From mboxrd@z Thu Jan 1 00:00:00 1970 Authentication-Results: mx.groups.io; dkim=pass header.i=@linaro.org header.s=google header.b=mzHRuBSC; spf=pass (domain: linaro.org, ip: 209.85.166.194, mailfrom: ard.biesheuvel@linaro.org) Received: from mail-it1-f194.google.com (mail-it1-f194.google.com [209.85.166.194]) by groups.io with SMTP; Mon, 10 Jun 2019 07:59:38 -0700 Received: by mail-it1-f194.google.com with SMTP id k134so131228ith.1 for ; Mon, 10 Jun 2019 07:59:38 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=linaro.org; s=google; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=/46AIqifs3dusvN8Ahx1u3NvQKLuc0SY6rCZJxVJ3Kk=; b=mzHRuBSCFhZwkSvioHRXfyaDPmIeuR6IBMnSm+lcqiIbDIlHEPyGO4EvP1vdVdEPRB pgdF5wVO+dPfGsJXiNKZ2DiIErXC9DtlIo5iI/XHGlzflt/FmynruwK1KfAkXjDnJR13 0miVSXptIoaOICqmh8/SI/ZknGHVGXs17TySd/oSHRiITob/4W4/nPb8YWIIF5ZB/toC wGkcrkupGL/zAdT26NYD6H8LOEN0DWqTKoa42mBbmzIbPqBbnI3c85tH0kfwdoIVT1xj xQhWooIUmN6cRUFWBattky+65WSeSguVbjppmswhcpqYfBF3ju1wz5VKfpL0pnQ2ToPm 7WRA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=/46AIqifs3dusvN8Ahx1u3NvQKLuc0SY6rCZJxVJ3Kk=; b=MurHdgfkmQeZ4ZLsq64begEFwDrIlR9hWufqfQawmuzFMDHVCsIRhtFgDDBDlvMeHy BtSnJTz8aO6GCYFT3VUBJGEMW/cLzxwP43e6z9NhXwyZkSK+ofHlwAZciRuiJ2jQboGn RjG7b9ygmEjkYILqLiQc7lsZJ2TTAJ77t9L7g3/F2OukqcdF8WTH4/tLpJIuSZuXTn0V K8USc73Y1vCpEvE8s2QDc2a0tJAvcCZeoSGf01PiTqBeM/r0/UzZc30IDEHgchnADfDd gytn9GjTq1nAeN8jVghD+2WmOJj5Qhkd8YIiUYOPhTD5UFYq83hFNbQNa5+CET+2V4AV 2vBw== X-Gm-Message-State: APjAAAUEm/B7YPHQYKGhdNq+5q8ql0pSnrsqteBSyMahdUC67ZS4Zpz4 Ya+iZOdflLLB/lrqb+LIrQFMBdHvDKQEdNb62U9ngQ== X-Google-Smtp-Source: APXvYqyf3v/8FCnPGbd5lFcOy03qJOM9mqHhOgbVRt3xtsNvZMtFUGxLghLA2L3QhFIg/KZ1HCFb6Rh/fdIyrpDOTZo= X-Received: by 2002:a05:660c:44a:: with SMTP id d10mr13072293itl.153.1560178777859; Mon, 10 Jun 2019 07:59:37 -0700 (PDT) MIME-Version: 1.0 References: <20190610124504.6536-1-pete@akeo.ie> <20190610124504.6536-2-pete@akeo.ie> In-Reply-To: <20190610124504.6536-2-pete@akeo.ie> From: "Ard Biesheuvel" Date: Mon, 10 Jun 2019 16:59:26 +0200 Message-ID: Subject: Re: [edk2-non-osi: PATCH 1/1] Platform/RaspberryPi/RPi3: Update ATF binaries to v2.1 To: Pete Batard Cc: edk2-devel-groups-io , Leif Lindholm Content-Type: text/plain; charset="UTF-8" On Mon, 10 Jun 2019 at 14:45, Pete Batard wrote: > > This patch updates the ARM Trusted Firmware to the latest release > using AppVeyor built binaries that provide verifiable evidence that > the files have not been altered from a vanilla source compilation. > > Signed-off-by: Pete Batard Thanks Pete Reviewed-by: Ard Biesheuvel Pushed as 596043ffb61d..eb114ec4db68 > --- > Platform/RaspberryPi/RPi3/TrustedFirmware/License.txt | 2 +- > Platform/RaspberryPi/RPi3/TrustedFirmware/Readme.md | 18 +++++++++++------- > Platform/RaspberryPi/RPi3/TrustedFirmware/bl1.bin | Bin 18801 -> 18776 bytes > Platform/RaspberryPi/RPi3/TrustedFirmware/fip.bin | Bin 41714 -> 45792 bytes > 4 files changed, 12 insertions(+), 8 deletions(-) > > diff --git a/Platform/RaspberryPi/RPi3/TrustedFirmware/License.txt b/Platform/RaspberryPi/RPi3/TrustedFirmware/License.txt > index b98dc643227e..48429979fec2 100644 > --- a/Platform/RaspberryPi/RPi3/TrustedFirmware/License.txt > +++ b/Platform/RaspberryPi/RPi3/TrustedFirmware/License.txt > @@ -1,4 +1,4 @@ > -Copyright (c) 2013-2018, ARM Limited and Contributors. All rights reserved. > +Copyright (c) 2013-2019, ARM Limited and Contributors. All rights reserved. > > Redistribution and use in source and binary forms, with or without modification, > are permitted provided that the following conditions are met: > diff --git a/Platform/RaspberryPi/RPi3/TrustedFirmware/Readme.md b/Platform/RaspberryPi/RPi3/TrustedFirmware/Readme.md > index 74bcec7d1f12..f0c4fcf414be 100644 > --- a/Platform/RaspberryPi/RPi3/TrustedFirmware/Readme.md > +++ b/Platform/RaspberryPi/RPi3/TrustedFirmware/Readme.md > @@ -1,17 +1,21 @@ > ARM Trusted Firmware for Raspberry Pi 3 > ======================================= > > -The `bl1` and `fip` ATF binaries, found in this directory, were built from > -the [official ATF source](https://github.com/ARM-software/arm-trusted-firmware) > -(commit c3859557) using Linaro's GCC 5.5 compiler with: > +The `bl1.bin` and `fip.bin` ATF binaries found in this directory were built from the > +[official ATF 2.1 release](https://github.com/ARM-software/arm-trusted-firmware/releases/tag/v2.1) > +through an [AppVeyor build script](https://github.com/pbatard/pitf/blob/master/appveyor.yml) > +that is designed to provide evidence that these binaries match the vanilla ATF source. > > +As per the [AppVeyor build log](https://ci.appveyor.com/project/pbatard/pitf/builds/24506898), > +the SHA-256 sums for the blobs can be validated to be as follows: > +- `bl1.bin`: `57e30ed8572e6a3a161c231e68138ee2c78e9dfc6dc51be8c0b4d9c3fe9bbfad` > +- `fip.bin`: `b7eadad3a11088e322c52ab5fd2247a7bc79dc086a21db12cc8079a2ab4789f6` > + > +For Raspberry Pi 3 usage, ATF was built using the command: > ``` > -export CROSS_COMPILE=/usr/src/gcc-linaro-5.5.0-2017.10-x86_64_aarch64-linux-gnu/bin/aarch64-linux-gnu- > make PLAT=rpi3 PRELOADED_BL33_BASE=0x30000 RPI3_PRELOADED_DTB_BASE=0x10000 SUPPORT_VFP=1 RPI3_USE_UEFI_MAP=1 fip all > ``` > - > -This results in the following memory mapping: > - > +which results in the following memory mapping: > ``` > 0x00000000 +-----------------+ > | ROM | BL1