[Linux-stm32] [GIT PULL] STM32 Bus firewall for v7.1

Alexandre TORGUE alexandre.torgue at foss.st.com
Thu Mar 26 09:04:08 UTC 2026


Hi Arnd,

Please consider the first round of STM32 firewall bus patch-set. DT part 
for STM32 MPU SoC will come with the STM32 DT pull request.

Regards
Alex


The following changes since commit 6de23f81a5e08be8fbf5e8d7e9febc72a5b5f27f:

   Linux 7.0-rc1 (2026-02-22 13:18:59 -0800)

are available in the Git repository at:

   git://git.kernel.org/pub/scm/linux/kernel/git/atorgue/stm32.git 
tags/stm32-bus-firewall-for-7.1-1

for you to fetch changes up to 348741a97c28d7679fb1e204aeec0d6305fc6817:

   pinctrl: stm32: add firewall checks before probing the HDP driver 
(2026-03-25 17:40:22 +0100)

----------------------------------------------------------------
STM32 Firewall bus for v7.1, round 1

Highlights:
----------
Stm32 SoCs embed debug peripherals such as Coresight. These peripherals
can monitor the activity of the cores. Because of that, they can be
used only if some features in the debug configuration are enabled.
Else, errors or firewall exceptions can be observed. Similarly to
the ETZPC(on stm32mp1x platforms) or the RIFSC(on stm32mp2x platforms),
debug-related peripherals access can be assessed at bus level to
prevent these issues from happening.

The debug configuration can only be accessed by the secure world.
That means that a service must be implemented in the secure world for
the kernel to check the firewall configuration. On OpenSTLinux, it is
done through a Debug access PTA in OP-TEE [1].
To represent the debug peripherals present on a dedicated debug bus,
create a debug bus node in the device tree and the associated driver
that will interact with this PTA.

Plus some fixes.

----------------------------------------------------------------
Clément Le Goffic (1):
       bus: firewall: move stm32_firewall header file in include folder

Gatien Chevallier (8):
       bus: rifsc: fix RIF configuration check for peripherals
       dt-bindings: document access-controllers property for coresight 
peripherals
       dt-bindings: pinctrl: document access-controllers property for 
stm32 HDP
       dt-bindings: bus: document the stm32 debug bus
       bus: stm32_firewall: allow check on different firewall controllers
       bus: stm32_firewall: add stm32_firewall_get_grant_all_access() API
       drivers: bus: add the stm32 debug bus driver
       pinctrl: stm32: add firewall checks before probing the HDP driver

Krzysztof Kozlowski (1):
       bus: stm32_firewall: Simplify with scoped for each OF child loop

Thorsten Blum (1):
       bus: rifsc: Replace snprintf("%s") with strscpy

  Documentation/devicetree/bindings/arm/arm,coresight-cti.yaml 
  |   3 +++
  Documentation/devicetree/bindings/arm/arm,coresight-dynamic-funnel.yaml |   3 +++
  Documentation/devicetree/bindings/arm/arm,coresight-etm.yaml 
  |   3 +++
  Documentation/devicetree/bindings/arm/arm,coresight-stm.yaml 
  |   3 +++
  Documentation/devicetree/bindings/arm/arm,coresight-tmc.yaml 
  |   3 +++
  Documentation/devicetree/bindings/arm/arm,coresight-tpiu.yaml 
  |   3 +++
  Documentation/devicetree/bindings/bus/st,stm32mp131-dbg-bus.yaml 
  |  76 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
  Documentation/devicetree/bindings/pinctrl/st,stm32-hdp.yaml 
  |   6 +++++
  MAINTAINERS 
  |   1 +
  drivers/bus/Kconfig 
  |  10 +++++++++
  drivers/bus/Makefile 
  |   1 +
  drivers/bus/stm32_dbg_bus.c 
  | 250 
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
  drivers/bus/stm32_etzpc.c 
  |   3 +--
  drivers/bus/stm32_firewall.c 
  |  59 ++++++++++++++++++++++++++++++++++++++----------
  drivers/bus/stm32_rifsc.c 
  |  61 ++++++++++++++++++--------------------------------
  drivers/pinctrl/stm32/pinctrl-stm32-hdp.c 
  |  14 ++++++++++++
  {drivers => include/linux}/bus/stm32_firewall.h 
  |   0
  include/linux/bus/stm32_firewall_device.h 
  |  26 +++++++++++++++++++++
  18 files changed, 472 insertions(+), 53 deletions(-)
  create mode 100644 
Documentation/devicetree/bindings/bus/st,stm32mp131-dbg-bus.yaml
  create mode 100644 drivers/bus/stm32_dbg_bus.c
  rename {drivers => include/linux}/bus/stm32_firewall.h (100%)



More information about the Linux-stm32 mailing list