1.0-eac3 (20-07-2023)
Clarifications
• Clarify which bits of command input / output values should / must be zero (FENIMORE-674)
• Explain distinction between concrete and abstract types (FENIMORE-693)
•
Clarify return value from RSI_IPA_STATE_SET when stopping at first DESTROYED entry (FENIMORE-699) [I
GXDDX
]
Defects
• PSCI_SYSTEM_{OFF,RESET}: change Realm state to SYSTEM_OFF (FENIMORE-694)
• RMI_REC_CREATE: update RIM only if runnable flag is set (FENIMORE-697)
• RMI_REALM_CREATE: fix list of measured parameters (FENIMORE-695)
• Remove members from RmmSystemRegisters (FENIMORE-700)
–
State saved / restored depends on architecture features supported by the platform, so defining this type as an empty
placeholder
• Avoid use of reserved ASL v1 keyword “entry” in MRS (FENIMORE-702)
– RmiRecEntry -> RmiRecEnter
– RmiRecEntryFlags -> RmiRecEnterFlags
– RmiRecRun::entry -> RmiRecRun::enter
– RmmRttWalkResult::entry -> RmmRttWalkResult::rtte
• RSI_IPA_STATE_SET: prohibit RSI_DESTROYED input value (FENIMORE-705)
• RMI_PSCI_COMPLETE: PSCI_CPU_ON: fix copy of context_id to target CPU X0 (FENIMORE-703)
• Allow Host to reject request to change RIPAS to RAM (FENIMORE-661)
• Allow Host to reject PSCI_CPU_ON request via RMI_PSCI_COMPLETE (FENIMORE-706)
Relaxations
• Permit folding of level 2 RTT to create level 1 block mapping (FENIMORE-608)
• Remove restriction that attestation token size must not exceed 4KB (FENIMORE-691)
1.0-eac2 (07-06-2023)
Clarifications
• Remove reference to triggering ERROR_INPUT by setting MBZ bit to 1 (FENIMORE-675)
• Clarify constraints on output values in case of command failure [R
TFZMS
] (FENIMORE-676)
• Clarify encoding of RmiRealmParams::sve_sz (FENIMORE-684)
• Clarify set of SMCCC interfaces available to a Realm [R
NPLKX
] (FENIMORE-685)
Defects
• Replace PMU fields in RmiRecExit with single bit indicating the PMU overflow status [R
WXTZF
] (FENIMORE-679)
• RMI_PSCI_COMPLETE: failure condition should compare against MPIDR, not RD address (FENIMORE-681)
• RMI_REC_CREATE: remove params_valid failure condition (FENIMORE-686)
• RMI_RTT_{INIT,SET}_RIPAS: check alignment of “top” input value (FENIMORE-687)
• Reduce coupling between HIPAS and RIPAS (FENIMORE-680)
– Replace HIPAS=DESTROYED with RIPAS=DESTROYED
– Remove RmiRttEntryState::RMI_DESTROYED
– Change encoding of RmiRttEntryState::RMI_TABLE
– Add RmiRipas::RMI_DESTROYED
– Add RsiRipas::RSI_DESTROYED
– RMI_DATA_CREATE_UNKNOWN: remove pre-condition that RIPAS=RAM
– RMI_DATA_DESTROY:
*
In all cases, post-condition now states that HIPAS=UNASSIGNED
*
If pre-condition was RIPAS=RAM, post-condition states that RIPAS=DESTROYED
– RMI_RTT_DESTROY:
*
Remove post-condition that HIPAS=DESTROYED
*
Add post-condition that state of parent RTTE is UNASSIGNED
*
Add post-condition that RIPAS=DESTROYED
DEN0137
1.0-eac5
Copyright © 2022-2023 Arm Limited or its affiliates. All rights reserved.
Non-confidential
iii
