On Thu, Jun 11, 2020 at 05:28:45AM +0000, Ye Li wrote:
> Hi Tom,
>
> > -----Original Message-----
> > From: Tom Rini <tr...@konsulko.com>
> > Sent: 2020年6月11日 4:16
> > To: u-boot@lists.denx.de
> > Cc: Stefano Babic <sba...@denx.de>; Fabio Estevam
> > <feste...@gmail.com>; dl-uboot-imx <uboot-...@nxp.com>
> > Subject: [EXT] [PATCH 24/30] arm: imx: Finish migration of CONFIG_CSF_SIZE
> > to Kconfig
> >
> > Caution: EXT Email
> >
> > While the normal case of CSF_SIZE is handled via Kconfig we have entries in
> > config headers related to CONFIG_SECURE_BOOT. However in commit
> > d714a75fd4dc ("imx: replace CONFIG_SECURE_BOOT with
> > CONFIG_IMX_HAB") this was renamed to CONFIG_IMX_HAB. Update the
> > CSF_SIZE entry to have the correct default value if we have IMX_HAB
> > enabled.
> >
> > Cc: Stefano Babic <sba...@denx.de>
> > Cc: Fabio Estevam <feste...@gmail.com>
> > Cc: NXP i.MX U-Boot Team <uboot-...@nxp.com>
> > Fixes: d714a75fd4dc ("imx: replace CONFIG_SECURE_BOOT with
> > CONFIG_IMX_HAB")
> > Signed-off-by: Tom Rini <tr...@konsulko.com>
> > ---
> > arch/arm/mach-imx/Kconfig | 1 +
> > include/configs/imx8mm_beacon.h | 4 ----
> > include/configs/imx8mm_evk.h | 4 ----
> > include/configs/imx8mn_evk.h | 4 ----
> > include/configs/imx8mp_evk.h | 4 ----
> > include/configs/verdin-imx8mm.h | 4 ----
> > 6 files changed, 1 insertion(+), 20 deletions(-)
> >
> > diff --git a/arch/arm/mach-imx/Kconfig b/arch/arm/mach-imx/Kconfig index
> > 6c3fedf665d6..0648c2725bf8 100644
> > --- a/arch/arm/mach-imx/Kconfig
> > +++ b/arch/arm/mach-imx/Kconfig
> > @@ -52,6 +52,7 @@ config IMX_HAB
> >
> > config CSF_SIZE
> > hex "Maximum size for Command Sequence File (CSF) binary"
> > + default 0x2000 if IMX_HAB
> I suggest using "default 0x2000 if ARCH_IMX8M", because i.MX6/7 may also
> enable IMX_HAB. So ARCH_IMX8M && IMX_HAB? I would have expected the CSF size to be limited in all cases from the default value due to something security related eating up that 0x60 in overhead. Is that not the case? Thanks! -- Tom
signature.asc
Description: PGP signature
