[nrf noup] boot/zephyr: check for FPROTECT capability #534
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
|
This reverts commit c390295. Signed-off-by: Jukka Rissanen <[email protected]>
This reverts commit b26db4d. Signed-off-by: Jukka Rissanen <[email protected]>
This reverts commit b6b46a7. Signed-off-by: Jukka Rissanen <[email protected]>
…ule" This reverts commit 26d9f6e. Signed-off-by: Jukka Rissanen <[email protected]>
This reverts commit 7b333ff. Signed-off-by: Jukka Rissanen <[email protected]>
This reverts commit 25f4981. Signed-off-by: Jukka Rissanen <[email protected]>
This reverts commit 227eb0a. Signed-off-by: Jukka Rissanen <[email protected]>
This reverts commit a4bae13. Signed-off-by: Jukka Rissanen <[email protected]>
…tion" This reverts commit 7ed4927. Signed-off-by: Jukka Rissanen <[email protected]>
This reverts commit 51b0897. Signed-off-by: Jukka Rissanen <[email protected]>
This reverts commit 83d1d95. Signed-off-by: Jukka Rissanen <[email protected]>
…ture key" This reverts commit 6ba9587. Signed-off-by: Jukka Rissanen <[email protected]>
…ssion" This reverts commit 4a528ba. Signed-off-by: Jukka Rissanen <[email protected]>
This reverts commit 8900bda. Signed-off-by: Jukka Rissanen <[email protected]>
This reverts commit ce9d1d6. Signed-off-by: Jukka Rissanen <[email protected]>
This reverts commit 0b54665. Signed-off-by: Jukka Rissanen <[email protected]>
This reverts commit 09ce751. Signed-off-by: Jukka Rissanen <[email protected]>
This reverts commit 1aaabde. Signed-off-by: Jukka Rissanen <[email protected]>
This reverts commit a652982. Signed-off-by: Jukka Rissanen <[email protected]>
This reverts commit 9b60560. Signed-off-by: Jukka Rissanen <[email protected]>
This reverts commit 5af259f. Signed-off-by: Jukka Rissanen <[email protected]>
This reverts commit 301ab33. Signed-off-by: Jukka Rissanen <[email protected]>
This reverts commit c13c652. Signed-off-by: Jukka Rissanen <[email protected]>
This reverts commit d8a2e45. Signed-off-by: Jukka Rissanen <[email protected]>
This reverts commit 285fd59. Signed-off-by: Jukka Rissanen <[email protected]>
… BM" This reverts commit ecc13ac. Signed-off-by: Jukka Rissanen <[email protected]>
This reverts commit c859608. Signed-off-by: Jukka Rissanen <[email protected]>
This reverts commit 1b1a37f. Signed-off-by: Jukka Rissanen <[email protected]>
This reverts commit a999034.
This reverts commit 5ef6bae.
Enable LTO to cut down the MCUboot size for nrf54l10 and nrf54l05. Signed-off-by: Grzegorz Chwierut <[email protected]> (cherry picked from commit 3c8e571775291dd5da7119b1f24b765bd935a97c)
Moved configs from nrf54l15pdk. Turn protection on fprotect by default. Signed-off-by: Andrzej Puzdrowski <[email protected]> Signed-off-by: Mateusz Michalek <[email protected]> Signed-off-by: Michal Kozikowski <[email protected]> Signed-off-by: Jamie McCrae <[email protected]> (cherry picked from commit 835b63f)
nrf-squash! [nrf noup] boot/zephyr: add nrf54l15dk ext flash configs Fprotect is enabled by default, size of MCUboot must be less than 62KB. Removed PM_PARTITION_SIZE_MCUBOOT to use the default value. Fixes NCSDK-35436 Signed-off-by: Grzegorz Chwierut <[email protected]>
nrf-squash! [nrf noup] nrf_cleanup: nRF54h: fix missing peripheral cleanup The GRTC should not reset its value and stop running when switching for MCUBoot to application. Also in general, this should not be done in case of reset - so the nrfx_grtc_unit function should not reset the counter value. This will be fixed in nrfx (NRFX-8487), but the solution is needed quicker. Hence, a temporary uninit function for GRTC was added in nrf_cleanup, fixing this issue for MCUBoot. Signed-off-by: Artur Hadasz <[email protected]>
