:16:53 +1000 (AEST) Received: from h2850616.stratoserver.net (localhost [IPv6:::1]) by phobos.denx.de (Postfix) with ESMTP id AD8E484934; Tue, 16 Aug 2022 17:16:38 +0200 (CEST) Authentication-Results: phobos.denx.de; dmarc=pass (p=reject dis=none) header.from=seco.com Authentication-Results: phobos.denx.de; spf=pass smtp.mailfrom=u-boot-bounces@lists.denx.de Authentication-Results: phobos.denx.de; dkim=pass (2048-bit key; unprotected) header.d=seco.com header.i=@seco.com header.b="oMPscyVy"; dkim-atps=neutral Received: by phobos.denx.de (Postfix, from userid 109) id CB93283F37; Tue, 16 Aug 2022 17:16:33 +0200 (CEST) X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on phobos.denx.de X-Spam-Level: X-Spam-Status: No, score=-2.1 required=5.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,RCVD_IN_MSPIKE_H2,SPF_HELO_PASS, SPF_PASS,T_SCC_BODY_TEXT_LINE autolearn=ham autolearn_force=no version=3.4.2 Received: from EUR04-DB3-obe.outbound.protection.outlook.com (mail-eopbgr60043.outbound.protection.outlook.com [40.107.6.43]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by phobos.denx.de (Postfix) with ESMTPS id 92DEA83F37 for ; Tue, 16 Aug 2022 17:16:30 +0200 (CEST) Authentication-Results: phobos.denx.de; dmarc=pass (p=reject dis=none) header.from=seco.com Authentication-Results: phobos.denx.de; spf=pass smtp.mailfrom=sean.anderson@seco.com ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=gDPNPeWPWPQZ1VNMXmx+YbyjKE+NBdZPqGHRRNS7lET+jQVrcUWgP3Z5x//kBxGXKIWqhtP277xj7/nz4aAPXsVvmy18GDX+UDcxP6yIHkQPRtOtBSRSLSN0dOYtiIzjG08sTKU6ah+NyBb6e5y0dLzeyooTBBVLzi/T+yd6Fsf4zciwxC1Tdp6SG9stW00ejIgdtR5+siWGpQ76dMi8e98NAn+EEKLQ24wNhzq7nXncs2Jb/VFnj/Ue7/WX4wrJL0il3uTVLvep+PqmND8Pq0JnaO4DSiJRmtXbGtj1t7cirxxZ0tWE8np4FaqCfHCQPyMtJCxU2/Ew/zHzmwwcOA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=TI2noTXdc4hEBB8D4fBXN3g9/Sxjz07hgTmCqu4fhI0=; b=Xg7k57ZSupdgZzjJgAlsmJ9gxemZpAZDc9IdiGMRNowcI3kAvK6yeIEJNb0+c5D64b7rvfF8Q4sTITiILjHM7+TvdVfPmIG2z9jkMuHSWqKy0XnuBw9ixIYR8BnXWuxgFVjLez4yu/ZpJQF75jiSpOGNJWJmsER5FFD1MlaoYXXJ7hhCNQSut0BQ9O3llRwbvRy4fP8vfWW2vPls+XU/fhQFfJ5x2CGepllTmDyjydQhzUDaVa43ssFo/Z0u/UW05AB9MPZjJ+P276elRwfEIg9GjG6mF4w2ZP78KgfrEspJ/Xiy+M5gYBkDv/qvAhfghI7Aplh8KplwizKYtvagFA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=seco.com; dmarc=pass action=none header.from=seco.com; dkim=pass header.d=seco.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=seco.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=TI2noTXdc4hEBB8D4fBXN3g9/Sxjz07hgTmCqu4fhI0=; b=oMPscyVyNK1qmWHeXVRgAorX1k190rztKiCdaHOVM+6rTqUT3oeddFA00ojaxkjE7JVODlsKNco9fG7U5ke9bA9lgLIqSmrq9JHtLIGhHdIprVO7XzgoJwGKXL8POtB1x/Z1sZlTPRKAO2X4EPJp1VLeF0F/J/dDfhZApLw+rDOpuA0Oha9Ff4SYexzbEypxapJ+YdxtaiNJWnGxhBCJGODLVKUqPj5M/NYSBTtXKRGdaMSZGeE5avdAeQcY4YumTKf3uIWZ+p/JbAKjjTRpv4eP8QCCl0Y2vGOPO5uTjSKBiH794NI3ui2mDtNUUtvrxG2SLdYIfYYpu0WD+T+btw== Authentication-Results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=seco.com; Received: from DB7PR03MB4972.eurprd03.prod.outlook.com (2603:10a6:10:7d::22) by VI1PR0302MB2735.eurprd03.prod.outlook.com (2603:10a6:800:e3::14) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5525.11; Tue, 16 Aug 2022 15:16:28 +0000 Received: from DB7PR03MB4972.eurprd03.prod.outlook.com ([fe80::ecaa:a5a9:f0d5:27a2]) by DB7PR03MB4972.eurprd03.prod.outlook.com ([fe80::ecaa:a5a9:f0d5:27a2%4]) with mapi id 15.20.5504.019; Tue, 16 Aug 2022 15:16:28 +0000 From: Sean Anderson To: Peng Fan , u-boot@lists.denx.de Cc: York Sun , Ramon Fried , Joe Hershberger , Simon Glass , Priyanka Jain , Sean Anderson , Alexandru Gagniuc , Heinrich Schuchardt , Michal Simek Subject: [RESEND PATCH v2 0/6] net: fm: Verify Fman microcode Date: Tue, 16 Aug 2022 11:16:01 -0400 Message-Id: <20220816151607.1569660-1-sean.anderson@seco.com> X-Mailer: git-send-email 2.35.1.1320.gc452695387.dirty X-ClientProxiedBy: BL1P221CA0010.NAMP221.PROD.OUTLOOK.COM (2603:10b6:208:2c5::14) To DB7PR03MB4972.eurprd03.prod.outlook.com (2603:10a6:10:7d::22) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-Office365-Filtering-Correlation-Id: ad4d2c0c-80f5-4f99-b99b-08da7f9a4ae7 X-MS-TrafficTypeDiagnostic: VI1PR0302MB2735:EE_ X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:DB7PR03MB4972.eurprd03.prod.outlook.com; PTR:; CAT:NONE; SFS:(13230016)(396003)(346002)(366004)(376002)(136003)(39840400004)(6666004)(478600001)(54906003)(66476007)(6512007)(6506007)(52116002)(966005)(26005)(86362001)(41300700001)(15650500001)(316002)(66946007)(66556008)(7416002)(8676002)(4326008)(36756003)(8936002)(2906002)(2616005)(44832011)(5660300002)(1076003)(38350700002)(6486002)(83380400001)(186003)(38100700002); DIR:OUT; SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: eDCqvBT28+uEpuActDO8ZJKICILKFxQqlJ09KXR43KN/uv9wLDsN10pLvEvylK5P76HHR7oJ0rORBAid9Hj7eKd6zKB/tq9cN4biRgtp8Q+gY49EBujb9rGfEPDVWPsmPkeeeOV7ddh/y3ZIN83lHnREkcQvgs/HRbV1sgJrcXdDe68VEWv28b693+JNkHRAS8u/x8Pb/cJfu068VHHm49vW9cqxPU3CZ/RQsbde5KdF6nxf0MXWFzWAjkBfIEmdojBL41k+EymP/qGwSlqhV9a2T+uTSm0zz2HTzVzT8QMwyqPkxnwSPHVXQ5+lDYJyUbq9ZV6UGjVv6KxWUBcxJSsZlIOjOiFW2eNpgWJWA4yG1JFXBmNBjB9seHD3ctnsilYcRzB5CAeuxuMpYsI6RBvTP/TD7jKgvFPaXi7Was7moc/dtdUPYSryMN8w0/fi4D1a1XEDhZcviiKd5meMeScAU0MX4yIcqF0qOUfW0bObcEfK62sFbRvLLf1GHOmoTpXF+tV48ZeGKFZfbd9g9j1QjjJfJ1gI0PfsK1LQUOLX5ojojbQ+Lt9oVjoNyjQfRxPd/Qiag+y67bxS7D8drMtpCAUBcUZmUCETFodt4zgNcyE0GCCwOnd3GSGNbvfMnhKEil2DGxFcrFMWt5rMZJP7BJ1DkXMuQi2jVltGmGMoo1kiVr4cdXCiIRYMt1pI7D32VaQ199+Nei5mQAIWLFl2cznzJhm+8WkUmcIC8chN2fl8z1tZJzN//8a69udvPNS0EwD4xCvubCoiNUd3xbfyb8IL0YkPkiSKz2uGVuN8NlpKvWftfMdRwbOzqa03/mJBnGw4yyhFyd0W+w1SIG5UsK6DNOzTaWMFqivF7jY242jt3SdYHI6+IPh/8zKK6SXHngpx9GFENts3/hU5BEU1KeXiLsaUhQ9/yRcCvgnKmWp+WbB9Zwd+1qMYkVBy8meMNm2cCGKxIw+4D6jFBxEy/qJVOqG1Lld5g8c4Q80po1hRQcvZAz9n0H0UqD8DG2UmI7XwGnddfE443U/5+5QWwg7mew5nr914