[PATCH 0/6] net: fm: Verify Fman microcode

Sean Anderson sean.anderson at seco.com
Thu Mar 24 19:22:59 CET 2022


Surprisingly, Fman microcode does not seem to be verified. This series
aims to rectify this by introducing an optional FIT wrapper. This
wrapper is made mandatory if FIT_SIGNATURE is enabled. NXP boards do not
use this config, so the microcode will remain unverified for them. This
is OK, since we do not want to break existing systems.


Sean Anderson (6):
  ARMv8/sec_firmware: Remove SEC_FIRMWARE_FIT_CNF_NAME
  image: fit: Add some helpers for getting data
  misc: fs_loader: Add function to get the chosen loader
  net: fm: Add firmware name parameter
  net: fm: Support loading firmware from a filesystem
  net: fm: Add support for FIT firmware

 arch/arm/cpu/armv8/sec_firmware.c  | 52 +++------------------------
 arch/arm/mach-k3/common.c          |  2 +-
 arch/arm/mach-omap2/boot-common.c  |  2 +-
 boot/image-fit.c                   | 37 +++++++++++++++++++
 cmd/fpga.c                         | 24 ++++---------
 drivers/fpga/socfpga_arria10.c     | 24 ++-----------
 drivers/misc/fs_loader.c           | 27 ++++++++++++++
 drivers/net/fm/fm.c                | 58 +++++++++++++++++++++++++++---
 drivers/net/fm/fm.h                |  2 +-
 drivers/net/fm/init.c              |  4 +--
 drivers/net/fsl-mc/mc.c            | 30 ++--------------
 drivers/net/pfe_eth/pfe_firmware.c | 40 +--------------------
 drivers/qe/Kconfig                 |  4 +++
 include/fs_loader.h                | 12 +++++++
 include/image.h                    |  4 +++
 15 files changed, 159 insertions(+), 163 deletions(-)

-- 
2.25.1



More information about the U-Boot mailing list