Commit Graph

604 Commits (master)

Author SHA1 Message Date
David Garske 767ef3de3c Add compressed firmware updates installed into an execute-in-place slot 2026-11-04 14:35:53 +01:00
David Garske 80a186f5c5
Merge pull request #953 from bigbrett/tc3-port-tweaks
Monolithic self-update version check + TC3xx/wolfHSM changes
2026-10-30 10:47:03 -07:00
Mattia Moffa 24776f3b7a
Merge pull request #949 from dgarske/psoc_e8
Add wolfBoot target for Infineon PSOC Edge E8
2026-10-28 23:02:17 +01:00
David Garske eca987ba9d
Merge pull request #952 from danielinux/signer-claimed-role-fix
boot: bind image partition claim to the booting core
2026-10-28 14:35:37 -07:00
David Garske 3681ea8996 Add wolfBoot target for Infineon PSOC Edge E8 2026-10-28 14:24:42 -07:00
twcook86 aa9685b03a
Merge pull request #950 from aidangarske/lpc55s69-port-update
Harden LPC55S69 TrustZone isolation and add tests, CI and docs
2026-10-28 15:12:27 -04:00
Daniele Lacamera f462765545 unit-tests: stub part check in update-disk-failover 2026-10-28 14:48:44 +01:00
Daniele Lacamera ea9c4c3120 unit-tests: stub part check in update-disk-fs, test disk partition mismatch 2026-10-28 14:37:09 +01:00
Daniele Lacamera c51b353521 boot: bind image partition claim to the booting core
Add wolfBoot_image_part_matches(), which requires the image's claimed
partition id to match HDR_IMG_TYPE_APP.
2026-10-28 14:37:09 +01:00
Daniele Lacamera 97a87d3655 Custom trailer: record the rollback direction in the UPDATE state 2026-10-28 14:35:31 +01:00
Daniele Lacamera 1b9cb03aba Make the custom-trailer final step power-fail safe 2026-10-28 14:35:31 +01:00
Daniele Lacamera 76a8b2b3ea Refuse partitions too small for the trailer, add STM32F4 custom trailer (#937) 2026-10-28 14:35:31 +01:00
David Garske 5d02ce6811 lpc55s69: repair ECC-corrupt pages at boot, lock bus masters non-secure under TZ, set MSPLIM 2026-10-27 17:17:02 -07:00
Aidan Garske 3345f87fba Harden LPC55S69 TrustZone isolation and add tests, CI and docs 2026-10-27 16:15:37 -07:00
David Garske 3b5bc1f064 PolarFire SoC: skip a watchdog refresh inside the forbidden window 2026-10-27 16:06:05 -07:00
David Garske 4f0948e11d PolarFire SoC: a FIT ramdisk that must load, and failover actions before the golden boot 2026-10-27 16:06:05 -07:00
David Garske a91c824e45 PolarFire SoC: sNVM/PUF key storage and disk image encryption 2026-10-27 16:06:04 -07:00
Brett Nicholas 3d484f46b5 split monolithic test into its own rule 2026-10-27 09:40:22 -07:00
Brett Nicholas 49313ec8da self-update: check self-header version in monolithic mode 2026-10-27 09:09:21 -07:00
Brett Nicholas 213d7d75ce bounds-check journal sector flags, test ECC self-update, fix doc typos 2026-10-27 16:46:40 +01:00
Brett Nicholas 8e705ae048 dont erase journal if marker write fails 2026-10-27 16:46:40 +01:00
Brett Nicholas 258c640459 Add journal marker sector to better detect cut erase 2026-10-27 16:46:40 +01:00
Brett Nicholas 9bf14d722a rename for clarity 2026-10-27 16:46:40 +01:00
Brett Nicholas 1f6d07227d add ELF_FLASH_SCATTER_PRESERVE_SECTORS and associated tests 2026-10-27 16:46:40 +01:00
Brett Nicholas 41fbe4b326 Improve support for ECC flash parts:
- Add NVM ECC mode, which introduces a new erase check HAL API to use
   flash controller HW to blank check sectors instead of reading them
   and comparing to an erased byte (which typically triggers an ECC
   fault)
 - Add NVM Journal mode as an alternative to NVM_FLASH_WRITE_ONCE that
   does not require a sector-size RAM buffer and dramatically reduces
   the number of erases and programs required to set individual flags,
   while also being much more robust to power-cuts.
