Reference implementations of mitigations in TF-A for vulnerabilities in various CPU's were initially made available for public review in Gerrit. These have now after the opportunity for feedback been merged into the mainline branch.

I disabled user ericjonz and deleted his malicious comment. Thanks for bringing to our attention David
don

DO NOT click the link posted by ericjonze.
It is a malicious link.

Working in progress on this. Current low level APIs are not very well versed to be adapted efficiently for multipart cases. I am studying the algorithms first before defining a strategy to implement the multipart APIs and eventually (maybe) rework the low level driver API as well

Hi Ross, following changes were merged which help building on Arm and integrating to Yocto. Let us know how it goes. Thanks.

Hi @yuezhiran, I believe it's valid for this function to return 0. The bl1_plat_handle_post_image_load function is overridable by the platform, but we do not provide a mechanism for the platform to communicate the "acceptable" image IDs to the caller. We cannot therefore return an error if we receive an image ID that has no post-load process, because it may be called for any image (the FWU process does this here).

Ok, thanks a lot.

Have you tried a more recent release? v2.6 is our latest tagged release or try tip of tree?

I am using Avenger96 and Buildroot and ran into similar issue.

Hi
As you mentioned, req_states will be NULL only if pwrlvl is not valid. However, in my opinion, many checks have been done earlier to the invocation of the function to make sure pwrlvl is valid. See lines 246 and 428 in lib/psci/psci_common.c file. Can you tell if you have noticed any issue in your platform with PSCI library?

Thanks a lot.

A code coverage solution has been developed and is being tested before being rolled out in the production CI.

Thanks for your reply. So is there any way to calculate the coverage of TF-A(functions or codes)?

Noted. OpenSSL 3 not yet supported.

To be added to arm-cortex-m.cfg:

manually cut compile_commands.json only for interface files:

This issue is related to platform hardware limitations. so close it.

It is related with psa arch test issue, so close it.

Has been fixed.