Devicetree
 help / color / mirror / Atom feed
From: sashiko-bot@kernel.org
To: "Viken Dadhaniya" <viken.dadhaniya@oss.qualcomm.com>
Cc: robh@kernel.org, conor+dt@kernel.org, devicetree@vger.kernel.org
Subject: Re: [PATCH] arm64: dts: qcom: talos-evk-som: Add firmware-name to QUPv3 nodes
Date: Wed, 05 Aug 2026 11:43:31 +0000	[thread overview]
Message-ID: <20260805114332.4DCB41F00A3A@smtp.kernel.org> (raw)
In-Reply-To: <20260805-talos-evk-qupv3-firmware-name-v1-1-3ebd5e5578bd@oss.qualcomm.com>

Thank you for your contribution! Sashiko AI review found 2 potential issue(s) to consider:
- [High] Removing the TrustZone dependency for QUP firmware breaks earlycon and standard serial console initialization.
- [High] The commit claims to handle access control permissions within Linux, but no such logic exists.
--

--- Patch [1]: [PATCH] arm64: dts: qcom: talos-evk-som: Add firmware-name to QUPv3 nodes ---
commit 2c22f3348260193e8037f117d786bf9e0ca0dd64
Author: Viken Dadhaniya <viken.dadhaniya@oss.qualcomm.com>

arm64: dts: qcom: talos-evk-som: Add firmware-name to QUPv3 nodes

This commit adds the firmware-name property to QUPv3 nodes for the
talos-evk-som board. It shifts the responsibility of loading Serial Engine
(SE) firmware from TrustZone to Linux.

> Handle SE assignments and access control permissions directly within Linux,
> removing the dependency on TrustZone.

[Severity: High]
The commit message states that access control permissions are handled
directly within Linux. Is this access control logic actually implemented?

Looking at the qcom-geni-se driver, there does not appear to be code that
configures hardware access control (such as QUP wrapper ACL registers, XPUs,
or SMMU protections) that TrustZone would normally enforce.

Does this change bypass a security boundary without providing the stated
replacement in Linux?

> diff --git a/arch/arm64/boot/dts/qcom/talos-evk-som.dtsi b/arch/arm64/boot/dts/qcom/talos-evk-som.dtsi
> --- a/arch/arm64/boot/dts/qcom/talos-evk-som.dtsi
> +++ b/arch/arm64/boot/dts/qcom/talos-evk-som.dtsi
[ ... ]
> @@ -411,10 +411,14 @@ usb2_en: usb2-en-state {
>  };
>  
>  &qupv3_id_0 {
> +	firmware-name = "qcom/qcs615/qupv3fw.elf";
> +
>  	status = "okay";
>  };

[Severity: High]
Will relying on Linux to load the QUP firmware break earlycon and standard
serial console initialization?

If the hardware remains uninitialized during early boot,
qcom_geni_serial_earlycon_setup() will fail when geni_se_read_proto() cannot
detect the UART protocol and abort the earlycon setup.

Furthermore, standard console registration invokes request_firmware() via
geni_load_se_firmware(). Since this occurs before the root filesystem is
mounted, will this fail with -ENOENT and drop the console registration?

-- 
Sashiko AI review · https://sashiko.dev/#/patchset/20260805-talos-evk-qupv3-firmware-name-v1-1-3ebd5e5578bd@oss.qualcomm.com?part=1

  reply	other threads:[~2026-08-05 11:43 UTC|newest]

Thread overview: 3+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2026-08-05 11:27 [PATCH] arm64: dts: qcom: talos-evk-som: Add firmware-name to QUPv3 nodes Viken Dadhaniya
2026-08-05 11:43 ` sashiko-bot [this message]
2026-08-17 13:02 ` Konrad Dybcio

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20260805114332.4DCB41F00A3A@smtp.kernel.org \
    --to=sashiko-bot@kernel.org \
    --cc=conor+dt@kernel.org \
    --cc=devicetree@vger.kernel.org \
    --cc=robh@kernel.org \
    --cc=sashiko-reviews@lists.linux.dev \
    --cc=viken.dadhaniya@oss.qualcomm.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox