iMX6 - HAB events if SPL too big

[guitsy]

We experienced some HAB events when we implemented secure boot with u-boot 2024.07:

HAB Configuration: 0xf0, HAB State: 0x66

--------- HAB Event 1 -----------------

event data:

        0xdb 0x00 0x14 0x41 0x33 0x22 0x33 0x00

        0x00 0x00 0x00 0x0f 0x00 0x90 0x70 0x00

        0x00 0x01 0x20 0x60

STS = HAB_FAILURE (0x33)

RSN = HAB_INV_ADDRESS (0x22)

CTX = HAB_CTX_TARGET (0x33)

ENG = HAB_ENG_ANY (0x00)

--------- HAB Event 2 -----------------

event data:

        0xdb 0x00 0x14 0x41 0x33 0x22 0x33 0x00

        0x00 0x00 0x00 0x0f 0x00 0x90 0x70 0x00

        0x00 0x01 0x20 0x60

STS = HAB_FAILURE (0x33)

RSN = HAB_INV_ADDRESS (0x22)

CTX = HAB_CTX_TARGET (0x33)

ENG = HAB_ENG_ANY (0x00)

The invalid address 0x907000 is the beginning of the OCRAM Free Are, which should be a valid address. The event seems to happen in hab_rvt_check_target, when loading the SPL.

The SPL size is limited to 68kB, which we fulfilled (64kB plus 4kB signature)
The only way to get rid of the HAB events, was to decrease the SPL size to 52kB.

But what could possibly have gone wrong? What is the explanation for this?

[Harvey021]

Hi @guitsy 

My understanding is that other programs may also occupy part of OCRAM space during the spl load phase, such as
#ifdef CONFIG_USE_IMXIMG_PLUGIN
/*PLUGIN plugin-binary-file IRAM_FREE_START_ADDR*/
PLUGIN board/freescale/mx6sabresd/plugin.bin 0x00907000
#else

Regards

Harvey

[guitsy]

Sounds valid, but CONFIG_USE_IMXIMG_PLUGIN is not set in our u-boot config
Also there is no plugin.bin compiled in our build.

[xacov]

Harvey,

Are you sure about what the plugin is and how to use it?