From: sashiko-bot@kernel.org
To: "Viken Dadhaniya" <viken.dadhaniya@oss.qualcomm.com>
Cc: robh@kernel.org, conor+dt@kernel.org, devicetree@vger.kernel.org
Subject: Re: [PATCH] arm64: dts: qcom: talos-evk-som: Add firmware-name to QUPv3 nodes
Date: Wed, 05 Aug 2026 11:43:31 +0000 [thread overview]
Message-ID: <20260805114332.4DCB41F00A3A@smtp.kernel.org> (raw)
In-Reply-To: <20260805-talos-evk-qupv3-firmware-name-v1-1-3ebd5e5578bd@oss.qualcomm.com>
Thank you for your contribution! Sashiko AI review found 2 potential issue(s) to consider:
- [High] Removing the TrustZone dependency for QUP firmware breaks earlycon and standard serial console initialization.
- [High] The commit claims to handle access control permissions within Linux, but no such logic exists.
--
--- Patch [1]: [PATCH] arm64: dts: qcom: talos-evk-som: Add firmware-name to QUPv3 nodes ---
commit 2c22f3348260193e8037f117d786bf9e0ca0dd64
Author: Viken Dadhaniya <viken.dadhaniya@oss.qualcomm.com>
arm64: dts: qcom: talos-evk-som: Add firmware-name to QUPv3 nodes
This commit adds the firmware-name property to QUPv3 nodes for the
talos-evk-som board. It shifts the responsibility of loading Serial Engine
(SE) firmware from TrustZone to Linux.
> Handle SE assignments and access control permissions directly within Linux,
> removing the dependency on TrustZone.
[Severity: High]
The commit message states that access control permissions are handled
directly within Linux. Is this access control logic actually implemented?
Looking at the qcom-geni-se driver, there does not appear to be code that
configures hardware access control (such as QUP wrapper ACL registers, XPUs,
or SMMU protections) that TrustZone would normally enforce.
Does this change bypass a security boundary without providing the stated
replacement in Linux?
> diff --git a/arch/arm64/boot/dts/qcom/talos-evk-som.dtsi b/arch/arm64/boot/dts/qcom/talos-evk-som.dtsi
> --- a/arch/arm64/boot/dts/qcom/talos-evk-som.dtsi
> +++ b/arch/arm64/boot/dts/qcom/talos-evk-som.dtsi
[ ... ]
> @@ -411,10 +411,14 @@ usb2_en: usb2-en-state {
> };
>
> &qupv3_id_0 {
> + firmware-name = "qcom/qcs615/qupv3fw.elf";
> +
> status = "okay";
> };
[Severity: High]
Will relying on Linux to load the QUP firmware break earlycon and standard
serial console initialization?
If the hardware remains uninitialized during early boot,
qcom_geni_serial_earlycon_setup() will fail when geni_se_read_proto() cannot
detect the UART protocol and abort the earlycon setup.
Furthermore, standard console registration invokes request_firmware() via
geni_load_se_firmware(). Since this occurs before the root filesystem is
mounted, will this fail with -ENOENT and drop the console registration?
--
Sashiko AI review · https://sashiko.dev/#/patchset/20260805-talos-evk-qupv3-firmware-name-v1-1-3ebd5e5578bd@oss.qualcomm.com?part=1
next prev parent reply other threads:[~2026-08-05 11:43 UTC|newest]
Thread overview: 3+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-08-05 11:27 [PATCH] arm64: dts: qcom: talos-evk-som: Add firmware-name to QUPv3 nodes Viken Dadhaniya
2026-08-05 11:43 ` sashiko-bot [this message]
2026-08-17 13:02 ` Konrad Dybcio
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20260805114332.4DCB41F00A3A@smtp.kernel.org \
--to=sashiko-bot@kernel.org \
--cc=conor+dt@kernel.org \
--cc=devicetree@vger.kernel.org \
--cc=robh@kernel.org \
--cc=sashiko-reviews@lists.linux.dev \
--cc=viken.dadhaniya@oss.qualcomm.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox