[U-Boot] [PATCH 1/2] mx7: Place MX7_SEC option in Kconfig

[U-Boot] [PATCH 1/2] mx7: Place MX7_SEC option in Kconfig

[Fabio Estevam]

MX7_SEC is an existing configuration option that allows booting the
kernel in secure mode.

Place this option in Kconfig, so that boards can select this option
in their defconfig files.

Selecting this option is necessary when booting a kernel provided by
NXP, such as 3.14_GA and 4.1.15_GA.

Signed-off-by: Fabio Estevam <fabio.estevam@nxp.com>
---
 arch/arm/imx-common/Kconfig | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/arch/arm/imx-common/Kconfig b/arch/arm/imx-common/Kconfig
index 1b7da5a..c6b38bc 100644
--- a/arch/arm/imx-common/Kconfig
+++ b/arch/arm/imx-common/Kconfig
@@ -17,3 +17,12 @@ config IMX_BOOTAUX
 	depends on ARCH_MX7 || ARCH_MX6
 	help
 	  bootaux [addr] to boot auxiliary core.
+
+config MX7_SEC
+	bool "Support booting MX7 in secure mode"
+	depends on ARCH_MX7
+	help
+	  NXP kernel requires to boot MX7 in secure mode. Select
+	  this options if you want to boot a NXP kernel. In order
+	  to boot a mainline kernel this option needs to be
+	  unselected.
-- 
1.9.1

[U-Boot] [PATCH 2/2] mx7dsabresd: Fix the boot of a NXP kernel

[Fabio Estevam]

Booting a NXP kernel with mainline U-boot leads to the following kernel
crash:

caam: probe of 30900000.caam failed with error -11                              
Unable to handle kernel NULL pointer dereference at virtual address 00000004    
pgd = 80004000                                                                  
[00000004] *pgd=00000000                                                        
Internal error: Oops: 805 [#1] PREEMPT SMP ARM                                  

This happens because NXP kernel expects MX7 to boot in secure mode,
so introduce mx7dsabresd_secure_defconfig that selects CONFIG_MX7_SEC
and allows booting a NXP provided kernel successfully.

Signed-off-by: Fabio Estevam <fabio.estevam@nxp.com>
---
 configs/mx7dsabresd_secure_defconfig | 38 ++++++++++++++++++++++++++++++++++++
 1 file changed, 38 insertions(+)
 create mode 100644 configs/mx7dsabresd_secure_defconfig

diff --git a/configs/mx7dsabresd_secure_defconfig b/configs/mx7dsabresd_secure_defconfig
new file mode 100644
index 0000000..9e49004
--- /dev/null
+++ b/configs/mx7dsabresd_secure_defconfig
@@ -0,0 +1,38 @@
+CONFIG_ARM=y
+CONFIG_ARCH_MX7=y
+CONFIG_TARGET_MX7DSABRESD=y
+CONFIG_IMX_RDC=y
+CONFIG_IMX_BOOTAUX=y
+CONFIG_SYS_EXTRA_OPTIONS="IMX_CONFIG=board/freescale/mx7dsabresd/imximage.cfg"
+CONFIG_HUSH_PARSER=y
+# CONFIG_CMD_BOOTD is not set
+CONFIG_CMD_BOOTZ=y
+# CONFIG_CMD_IMI is not set
+# CONFIG_CMD_IMLS is not set
+# CONFIG_CMD_XIMG is not set
+# CONFIG_CMD_EXPORTENV is not set
+# CONFIG_CMD_IMPORTENV is not set
+CONFIG_CMD_MEMTEST=y
+CONFIG_CMD_MMC=y
+CONFIG_CMD_I2C=y
+CONFIG_CMD_USB=y
+CONFIG_CMD_DFU=y
+CONFIG_CMD_USB_MASS_STORAGE=y
+CONFIG_CMD_GPIO=y
+CONFIG_CMD_DHCP=y
+CONFIG_CMD_MII=y
+CONFIG_CMD_PING=y
+CONFIG_CMD_CACHE=y
+CONFIG_CMD_EXT2=y
+CONFIG_CMD_EXT4=y
+CONFIG_CMD_EXT4_WRITE=y
+CONFIG_CMD_FAT=y
+CONFIG_USB=y
+CONFIG_USB_GADGET=y
+CONFIG_CI_UDC=y
+CONFIG_USB_GADGET_DOWNLOAD=y
+CONFIG_G_DNL_MANUFACTURER="FSL"
+CONFIG_G_DNL_VENDOR_NUM=0x0525
+CONFIG_G_DNL_PRODUCT_NUM=0xa4a5
+CONFIG_OF_LIBFDT=y
+CONFIG_MX7_SEC=y
-- 
1.9.1

[U-Boot] [PATCH 1/2] mx7: Place MX7_SEC option in Kconfig

[Fabio Estevam]

Hi Stefano,

On Fri, Jun 10, 2016 at 9:46 AM, Fabio Estevam <fabio.estevam@nxp.com> wrote:
> MX7_SEC is an existing configuration option that allows booting the
> kernel in secure mode.
>
> Place this option in Kconfig, so that boards can select this option
> in their defconfig files.
>
> Selecting this option is necessary when booting a kernel provided by
> NXP, such as 3.14_GA and 4.1.15_GA.
>
> Signed-off-by: Fabio Estevam <fabio.estevam@nxp.com>

Any comments about this one?

Also, it would be nice if you could create a 'next' branch so that non
bug fixes could be collected there.

Thanks

[U-Boot] [PATCH 1/2] mx7: Place MX7_SEC option in Kconfig

[Stefano Babic]

Hi Fabio,

On 17/06/2016 13:59, Fabio Estevam wrote:
> Hi Stefano,
> 
> On Fri, Jun 10, 2016 at 9:46 AM, Fabio Estevam <fabio.estevam@nxp.com> wrote:
>> MX7_SEC is an existing configuration option that allows booting the
>> kernel in secure mode.
>>
>> Place this option in Kconfig, so that boards can select this option
>> in their defconfig files.
>>
>> Selecting this option is necessary when booting a kernel provided by
>> NXP, such as 3.14_GA and 4.1.15_GA.
>>
>> Signed-off-by: Fabio Estevam <fabio.estevam@nxp.com>
> 
> Any comments about this one?
> 

It is in my queue for applying it.

> Also, it would be nice if you could create a 'next' branch so that non
> bug fixes could be collected there.

Sure - I am still busy, but I plan to do this in the week-end, and also
applying the bug fixes to -master.

Regards,
Stefano

-- 
=====================================================================
DENX Software Engineering GmbH,      Managing Director: Wolfgang Denk
HRB 165235 Munich, Office: Kirchenstr.5, D-82194 Groebenzell, Germany
Phone: +49-8142-66989-53 Fax: +49-8142-66989-80 Email: sbabic at denx.de
=====================================================================

[U-Boot] [PATCH 1/2] mx7: Place MX7_SEC option in Kconfig

[Michael Trimarchi]

Hi

On Fri, Jun 17, 2016 at 2:50 PM, Stefano Babic <sbabic@denx.de> wrote:
> Hi Fabio,
>
> On 17/06/2016 13:59, Fabio Estevam wrote:
>> Hi Stefano,
>>
>> On Fri, Jun 10, 2016 at 9:46 AM, Fabio Estevam <fabio.estevam@nxp.com> wrote:
>>> MX7_SEC is an existing configuration option that allows booting the
>>> kernel in secure mode.
>>>
>>> Place this option in Kconfig, so that boards can select this option
>>> in their defconfig files.
>>>
>>> Selecting this option is necessary when booting a kernel provided by
>>> NXP, such as 3.14_GA and 4.1.15_GA.
>>>
>>> Signed-off-by: Fabio Estevam <fabio.estevam@nxp.com>
>>
>> Any comments about this one?
>>
>
> It is in my queue for applying it.
>
>> Also, it would be nice if you could create a 'next' branch so that non
>> bug fixes could be collected there.
>
> Sure - I am still busy, but I plan to do this in the week-end, and also
> applying the bug fixes to -master.
>

Good, I was having this problem on my booting

Michael

> Regards,
> Stefano
>
> --
> =====================================================================
> DENX Software Engineering GmbH,      Managing Director: Wolfgang Denk
> HRB 165235 Munich, Office: Kirchenstr.5, D-82194 Groebenzell, Germany
> Phone: +49-8142-66989-53 Fax: +49-8142-66989-80 Email: sbabic at denx.de
> =====================================================================
> _______________________________________________
> U-Boot mailing list
> U-Boot at lists.denx.de
> http://lists.denx.de/mailman/listinfo/u-boot



-- 
| Michael Nazzareno Trimarchi                     Amarula Solutions BV |
| COO  -  Founder                                      Cruquiuskade 47 |
| +31(0)851119172                                 Amsterdam 1018 AM NL |
|                  [`as] http://www.amarulasolutions.com               |

[U-Boot] [PATCH 1/2] mx7: Place MX7_SEC option in Kconfig

[Fabio Estevam]

On Fri, Jun 17, 2016 at 9:50 AM, Stefano Babic <sbabic@denx.de> wrote:

> Sure - I am still busy, but I plan to do this in the week-end, and also
> applying the bug fixes to -master.

Excellent, thanks!

[U-Boot] [PATCH 1/2] mx7: Place MX7_SEC option in Kconfig

[Fabio Estevam]

On Fri, Jun 17, 2016 at 9:56 AM, Michael Trimarchi
<michael@amarulasolutions.com> wrote:

> Good, I was having this problem on my booting

Great, in this case providing a Tested-by tag would be nice :-)

[U-Boot] [PATCH 1/2] mx7: Place MX7_SEC option in Kconfig

[Michael Trimarchi]

Hi


On Fri, Jun 17, 2016 at 4:54 PM, Fabio Estevam <festevam@gmail.com> wrote:
> On Fri, Jun 17, 2016 at 9:56 AM, Michael Trimarchi
> <michael@amarulasolutions.com> wrote:
>
>> Good, I was having this problem on my booting
>
> Great, in this case providing a Tested-by tag would be nice :-)

Yes I will do. Different design ;) but way tonight ;)

Michael


-- 
| Michael Nazzareno Trimarchi                     Amarula Solutions BV |
| COO  -  Founder                                      Cruquiuskade 47 |
| +31(0)851119172                                 Amsterdam 1018 AM NL |
|                  [`as] http://www.amarulasolutions.com               |

[U-Boot] [PATCH 1/2] mx7: Place MX7_SEC option in Kconfig

[Michael Trimarchi]

Hi Stefano

On Fri, Jun 17, 2016 at 4:55 PM, Michael Trimarchi
<michael@amarulasolutions.com> wrote:
> Hi
>
>
> On Fri, Jun 17, 2016 at 4:54 PM, Fabio Estevam <festevam@gmail.com> wrote:
>> On Fri, Jun 17, 2016 at 9:56 AM, Michael Trimarchi
>> <michael@amarulasolutions.com> wrote:
>>
>>> Good, I was having this problem on my booting
>>
>> Great, in this case providing a Tested-by tag would be nice :-)
>
> Yes I will do. Different design ;) but way tonight ;)
>

Tested-by: Michael Trimarchi <michael@amarulasolutions.com>

> Michael
>
>
> --
> | Michael Nazzareno Trimarchi                     Amarula Solutions BV |
> | COO  -  Founder                                      Cruquiuskade 47 |
> | +31(0)851119172                                 Amsterdam 1018 AM NL |
> |                  [`as] http://www.amarulasolutions.com               |



-- 
| Michael Nazzareno Trimarchi                     Amarula Solutions BV |
| COO  -  Founder                                      Cruquiuskade 47 |
| +31(0)851119172                                 Amsterdam 1018 AM NL |
|                  [`as] http://www.amarulasolutions.com               |

[U-Boot] [PATCH 1/2] mx7: Place MX7_SEC option in Kconfig

[Stefano Babic]

On 17/06/2016 14:56, Michael Trimarchi wrote:
> Hi
> 
> On Fri, Jun 17, 2016 at 2:50 PM, Stefano Babic <sbabic@denx.de> wrote:
>> Hi Fabio,
>>
>> On 17/06/2016 13:59, Fabio Estevam wrote:
>>> Hi Stefano,
>>>
>>> On Fri, Jun 10, 2016 at 9:46 AM, Fabio Estevam <fabio.estevam@nxp.com> wrote:
>>>> MX7_SEC is an existing configuration option that allows booting the
>>>> kernel in secure mode.
>>>>
>>>> Place this option in Kconfig, so that boards can select this option
>>>> in their defconfig files.
>>>>
>>>> Selecting this option is necessary when booting a kernel provided by
>>>> NXP, such as 3.14_GA and 4.1.15_GA.
>>>>
>>>> Signed-off-by: Fabio Estevam <fabio.estevam@nxp.com>
>>>
>>> Any comments about this one?


Applied to -next, thanks !

Best regards,
Stefano Babic



-- 
=====================================================================
DENX Software Engineering GmbH,      Managing Director: Wolfgang Denk
HRB 165235 Munich, Office: Kirchenstr.5, D-82194 Groebenzell, Germany
Phone: +49-8142-66989-53 Fax: +49-8142-66989-80 Email: sbabic at denx.de
=====================================================================