Use the dedicated type to specify the slot number. Signed-off-by: Tomasz Chyrowicz <[email protected]> (cherry picked from commit d5b0dcb9aaee397fc105ae2228e8030038c3d871)
nrf-squash! [nrf noup] bootloader: Add bootloader requests Change bootloader request module, so it uses the new, dedicated type to point to the specific slot. Ref: NCSDK-35199 Signed-off-by: Tomasz Chyrowicz <[email protected]>
fixes missing array bug. Signed-off-by: Mateusz Michalek <[email protected]> (cherry picked from commit 5e1be19fbc2afde8f7a6eb2ad8e3b31e5c3921cd)
Fix uninitialized variable warning as well as compile time issue, when the slotted dependencies are enabled. Signed-off-by: Tomasz Chyrowicz <[email protected]> (cherry picked from commit 9ca088179e611ebd0054b0ef503039132c7a0ad1)
nrf-squash! [nrf noup] bootloader: Add bootloader requests Fix a warning for uninitialized variable. Ref: NCSDK-35733 Signed-off-by: Tomasz Chyrowicz <[email protected]>
If a device uses RESETINFO, than there are some bits set in the resetinfo, even for reboots that should allow to interpret and enter the device recovery. That way it is possible to recover a device through serial recovery if the main application resets due to i.e. watchdog. Signed-off-by: Tomasz Chyrowicz <[email protected]> (cherry picked from commit cc9852984f799d8d992594f966c472173925731f)
Added direct-xip support: * new API for marking active slot to be used by boot_go() routines. * jump vector assignment which is basing on above designation. Signed-off-by: Andrzej Puzdrowski <[email protected]>
Added call which designate active slot so MCUBoot can jump to proper slot when CPU is resuming from S2RAM. Signed-off-by: Andrzej Puzdrowski <[email protected]>
nrf-squash! [nrf noup] bootutil: Add support for KMU stored ED25519 signature key Will instead use the immutable bootloader key slot IDs if b0 is not enabled, adds a Kconfig which can be used to fall back to the previous slot IDs for previously deployed bootloaders Signed-off-by: Jamie McCrae <[email protected]>
nrf-squash! [nrf noup] boot/zephyr: nRF54h20 resume from S2RAM (hardened) CONFIG_ARM_SOC_START_HOOK=y allow to rework the resume from S2RAM code to work without PM_S2RAM mocking. It allows to implement only what really needed from the MCUboot perspective. Signed-off-by: Andrzej Puzdrowski <[email protected]>
nrf-squash! [nrf noup] boot/zephyr/socs: nrf54h20 prj.conf for S2RAM Updated in order to use optimized configuration. Signed-off-by: Andrzej Puzdrowski <[email protected]>
make linking time optimization default for the target. Signed-off-by: Andrzej Puzdrowski <[email protected]>
Use BOOT_LOG_MODULE_REGISTER(mcuboot_psa_enc), instead of BOOT_LOG_MODULE_DECLARE. Signed-off-by: Dominik Ermel <[email protected]> (cherry picked from commit 8a07053d42e592c85cb35b79c4de1b7749943387)
nrf-squash! [nrf noup] zephyr: Enforce HMAC-SHA512 for NRF54L with X25519 sets SHA512 for all 54L series Signed-off-by: Mateusz Michalek <[email protected]>
Add a possibility to specify, which images should have the ROM_END_OFFSET automatically adjusted. Use the UpdateableImages_Get(..) functionality to configure all updateable images (including radio images as well as variants) in the default configuration. Ref: NCSDK-35612 Signed-off-by: Tomasz Chyrowicz <[email protected]>
Added run-time check for checking area setup to be protected meets device capability. Signed-off-by: Andrzej Puzdrowski <[email protected]>
nvlsianpu
force-pushed
the
fprotect_check
branch
from
2426292 to
e2f37c6
Compare
|
Contributor
|
There are few different region sizes across 54L family |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
24 participants
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Added run-time check for checking area setup to be protected meets device capability.