MCU-PLUS-SDK-AM263PX: Errors while setting Firewall

Kunukuntla Geetha

Part Number: MCU-PLUS-SDK-AM263PX
Other Parts Discussed in Thread: SYSCONFIG

Tool/software:

Hi,

I am working on setting up of Firewall in L2 memory in Helloworld program, but I see this error every time, even though hsmclient.h was included(it was routing to the structure in hsmclient.h).

When I added Firewall in sysconfig file, a part of code is auto- generated(after building) in ti_drivers_config.c(error exits here) and i could not modify these auto generated files(ti_drivers_config.c and ti_drivers_config.h)

Is there anything I am missing here? (Refer to the images attached) Help me out.

However, when i excluded ti_drivers_config.h from BUILD(and included hsmclient.h in this file), the error was gone, is this process correct?

Also, When 1 or more cores want to access a certain same location(access given to those cores), would setting up of firewall help to give priority for accessing?

If it was just for accessing securely, what would happen if secure cores want to access at same time?

Thanks and Regards,

Geetha K

5 months ago

0 Nikhil Dasan 5 months ago

TI__Guru* 87451 points

Hi Geetha,

The hello world example does not have the security library included in the example.projectspec of the project.

If you want to include the firewall, please include the security library in the build.

You can modify the example.projectspec file as shown below and reimport the project to make the build successful.

diff --git a/examples/hello_world/am263px-lp/r5fss0-0_nortos/ti-arm-clang/example.projectspec b/examples/hello_world/am263px-lp/r5fss0-0_nortos/ti-arm-clang/example.projectspec
index 65886cb2..4c6824c4 100644
--- a/examples/hello_world/am263px-lp/r5fss0-0_nortos/ti-arm-clang/example.projectspec
+++ b/examples/hello_world/am263px-lp/r5fss0-0_nortos/ti-arm-clang/example.projectspec
@@ -31,6 +31,7 @@
         compilerBuildOptions="
             -I${CG_TOOL_ROOT}/include/c
             -I${MCU_PLUS_SDK_PATH}/source
+            -I${MCU_PLUS_SDK_PATH}/source/security
             -mcpu=cortex-r5
             -mfloat-abi=hard
             -mfpu=vfpv3-d16
@@ -46,6 +47,7 @@
             -i${MCU_PLUS_SDK_PATH}/source/kernel/nortos/lib
             -i${MCU_PLUS_SDK_PATH}/source/drivers/lib
             -i${MCU_PLUS_SDK_PATH}/source/board/lib
+            -i${MCU_PLUS_SDK_PATH}/source/security/lib
             -i${CG_TOOL_ROOT}/lib
             -m=hello_world.${ConfigName}.map
             --diag_suppress=10063
@@ -71,6 +73,7 @@
                 -lnortos.am263px.r5f.ti-arm-clang.debug.lib
                 -ldrivers.am263px.r5f.ti-arm-clang.debug.lib
                 -lboard.am263px.r5f.ti-arm-clang.debug.lib
+                -lsecurity.am263px.r5f.ti-arm-clang.debug.lib
                 -llibc.a
                 -llibsysbm.a
             "
@@ -83,6 +86,7 @@
                 -lnortos.am263px.r5f.ti-arm-clang.release.lib
                 -ldrivers.am263px.r5f.ti-arm-clang.release.lib
                 -lboard.am263px.r5f.ti-arm-clang.release.lib
+                -lsecurity.am263px.r5f.ti-arm-clang.release.lib
                 -llibc.a
                 -llibsysbm.a

Kunukuntla Geetha said:
Also, When 1 or more cores want to access a certain same location(access given to those cores), would setting up of firewall help to give priority for accessing?

If it was just for accessing securely, what would happen if secure cores want to access at same time?

Firewall does not ensure priority based access. It is straight forward "allow or not allow" the initiator to access the region.

You could set the read write permissions for cores, but not priority.

Simultaneous accesses to region will have the same impact as non-firewalled access if all the cores are given the same priviledges.

Thanks and Regards,

Nikhil Dasan

0 Kunukuntla Geetha 4 months ago in reply to Nikhil Dasan

Intellectual 290 points

Hi Nikhil,

Thanks for the info. I will get back to you after I work on this

Regards,

Geetha

0 Kunukuntla Geetha 4 months ago in reply to Kunukuntla Geetha

Intellectual 290 points

Hi,

Nikhil Dasan said:
If you want to include the firewall, please include the security library in the build.

I included the security library in example.projectspec file, and after building It didn't solve these errors.

I got the same issue

Kunukuntla Geetha said:

Thanks,

Geetha

0 Nikhil Dasan 4 months ago in reply to Kunukuntla Geetha

TI__Guru* 87451 points

Hi Geeta,

Did you add this library and reimport the same again?

Do you see these added in the "Properties->Arm_Linker" of the imported CCS project?

Thanks and Regards,

Nikhil Dasan

0 Kunukuntla Geetha 4 months ago in reply to Nikhil Dasan

Intellectual 290 points

Hi Nikhil,

Nikhil Dasan said:
Did you add this library and reimport the same again?

Yes, I did add this library in example.projectspec file.

Nikhil Dasan said:
Do you see these added in the "Properties->Arm_Linker" of the imported CCS project?

I get this as per the picture which means the library is included.

Thanks,

Geetha

0 Nikhil Dasan 4 months ago in reply to Kunukuntla Geetha

TI__Guru* 87451 points

Hi Geetha,

May I know which SDK version are you trying on?

I can share you the buildable hello world project on that SDK version

Thanks and Regards,

Nikhil Dasan

0 Kunukuntla Geetha 4 months ago in reply to Nikhil Dasan

Intellectual 290 points

Hi,

Nikhil Dasan said:
May I know which SDK version are you trying on?

Its 10.02.15

Thanks

Geetha

+1 Nikhil Dasan 4 months ago in reply to Kunukuntla Geetha

TI__Guru* 87451 points

/cfs-file/__key/communityserver-discussions-components-files/908/hello_5F00_world_5F00_am263px_2D00_lp_5F00_r5fss0_2D00_0_5F00_nortos_5F00_ti_2D00_arm_2D00_clang.zip

I believe you would have missed adding HSMclient in sysconfig, which is required to initialize the hsm services and communication to M4 core.

Please find the buildable project on SDK 10.2 with Firewall configured.

Thanks and Regards,

Nikhil Dasan

Arm-based microcontrollers

Arm-based microcontrollers forum

MCU-PLUS-SDK-AM263PX: Errors while setting Firewall