Surprisingly, Fman microcode does not seem to be verified. This series aims to rectify this by introducing an optional FIT wrapper. This wrapper is made mandatory if FIT_SIGNATURE is enabled. NXP boards do not use this config, so the microcode will remain unverified for them. This is OK, since we do not want to break existing systems.
Sean Anderson (6): ARMv8/sec_firmware: Remove SEC_FIRMWARE_FIT_CNF_NAME image: fit: Add some helpers for getting data misc: fs_loader: Add function to get the chosen loader net: fm: Add firmware name parameter net: fm: Support loading firmware from a filesystem net: fm: Add support for FIT firmware
arch/arm/cpu/armv8/sec_firmware.c | 52 +++------------------------ arch/arm/mach-k3/common.c | 2 +- arch/arm/mach-omap2/boot-common.c | 2 +- boot/image-fit.c | 37 +++++++++++++++++++ cmd/fpga.c | 24 ++++--------- drivers/fpga/socfpga_arria10.c | 24 ++----------- drivers/misc/fs_loader.c | 27 ++++++++++++++ drivers/net/fm/fm.c | 58 +++++++++++++++++++++++++++--- drivers/net/fm/fm.h | 2 +- drivers/net/fm/init.c | 4 +-- drivers/net/fsl-mc/mc.c | 30 ++-------------- drivers/net/pfe_eth/pfe_firmware.c | 40 +-------------------- drivers/qe/Kconfig | 4 +++ include/fs_loader.h | 12 +++++++ include/image.h | 4 +++ 15 files changed, 159 insertions(+), 163 deletions(-)