用户可借助该项目获取 OP-TEE 项目安全侧的实现源码，用于构建可信执行环境。它是 OP-TEE 可信操作系统的核心安全侧实现，官方文档已迁移至指定站点。【此简介由AI生成】
| 文件 | 最后提交记录 | 最后更新时间 |
|---|---|---|
add .github .gitee | 2 个月前 | |
chore: add openvela-reviewer team to CODEOWNERS Append @open-vela/openvela-reviewer so the team can review PRs. | 1 个月前 | |
core/include/kernel: add missing stdbool.h include in refcount.h Add #include <stdbool.h> to refcount.h to fix missing type dependency for bool type usage. Signed-off-by: shaoboan <shaoboan@bestechnic.com> | 3 个月前 | |
TA as ELF + signature Changes format of TA to use the ELF format instead. This patch also adds signature checking of the TA. The format of the TA is: <Signed header> <ELF header> <Program header> (part of ELF spec, pointing out segments to load) <Sections> A struct ta_head is placed in the first section of the first segment to carry flags and other properties of the TA. elf32.h, elf64.h and elf_common.h are imported from FreeBSD. In addition to the R_ARM_RELATIVE relocation type, adds support for R_ARM_ABS32 relocations. Since a symbol table is needed to process this relocation type a separate program header is added in the TA ELF containing the sections .dynamic, .dynsym, .dynstr and .hash. These sections are only needed during relocation and could be released once the TA is relocated. A default signing key has been generated with openssl genrsa -out key.pem and added as keys/default_ta.pem Signed-off-by: Jens Wiklander <jens.wiklander@linaro.org> Tested-by: Jens Wiklander <jens.wiklander@linaro.org> (QEMU, FVP) Reviewed-by: Pascal Brand <pascal.brand@linaro.org> Tested-by: Pascal Brand <pascal.brand@linaro.org> (STM platform) Tested-by: Pascal Brand <pascal.brand@linaro.org> (QEMU platform) Reviewed-by: Jerome Forissier <jerome.forissier@linaro.org> Tested-by: Jerome Forissier <jerome.forissier@linaro.org> (HiKey) | 10 年前 | |
ldelf: syscall: support RISC-V ldelf sycall Added 32-bit and 64-bit RISC-V ldelf system calls. Signed-off-by: liushiwei <liushiwei@eswincomputing.com> Acked-by: Jerome Forissier <jerome.forissier@linaro.org> Acked-by: Jens Wiklander <jens.wiklander@linaro.org> Reviewed-by: Marouene Boubakri <marouene.boubakri@nxp.com> | 3 年前 | |
optee_os/util.h: avoid the IS_ALIGNED redefined error Signed-off-by: Bowen Wang <wangbowen6@xiaomi.com> | 3 个月前 | |
Update CHANGELOG for 3.21.0 Update CHANGELOG for 3.21.0 and collect Tested-by tags. Tested-by: Clement Faure <clement.faure@nxp.com> (imx-mx6dlsabresd) Tested-by: Clement Faure <clement.faure@nxp.com> (imx-mx6qsabresd) Tested-by: Clement Faure <clement.faure@nxp.com> (imx-mx6sllevk) Tested-by: Clement Faure <clement.faure@nxp.com> (imx-mx6sxsabresd) Tested-by: Clement Faure <clement.faure@nxp.com> (imx-mx6ulevk) Tested-by: Clement Faure <clement.faure@nxp.com> (imx-mx6ullevk) Tested-by: Clement Faure <clement.faure@nxp.com> (imx-mx6ulzevk) Tested-by: Clement Faure <clement.faure@nxp.com> (imx-mx7dsabresd) Tested-by: Clement Faure <clement.faure@nxp.com> (imx-mx7ulpevk) Tested-by: Clement Faure <clement.faure@nxp.com> (imx-mx8mmevk) Tested-by: Clement Faure <clement.faure@nxp.com> (imx-mx8mnevk) Tested-by: Clement Faure <clement.faure@nxp.com> (imx-mx8mqevk) Tested-by: Clement Faure <clement.faure@nxp.com> (imx-mx8mpevk) Tested-by: Clement Faure <clement.faure@nxp.com> (imx-mx8qmmek) Tested-by: Clement Faure <clement.faure@nxp.com> (imx-mx8qxpmek) Tested-by: Clement Faure <clement.faure@nxp.com> (imx-mx8ulpevk) Tested-by: Clement Faure <clement.faure@nxp.com> (imx-mx93evk) Tested-by: Jens Wiklander <jens.wiklander@linaro.org> (Juno) Tested-by: Jerome Forissier <jerome.forissier@linaro.org> (vexpress-qemu_virt) Tested-by: Jerome Forissier <jerome.forissier@linaro.org> (vexpress-qemu_armv8a) Tested-by: Jerome Forissier <jerome.forissier@linaro.org> (rockchip-rk3399) (RockPi4B) Tested-by: Jens Wiklander <jens.wiklander@linaro.org> (imx-mx8mqevk) Tested-by: Igor Opaniuk <igor.opaniuk@foundries.io> (Poplar) Tested-by: Jens Wiklander <jens.wiklander@linaro.org> (vexpress-fvp) Tested-by: Etienne Carriere <etienne.carriere@linaro.org> (stm32mp1-157C_DK2) Tested-by: Etienne Carriere <etienne.carriere@linaro.org> (stm32mp1-157C_EV1) Tested-by: Joakim Bech <joakim.bech@linaro.org> (RPi3B) Tested-by: Ricardo Salveti <ricardo@foundries.io> (ZynqMP) Signed-off-by: Jerome Forissier <jerome.forissier@linaro.org> | 3 年前 | |
core: sp: Allow to embed binary SPs to OP-TEE binary If the ELF header is not found in the file, then assume it's a binary format SP. Signed-off-by: Imre Kis <imre.kis@arm.com> Acked-by: Jens Wiklander <jens.wiklander@linaro.org> | 3 年前 | |
Remove unused Android.bp and Android.mk files for vela Signed-off-by: Shanmin Zhang <zhangshanmin@xiaomi.com> | 3 个月前 | |
checkpatch: add --kconfig-prefix=CFG_ A few days before v5.9-rc1, the checkpatch.pl script was modified in the Linux kernel tree [1]. This caused spurious warnings in the OP-TEE CI such as [2]: WARNING: IS_ENABLED(CFG_VIRTUALIZATION) is normally used as IS_ENABLED(CONFIG_CFG_VIRTUALIZATION) Fortunately, checkpatch now has an option to control the prefix used for configuration variables [3]. Add this option to .checkpatch.conf. Link: [1] https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=50161266973bcc662e969e63d68fc7bff71de21b Link: [2] https://travis-ci.org/github/OP-TEE/optee_os/builds/717905104 Link: [3] https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3e89ad8506f39c4739a6c9ca1e1552f506f000c9 Signed-off-by: Jerome Forissier <jerome@forissier.org> Reviewed-by: Rouven Czerwinski <r.czerwinski@pengutronix.de> Reviewed-by: Jens Wiklander <jens.wiklander@linaro.org> | 5 年前 | |
Add .gitattributes This patch adds a .gitattributes file to specify files that should never end up in a distribution tarball. Signed-off-by: Hu Keping <hukeping@huawei.com> Acked-by: Etienne Carriere <etienne.carriere@linaro.org> | 5 年前 | |
.gitignore: add tags and TAGS tags and TAGS are files created by ctags, a source code navigation tool. Reviewed-by: Jens Wiklander <jens.wiklander@linaro.org> Reviewed-by: Etienne Carriere <etienne.carriere@linaro.org> Signed-off-by: Elvira Khabirova <e.khabirova@omp.ru> | 4 年前 | |
Update CHANGELOG for 3.21.0 Update CHANGELOG for 3.21.0 and collect Tested-by tags. Tested-by: Clement Faure <clement.faure@nxp.com> (imx-mx6dlsabresd) Tested-by: Clement Faure <clement.faure@nxp.com> (imx-mx6qsabresd) Tested-by: Clement Faure <clement.faure@nxp.com> (imx-mx6sllevk) Tested-by: Clement Faure <clement.faure@nxp.com> (imx-mx6sxsabresd) Tested-by: Clement Faure <clement.faure@nxp.com> (imx-mx6ulevk) Tested-by: Clement Faure <clement.faure@nxp.com> (imx-mx6ullevk) Tested-by: Clement Faure <clement.faure@nxp.com> (imx-mx6ulzevk) Tested-by: Clement Faure <clement.faure@nxp.com> (imx-mx7dsabresd) Tested-by: Clement Faure <clement.faure@nxp.com> (imx-mx7ulpevk) Tested-by: Clement Faure <clement.faure@nxp.com> (imx-mx8mmevk) Tested-by: Clement Faure <clement.faure@nxp.com> (imx-mx8mnevk) Tested-by: Clement Faure <clement.faure@nxp.com> (imx-mx8mqevk) Tested-by: Clement Faure <clement.faure@nxp.com> (imx-mx8mpevk) Tested-by: Clement Faure <clement.faure@nxp.com> (imx-mx8qmmek) Tested-by: Clement Faure <clement.faure@nxp.com> (imx-mx8qxpmek) Tested-by: Clement Faure <clement.faure@nxp.com> (imx-mx8ulpevk) Tested-by: Clement Faure <clement.faure@nxp.com> (imx-mx93evk) Tested-by: Jens Wiklander <jens.wiklander@linaro.org> (Juno) Tested-by: Jerome Forissier <jerome.forissier@linaro.org> (vexpress-qemu_virt) Tested-by: Jerome Forissier <jerome.forissier@linaro.org> (vexpress-qemu_armv8a) Tested-by: Jerome Forissier <jerome.forissier@linaro.org> (rockchip-rk3399) (RockPi4B) Tested-by: Jens Wiklander <jens.wiklander@linaro.org> (imx-mx8mqevk) Tested-by: Igor Opaniuk <igor.opaniuk@foundries.io> (Poplar) Tested-by: Jens Wiklander <jens.wiklander@linaro.org> (vexpress-fvp) Tested-by: Etienne Carriere <etienne.carriere@linaro.org> (stm32mp1-157C_DK2) Tested-by: Etienne Carriere <etienne.carriere@linaro.org> (stm32mp1-157C_EV1) Tested-by: Joakim Bech <joakim.bech@linaro.org> (RPi3B) Tested-by: Ricardo Salveti <ricardo@foundries.io> (ZynqMP) Signed-off-by: Jerome Forissier <jerome.forissier@linaro.org> | 3 年前 | |
LICENSE: all files are licensed under BSD 2-Clause by default The information contained in the documentation are covered by the BSD 2-Clause license unless stated otherwise. Make this clear by not mentioning "source files" but simply "files" in LICENSE. Signed-off-by: Jerome Forissier <jerome.forissier@linaro.org> Suggested-by: Rouven Czerwinski <r.czerwinski@pengutronix.de> Reviewed-by: Jens Wiklander <jens.wiklander@linaro.org> | 7 年前 | |
MAINTAINERS: Versal ACAP: Hardware Unique Key Maintain the Hardware Unique Key (HUK) driver Signed-off-by: Jorge Ramirez-Ortiz <jorge@foundries.io> Acked-by: Jerome Forissier <jerome.forissier@linaro.org> | 3 年前 | |
config: add CFG_BUILD_IN_TREE_TA flag This flag allows us to enable or disable building "User TAs". By disabling "User TAs" we could build "TA_DEV_KIT" without building TAs present in optee-os project under ta/*/user_ta.mk. Signed-off-by: Julien Masson <jmasson@baylibre.com> Signed-off-by: Balsam CHIHI <bchihi@baylibre.com> Signed-off-by: Safae Ouajih <souajih@baylibre.com> Reviewed-by: Jerome Forissier <jerome.forissier@linaro.org> Reviewed-by: Jens Wiklander <jens.wiklander@linaro.org> Reviewed-by: Etienne Carriere <etienne.carriere@linaro.org> | 3 年前 | |
docs: Remove current docs and link to the new location All current documentation has been transferred to a new git called optee_docs [1]. The output from optee_docs will be rendered using Sphinx and hosted at optee.readthedocs.io [2]. The new documentation git will also be part of the regular OP-TEE releases. For completeness, it will also be included in our manifests making up a full OP-TEE developer setup. [1] https://github.com/OP-TEE/optee_docs [2] https://optee.readthedocs.io Signed-off-by: Joakim Bech <joakim.bech@linaro.org> Acked-by: Jerome Forissier <jerome.forissier@linaro.org> | 7 年前 | |
Add STAILQ_HEAD() and STAILQ_ENTRY() to typedefs.checkpatch When using BSD queues from <sys/queues.h>, a singly linked tail queue entry is declared with a macro: STAILQ_ENTRY(type) var; This makes checkpatch.pl unhappy because the type is unknown: WARNING: Missing a blank line after declarations + struct file *file; + STAILQ_ENTRY(load_seg) link; Checkpatch has the same problem with the macro STAILQ_HEAD(). This patch adds a regular expression to typedefs.checkpatch that matches the macro part, thus fixing the warning. Signed-off-by: Jorge Ramirez-Ortiz <jorge@foundries.io> Reviewed-by: Jerome Forissier <jerome.forissier@linaro.org> Reviewed-by: Jens Wiklander <jens.wiklander@linaro.org> | 3 年前 |
以下内容由 AI 翻译，如有问题请 点此提交 issue 反馈
OP-TEE 可信操作系统
该 Git 仓库包含 OP-TEE 项目安全侧实现的源代码。
所有官方 OP-TEE 文档已迁移至 http://optee.readthedocs.io。
// OP-TEE 核心维护者