Skip to content

[DRAFT] Remove OP-TEE TA TLS allocation#1032

Draft
sangho2 wants to merge 1 commit into
mainfrom
sanghle/optee/no_guest_tls_alloc
Draft

[DRAFT] Remove OP-TEE TA TLS allocation#1032
sangho2 wants to merge 1 commit into
mainfrom
sanghle/optee/no_guest_tls_alloc

Conversation

@sangho2

@sangho2 sangho2 commented Jul 16, 2026

Copy link
Copy Markdown
Contributor

DRAFT

This PR removes the OP-TEE shim's guest TA allocation (i.e., no punchthrough). It assumes that TAs are built with patched libutee and entry function to configure the x86_64 stack guard. For example, the AES TA test succeeds because it is rebuilt whereas the KMPP TA test fails (other two TAs don't access fs at all).

Ref: https://github.com/MSRSSP/op-tee-ia/blob/main/stack_guard.patch

@sangho2 sangho2 added discussion Open questions must-not-merge:prototype An experimental/proof-of-concept PR that must not be merged. labels Jul 16, 2026
@github-actions

Copy link
Copy Markdown

🤖 SemverChecks 🤖 No breaking API changes detected

Note: this does not mean API is unchanged, or even that there are no breaking changes; simply, none of the detections triggered.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

discussion Open questions must-not-merge:prototype An experimental/proof-of-concept PR that must not be merged.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant