v7a: update barebox to v2023.09.0 -> v2023.12.0

This lets us drop two patches that fixed issues with v2023.09.0.
This update also enables some options that are useful for the hardware
we support:

  - on STM32MP1, support for the NAND controller is enabled
  - on STM32MP1, we enable HWRNG and stack protector support

The latter could be enabled universally for all platforms that are no
size constrained, but it prints an ugly error message if there's no
HWRNG as using the fixed fallback canary is insecure. We'll just
postpone enabling stack protector on other platforms until we enable
HWRNG support there.

Signed-off-by: Ahmad Fatoum <a.fatoum@pengutronix.de>
Link: https://lore.pengutronix.de/20240112170529.1970537-5-a.fatoum@pengutronix.de
Signed-off-by: Robert Schwebel <r.schwebel@pengutronix.de>

1 files changed, 23 insertions, 3 deletions

diff --git a/configs/platform-v7a/barebox-stm32mp.config b/configs/platform-v7a/barebox-stm32mp.config
index 76f051a..7bbae9c 100644
--- a/configs/platform-v7a/barebox-stm32mp.config
+++ b/configs/platform-v7a/barebox-stm32mp.config
@@ -1,6 +1,6 @@
 #
 # Automatically generated file; DO NOT EDIT.
-# Barebox/arm 2023.09.0 Configuration
+# Barebox/arm 2023.12.0 Configuration
 #
 CONFIG_ARM=y
 CONFIG_ARM_LINUX=y
@@ -133,6 +133,7 @@ CONFIG_BAREBOX_MAX_PBL_SIZE=0xffffffff
 CONFIG_BAREBOX_MAX_BARE_INIT_SIZE=0xffffffff
 CONFIG_STACK_SIZE=0x8000
 CONFIG_MALLOC_SIZE=0x0
+CONFIG_MALLOC_ALIGNMENT=8
 # end of memory layout
 
 # CONFIG_EXPERIMENTAL is not set
@@ -157,7 +158,6 @@ CONFIG_CMDLINE_EDITING=y
 CONFIG_AUTO_COMPLETE=y
 CONFIG_MENU=y
 # CONFIG_PASSWORD is not set
-CONFIG_DYNAMIC_CRC_TABLE=y
 CONFIG_ERRNO_MESSAGES=y
 CONFIG_TIMESTAMP=y
 CONFIG_BOOTM=y
@@ -447,6 +447,7 @@ CONFIG_CMD_STATE=y
 # CONFIG_CMD_DHRYSTONE is not set
 # CONFIG_CMD_SPD_DECODE is not set
 # CONFIG_CMD_SEED is not set
+# CONFIG_CMD_STACKSMASH is not set
 # end of Miscellaneous
 # end of Commands
 
@@ -467,6 +468,7 @@ CONFIG_REGMAP_I2C=y
 CONFIG_OFTREE=y
 CONFIG_OFTREE_MEM_GENERIC=y
 CONFIG_DTC=y
+CONFIG_OF=y
 CONFIG_OFDEVICE=y
 CONFIG_OF_GPIO=y
 CONFIG_OF_BAREBOX_DRIVERS=y
@@ -618,6 +620,7 @@ CONFIG_MCI_MMC_BOOT_PARTITIONS=y
 # CONFIG_MCI_ROCKCHIP_DWCMSHC is not set
 # CONFIG_MCI_MMCI is not set
 # CONFIG_MCI_ARASAN is not set
+# CONFIG_MCI_AM654 is not set
 CONFIG_MCI_STM32_SDMMC2=y
 CONFIG_HAVE_CLK=y
 CONFIG_CLKDEV_LOOKUP=y
@@ -649,6 +652,7 @@ CONFIG_MFD_SYSCON=y
 # CONFIG_MFD_TWL4030 is not set
 # CONFIG_MFD_TWL6030 is not set
 CONFIG_MFD_STPMIC1=y
+# CONFIG_MFD_PCA9450 is not set
 # CONFIG_MFD_RN568PMIC is not set
 CONFIG_MFD_STM32_TIMERS=y
 # CONFIG_MFD_ATMEL_FLEXCOM is not set
@@ -698,9 +702,11 @@ CONFIG_WATCHDOG_POLLER=y
 CONFIG_STM32_IWDG_WATCHDOG=y
 # CONFIG_STPMIC1_WATCHDOG is not set
 # CONFIG_GPIO_WATCHDOG is not set
+# CONFIG_CADENCE_WATCHDOG is not set
 CONFIG_PWM=y
 CONFIG_PWM_STM32=y
-# CONFIG_HWRNG is not set
+CONFIG_HWRNG=y
+CONFIG_HWRNG_STM32=y
 
 #
 # DMA support
@@ -760,6 +766,7 @@ CONFIG_STM32_REMOTEPROC=y
 
 CONFIG_ARCH_HAS_RESET_CONTROLLER=y
 CONFIG_RESET_CONTROLLER=y
+CONFIG_RESET_SIMPLE=y
 # CONFIG_RESET_IMX7 is not set
 # CONFIG_RTC_CLASS is not set
 
@@ -789,6 +796,7 @@ CONFIG_PHY_STM32_USBPHYC=y
 #
 # Memory controller drivers
 #
+CONFIG_STM32_FMC2_EBI=y
 # end of Memory controller drivers
 
 #
@@ -819,6 +827,7 @@ CONFIG_PHY_STM32_USBPHYC=y
 # CONFIG_POWER_RESET_GPIO_RESTART is not set
 CONFIG_RESET_STM32=y
 # CONFIG_VIRTIO_MENU is not set
+# CONFIG_MAILBOX is not set
 # end of Drivers
 
 #
@@ -906,6 +915,17 @@ CONFIG_ARCH_HAS_ZERO_PAGE=y
 # end of Library routines
 
 #
+# Hardening options
+#
+CONFIG_STACK_GUARD_PAGE=y
+CONFIG_STACKPROTECTOR=y
+# CONFIG_STACKPROTECTOR_NONE is not set
+CONFIG_STACKPROTECTOR_STRONG=y
+CONFIG_PBL_STACKPROTECTOR_NONE=y
+# CONFIG_PBL_STACKPROTECTOR_STRONG is not set
+# end of Hardening options
+
+#
 # Crypto support
 #
 CONFIG_CRC32=y