[PATCH -next v3 0/7] Add support for secure falcon mode: disable fallback

[Tom Rini]

On Mon, Oct 06, 2025 at 03:40:48PM +0530, Anshul Dalal wrote:

> Hi all,
> 
> Continuing from the last series[1], this patch series addresses the requirement
> of allowing no fallbacks in secure falcon mode.
> 
> To do this in a clean way, all the falcon mode logic for each boot media was
> refactored to a corresponding *_load_image_os function whereas the regular
> boot is implemented in *_load_image, this allows us to easily return early in
> case the *_load_image_os function fails with secure mode enabled.
> 
> The series also introduces the new SPL_OS_BOOT_SECURE config symbol which
> enables secure falcon boot flow.
> 
> The generic flow after the patch series looks as follows:
> 
> 	static int spl_<bootmedia>_load_image(...) {
> 		if (CONFIG_IS_ENABLED(OS_BOOT)) {
> 
> 			ret = spl_<bootmedia>_load_image_os(...);
> 
> 			puts("Failcon mode failed\n");
> 			if (CONFIG_IS_ENABLED(OS_BOOT_SECURE)) {
> 				puts("no fallback allowed!\n");
> 				return ret;
> 			}
> 
> 			puts("Falling back to U-Boot\n");
> 		}
> 
> 		/* Regular boot flow */
> 	}
> 
> Regards,
> Anshul
> 
> [1]: https://lore.kernel.org/u-boot/20250923124639.667718-1-anshuld@ti.com/
> Depends-on: https://lore.kernel.org/u-boot/20250923124639.667718-1-anshuld@ti.com/

The depends-on has been merged at this point, yes? I tried this series
on master, and hit two problems. First, a number of boards such as
pine64_plus failed to build due to defined by unused warnings in
common/spl/spl_mmc.c. I fixed this up easily, but then found
j721e_beagleboneai64_a72 for example fails to build for defined but
unused warnings in common/spl/spl_nor.c so I'm going to ask you to
rebase this series (and as needed, the rest) and put them through CI
first (see docs.u-boot.org/en/latest/develop/ci_testing.html for
example) to make sure there's no other problems first. Thanks.

-- 
Tom
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <https://lists.denx.de/pipermail/u-boot/attachments/20251015/86f108c5/attachment.sig>