Commit 34760951 authored by Paul Beesley's avatar Paul Beesley
Browse files

doc: Convert internal links to RST format



Currently links between documents are using the format:

<path/to/><filename>.rst

This was required for services like GitHub because they render each
document in isolation - linking to another document is like linking
to any other file, just provide the full path.

However, with the new approach, the .rst files are only the raw
source for the documents. Once the documents have been rendered
the output is now in another format (HTML in our case) and so,
when linking to another document, the link must point to the
rendered version and not the .rst file.

The RST spec provides a few methods for linking between content.
The parent of this patch enabled the automatic creation of anchors
for document titles - we will use these anchors as the targets for
our links. Additional anchors can be added by hand if needed, on
section and sub-section titles, for example.

An example of this new format, for a document with the title
"Firmware Design" is :ref:`Firmware Design`.

One big advantage of this is that anchors are not dependent on
paths. We can then move documents around, even between directories,
without breaking any links between documents. Links will need to be
updated only if the title of a document changes.

Change-Id: I9e2340a61dd424cbd8fd1ecc2dc166f460d81703
Signed-off-by: default avatarPaul Beesley <paul.beesley@arm.com>
parent 4fdad60c
...@@ -3,7 +3,7 @@ License ...@@ -3,7 +3,7 @@ License
The software is provided under a BSD-3-Clause license (below). Contributions to The software is provided under a BSD-3-Clause license (below). Contributions to
this project are accepted under the same license with developer sign-off as this project are accepted under the same license with developer sign-off as
described in the :ref:`contributor_guide`. described in the :ref:`Contributor's Guide`.
:: ::
...@@ -77,4 +77,4 @@ license text is included in those source files. ...@@ -77,4 +77,4 @@ license text is included in those source files.
terms of both licenses. terms of both licenses.
.. _FreeBSD: http://www.freebsd.org .. _FreeBSD: http://www.freebsd.org
.. _SCC: http://www.simple-cc.org/ .. _SCC: http://www.simple-cc.org/
\ No newline at end of file
...@@ -8,10 +8,11 @@ UniPhier SoC family implements its internal boot ROM, which loads 64KB [1]_ ...@@ -8,10 +8,11 @@ UniPhier SoC family implements its internal boot ROM, which loads 64KB [1]_
image from a non-volatile storage to the on-chip SRAM, and jumps over to it. image from a non-volatile storage to the on-chip SRAM, and jumps over to it.
TF-A provides a special mode, BL2-AT-EL3, which enables BL2 to execute at EL3. TF-A provides a special mode, BL2-AT-EL3, which enables BL2 to execute at EL3.
It is useful for platforms with non-TF-A boot ROM, like UniPhier. Here, a It is useful for platforms with non-TF-A boot ROM, like UniPhier. Here, a
problem is BL2 does not fit in the 64KB limit if `Trusted Board Boot`_ (TBB) problem is BL2 does not fit in the 64KB limit if
is enabled. To solve this issue, Socionext provides a first stage loader :ref:`Trusted Board Boot (TBB) <Trusted Board Boot>` is enabled.
called `UniPhier BL`_. This loader runs in the on-chip SRAM, initializes the To solve this issue, Socionext provides a first stage loader called
DRAM, expands BL2 there, and hands the control over to it. Therefore, all images `UniPhier BL`_. This loader runs in the on-chip SRAM, initializes the DRAM,
expands BL2 there, and hands the control over to it. Therefore, all images
of TF-A run in DRAM. of TF-A run in DRAM.
The UniPhier platform works with/without TBB. See below for the build process The UniPhier platform works with/without TBB. See below for the build process
...@@ -50,7 +51,7 @@ Boot Flow ...@@ -50,7 +51,7 @@ Boot Flow
4. BL31, BL32, and BL33 4. BL31, BL32, and BL33
They all run in the DRAM. See `Firmware Design`_ for details. They all run in the DRAM. See :ref:`Firmware Design` for details.
Basic Build Basic Build
...@@ -79,7 +80,7 @@ Optional features ...@@ -79,7 +80,7 @@ Optional features
- Trusted Board Boot - Trusted Board Boot
`mbed TLS`_ is needed as the cryptographic and image parser modules. `mbed TLS`_ is needed as the cryptographic and image parser modules.
Refer to the `User Guide`_ for the appropriate version of mbed TLS. Refer to the :ref:`User Guide` for the appropriate version of mbed TLS.
To enable TBB, add the following options to the build command:: To enable TBB, add the following options to the build command::
...@@ -109,9 +110,6 @@ Optional features ...@@ -109,9 +110,6 @@ Optional features
.. [1] Some SoCs can load 80KB, but the software implementation must be aligned .. [1] Some SoCs can load 80KB, but the software implementation must be aligned
to the lowest common denominator. to the lowest common denominator.
.. _Trusted Board Boot: ../trusted-board-boot.rst
.. _UniPhier BL: https://github.com/uniphier/uniphier-bl .. _UniPhier BL: https://github.com/uniphier/uniphier-bl
.. _Firmware Design: ../firmware-design.rst
.. _U-Boot: https://www.denx.de/wiki/U-Boot .. _U-Boot: https://www.denx.de/wiki/U-Boot
.. _mbed TLS: https://tls.mbed.org/ .. _mbed TLS: https://tls.mbed.org/
.. _User Guide: ../user-guide.rst
...@@ -13,8 +13,8 @@ Getting Started ...@@ -13,8 +13,8 @@ Getting Started
raise a separate `issue`_ for this and ensure that the changes that raise a separate `issue`_ for this and ensure that the changes that
include Third Party IP are made on a separate topic branch. include Third Party IP are made on a separate topic branch.
- Clone `Trusted Firmware-A`_ on your own machine as suggested on the - Clone `Trusted Firmware-A`_ on your own machine as suggested in the
`User Guide`_. :ref:`User Guide`.
- Create a local topic branch based on the `Trusted Firmware-A`_ ``master`` - Create a local topic branch based on the `Trusted Firmware-A`_ ``master``
branch. branch.
...@@ -23,11 +23,11 @@ Making Changes ...@@ -23,11 +23,11 @@ Making Changes
- Make commits of logical units. See these general `Git guidelines`_ for - Make commits of logical units. See these general `Git guidelines`_ for
contributing to a project. contributing to a project.
- Follow the `Coding Guidelines`_. - Follow the :ref:`Coding Style & Guidelines`.
- Use the checkpatch.pl script provided with the Linux source tree. A - Use the checkpatch.pl script provided with the Linux source tree. A
Makefile target is provided for convenience (see the "Checking source code Makefile target is provided for convenience (see the "Checking source code
style" section in the `User Guide`_). style" section in the :ref:`User Guide`).
- Keep the commits on topic. If you need to fix another bug or make another - Keep the commits on topic. If you need to fix another bug or make another
enhancement, please create a separate `issue`_ and address it on a separate enhancement, please create a separate `issue`_ and address it on a separate
...@@ -38,12 +38,12 @@ Making Changes ...@@ -38,12 +38,12 @@ Making Changes
an `issue`_, include a reference. an `issue`_, include a reference.
- Where appropriate, please update the documentation. - Where appropriate, please update the documentation.
- Consider whether the `User Guide`_, `Porting Guide`_, `Firmware Design`_ - Consider whether the :ref:`User Guide`, :ref:`Porting Guide`,
or other in-source documentation needs updating. :ref:`Firmware Design` or other in-source documentation needs updating.
- Ensure that each changed file has the correct copyright and license - Ensure that each changed file has the correct copyright and license
information. Files that entirely consist of contributions to this information. Files that entirely consist of contributions to this
project should have a copyright notice and BSD-3-Clause SPDX license project should have a copyright notice and BSD-3-Clause SPDX license
identifier of the form as shown in `license.rst`_. Files that contain identifier of the form as shown in :ref:`license`. Files that contain
changes to imported Third Party IP files should retain their original changes to imported Third Party IP files should retain their original
copyright and license notices. For significant contributions you may copyright and license notices. For significant contributions you may
add your own copyright notice in following format: add your own copyright notice in following format:
...@@ -57,13 +57,13 @@ Making Changes ...@@ -57,13 +57,13 @@ Making Changes
your company name. your company name.
- If you are submitting new files that you intend to be the technical - If you are submitting new files that you intend to be the technical
sub-maintainer for (for example, a new platform port), then also update sub-maintainer for (for example, a new platform port), then also update
the `Maintainers`_ file. the :ref:`maintainers` file.
- For topics with multiple commits, you should make all documentation - For topics with multiple commits, you should make all documentation
changes (and nothing else) in the last commit of the series. Otherwise, changes (and nothing else) in the last commit of the series. Otherwise,
include the documentation changes within the single commit. include the documentation changes within the single commit.
- Please test your changes. As a minimum, ensure that Linux boots on the - Please test your changes. As a minimum, ensure that Linux boots on the
Foundation FVP. See `Running the software on FVP`_ for more information. For Foundation FVP. See :ref:`user_guide_run_fvp` for more information. For
more extensive testing, consider running the `TF-A Tests`_ against your more extensive testing, consider running the `TF-A Tests`_ against your
patches. patches.
...@@ -75,13 +75,14 @@ Submitting Changes ...@@ -75,13 +75,14 @@ Submitting Changes
``Signed-off-by:`` and ``Author:`` lines must match. If anyone else ``Signed-off-by:`` and ``Author:`` lines must match. If anyone else
contributes to the commit, they must also add their own ``Signed-off-by:`` contributes to the commit, they must also add their own ``Signed-off-by:``
line. By adding this line the contributor certifies the contribution is made line. By adding this line the contributor certifies the contribution is made
under the terms of the `Developer Certificate of Origin (DCO)`_. under the terms of the
:download:`Developer Certificate of Origin <../../dco.txt>`.
More details may be found in the `Gerrit Signed-off-by Lines guidelines`_. More details may be found in the `Gerrit Signed-off-by Lines guidelines`_.
- Ensure that each commit also has a unique ``Change-Id:`` line. If you have - Ensure that each commit also has a unique ``Change-Id:`` line. If you have
cloned the repository with the "`Clone with commit-msg hook`" clone method cloned the repository with the "`Clone with commit-msg hook`" clone method
(as advised on the `User Guide`_), this should already be the case. (as advised on the :ref:`User Guide`), this should already be the case.
More details may be found in the `Gerrit Change-Ids documentation`_. More details may be found in the `Gerrit Change-Ids documentation`_.
...@@ -89,22 +90,22 @@ Submitting Changes ...@@ -89,22 +90,22 @@ Submitting Changes
targeting the ``integration`` branch. targeting the ``integration`` branch.
- The changes will then undergo further review and testing by the - The changes will then undergo further review and testing by the
`Maintainers`_. Any review comments will be made directly on your patch. :ref:`maintainers`. Any review comments will be made directly on your
This may require you to do some rework. patch. This may require you to do some rework.
Refer to the `Gerrit Uploading Changes documentation`_ for more details. Refer to the `Gerrit Uploading Changes documentation`_ for more details.
- When the changes are accepted, the `Maintainers`_ will integrate them. - When the changes are accepted, the :ref:`maintainers` will integrate them.
- Typically, the `Maintainers`_ will merge the changes into the - Typically, the :ref:`maintainers` will merge the changes into the
``integration`` branch. ``integration`` branch.
- If the changes are not based on a sufficiently-recent commit, or if they - If the changes are not based on a sufficiently-recent commit, or if they
cannot be automatically rebased, then the `Maintainers`_ may rebase it on cannot be automatically rebased, then the :ref:`maintainers` may rebase it
the ``master`` branch or ask you to do so. on the ``master`` branch or ask you to do so.
- After final integration testing, the changes will make their way into the - After final integration testing, the changes will make their way into the
``master`` branch. If a problem is found during integration, the merge ``master`` branch. If a problem is found during integration, the merge
commit will be removed from the ``integration`` branch and the commit will be removed from the ``integration`` branch and the
`Maintainers`_ will ask you to create a new patch set to resolve the :ref:`maintainers` will ask you to create a new patch set to resolve the
problem. problem.
Binary Components Binary Components
...@@ -132,15 +133,6 @@ Binary Components ...@@ -132,15 +133,6 @@ Binary Components
.. _issue: https://developer.trustedfirmware.org/project/board/1/ .. _issue: https://developer.trustedfirmware.org/project/board/1/
.. _Trusted Firmware-A: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git .. _Trusted Firmware-A: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git
.. _Git guidelines: http://git-scm.com/book/ch5-2.html .. _Git guidelines: http://git-scm.com/book/ch5-2.html
.. _Coding Guidelines: ./coding-guidelines.rst
.. _User Guide: ../getting_started/user-guide.rst
.. _Porting Guide: ../getting_started/porting-guide.rst
.. _Firmware Design: ../design/firmware-design.rst
.. _license.rst: ../license.rst
.. _Acknowledgements: ../acknowledgements.rst
.. _Maintainers: ../maintainers.rst
.. _Running the software on FVP: ../getting_started/user-guide.rst#user-content-running-the-software-on-fvp
.. _Developer Certificate of Origin (DCO): ../../dco.txt
.. _Gerrit Uploading Changes documentation: https://review.trustedfirmware.org/Documentation/user-upload.html .. _Gerrit Uploading Changes documentation: https://review.trustedfirmware.org/Documentation/user-upload.html
.. _Gerrit Signed-off-by Lines guidelines: https://review.trustedfirmware.org/Documentation/user-signedoffby.html .. _Gerrit Signed-off-by Lines guidelines: https://review.trustedfirmware.org/Documentation/user-signedoffby.html
.. _Gerrit Change-Ids documentation: https://review.trustedfirmware.org/Documentation/user-changeid.html .. _Gerrit Change-Ids documentation: https://review.trustedfirmware.org/Documentation/user-changeid.html
......
...@@ -37,7 +37,7 @@ This can vary a lot, depending on: ...@@ -37,7 +37,7 @@ This can vary a lot, depending on:
conflict between the topics. conflict between the topics.
* If there is a code freeze in place in preparation for the release. Please * If there is a code freeze in place in preparation for the release. Please
refer the `release information`_ for more details. refer the :ref:`Release Processes` document for more details.
* The workload of the TF maintainers. * The workload of the TF maintainers.
...@@ -55,9 +55,9 @@ receiving patches that will not be merged into the release. In this case, the ...@@ -55,9 +55,9 @@ receiving patches that will not be merged into the release. In this case, the
patches will be merged onto ``integration``, which will temporarily diverge from patches will be merged onto ``integration``, which will temporarily diverge from
the release branch. The ``integration`` branch will be rebased onto ``master`` the release branch. The ``integration`` branch will be rebased onto ``master``
after the release, and then ``master`` will be fast-forwarded to ``integration`` after the release, and then ``master`` will be fast-forwarded to ``integration``
1-2 days later. This whole process could take up 4 weeks. Please refer the 1-2 days later. This whole process could take up 4 weeks. Please refer to the
`release information`_ for code freeze dates. The TF maintainers will inform the :ref:`Release Processes` document for code freeze dates. The TF maintainers
patch owner if this is going to happen. will inform the patch owner if this is going to happen.
It is OK to create a patch based on commits that are only available in It is OK to create a patch based on commits that are only available in
``integration`` or another patch set, rather than ``master``. There is a risk ``integration`` or another patch set, rather than ``master``. There is a risk
...@@ -73,7 +73,10 @@ but would be after the CI has been transitioned to `trustedfirmware.org`_. ...@@ -73,7 +73,10 @@ but would be after the CI has been transitioned to `trustedfirmware.org`_.
Please refer to https://github.com/ARM-software/tf-issues/issues/681 for more Please refer to https://github.com/ARM-software/tf-issues/issues/681 for more
details on the timelines. details on the timelines.
.. _release information: release-information.rst --------------
*Copyright (c) 2019, Arm Limited. All rights reserved.*
.. _Gerrit Upload Patch Set documentation: https://review.trustedfirmware.org/Documentation/intro-user.html#upload-patch-set .. _Gerrit Upload Patch Set documentation: https://review.trustedfirmware.org/Documentation/intro-user.html#upload-patch-set
.. _Gerrit Replace Changes documentation: https://review.trustedfirmware.org/Documentation/user-upload.html#push_replace .. _Gerrit Replace Changes documentation: https://review.trustedfirmware.org/Documentation/user-upload.html#push_replace
.. _trustedfirmware.org: https://www.trustedfirmware.org/ .. _trustedfirmware.org: https://www.trustedfirmware.org/
...@@ -11,7 +11,7 @@ Platform compatibility policy ...@@ -11,7 +11,7 @@ Platform compatibility policy
----------------------------- -----------------------------
Platform compatibility is mainly affected by changes to Platform APIs (as Platform compatibility is mainly affected by changes to Platform APIs (as
documented in the `Porting Guide`_), driver APIs (like the GICv3 drivers) or documented in the :ref:`Porting Guide`), driver APIs (like the GICv3 drivers) or
library interfaces (like xlat_table library). The project will try to maintain library interfaces (like xlat_table library). The project will try to maintain
compatibility for upstream platforms. Due to evolving requirements and compatibility for upstream platforms. Due to evolving requirements and
enhancements, there might be changes affecting platform compatibility which enhancements, there might be changes affecting platform compatibility which
...@@ -20,7 +20,7 @@ introduced to replace it. In case the migration to the new interface is trivial, ...@@ -20,7 +20,7 @@ introduced to replace it. In case the migration to the new interface is trivial,
the contributor of the change is expected to make good effort to migrate the the contributor of the change is expected to make good effort to migrate the
upstream platforms to the new interface. upstream platforms to the new interface.
The deprecated interfaces are listed inside `Release information`_ as well as The deprecated interfaces are listed inside :ref:`Release Processes` as well as
the release after which each one will be removed. When an interface is the release after which each one will be removed. When an interface is
deprecated, the page must be updated to indicate the release after which the deprecated, the page must be updated to indicate the release after which the
interface will be removed. This must be at least 1 full release cycle in future. interface will be removed. This must be at least 1 full release cycle in future.
...@@ -33,6 +33,4 @@ the deprecated interface. ...@@ -33,6 +33,4 @@ the deprecated interface.
*Copyright (c) 2018-2019, Arm Limited and Contributors. All rights reserved.* *Copyright (c) 2018-2019, Arm Limited and Contributors. All rights reserved.*
.. _Porting Guide: ../getting_started/porting-guide.rst
.. _Release information: ./release-information.rst#removal-of-deprecated-interfaces
.. _TF-A public mailing list: https://lists.trustedfirmware.org/mailman/listinfo/tf-a .. _TF-A public mailing list: https://lists.trustedfirmware.org/mailman/listinfo/tf-a
...@@ -42,9 +42,9 @@ depending on project requirement and partner feedback. ...@@ -42,9 +42,9 @@ depending on project requirement and partner feedback.
Removal of Deprecated Interfaces Removal of Deprecated Interfaces
-------------------------------- --------------------------------
As mentioned in the `Platform compatibility policy`_, this is a live document As mentioned in the :ref:`Platform Compatibility Policy`, this is a live
cataloging all the deprecated interfaces in TF-A project and the Release version document cataloging all the deprecated interfaces in TF-A project and the
after which it will be removed. Release version after which it will be removed.
+--------------------------------+-------------+---------+---------------------------------------------------------+ +--------------------------------+-------------+---------+---------------------------------------------------------+
| Interface | Deprecation | Removed | Comments | | Interface | Deprecation | Removed | Comments |
...@@ -54,7 +54,7 @@ after which it will be removed. ...@@ -54,7 +54,7 @@ after which it will be removed.
| Legacy Console API | Jan '18 | v2.1 | Deprecated in favour of ``MULTI_CONSOLE_API`` | | Legacy Console API | Jan '18 | v2.1 | Deprecated in favour of ``MULTI_CONSOLE_API`` |
+--------------------------------+-------------+---------+---------------------------------------------------------+ +--------------------------------+-------------+---------+---------------------------------------------------------+
| Weak default | Oct '18 | v2.1 | The default implementations are defined in | | Weak default | Oct '18 | v2.1 | The default implementations are defined in |
| ``plat_crash_console_*`` | | | `crash_console_helpers.S`_. The platforms have to | | ``plat_crash_console_*`` | | | ``crash_console_helpers.S``. The platforms have to |
| APIs | | | define ``plat_crash_console_*``. | | APIs | | | define ``plat_crash_console_*``. |
+--------------------------------+-------------+---------+---------------------------------------------------------+ +--------------------------------+-------------+---------+---------------------------------------------------------+
| ``finish_console_register`` | Oct '18 | v2.1 | The old version of the macro is deprecated. See commit | | ``finish_console_register`` | Oct '18 | v2.1 | The old version of the macro is deprecated. See commit |
...@@ -74,9 +74,9 @@ after which it will be removed. ...@@ -74,9 +74,9 @@ after which it will be removed.
| Makefile in ``INCLUDES``. | | | header files. More information in commit 09d40e0e0828_. | | Makefile in ``INCLUDES``. | | | header files. More information in commit 09d40e0e0828_. |
+--------------------------------+-------------+---------+---------------------------------------------------------+ +--------------------------------+-------------+---------+---------------------------------------------------------+
--------------
*Copyright (c) 2018-2019, Arm Limited and Contributors. All rights reserved.* *Copyright (c) 2018-2019, Arm Limited and Contributors. All rights reserved.*
.. _Platform compatibility policy: platform-compatibility-policy.rst
.. _crash_console_helpers.S: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/tree/plat/common/aarch64/crash_console_helpers.S
.. _cc5859c: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/commit/?id=cc5859ca19ff546c35eb0331000dae090b6eabcf .. _cc5859c: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/commit/?id=cc5859ca19ff546c35eb0331000dae090b6eabcf
.. _09d40e0e0828: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/commit/?id=09d40e0e08283a249e7dce0e106c07c5141f9b7e .. _09d40e0e0828: https://git.trustedfirmware.org/TF-A/trusted-firmware-a.git/commit/?id=09d40e0e08283a249e7dce0e106c07c5141f9b7e
...@@ -9,7 +9,7 @@ Build options ...@@ -9,7 +9,7 @@ Build options
------------- -------------
Several build options can be used to check for security issues. Refer to the Several build options can be used to check for security issues. Refer to the
`user guide`_ for detailed information on the specific build options. :ref:`User Guide` for detailed information on the specific build options.
- The ``BRANCH_PROTECTION`` build flag can be used to enable Pointer - The ``BRANCH_PROTECTION`` build flag can be used to enable Pointer
Authentication and Branch Target Identification. Authentication and Branch Target Identification.
...@@ -53,6 +53,6 @@ Several build options can be used to check for security issues. Refer to the ...@@ -53,6 +53,6 @@ Several build options can be used to check for security issues. Refer to the
NB: The ``Werror`` flag is enabled by default in TF-A and can be disabled by NB: The ``Werror`` flag is enabled by default in TF-A and can be disabled by
setting the ``E`` build flag to 0. setting the ``E`` build flag to 0.
*Copyright (c) 2019, Arm Limited. All rights reserved.* --------------
.. _user guide: ../getting_started/user-guide.rst *Copyright (c) 2019, Arm Limited. All rights reserved.*
...@@ -38,9 +38,11 @@ Please include: ...@@ -38,9 +38,11 @@ Please include:
- Any additional software or tools required - Any additional software or tools required
We recommend using `this PGP/GPG key`_ for encrypting the information. This key We recommend using :download:`this PGP/GPG key <./security-reporting.asc>` for
is also available at http://keyserver.pgp.com and LDAP port 389 of the same encrypting the information. This key is also available at
server. The fingerprint for this key is: http://keyserver.pgp.com and LDAP port 389 of the same server.
The fingerprint for this key is:
:: ::
...@@ -59,7 +61,7 @@ code. ...@@ -59,7 +61,7 @@ code.
Attribution Attribution
----------- -----------
We will name and thank you in the ``change-log.rst`` distributed with the source We will name and thank you in the :ref:`Change Log & Release Notes` distributed with the source
code and in any published security advisory. code and in any published security advisory.
Security Advisories Security Advisories
...@@ -68,38 +70,43 @@ Security Advisories ...@@ -68,38 +70,43 @@ Security Advisories
+-----------+------------------------------------------------------------------+ +-----------+------------------------------------------------------------------+
| ID | Title | | ID | Title |
+===========+==================================================================+ +===========+==================================================================+
| `TFV-1`_ | Malformed Firmware Update SMC can result in copy of unexpectedly | | |TFV-1| | Malformed Firmware Update SMC can result in copy of unexpectedly |
| | large data into secure memory | | | large data into secure memory |
+-----------+------------------------------------------------------------------+ +-----------+------------------------------------------------------------------+
| `TFV-2`_ | Enabled secure self-hosted invasive debug interface can allow | | |TFV-2| | Enabled secure self-hosted invasive debug interface can allow |
| | normal world to panic secure world | | | normal world to panic secure world |
+-----------+------------------------------------------------------------------+ +-----------+------------------------------------------------------------------+
| `TFV-3`_ | RO memory is always executable at AArch64 Secure EL1 | | |TFV-3| | RO memory is always executable at AArch64 Secure EL1 |
+-----------+------------------------------------------------------------------+ +-----------+------------------------------------------------------------------+
| `TFV-4`_ | Malformed Firmware Update SMC can result in copy or | | |TFV-4| | Malformed Firmware Update SMC can result in copy or |
| | authentication of unexpected data in secure memory in AArch32 | | | authentication of unexpected data in secure memory in AArch32 |
| | state | | | state |
+-----------+------------------------------------------------------------------+ +-----------+------------------------------------------------------------------+
| `TFV-5`_ | Not initializing or saving/restoring PMCR_EL0 can leak secure | | |TFV-5| | Not initializing or saving/restoring PMCR_EL0 can leak secure |
| | world timing information | | | world timing information |
+-----------+------------------------------------------------------------------+ +-----------+------------------------------------------------------------------+
| `TFV-6`_ | Trusted Firmware-A exposure to speculative processor | | |TFV-6| | Trusted Firmware-A exposure to speculative processor |
| | vulnerabilities using cache timing side-channels | | | vulnerabilities using cache timing side-channels |
+-----------+------------------------------------------------------------------+ +-----------+------------------------------------------------------------------+
| `TFV-7`_ | Trusted Firmware-A exposure to cache speculation vulnerability | | |TFV-7| | Trusted Firmware-A exposure to cache speculation vulnerability |
| | Variant 4 | | | Variant 4 |
+-----------+------------------------------------------------------------------+ +-----------+------------------------------------------------------------------+
| `TFV-8`_ | Not saving x0 to x3 registers can leak information from one | | |TFV-8| | Not saving x0 to x3 registers can leak information from one |
| | Normal World SMC client to another | | | Normal World SMC client to another |
+-----------+------------------------------------------------------------------+ +-----------+------------------------------------------------------------------+
.. _issue tracker: https://developer.trustedfirmware.org/project/board/1/ .. _issue tracker: https://developer.trustedfirmware.org/project/board/1/
.. _this PGP/GPG key: security-reporting.asc .. _this PGP/GPG key: security-reporting.asc
.. _TFV-1: ../security_advisories/security-advisory-tfv-1.rst
.. _TFV-2: ../security_advisories/security-advisory-tfv-2.rst .. |TFV-1| replace:: :ref:`Advisory TFV-1 (CVE-2016-10319)`
.. _TFV-3: ../security_advisories/security-advisory-tfv-3.rst .. |TFV-2| replace:: :ref:`Advisory TFV-2 (CVE-2017-7564)`
.. _TFV-4: ../security_advisories/security-advisory-tfv-4.rst .. |TFV-3| replace:: :ref:`Advisory TFV-3 (CVE-2017-7563)`
.. _TFV-5: ../security_advisories/security-advisory-tfv-5.rst .. |TFV-4| replace:: :ref:`Advisory TFV-4 (CVE-2017-9607)`
.. _TFV-6: ../security_advisories/security-advisory-tfv-6.rst .. |TFV-5| replace:: :ref:`Advisory TFV-5 (CVE-2017-15031)`
.. _TFV-7: ../security_advisories/security-advisory-tfv-7.rst .. |TFV-6| replace:: :ref:`Advisory TFV-6 (CVE-2017-5753, CVE-2017-5715, CVE-2017-5754)`
.. _TFV-8: ../security_advisories/security-advisory-tfv-8.rst .. |TFV-7| replace:: :ref:`Advisory TFV-7 (CVE-2018-3639)`
.. |TFV-8| replace:: :ref:`Advisory TFV-8 (CVE-2018-19440)`
--------------
*Copyright (c) 2019, Arm Limited. All rights reserved.*
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment