From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received-SPF: Pass (sender SPF authorized) identity=mailfrom; client-ip=2607:f8b0:4001:c06::243; helo=mail-io0-x243.google.com; envelope-from=ard.biesheuvel@linaro.org; receiver=edk2-devel@lists.01.org Received: from mail-io0-x243.google.com (mail-io0-x243.google.com [IPv6:2607:f8b0:4001:c06::243]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ml01.01.org (Postfix) with ESMTPS id 1A692210C9978 for ; Wed, 30 May 2018 23:04:48 -0700 (PDT) Received: by mail-io0-x243.google.com with SMTP id t6-v6so5906919iob.10 for ; Wed, 30 May 2018 23:04:48 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=linaro.org; s=google; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=RSXbnpr0Wogj1RXO7QeUxNoXCYydbGpfVcoKwj5GOio=; b=GTqDH0bSgHJhMaPQpuqYNyodspEXoNNghmEgvEpkz08eGddFHloSsY7tmN0M7e/OTq VCXsDLsQswkbOtHeivYiOyA+iJPyiuMiZR5CeAcdAwyluY4QoNslQWkmsl2JO2pupoLg TVD5XotWC550kl2mLcw3CFhH+Bb5iuMMpuGXk= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=RSXbnpr0Wogj1RXO7QeUxNoXCYydbGpfVcoKwj5GOio=; b=FNUpLIM8SOn5hLF3dLixjoJGe428Futilm8sWRfgPwU8poeEmL6uFhJnP6rwLKvjaI GRZGmsZZsH0pTIjIUwzlKoPun5KS0+RCP6tKyUkUSG8hN4XeDHVpvAUzKCbqC3zA3GnD LLVeaU7+Iqcxr9WYBiCofEpQp2hemke8f6RgJZ6gmv2FhnVNG1wed5Wu/hxYSM96l3yA YHwcwGq1+6ELq4swSrxj84thn4PdhWOYor/uE4Cz13ygocS9PDDsWQSOdBCHZJBkn5uD vOFhsx2AZhMZHmeHmAQxFEp9nXZpm5EaS74sTJI/PYyydmEzTSGIyPcCgRt8aLraMTTL yocg== X-Gm-Message-State: APt69E37Iq5klO2w7ey/ggDsuSrO6UtF18lfq+saJXK3YoNaYJERU4fl CHZXDdoAva59bOyv1VwRyyu2NDOZ6H9Qk3EfJnjEZL0d X-Google-Smtp-Source: ADUXVKKVmiyavWKuE29Ft6fVTtb4pQjVDynx+RFrIW0umgYacVCxQ50u+LLWTzLxDhOS6PuTUqtZ0RKtyYrkX5h2maE= X-Received: by 2002:a6b:545:: with SMTP id 66-v6mr5029008iof.173.1527746687753; Wed, 30 May 2018 23:04:47 -0700 (PDT) MIME-Version: 1.0 Received: by 2002:a6b:bb86:0:0:0:0:0 with HTTP; Wed, 30 May 2018 23:04:47 -0700 (PDT) In-Reply-To: <20180316161322.6756-1-ard.biesheuvel@linaro.org> References: <20180316161322.6756-1-ard.biesheuvel@linaro.org> From: Ard Biesheuvel Date: Thu, 31 May 2018 08:04:47 +0200 Message-ID: To: "edk2-devel@lists.01.org" Cc: Leif Lindholm , Ard Biesheuvel Subject: Re: [RFC PATCH edk2-platforms 0/6] expand capsule to include SCP firmware X-BeenThere: edk2-devel@lists.01.org X-Mailman-Version: 2.1.26 Precedence: list List-Id: EDK II Development List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 31 May 2018 06:04:49 -0000 Content-Type: text/plain; charset="UTF-8" On 16 March 2018 at 17:13, Ard Biesheuvel wrote: > Now that the NOR flash layout has been updated to split the actual SCP > firmware from the startup code and the builtin flasher, we can add the > SCP image to the capsule update to make it field upgradeable. > > This involves some rather nasty plumbing, since making changes to capsule > update installable via capsule update requires some additional care. > > Patch #1 fixes a bug in the FVB handling code of the flash access library. > > Patch #2 addresses an issue where we accidentally started to dereference > arbitrary data as an FV header by incorporating the secure firmware binary > into the flash device. > > Patch #3 is an optimization that speeds up flashing of sparse capsules. > > Patch #4 adds a PCD that holds the minimum firmware version that is allowed > by a platform. We will use this to ensure that systems using the new layout > cannot be flashed using older capsules, which is unlikely to work in any > case, but not guaranteed to fail in a harmless manner. > > Patch #5 is a temporary hack we will need to use to build capsules that > allow upgrading from the old layout to the new layout > > Patch #6 implements the new layout, and adds support to set the minimum > version on the build command line. > > Ard Biesheuvel (6): > Silicon/SynQuacerPlatformFlashAccessLib: fix return value on no FVB > found > Silicon/SynQuacerPlatformFlashAccessLib: don't dereference FVB header > fields > Silicon/SynQuacerPlatformFlashAccessLib: skip empty blocks > Silicon/SynQuacer: make lowest supported f/w version PCD configurable > TEMPORARY > Platform/Socionext/DeveloperBox: add SCP firmware image to capsule > > Platform/Socionext/DeveloperBox/DeveloperBox.dsc | 3 ++ > Platform/Socionext/DeveloperBox/DeveloperBox.fdf | 15 ++++--- > Platform/Socionext/DeveloperBox/SystemFirmwareDescriptor/SystemFirmwareDescriptor.inf | 2 + > Platform/Socionext/DeveloperBox/SystemFirmwareDescriptor/SystemFirmwareDescriptorTable.aslc | 2 +- > Platform/Socionext/DeveloperBox/SystemFirmwareUpdateConfig/SystemFirmwareUpdateConfig.ini | 4 +- > Silicon/Socionext/SynQuacer/Library/SynQuacerPlatformFlashAccessLib/SynQuacerPlatformFlashAccessLib.c | 46 ++++++++++++++++---- > Silicon/Socionext/SynQuacer/SynQuacer.dec | 3 ++ > 7 files changed, 58 insertions(+), 17 deletions(-) > Ping?