<feed xmlns='http://www.w3.org/2005/Atom'>
<title>staging/nbd/include/trusted-firmware-a.mk, branch master</title>
<subtitle>Felix Fietkaus staging tree</subtitle>
<id>https://git.openwrt.org/openwrt/staging/nbd/atom?h=master</id>
<link rel='self' href='https://git.openwrt.org/openwrt/staging/nbd/atom?h=master'/>
<link rel='alternate' type='text/html' href='https://git.openwrt.org/openwrt/staging/nbd/'/>
<updated>2025-04-06T11:21:07Z</updated>
<entry>
<title>include/trusted-firmware-a.mk: support LTS releases</title>
<updated>2025-04-06T11:21:07Z</updated>
<author>
<name>Stijn Tintel</name>
</author>
<published>2025-03-24T22:20:32Z</published>
<link rel='alternate' type='text/html' href='https://git.openwrt.org/openwrt/staging/nbd/commit/?id=06c4e8a262e4618e61866ed92e296e46a1b6b671'/>
<id>urn:sha1:06c4e8a262e4618e61866ed92e296e46a1b6b671</id>
<content type='text'>
TF-A LTS releases have an lts- prefix in their version tag. Introduce a
PKG_LTS variable to support these.

As the non-LTS tarbals do not contain the version prefix in the
directory, we need different PKG_BUILD_DIR for each variant:

➜ tar --list --file dl/trusted-firmware-a-v2.12.tar.gz  | head -n1
trusted-firmware-a-2.12/
➜ tar --list --file dl/trusted-firmware-a-lts-v2.12.1.tar.gz  | head -n1
trusted-firmware-a-lts-v2.12.1/

Signed-off-by: Stijn Tintel &lt;stijn@linux-ipv6.be&gt;
</content>
</entry>
<entry>
<title>include/trusted-firmware-a.mk: unset CC before compiling</title>
<updated>2025-01-04T17:11:40Z</updated>
<author>
<name>Thomas Richard</name>
</author>
<published>2025-01-03T09:19:05Z</published>
<link rel='alternate' type='text/html' href='https://git.openwrt.org/openwrt/staging/nbd/commit/?id=4baa20ec661725550a830e7c86f9f75cbb1fbc4b'/>
<id>urn:sha1:4baa20ec661725550a830e7c86f9f75cbb1fbc4b</id>
<content type='text'>
If CC is explicitly set to a non default value, TF-A keeps this value.
Otherwise it assigns generic default value.
As the build bot set CC=/usr/bin/gcc-10, TF-A uses it which causes a
compile issue.
So unset CC before compiling.

It's a new behavior since v2.12. A part of the explanation is available in
this commit [1].

[1] https://github.com/ARM-software/arm-trusted-firmware/commit/e01c71266f9df46ac46dc72669449490d1c94419

Signed-off-by: Thomas Richard &lt;thomas.richard@bootlin.com&gt;
Link: https://github.com/openwrt/openwrt/pull/17465
Signed-off-by: Hauke Mehrtens &lt;hauke@hauke-m.de&gt;
</content>
</entry>
<entry>
<title>trusted-firmware-a.mk: fix release download URL</title>
<updated>2024-12-28T10:20:20Z</updated>
<author>
<name>Chukun Pan</name>
</author>
<published>2024-12-20T14:30:01Z</published>
<link rel='alternate' type='text/html' href='https://git.openwrt.org/openwrt/staging/nbd/commit/?id=4b6eb631e18b3ccccada91d5bccbb684e6ccc5a4'/>
<id>urn:sha1:4b6eb631e18b3ccccada91d5bccbb684e6ccc5a4</id>
<content type='text'>
The URL of trusted-firmware-a is no longer available for
downloading release:
https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/
curl: (22) The requested URL returned error: 401 Unauthorized

So we switch to the GitHub mirror repository to download.

Signed-off-by: Chukun Pan &lt;amadeus@jmu.edu.cn&gt;
Link: https://github.com/openwrt/openwrt/pull/17360
Signed-off-by: Robert Marko &lt;robimarko@gmail.com&gt;
</content>
</entry>
<entry>
<title>include/trusted-firmware-a.mk: remove the no-warn-rwx-segments hack</title>
<updated>2024-12-22T22:48:53Z</updated>
<author>
<name>Thomas Richard</name>
</author>
<published>2024-11-29T10:36:46Z</published>
<link rel='alternate' type='text/html' href='https://git.openwrt.org/openwrt/staging/nbd/commit/?id=c117d7a37a74f8b4c06828a4549d500288a124a7'/>
<id>urn:sha1:c117d7a37a74f8b4c06828a4549d500288a124a7</id>
<content type='text'>
Since v2.12, TF-A automatically selects the no-warn-rwx-segments option if
needed.
So move this hack to the package Makefiles.

Signed-off-by: Thomas Richard &lt;thomas.richard@bootlin.com&gt;
Link: https://github.com/openwrt/openwrt/pull/17243
Signed-off-by: Hauke Mehrtens &lt;hauke@hauke-m.de&gt;
</content>
</entry>
<entry>
<title>include/trusted-firmware-a.mk: allow overriding package install template</title>
<updated>2024-05-07T20:01:42Z</updated>
<author>
<name>Felix Fietkau</name>
</author>
<published>2024-05-07T17:38:25Z</published>
<link rel='alternate' type='text/html' href='https://git.openwrt.org/openwrt/staging/nbd/commit/?id=3cb8dc3786039d7d2a143fdbf5c3b9249f5bbbf3'/>
<id>urn:sha1:3cb8dc3786039d7d2a143fdbf5c3b9249f5bbbf3</id>
<content type='text'>
Useful for special targets (e.g. RAM-only images)

Signed-off-by: Felix Fietkau &lt;nbd@nbd.name&gt;
</content>
</entry>
<entry>
<title>trusted-firmware-a.mk: fix build with binutils 2.39+</title>
<updated>2023-01-21T10:55:23Z</updated>
<author>
<name>Linhui Liu</name>
</author>
<published>2023-01-17T01:27:38Z</published>
<link rel='alternate' type='text/html' href='https://git.openwrt.org/openwrt/staging/nbd/commit/?id=c783c50d65966e7c3caa156e4df67e2fcc3aa168'/>
<id>urn:sha1:c783c50d65966e7c3caa156e4df67e2fcc3aa168</id>
<content type='text'>
Starting from version 2.39 binutils now warns about sections with rwx
permissions. While this is generally desirable it breaks building
ARM TrustedFirmware-A bl2 which treats warnings as errors.
Disable the warning/error for now to fix build.

Reference: 0579d9f5bc4b3a3d1b32526c71a6b77c4888bfcb

Signed-off-by: Linhui Liu &lt;liulinhui36@gmail.com&gt;
</content>
</entry>
<entry>
<title>trusted-firmware-a.mk: use correct CPE ID</title>
<updated>2022-12-20T18:36:26Z</updated>
<author>
<name>Stijn Tintel</name>
</author>
<published>2022-12-20T18:04:53Z</published>
<link rel='alternate' type='text/html' href='https://git.openwrt.org/openwrt/staging/nbd/commit/?id=c8c6508c22c59a09b7acce63bed28947788a46d4'/>
<id>urn:sha1:c8c6508c22c59a09b7acce63bed28947788a46d4</id>
<content type='text'>
There are 2 different CPE IDs on the NVD website:
cpe:/a:arm:trusted_firmware-a
cpe:/o:arm:arm_trusted_firmware

The ID as currently used in trusted-firmware-a.mk does not exist. The
CPE ID using the arm_trusted_firmware product name only lists a few
records for versions 2.2 and 2.3 on the NVD site. The CPE ID using the
trusted_firmware-a product name lists many more records, and actually
has a CVE linked to it. Therefore, use the CPE ID using the
trusted_firmware-a product name.

Fixes: 104d60fe94ce ("trusted-firmware-a.mk: add PKG_CPE_ID")
Signed-off-by: Stijn Tintel &lt;stijn@linux-ipv6.be&gt;
</content>
</entry>
<entry>
<title>trusted-firmware-a.mk: fix build with binutils 2.39</title>
<updated>2022-12-05T01:28:28Z</updated>
<author>
<name>Daniel Golle</name>
</author>
<published>2022-12-02T12:54:52Z</published>
<link rel='alternate' type='text/html' href='https://git.openwrt.org/openwrt/staging/nbd/commit/?id=0579d9f5bc4b3a3d1b32526c71a6b77c4888bfcb'/>
<id>urn:sha1:0579d9f5bc4b3a3d1b32526c71a6b77c4888bfcb</id>
<content type='text'>
Starting from version 2.39 binutils now warns about sections with rwx
permissions. While this is generally desirable it breaks building
ARM TrustedFirmware-A bl2 which treats warnings as errors.
Disable the warning/error for now to fix build.

Signed-off-by: Daniel Golle &lt;daniel@makrotopia.org&gt;
</content>
</entry>
<entry>
<title>trusted-firmware-a.mk: pass DTC path similar to u-boot.mk</title>
<updated>2022-08-28T18:01:55Z</updated>
<author>
<name>Daniel Golle</name>
</author>
<published>2022-08-11T21:29:52Z</published>
<link rel='alternate' type='text/html' href='https://git.openwrt.org/openwrt/staging/nbd/commit/?id=14ce999924012b99c61b336527d1bc224823b78a'/>
<id>urn:sha1:14ce999924012b99c61b336527d1bc224823b78a</id>
<content type='text'>
Instead of relying on dtc being provided by the build host use the
dtc from $(LINUX_DIR) similar to how it's done also in u-boot.mk.
For this to work kernel.mk now needs to be included before
trusted-firmware-a.mk, add this include to all affected packages.

Signed-off-by: Daniel Golle &lt;daniel@makrotopia.org&gt;
</content>
</entry>
<entry>
<title>trusted-firmware-a.mk: make sure include directory exists</title>
<updated>2022-04-09T21:24:36Z</updated>
<author>
<name>Daniel Golle</name>
</author>
<published>2022-04-09T21:00:50Z</published>
<link rel='alternate' type='text/html' href='https://git.openwrt.org/openwrt/staging/nbd/commit/?id=738d44f5ea6f6450c2c8a29cf5836e22b479340b'/>
<id>urn:sha1:738d44f5ea6f6450c2c8a29cf5836e22b479340b</id>
<content type='text'>
ARM Trusted Firmware builds do not depend on any target libraries as
they are bare-metal builds. However, the compiler aborts due to
-Werror=missing-include-dirs if the include dir doesn't exists and this
can happen when building with parallelisation as that makes it likely
for arm-trusted-firmware-* to be build very early before any of the
libraries which would implicitely create the directory.
Fix this by making sure the include dir exists before building.

Signed-off-by: Daniel Golle &lt;daniel@makrotopia.org&gt;
</content>
</entry>
</feed>
