Skip to content

Commit ce4a7e6

Browse files
jsuhaas22StaticRocket
authored andcommitted
feat(security): Add note about firewall exception during boot
Add note about A53's speculative access into TF-A's firewalled region during boot. This causes TIFS to log a read exception. The exception occurs only once, since TF-A's memory is unmapped later. Signed-off-by: Suhaas Joshi <s-joshi@ti.com>
1 parent be90396 commit ce4a7e6

1 file changed

Lines changed: 7 additions & 0 deletions

File tree

source/linux/Foundational_Components/System_Security/Memory_Firewalls.rst

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -82,6 +82,13 @@ TIFS does not output logs by default. Enabling TIFS logging requires
8282
modifying U-Boot source code, recompiling it, and transferring the new
8383
binaries to the boot partition.
8484

85+
.. note::
86+
87+
Currently, TIFS logs report a firewall read violation during boot. This
88+
occurs because A53 speculatively accesses TF-A's memory region, which is
89+
protected from non-secure access by a firewall. This occurs only once, since
90+
TF-A's memory region is unmapped from the page table afterwards.
91+
8592
Modify U-Boot Configuration
8693
===========================
8794

0 commit comments

Comments
 (0)