Skip to content

RDKEMW-19048: META_PATCHSET build input (rebased on develop tip) #4177

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
sergiygladkyy wants to merge 2 commits into
base: develop
Choose a base branch
from
+36 −2
Open

RDKEMW-19048: META_PATCHSET build input (rebased on develop tip) #4177

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
bfa7d35
RDKEMW-19048: Add vault_processor_release C wrapper to clientlibrarie…
sergiygladkyy May 19, 2026
1cbb558
RDKEMW-19048: Update entservices-cryptography SRCREV for develop cust…
sergiygladkyy May 22, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions recipes-extended/entservices/entservices-cryptography.bb
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -16,8 +16,8 @@ SRC_URI = "${CMF_GITHUB_ROOT}/entservices-cryptography;${CMF_GITHUB_SRC_URI_SUFF
file://0001-RDKTV-20749-Revert-Merge-pull-request-3336-from-npol.patch \
"

# Release version - 1.0.2
SRCREV = "4c84cc95a443c4c5d9b704631688c741d6fb07e1"
# RDKEMW-19048: pinned to entservices-cryptography PR #10 head
SRCREV = "db7b7d96a3d00fcf65413b76988207e6f1fa870e"

PACKAGE_ARCH = "${MIDDLEWARE_ARCH}"
TOOLCHAIN = "gcc"
Expand Down
33 changes: 33 additions & 0 deletions ...mework-clientlibraries/r4.4/0002-RDKEMW-18043-Add-vault_processor_release-C-wrapper.patch
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,33 @@
RDKEMW-18043: Add vault_processor_release() C wrapper to release the
Cryptography Vault singleton's SecProcessor handle before deep-sleep entry.

The default Implementation::Vault is a process-lifetime singleton (static
local in vault_instance()); its destructor never runs at deep sleep, so the
SA2 SecProcessor handle stays open across S3. On BCM Dhruv with Network
Standby OFF this triggers SOFTWARE_MASTER_RESET because SAGE refuses S3
entry while the handle is held.

Implementation::Vault::ProcessorRelease() already exists (paired with
ProcessorAcquire() added by 0001-SecAPI-Re-acquire-sec-handle-after-flush.patch).
This wrapper exposes it via C ABI so the CryptographyExtAccess plugin can
call it from onPowerModeChanged. Re-acquire on wake is automatic via the
existing factory.

Index: git/Source/cryptography/implementation/SecApi/Vault.cpp
===================================================================
--- git.orig/Source/cryptography/implementation/SecApi/Vault.cpp
+++ git/Source/cryptography/implementation/SecApi/Vault.cpp
@@ -748,5 +748,13 @@ extern "C" {
return (Thunder::Core::ERROR_UNAVAILABLE);
}

}
+
+ void vault_processor_release(void)
+ {
+ VaultImplementation* impl = vault_instance(CRYPTOGRAPHY_VAULT_DEFAULT);
+ if (impl != nullptr) {
+ reinterpret_cast<Implementation::Vault*>(impl)->ProcessorRelease();
+ }
Comment on lines +28 to +31
+ }
} // extern "C"
1 change: 1 addition & 0 deletions recipes-extended/wpe-framework/wpeframework-clientlibraries_4.4.bb
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -28,6 +28,7 @@ SRC_URI = "git://github.com/rdkcentral/ThunderClientLibraries.git;protocol=https
file://0001-error-handling-if-invalid-external-input.patch \
file://r4.4/0001-Implement-IPersistent-interface-for-RPC-Vault.patch \
file://r4.4/0001-SecAPI-Re-acquire-sec-handle-after-flush.patch \
file://r4.4/0002-RDKEMW-18043-Add-vault_processor_release-C-wrapper.patch \
file://r4.4/0001-DELIA-64727-Prealloc-secure-memory-before-decrypt.patch \
file://r4.4/0001-RDKEMW-7064-Dont-decrypt-fake-buffer-is-revoke-has-b.patch \
file://r4.4/0001-PowerManagerClient-library-implementation.patch \
Expand Down
Loading