kQMcXenOpkRkNhgs674s6DFJVuzf/YxinYc3GUkNns1Kac1AX97R9LHudxc/c+qE0LD8kO/20kFCAAf+MVB7DC2UQt2Gz5L5GoePb/Bz/pQhzFYNvwCZkDwp/399y/+tg3ddKc5rfhHVYeOGXX4SsourR2rjmogCXPbHdINnGtVBFwdhzZr4oT2TjBv0/U5d7rLji+WbW9FUcp/HK/CWvvGV0zfawUpuCBfDggO3sIsURx9yGSCTX+I699dHzi0PQ44Xfg//RJZGZt5rHVZcRZSizwJDjDhJgnjk94I6QGoKFphGp9bBD2j0rgOBoV58ZsHYFNAme4QSLnmBeBsDhevDiFYnvuYkJtB+9wc2yYe3wWuurW3gMvsNOWL/GcChzxpTs0V8/2NP08yERfo+PXo3PdiMgTHimqJokRpyZKfHMMW2aTPDn8Tr+Qh2/0VNEZ9OwhzAG0FOQi8TNBBbXf8fO16MVny9k6F3lMY2nCGdBOF69UKgs4JU20EFKzUU9izV7LxZV9qoe/vFDZ7jx2S863x6taNasbhe2i8j1ZxFU0z9nA== X-OriginatorOrg: seco.com X-MS-Exchange-CrossTenant-Network-Message-Id: ad4d2c0c-80f5-4f99-b99b-08da7f9a4ae7 X-MS-Exchange-CrossTenant-AuthSource: DB7PR03MB4972.eurprd03.prod.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 16 Aug 2022 15:16:28.5831 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: bebe97c3-6438-442e-ade3-ff17aa50e733 X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: bdudPozyzBYTE5dJxP1syvyZsnxXfTVoe/l0/tbyzy0uZ5nzpApewQCukFOmrdepQaeiK2JeY0EQnwuoKSmDdQ== X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR0302MB2735 X-BeenThere: u-boot@lists.denx.de X-Mailman-Version: 2.1.39 Precedence: list List-Id: U-Boot discussion List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: u-boot-bounces@lists.denx.de Sender: "U-Boot" X-Virus-Scanned: clamav-milter 0.103.6 at phobos.denx.de X-Virus-Status: Clean Surprisingly, Fman microcode does not seem to be verified. This series aims to rectify this by introducing an optional FIT wrapper. This wrapper is made mandatory if FIT_SIGNATURE is enabled. NXP boards do not use this config, so the microcode will remain unverified for them. This is OK, since we do not want to break existing systems. This series depends on [1]. There is no logical dependency, but they modify adjacent #includes, so the past patch will not apply cleanly unless that series is applied. [1] https://lore.kernel.org/u-boot/20220422173032.2259019-1-sean.anderson@seco.com/ Changes in v2: - Document helpers - Split off Fman microcode verification patches into their own series - Split helper refactoring into a patch adding the helpers and one patch per subsystem. Sean Anderson (6): ARMv8/sec_firmware: Remove SEC_FIRMWARE_FIT_CNF_NAME image: fit: Add some helpers for getting data ARMv8/sec_firmware: Convert to use fit_get_data_conf_prop cmd: fpga: Convert to use fit_get_data_node net: Convert fit verification to use fit_get_data_* net: fm: Add support for FIT firmware arch/arm/cpu/armv8/sec_firmware.c | 52 ++-------------------- boot/image-fit.c | 37 ++++++++++++++++ cmd/fpga.c | 24 +++------- drivers/net/fm/fm.c | 18 ++++++++ drivers/net/fsl-mc/mc.c | 30 ++----------- drivers/net/pfe_eth/pfe_firmware.c | 40 +---------------- include/image.h | 70 ++++++++++++++++++++++++++++++ 7 files changed, 139 insertions(+), 132 deletions(-)