summaryrefslogtreecommitdiffstats
path: root/recipes-security/optee-imx/optee-os
Commit message (Collapse)AuthorAgeFilesLines
* optee-client: Upgrade to lf-6.1.22-2.0.0 (3.21)Oleksandr Suvorov2023-07-282-61/+0
| | | | | | | | | | | | | | | | | | | | | | | Upgrade optee-client to be aligned with NXP BSP LF6.1.22_2.0.0. Backport changes from meta-arm/optee-client.inc. Relevant changes: - 8533e0e travis: remove the .travis.yml file - 0fc6ef7 tee-supplicant: fix leak when load plugin failed - dde6306 libteeacl: use realloc() instead of reallocarray() - 462b954 Add -Wunsafe-loop-optimizations only for gcc - 2096542 Makefile: use GNU standards for directory variables - dd2d39b libteeacl: Move uuid-dev checking in libteec makefile - 1056b40 cmake: define boolean switch CFG_WERROR with option() - bbdf665 libteeacl: condition libteeacl with WITH_TEEACL - fba9950 ci: add GitHub Actions script and Docker files - fc67c27 Add pkgconfig file for libteec - d448e8b Allow cross-compile pkg-config - d26d885 libckteec: Add RSA AES key wrap serialization - cb3842c tee-supplicant: Synchronize file operations for secure storage Signed-off-by: Oleksandr Suvorov <oleksandr.suvorov@foundries.io>
* optee-os: Upgrade to lf-6.1.22-2.0.0 (3.21)Oleksandr Suvorov2023-07-284-66/+202
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Upgrade optee-os to be aligned with NXP BSP LF6.1.22_2.0.0. Reapply and refresh patch files. Drop patches that provided correct sysroot. Instead, use CFLAGS{32,64} to pass --sysroot, this option is available since optee-os 3.16. Relevant changes: - 1962aec95 LFOPTEE-238 drivers: ele: use the baseline API to retrieve the UID - 7e7b93ac1 LFOPTEE-238 drivers: ele: add msb and lsb to imx_ele_buf object - 086b65048 LF-8999 drivers: ele: disable ASLR for imx8ulp - fa3174b61 LF-8995 drivers: ele: keystore: change global key store id - 1ae8545a4 LF-8995 drivers: ele: disable imx_ele_global_init() if CFG_IMX_ELE_ECC_DRV is disabled - c15e21b07 LFOPTEE-243 Rework ELE MU mapping - fb5eaa07f drivers: ele: retain the return value in case imx_ele_generate_key(), imx_ele_signature_generate() and imx_ele_signature_verification() returns an error - 6e706ee51 drivers: ele: change RNG command ID - 9492fa474 LFOPTEE-242 drivers: ele: use the new derive key API for HUK generation - 4d4bd4340 core: ls: enable CFG_PKCS11_TA - cf2cc646a core: imx: enable CFG_PKCS11_TA - 4c8281883 drivers: ele: fix ELE_COMMAND_SUCCEED - 5363154ed core: imx: move tzc380.c to plat-imx - ccf5dc690 core: imx: allow CFG_CRYPTO_DRIVER enablement for imx93evk - 735c01acf LFOPTEE-178 drivers: ele: Change OP-TEE MU memory mapping from Secure to Non-Secure - 093318267 LFOPTEE-178 drivers: ele: Add support for ECC operations - fa58e94e1 LFOPTEE-178 drivers: ele: Add Generate/Delete Key APIs - 09badc46e LFOPTEE-178 drivers: ele: Add Key Management APIs - 0cd738b0d LFOPTEE-178 drivers: ele: Create a global key store handle for all subsequent calls - c93839af6 LFOPTEE-178 drivers: ele: Create a global session handle for all subsequent calls - c1b29579d LFOPTEE-178 drivers: ele: add memory management functions - c61f273fd LFOPTEE-178 drivers: ele: getting common macros and functions in header file - b5f423f49 LFOPTEE-178 drivers: ele: move ELE to a dedicated directory - afa1dd7bc drivers: caam: disable CFG_CRYPTO_SM2_* when ECC CAAM driver is enabled - c723025d5 core: imx: fix CFG_TZDRAM_START - 80b25f59f LF-7525 drivers: dcp: do not modify DCP node status in the DTB - 425ed1fbb LFU-368: core: imx93: enable trusted_keys as early TA - 1924712ff LFOPTEE-85 core: plat-ls: Enabled DTB overlay feature for LS platforms - e98f5c77d LFOPTEE-85 drivers: caam: add DTB_JR_PATH for LS platforms - 4a98ea70c core: imx: enable attestation PTA - a654afb61 drivers: caam: add device tree JR path for mx8ulp - e155b164e core: imx: enable CFG_CORE_HUK_SUBKEY_COMPAT_USE_OTP_DIE_ID by default - 3a3ddf85b core: imx: enable TZASC driver for all i.MX platforms - 8a1984cb1 TEE-639 drivers: caam: skip JR init of CFG_JR_HAB_INDEX - 992f6b93b LFOPTEE-17: core: plat-ls: add PTA for I2C RTC test - 519bfab46 core: imx: disable CSU protection for the DCP - 484138b3f core: ls: enabled CFG_ENABLE_EMBEDDED_TESTS by default - 299d2d7ad core: imx: enabled CFG_ENABLE_EMBEDDED_TESTS by default - e79c46c9d core: ls: enable CAAM driver by default. - 18cca2b72 core: ls: disable CAAM for ls1088 and ls2088 - 9315f5d1e LFOPTEE-9 plat-ls: Increase heap size - dc2ddcf86 TEE-598 core: imx: increase heap size to 128k - 0cd1cf295 TEE-526 drivers: caam: add SDP Memory cacheability verification - 54edf5b70 TEE-526 core: arm: retrieve SDP Memory cacheability - d5d6e8c85 core: imx: enable CAAM driver by default - b1b2f83cc core: imx: add resume capability to CSU driver - 6130b501e core: imx: allow NS world to change SMP bit - 40006fb93 core: imx: remove SC_IPC_BASE_SECURE definition - cb115caf6 LFOPTEE-37: core_mmu_lpae: clear L2 tables and indexes - 546ed42ac LFOPTEE-37: imx8qm: bget_malloc: reset malloc_poolset at runtime - e8e4b9761 LFOPTEE-37: imx8qm: gic: avoid GICD re-configuration - 5eebee811 LFOPTEE-37: plat-imx: add platforms mx8qm mek cockpit a53 and a72 - ad9310fbb pta: imx: add DEK blob encapsulation - 9fe4ecdba drivers: caam: add secure memory and blob drivers - 4d6df4796 core: imx: add SECMEM definitions for imx8m platforms - c3b7c47f3 TEE-482 Add .clang-format - c48eeb2c6 MLK-22073 core: generic_entry_a32: change L1 invalidation at secondary boot - aa26586bf scripts: add build script for imx and ls - f5e685f71 drivers: imx_snvs: unlock SNVS access for non-secure - d328f3a08 drivers: caam: skip the JR device tree disablement for imx8 platforms - 85feed23e core: imx: enable DT overlay for imx8 platforms - ebfaab628 drivers: caam: disable job ring via DT overlay - f4f575781 core: add device tree overlay subnode disable - a3e52ba26 drivers: caam: rework the CAAM crypto makefile - 3cb66cb83 core: ls: remove CFG_WITH_SOFTWARE_PRNG default definition for LS platforms - 55af337cd core: imx: remove CFG_WITH_SOFTWARE_PRNG default definition for i.MX platforms - f06709794 core: move CFG_WITH_SOFTWARE_PRNG default definition - 54493021c drivers: caam: remove CFG_NXP_CAAM_ACIPHER compilation flag - 5dec4ebbf core: crypto: give the platform configuration a higher priority - 294f91f32 drivers: imx_scu: add resume capabilities - 851e73b1d core: imx: add plat_cpu_wakeup_late() on arm32 - 93e8838ca TEE-272 Cortex-A9 add PL310 Linux/Optee Mutex - 711fea086 drivers: imx_scu: move i.MX SCU driver - b0ef56504 drivers: imx_csu: move i.MX CSU driver - 0fc481338 drivers: imx_caam: move i.MX CAAM driver - 3cabf823d core: imx: enable busfreq on imx6 and imx7 platforms - 11d7fc300 core: pm: imx: export busfreq_change() function - be238d4ac core: imx: enable the compilation of sm_platform_handler.c for busfreq - c390bfbb5 core: imx: add busfreq SIP calls - 9df964338 pm: imx: add power management drivers - 70af7a82a pm: imx: add suspend source files - 2a1a3cee8 pm: imx: add cpuidle source files - c292e6239 pm: imx: add busfreq source files - fc00b1f35 core: imx: enable CFG_PM_ARM32 and CFG_IMX_PM for power management - fc0a35a03 core: imx: remove SRC and GPC functions from imx.h - f0f51a260 core: imx: add imx7ulp registers - a1cbd6256 core: imx: add imx7 DDRC and IOMUX registers - ac51cdba4 core: imx: add imx6 MMDC and IOMUX registers - d7844a1ad core: imx: add pl310_enabled() - 3dcdade81 core: imx: remove imx_sip.h - 1e79f969e core: imx: remove power management code for imx7 platforms - c7b15f67e allow setting sysroot for libgcc lookup - e8abbcfbd Update CHANGELOG for 3.21.0 - 50666c141 plat-zynqmp: fixes interrupt controller - b031393cd core: tee_ta_instance_stats(): correct the allocation size of dump_ctx - 32b94ed4b drivers: caam: fix MP abstraction layer functions - 4a0740da2 drivers: caam: math: add CFG_NXP_CAAM_MATH_DRV compilation flag - 44220a36a libtomcrypt: fix pkcs_1_v1_5_decode() when empty message - 3fb72c226 drivers: crypto: add support for SM2_DSA_SM3 - 163a7c9e8 core: imx: remove duplicate driver_init() call - 31b31015b build: ta: add RISC-V linker script - de4176748 core: mm: Fix idx truncation bug - 9eabc2b44 core: fix loading of encrypted TA - 9901df47d core: dump_ta_memstats(): check TA initialization completion before accessing it - 66370233e ci: se05x crypto driver: update plug-and-trust - fb559031c drivers: se050: allow configuring the Secure Element applet - 7723564b9 dts: stm32: add OTP index for HUK on stm32mp15 platform - b0946e1d9 drivers: stm32mp15_huk: use DT HUK NVMEM layout API - db8ca286e se050: ecc: SE050-F shared secret - b300b5a37 ci: compile-test as many PTAs as possible on QEMU/QEMUv8 - eb238769a pta: attestation: fix compilation incompatible pointer warning - 552d5e40d core: ffa: Allow multiple SPs with same UUID - f60c6b9c1 drivers: imx_ele: add ELE driver - 8cd1171e9 drivers: imx_mu: add MU base address and size for imx93 - 4f89aed3d drivers: imx_mu: add MU base address and size for imx8ulp - 753e6fe4f drivers: imx_mu: increase maximum MU message size - 088116c9c drivers: imx_mu: add support for imx93 - abbe1d51f core: spmc: move FIP SP deinit call - 6d7c8c3d8 core: spmc: fix FIP SP loading - 1478437e6 core: ltc: use SHA-3 crypto accelerated function - c60ed582e core: arm64: SHAKE128 using ARMv8.2-A cryptographic extensions - bfedef0ce core: arm64: SHA-3 using ARMv8.2-A cryptographic extensions - 2be3770e8 core: arm64: SM4 CE optimization for ARMv8.2 - 8b5fb12e2 core: arm64: SM4-AESE optimization for ARMv8 - 2fb9e950b Revert "ci: disable QEMUv8_check_rust job" - 557fea2de Remove checked in .checkpatch-camelcase.git. - fdc4a8bef ldelf: syscall: support RISC-V ldelf sycall - 28849defb libutee: increase MPI_MEMPOOL_SIZE to 14Kb - 6e99433ed core: remove keep pager directive on core_init_mmu_regs() - dd884cc27 plat-stm32mp1: conf: support 32bit MMU - 1a3d47c53 clk: stm32mp15: embed clock names only in debug mode - 41d9f6c2b libutee: add TEE_ALG_ECDSA_SHA* to TEE_ALG_GET_DIGEST_SIZE() - 7bd215a7b core: mbedtls: ecc_get_keysize(): do not check algorithm against curve - 9cf576a9f drivers: crypto: versal: do not use deprecated algorithm macros - 53af8d704 drivers: crypto: se050: do not use deprecated algorithm macros - fa40bed51 core: fix out-of-bounds access of dump_ctx - 442c670a2 drivers: atmel_tcb: Use matrix_dt_get_id() to correctly retrieve the id - 9a28dbc4f plat-sam: matrix: add matrix_dt_get_id() to parse matrix id from dt - 0db298206 core: pta: imx: add manufacturing protection - d538d2936 drivers: caam: add manufacturing protection feature - f5c3d85a5 core: crypto: add support MD5 hashes in RSA sign/verify/cipher - 2c9522664 core: drivers: zynqmp_csu_puf.c: increase regen time to 6ms - 3d70a9743 core: crypto: change supported HMAC key size ranges - 200eb7bd8 plat-totalcompute: remap console logs - f4f85ac77 drivers: crypto: add SM2 ECC encrypt and decrypt - 769cbbd70 drivers: crypto: add SM2 curve in crypto API - 9655e48e7 ci: qemuv8: build with maximum log level - 9894fdb48 ta: pkcs11: fix trace compilation warning - a3cfa14ac drivers: caam: enable the CAAM clock when submitting a new job - 316fd6e9c drivers: caam: add missing header file - cd857358b core: imx: use register_ddr() to register dynamic shared memory - 9740df775 drivers: clk: sam: remove hard coded USB clock setup - 5ff81ad89 dts: sama5d2: add assigned-clocks properties for usb - 90dee57ac drivers: clk: sam: export audiopll_fracck and usbck - c0e9e857f drivers: clk: sam: add a macro for count of main clocks - 8ac3cb374 core: drivers: crypto: caam: Check PKCS_V1_5 decryption buffer size - 97eb91680 drivers: imx: tzc380: re-configure TZ380 upon PM resume - 83857db53 drivers: imx: tzc380: do not dump TZASC state before lockdown - 92f496916 drivers: imx: tzc380: add support for 8mscale platforms - 809fa817a core: ffa: add TOS_FW_CONFIG handling Signed-off-by: Oleksandr Suvorov <oleksandr.suvorov@foundries.io>
* optee-os: Fix build with clangKhem Raj2023-01-084-0/+405
| | | | | | Bring in the needed patches from meta-arm Signed-off-by: Khem Raj <raj.khem@gmail.com>
* optee: Upgrade 3.17.0.imx to 3.19.0.imxOleksandr Suvorov2023-01-061-64/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | NXP BSP lf-5.15.71_2.2.0 uses op-tee 3.19.0.imx. Upgrade optee-os, optee-client, and optee-test accordingly. Add missed support for imx93evk platform. Relevant changes for optee-os: - 00919403f LF-7525 drivers: dcp: do not modify DCP node status in the DTB - 842961521 core: mm: fix error flushing unused pgt's - 96d9b4c19 libutils: util.h: fix the ROUNDUP_OVERFLOW() macro - 2885fd08e LFOPTEE-203 drivers: ele: align HUK output buffer - 7e41f6603 drivers: imx_ele: add HUK support for imx93 - ab1525d14 core: imx: remove SC_IPC_BASE_SECURE definition - 382a7ae57 LFOPTEE-181 drivers: imx_ele: re-work imx_ele_session_get_device_info() - b27da7b0d LFOPTEE-181 drivers: imx_ele: remove RNG support for 8ulp A0 - 4a9f3e387 LFOPTEE-181 drivers: imx_ele: add MU infos for imx93 - 8c4caec41 LFOPTEE-181 core: imx: enable MU and ELE drivers for imx93 - f5bc45d6d LFOPTEE-181 core: imx: add MU_BASE and MU_SIZE for imx93 - b19786dfb LFOPTEE-181 drivers: imx_mu: add support for imx93 - 4c598c905 core: imx_ele: remove addition of word for CRC - 9f9fb3899 LFU-368: core: imx93: enable trusted_keys as early TA - 23889478f LFU-368: core: imx: enabled dynamic share memory for i.MX93 Relevant changes in optee-client: - 644022f teeacl: fix include path - 140bf46 libckteec: Add EDDSA attribute serialization - 1fc38c6 libteeacl: Add function to resolve name to gid_t - 1560582 libteeacl: function to encode a group login UUID - e58b158 libteeacl: Add new ACL helper library - 5364e61 tee-supplicant: read rpmb dev info from sysfs - a46239c tee-supplicant: android: make RPMB_EMU a conditional assignment - 30abe6c cmake: Use separate generator expression for lib targets - f2755fe cmake: Don't set teec include_directory from libseteec - 1dcb80a Use CMake project command to set version - 492410d tee-supplicant: -d: return after TEE device is opened - d59ed2d cmake: fix log level don't take effect - e7cba71 tee-supplicant: fs: use errno instead of returning TEEC_ERROR_GENERIC - f7ed8e3 tee-supplicant: support multiple TA load paths - a5c30b1 Makefile: Makefile: only preserve links when installing output files - dc58de2 tee-supplicant: close shm fd before freeing memory - f2a7c94 tee-supplicant/src/tee_supplicant.c: fix build without plugins Relevant changes in optee-test: - 5c1dbb5 LFOPTEE-129 Make MP test use embedded crypto instead of openssl - 661a7b3 LFOPTEE-131 Fix ta_keygen compilation warnings - 6fcbcb1 LFOPTEE-123 Reset the handle when freed - 980dbbb LFOPTEE-123 Handle benchmark logging for key generation measures - ebf619a LFOPTEE-95 Add performance measure of key generation - 28ba903 LFOPTEE-93 Check MP is functional - d7f6c03 LFOPTEE-84 xtest: Add test of MP feature - d928ce2 LFOPTEE-84 ta: Add test of MP - b060fc4 MMIOT-789 xtest: crypto_perf: fix resource leak in read_random - f9d2ab0 TEE-641 regression_nxp: add AES CTR in place tests - dd158a7 LFOPTEE-65 xtest: add DIGPROG tests - e1492fa LFOPTEE-65 xtest: add OCOTP tests - c520c98 YOCIMX-5658 regression_nxp: replace malloc() calls with calloc() calls - 09dbac1 LFOPTEE-55: crypto-perf: RSA: Fix for RSA Encryption/Decryption error - 63dcd10 LFOPTEE-55: crypto-perf: add domain parameters for dsa - c88fb78 LFOPTEE-55: crypto-perf: DH: Remove non-essential attributes passed during key generation - b7b285a LFOPTEE-55: crypto-perf: ta: ECDSA, ECDH: Remove non-essential attributes passed during key generation - 8350e03 LFOPTEE-55: crypto-perf: xtest: ECDH: RoundUp key size - 7a9c375 LFOPTEE-39 regression_nxp: Add test of DEK blob generation - 61e5ede MMIOT-723 regression_nxp: crypto: Fixing memory corruption in nxp_crypto_003 - 7d9ff08 LFOPTEE-17: xtest: regression_nxp: add test case for I2C driver testing - 6ae8e95 xtest: enable PKCS11 tests - 35173ba regression_nxp: enable CFG_REGRESSION_NXP flag - cfb6e7b LFOPTEE-16: fix warning where uint32_t is expected - a740498 LFOPTEE-16: fix trace compilation warnings - 0fa4d73 LFOPTEE-13 crypto-perf: fix command line algorithm search - 6a28f3c LFOPTEE-13 crypto-perf: fix compilation warnings - e78f18d TEE-127 CAAM Crypto Performance - 5ec9bce TEE-606 xtest: define a 'regression_nxp' test suite in xtest - e562b26 TEE-606 xtest: add CFG_REGRESSION_NXP flag - d9d73a8 TEE-367 crypto: cipher memory leakage verification - f3e776b TEE-548 regression_nxp: Cipher operation with a big buffer - 5312feb TEE-577 regression_nxp: AES CTR streaming byte per byte - 6df2c3f TEE-418 regression_nxp: add cipher streaming byte incremental - ab9863c Add ED25519 test cases - eb3d01f xtest: Add FF-A memory test - 252faa9 xtest: SPMC Add basic test - 13cce36 xtest: remove ADBG_REQUIRE* macros - d9d269e xtest: fix compilation issue - 2055d75 xtest: fix compilation issue - c7f733c xtest: fix compilation issue - d09b43b host: supp_plugin: fix cross compilation - da5282a sdp: Add dmabuf support - 366179c regression 4007_x25519: do not fail if X25519 is not supported - 00b3f2c Add x25519 test cases Signed-off-by: Oleksandr Suvorov <oleksandr.suvorov@foundries.io>
* optee-os: fix build with binutils 2.39Andrey Zhizhikin2022-08-261-0/+64
| | | | | | | | | | | | | | | | binutils 2.39 started to produce warning on RWX LOAD segments, which breaks the linking process of optee-os. Upstream optee-os package has patch ac425901 ("arm/optee-os: backport RWX permission error patch") [1] integrated, which has been backported in OP-TEE from PR #5475 [2] targeting master in upstream. Port upstream optee-os commit into NXP fork of optee-os. Link: [1]: https://github.com/jonmason/meta-arm/commit/ac4259011f4c8cec01191828014487ccc5de73ca Link: [2]: https://github.com/OP-TEE/optee_os/pull/5474 Signed-off-by: Andrey Zhizhikin <andrey.z@gmail.com> Cc: Tom Hochstein <tom.hochstein@nxp.com>
* optee-os: Upgrade to NXP 5.15.5-1.0.0Tom Hochstein2022-05-121-29/+0
| | | | | | | | - Drop patch 0001-arm-imx-fix-RPMB-header-include.patch that is now upstream - Update platform list - Fix hard-coded /usr/include with includedir variable Signed-off-by: Tom Hochstein <tom.hochstein@nxp.com>
* optee-os: Fix RPMB build breakTom Hochstein2022-03-071-0/+29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | When CFG_RPMB_FS=y, OP-TEE os no longer compiles because imx_rpmb.c tries to include a header that doesn't exist. This issue seems linked to a rework that allows to compile i.MX Secure Non-Volatile Storage driver without RPMB. ``` | CC optee-os/3.15.0.imx-r0/build/core/arch/arm/plat-imx/imx_rpmb.o | core/arch/arm/plat-imx/imx_rpmb.c:5:10: fatal error: drivers/imx_snvs.h: No such file or directory | 5 | #include <drivers/imx_snvs.h> | | ^~~~~~~~~~~~~~~~~~~~ | compilation terminated. | make: *** [mk/compile.mk:159: optee-os/3.15.0.imx-r0/build/core/arch/arm/plat-imx/imx_rpmb.o] Error 1 | make: *** Waiting for unfinished jobs.... | CC optee-os/3.15.0.imx-r0/build/core/crypto/crypto.o | CC optee-os/3.15.0.imx-r0/build/core/arch/arm/plat-imx/imx_dt.o | make: Leaving directory 'optee-os/3.15.0.imx-r0/git' | ERROR: oe_runmake failed | WARNING: exit code 1 from a shell command. ERROR: Task (optee-imx/optee-os_3.15.0.imx.bb:do_compile) failed with exit code '1' ``` This is fixed in the upcoming release NXP 5.15.5-1.0.0. Backport the patch. Fixes: #997 Signed-off-by: Tom Hochstein <tom.hochstein@nxp.com>
* optee-imx: Upgrade to 3.10.0Tom Hochstein2021-03-161-162/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Update all recipes to pull sources from imx_5.4.70_2.3.0 branch in NXP upstream and update SRCREV to match release tags. Update PREFERRED_VERSION of optee for mx8 to point to 3.10.0.imx. Following notes are additions to the version update of recipes: -------------------------- optee-client: - Drop CFLAGS patch as it is already applied upstream optee-os: - Drop gcc10 patch as it is already applied upstream - Add dependency on python3-pycryptodomex-native - Drop NOWERROR flag as package is reworked to disable warnings by default - Rework mkimage load address since tee-init_load_addr.txt is no longer created optee-test: - Drop python3 patch as it is already applied upstream - Remove unused patch files from layer - Add dependency on python3-pycryptodomex-native - Add sysroot to C and C++ flags Fixes #686, fixes #689. Signed-off-by: Tom Hochstein <tom.hochstein@nxp.com>
* optee-imx: upgrade to version 3.7.0Andrey Zhizhikin2020-09-232-443/+20
| | | | | | | | | | | | | | | | | | | | | | | Update all recipes to pull sources from imx_5.4.24_2.1.0 branch in NXP upstream and update SRCREV to match release tags. Update PREFERRED_VERSION of optee for mx8 to point to 3.7.0.imx. Following notes are additions to the version update of recipes: -------------------------- optee-os: - Refresh gcc10 patch to resolve the fuzz during apply - Drop python patch as it is already applied upstream - Add new machines to the list optee-client: - Update CFLAGS patch to match 3.7.0 version - Split ${B} from ${S}, this makes build more clear optee-test: - Remove do_compile task and substitute with OEMAKE Signed-off-by: Andrey Zhizhikin <andrey.z@gmail.com>
* optee-os: backport gcc10 compilation fix from upstreamAndrey Zhizhikin2020-06-232-64/+158
| | | | | | | | | | | | | | Backport PR 3891 [1] from OP-TEE upstream repository. This PR solves GCC10 compilation issue when new compiler option `outline-atomics` is not implemented and causes the linker error. In addition, above upstream PR solves issue with 'cc-option` macro, which is necessary to be used to provide comptibility with GCC <10 to disable the `outline-atomics` option, since it is present only in GCC10. [1]: https://github.com/OP-TEE/optee_os/pull/3891 Signed-off-by: Andrey Zhizhikin <andrey.zhizhikin@leica-geosystems.com>
* optee-os: fix gcc10 build for imx forkAndrey Zhizhikin2020-05-261-0/+64
| | | | | | | | | | | | | | | | | | | | | | | | | OP-TEE OS component fails to build on gcc10 due to missing __getauxval function. This can be resolved via disabling of outline-atomics feature in gcc10. Backport upstream patch [1] with adaptions to optee-imx version. Original patch uses $(call cc-option,-mno-outline-atomics,) to disable outline-atomics which itself is broken and required 4 additional patches to be compatible with gcc and clang. This is resolved in the upstream PR [2], which is applicable to the latest upstream version. NXP fork contains old version of OP-TEE, and therefore would receive the update for Makefiles with new version. Since it is not required to make current NXP version compatible with old compiler versions on master branch - outline-atomics are disabled directly. [1]: https://github.com/OP-TEE/optee_os/pull/3891/commits/e07c2b062846df4385542f4e4fe08b40cf7d8191 [2]: https://github.com/OP-TEE/optee_os/pull/3891 Signed-off-by: Andrey Zhizhikin <andrey.zhizhikin@leica-geosystems.com>
* optee[-imx]: update recipes to use python3Andrey Zhizhikin2020-01-231-0/+427
Since Python2 is dropped in oe-core and classes are not available anymore, optee components should be updated to utilize python3. optee-os recipe received an additionl patch to re-target the Python version in the source tree to python3. Signed-off-by: Andrey Zhizhikin <andrey.zhizhikin@leica-geosystems.com>