Skip to content

RDKEMW-19048: Add vault_processor_release C wrapper to clientlibraries r4.4#4172

Open
sergiygladkyy wants to merge 1 commit into
developfrom
feature/RDKEMW-19048-cryptography-deep-sleep
Open

RDKEMW-19048: Add vault_processor_release C wrapper to clientlibraries r4.4#4172
sergiygladkyy wants to merge 1 commit into
developfrom
feature/RDKEMW-19048-cryptography-deep-sleep

Conversation

@sergiygladkyy
Copy link
Copy Markdown

Summary

Develop-branch port of RDKEMW-18043 (support/8.5.3.0).

RDKEMW-19048 tracks the develop-branch sibling per RM's one-ticket-per-branch policy.

Adds bbappend patch 0002-RDKEMW-18043-Add-vault_processor_release-C-wrapper.patch to wpeframework-clientlibraries_4.4.bb. The patch exposes Implementation::Vault::ProcessorRelease() via C ABI as vault_processor_release(), so the CryptographyExtAccess plugin can release the SecProcessor handle on deep-sleep entry (paired with entservices-cryptography PR #10 which adds the call site).

Test plan

  • Validated on Sky Llama (AMLOGIC) regression build alongside rdkservices-cpc develop counterpart and entservices-cryptography RDKEMW-2278 : Removal of WPEFrameworkSecurity Agent Utility & related… #10
  • Cryptography client library exports T vault_processor_release
  • CryptographyExtAccess plugin imports U vault_processor_release
  • On-device: SecProcessor_Release log on deep-sleep entry from CryptographyExtAccess

@sergiygladkyy sergiygladkyy requested a review from a team as a code owner May 22, 2026 16:28
Copilot AI review requested due to automatic review settings May 22, 2026 16:28
@sergiygladkyy sergiygladkyy requested a review from a team as a code owner May 22, 2026 16:28
Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR ports an earlier change onto the develop branch to expose Implementation::Vault::ProcessorRelease() via a C ABI wrapper (vault_processor_release()), enabling external components (e.g., CryptographyExtAccess) to explicitly release the SecProcessor handle on deep-sleep entry.

Changes:

  • Adds a new patch that introduces vault_processor_release() inside the cryptography SecApi Vault.cpp C ABI section.
  • Updates the wpeframework-clientlibraries_4.4.bb recipe to apply the new patch.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 2 comments.

File Description
recipes-extended/wpe-framework/wpeframework-clientlibraries/r4.4/0002-RDKEMW-18043-Add-vault_processor_release-C-wrapper.patch Adds the C ABI wrapper function for releasing the Vault SecProcessor handle.
recipes-extended/wpe-framework/wpeframework-clientlibraries_4.4.bb Includes the new patch in SRC_URI for the 4.4 clientlibraries build.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment on lines +26 to +31
+ void vault_processor_release(void)
+ {
+ VaultImplementation* impl = vault_instance(CRYPTOGRAPHY_VAULT_DEFAULT);
+ if (impl != nullptr) {
+ reinterpret_cast<Implementation::Vault*>(impl)->ProcessorRelease();
+ }
Comment on lines 28 to 33
file://0001-error-handling-if-invalid-external-input.patch \
file://r4.4/0001-Implement-IPersistent-interface-for-RPC-Vault.patch \
file://r4.4/0001-SecAPI-Re-acquire-sec-handle-after-flush.patch \
file://r4.4/0002-RDKEMW-18043-Add-vault_processor_release-C-wrapper.patch \
file://r4.4/0001-DELIA-64727-Prealloc-secure-memory-before-decrypt.patch \
file://r4.4/0001-RDKEMW-7064-Dont-decrypt-fake-buffer-is-revoke-has-b.patch \
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants