| commit | 5da4da99e0bb3d694e93046207ae4ce3b5545043 | [log] [tgz] |
|---|---|---|
| author | Ricardo Salveti <ricardo@foundries.io> | Tue Feb 09 19:31:52 2021 -0300 |
| committer | Jérôme Forissier <jerome@forissier.org> | Mon Mar 29 13:09:45 2021 +0200 |
| tree | d07800341a2196cd00575bc32790aa2f87a69d9e | |
| parent | bda34420cf2e6fa0f20340d409ec245ada7e6cf4 [diff] |
tee-supplicant: rpmb: switch to MMC_IOC_MULTI_CMD On some eMMC devices, the mix of RPMB and normal MMC commands can result in GENERAL FAILURE, which then forces OP-TEE to mark the RPMB device as dead (part of the rollback vulnerability fix). In order to work around this problem, the linux kernel also supports sending all the required MMC_IOC commands in one single multiple ioctl command request, which forces the RPMB commands to be serialized, avoiding the issue. As MMC_IOC_MULTI_CMD is available since linux 4.3, we should be safe to use it by default on read / write block operations. For reference, this issue is also nicely described at the https://www.mail-archive.com/linux-mmc@vger.kernel.org/msg17589.html. Reviewed-by: Jerome Forissier <jerome@forissier.org> Tested-by: Igor Opaniuk <igor.opaniuk@foundries.io> Signed-off-by: Ricardo Salveti <ricardo@foundries.io>
This git contains source code for the non-secure side implementation of the OP-TEE project making up the client library and tee-supplicant.
All official OP-TEE documentation has moved to http://optee.readthedocs.io. The information that used to be here in this git can be found under optee_client.
// OP-TEE core maintainers