2026-10-27 16:46:40 +01:00
David Garske 2ab656528a zynqmp: report the PUF control fuses and correct the regeneration API 2026-10-26 19:59:53 +01:00
Marco Oliverio b240ee7aaa
Merge pull request #933 from dgarske/nai_68int6
Add wolfBoot target for the NAI 68INT6 (Intel Tiger Lake UP3) OpenVPX SBC
2026-10-26 10:04:12 +01:00
Zackery 8685a5a28c
Merge pull request #946 from dgarske/pl011_uart_rx
Add a non-blocking uart_rx() to the PL011 consoles
2026-10-23 15:55:28 -06:00
David Garske d490e36d2e fdt: boot a FIT with no kernel load/entry and no device tree 2026-10-23 11:49:49 -07:00
David Garske 8d34051e6e uart: add a non-blocking uart_rx() to the PL011 consoles 2026-10-23 11:48:36 -07:00
David Garske aef57a113d versal: support the system watchdog timer (WWDT) 2026-10-22 18:11:12 +02:00
David Garske 08f20f8364 sdhci: clear BWR before refilling the PIO write buffer 2026-10-22 18:09:49 +02:00
David Garske 43655708c3 zynqmp: add the eFuse programming gate and a report-only write transport 2026-10-22 18:05:42 +02:00
David Garske 942f3b938c zynqmp: add BBRAM AES key programming and an eFuse security state accessor 2026-10-22 18:05:42 +02:00
Brett Nicholas 0a3b0f7184 Add version check in SWAP copy of sector 0 to prevent rollbacks 2026-10-16 21:40:42 +02:00
Brett Nicholas bd6a4a1e69 Extend powerfail swap fix to EXT_ENCRYPTED 2026-10-16 21:40:42 +02:00
Brett Nicholas e22f89459f fix power-fail hole where power loss during UPDATE header that faulted the BOOT->UPDATE copy step caused unrecoverable failure 2026-10-16 21:40:42 +02:00
Andrew Hutchings 7f9f960115 unit-tests: cover skipped erased units in the STM32U5 write test
Readback cannot tell a skipped unit from one programmed with 0xFF, so
the mock hal_flash_wait_complete() now counts program operations
(waits with FLASH_CR_PG set). New tests check that erased data over
erased flash is not programmed (aligned and unaligned), that only the
units with data are programmed when erased and data units are mixed,
and that units are still programmed for data inside an erased unit,
for 0xFF over flash that is not erased, and for 0xFF in a unit that
holds data outside the request. The three skip tests fail on the HAL
without the skip.
2026-10-16 16:45:12 +02:00
David Garske f2a6fc2e23 imx95: add host unit tests for the ELE mailbox and disk_read 2026-10-15 15:27:28 -07:00
David Garske 608610dc16 imx95_a55: add the Cortex-A55 target and a stage 1 replacing U-Boot SPL 2026-10-15 15:27:28 -07:00
Aidan Garske 1b425abfe8 Add Agilex 5 FCS and wolfBoot integration 2026-10-15 10:25:33 -07:00
David Garske 363483ed54 nai_68int6: add wolfBoot target for the NAI 68INT6 (Intel Tiger Lake UP3) OpenVPX SBC 2026-10-14 21:56:32 -07:00
David Garske aa6fdb8fa9 x86 FSP: add TPM-NV anti-rollback with a persistent version floor and boot audit counters 2026-10-14 21:56:32 -07:00
Mattia Moffa 400bce6317
Merge pull request #924 from dgarske/stm32h7s
Add wolfBoot target for STM32H7S3L8 with partitions on external Octo-SPI NOR
2026-10-12 20:40:19 +02:00
David Garske e415826eb7 Add STM32H7S target with partitions on external Octo-SPI NOR 2026-10-11 21:45:53 -07:00
David Garske 1f6f27cb4b
Merge pull request #930 from aidangarske/nrf54lm20-port
Add nRF54LM20 support and fix nRF54L RAM code, keyvault, and cache
2026-10-11 21:29:37 -07:00
Aidan Garske e493aee67f Harden the NXP MCX W71 port and add console, timer and wolfCrypt-TZ 2026-10-09 21:04:57 +01:00
David Garske 79fe3e694e
Merge pull request #926 from aidangarske/rw612
Add NXP FRDM-RW612 port and test NXP HALs against the real MCUXpresso SDK
2026-10-09 12:26:07 -07:00
Aidan Garske d147db6dfd Add NXP RW612 target with TrustZone support 2026-10-09 17:06:01 +01:00
David Garske cd4174ccc9 update_disk: fail closed when the boot-part DTB fixup does not land, and run it on the BL31 handoff 2026-10-07 20:44:28 -07:00