)]}' { "log": [ { "commit": "8273cc58132e616a3405fb1de364b5be87a39000", "tree": "94ead2c81059a6d182a2e4abc74f6f1b4ac9ff3f", "parents": [ "aacfe843b41ef7cc2756e6a9962da3ae49db8a8b" ], "author": { "name": "Jakub Czapiga", "email": "czapiga@google.com", "time": "Fri Oct 02 12:50:30 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Mon Oct 12 14:43:09 2026" }, "message": "cgpt: Reuse ReadFile from host_misc in cmd_find\n\nRemove the duplicate static ReadFile() helper in cgpt/cmd_find.c and\nreuse ReadFile() from host_misc.c.\n\nBUG\u003db:124141368\nTEST\u003dmake runtests\nBRANCH\u003dnone\nTAG\u003dagy\nCONV\u003d2efa1fd4-161e-459c-95ac-49f549088989\n\nChange-Id: Icb940455845379dd3ef3ec231da6cb458ca8b369\nSigned-off-by: Jakub Czapiga \u003cczapiga@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/8497144\nReviewed-by: Julius Werner \u003cjwerner@chromium.org\u003e\nReviewed-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\n" }, { "commit": "aacfe843b41ef7cc2756e6a9962da3ae49db8a8b", "tree": "2c3d8bb30cef8ffd5a5d9696a9699c5928595e94", "parents": [ "3a5576ed474a2b55167c7c3324be7c0cad0646e4" ], "author": { "name": "Jakub Czapiga", "email": "czapiga@google.com", "time": "Fri Oct 02 12:50:30 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Mon Oct 12 14:43:05 2026" }, "message": "futility: Reuse ReadFile in cmd_gbb_utility\n\nRemove the file-local read_entire_file() helper in\nfutility/cmd_gbb_utility.c and use ReadFile() from host_misc.c instead.\nAlso avoid unsigned underflow in FindGbbHeader() when the input size is\nsmaller than GBB_SEARCH_STRIDE.\n\nBUG\u003db:124141368\nTEST\u003dmake runtests\nBRANCH\u003dnone\nTAG\u003dagy\nCONV\u003d2efa1fd4-161e-459c-95ac-49f549088989\n\nChange-Id: I19effd2725d002ebd118814f5bec7835c3ef09bc\nSigned-off-by: Jakub Czapiga \u003cczapiga@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/8497143\nReviewed-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nReviewed-by: Julius Werner \u003cjwerner@chromium.org\u003e\n" }, { "commit": "3a5576ed474a2b55167c7c3324be7c0cad0646e4", "tree": "cf4db2dd1638d04ceabb09b210003a2d68b837a6", "parents": [ "f11da243ec789208f4d7887d709c0d2597533eb8" ], "author": { "name": "Jakub Czapiga", "email": "czapiga@google.com", "time": "Fri Oct 02 12:50:19 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Mon Oct 12 14:43:02 2026" }, "message": "host: Simplify vb2_str_to_id in lib21/host_misc.c\n\nReplace the custom onedigit() and onebyte() hex-nibble helpers in\nhost/lib21/host_misc.c with a direct isxdigit()/sscanf() loop in\nvb2_str_to_id().\n\nAdd unit tests for vb2_str_to_id() in vb21_host_misc_tests.\n\nBUG\u003db:124141368\nTEST\u003dmake runtests\nBRANCH\u003dnone\nTAG\u003dagy\nCONV\u003d2efa1fd4-161e-459c-95ac-49f549088989\n\nChange-Id: I270332eee8dddd55f147f9fa3b396fc1dee04aad\nSigned-off-by: Jakub Czapiga \u003cczapiga@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/8497142\nReviewed-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\n" }, { "commit": "f11da243ec789208f4d7887d709c0d2597533eb8", "tree": "fc0d02abd6d72d4133518ffdc1af2530fc5f4716", "parents": [ "e9048b4b27d870277cde9b0902f32fed5564c518" ], "author": { "name": "Jakub Czapiga", "email": "czapiga@google.com", "time": "Fri Oct 02 12:50:11 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Mon Oct 12 14:42:59 2026" }, "message": "host: Reuse vb2_read_file and vb2_write_file in ReadFile and WriteFile\n\nDelegate ReadFile() and WriteFile() in host/lib/host_misc.c to\nvb2_read_file() and vb2_write_file() instead of duplicating stdio\nopen/seek/read/write/unlink sequences, while rejecting sizes above\nUINT32_MAX in WriteFile().\n\nAdd error-path unit tests for ReadFile() and WriteFile() in\nvb21_host_misc_tests.\n\nBUG\u003db:124141368\nTEST\u003dmake runtests\nBRANCH\u003dnone\nTAG\u003dagy\nCONV\u003d2efa1fd4-161e-459c-95ac-49f549088989\n\nChange-Id: I563cf9d4da9adc5ccd827dd353dbb107f67775f5\nSigned-off-by: Jakub Czapiga \u003cczapiga@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/8497141\nReviewed-by: Julius Werner \u003cjwerner@chromium.org\u003e\nReviewed-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\n" }, { "commit": "e9048b4b27d870277cde9b0902f32fed5564c518", "tree": "f4331a41f426411b2eaeab1dafc510d204caa50b", "parents": [ "9b080802786604a739e4a80d74bf8cff19f2d306" ], "author": { "name": "Jakub Czapiga", "email": "czapiga@google.com", "time": "Fri Oct 02 10:19:07 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Mon Oct 12 14:42:55 2026" }, "message": "futility: Remove deprecated update_hwid_digest and simplify write_to_file\n\nReplace the manual HWID copy and deprecated update_hwid_digest() call\nin cmd_gbb_utility.c with futil_set_gbb_hwid(), and remove\nupdate_hwid_digest() from futility/misc.c and futility/futility.h.\n\nAlso simplify write_to_file() in futility/misc.c by delegating file\nwriting to WriteFile().\n\nBUG\u003db:124141368\nTEST\u003dmake runtests\nBRANCH\u003dnone\nTAG\u003dagy\nCONV\u003d2efa1fd4-161e-459c-95ac-49f549088989\n\nChange-Id: Ib3992ecaf9ca709673833ac3471acda0190f2ceb\nSigned-off-by: Jakub Czapiga \u003cczapiga@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/8497140\nReviewed-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nReviewed-by: Julius Werner \u003cjwerner@chromium.org\u003e\n" }, { "commit": "9b080802786604a739e4a80d74bf8cff19f2d306", "tree": "01371f3c7efff442b394dc77f4536a71bf414051", "parents": [ "627a8604aedc84e446cb8238be603a664ccbbe44" ], "author": { "name": "Jakub Czapiga", "email": "czapiga@google.com", "time": "Fri Oct 02 10:17:21 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Mon Oct 12 14:42:50 2026" }, "message": "host: Simplify DigestFile, parse_hash, and WriteFile\n\nSimplify DigestFile() in host/lib/file_keys.c using vb2_read_file()\nand vb2_hash_calculate() instead of a manual open/read/extend loop.\n\nSimplify parse_hash() in host/lib/host_misc.c using sscanf() with\nisxdigit() validation and remove the unused parse_hex() helper. Also\nallow WriteFile() to succeed when writing a zero-length file and strip\nCR/LF in ReadFileFirstLine().\n\nAdd unit tests for parse_hash() and zero-length WriteFile() in\nvb21_host_misc_tests.\n\nBUG\u003db:124141368\nTEST\u003dmake runtests\nBRANCH\u003dnone\nTAG\u003dagy\nCONV\u003d2efa1fd4-161e-459c-95ac-49f549088989\n\nChange-Id: I0b2528222c2b3ae53de193a6f4a5c4a15128f39b\nSigned-off-by: Jakub Czapiga \u003cczapiga@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/8497139\nReviewed-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\n" }, { "commit": "627a8604aedc84e446cb8238be603a664ccbbe44", "tree": "72d7fcd9e4cad9655cd5ceb62d385ed977423421", "parents": [ "a2311fa8cdf0dc4fe5a0c18d16e5e6f19a1d23ec" ], "author": { "name": "Jian-Jia Su", "email": "jjsu@google.com", "time": "Wed Oct 07 12:43:44 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Mon Oct 12 12:55:33 2026" }, "message": "swap_ec_rw: Fall back to source tree devkeys outside the SDK\n\nThe old swap_ec_rw script signed with /usr/share/vboot/devkeys, else\ntests/devkeys in the source tree. Since CL:8445776, swap_ec_rw passes\nno -K to futility swap_cbfs_file, and futility only checks\n/usr/share/vboot/devkeys and /vendor/etc/vboot/devkeys. So when the\ncaller of swap_ec_rw gives no -K (e.g. pack_firmware.py on fwpackager\nbuilders), signing fails outside the SDK.\n\nWhen /usr/share/vboot/devkeys is missing, make swap_ec_rw pass\n-K tests/devkeys to futility swap_cbfs_file. Add a test case that calls\nswap_ec_rw without -K, as pack_firmware.py does.\n\nBUG\u003db:570361299\nTEST\u003dOutside the SDK with the CIPD futility, tests/swap_ec_rw_tests.sh\n passes (new case fails without the fix); pack_firmware.py --textproto\n --download for fatcat passes.\nBRANCH\u003dnone\n\nChange-Id: I207a0f9456130b1c7f3696f4eafce8d817523801\nSigned-off-by: Jian-Jia Su \u003cjjsu@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/8530826\nReviewed-by: Raul Rangel \u003crrangel@chromium.org\u003e\nTested-by: Jian-Jia Su \u003cjjsu@chromium.org\u003e\nAuto-Submit: Jian-Jia Su \u003cjjsu@chromium.org\u003e\nReviewed-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nCommit-Queue: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\n" }, { "commit": "a2311fa8cdf0dc4fe5a0c18d16e5e6f19a1d23ec", "tree": "49e41e6bdd37846851f8b0786e7a4a8424e259d6", "parents": [ "f75b4568fcf10e599db0e7fd995960e9f246ea4d" ], "author": { "name": "Jakub Czapiga", "email": "czapiga@google.com", "time": "Fri Oct 02 10:14:57 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Oct 09 18:16:28 2026" }, "message": "host: Remove dead SignatureBuf\n\nSignatureBuf() in host/lib/signature_digest.c has no callers in the\ntree. Remove it along with its declaration in signature_digest.h and\nunused OpenSSL/RSA headers, and clean up a copy-pasted error prefix in\npad_digest_utility.c.\n\nBUG\u003db:124141368\nTEST\u003dmake runtests\nBRANCH\u003dnone\nTAG\u003dagy\nCONV\u003d2efa1fd4-161e-459c-95ac-49f549088989\n\nChange-Id: I231a76ea692bcf13013f2ef57389c4b132823d72\nSigned-off-by: Jakub Czapiga \u003cczapiga@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/8497138\nReviewed-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nCommit-Queue: chromeos-auto-retry@chromeos-bot.iam.gserviceaccount.com \u003cchromeos-auto-retry@chromeos-bot.iam.gserviceaccount.com\u003e\nReviewed-by: Julius Werner \u003cjwerner@chromium.org\u003e\n" }, { "commit": "f75b4568fcf10e599db0e7fd995960e9f246ea4d", "tree": "fcca777c44608c1aadfac354e616253e303e88d9", "parents": [ "12baa370852e03914db2c8735b60f7ea3cb7dcf9" ], "author": { "name": "Jakub Czapiga", "email": "czapiga@google.com", "time": "Fri Oct 02 10:14:02 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Oct 09 18:16:24 2026" }, "message": "host: Deduplicate keyblock creation in host_keyblock\n\nExtract a shared alloc_keyblock() helper to allocate the keyblock\nheader, copy the packed data key, initialize the signature descriptors,\nand compute the SHA-512 keyblock hash for both vb2_create_keyblock()\nand vb2_create_keyblock_external().\n\nBUG\u003db:124141368\nTEST\u003dmake runtests\nBRANCH\u003dnone\nTAG\u003dagy\nCONV\u003d2efa1fd4-161e-459c-95ac-49f549088989\n\nChange-Id: I0345e13a7cdd40dcc4c4ff9f99f636a904df7bdc\nSigned-off-by: Jakub Czapiga \u003cczapiga@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/8497137\nReviewed-by: Julius Werner \u003cjwerner@chromium.org\u003e\nCommit-Queue: chromeos-auto-retry@chromeos-bot.iam.gserviceaccount.com \u003cchromeos-auto-retry@chromeos-bot.iam.gserviceaccount.com\u003e\n" }, { "commit": "12baa370852e03914db2c8735b60f7ea3cb7dcf9", "tree": "13cfac1c1723256dbab301d298bd22792c103181", "parents": [ "ca11f83aa6434ea3e698580bd83e21028bccf99d" ], "author": { "name": "Jakub Czapiga", "email": "czapiga@google.com", "time": "Fri Oct 02 10:13:04 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Oct 09 01:19:00 2026" }, "message": "host: Remove unused vboot 2.1 signing and verification helpers\n\nRemove vb21_sig_size_for_keys(), vb21_sign_object(),\nvb21_sign_object_multiple(), vb21_verify_common_subobject(), and\nvb2_private_key_hash(), which have no production callers in the tree.\n\nUpdate the unit tests in vb21_host_common_tests, vb21_host_sig_tests,\nand vb21_host_key_tests accordingly while keeping test coverage for\nvb21_sign_data() and vb21_verify_data() with VB2_SIG_NONE.\n\nBUG\u003db:124141368\nTEST\u003dmake runtests\nBRANCH\u003dnone\nTAG\u003dagy\nCONV\u003d2efa1fd4-161e-459c-95ac-49f549088989\n\nChange-Id: Id6eb5da93bf6a1a7f4edca52ba73d9b831b22ed8\nSigned-off-by: Jakub Czapiga \u003cczapiga@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/8497136\nReviewed-by: Julius Werner \u003cjwerner@chromium.org\u003e\nCommit-Queue: Julius Werner \u003cjwerner@chromium.org\u003e\n" }, { "commit": "ca11f83aa6434ea3e698580bd83e21028bccf99d", "tree": "f1bb2bf9038e2827d18ed91565aa5e853973588b", "parents": [ "8a0f9767d68ee7aab89ff66c36f0648f02f7b206" ], "author": { "name": "Jakub Czapiga", "email": "czapiga@google.com", "time": "Fri Oct 02 10:09:21 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Oct 09 01:18:57 2026" }, "message": "utility: Reuse vb_keyb_from_rsa in dumpRSAPublicKey\n\nReplace the duplicate 100-line RSA Montgomery n0inv/rr preprocessing\nfunction in dumpRSAPublicKey.c with a call to vb_keyb_from_rsa() from\nlibvboot_util.\n\nBUG\u003db:124141368\nTEST\u003dmake runtests\nBRANCH\u003dnone\nTAG\u003dagy\nCONV\u003d2efa1fd4-161e-459c-95ac-49f549088989\n\nChange-Id: Ibb82dc9ada690b08e9e93faeecdbd1c98607e605\nSigned-off-by: Jakub Czapiga \u003cczapiga@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/8497135\nCommit-Queue: Julius Werner \u003cjwerner@chromium.org\u003e\nReviewed-by: Julius Werner \u003cjwerner@chromium.org\u003e\n" }, { "commit": "8a0f9767d68ee7aab89ff66c36f0648f02f7b206", "tree": "da658680f9dd7648e4d389fe6a35ddcd58ba0017", "parents": [ "81996daa65c4927b9afeb5e19cc772c75f6a5831" ], "author": { "name": "Idwer Vollering", "email": "vidwer@gmail.com", "time": "Mon Aug 31 13:23:42 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Oct 08 07:47:39 2026" }, "message": "host/lib/gpio_uapi: exclude building code meant for linux when building on FreeBSD\n\nThe coreboot project used vboot, and their tool util/cbfstool relies on vboot code.\n\nOmit building code which uses `gpiochip_info` and/or `GPIO_GET_CHIPINFO_IOCTL`.\nThe latter constant is found in github.com/torvalds/linux.git\n\nChange-Id: I2498d80509cee38892bc93b306b3171bb6234cc1\nSigned-off-by: Idwer Vollering \u003cvidwer@gmail.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/8335911\nCommit-Queue: Jakub \"Kuba\" Czapiga \u003cczapiga@google.com\u003e\nTested-by: Julius Werner \u003cjwerner@chromium.org\u003e\nReviewed-by: Jakub \"Kuba\" Czapiga \u003cczapiga@google.com\u003e\nReviewed-by: Julius Werner \u003cjwerner@chromium.org\u003e\nReviewed-by: David Hendricks \u003cdhendrix@chromium.org\u003e\n" }, { "commit": "81996daa65c4927b9afeb5e19cc772c75f6a5831", "tree": "dfbc4ba34038dfd5ab24029d54314e86b630cb99", "parents": [ "c279bad2ebca3dc551e925e1b0d05972405b84e5" ], "author": { "name": "Yu-Ping Wu", "email": "yupingso@google.com", "time": "Wed Oct 07 08:35:02 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Oct 08 05:20:25 2026" }, "message": "sign_official_build: Fix race on shared images in parallel signing\n\nWhen signing with signer_config.csv, all rows are signed in parallel.\nEach worker copied its AP and EC images from the shellball, and moved\nthe signed images back to the same paths. However, AP and EC images\nare often shared by multiple rows. If a worker replaces an image while\nanother worker is copying it, cp fails with \"skipping file ..., as it\nwas replaced while being copied\", and the whole signing fails.\n\nFix the race by not modifying any image in the shellball while workers\nare running. Instead, each worker leaves its signed images in its own\ndirectory, and they are moved to the shellball in row order after all\nworkers finish.\n\nThis also makes the output deterministic. Previously, a worker might\nstart from an image already signed by another row, and a shared image\nin the shellball was signed for whichever row finished last. Now every\nworker signs the original image, and a shared image is always signed\nfor the last row, the same as signing serially. In addition, the\nshellball images are left untouched if any worker fails.\n\nBUG\u003db:532539923\nTEST\u003dSign Nissa firmware updater (169 rows) with 16 jobs, with and\n without loem.ini; no failures, the output is identical across\n runs, and identical to signing serially before.\nBRANCH\u003dnone\nTAG\u003dagy\nCONV\u003d705e5b3f-acf0-4ebd-91be-9a3d57b9198a\n\nChange-Id: I50a8b55ab7815f3e394cdab8fdfdda0d6a6a6964\nSigned-off-by: Yu-Ping Wu \u003cyupingso@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/8522502\nReviewed-by: Julius Werner \u003cjwerner@chromium.org\u003e\nTested-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nCommit-Queue: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\n" }, { "commit": "c279bad2ebca3dc551e925e1b0d05972405b84e5", "tree": "31c88202e9635900e8a370dc26bde103300dabc6", "parents": [ "3011cd8e40aebbcc95da2a99aa75bcb27702a18f" ], "author": { "name": "Yu-Ping Wu", "email": "yupingso@google.com", "time": "Tue Oct 06 07:14:22 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Oct 08 05:20:22 2026" }, "message": "sign_official_build: Output keyset patches for shared AP images\n\nMultiple rows in signer_config.csv may share the same AP image, while\nrequiring different signatures. For example, variants that are 100%\nsoftware compatible but have different brand codes (GSC board IDs)\nneed different RO_GSCVD sections. Previously, the per-model signature\nblocks were only output when loem.ini existed. Otherwise, all rows\nsharing the AP image signed the same file in place, and the last\nsigned row silently overwrote the others.\n\nWhen an AP image is shared by multiple rows, output the per-model\nsignature blocks (rootkey, vblock_A, vblock_B and gscvd) to the\nshellball keyset directory for all those rows, even without loem.ini.\nThe firmware updater then patches the shared AP image at runtime based\non the model. This works for rows that differ in brand_code and/or\nkey_id (with loem.ini). VERSION.signer also lists the per-model root\nkeys in this case.\n\nRows with an unshared AP image are signed in place as before, so\nunified builds without shared AP images produce the same output as\nbefore.\n\nBUG\u003db:570339228\nTEST\u003dSign Nissa firmware updater (169 rows) without loem.ini; keyset/\n contains patches for exactly the rows with shared AP images,\n VERSION.signer lists their root keys, unshared AP images and EC\n images are identical to before, and for anraggar, anraggar360\n and all 8 gothrax variants, applying the patches to the shared\n AP image produces the same image as signing that model alone,\n and passes futility gscvd validation.\nTEST\u003dSign Nissa with loem.ini; keyset/ and VERSION.signer identical\n to before.\nBRANCH\u003dnone\nTAG\u003dagy\nCONV\u003d705e5b3f-acf0-4ebd-91be-9a3d57b9198a\n\nChange-Id: Ia3a1c8a1d0b1bef4a28d7b57c4c30aca6a6a6964\nSigned-off-by: Yu-Ping Wu \u003cyupingso@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/8521722\nReviewed-by: Julius Werner \u003cjwerner@chromium.org\u003e\nTested-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nCommit-Queue: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\n" }, { "commit": "3011cd8e40aebbcc95da2a99aa75bcb27702a18f", "tree": "6c8e10224118668719af32a8f46fd01bc452196b", "parents": [ "b61d798202b887b2f43a2d7a67cc365e6821bf18" ], "author": { "name": "Yu-Ping Wu", "email": "yupingso@google.com", "time": "Tue Oct 06 07:12:17 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Oct 08 05:20:17 2026" }, "message": "sign_official_build: Decouple LOEM key selection from keyset output\n\nsign_bios() used the existence of loem.ini to decide two independent\nthings:\n\n1. Which firmware keys to sign with (LOEM keys selected by key_id).\n2. Whether to output the per-model root key and vblocks into the\n shellball keyset directory.\n\nDecouple them, so that the keys are still selected by loem.ini, while\nthe keyset output is controlled by whether a keyset directory is passed\nin. Also extract get_loem_key_index() for looking up the key index in\nloem.ini. Similarly, in resign_firmware_shellball(), decide per row\nwhether to pass the keyset directory to the signing worker.\n\nNo functional change, because the keyset directory is only passed when\nloem.ini exists.\n\nBUG\u003db:570339228\nTEST\u003dSign Nissa firmware updater (169 rows) with and without loem.ini;\n keyset/, VERSION.signer, unshared AP images and EC images are\n identical to before.\nBRANCH\u003dnone\nTAG\u003dagy\nCONV\u003d705e5b3f-acf0-4ebd-91be-9a3d57b9198a\n\nChange-Id: Ibff88a838b6bb4a1e7250f35a35158566a6a6964\nSigned-off-by: Yu-Ping Wu \u003cyupingso@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/8521721\nTested-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nReviewed-by: Julius Werner \u003cjwerner@chromium.org\u003e\nCommit-Queue: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\n" }, { "commit": "b61d798202b887b2f43a2d7a67cc365e6821bf18", "tree": "1f4a865fea81670e831460885c7fc210083f2d35", "parents": [ "7cf41276406903650ee34d4f16af74196c85d346" ], "author": { "name": "Yu-Ping Wu", "email": "yupingso@google.com", "time": "Tue Oct 06 07:11:39 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Oct 08 05:20:13 2026" }, "message": "sign_official_build: Validate signer_config.csv before signing\n\nParse and validate all rows of signer_config.csv before spawning any\nsigning worker, instead of validating each row right before its worker\nis spawned. An invalid row now aborts signing before any worker starts,\nrather than while earlier workers are still running in the background.\n\nThis also prepares for decisions that depend on the whole config, such\nas detecting AP images shared by multiple rows.\n\nBUG\u003db:570339228\nTEST\u003dSign Nissa firmware updater (169 rows) with and without loem.ini;\n keyset/, VERSION.signer, unshared AP images and EC images are\n identical to before.\nBRANCH\u003dnone\nTAG\u003dagy\nCONV\u003d705e5b3f-acf0-4ebd-91be-9a3d57b9198a\n\nChange-Id: I61b5f2f78b3e22ecbae05a8486a723116a6a6964\nSigned-off-by: Yu-Ping Wu \u003cyupingso@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/8521720\nTested-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nReviewed-by: Julius Werner \u003cjwerner@chromium.org\u003e\nCommit-Queue: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\n" }, { "commit": "7cf41276406903650ee34d4f16af74196c85d346", "tree": "c8b0b9f7c783d4138600be68f543445e1116b616", "parents": [ "7fc655b82135d4c92f0d0fcacec3d956a7fe8cae" ], "author": { "name": "Julius Werner", "email": "jwerner@chromium.org", "time": "Fri Oct 02 21:54:03 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Wed Oct 07 02:12:44 2026" }, "message": "firmware: Remove vb2api_use_short_dev_screen_delay()\n\nThis looks like forgotten tech debt that is no longer used. Depthcharge\nis reading GBB flags directly via vb2api_get_gbb_flags() nowadays.\n\nBRANCH\u003dmain\nBUG\u003dnone\nTEST\u003dnone\n\nCq-Depend: chromium:8508086\nChange-Id: I737abbf5121514a5334f3147a4bd9eef1479d72f\nSigned-off-by: Julius Werner \u003cjwerner@chromium.org\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/8499845\nReviewed-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\n" }, { "commit": "7fc655b82135d4c92f0d0fcacec3d956a7fe8cae", "tree": "10962f1022e1c95c10c64c57a4a7fd9334ca219e", "parents": [ "83e2c4c04599daf01d8b64ff6245cbf335403565" ], "author": { "name": "Tomasz Michalec", "email": "tmichalec@google.com", "time": "Fri Jun 19 09:42:36 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Tue Oct 06 03:52:57 2026" }, "message": "vboot: Add vb2api_nv_set function\n\nAdd vb2api_nv_set function that allows depthcharge to call simple nv\nsetters. It replaces vb2api_set_locale_id and\nvb2api_request_diagnostics. It allows to request TPM clear too.\n\nBRANCH\u003dmain\nBUG\u003db:489568276\nTEST\u003dRequest TPM clear by \"fastboot erase userdata\" command\n\nChange-Id: Ifc2b3d95e18d60472458709588f446fc4725b954\nSigned-off-by: Tomasz Michalec \u003ctmichalec@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7963661\nReviewed-by: Julius Werner \u003cjwerner@chromium.org\u003e\n" }, { "commit": "83e2c4c04599daf01d8b64ff6245cbf335403565", "tree": "1609c0f5ee23a0f52583561a455595d84a0d414e", "parents": [ "d9d95f84db807c834192f59bd0b89a89fbaafe78" ], "author": { "name": "Jakub Czapiga", "email": "czapiga@google.com", "time": "Fri Oct 02 10:08:34 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Mon Oct 05 23:09:36 2026" }, "message": "build: Remove redundant Makefile variables in scripts and cgpt\n\nCollapse identical SIGNING_SCRIPTS_BOARD and SIGNING_SCRIPTS_SDK lists\ninto SIGNING_SCRIPTS in scripts/Makefile.inc, and remove the unused\nCGPT_WRAPPER variable from cgpt/Makefile.inc.\n\nBUG\u003db:124141368\nTEST\u003dmake runtests\nBRANCH\u003dnone\nTAG\u003dagy\nCONV\u003d2efa1fd4-161e-459c-95ac-49f549088989\n\nChange-Id: I197fb69113ea1cae41e41f0b5edc5952fde9f53e\nSigned-off-by: Jakub Czapiga \u003cczapiga@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/8497134\nReviewed-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\n" }, { "commit": "d9d95f84db807c834192f59bd0b89a89fbaafe78", "tree": "2c64a842e9bb5ae10ed235b7647c201bbd60888e", "parents": [ "7bab83c774c735a1263afd6fb030638c467cda1f" ], "author": { "name": "Jakub Czapiga", "email": "czapiga@google.com", "time": "Fri Oct 02 10:08:07 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Mon Oct 05 23:09:32 2026" }, "message": "utility: Remove unused utility scripts\n\nRemove legacy utility scripts with no remaining callers in ChromeOS or\nAndroid:\n- utility/vbutil_what_keys (superseded by futility show)\n- utility/tpm-dad-lock\n- utility/chromeos-tpm-recovery-test\n\nBUG\u003db:124141368\nTEST\u003dmake runtests\nBRANCH\u003dnone\nTAG\u003dagy\nCONV\u003d2efa1fd4-161e-459c-95ac-49f549088989\n\nChange-Id: I773f45e376b7398e3f6c5c9d1a38a3f65b868a49\nSigned-off-by: Jakub Czapiga \u003cczapiga@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/8497133\nReviewed-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\n" }, { "commit": "7bab83c774c735a1263afd6fb030638c467cda1f", "tree": "f67ed2cae481067d27f1b7c7fee2d4ab624d03f5", "parents": [ "f691f7675d46c8f4726146803543a095b68477c5" ], "author": { "name": "Jeremy Bettis", "email": "jbettis@google.com", "time": "Wed Sep 30 16:20:19 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Mon Oct 05 21:07:05 2026" }, "message": "futility: Add swap_cbfs_file subcommand\n\nMigrate swap_ec_rw from a shell script to a native C subcommand\n(futility swap_cbfs_file) so it works on Android DUTs where shflags,\njq, openssl, and bash are unavailable.\n\n- Add cbfstool_extract, cbfstool_remove_if_exists, cbfstool_expand,\n cbfstool_add_raw, and cbfstool_get_compression in host/lib/cbfstool.c.\n- Add futility/cmd_swap_cbfs_file.c implementing EC RW extraction\n (via fmap_find/fmap_find_by_name), legacy EC_RW cookie truncation,\n SHA256 hash calculation, CBFS replacement across FW_MAIN_A/B, and\n in-process BIOS re-signing.\n- Replace scripts/image_signing/swap_ec_rw with a thin wrapper around\n \u0027futility swap_cbfs_file\u0027.\n\nBUG\u003db:553496134\nTEST\u003dmake runfutiltests \u0026\u0026 make runtests\nBRANCH\u003dnone\n\nChange-Id: I4fc09d2de43b04f1e2f16ab18923444dbf75cdda\nSigned-off-by: Jeremy Bettis \u003cjbettis@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/8445776\nReviewed-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nCommit-Queue: Jeremy Bettis \u003cjbettis@chromium.org\u003e\nTested-by: Jeremy Bettis \u003cjbettis@chromium.org\u003e\n" }, { "commit": "f691f7675d46c8f4726146803543a095b68477c5", "tree": "7a9556e09f0c9f3a1be17f95239bd6370a9381f8", "parents": [ "d7b2a9cf09c2c9213df38be46f49d1201ce03728" ], "author": { "name": "Hsuan Ting Chen", "email": "roccochen@chromium.org", "time": "Wed Sep 23 13:14:42 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Oct 01 08:44:18 2026" }, "message": "futility: updater: Preserve ME in non-factory modes on a local DUT\n\nPreviously, CL:4050014 restricted quirk_preserve_me to only preserve\nSI_ME when try_update !\u003d TRY_UPDATE_OFF, allowing --mode\u003drecovery and\ndefault updates to overwrite SI_ME.\n\nHowever, after b/340229891, in order to bypass b/284913015, lab DUTs\nwill run futility update --mode\u003drecovery and overwrite the live SI_ME\nwhile in S0, hanging the AP until a timeout (b/562584228).\n\nRestore quirk_preserve_me so that preserve_me\u003d1 preserves SI_ME in all\nnon-factory update modes on a local DUT (only skipping preservation\nwhen cfg-\u003efactory_update is set, when --quirks\u003dpreserve_me\u003d0 is\nexplicitly specified, or when flashing a remote DUT).\n\nBUG\u003db:562584228\nBRANCH\u003dnone\nTEST\u003dmake runfutiltests -j in cros_sdk\nTAG\u003dagy\nCONV\u003d5214b04b-9c48-4ecb-801b-523b965369a0\nCONV\u003d260835c5-c7a2-497d-a40a-e47cc7c126e0\nCONV\u003de70cee2b-f759-4a44-82c9-cf36f39babd3\nCONV\u003dc962c9ef-aa1c-425f-8c8d-a0e6380c8447\n\nChange-Id: Ia67c6d72de2457bd669da60298a06947f09227f9\nSigned-off-by: Hsuan Ting Chen \u003croccochen@chromium.org\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/8451662\nReviewed-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nCommit-Queue: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\n" }, { "commit": "d7b2a9cf09c2c9213df38be46f49d1201ce03728", "tree": "2526bb06c6a9727a0500ea4ca4a5e52d876ee101", "parents": [ "dd38e912b39166975ed13e46602d8a5b2a6e85f4" ], "author": { "name": "Jeremy Bettis", "email": "jbettis@google.com", "time": "Wed Sep 30 16:18:34 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Oct 01 07:19:48 2026" }, "message": "futility: Move temp file helpers to host_misc.c and misc.c\n\nMove vb2_write_temp_file() from host/lib/flashrom.c to\nhost/lib21/host_misc.c and move create_temp_file() and\nremove_all_temp_files() from futility/updater_utils.c to\nfutility/misc.c so they are available when building futility with\nUSE_FLASHROM\u003d0.\n\nBUG\u003db:553496134\nTEST\u003dmake USE_FLASHROM\u003d0 futil \u0026\u0026 make runfutiltests\nBRANCH\u003dnone\n\nChange-Id: I775148527faadef6443e32b3a78e14a67b260af8\nSigned-off-by: Jeremy Bettis \u003cjbettis@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/8494639\nTested-by: Jeremy Bettis \u003cjbettis@chromium.org\u003e\nCommit-Queue: Jeremy Bettis \u003cjbettis@chromium.org\u003e\nAuto-Submit: Jeremy Bettis \u003cjbettis@chromium.org\u003e\nReviewed-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\n" }, { "commit": "dd38e912b39166975ed13e46602d8a5b2a6e85f4", "tree": "17d9606f7099c908717ea66cbb942dc852bc9f2b", "parents": [ "341fc8dad682d828e63671b76ee4e4d71bc39a07" ], "author": { "name": "Yu-Ping Wu", "email": "yupingso@google.com", "time": "Wed Sep 16 02:50:46 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Wed Sep 23 20:58:07 2026" }, "message": "crossystem: Reject invalid characters in string properties\n\nFirmware property strings (e.g. fwid, ro_fwid, hwid) read from FDT or\nACPI can contain arbitrary characters if an attacker modified the\nunderlying flash sections (e.g. RW_FWID). On ARM, ReadFdtBlock reads\nthe full node without checking for newlines or non-printable\ncharacters. Embedded newlines in crossystem stdout can forge separate\nkey-value lines when scraped by tools such as StatisticsProvider.\n\nIntroduce is_valid_property_string() in host_misc to ensure property\nstrings only contain printable ASCII characters (0x20..0x7E) and do not\ncontain \u0027\u003d\u0027, \u0027\\\\\u0027, \u0027\\\u0027\u0027, or \u0027\"\u0027. Return error when invalid characters\nare detected in ReadFdtString, ReadAcpiSysfsString, or hwid-override.\n\nBUG\u003db:557502272\nTEST\u003dmake rununittests\nBRANCH\u003dnone\nTAG\u003dagy\nCONV\u003dad09cbc3-349f-43e7-abdd-ab8c2ee7b9ca\n\nChange-Id: I96536cd78c06ecc93c632b4f8a8504146a6a6964\nSigned-off-by: Yu-Ping Wu \u003cyupingso@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/8412966\nReviewed-by: Julius Werner \u003cjwerner@chromium.org\u003e\nAuto-Submit: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nCommit-Queue: Julius Werner \u003cjwerner@chromium.org\u003e\nTested-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\n" }, { "commit": "341fc8dad682d828e63671b76ee4e4d71bc39a07", "tree": "19eac98a064d8d0f01cb1a678530d279958b2c2f", "parents": [ "3f761d5019b7d3cd183153411eba0db47942976a" ], "author": { "name": "Grzegorz Bernacki", "email": "bernacki@google.com", "time": "Mon Sep 14 11:59:01 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Tue Sep 22 14:24:12 2026" }, "message": "android: Support dedicated recovery partition ramdisk\n\nWhen booting into recovery mode, check whether a dedicated \u0027recovery\u0027\npartition is present and verified by AVB. If present, append the recovery\nramdisk after vendor_boot ramdisks and omit recovery fragments from\nvendor_boot.\n\nBRANCH\u003dmain\nBUG\u003db:408266619\nTEST\u003dBoot OS with recovery partition on Sapphire\n\nChange-Id: I6e980dc7e67ff06399cfa5df912415203c5eb139\nSigned-off-by: Grzegorz Bernacki \u003cbernacki@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/8410989\nReviewed-by: Jakub \"Kuba\" Czapiga \u003cczapiga@google.com\u003e\nCommit-Queue: Jakub \"Kuba\" Czapiga \u003cczapiga@google.com\u003e\n" }, { "commit": "3f761d5019b7d3cd183153411eba0db47942976a", "tree": "3822ae38cd956cf7dd0458aca831f2af89f3622a", "parents": [ "e71354c2a93d65cc5a1a8faf5aea341dee76455a" ], "author": { "name": "Grzegorz Bernacki", "email": "bernacki@google.com", "time": "Fri Sep 11 14:53:39 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Tue Sep 22 14:24:08 2026" }, "message": "cgptlib: Add GPT_ANDROID_RECOVERY partition enum\n\nAdd GPT_ANDROID_RECOVERY to enum GptPartition and GptPartitionNames[]\nto support preloading the dedicated Android recovery partition.\nPlacing recovery right after vendor_boot aligns the preloaded buffer layout\n([boot] -\u003e [vendor_boot] -\u003e [recovery] -\u003e [init_boot]) with the required\nramdisk concatenation order.\n\nBRANCH\u003dmain\nBUG\u003db:408266619\nTEST\u003dBoot OS on Sapphire.\n\nChange-Id: Idcd111742f85a1d33b76ecfb278bcc46a89b0faf\nSigned-off-by: Grzegorz Bernacki \u003cbernacki@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/8410988\nCommit-Queue: Jakub \"Kuba\" Czapiga \u003cczapiga@google.com\u003e\nReviewed-by: Tomasz Michalec \u003ctmichalec@google.com\u003e\n" }, { "commit": "e71354c2a93d65cc5a1a8faf5aea341dee76455a", "tree": "62edecc7804f661cbfd816a8a982b7616b34130b", "parents": [ "abd6cb388bed9d21a1c3b17d23897db09acaec80" ], "author": { "name": "Hsuan Ting Chen", "email": "roccochen@chromium.org", "time": "Thu Aug 06 07:02:11 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Tue Sep 22 11:08:19 2026" }, "message": "futility: Check CSME lock for unlock_csme and AP RO verification\n\nCurrently, unlock_csme() and is_ap_ro_locked_with_verification() only\ninspect the flash descriptor lock (FLMSTR1) via\nis_flash_descriptor_locked(). However, modern Intel platforms also\nenforce CSME write protection via GPR0.\n\nThis patch updates is_csme_locked() to accept a struct firmware_image\nparameter and updates unlock_csme() and\nis_ap_ro_locked_with_verification() to use is_csme_locked(), ensuring\nboth FLMSTR1 and GPR0 are properly verified.\n\nBUG\u003db:540693049\nBRANCH\u003dnone\nTEST\u003dmake clean \u0026\u0026 make runfutiltests -j in cros_sdk\n\nChange-Id: I0da606017e573cd1a334d2cb7fbd9688bc46ac4a\nSigned-off-by: Hsuan Ting Chen \u003croccochen@chromium.org\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/8212520\nReviewed-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\n" }, { "commit": "abd6cb388bed9d21a1c3b17d23897db09acaec80", "tree": "baacd978146d94244b8b44ce2c7b92e5817f8a6e", "parents": [ "658dd24c41d2d017834fcada7437e1eb4c7f695f" ], "author": { "name": "Yu-Ping Wu", "email": "yupingso@google.com", "time": "Mon Sep 07 03:33:00 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Wed Sep 09 11:10:16 2026" }, "message": "sign_official_build: Remove \"|| ret\u003d$?\" in resign_firmware_payload\n\nIn resign_firmware_payload(), resign_firmware_shellball() is invoked\nwith `|| ret\u003d$?` to record the exit status and attempt to run\n`sudo umount \"${rootfs_dir}\"` afterwards.\n\nHowever, invoking a function in an `||` list suppresses `set -e`\nthroughout the function\u0027s execution tree. If a command inside fails\nwithout explicitly calling `die`, the error is silently ignored and the\nfunction may still return 0, masking failures. Furthermore, if a command\ndoes call `die`, `exit 1` terminates the script immediately, so\n`|| ret\u003d$?` and subsequent cleanup lines are never reached anyway.\n\nSince make_temp_dir() already registers temporary mount directories in\nTEMP_DIR_LIST, any script exit or fatal error triggers the global EXIT\ntrap (cleanup_temps_and_mounts()), ensuring proper unmounting.\n\nRemove `|| ret\u003d$?` so that errors inside resign_firmware_shellball()\npropagate naturally under `set -e`.\n\nBUG\u003db:557267321\nTEST\u003dmake runtests\nBRANCH\u003dnone\nTAG\u003dagy\nCONV\u003d705e5b3f-acf0-4ebd-91be-9a3d57b9198a\n\nSigned-off-by: Yu-Ping Wu \u003cyupingso@google.com\u003e\nChange-Id: I949588845d06c49202be22d844df0a156a6a6964\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/8364946\nTested-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nReviewed-by: Julius Werner \u003cjwerner@chromium.org\u003e\nCommit-Queue: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\n" }, { "commit": "658dd24c41d2d017834fcada7437e1eb4c7f695f", "tree": "7c809417aa16f523d6f5be8852b5ed492e6db8ac", "parents": [ "adea2e79b7333c878f317d7278ab08cdd16bd962" ], "author": { "name": "Yu-Ping Wu", "email": "yupingso@google.com", "time": "Mon Sep 07 02:13:20 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Wed Sep 09 11:10:12 2026" }, "message": "sign_official_build: Fix Guybrush board detection for RO_GSCVD bypass\n\nGuybrush AP firmware contains an uninitialized RO_GSCVD section in its\nFMAP (b/263378945). Currently, sign_official_build.sh checks whether the\nGuybrush board exists via `[[ -e \"${shellball_dir}/models/guybrush\" ]]`.\nHowever, CL:5826250 deprecated setvars.sh and removed the models/\ndirectory from shellballs, causing this check to always evaluate to\nfalse.\n\nPreviously, this went unnoticed because futility gscvd failures were\nsilently ignored due to `resign_firmware_shellball ... || ret\u003d$?`\nsuppressing `set -e` inside the function. When CL:8276431 added `|| die`\nto sign_gscvd() and CL:8276432 propagated worker exit codes, Guybrush\nrelease signing failed (b/557267321).\n\nRestore the board check by retrieving board_name via\nget_boardvar_from_lsb_release() in resign_firmware_payload() and\npassing it down to resign_firmware_image(). resign_firmware_image()\ndetermines whether to bypass RO_GSCVD for guybrush before calling\nsign_gscvd().\n\nBUG\u003db:557267321\nTEST\u003dmake runtests\nTEST\u003dManual test with sign_official_build.sh shellball verifying\n RO_GSCVD bypass for Guybrush and failure for non-Guybrush boards\nBRANCH\u003dnone\nTAG\u003dagy\nCONV\u003d705e5b3f-acf0-4ebd-91be-9a3d57b9198a\n\nChange-Id: I7a6707800aa9ffa37448cff54287a5026a6a6964\nSigned-off-by: Yu-Ping Wu \u003cyupingso@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/8365105\nCommit-Queue: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nReviewed-by: Julius Werner \u003cjwerner@chromium.org\u003e\nTested-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\n" }, { "commit": "adea2e79b7333c878f317d7278ab08cdd16bd962", "tree": "d29342f95d3ebb916e69e4642e57b503616958fc", "parents": [ "d646935127b741197329fb07f99709d2770c1c06" ], "author": { "name": "Yu-Ping Wu", "email": "yupingso@google.com", "time": "Fri Aug 21 09:53:49 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Tue Sep 01 07:09:53 2026" }, "message": "sign_official_build: Parallelize multi-model LOEM firmware signing\n\nParallelize the LOEM firmware signing loop in\nresign_firmware_shellball() to sign models concurrently across worker\nprocesses (NUM_JOBS, defaulting to nproc).\n\nKey changes:\n- Validate that all output_name and bios_image entries are non-empty.\n- Validate that all output_name entries in signer_config.csv are distinct.\n- Validate that the bios_image-to-ec_image mapping is unique.\n- Concurrently execute resign_firmware_image() in parallel across workers\n using spawn_worker() and wait_pids().\n- Ensure parallel safety by operating on an isolated temp bios copy and\n atomically replacing the shared image.\n\nBUG\u003db:532539923\nTEST\u003dmake runtests\nBRANCH\u003dnone\nTAG\u003dagy\nCONV\u003d705e5b3f-acf0-4ebd-91be-9a3d57b9198a\n\nChange-Id: I81695c2f21eb736b9c947acc4436cc8eab65eb27\nSigned-off-by: Yu-Ping Wu \u003cyupingso@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/8276432\nTested-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nReviewed-by: Julius Werner \u003cjwerner@chromium.org\u003e\nCommit-Queue: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\n" }, { "commit": "d646935127b741197329fb07f99709d2770c1c06", "tree": "f10e2a77b06918bb2cb5ad50892315739e6aacca", "parents": [ "1c0548d4dbd7dd00c01d38e01dee7dd8840554b6" ], "author": { "name": "Yu-Ping Wu", "email": "yupingso@google.com", "time": "Fri Aug 21 09:39:18 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Tue Sep 01 07:09:45 2026" }, "message": "sign_official_build: Refactor firmware resigning helpers\n\nExtract helper functions echo_file_md5(), sign_ec_rw(), sign_bios(),\nand sign_gscvd(), and aggregate them into resign_firmware_image() from\nresign_firmware_shellball() to improve code readability and modularity.\n\nThis refactoring prepares resign_firmware_shellball() for parallel\nexecution of multi-model LOEM firmware signing without changing the\nunderlying signing behavior or logic.\n\nBUG\u003db:532539923\nTEST\u003dmake runtests\nBRANCH\u003dnone\nTAG\u003dagy\nCONV\u003d705e5b3f-acf0-4ebd-91be-9a3d57b9198a\n\nChange-Id: Ica8b069ff49cb2af53d649c5cf9bc7d19d8fc964\nSigned-off-by: Yu-Ping Wu \u003cyupingso@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/8276431\nCommit-Queue: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nReviewed-by: Julius Werner \u003cjwerner@chromium.org\u003e\nTested-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\n" }, { "commit": "1c0548d4dbd7dd00c01d38e01dee7dd8840554b6", "tree": "b3823e7dec38e509c0a91f18b6a6560f4938f93e", "parents": [ "6d36e7f9075a1e3de73496758510be2bd39d01fd" ], "author": { "name": "Yu-Ping Wu", "email": "yupingso@google.com", "time": "Mon Aug 03 09:12:03 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Aug 27 06:18:18 2026" }, "message": "futility: Replace host_shell with host_exec_output using subprocess\n\nReplace all usages of host_shell() with a new helper function\nhost_exec_output() that invokes subprocess_run() with an argument\narray to avoid system shell evaluation and potential command\ninjection. In archive fallback, use subprocess_run() directly for\nmkdir -p.\n\nBUG\u003db:293560339, b:537409763\nTEST\u003dmake runtests\nBRANCH\u003dnone\nTAG\u003dagy\nCONV\u003d0ed59c5f-379d-47ac-8eda-adf83afbe0e3\nSigned-off-by: Yu-Ping Wu \u003cyupingso@google.com\u003e\nChange-Id: I75df038fca834cc3b86b3c78edcaacfe57f7eba0\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/8238251\nCommit-Queue: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nTested-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nAuto-Submit: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nReviewed-by: Hsuan Ting Chen \u003croccochen@chromium.org\u003e\n" }, { "commit": "6d36e7f9075a1e3de73496758510be2bd39d01fd", "tree": "e573a5e62197d3402685a9350faf853309e204ef", "parents": [ "c71f57be588c1ca69052e6f7208cc16437db513e" ], "author": { "name": "Bartłomiej Grzesik", "email": "bgrzesik@google.com", "time": "Mon Apr 13 13:19:09 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Aug 14 17:52:21 2026" }, "message": "vboot: Extract Microdroid vendor root digest into vb2_kernel_params\n\nExtract `com.android.build.microdroid-vendor.root_digest` from AVB metadata\nin `vb2_load_android()` and populate `params-\u003emicrodroid_vendor_digest`\nwith a `strdup` copy (or NULL if missing).\n\nThis allows depthcharge to read the digest directly from `vb2_kernel_params`\nto construct the `/avf` Device Tree node for `pvmfw`.\n\nBRANCH\u003dmain\nBUG\u003db:501363447\nTEST\u003dRun microdroid with vendor partition\n\nChange-Id: Ifa3aee75ef1a0b2350a2b22d903b28ba861813fe\nSigned-off-by: Bartłomiej Grzesik \u003cbgrzesik@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7754222\nReviewed-by: Julius Werner \u003cjwerner@chromium.org\u003e\n" }, { "commit": "c71f57be588c1ca69052e6f7208cc16437db513e", "tree": "b81ec8f6d36cb7b7521566d3aabf5127573519e1", "parents": [ "46d1da74273ed4c84765937dfaeb5d549ac6aade" ], "author": { "name": "Jae Hoon Kim", "email": "kimjae@google.com", "time": "Wed Jul 29 23:45:00 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Wed Aug 12 22:22:39 2026" }, "message": "vboot_reference: Fix miniOS kernel version extraction in sign_official_build.sh\n\nUpdate resign_minios_kernel() to extract the data key version from the keyblock\nvia \u0027futility show -P\u0027 and shift it right by 8 bits to determine the miniOS kernel\nversion floor, matching the verifier convention in 2load_kernel.c.\n\nBUG\u003db:518787060\nTEST\u003dVerified version extraction and shift against sample keyblock outputs.\n\nChange-Id: Ie951f05c1ec886e93c56a93d640877a550932016\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/8169682\nCommit-Queue: Jae Hoon Kim \u003ckimjae@chromium.org\u003e\nReviewed-by: Julius Werner \u003cjwerner@chromium.org\u003e\nAuto-Submit: Jae Hoon Kim \u003ckimjae@chromium.org\u003e\nTested-by: Jae Hoon Kim \u003ckimjae@chromium.org\u003e\n" }, { "commit": "46d1da74273ed4c84765937dfaeb5d549ac6aade", "tree": "0f3ae2ec8343aac4b22955e2029e31108eb44b47", "parents": [ "3b53e9c0402e62f362eae55d7d92059fcb76ae91" ], "author": { "name": "Hsuan Ting Chen", "email": "roccochen@chromium.org", "time": "Thu Jul 30 08:10:13 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Wed Aug 12 08:27:47 2026" }, "message": "futility: Auto-preserve SI_DESC and SI_ME when CSME is locked\n\nWhen running futility update via the internal programmer, whether the\nME and descriptor regions can be updated depends on the hardware lock\nstate enforced by the underlying flash programmer (flashrom) and\nchipset registers.\n\nTo better align section preservation with the hardware locking state\nwithout relying solely on external quirks or update mode flags,\nfutility should proactively detect whether CSME is locked.\n\nThis patch introduces is_csme_locked() in platform_csme.c to inspect\nthe flash descriptor lock (FLMSTR1) and GPR0 status. When running on\nthe internal programmer, preserve_management_engine() now calls\nis_csme_locked() and automatically preserves FMAP_SI_DESC and\nFMAP_SI_ME if the CSME is locked.\n\nBUG\u003db:540693049\nBRANCH\u003dnone\nTEST\u003dmake clean \u0026\u0026 make runfutiltests -j in cros_sdk\nTAG\u003dagy\nCONV\u003d0fe5cc8c-bd78-451f-abcc-fc9083e46712\n\nChange-Id: I9b1bdd8abf1efe30f25589ef4b8a9e13c078124d\nSigned-off-by: Hsuan Ting Chen \u003croccochen@chromium.org\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/8174263\nReviewed-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\n" }, { "commit": "3b53e9c0402e62f362eae55d7d92059fcb76ae91", "tree": "10c863872c8fbc471888dc43a9e2a61db0c36de7", "parents": [ "9ce40cc37f692e3459fe52434e2d1c18c95079bb" ], "author": { "name": "Hsuan Ting Chen", "email": "roccochen@chromium.org", "time": "Wed Jul 29 06:17:11 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Mon Aug 10 07:42:12 2026" }, "message": "futility/cmd_gbb_utility: add smart mode inference and implicit flash\n\nStreamline futility gbb command line usage by allowing --flags and\n--hwid to accept optional arguments and auto-inferring the execution\nmode:\n\n- When --flags\u003d0x18 or --hwid\u003d... is specified without -s/-g, the\n command automatically switches to DO_SET mode.\n- When no input file is specified, the command automatically falls back\n to live system flash (--flash), eliminating the need to explicitly\n specify --flash on target devices.\n- Emit VB2_DEBUG logs for all mode/target inferences to improve CLI\n observability.\n- Fully preserves backward compatibility with legacy -g/-s syntax.\n\nSupported shorthand syntax (vs legacy syntax):\n Read live flash flags:\n futility gbb --flags (vs: -g --flash --flags)\n Set live flash flags:\n futility gbb --flags\u003d0x18 (vs: -s --flash --flags\u003d0x18)\n Read file flags:\n futility gbb --flags bios.bin (vs: -g --flags bios.bin)\n Set file flags:\n futility gbb --flags\u003d0x18 in.bin out.bin (vs: -s --flags\u003d0x18 ...)\n\nBUG\u003db:540225324\nBRANCH\u003dnone\nTEST\u003dmake runfutiltests -j (passed in cros_sdk)\nTEST\u003dfutility gbb --flags\u003d0x18 test.bin; futility gbb --flags test.bin\nTAG\u003dagy\nCONV\u003d5ee680eb-419f-4258-b7f1-f8561ec23549\n\nChange-Id: Ia0c42e1b35ea59bc945bc96c17870877833f295c\nSigned-off-by: Hsuan Ting Chen \u003croccochen@chromium.org\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/8166220\nReviewed-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nCommit-Queue: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nReviewed-by: Yidi Lin \u003cyidilin@google.com\u003e\n" }, { "commit": "9ce40cc37f692e3459fe52434e2d1c18c95079bb", "tree": "a3da4ac7adb5c7c40549b724afcad95bb8f063f9", "parents": [ "8ddb7a8333b7506a573ed3056a46a1809c18c4cf" ], "author": { "name": "Yu-Ping Wu", "email": "yupingso@google.com", "time": "Mon Aug 03 08:04:20 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Mon Aug 10 05:57:34 2026" }, "message": "futility: csme: Use subprocess_run to prevent command injection\n\nReplace system() invocation in run_ifdtool() with the native\nsubprocess_run() library API to avoid shell command evaluation.\n\nFIXED\u003db:517220978\nTEST\u003dtests/futility/test_update.sh\nBRANCH\u003dnone\nTAG\u003dagy\nCONV\u003d80f9e6b9-3997-46e8-83ab-df83cdb79961\n\nChange-Id: Ifdaaf1b0fa40776304b6b7b56ae957aa3cd787a1\nSigned-off-by: Yu-Ping Wu \u003cyupingso@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/8184780\nReviewed-by: Hsuan Ting Chen \u003croccochen@chromium.org\u003e\nCommit-Queue: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nTested-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\n" }, { "commit": "8ddb7a8333b7506a573ed3056a46a1809c18c4cf", "tree": "42a45f982295f0143bb31ea7b53821a55337e411", "parents": [ "bfc556288e646152e3a7dffe3fcec1297b7f78e7" ], "author": { "name": "Chen-Tsung Hsieh", "email": "chentsung@chromium.org", "time": "Fri Jul 31 08:32:40 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Jul 31 21:51:16 2026" }, "message": "avb: adjust Makefile for ML-DSA changes in AVB repo\n\nBUG\u003db:518009398\nTEST\u003dbuild FW and boot Sapphire\nBRANCH\u003dtanjiro\n\nCq-Depend: chrome-internal:9618475\nChange-Id: I713c53c44889d1d2e542b448591600b2a48ad948\nSigned-off-by: Chen-Tsung Hsieh \u003cchentsung@chromium.org\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/8182306\nReviewed-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nReviewed-by: Yidi Lin \u003cyidilin@google.com\u003e\nReviewed-by: Grzegorz Bernacki \u003cbernacki@google.com\u003e\n" }, { "commit": "bfc556288e646152e3a7dffe3fcec1297b7f78e7", "tree": "9ce6aae455d2648e98624d5d6ec5c1784533d1a8", "parents": [ "e2db2a7e78432d9d36e7f8e41f752b2771016ccf" ], "author": { "name": "Grzegorz Bernacki", "email": "bernacki@google.com", "time": "Mon Jul 20 13:16:28 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Wed Jul 29 07:03:15 2026" }, "message": "vboot: Add support for FWMP DEV_USE_KEY_HASH in Android boot path\n\nIn developer mode, the FWMP DEV_USE_KEY_HASH flag specifies that the\nkernel key should be checked against the pinned developer key hash.\nUpdate the AVB boot path to handle this flag consistently with the\nChromeOS boot path.\n\nBUG\u003db:517223421\nBRANCH\u003dnone\nTEST\u003dUnit tests pass\n\nChange-Id: Ia3e403ba489c10d66321d487d6e035e7a50727cd\nSigned-off-by: Grzegorz Bernacki \u003cbernacki@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/8131379\nReviewed-by: Julius Werner \u003cjwerner@chromium.org\u003e\n" }, { "commit": "e2db2a7e78432d9d36e7f8e41f752b2771016ccf", "tree": "9568cf88d116b8497d60fb462741e1cd1e2cd17e", "parents": [ "3ced65d46194c47e0f44a031a1785024ae746f86" ], "author": { "name": "Yu-Ping Wu", "email": "yupingso@google.com", "time": "Mon May 25 04:07:53 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Mon Jul 27 10:30:30 2026" }, "message": "futility: archive: Fix integer overflow in archive loaders\n\nOn 32-bit platforms, archive loaders are vulnerable to an integer\noverflow when allocating memory for archive entries. An archive\ndeclaring an entry size of 0xFFFFFFFF causes a 0-byte allocation\nfollowed by a massive heap buffer overflow during the read phase.\n\nThis patch adds explicit bounds checking on the entry size before\nallocation and ensures that the parsing aborts safely on error.\nThe fix is applied to libarchive, libzip, and libziparchive loaders.\n\nFIXED\u003db:515051609\nTEST\u003dmake futil -j\nBRANCH\u003dnone\n\nChange-Id: Iac5b70ee89b167ab9590d677080a283ca43bd724\nSigned-off-by: Yu-Ping Wu \u003cyupingso@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/8136784\nTested-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nReviewed-by: Jakub \"Kuba\" Czapiga \u003cczapiga@google.com\u003e\nCommit-Queue: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\n" }, { "commit": "3ced65d46194c47e0f44a031a1785024ae746f86", "tree": "a5da67c429d20410bb30411540557ff4f7f5312f", "parents": [ "29a919a2a73305e58e79e6625a2824dff75166f9" ], "author": { "name": "Grzegorz Bernacki", "email": "bernacki@google.com", "time": "Mon Jul 06 08:28:11 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Jul 24 11:08:32 2026" }, "message": "vboot: Add validation checks for AVB verification data\n\nIn vb2_load_android, the result of avb_slot_verify is used to determine\nverification success. To ensure the returned verification data matches\nthe expected boot state, introduce verify_avb_data() to perform additional\nchecks.\n\nBRANCH\u003dnone\nBUG\u003db:518008064\nTEST\u003dBuild and boot test\n\nChange-Id: I93842945dda245da8176bbc805e9ad7556bcd7d4\nSigned-off-by: Grzegorz Bernacki \u003cbernacki@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/8063940\nReviewed-by: Jakub \"Kuba\" Czapiga \u003cczapiga@google.com\u003e\nReviewed-by: Julius Werner \u003cjwerner@chromium.org\u003e\n" }, { "commit": "29a919a2a73305e58e79e6625a2824dff75166f9", "tree": "d54882f16f0d06a92f5579739cb55ccf85029b39", "parents": [ "3edc98d0018cc68f1582654fb7091413aa74576e" ], "author": { "name": "Grzegorz Bernacki", "email": "bernacki@google.com", "time": "Mon Jul 06 11:53:38 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Jul 23 17:05:47 2026" }, "message": "vboot: Deprecate and remove EC-RO software sync\n\nRemove the obsolete EC-RO software sync feature from the firmware. The\nAP firmware no longer supports updating the EC RO region.\n\nDeprecate the VB2_NV_TRY_RO_SYNC NVRAM parameter, treating it as a\nno-op to preserve storage layout compatibility. Also remove the\ntry_ro_sync property from crossystem and clean up related tests.\n\nBRANCH\u003dnone\nBUG\u003db:518787337\nTEST\u003dBuild and run tests\n\nChange-Id: Ib38a8f272e142c644f324658976107035ecde794\nSigned-off-by: Grzegorz Bernacki \u003cbernacki@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/8084621\nReviewed-by: Julius Werner \u003cjwerner@chromium.org\u003e\n" }, { "commit": "3edc98d0018cc68f1582654fb7091413aa74576e", "tree": "58181915fb967642e8cc8a46a0f21cc79c1a242c", "parents": [ "72df9eeb47941c70548d390b4d6407e202fc25c1" ], "author": { "name": "Jakub Czapiga", "email": "czapiga@google.com", "time": "Mon Jul 20 11:32:29 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Tue Jul 21 20:13:46 2026" }, "message": "Add .shellcheckrc matching cros lint configuration\n\nEnable optional shellcheck rules and flags to match chromite\u0027s cros lint\nsettings for shell script analysis.\n\nBUG\u003db:534830084\nBRANCH\u003dNone\nTEST\u003dshellcheck scripts/presubmit-check-blocked-files.sh\nTAG\u003dagy\nCONV\u003da68974ea-cb70-44ad-98cc-df9d5811fccc\n\nChange-Id: I99eb6b756a9a29228398a407158734c853391bb8\nSigned-off-by: Jakub Czapiga \u003cczapiga@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/8117333\nCommit-Queue: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nReviewed-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\n" }, { "commit": "72df9eeb47941c70548d390b4d6407e202fc25c1", "tree": "b73a40597a2a5845f8c59c996b2d4be04a9dd871", "parents": [ "292375a38eb70c95997c48f1e052e456a792943b" ], "author": { "name": "Charlie Costakis", "email": "ccostakis@google.com", "time": "Wed Jun 24 22:55:05 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Tue Jul 21 11:53:40 2026" }, "message": "futility: Add recovery delay on retry in updater for servo runs\n\nWhen a USB bus reset or port reset occurs during SPI flashing, the\nGSC (Ti50) reboots its USB stack and re-enumerates on the host USB\nbus.\n\nCurrently, futility\u0027s firmware updater retry loop immediately\nretries the read/write operation. It fails because it retries too\nfast before servod and the host USB stack can detect the disconnect\nand complete device re-enumeration.\n\nAdditionally, futility update was not propagating prepare_ctrl_name\nto the updater configuration, causing servo programmer detection\nchecks to not be visible inside updater_utils.c.\n\nFix this by:\n1. Setting cfg-\u003eprepare_ctrl_name in cmd_update.c so\n updater_utils.c can identify when a servo programmer is\n active.\n2. Checking cfg-\u003eprepare_ctrl_name before sleeping 5 seconds on\n retries to allow GSC and servod to recover, while allowing\n internal/MTD programmer runs to retry without delay.\n\nBUG\u003db:502562965\nTEST\u003dTest on workstation: manually reset USB port during futility update\nand verify that futility waits 5s and successfully recovers on retry.\n\nTAG\u003dagy\nCONV\u003d111173d4-bd36-4596-9f92-df2442430813\n\nChange-Id: Id34dd7862b28f4f60fc35d7f2f87a0e79e486b12\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7998363\nReviewed-by: Jeremy Bettis \u003cjbettis@chromium.org\u003e\nReviewed-by: Hsuan Ting Chen \u003croccochen@chromium.org\u003e\nCommit-Queue: Jakub \"Kuba\" Czapiga \u003cczapiga@google.com\u003e\nTested-by: Jakub \"Kuba\" Czapiga \u003cczapiga@google.com\u003e\nReviewed-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\n" }, { "commit": "292375a38eb70c95997c48f1e052e456a792943b", "tree": "ba33c0accaa728a76139a9ad593a304a2195e890", "parents": [ "57d5a6f61b84de92005a5d9a338c37c19cdaa80b" ], "author": { "name": "Jakub Czapiga", "email": "czapiga@google.com", "time": "Thu Jul 16 11:23:25 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Tue Jul 21 11:09:31 2026" }, "message": "Add presubmit check for blocked files\n\nAdd presubmit check script to prevent adding/modifying blocked files\nlike Android.bp and vboot.rc in this repository.\n\nBUG\u003db:534830084, b:501363581\nBRANCH\u003dNone\nTEST\u003dTry to upload commit adding Android.bp and vboot.rc. See error.\n\nChange-Id: I06679c1b96acffe471c5ceca9b44ac78cae5d68f\nSigned-off-by: Jakub Czapiga \u003cczapiga@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/8107483\nReviewed-by: Grzegorz Bernacki \u003cbernacki@google.com\u003e\n" }, { "commit": "57d5a6f61b84de92005a5d9a338c37c19cdaa80b", "tree": "5cfb4401d3881d77f0f983ff1802580457f0c118", "parents": [ "df407bb50513ef3afdf88cedcce990a317229151" ], "author": { "name": "Jakub Czapiga", "email": "czapiga@google.com", "time": "Thu Jul 16 11:23:32 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Mon Jul 20 10:12:28 2026" }, "message": "Remove vboot.rc\n\nvboot.rc should live on the Android side together with Android.bp.\n\nBUG\u003db:534830084, b:501363581\nBRANCH\u003dNone\nTEST\u003dCQ\n\nChange-Id: I0893d7f453e78da4da6fc95d3fed327d3bf6ba00\nSigned-off-by: Jakub Czapiga \u003cczapiga@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/8097864\nCommit-Queue: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nReviewed-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nReviewed-by: Grzegorz Bernacki \u003cbernacki@google.com\u003e\n" }, { "commit": "df407bb50513ef3afdf88cedcce990a317229151", "tree": "2b09c99e32f345543169a8a46577908ac263df36", "parents": [ "87f0cee8b20978d1b74ef08e4fcdab006b16c60f" ], "author": { "name": "Vadim Bendebury", "email": "vbendeb@google.com", "time": "Thu Jul 16 14:44:08 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Jul 17 04:26:06 2026" }, "message": "sign_gsc_firmware: restore ti50 directory names scheme\n\nAll ti50 images used the base_name of ti50, but only the actual ti50\n(as opposed to ti50a, system_test_auto, etc) was ever signed for\nproduction. As it is necessary to sign ti50a now, to keep things\nsimple let\u0027s make ti50a the only image with a different tarball\nlayout, this will allow to prod sign ti50 and ti50a.\n\nBRANCH\u003dNone\nBUG\u003db:525048389\nTEST\u003dsuccessfully tried running the script on various ti50 tarballs\n\nChange-Id: Id5decfe14ba3dc229b3443ba254cfd0bbafbc16f\nSigned-off-by: Vadim Bendebury \u003cvbendeb@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/8106142\nReviewed-by: Mike Frysinger \u003cvapier@chromium.org\u003e\n" }, { "commit": "87f0cee8b20978d1b74ef08e4fcdab006b16c60f", "tree": "1dc8837d8c9c2b5c17c177b4d06f3b3ed1c66dfa", "parents": [ "180a526a698ecc48254a7a037ba26597f7e2d31d" ], "author": { "name": "Rob Barnes", "email": "robbarnes@google.com", "time": "Tue Jul 14 15:44:51 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Wed Jul 15 15:22:54 2026" }, "message": "vboot: Add VB2_GBB_FLAG_BYPASS_EC_RW_UPDATE flag\n\nIntroduce VB2_GBB_FLAG_BYPASS_EC_RW_UPDATE to bypass the EC RW flash\nupdate step by forcing the expected EC RW hash to match the active\nEC RW hash.\n\nThis flag is a useful alternative to DISABLE_EC_SOFTWARE_SYNC because\nthe EC will still jump to RW like a normal EFS2 boot. On EFS2 systems,\nthis override also results in the GSC mirror hash being updated to match\nthe active EC RW hash.\n\nSince DISABLE_EC_SOFTWARE_SYNC disables EC sync at an earlier stage, it\neffectively takes precedence and overrides BYPASS_EC_RW_UPDATE.\n\nBRANCH\u003dnone\nBUG\u003db:498622490\nTEST\u003dmake runtests. Also flashed AP firmware with the flag on Riven,\nflashed custom EC RW, and verified AP does not overwrite EC RW and EC\nboots to RW.\n\nChange-Id: Ie31022859722a1d86a58780bb7619dea78dcddad\nSigned-off-by: Rob Barnes \u003crobbarnes@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/8067859\nReviewed-by: Jeremy Bettis \u003cjbettis@chromium.org\u003e\nReviewed-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\n" }, { "commit": "180a526a698ecc48254a7a037ba26597f7e2d31d", "tree": "683ba2f19338866fea33bf0cc40f40ee7916021e", "parents": [ "042312c6e7fce9dd106b329be0ecb51a8a347337" ], "author": { "name": "Vadim Bendebury", "email": "vbendeb@google.com", "time": "Tue Jul 14 22:26:09 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Wed Jul 15 14:06:25 2026" }, "message": "sign_gsc_firmware: set base_name for NT processing case\n\nThe NT processing code path was left behind by the previous patch.\n\nBRANCH\u003dNone\nBUG\u003db:533726328\nTEST\u003dran the script over recent NT Ti50 and Ti50a images, observed\n expected results.\n\nChange-Id: I96f2fc82945f2508cd5800d8902f652c4c8b4956\nSigned-off-by: Vadim Bendebury \u003cvbendeb@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/8094463\nReviewed-by: Chris Mullins \u003ccrmullins@chromium.org\u003e\nReviewed-by: Mike Frysinger \u003cvapier@chromium.org\u003e\nReviewed-by: Vadím Sukhomlínov \u003csukhomlinov@google.com\u003e\n" }, { "commit": "042312c6e7fce9dd106b329be0ecb51a8a347337", "tree": "7023296ac34b4a69c8f44f011c295374f6cd17c1", "parents": [ "073eb93f4c725ae3a84ff8f7add4b17b0d058640" ], "author": { "name": "Vadim Bendebury", "email": "vbendeb@google.com", "time": "Fri Jul 10 21:09:59 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Sat Jul 11 11:01:59 2026" }, "message": "sign_gsc_firmware: fix base_name typo and rma keys parsing\n\nOne of previous changes failed to include a parameter name in ${},\nwhich was missed during testing, as it only affected the name of a\nsecondary generated artifact.\n\nA closer examination also highlighted a problem with parsing the cr50\nbinary image for RMA keys.\n\nBRANCH\u003dNone\nBUG\u003db:501562124\nTEST\u003dran the script\n - on a legacy cr50 tarball (verified that the test key is detected\n and swapped)\n - on a recent Cr50 tarball (verified that prod key is detected, no\n swapping performed)\n - on ti50 and ti50a DT tarballs, validated that the names are\n processed as expected\n\nChange-Id: I50823a23e201d430308eb4d8abca302abdea9412\nSigned-off-by: Vadim Bendebury \u003cvbendeb@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/8077018\nCommit-Queue: Vadím Sukhomlínov \u003csukhomlinov@google.com\u003e\nReviewed-by: Vadím Sukhomlínov \u003csukhomlinov@google.com\u003e\n" }, { "commit": "073eb93f4c725ae3a84ff8f7add4b17b0d058640", "tree": "692d26b6847df1348d1867c825b72f174b9f61fa", "parents": [ "7a76a7bf9661f8b557a4f6bff5b8c2eec6011f50" ], "author": { "name": "Vadim Bendebury", "email": "vbendeb@google.com", "time": "Thu Jul 09 19:07:09 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Jul 09 23:18:42 2026" }, "message": "sign_gsc_firmare: use the updated codesigner name\n\nThe upcoming signer software changes modify the GSC codesigner utility\nname to cr50-codesigner, vboot needs to use the new name.\n\nBRANCH\u003dnone\nBUG\u003db:501562124\nTEST\u003dnone\n\nChange-Id: I6e59cfe0bf13894ec7747aff96b6150f8967328f\nSigned-off-by: Vadim Bendebury \u003cvbendeb@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/8071831\nReviewed-by: Mike Frysinger \u003cvapier@chromium.org\u003e\nCommit-Queue: Mike Frysinger \u003cvapier@chromium.org\u003e\n" }, { "commit": "7a76a7bf9661f8b557a4f6bff5b8c2eec6011f50", "tree": "4d5371ba8e9e875eb51612f184040afb12776849", "parents": [ "906136da2c93e6dfe3c93763c93dfae59d24e54d" ], "author": { "name": "Vadim Bendebury", "email": "vbendeb@google.com", "time": "Mon Jul 06 23:51:25 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Jul 09 08:53:08 2026" }, "message": "sign_gsc_firmware: derive ti50 image name from input directory name\n\nDo not assume that the Dauntless images are all ti50, they could be\neither ti50 or ti50a, which is matches the directory name where the\nsigning artifacts are located.\n\nBRANCH\u003dnone\nBUG\u003db:501562124\nTEST\u003dinvoked the script for ti50 and ti50a archives with appropriate\n signing_instructions.sh, observed expected results.\n\nChange-Id: I0ac6f135851abeb579cbfb518abee84c846ca3d8\nSigned-off-by: Vadim Bendebury \u003cvbendeb@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/8048782\nCommit-Queue: Mike Frysinger \u003cvapier@chromium.org\u003e\nReviewed-by: Mary Ruthven \u003cmruthven@chromium.org\u003e\nReviewed-by: Mike Frysinger \u003cvapier@chromium.org\u003e\n" }, { "commit": "906136da2c93e6dfe3c93763c93dfae59d24e54d", "tree": "71e8653b25816e9271e8b6751ddb0ff9ec131555", "parents": [ "77af23c3d65d6d4d5f933fb93bd9c906b5a82b01" ], "author": { "name": "Yu-Ping Wu", "email": "yupingso@google.com", "time": "Thu Jun 11 06:55:48 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Mon Jun 15 03:53:46 2026" }, "message": "Reland \"futility: Remove legacy bios.bin name\"\n\nThis is a reland of commit 20fc7f70b1b4 (\"futility: Remove legacy\nbios.bin name\"). Compared to that commit (CL:7883122), test_update.sh is\nfixed.\n\nOriginal change\u0027s description:\n\u003e futility: Remove legacy bios.bin name\n\u003e\n\u003e Remove the legacy \"bios.bin\" name from the firmware updater output\n\u003e mode. Also remove the fallback check for \"bios.bin\" when building a\n\u003e manifest from a simple folder.\n\u003e\n\u003e BUG\u003db:517029427\n\u003e TEST\u003dmake runtests -j\n\u003e BRANCH\u003dnone\n\u003e\n\u003e Cq-Depend: chromium:7877775\n\u003e Change-Id: I04e8a7c4c3c1a186eaf02c204718b42b919835c9\n\u003e Signed-off-by: Yu-Ping Wu \u003cyupingso@google.com\u003e\n\u003e Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7883122\n\u003e Auto-Submit: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\n\u003e Commit-Queue: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\n\u003e Tested-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\n\u003e Reviewed-by: Jakub \"Kuba\" Czapiga \u003cczapiga@google.com\u003e\n\nBUG\u003db:517029427\nTEST\u003dmake runfutiltests\nBRANCH\u003dnone\n\nChange-Id: I811c19821c204f874133e6ec6db5631fd94e799d\nSigned-off-by: Yu-Ping Wu \u003cyupingso@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7925126\nReviewed-by: Jakub \"Kuba\" Czapiga \u003cczapiga@google.com\u003e\nCommit-Queue: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nTested-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\n" }, { "commit": "77af23c3d65d6d4d5f933fb93bd9c906b5a82b01", "tree": "65a78618edaff69d19d54f598cc1d16827121fba", "parents": [ "4b777a7d3d0dfc37f502a2283c67fc438c56dae7" ], "author": { "name": "Benjamin Shai", "email": "bshai@google.com", "time": "Wed Jun 10 17:03:10 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Jun 11 16:55:31 2026" }, "message": "keygeneration: small tweaks\n\nA couple of consistency changes to key generation. First, unify the\nkernel subkey algorithm between premp and mp generation. Second, specify\nsha256 for android certs (as that\u0027s the default in the version of\nopenssl in the docker container, but sha1 is the default on the hsm\nclient).\n\nBUG\u003db:515493293\nTEST\u003dNone\nBRANCH\u003dNone\n\nSigned-off-by: Benjamin Shai \u003cbshai@google.com\u003e\nChange-Id: If35100a702d02f4e28de902bacaf4508e63e61bd\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7919727\nReviewed-by: Madeleine Hardt \u003chardtmad@google.com\u003e\nReviewed-by: Rachael Newitt \u003crenewitt@google.com\u003e\n" }, { "commit": "4b777a7d3d0dfc37f502a2283c67fc438c56dae7", "tree": "dba76947d5708a928baed0287433c717906dd4af", "parents": [ "20fc7f70b1b4af046dac3eaa9ea777767a92b4a9" ], "author": { "name": "Renato Silva", "email": "rrsilva@google.com", "time": "Wed Jun 03 14:57:52 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Wed Jun 03 15:10:31 2026" }, "message": "Revert \"futility: Remove legacy bios.bin name\"\n\nThis reverts commit 20fc7f70b1b4af046dac3eaa9ea777767a92b4a9.\n\nReason for revert: http://b/519562415\n\nOriginal change\u0027s description:\n\u003e futility: Remove legacy bios.bin name\n\u003e\n\u003e Remove the legacy \"bios.bin\" name from the firmware updater output\n\u003e mode. Also remove the fallback check for \"bios.bin\" when building a\n\u003e manifest from a simple folder.\n\u003e\n\u003e BUG\u003db:517029427\n\u003e TEST\u003dmake runtests -j\n\u003e BRANCH\u003dnone\n\u003e\n\u003e Cq-Depend: chromium:7877775\n\u003e Change-Id: I04e8a7c4c3c1a186eaf02c204718b42b919835c9\n\u003e Signed-off-by: Yu-Ping Wu \u003cyupingso@google.com\u003e\n\u003e Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7883122\n\u003e Auto-Submit: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\n\u003e Commit-Queue: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\n\u003e Tested-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\n\u003e Reviewed-by: Jakub \"Kuba\" Czapiga \u003cczapiga@google.com\u003e\n\nBUG\u003db:517029427\n\nChange-Id: I32ad1f01c9652818aaf5aafacfbd60fa49e0069c\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7895642\nCommit-Queue: Renato Silva \u003crrsilva@google.com\u003e\nBot-Commit: rubber-stamper@appspot.gserviceaccount.com \u003crubber-stamper@appspot.gserviceaccount.com\u003e\nReviewed-by: Renato Silva \u003crrsilva@google.com\u003e\nOwners-Override: Renato Silva \u003crrsilva@google.com\u003e\n" }, { "commit": "20fc7f70b1b4af046dac3eaa9ea777767a92b4a9", "tree": "682318bce6f19d1e42cbc54795a781fb0f76ea33", "parents": [ "34fbbe62cc1832016e956d55d72b4aba606b7e21" ], "author": { "name": "Yu-Ping Wu", "email": "yupingso@google.com", "time": "Fri May 29 08:17:39 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Wed Jun 03 07:20:54 2026" }, "message": "futility: Remove legacy bios.bin name\n\nRemove the legacy \"bios.bin\" name from the firmware updater output\nmode. Also remove the fallback check for \"bios.bin\" when building a\nmanifest from a simple folder.\n\nBUG\u003db:517029427\nTEST\u003dmake runtests -j\nBRANCH\u003dnone\n\nCq-Depend: chromium:7877775\nChange-Id: I04e8a7c4c3c1a186eaf02c204718b42b919835c9\nSigned-off-by: Yu-Ping Wu \u003cyupingso@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7883122\nAuto-Submit: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nCommit-Queue: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nTested-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nReviewed-by: Jakub \"Kuba\" Czapiga \u003cczapiga@google.com\u003e\n" }, { "commit": "34fbbe62cc1832016e956d55d72b4aba606b7e21", "tree": "dba76947d5708a928baed0287433c717906dd4af", "parents": [ "399940cfb4a53f0d77f89c1bc22e3016134a6cb7" ], "author": { "name": "Yu-Ping Wu", "email": "yupingso@google.com", "time": "Thu May 28 03:37:42 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri May 29 07:46:29 2026" }, "message": "image_signing: Support \u0027ap-*\u0027 naming in ensure_amd_psp_flags.sh\n\nUpdate the find command to search for both \u0027bios-*\u0027 and \u0027ap-*\u0027 files.\nThis supports the new AP firmware naming convention while maintaining\nbackward compatibility for legacy BIOS naming.\n\nBUG\u003db:517029427\nTEST\u003dcq\nBRANCH\u003dnone\n\nChange-Id: I12141a43c375be8ceb6523ceea474daa1eca466f\nSigned-off-by: Yu-Ping Wu \u003cyupingso@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7878546\nCommit-Queue: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nTested-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nAuto-Submit: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nReviewed-by: Jakub \"Kuba\" Czapiga \u003cczapiga@google.com\u003e\n" }, { "commit": "399940cfb4a53f0d77f89c1bc22e3016134a6cb7", "tree": "921c2323e38030818fe17492cdd0ef3264222af6", "parents": [ "8c946cd4bf6347282a0235929cad2199c4d9527a" ], "author": { "name": "Grzegorz Bernacki", "email": "bernacki@google.com", "time": "Thu Apr 30 08:09:38 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Wed May 27 09:25:22 2026" }, "message": "vboot: Remove \u0027streaming_lba_count\u0027 field in disk info\n\nAfter removing support for external GPT separate field for LBA\ncount is no longer necessary.\n\nBRANCH\u003dnone\nBUG\u003db:514271116\nTEST\u003dmake runtests\n\nChange-Id: If7500d1477b0e3b7001d6f8a711961c96ca26b6b\nSigned-off-by: Grzegorz Bernacki \u003cbernacki@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7806907\nReviewed-by: Julius Werner \u003cjwerner@chromium.org\u003e\n" }, { "commit": "8c946cd4bf6347282a0235929cad2199c4d9527a", "tree": "819936b1baf8f7a1e3c131125d433377d4855ffb", "parents": [ "7d1d2641917ecd07a5546778c3aad39255623aa3" ], "author": { "name": "Grzegorz Bernacki", "email": "bernacki@google.com", "time": "Tue Apr 14 13:40:29 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Wed May 27 09:25:20 2026" }, "message": "vboot: Unify GPT drive sector counts\n\nConsolidate streaming_drive_sectors and gpt_drive_sectors in GptData\ninto a single drive_sectors field. This simplification follows the\nremoval of external GPT support and reduces redundancy in GPT\nvalidation.\n\nKey changes:\n- Update GptData definition and AllocAndReadGptData.\n- Update CheckHeader signature to accept a single drive_sectors value.\n- Update cgpt utility commands (boot, common, create, show) to use the\n unified field.\n- Refactor unit tests to match the simplified structure.\n\nBRANCH\u003dnone\nBUG\u003db:514271116\nTEST\u003dmake runtests\n\nCq-Depend: chromium:7797338\nChange-Id: If6bc7e5191854c89fa56215bac487030587a7ff5\nSigned-off-by: Grzegorz Bernacki \u003cbernacki@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7796983\nReviewed-by: Julius Werner \u003cjwerner@chromium.org\u003e\n" }, { "commit": "7d1d2641917ecd07a5546778c3aad39255623aa3", "tree": "35e4f7f916b05d9517fa93b0a7e5ddd8735259d0", "parents": [ "28233146c942241ef78420f070ba0fab7162151c" ], "author": { "name": "Grzegorz Bernacki", "email": "bernacki@google.com", "time": "Tue Apr 14 13:38:15 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Wed May 27 09:25:09 2026" }, "message": "vboot: Remove \u0027external_gpt\u0027 support from core library\n\nRemove GPT_FLAG_EXTERNAL and VB2_DISK_FLAG_EXTERNAL_GPT along with\nthe logic that handled split GPT/partition configurations. Simplify\nCheckParameters and CheckHeader to remove special-case validation\nfor external GPT.\n\nBRANCH\u003dnone\nBUG\u003db:514271116\nTEST\u003dmake runtests\n\nCq-Depend: chromium:7797336\nChange-Id: I7b62c196ea61c6ed6d238c48b96d5448001b89de\nSigned-off-by: Grzegorz Bernacki \u003cbernacki@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7796982\nReviewed-by: Julius Werner \u003cjwerner@chromium.org\u003e\n" }, { "commit": "28233146c942241ef78420f070ba0fab7162151c", "tree": "e401dc55c921914e5df9e8f0a5e82e503f2bcbc3", "parents": [ "55150fbf137d3be716a87a61bcc11bb3210dfda1" ], "author": { "name": "Grzegorz Bernacki", "email": "bernacki@google.com", "time": "Tue Apr 14 12:36:12 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Wed May 27 09:24:56 2026" }, "message": "cgpt: Remove support for external GPT\n\nRemove the \u0027-D\u0027 flag and associated logic that allowed specifying\na separate drive size for external GPT configurations. Simplify\nDriveOpen and GptCreate to assume GPT structures and partitions\nreside on the same device.\n\nBRANCH\u003dnone\nBUG\u003db:514271116\nTEST\u003dmake runtests\n\nChange-Id: Ic01c5aa28e3116c3be0c23469d20c463ee18dbac\nSigned-off-by: Grzegorz Bernacki \u003cbernacki@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7796981\nReviewed-by: Jakub \"Kuba\" Czapiga \u003cczapiga@google.com\u003e\n" }, { "commit": "55150fbf137d3be716a87a61bcc11bb3210dfda1", "tree": "4c3dbb93058c90921276ed83fa62cd567afd8fca", "parents": [ "3ef9fd95e7937dc767cfc655231b014c14458a6a" ], "author": { "name": "Julius Werner", "email": "jwerner@chromium.org", "time": "Thu May 21 18:06:35 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu May 21 21:25:01 2026" }, "message": "cgptlib: Explicitly check entries array size\n\nAdd a bounds check to the GPT library to ensure the entries array cannot\noverflow the allocated space for it. This is already implicitly true\nbecause it\u0027s derived from MAX_NUMBER_OF_ENTRIES, but the static analyzer\ncan\u0027t look that far so let\u0027s help it out.\n\nBRANCH\u003dnone\nBUG\u003db:515057174\nTEST\u003dBooted to kernel\n\nChange-Id: I8978451d03969855458e369940adaec3c54063e5\nSigned-off-by: Julius Werner \u003cjwerner@chromium.org\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7869871\nReviewed-by: Konrad Adamczyk \u003ckonrada@google.com\u003e\n" }, { "commit": "3ef9fd95e7937dc767cfc655231b014c14458a6a", "tree": "db9b52ebc04ee9b29922ff8ee8bc95c9712b7c22", "parents": [ "edf5bc718283b29d9aeece3158d915d664d6b9a9" ], "author": { "name": "Konrad Adamczyk", "email": "konrada@google.com", "time": "Thu May 21 08:59:57 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu May 21 18:02:51 2026" }, "message": "avb: Improve error handling on reserve_buffers, initialize size properly\n\nSize of the buffer shall be zeroed in reserve_buffer.\n\nAdditionally, set the alloced_size to 0 when given partition\nwas not found.\n\nBUG\u003db:515057832\nTEST\u003dBoot fatcat/ruby to UI; make runtests\nBRANCH\u003dmain\n\nSigned-off-by: Konrad Adamczyk \u003ckonrada@google.com\u003e\n\nChange-Id: I2ddb8782e8c87a6ee5eca9c0d7497ab235ab0c90\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7868181\nAuto-Submit: Konrad Adamczyk \u003ckonrada@google.com\u003e\nReviewed-by: Jon Murphy \u003cjpmurphy@google.com\u003e\nCommit-Queue: Konrad Adamczyk \u003ckonrada@google.com\u003e\nTested-by: Konrad Adamczyk \u003ckonrada@google.com\u003e\nTested-by: Jon Murphy \u003cjpmurphy@google.com\u003e\nReviewed-by: Julius Werner \u003cjwerner@chromium.org\u003e\nCommit-Queue: Jon Murphy \u003cjpmurphy@google.com\u003e\n" }, { "commit": "edf5bc718283b29d9aeece3158d915d664d6b9a9", "tree": "7439e5755ab10c82f0f31ade1c051e5541c01eb6", "parents": [ "0925dd08ce077cfa841c92f95cc76b860f6cd110" ], "author": { "name": "Julius Werner", "email": "jwerner@chromium.org", "time": "Thu May 14 22:54:46 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri May 15 00:30:47 2026" }, "message": "tpmc: Translate 2.0 `read` error code 0x18b to TPM_BADINDEX\n\nTPM2_NV_Read can return different error codes based on which\nauthorization is used, since the error code technically says which\n\"handle\" in the passed command was invalid. The command has both an\nauthorization handle and a handle specifying the space itself, so the\nerror code is either 0x18b or 0x28b depending on which of those was\ninvalid. If platform hierarchy is enabled, tpmc always uses platform\nauthorization for the `read` command, so the authorization handle is a\nwell-known constant that always exists. But if platform hierarchy is\ndisabled, it passes the NVRAM space index as authorization handle as\nwell (which is the official way to say \"I want to read this without\nauthorization), and in that case the TPM finds that the authorization\nhandle is invalid before it even checks the handle for the space itself.\nThat\u0027s why we also need to accept 0x18b as an error code alias for\nTPM_BADINDEX.\n\nBRANCH\u003dnone\nBUG\u003db:490147812\nTEST\u003dRan `tpmc read 0x100a` on my Trogdor, TODO\n\nChange-Id: I7478a271c433fd001b29881d471b88fd11fd47ef\nSigned-off-by: Julius Werner \u003cjwerner@chromium.org\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7848424\nReviewed-by: Andrey Pronin \u003capronin@chromium.org\u003e\n" }, { "commit": "0925dd08ce077cfa841c92f95cc76b860f6cd110", "tree": "7f4d21f2607376690f95384e1f953b05e32b6f8f", "parents": [ "b6cc9345426744196ce8bb23a39f0db8c14a8138" ], "author": { "name": "Yidi Lin", "email": "yidilin@google.com", "time": "Sat May 09 10:11:25 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Mon May 11 06:33:07 2026" }, "message": "Makefile: Disable UNROLL_LOOPS for ARMV8_CRYPTO_EXT\n\nDisable unrolling loops in the software SHA256 implementation when\nARMV8_CRYPTO_EXT is enabled to save space in the firmware image. This is\na workaround to resolve out-of-space issues on the Rauru platform.\n\nAs ARMV8_CRYPTO_EXT provides hardware acceleration, the software SHA256\nimplementation is only a fallback, so using tight loops there is a safe\nspace-saving optimization.\n\nBRANCH\u003dnone\nBUG\u003db:511201478\nTEST\u003demerge-rauru chromeos-bootimage\nTEST\u003dVerify the boot time on Tanjiro\n\nChange-Id: Ifdfa33b904f8368029e65199df267e4896117ebe\nSigned-off-by: Yidi Lin \u003cyidilin@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7831906\nReviewed-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\n" }, { "commit": "b6cc9345426744196ce8bb23a39f0db8c14a8138", "tree": "cb9584aea82272e38816701fb994e7ff637f784d", "parents": [ "e9ac5d52be8130ffadb8ce603b8aa72433632da7" ], "author": { "name": "Deva S", "email": "devadharuns@google.com", "time": "Wed Apr 29 02:27:48 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri May 08 05:05:38 2026" }, "message": "Fix for amd64 on llvm next\n\nThe new compiler found uninitialized variable x in different files\ninitialize values of x across all the test files in that directory\n\nBRANCH\u003dmain\nBUG\u003db:502694400\nBUG\u003db:502698843\nTEST\u003dCQ passes for vboot_reference-tests\npackage in arm64-generic board\n\nSigned-off-by: Deva Dharun Sivasubramaniam \u003cdevadharuns@google.com\u003e\n\nChange-Id: I7a2ca9656c68300c93c5fdd0ea2f0dadbf0cc4b8\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7802874\nReviewed-by: Jordan Abrahams-Whitehead \u003cajordanr@google.com\u003e\nReviewed-by: Andrey Pronin \u003capronin@chromium.org\u003e\nReviewed-by: Julius Werner \u003cjwerner@chromium.org\u003e\nAuto-Submit: Deva S (xWF) \u003cdevadharuns@google.com\u003e\nTested-by: Deva S (xWF) \u003cdevadharuns@google.com\u003e\nCommit-Queue: Deva S (xWF) \u003cdevadharuns@google.com\u003e\n" }, { "commit": "e9ac5d52be8130ffadb8ce603b8aa72433632da7", "tree": "7a3ae512448079e57bab9990e1cfb2c4c34821e4", "parents": [ "e36a232bfcf0b73fc7aae33b58f233ab1b5a6fcf" ], "author": { "name": "Jakub Czapiga", "email": "czapiga@google.com", "time": "Wed May 06 11:38:15 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu May 07 11:07:13 2026" }, "message": "Restore targets missed by the makefile split commit\n\nCulprit:\ncommit f4964de1d8ad (\"Split Makefile to subdirectories\")\n\nBRANCH\u003dNone\nBUG\u003db:509411243,b:510671373\nTEST\u003dmake runtests\nTEST\u003demerge-brya libpayload # builds vboot_reference fwlib\nTEST\u003dsudo emerge vboot_reference-tests\n\nChange-Id: I826d709db2d1902cab3a8da20ede0b5aae619de3\nSigned-off-by: Jakub Czapiga \u003cczapiga@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7820641\nReviewed-by: Grzegorz Bernacki \u003cbernacki@google.com\u003e\n" }, { "commit": "e36a232bfcf0b73fc7aae33b58f233ab1b5a6fcf", "tree": "9d8cda9cb726021ca9f57ae2ac4f3a096ed2e61c", "parents": [ "e725e208127a444985e831cb4a6bfd96f5f76706" ], "author": { "name": "Julius Werner", "email": "jwerner@chromium.org", "time": "Wed Apr 29 03:08:57 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Tue May 05 21:08:40 2026" }, "message": "futility: vbutil_key: Add new --repack mode\n\nThis patch adds a --repack mode to vbutil_key that allows changing the\nversion number on an existing .vbpubk file without converting it back\ninto a .pem first. This is necessary for signing operations that update\na rollback counter for incidental reasons (e.g. recovery rollback) that\nintentionally don\u0027t want to change the actual key (or at least it makes\nit more convenient because you don\u0027t have to parse out the algorithm to\ndo the to-.pem-and-back conversion).\n\nBRANCH\u003dnone\nBUG\u003db:507824560\nTEST\u003dmake runtests\n\nChange-Id: I32739aa6b2ad363fdb5b0bc508fa691afb86cf06\nSigned-off-by: Julius Werner \u003cjwerner@chromium.org\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7802955\nReviewed-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\n" }, { "commit": "e725e208127a444985e831cb4a6bfd96f5f76706", "tree": "785b0f99a0536b9ff700c1081d3629de64e9dddb", "parents": [ "7dfa482d6a843e1e25b615d6b0200028cedce29f" ], "author": { "name": "Adrian Ratiu", "email": "adrian.ratiu@collabora.com", "time": "Mon Apr 27 15:14:00 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Wed Apr 29 08:48:30 2026" }, "message": "futility/host: fix builds against newer glibc\n\nglibc 2.43 started enforcing C23/C++ rules for strchr and strrchr,\nso they return a const char * if the input is const char *, which\nfails due to -Wincompatible-pointer-types-discards-qualifiers.\n\nIn normal_fmap() we need to write into the strings (replacing the\n\u0027:\u0027 separator with \u0027\\\\0\u0027), so they are not really const.\nThe sole caller passes argv straight through, so just drop the inner\nconst from the names parameter rather than casting it away locally.\n\nThe host_key2 fix is trivial: just add const to the declaration.\n\nBRANCH\u003dmain\nBUG\u003db:491765858\nTEST\u003dLocal builds on amd64-generic and arm64-generic with glibc 2.43.\n\nChange-Id: I284fc8fd35abb4974560fcb230ac1b3187b2043b\nSigned-off-by: Adrian Ratiu \u003cadrian.ratiu@collabora.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7792932\nTested-by: Adrian Ratiu \u003cadrian.ratiu@collabora.corp-partner.google.com\u003e\nReviewed-by: Bob Haarman \u003cinglorion@chromium.org\u003e\nReviewed-by: Hsuan Ting Chen \u003croccochen@chromium.org\u003e\nReviewed-by: George Burgess \u003cgbiv@chromium.org\u003e\nCommit-Queue: Adrian Ratiu \u003cadrian.ratiu@collabora.corp-partner.google.com\u003e\n" }, { "commit": "7dfa482d6a843e1e25b615d6b0200028cedce29f", "tree": "33443e9f8ca4916d343d0302b5c3694fb7c8a3a9", "parents": [ "df42473a4221c5e3d27e1edc52d0c7fa7ebf8f51" ], "author": { "name": "Benjamin Doron", "email": "benjamin.doron@9elements.com", "time": "Wed Apr 22 18:15:45 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Apr 24 07:15:53 2026" }, "message": "host/Makefile.inc: Allow deprecated OpenSSL functions\n\nhost/lib/ contains most of the userspace code, which means that\nmuch of the deprecated OpenSSL function use is over here.\n\nAs of f4964de1d8ad (Split Makefile to subdirectories), this directory\nis no longer covered with the needed error exclusion.\n\nChange-Id: Idbeacb48ccc96703d20c65b6dd271c09eb235b72\nSigned-off-by: Benjamin Doron \u003cbenjamin.doron@9elements.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7786000\nTested-by: Jakub \"Kuba\" Czapiga \u003cczapiga@google.com\u003e\nReviewed-by: Jakub \"Kuba\" Czapiga \u003cczapiga@google.com\u003e\nCommit-Queue: Jakub \"Kuba\" Czapiga \u003cczapiga@google.com\u003e\nReviewed-by: Julius Werner \u003cjwerner@chromium.org\u003e\n" }, { "commit": "df42473a4221c5e3d27e1edc52d0c7fa7ebf8f51", "tree": "717c24bb902629e50fb7970a175e71d39ec51009", "parents": [ "a5f112e0ef33cc3adb97c374f775bce56d96266e" ], "author": { "name": "Tomasz Michalec", "email": "tmichalec@google.com", "time": "Wed Apr 22 14:21:06 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Apr 24 01:07:49 2026" }, "message": "firmware: Add dev fastboot lock flag\n\nAdd fastboot lock flag which blocks fastboot access in developer mode\nwhen set. This flag can be overridden by fastboot GBB flag. Fastboot\nlock is cleared when transitioning from normal to developer mode.\n\nBRANCH\u003dmain\nBUG\u003db:500693610\nTEST\u003dIn developer mode set fastboot lock and check that fastboot is\n blocked. After switching to normal mode and back to dev mode,\n fastboot is unblocked.\n\nChange-Id: I517c87c710ea9349898314e5d36a9e6bbe21597f\nSigned-off-by: Tomasz Michalec \u003ctmichalec@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7784694\nReviewed-by: Julius Werner \u003cjwerner@chromium.org\u003e\nCommit-Queue: Konrad Adamczyk \u003ckonrada@google.com\u003e\n" }, { "commit": "a5f112e0ef33cc3adb97c374f775bce56d96266e", "tree": "c8f73eaa0ab80689090f2b8c80a008a8e5c2ee4a", "parents": [ "d15cf2008daef56182977a3bd0cbcc93cc026059" ], "author": { "name": "Tomasz Michalec", "email": "tmichalec@google.com", "time": "Wed Apr 22 10:20:24 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Apr 23 21:53:23 2026" }, "message": "firmware: Enable external boot in dev mode by default\n\nEnable external boot mode when in normal mode, so it is set by default\nwhen transitioning to dev mode. User may still disable external boot\nwhen dev mode is already enabled.\n\nBRANCH\u003dmain\nBUG\u003db:500693610\nTEST\u003dFW in dev mode. Disable dev_boot_usb. External boot not allowed.\n Switch to normal mode. Switch to dev mode. External boot allowed.\n Disable dev_boot_usb. External boot not allowed.\n\nChange-Id: I25f1f559a0faeb2900f360ea8eeaff1a20a81dcc\nSigned-off-by: Tomasz Michalec \u003ctmichalec@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7784693\nReviewed-by: Julius Werner \u003cjwerner@chromium.org\u003e\nCommit-Queue: Julius Werner \u003cjwerner@chromium.org\u003e\n" }, { "commit": "d15cf2008daef56182977a3bd0cbcc93cc026059", "tree": "bed58e851117710eb8bc75bda885810c163b0bbf", "parents": [ "a5668dcb0b505d903d4d19d24690cf892d542205" ], "author": { "name": "Jakub Czapiga", "email": "czapiga@google.com", "time": "Mon Apr 20 14:52:32 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Wed Apr 22 05:26:28 2026" }, "message": "Move Android.bp to Android repository\n\nAccording to Android build system owners the Android.bp file should\nreside on the Android side in case of external/third-party imported\nprojects. Thus, this file shall be removed from CrOS vboot_reference\nand shall live on the ag/\n\nThe next update of the vboot copy in the Android repository should be\ndone manually with `git merge -s ours update_origin/main` to ignore this\ncommit and leave Android.bp on the fork side.\n\nBRANCH\u003dNone\nBUG\u003db:39500530\nTEST\u003dCQ\n\nChange-Id: Ie318cf9c235d5c0fd0c96e82895cff3eaecb8a1f\nSigned-off-by: Jakub Czapiga \u003cczapiga@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7776911\nReviewed-by: Elliott Hughes \u003cenh@google.com\u003e\nReviewed-by: Grzegorz Bernacki \u003cbernacki@google.com\u003e\n" }, { "commit": "a5668dcb0b505d903d4d19d24690cf892d542205", "tree": "560f717e757711716f7d5c29b3f31a8fde70de4e", "parents": [ "b8f56590bae9621438ecb3f873ed75d5064c92cd" ], "author": { "name": "Tomasz Michalec", "email": "tmichalec@google.com", "time": "Wed Apr 15 13:05:38 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Apr 16 18:58:53 2026" }, "message": "firmware: Add context flag for OEM Lock\n\nFirmware UI displays special error message when entering developer mode\nwith OEM Lock.\n\nBRANCH\u003dmain\nBUG\u003db:492057028\nTEST\u003dEnter developer mode with OEM Lock set and see the error message\n\nChange-Id: I6b3d0ac73e8e8462af959fd4dd9580c75e257fcb\nSigned-off-by: Tomasz Michalec \u003ctmichalec@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7764627\nReviewed-by: Jakub \"Kuba\" Czapiga \u003cczapiga@google.com\u003e\nReviewed-by: Konrad Adamczyk \u003ckonrada@google.com\u003e\nReviewed-by: Julius Werner \u003cjwerner@chromium.org\u003e\n" }, { "commit": "b8f56590bae9621438ecb3f873ed75d5064c92cd", "tree": "ce0256f52e93b363117da576cabc66c44c695055", "parents": [ "f4964de1d8ad66eb891967bae47585fa03ba0d32" ], "author": { "name": "Grzegorz Bernacki", "email": "bernacki@google.com", "time": "Fri Mar 13 12:26:15 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Apr 16 18:58:50 2026" }, "message": "vboot: Explicitly return rollback error from vb2api_load_kernel\n\nPreviously, vb2api_load_kernel() collapsed all kernel loading errors\ninto generic VB2_ERROR_LK_INVALID_KERNEL_FOUND or\nVB2_ERROR_LK_NO_KERNEL_FOUND. This prevented the caller from\nidentifying rollback protection failures.\n\nModify vb2api_load_kernel() to specifically translate\nVB2_ERROR_AVB_ERROR_ROLLBACK_INDEX into a new VB2_ERROR_LK_ROLLBACK\nerror code. This allows the UI layer to display a specific error\nmessage for rollback violations (e.g., \"Outdated recovery image\")\ninstead of a generic failure screen.\n\nBUG\u003db:488131983\nBRANCH\u003dnone\nTEST\u003dVerified that the \"Outdated recovery image\" screen is displayed\n when a rollback error occurs during recovery.\n\nCq-Depend: chromium:7666120\nChange-Id: I9c0c090730fdad7dd4acc06bd83fb04919c2e1b7\nSigned-off-by: Grzegorz Bernacki \u003cbernacki@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7666079\nReviewed-by: Julius Werner \u003cjwerner@chromium.org\u003e\nReviewed-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nTested-by: Tomasz Michalec \u003ctmichalec@google.com\u003e\nReviewed-by: Konrad Adamczyk \u003ckonrada@google.com\u003e\nCommit-Queue: Tomasz Michalec \u003ctmichalec@google.com\u003e\n" }, { "commit": "f4964de1d8ad66eb891967bae47585fa03ba0d32", "tree": "cb91ff9c7347cd898e4e7de66a5f0ce6fe7d05ec", "parents": [ "9fcfe9d35813d69be39c57a89d65443687ebb4ea" ], "author": { "name": "Jakub Czapiga", "email": "czapiga@google.com", "time": "Thu Apr 02 20:23:32 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Apr 16 10:36:23 2026" }, "message": "Split Makefile to subdirectories\n\nThis patch was mostly done with Gemini CLI with manual fixes and\ncorrections applied.\n\nThe important change is that the non-debug build of vboot is nowbuilt\nwith -Os and not -g -Os.\n\nDone By: gemini-cli\n\nBRANCH\u003dNone\nBUG\u003db:124141368\nTEST\u003dmake unit-tests\nTEST\u003dUSE\u003davb emerge-brya coreboot libpayload depthcharge\n\nChange-Id: I0b8affd9988e69726786833781f6b30ea2634bb0\nSigned-off-by: Jakub Czapiga \u003cczapiga@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7725944\nReviewed-by: Grzegorz Bernacki \u003cbernacki@google.com\u003e\nReviewed-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\n" }, { "commit": "9fcfe9d35813d69be39c57a89d65443687ebb4ea", "tree": "d10cca40693a939cefc4dadc715d2b9d89fe0946", "parents": [ "fd1d33fbafc2d0dedd5b433ca5deb19db9fd527d" ], "author": { "name": "Jeffery Miller", "email": "jefferymiller@google.com", "time": "Fri Apr 10 20:43:24 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Tue Apr 14 15:22:52 2026" }, "message": "Android.bp: Set the temporary path to /tmp for recovery builds\n\nrecovery needs to execute crossystem to clear the tpm.\nThe recovery domain is neverallowed to modify files in the\n/data partition. In android recovery /tmp is available to\nbe used for the lockfile.\n\nBUG\u003db:497901840\nBRANCH\u003dnone\nTEST\u003dconfirm crossystem clear_tpm_owner_request\u003d1 uses /tmp in recovery\nTEST\u003dconfirm crossystem creates its log in the recovery domain\n\nChange-Id: I39fb62c97bb982780e24263bd60025ab4a66e100\nSigned-off-by: Jeffery Miller \u003cjefferymiller@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7748951\nReviewed-by: Jakub \"Kuba\" Czapiga \u003cczapiga@google.com\u003e\n" }, { "commit": "fd1d33fbafc2d0dedd5b433ca5deb19db9fd527d", "tree": "2640299feaa6a0209e7c1e321b8cefdb65d6af7c", "parents": [ "83bcd11e28c8fab0f194d62c5e1f6ff84473dc1e" ], "author": { "name": "Jeffery Miller", "email": "jefferymiller@google.com", "time": "Thu Apr 09 16:53:11 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Mon Apr 13 23:38:23 2026" }, "message": "crossystem: Make it available for android recovery\n\nMake crossystem available to be included in an android\nrecovery image. Add crossystem.recovery to the package list\nto include this in recovery.\nIt will be used to clear the TPM in android recovery.\n\nBUG\u003db:497901840\nBRANCH\u003dnone\nTEST\u003dadd to PACKAGES, confirm it is included in boot recovery\n\nChange-Id: I39e09e4a41cdadd5fa4aaae36111ca5178f1068c\nSigned-off-by: Jeffery Miller \u003cjefferymiller@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7748950\nReviewed-by: Jakub \"Kuba\" Czapiga \u003cczapiga@google.com\u003e\n" }, { "commit": "83bcd11e28c8fab0f194d62c5e1f6ff84473dc1e", "tree": "656f16cd27a6ef4bf1e0eb00b7d015546b880b16", "parents": [ "1accb279b195241cdd6ea47f95747bb8664442a2" ], "author": { "name": "Grzegorz Bernacki", "email": "bernacki@google.com", "time": "Fri Apr 10 10:33:07 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Mon Apr 13 15:36:14 2026" }, "message": "vboot: fix futility build for Android\n\nBRANCH\u003dmain\nBUG\u003db:444173574\nTEST\u003dm futility\n\nChange-Id: Ic2edfae5d413d56ff8e538217a2c1553477784c1\nSigned-off-by: Grzegorz Bernacki \u003cbernacki@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7748467\nReviewed-by: Jakub \"Kuba\" Czapiga \u003cczapiga@google.com\u003e\n" }, { "commit": "1accb279b195241cdd6ea47f95747bb8664442a2", "tree": "c030f4a52a54784a2e7c353009f91c0ce713ecc5", "parents": [ "915f62b7eb8c0d7c697dcda183332dbf2d6d1fe1" ], "author": { "name": "Jakub Czapiga", "email": "czapiga@google.com", "time": "Thu Apr 09 11:19:36 2026" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Mon Apr 13 08:02:39 2026" }, "message": "Remove GPT support for NOR memory (MTD)\n\nThere are no devices using GPT on NOR.\n\nBRANCH\u003dNone\nBUG\u003db:184812319,b:124141368\nTEST\u003dcros_run_unit_tests --host --packages vboot_reference\nTEST\u003dUSE\u003davb FW_NAME\u003dredrix emerge-brya libpayload depthcharge\nTEST\u003dCQ\n\nChange-Id: I45971fc8e9e8cb9f56fec1f86a17db49ad0a6d48\nSigned-off-by: Jakub Czapiga \u003cczapiga@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7743264\nReviewed-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nReviewed-by: Grzegorz Bernacki \u003cbernacki@google.com\u003e\nCommit-Queue: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\n" }, { "commit": "915f62b7eb8c0d7c697dcda183332dbf2d6d1fe1", "tree": "960859f097de808d8fdcc55ca471ee32a818c5b2", "parents": [ "1c511e33b4d4d028c2c3d05e42011fbdb89dd63b" ], "author": { "name": "Grzegorz Bernacki", "email": "bernacki@google.com", "time": "Tue Apr 07 11:59:54 2026" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Apr 09 14:40:01 2026" }, "message": "vboot: Add tpmc utility to Android.bp\n\nBRANCH\u003dnone\nBUG\u003db:405345695\nTEST\u003dVerified that tpmc builds successfully for Android.\n\nChange-Id: Ia0ee891bbb78c1d4dc0555785b6286ebb42a7ba3\nSigned-off-by: Grzegorz Bernacki \u003cbernacki@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7735365\nReviewed-by: Jakub \"Kuba\" Czapiga \u003cczapiga@google.com\u003e\n" }, { "commit": "1c511e33b4d4d028c2c3d05e42011fbdb89dd63b", "tree": "42ae60307913f9107af5e0d6d7ca792f9a936d3f", "parents": [ "36daffbbe4f85b26b2577552e31c3f6910284d00" ], "author": { "name": "Vadim Bendebury", "email": "vbendeb@google.com", "time": "Tue Apr 07 20:16:09 2026" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Wed Apr 08 00:25:43 2026" }, "message": "ti50a: support signing nightly images.\n\nLet\u0027s check explicitly for the bit of 0x20000 to tell if the image is\nallowed to be signed for nightly testing. This will cover both Ti50\nand Ti50a Dauntless images.\n\nBRANCH\u003dnone\nBUG\u003db:498346002\nTEST\u003dnone\n\nChange-Id: I9797c342a6677e93928d59051f42a44ad04eefea\nSigned-off-by: Vadim Bendebury \u003cvbendeb@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7735992\nCommit-Queue: ChromeOS Auto Runner \u003cchromeos-auto-runner@chromeos-bot.iam.gserviceaccount.com\u003e\nReviewed-by: Allen Webb \u003callenwebb@google.com\u003e\nCommit-Queue: Allen Webb \u003callenwebb@google.com\u003e\n" }, { "commit": "36daffbbe4f85b26b2577552e31c3f6910284d00", "tree": "4b917c0f9452b87f42025ac0a5aa6059d02b96e8", "parents": [ "229ebbd4fc1426acea28abf69cbeb6b2d4716e1a" ], "author": { "name": "Benjamin Doron", "email": "benjamin.doron@9elements.com", "time": "Tue Mar 31 17:15:22 2026" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Tue Apr 07 01:06:25 2026" }, "message": "host/lib: Use public key\u0027s PKCS11 handle for retrieving modulus\n\nEven if the modulus attribute can be exposed on the private key,\nit\u0027s more typical for it to be on the public key handle. Therefore,\nacquire a handle to the public key too, and use it for this purpose.\n\nBUG\u003dNone\nTEST\u003d Sign a coreboot ROM with SoftHSM\n\nChange-Id: Idc27df5b456d3b3d179203e192aa8ea8a9546b1b\nSigned-off-by: Benjamin Doron \u003cbenjamin.doron@9elements.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7718619\nReviewed-by: Julius Werner \u003cjwerner@chromium.org\u003e\nCommit-Queue: Julius Werner \u003cjwerner@chromium.org\u003e\nTested-by: Julius Werner \u003cjwerner@chromium.org\u003e\nReviewed-by: Benjamin Shai \u003cbshai@google.com\u003e\n" }, { "commit": "229ebbd4fc1426acea28abf69cbeb6b2d4716e1a", "tree": "10541d11e53c083d58d68ce66de2b9e254a97e5a", "parents": [ "6b6eb03e4ad8772cba5094ffa5a853e0fe542b76" ], "author": { "name": "Benjamin Doron", "email": "benjamin.doron@9elements.com", "time": "Tue Mar 31 17:13:14 2026" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Tue Apr 07 01:06:22 2026" }, "message": "host/lib: Login to PKCS11 session if a PIN is provided\n\nSome PKCS11 sessions will require login via a PIN for sensitive\noperations. If the user provides one, then call `C_Login`.\n\nAn environment variable is presumed safe, as a build and signing server\nmust be sufficiently secure anyways.\n\nBUG\u003dNone\nTEST\u003d Sign a coreboot ROM with SoftHSM\n\nChange-Id: Idfa1ce3f1b7a8cabc0833965b17f37650ac23b43\nSigned-off-by: Benjamin Doron \u003cbenjamin.doron@9elements.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7718618\nTested-by: Julius Werner \u003cjwerner@chromium.org\u003e\nCommit-Queue: Julius Werner \u003cjwerner@chromium.org\u003e\nReviewed-by: Julius Werner \u003cjwerner@chromium.org\u003e\nReviewed-by: Benjamin Shai \u003cbshai@google.com\u003e\n" }, { "commit": "6b6eb03e4ad8772cba5094ffa5a853e0fe542b76", "tree": "c997338089d102fbf67f67a4598975fce7ee47c0", "parents": [ "dae6677f43bf0cdfdf429df6fada445b66d38d55" ], "author": { "name": "Benjamin Doron", "email": "benjamin.doron@9elements.com", "time": "Fri Apr 03 17:48:05 2026" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Tue Apr 07 01:06:20 2026" }, "message": "host/lib: Let the PKCS11 library cleanup on exit\n\nCalling `C_Finalize` allows the library to perform cleanup that\nthe kernel might not be able to do, such as releasing locks or\ninforming external devices that the connection is being closed.\nIt also allows the library to wipe secrets from memory.\n\nWhile no bugs may have been encountered yet, being clean helps avoid\nany possible problems in the future.\n\nBUG\u003dNone\nTEST\u003d Sign a coreboot ROM with SoftHSM\n\nChange-Id: I31bc6fde1d2e125f8f3487dc435362952defacbf\nSigned-off-by: Benjamin Doron \u003cbenjamin.doron@9elements.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7727271\nReviewed-by: Julius Werner \u003cjwerner@chromium.org\u003e\nTested-by: Julius Werner \u003cjwerner@chromium.org\u003e\nReviewed-by: Benjamin Shai \u003cbshai@google.com\u003e\nCommit-Queue: Julius Werner \u003cjwerner@chromium.org\u003e\n" }, { "commit": "dae6677f43bf0cdfdf429df6fada445b66d38d55", "tree": "1629717630fce2cb80505982d8c0d91e881a430a", "parents": [ "a037219e34fb03f4e4c36e79b3963b7e24541086" ], "author": { "name": "Jakub Czapiga", "email": "czapiga@google.com", "time": "Mon Mar 23 11:11:05 2026" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Apr 02 14:08:54 2026" }, "message": "firmware: Add context flag for fastboot policy\n\nFastboot should be available only in certain conditions i.e.:\n - In developer mode including forced with GBB flag\n - In any mode with Fastboot GBB flag enabled\n\nThis commit adds a new context flag which is set based on the above\nconditions.\n\nBRANCH\u003dNone\nBUG\u003db:484260435\nTEST\u003dmake runtests # In CrOS-SDK\nTEST\u003dVerify that fastboot is unavailable w/o disabling OEM Lock or\nsetting GBB flags\n\nChange-Id: I70bc431785d1b802231b8a0b363cf8cf0fd0e8a1\nSigned-off-by: Jakub Czapiga \u003cczapiga@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7689794\nReviewed-by: Tomasz Michalec \u003ctmichalec@google.com\u003e\n" }, { "commit": "a037219e34fb03f4e4c36e79b3963b7e24541086", "tree": "e0ef58d482b036d4365984eb26e383e9540e4cef", "parents": [ "814c77561764d95b19bf4e08d1583e17cad1daba" ], "author": { "name": "Jakub Czapiga", "email": "czapiga@google.com", "time": "Wed Apr 01 10:48:17 2026" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Apr 02 10:49:37 2026" }, "message": "Revert \"vboot: Add vb2api_is_oem_lock_enabled function\"\n\nThis reverts commit 6536877b04021b0de9624e29da6ef3ebf05e61da.\n\nRevert reason: API not needed anymore with new fastboot locking.\n\nBRANCH\u003dNone\nBUG\u003db:484260435\nTEST\u003dmake runtests # In CrOS-SDK\n\nChange-Id: I51bbbced4ee5e040ba8f2a7c4a087d1f196981e6\nSigned-off-by: Jakub Czapiga \u003cczapiga@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7720625\nReviewed-by: Tomasz Michalec \u003ctmichalec@google.com\u003e\n" }, { "commit": "814c77561764d95b19bf4e08d1583e17cad1daba", "tree": "59e05e0ef01d5b8fdd24cd62f3bf42e90b491cda", "parents": [ "563ecd738345bfaafc6511db522a3a7ec29fae0f" ], "author": { "name": "Grzegorz Bernacki", "email": "bernacki@google.com", "time": "Fri Mar 27 11:00:45 2026" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Apr 02 06:43:49 2026" }, "message": "2lib: Do not process incorrect ramdisk fragments\n\nBUG\u003db:349304841\nTEST\u003dcq\nBRANCH\u003dmain\n\nChange-Id: I7c5263cc747b3a7cfa1f6fef36e136f30d3bec2e\nSigned-off-by: Grzegorz Bernacki \u003cbernacki@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7705335\nReviewed-by: Julius Werner \u003cjwerner@chromium.org\u003e\n" }, { "commit": "563ecd738345bfaafc6511db522a3a7ec29fae0f", "tree": "a9069ad7539bbbb7d86b08bb33e109ac9fda1487", "parents": [ "6536877b04021b0de9624e29da6ef3ebf05e61da" ], "author": { "name": "David Cross", "email": "davidmcross@google.com", "time": "Fri Oct 03 23:40:31 2025" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Mon Mar 30 17:34:11 2026" }, "message": "futility: add RO checksum (ro_chksum) signer\n\nAdd support in the EC (Zephyr) build system for including SHA256\nchecksum of defined area in binary. This feature is needed when\nsecure boot is disabled in order to run an integrity check of the\nRead-Only (RO) portion of flash.\n\nBRANCH\u003dmain\nBUG\u003db:444173574\nTEST\u003dfutility show --type ro_chksum {blob}\nTEST\u003dfutility sign --type ro_chksum {blob} {chksum}\nTEST\u003dmake runfutiltests\nTEST\u003dhead -c {data_size} {filename} | sha256sum\n\nSigned-off-by: David Cross \u003cdavidmcross@google.com\u003e\nChange-Id: I5b2ab3434e604f7345e91bb48d78eaf8075dcf02\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7005008\nReviewed-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\n" }, { "commit": "6536877b04021b0de9624e29da6ef3ebf05e61da", "tree": "7bd20b015fd456d0d0fa2df37f63f0a291a5ff52", "parents": [ "daa6096e7039dd016635fb5767274a64fcf074bf" ], "author": { "name": "Tomasz Michalec", "email": "tmichalec@google.com", "time": "Tue Mar 17 16:27:35 2026" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Wed Mar 18 17:05:08 2026" }, "message": "vboot: Add vb2api_is_oem_lock_enabled function\n\nAdd vb2api_is_oem_lock_enabled function that allows depthcharge to check\ncurrent state of OEM Lock in nvdata.\n\nBRANCH\u003dmain\nBUG\u003db:484260435\nTEST\u003dCheck OEM Lock in depthcharge\n\nChange-Id: I83f6579d51a905464bf79d2c878a4e30f9a2c266\nSigned-off-by: Tomasz Michalec \u003ctmichalec@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7674957\nReviewed-by: Jakub \"Kuba\" Czapiga \u003cczapiga@google.com\u003e\n" }, { "commit": "daa6096e7039dd016635fb5767274a64fcf074bf", "tree": "2a5c6351f705b80e4cdd1565d5b9d0962891c3cc", "parents": [ "5c360ef458b0a013d8a6d47724bb0fffb5accbcf" ], "author": { "name": "Yu-Ping Wu", "email": "yupingso@google.com", "time": "Thu Mar 05 08:03:49 2026" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Mar 12 11:39:41 2026" }, "message": "firmware/2lib: Remove HWID from vb2api_get_debug_info()\n\nThe API vb2api_gbb_read_hwid() allows depthcharge to get the HWID by\nitself. Therefore, remove HWID from vb2api_get_debug_info() and instead\nlet depthcharge to add it to the debug info string.\n\nBUG\u003db:478879402\nTEST\u003dmake run2tests -j\nTEST\u003demerge-rauru depthcharge\nBRANCH\u003dnone\n\nCq-Depend: chromium:7632777\nChange-Id: I7749e3566d418979caa1a490173dbbe6ef4d1bb5\nSigned-off-by: Yu-Ping Wu \u003cyupingso@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7636022\nCommit-Queue: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nReviewed-by: Julius Werner \u003cjwerner@chromium.org\u003e\nAuto-Submit: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nTested-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nReviewed-by: Jakub \"Kuba\" Czapiga \u003cczapiga@google.com\u003e\n" }, { "commit": "5c360ef458b0a013d8a6d47724bb0fffb5accbcf", "tree": "1a7540bfca8e55ad3e785cd3b6ee4907f78de4ad", "parents": [ "24655cd2309e2758e553780bd2f0bc883a408da8" ], "author": { "name": "Yu-Ping Wu", "email": "yupingso@chromium.org", "time": "Wed Mar 11 03:26:07 2026" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Wed Mar 11 15:30:27 2026" }, "message": "lib20: Add vb2api_verify_kernel_data back\n\nThis reverts commit a11ad5ccdeaebb265c0775735a92f322e3b6d676\n(\"lib20: remove unused code\").\n\nReason for revert: vb2api_verify_kernel_data is used in coreboot.\n\nOriginal change\u0027s description:\n\u003e lib20: remove unused code\n\u003e\n\u003e This commit performs cleanup and refactoring of code related to lib20.\n\u003e Specifically, the changes include:\n\u003e - Removal of unused code from the lib20 with associated tests.\n\u003e - Moving valid keyblock hash test to a new, dedicated file.\n\u003e - Renaming of `vb20_rsa_padding_tests.c` and `vb20_verify_fw.c`\n\u003e to remove the stale `vb20` prefix\n\u003e\n\u003e BRANCH\u003dmain\n\u003e BUG\u003db:124141368\n\u003e TEST\u003dbuild \u0026 unit tests\n\u003e\n\u003e Change-Id: Ib10289999aca5862712f07064e449443550ebf92\n\u003e Signed-off-by: Grzegorz Bernacki \u003cbernacki@google.com\u003e\n\u003e Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7124844\n\u003e Reviewed-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\n\u003e Reviewed-by: Jakub \"Kuba\" Czapiga \u003cczapiga@google.com\u003e\n\nBUG\u003db:124141368\nTEST\u003dcq\nBRANCH\u003dnone\n\nChange-Id: I310cff2be4095e7ec3e0d6712a93044c7f803906\nSigned-off-by: Yu-Ping Wu \u003cyupingso@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7652320\nReviewed-by: Jakub \"Kuba\" Czapiga \u003cczapiga@google.com\u003e\nReviewed-by: Grzegorz Bernacki \u003cbernacki@google.com\u003e\nAuto-Submit: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nCommit-Queue: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nTested-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\n" }, { "commit": "24655cd2309e2758e553780bd2f0bc883a408da8", "tree": "d0ca9cc3a80d682546a739e3c448dd396d184ee3", "parents": [ "b9ea1075a7d2192cf2f0cc0fd8f250616b008ea3" ], "author": { "name": "Mike Banon", "email": "mikebdp2@gmail.com", "time": "Mon Mar 09 15:01:40 2026" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Tue Mar 10 02:18:46 2026" }, "message": "cbfstool: fix const-discarding warning in extract_config_value\n\nIn extract_config_value(), strchr() is called on a const char* pointer,\nreturning a char* that discards the const qualifier. Storing this result\nin a char* variable triggers a compiler warning (or an error with\n-Werror\u003ddiscarded-qualifiers). Change the variable to const char*\nto match the const semantics of the data - it is used only for pointer\nsubtraction and as an endpoint for strndup(), both of which accept const\nchar* without issue. This change fixes the warning with no downsides.\n\nChange-Id: Id5d72005232eed9a9aa15845df419d4878793130\nSigned-off-by: Mike Banon \u003cmikebdp2@gmail.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7649170\nReviewed-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nTested-by: Jakub \"Kuba\" Czapiga \u003cczapiga@google.com\u003e\nReviewed-by: Jakub \"Kuba\" Czapiga \u003cczapiga@google.com\u003e\nCommit-Queue: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\n" }, { "commit": "b9ea1075a7d2192cf2f0cc0fd8f250616b008ea3", "tree": "2ccd37005d575192def0af724cff0c3869ac12b0", "parents": [ "7934c1c9c99175f391bcdf5a103ae71d1da72976" ], "author": { "name": "Jakub Czapiga", "email": "czapiga@google.com", "time": "Wed Mar 04 11:48:26 2026" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Mar 06 12:08:53 2026" }, "message": "firmware/2lib: Remove unused vb2_sha256_extend function\n\nRemove vb2_sha256_extend() implementation and declaration as it is no\nlonger used in the project (only by its own unit tests).\n\nBRANCH\u003dmain\nBUG\u003db:124141368\nTEST\u003dmake run2tests\n\nChange-Id: I6025cc381dc2af8f48fe2643f32f3593fee6c473\nSigned-off-by: Jakub Czapiga \u003cczapiga@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7632947\nReviewed-by: Grzegorz Bernacki \u003cbernacki@google.com\u003e\nReviewed-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\n" }, { "commit": "7934c1c9c99175f391bcdf5a103ae71d1da72976", "tree": "a59d1b1022ccc420652877df111e8dcce9d37da7", "parents": [ "25083888d265bdddeb7f462f304d0132da277384" ], "author": { "name": "Jakub Czapiga", "email": "czapiga@google.com", "time": "Wed Mar 04 11:19:20 2026" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Mar 05 23:45:54 2026" }, "message": "firmware/2lib: Remove dead kernel verification function references\n\nRemove references to non-existent kernel verification functions from\npublic headers and comments. These functions (vb2api_get_kernel_size,\nvb2api_kernel_load_vblock, etc.) were either renamed or removed in\nprevious refactors but their declarations in comments and return codes\nremained.\n\nUpdated comments to correctly reference vb2api_load_kernel().\n\nBRANCH\u003dmain\nBUG\u003db:124141368\nTEST\u003dmake runtests run2tests\n\nChange-Id: I8f00ad7dabac66688072585aa729d82370ac2f12\nSigned-off-by: Jakub Czapiga \u003cczapiga@google.com\u003e\nCq-Depend: chromium:7637740\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7632946\nReviewed-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nCommit-Queue: Jeffery Miller \u003cjefferymiller@google.com\u003e\n" }, { "commit": "25083888d265bdddeb7f462f304d0132da277384", "tree": "f4a05f636475d5896ef7ca95ee90e8296e584c49", "parents": [ "3109519e884133d59ed971a35c311d2fc3b6d945" ], "author": { "name": "Jakub Czapiga", "email": "czapiga@google.com", "time": "Thu Mar 05 08:56:27 2026" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Mar 05 12:17:11 2026" }, "message": "Add .editorconfig\n\n.editorconfig is a standard code description file respected by many\neditors and IDEs. It\u0027s addition will improve development experience and\nstreamline workflow allowing to avoid unnecessary review steps for\nfixing the indentation.\n\nBRANCH\u003dmain\nBUG\u003dNone\nTEST\u003dVerify that VIM respects .editorconfig after changing VIM config to\nincompatible indentation by default.\n\nChange-Id: Ieee8ce4eb31c0abe976f3f1ee3f90973a64472e6\nSigned-off-by: Jakub Czapiga \u003cczapiga@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7633306\nReviewed-by: Grzegorz Bernacki \u003cbernacki@google.com\u003e\nReviewed-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\n" }, { "commit": "3109519e884133d59ed971a35c311d2fc3b6d945", "tree": "a3dc6eccb0189de2e3cd86c10da86948bc01889d", "parents": [ "850cf0fbe5b5cfe70267cecfe7931e232c7c9310" ], "author": { "name": "Jakub Czapiga", "email": "czapiga@google.com", "time": "Wed Mar 04 11:02:46 2026" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Mar 05 11:04:39 2026" }, "message": "tests: Remove unused sha_tests.c\n\nsha_tests is not used. tests/vb2_sha_tests.c replaced it long time ago.\n\nBRANCH\u003dmain\nBUG\u003db:124141368\nTEST\u003dmake runtests run2tests\n\nChange-Id: If31de75a2bcdc37d59f1bd762b9a884e64080e58\nSigned-off-by: Jakub Czapiga \u003cczapiga@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7632945\nReviewed-by: Grzegorz Bernacki \u003cbernacki@google.com\u003e\nReviewed-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\n" }, { "commit": "850cf0fbe5b5cfe70267cecfe7931e232c7c9310", "tree": "0b7c59e1caff35d53e6e7efa59680bae86e0b619", "parents": [ "42f5313871c66a1ea33c0f6bacd0a458d645a918" ], "author": { "name": "Jakub Czapiga", "email": "czapiga@google.com", "time": "Wed Mar 04 10:57:30 2026" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Mar 05 11:04:35 2026" }, "message": "tests/tpm_lite: Remove unused files\n\nBRANCH\u003dmain\nBUG\u003db:124141368\nTEST\u003dmake runtests\n\nChange-Id: I007c91063620c36b352461dc748285ea71bb495d\nSigned-off-by: Jakub Czapiga \u003cczapiga@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7632944\nReviewed-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\n" }, { "commit": "42f5313871c66a1ea33c0f6bacd0a458d645a918", "tree": "53404ce0308550ae976a763843b7c1335f976a88", "parents": [ "c16e6afaced43d18e37603fef5b6f50e585d4a1a" ], "author": { "name": "Jakub Czapiga", "email": "czapiga@google.com", "time": "Wed Feb 18 14:21:27 2026" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Mon Mar 02 22:49:55 2026" }, "message": "firmware: Do not allow for dev mode with oem_lock enabled\n\nBUG\u003db:484259211, b:484260435\nBRANCH\u003dmain\nTEST\u003dmake runtests\nTEST\u003dSet `crossystem oem_lock\u003d1` in Developer mode and observe the\nfirmware block developer mode and force switch to Normal mode\n\nChange-Id: I47eb034c153ed39aec1a93305f64bc42e1934f29\nSigned-off-by: Jakub Czapiga \u003cczapiga@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7587776\nReviewed-by: Julius Werner \u003cjwerner@chromium.org\u003e\nReviewed-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\n" }, { "commit": "c16e6afaced43d18e37603fef5b6f50e585d4a1a", "tree": "1be65db538c3d3b2f66f1f83a3447248018ffe96", "parents": [ "ed6cb4054134efdd67215d9504f501cd36030d6a" ], "author": { "name": "Jakub Czapiga", "email": "czapiga@google.com", "time": "Fri Feb 13 18:00:14 2026" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Feb 27 14:26:45 2026" }, "message": "firmware: host: Add OEM Lock flag to nvstorage dev field\n\nThe new field lives on the highest bit of the VB2_NV_OFFS_DEV.\nThe default state is 0\u003ddisabled (unlocked).\nOEM Lock field will be used as a dev-mode guard together with FWMP and\nwill be switched by \"OEM Unlocked\" switch in the \"Developer Options\".\n\nBUG\u003db:484259211, b:484260435\nBRANCH\u003dmain\nTEST\u003dmake runtests\nTEST\u003dSet and get oem_lock value with crossystem\n\nChange-Id: I4ba835ae180134c355d157e6d80b478975124c19\nSigned-off-by: Jakub Czapiga \u003cczapiga@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7576554\nReviewed-by: Konrad Adamczyk \u003ckonrada@google.com\u003e\nReviewed-by: Julius Werner \u003cjwerner@chromium.org\u003e\nReviewed-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\n" } ], "next": "ed6cb4054134efdd67215d9504f501cd36030d6a" }