u-boot.git/doc/usage/fit, branch next

boot: Add fit_config_get_hash_list() to build signed node list

2026-03-09T15:49:50+00:00

The hashed-nodes property in a FIT signature node lists which FDT paths
are included in the signature hash. It is intended as a hint so should
not be used for verification.

Add a function to build the node list from scratch by iterating the
configuration's image references. Skip properties known not to be image
references. For each image, collect the path plus all hash and cipher
subnodes.

Use the new function in fit_config_check_sig() instead of reading
'hashed-nodes'.

Update the test_vboot kernel@ test case: fit_check_sign now catches the
attack at signature-verification time (the @-suffixed node is hashed
instead of the real one, causing a mismatch) rather than at
fit_check_format() time.

Update the docs to cover this. The FIT spec can be updated separately.

Signed-off-by: Simon Glass 
Closes: https://lore.kernel.org/u-boot/20260302220937.3682128-1-trini@konsulko.com/
Reported-by: Apple Security Engineering and Architecture (SEAR)
Tested-by: Tom Rini

ARM: bootm: Add support for starting Linux through OPTEE-OS on ARMv7a

2025-11-06T17:26:18+00:00

Add support for jumping to Linux kernel through OPTEE-OS on ARMv7a.
This is only supported if U-Boot runs in PL1 secure. This change adds
two components, one is fitImage OPTEE-OS loadable handler, which makes
a note of OPTEE-OS being loaded and stores the load address for later
jump to it. The second part is the actual jump to Linux through OPTEE-OS.
The jump through OPTEE-OS requires set up of multiple CPU registers, r1
and r2 are passed through, r0 and r3 have to be set to 0, lr is set to
Linux kernel entry point. This setup is done by new assembler function
boot_jump_linux_via_optee().

The boot_jump_linux_via_optee() also includes STM32MP13xx late TZC
configuration write, this cannot be moved easily, hence the ifdef.

Signed-off-by: Marek Vasut

doc: Fix whitespace in devicetree example in overlay-fdt-boot.rst

2025-10-26T15:03:35+00:00

Fix the whitespace and add a missing quotation mark
(default = "foo-reva.dtb") in overlay-fdt-boot.rst.

Signed-off-by: Wolfgang Wallner

doc: Fix typos

2025-10-26T15:03:27+00:00

Fix typos/wording in various files in doc/.

Signed-off-by: Wolfgang Wallner 
Reviewed-by: E Shattow

doc: Update mentions of README.fdt-control

2025-09-27T07:20:22+00:00

Update documents 'README.fdt-control' reference to replacement 'control.rst':
  doc/arch/nios2.rst
  dts/Makefile

Also convert some adjacent pathname mentions to rST links where applicable

Fixes: 3e9fddfc4f14 "doc: Move devicetree control doc to rST"
Signed-off-by: E Shattow

docs: Update FIT signature testing instructions

2025-07-26T05:37:03+00:00

Update the FIT signature testing instructions to use the pytest suite instead of
the old vboot_test.sh script.

Signed-off-by: Enric Balletbo i Serra 
Reviewed-by: Mattijs Korpershoek

doc: correct references in x86-fit-boot.rst

2025-07-19T10:36:53+00:00

Correct the references for

* the x86 boot protocol description
* the FIT file format

Signed-off-by: Heinrich Schuchardt

doc: correct references to overlay-fdt-boot.txt

2025-04-03T07:05:29+00:00

doc/uImage.FIT/overlay-fdt-boot.txt does not exist anymore.
Reference the correct section of doc/usage/fit/overlay-fdt-boot.rst.

Fixes: 6f6e8bb695a7 ("doc: Bring in the FIT overlay information")
Signed-off-by: Heinrich Schuchardt

Merge tag 'v2025.01-rc6' into next

2024-12-31T14:08:59+00:00

Prepare v2025.01-rc6

doc: fit: Format image tree source example

2024-12-24T16:06:59+00:00

The example in kernel_fdt.rst is inconsistently indented, making it
difficult to read.

Indent the example with the same standard as the other examples:
Four spaces for the ReST code block and for every nesting level.

Signed-off-by: J. Neuschäfer