)]}' { "log": [ { "commit": "df407bb50513ef3afdf88cedcce990a317229151", "tree": "2b09c99e32f345543169a8a46577908ac263df36", "parents": [ "87f0cee8b20978d1b74ef08e4fcdab006b16c60f" ], "author": { "name": "Vadim Bendebury", "email": "vbendeb@google.com", "time": "Thu Jul 16 14:44:08 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Jul 17 04:26:06 2026" }, "message": "sign_gsc_firmware: restore ti50 directory names scheme\n\nAll ti50 images used the base_name of ti50, but only the actual ti50\n(as opposed to ti50a, system_test_auto, etc) was ever signed for\nproduction. As it is necessary to sign ti50a now, to keep things\nsimple let\u0027s make ti50a the only image with a different tarball\nlayout, this will allow to prod sign ti50 and ti50a.\n\nBRANCH\u003dNone\nBUG\u003db:525048389\nTEST\u003dsuccessfully tried running the script on various ti50 tarballs\n\nChange-Id: Id5decfe14ba3dc229b3443ba254cfd0bbafbc16f\nSigned-off-by: Vadim Bendebury \u003cvbendeb@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/8106142\nReviewed-by: Mike Frysinger \u003cvapier@chromium.org\u003e\n" }, { "commit": "87f0cee8b20978d1b74ef08e4fcdab006b16c60f", "tree": "1dc8837d8c9c2b5c17c177b4d06f3b3ed1c66dfa", "parents": [ "180a526a698ecc48254a7a037ba26597f7e2d31d" ], "author": { "name": "Rob Barnes", "email": "robbarnes@google.com", "time": "Tue Jul 14 15:44:51 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Wed Jul 15 15:22:54 2026" }, "message": "vboot: Add VB2_GBB_FLAG_BYPASS_EC_RW_UPDATE flag\n\nIntroduce VB2_GBB_FLAG_BYPASS_EC_RW_UPDATE to bypass the EC RW flash\nupdate step by forcing the expected EC RW hash to match the active\nEC RW hash.\n\nThis flag is a useful alternative to DISABLE_EC_SOFTWARE_SYNC because\nthe EC will still jump to RW like a normal EFS2 boot. On EFS2 systems,\nthis override also results in the GSC mirror hash being updated to match\nthe active EC RW hash.\n\nSince DISABLE_EC_SOFTWARE_SYNC disables EC sync at an earlier stage, it\neffectively takes precedence and overrides BYPASS_EC_RW_UPDATE.\n\nBRANCH\u003dnone\nBUG\u003db:498622490\nTEST\u003dmake runtests. Also flashed AP firmware with the flag on Riven,\nflashed custom EC RW, and verified AP does not overwrite EC RW and EC\nboots to RW.\n\nChange-Id: Ie31022859722a1d86a58780bb7619dea78dcddad\nSigned-off-by: Rob Barnes \u003crobbarnes@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/8067859\nReviewed-by: Jeremy Bettis \u003cjbettis@chromium.org\u003e\nReviewed-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\n" }, { "commit": "180a526a698ecc48254a7a037ba26597f7e2d31d", "tree": "683ba2f19338866fea33bf0cc40f40ee7916021e", "parents": [ "042312c6e7fce9dd106b329be0ecb51a8a347337" ], "author": { "name": "Vadim Bendebury", "email": "vbendeb@google.com", "time": "Tue Jul 14 22:26:09 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Wed Jul 15 14:06:25 2026" }, "message": "sign_gsc_firmware: set base_name for NT processing case\n\nThe NT processing code path was left behind by the previous patch.\n\nBRANCH\u003dNone\nBUG\u003db:533726328\nTEST\u003dran the script over recent NT Ti50 and Ti50a images, observed\n expected results.\n\nChange-Id: I96f2fc82945f2508cd5800d8902f652c4c8b4956\nSigned-off-by: Vadim Bendebury \u003cvbendeb@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/8094463\nReviewed-by: Chris Mullins \u003ccrmullins@chromium.org\u003e\nReviewed-by: Mike Frysinger \u003cvapier@chromium.org\u003e\nReviewed-by: Vadím Sukhomlínov \u003csukhomlinov@google.com\u003e\n" }, { "commit": "042312c6e7fce9dd106b329be0ecb51a8a347337", "tree": "7023296ac34b4a69c8f44f011c295374f6cd17c1", "parents": [ "073eb93f4c725ae3a84ff8f7add4b17b0d058640" ], "author": { "name": "Vadim Bendebury", "email": "vbendeb@google.com", "time": "Fri Jul 10 21:09:59 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Sat Jul 11 11:01:59 2026" }, "message": "sign_gsc_firmware: fix base_name typo and rma keys parsing\n\nOne of previous changes failed to include a parameter name in ${},\nwhich was missed during testing, as it only affected the name of a\nsecondary generated artifact.\n\nA closer examination also highlighted a problem with parsing the cr50\nbinary image for RMA keys.\n\nBRANCH\u003dNone\nBUG\u003db:501562124\nTEST\u003dran the script\n - on a legacy cr50 tarball (verified that the test key is detected\n and swapped)\n - on a recent Cr50 tarball (verified that prod key is detected, no\n swapping performed)\n - on ti50 and ti50a DT tarballs, validated that the names are\n processed as expected\n\nChange-Id: I50823a23e201d430308eb4d8abca302abdea9412\nSigned-off-by: Vadim Bendebury \u003cvbendeb@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/8077018\nCommit-Queue: Vadím Sukhomlínov \u003csukhomlinov@google.com\u003e\nReviewed-by: Vadím Sukhomlínov \u003csukhomlinov@google.com\u003e\n" }, { "commit": "073eb93f4c725ae3a84ff8f7add4b17b0d058640", "tree": "692d26b6847df1348d1867c825b72f174b9f61fa", "parents": [ "7a76a7bf9661f8b557a4f6bff5b8c2eec6011f50" ], "author": { "name": "Vadim Bendebury", "email": "vbendeb@google.com", "time": "Thu Jul 09 19:07:09 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Jul 09 23:18:42 2026" }, "message": "sign_gsc_firmare: use the updated codesigner name\n\nThe upcoming signer software changes modify the GSC codesigner utility\nname to cr50-codesigner, vboot needs to use the new name.\n\nBRANCH\u003dnone\nBUG\u003db:501562124\nTEST\u003dnone\n\nChange-Id: I6e59cfe0bf13894ec7747aff96b6150f8967328f\nSigned-off-by: Vadim Bendebury \u003cvbendeb@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/8071831\nReviewed-by: Mike Frysinger \u003cvapier@chromium.org\u003e\nCommit-Queue: Mike Frysinger \u003cvapier@chromium.org\u003e\n" }, { "commit": "7a76a7bf9661f8b557a4f6bff5b8c2eec6011f50", "tree": "4d5371ba8e9e875eb51612f184040afb12776849", "parents": [ "906136da2c93e6dfe3c93763c93dfae59d24e54d" ], "author": { "name": "Vadim Bendebury", "email": "vbendeb@google.com", "time": "Mon Jul 06 23:51:25 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Jul 09 08:53:08 2026" }, "message": "sign_gsc_firmware: derive ti50 image name from input directory name\n\nDo not assume that the Dauntless images are all ti50, they could be\neither ti50 or ti50a, which is matches the directory name where the\nsigning artifacts are located.\n\nBRANCH\u003dnone\nBUG\u003db:501562124\nTEST\u003dinvoked the script for ti50 and ti50a archives with appropriate\n signing_instructions.sh, observed expected results.\n\nChange-Id: I0ac6f135851abeb579cbfb518abee84c846ca3d8\nSigned-off-by: Vadim Bendebury \u003cvbendeb@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/8048782\nCommit-Queue: Mike Frysinger \u003cvapier@chromium.org\u003e\nReviewed-by: Mary Ruthven \u003cmruthven@chromium.org\u003e\nReviewed-by: Mike Frysinger \u003cvapier@chromium.org\u003e\n" }, { "commit": "906136da2c93e6dfe3c93763c93dfae59d24e54d", "tree": "71e8653b25816e9271e8b6751ddb0ff9ec131555", "parents": [ "77af23c3d65d6d4d5f933fb93bd9c906b5a82b01" ], "author": { "name": "Yu-Ping Wu", "email": "yupingso@google.com", "time": "Thu Jun 11 06:55:48 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Mon Jun 15 03:53:46 2026" }, "message": "Reland \"futility: Remove legacy bios.bin name\"\n\nThis is a reland of commit 20fc7f70b1b4 (\"futility: Remove legacy\nbios.bin name\"). Compared to that commit (CL:7883122), test_update.sh is\nfixed.\n\nOriginal change\u0027s description:\n\u003e futility: Remove legacy bios.bin name\n\u003e\n\u003e Remove the legacy \"bios.bin\" name from the firmware updater output\n\u003e mode. Also remove the fallback check for \"bios.bin\" when building a\n\u003e manifest from a simple folder.\n\u003e\n\u003e BUG\u003db:517029427\n\u003e TEST\u003dmake runtests -j\n\u003e BRANCH\u003dnone\n\u003e\n\u003e Cq-Depend: chromium:7877775\n\u003e Change-Id: I04e8a7c4c3c1a186eaf02c204718b42b919835c9\n\u003e Signed-off-by: Yu-Ping Wu \u003cyupingso@google.com\u003e\n\u003e Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7883122\n\u003e Auto-Submit: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\n\u003e Commit-Queue: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\n\u003e Tested-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\n\u003e Reviewed-by: Jakub \"Kuba\" Czapiga \u003cczapiga@google.com\u003e\n\nBUG\u003db:517029427\nTEST\u003dmake runfutiltests\nBRANCH\u003dnone\n\nChange-Id: I811c19821c204f874133e6ec6db5631fd94e799d\nSigned-off-by: Yu-Ping Wu \u003cyupingso@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7925126\nReviewed-by: Jakub \"Kuba\" Czapiga \u003cczapiga@google.com\u003e\nCommit-Queue: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nTested-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\n" }, { "commit": "77af23c3d65d6d4d5f933fb93bd9c906b5a82b01", "tree": "65a78618edaff69d19d54f598cc1d16827121fba", "parents": [ "4b777a7d3d0dfc37f502a2283c67fc438c56dae7" ], "author": { "name": "Benjamin Shai", "email": "bshai@google.com", "time": "Wed Jun 10 17:03:10 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Jun 11 16:55:31 2026" }, "message": "keygeneration: small tweaks\n\nA couple of consistency changes to key generation. First, unify the\nkernel subkey algorithm between premp and mp generation. Second, specify\nsha256 for android certs (as that\u0027s the default in the version of\nopenssl in the docker container, but sha1 is the default on the hsm\nclient).\n\nBUG\u003db:515493293\nTEST\u003dNone\nBRANCH\u003dNone\n\nSigned-off-by: Benjamin Shai \u003cbshai@google.com\u003e\nChange-Id: If35100a702d02f4e28de902bacaf4508e63e61bd\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7919727\nReviewed-by: Madeleine Hardt \u003chardtmad@google.com\u003e\nReviewed-by: Rachael Newitt \u003crenewitt@google.com\u003e\n" }, { "commit": "4b777a7d3d0dfc37f502a2283c67fc438c56dae7", "tree": "dba76947d5708a928baed0287433c717906dd4af", "parents": [ "20fc7f70b1b4af046dac3eaa9ea777767a92b4a9" ], "author": { "name": "Renato Silva", "email": "rrsilva@google.com", "time": "Wed Jun 03 14:57:52 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Wed Jun 03 15:10:31 2026" }, "message": "Revert \"futility: Remove legacy bios.bin name\"\n\nThis reverts commit 20fc7f70b1b4af046dac3eaa9ea777767a92b4a9.\n\nReason for revert: http://b/519562415\n\nOriginal change\u0027s description:\n\u003e futility: Remove legacy bios.bin name\n\u003e\n\u003e Remove the legacy \"bios.bin\" name from the firmware updater output\n\u003e mode. Also remove the fallback check for \"bios.bin\" when building a\n\u003e manifest from a simple folder.\n\u003e\n\u003e BUG\u003db:517029427\n\u003e TEST\u003dmake runtests -j\n\u003e BRANCH\u003dnone\n\u003e\n\u003e Cq-Depend: chromium:7877775\n\u003e Change-Id: I04e8a7c4c3c1a186eaf02c204718b42b919835c9\n\u003e Signed-off-by: Yu-Ping Wu \u003cyupingso@google.com\u003e\n\u003e Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7883122\n\u003e Auto-Submit: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\n\u003e Commit-Queue: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\n\u003e Tested-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\n\u003e Reviewed-by: Jakub \"Kuba\" Czapiga \u003cczapiga@google.com\u003e\n\nBUG\u003db:517029427\n\nChange-Id: I32ad1f01c9652818aaf5aafacfbd60fa49e0069c\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7895642\nCommit-Queue: Renato Silva \u003crrsilva@google.com\u003e\nBot-Commit: rubber-stamper@appspot.gserviceaccount.com \u003crubber-stamper@appspot.gserviceaccount.com\u003e\nReviewed-by: Renato Silva \u003crrsilva@google.com\u003e\nOwners-Override: Renato Silva \u003crrsilva@google.com\u003e\n" }, { "commit": "20fc7f70b1b4af046dac3eaa9ea777767a92b4a9", "tree": "682318bce6f19d1e42cbc54795a781fb0f76ea33", "parents": [ "34fbbe62cc1832016e956d55d72b4aba606b7e21" ], "author": { "name": "Yu-Ping Wu", "email": "yupingso@google.com", "time": "Fri May 29 08:17:39 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Wed Jun 03 07:20:54 2026" }, "message": "futility: Remove legacy bios.bin name\n\nRemove the legacy \"bios.bin\" name from the firmware updater output\nmode. Also remove the fallback check for \"bios.bin\" when building a\nmanifest from a simple folder.\n\nBUG\u003db:517029427\nTEST\u003dmake runtests -j\nBRANCH\u003dnone\n\nCq-Depend: chromium:7877775\nChange-Id: I04e8a7c4c3c1a186eaf02c204718b42b919835c9\nSigned-off-by: Yu-Ping Wu \u003cyupingso@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7883122\nAuto-Submit: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nCommit-Queue: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nTested-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nReviewed-by: Jakub \"Kuba\" Czapiga \u003cczapiga@google.com\u003e\n" }, { "commit": "34fbbe62cc1832016e956d55d72b4aba606b7e21", "tree": "dba76947d5708a928baed0287433c717906dd4af", "parents": [ "399940cfb4a53f0d77f89c1bc22e3016134a6cb7" ], "author": { "name": "Yu-Ping Wu", "email": "yupingso@google.com", "time": "Thu May 28 03:37:42 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri May 29 07:46:29 2026" }, "message": "image_signing: Support \u0027ap-*\u0027 naming in ensure_amd_psp_flags.sh\n\nUpdate the find command to search for both \u0027bios-*\u0027 and \u0027ap-*\u0027 files.\nThis supports the new AP firmware naming convention while maintaining\nbackward compatibility for legacy BIOS naming.\n\nBUG\u003db:517029427\nTEST\u003dcq\nBRANCH\u003dnone\n\nChange-Id: I12141a43c375be8ceb6523ceea474daa1eca466f\nSigned-off-by: Yu-Ping Wu \u003cyupingso@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7878546\nCommit-Queue: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nTested-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nAuto-Submit: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nReviewed-by: Jakub \"Kuba\" Czapiga \u003cczapiga@google.com\u003e\n" }, { "commit": "399940cfb4a53f0d77f89c1bc22e3016134a6cb7", "tree": "921c2323e38030818fe17492cdd0ef3264222af6", "parents": [ "8c946cd4bf6347282a0235929cad2199c4d9527a" ], "author": { "name": "Grzegorz Bernacki", "email": "bernacki@google.com", "time": "Thu Apr 30 08:09:38 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Wed May 27 09:25:22 2026" }, "message": "vboot: Remove \u0027streaming_lba_count\u0027 field in disk info\n\nAfter removing support for external GPT separate field for LBA\ncount is no longer necessary.\n\nBRANCH\u003dnone\nBUG\u003db:514271116\nTEST\u003dmake runtests\n\nChange-Id: If7500d1477b0e3b7001d6f8a711961c96ca26b6b\nSigned-off-by: Grzegorz Bernacki \u003cbernacki@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7806907\nReviewed-by: Julius Werner \u003cjwerner@chromium.org\u003e\n" }, { "commit": "8c946cd4bf6347282a0235929cad2199c4d9527a", "tree": "819936b1baf8f7a1e3c131125d433377d4855ffb", "parents": [ "7d1d2641917ecd07a5546778c3aad39255623aa3" ], "author": { "name": "Grzegorz Bernacki", "email": "bernacki@google.com", "time": "Tue Apr 14 13:40:29 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Wed May 27 09:25:20 2026" }, "message": "vboot: Unify GPT drive sector counts\n\nConsolidate streaming_drive_sectors and gpt_drive_sectors in GptData\ninto a single drive_sectors field. This simplification follows the\nremoval of external GPT support and reduces redundancy in GPT\nvalidation.\n\nKey changes:\n- Update GptData definition and AllocAndReadGptData.\n- Update CheckHeader signature to accept a single drive_sectors value.\n- Update cgpt utility commands (boot, common, create, show) to use the\n unified field.\n- Refactor unit tests to match the simplified structure.\n\nBRANCH\u003dnone\nBUG\u003db:514271116\nTEST\u003dmake runtests\n\nCq-Depend: chromium:7797338\nChange-Id: If6bc7e5191854c89fa56215bac487030587a7ff5\nSigned-off-by: Grzegorz Bernacki \u003cbernacki@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7796983\nReviewed-by: Julius Werner \u003cjwerner@chromium.org\u003e\n" }, { "commit": "7d1d2641917ecd07a5546778c3aad39255623aa3", "tree": "35e4f7f916b05d9517fa93b0a7e5ddd8735259d0", "parents": [ "28233146c942241ef78420f070ba0fab7162151c" ], "author": { "name": "Grzegorz Bernacki", "email": "bernacki@google.com", "time": "Tue Apr 14 13:38:15 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Wed May 27 09:25:09 2026" }, "message": "vboot: Remove \u0027external_gpt\u0027 support from core library\n\nRemove GPT_FLAG_EXTERNAL and VB2_DISK_FLAG_EXTERNAL_GPT along with\nthe logic that handled split GPT/partition configurations. Simplify\nCheckParameters and CheckHeader to remove special-case validation\nfor external GPT.\n\nBRANCH\u003dnone\nBUG\u003db:514271116\nTEST\u003dmake runtests\n\nCq-Depend: chromium:7797336\nChange-Id: I7b62c196ea61c6ed6d238c48b96d5448001b89de\nSigned-off-by: Grzegorz Bernacki \u003cbernacki@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7796982\nReviewed-by: Julius Werner \u003cjwerner@chromium.org\u003e\n" }, { "commit": "28233146c942241ef78420f070ba0fab7162151c", "tree": "e401dc55c921914e5df9e8f0a5e82e503f2bcbc3", "parents": [ "55150fbf137d3be716a87a61bcc11bb3210dfda1" ], "author": { "name": "Grzegorz Bernacki", "email": "bernacki@google.com", "time": "Tue Apr 14 12:36:12 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Wed May 27 09:24:56 2026" }, "message": "cgpt: Remove support for external GPT\n\nRemove the \u0027-D\u0027 flag and associated logic that allowed specifying\na separate drive size for external GPT configurations. Simplify\nDriveOpen and GptCreate to assume GPT structures and partitions\nreside on the same device.\n\nBRANCH\u003dnone\nBUG\u003db:514271116\nTEST\u003dmake runtests\n\nChange-Id: Ic01c5aa28e3116c3be0c23469d20c463ee18dbac\nSigned-off-by: Grzegorz Bernacki \u003cbernacki@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7796981\nReviewed-by: Jakub \"Kuba\" Czapiga \u003cczapiga@google.com\u003e\n" }, { "commit": "55150fbf137d3be716a87a61bcc11bb3210dfda1", "tree": "4c3dbb93058c90921276ed83fa62cd567afd8fca", "parents": [ "3ef9fd95e7937dc767cfc655231b014c14458a6a" ], "author": { "name": "Julius Werner", "email": "jwerner@chromium.org", "time": "Thu May 21 18:06:35 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu May 21 21:25:01 2026" }, "message": "cgptlib: Explicitly check entries array size\n\nAdd a bounds check to the GPT library to ensure the entries array cannot\noverflow the allocated space for it. This is already implicitly true\nbecause it\u0027s derived from MAX_NUMBER_OF_ENTRIES, but the static analyzer\ncan\u0027t look that far so let\u0027s help it out.\n\nBRANCH\u003dnone\nBUG\u003db:515057174\nTEST\u003dBooted to kernel\n\nChange-Id: I8978451d03969855458e369940adaec3c54063e5\nSigned-off-by: Julius Werner \u003cjwerner@chromium.org\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7869871\nReviewed-by: Konrad Adamczyk \u003ckonrada@google.com\u003e\n" }, { "commit": "3ef9fd95e7937dc767cfc655231b014c14458a6a", "tree": "db9b52ebc04ee9b29922ff8ee8bc95c9712b7c22", "parents": [ "edf5bc718283b29d9aeece3158d915d664d6b9a9" ], "author": { "name": "Konrad Adamczyk", "email": "konrada@google.com", "time": "Thu May 21 08:59:57 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu May 21 18:02:51 2026" }, "message": "avb: Improve error handling on reserve_buffers, initialize size properly\n\nSize of the buffer shall be zeroed in reserve_buffer.\n\nAdditionally, set the alloced_size to 0 when given partition\nwas not found.\n\nBUG\u003db:515057832\nTEST\u003dBoot fatcat/ruby to UI; make runtests\nBRANCH\u003dmain\n\nSigned-off-by: Konrad Adamczyk \u003ckonrada@google.com\u003e\n\nChange-Id: I2ddb8782e8c87a6ee5eca9c0d7497ab235ab0c90\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7868181\nAuto-Submit: Konrad Adamczyk \u003ckonrada@google.com\u003e\nReviewed-by: Jon Murphy \u003cjpmurphy@google.com\u003e\nCommit-Queue: Konrad Adamczyk \u003ckonrada@google.com\u003e\nTested-by: Konrad Adamczyk \u003ckonrada@google.com\u003e\nTested-by: Jon Murphy \u003cjpmurphy@google.com\u003e\nReviewed-by: Julius Werner \u003cjwerner@chromium.org\u003e\nCommit-Queue: Jon Murphy \u003cjpmurphy@google.com\u003e\n" }, { "commit": "edf5bc718283b29d9aeece3158d915d664d6b9a9", "tree": "7439e5755ab10c82f0f31ade1c051e5541c01eb6", "parents": [ "0925dd08ce077cfa841c92f95cc76b860f6cd110" ], "author": { "name": "Julius Werner", "email": "jwerner@chromium.org", "time": "Thu May 14 22:54:46 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri May 15 00:30:47 2026" }, "message": "tpmc: Translate 2.0 `read` error code 0x18b to TPM_BADINDEX\n\nTPM2_NV_Read can return different error codes based on which\nauthorization is used, since the error code technically says which\n\"handle\" in the passed command was invalid. The command has both an\nauthorization handle and a handle specifying the space itself, so the\nerror code is either 0x18b or 0x28b depending on which of those was\ninvalid. If platform hierarchy is enabled, tpmc always uses platform\nauthorization for the `read` command, so the authorization handle is a\nwell-known constant that always exists. But if platform hierarchy is\ndisabled, it passes the NVRAM space index as authorization handle as\nwell (which is the official way to say \"I want to read this without\nauthorization), and in that case the TPM finds that the authorization\nhandle is invalid before it even checks the handle for the space itself.\nThat\u0027s why we also need to accept 0x18b as an error code alias for\nTPM_BADINDEX.\n\nBRANCH\u003dnone\nBUG\u003db:490147812\nTEST\u003dRan `tpmc read 0x100a` on my Trogdor, TODO\n\nChange-Id: I7478a271c433fd001b29881d471b88fd11fd47ef\nSigned-off-by: Julius Werner \u003cjwerner@chromium.org\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7848424\nReviewed-by: Andrey Pronin \u003capronin@chromium.org\u003e\n" }, { "commit": "0925dd08ce077cfa841c92f95cc76b860f6cd110", "tree": "7f4d21f2607376690f95384e1f953b05e32b6f8f", "parents": [ "b6cc9345426744196ce8bb23a39f0db8c14a8138" ], "author": { "name": "Yidi Lin", "email": "yidilin@google.com", "time": "Sat May 09 10:11:25 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Mon May 11 06:33:07 2026" }, "message": "Makefile: Disable UNROLL_LOOPS for ARMV8_CRYPTO_EXT\n\nDisable unrolling loops in the software SHA256 implementation when\nARMV8_CRYPTO_EXT is enabled to save space in the firmware image. This is\na workaround to resolve out-of-space issues on the Rauru platform.\n\nAs ARMV8_CRYPTO_EXT provides hardware acceleration, the software SHA256\nimplementation is only a fallback, so using tight loops there is a safe\nspace-saving optimization.\n\nBRANCH\u003dnone\nBUG\u003db:511201478\nTEST\u003demerge-rauru chromeos-bootimage\nTEST\u003dVerify the boot time on Tanjiro\n\nChange-Id: Ifdfa33b904f8368029e65199df267e4896117ebe\nSigned-off-by: Yidi Lin \u003cyidilin@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7831906\nReviewed-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\n" }, { "commit": "b6cc9345426744196ce8bb23a39f0db8c14a8138", "tree": "cb9584aea82272e38816701fb994e7ff637f784d", "parents": [ "e9ac5d52be8130ffadb8ce603b8aa72433632da7" ], "author": { "name": "Deva S", "email": "devadharuns@google.com", "time": "Wed Apr 29 02:27:48 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri May 08 05:05:38 2026" }, "message": "Fix for amd64 on llvm next\n\nThe new compiler found uninitialized variable x in different files\ninitialize values of x across all the test files in that directory\n\nBRANCH\u003dmain\nBUG\u003db:502694400\nBUG\u003db:502698843\nTEST\u003dCQ passes for vboot_reference-tests\npackage in arm64-generic board\n\nSigned-off-by: Deva Dharun Sivasubramaniam \u003cdevadharuns@google.com\u003e\n\nChange-Id: I7a2ca9656c68300c93c5fdd0ea2f0dadbf0cc4b8\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7802874\nReviewed-by: Jordan Abrahams-Whitehead \u003cajordanr@google.com\u003e\nReviewed-by: Andrey Pronin \u003capronin@chromium.org\u003e\nReviewed-by: Julius Werner \u003cjwerner@chromium.org\u003e\nAuto-Submit: Deva S (xWF) \u003cdevadharuns@google.com\u003e\nTested-by: Deva S (xWF) \u003cdevadharuns@google.com\u003e\nCommit-Queue: Deva S (xWF) \u003cdevadharuns@google.com\u003e\n" }, { "commit": "e9ac5d52be8130ffadb8ce603b8aa72433632da7", "tree": "7a3ae512448079e57bab9990e1cfb2c4c34821e4", "parents": [ "e36a232bfcf0b73fc7aae33b58f233ab1b5a6fcf" ], "author": { "name": "Jakub Czapiga", "email": "czapiga@google.com", "time": "Wed May 06 11:38:15 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu May 07 11:07:13 2026" }, "message": "Restore targets missed by the makefile split commit\n\nCulprit:\ncommit f4964de1d8ad (\"Split Makefile to subdirectories\")\n\nBRANCH\u003dNone\nBUG\u003db:509411243,b:510671373\nTEST\u003dmake runtests\nTEST\u003demerge-brya libpayload # builds vboot_reference fwlib\nTEST\u003dsudo emerge vboot_reference-tests\n\nChange-Id: I826d709db2d1902cab3a8da20ede0b5aae619de3\nSigned-off-by: Jakub Czapiga \u003cczapiga@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7820641\nReviewed-by: Grzegorz Bernacki \u003cbernacki@google.com\u003e\n" }, { "commit": "e36a232bfcf0b73fc7aae33b58f233ab1b5a6fcf", "tree": "9d8cda9cb726021ca9f57ae2ac4f3a096ed2e61c", "parents": [ "e725e208127a444985e831cb4a6bfd96f5f76706" ], "author": { "name": "Julius Werner", "email": "jwerner@chromium.org", "time": "Wed Apr 29 03:08:57 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Tue May 05 21:08:40 2026" }, "message": "futility: vbutil_key: Add new --repack mode\n\nThis patch adds a --repack mode to vbutil_key that allows changing the\nversion number on an existing .vbpubk file without converting it back\ninto a .pem first. This is necessary for signing operations that update\na rollback counter for incidental reasons (e.g. recovery rollback) that\nintentionally don\u0027t want to change the actual key (or at least it makes\nit more convenient because you don\u0027t have to parse out the algorithm to\ndo the to-.pem-and-back conversion).\n\nBRANCH\u003dnone\nBUG\u003db:507824560\nTEST\u003dmake runtests\n\nChange-Id: I32739aa6b2ad363fdb5b0bc508fa691afb86cf06\nSigned-off-by: Julius Werner \u003cjwerner@chromium.org\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7802955\nReviewed-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\n" }, { "commit": "e725e208127a444985e831cb4a6bfd96f5f76706", "tree": "785b0f99a0536b9ff700c1081d3629de64e9dddb", "parents": [ "7dfa482d6a843e1e25b615d6b0200028cedce29f" ], "author": { "name": "Adrian Ratiu", "email": "adrian.ratiu@collabora.com", "time": "Mon Apr 27 15:14:00 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Wed Apr 29 08:48:30 2026" }, "message": "futility/host: fix builds against newer glibc\n\nglibc 2.43 started enforcing C23/C++ rules for strchr and strrchr,\nso they return a const char * if the input is const char *, which\nfails due to -Wincompatible-pointer-types-discards-qualifiers.\n\nIn normal_fmap() we need to write into the strings (replacing the\n\u0027:\u0027 separator with \u0027\\\\0\u0027), so they are not really const.\nThe sole caller passes argv straight through, so just drop the inner\nconst from the names parameter rather than casting it away locally.\n\nThe host_key2 fix is trivial: just add const to the declaration.\n\nBRANCH\u003dmain\nBUG\u003db:491765858\nTEST\u003dLocal builds on amd64-generic and arm64-generic with glibc 2.43.\n\nChange-Id: I284fc8fd35abb4974560fcb230ac1b3187b2043b\nSigned-off-by: Adrian Ratiu \u003cadrian.ratiu@collabora.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7792932\nTested-by: Adrian Ratiu \u003cadrian.ratiu@collabora.corp-partner.google.com\u003e\nReviewed-by: Bob Haarman \u003cinglorion@chromium.org\u003e\nReviewed-by: Hsuan Ting Chen \u003croccochen@chromium.org\u003e\nReviewed-by: George Burgess \u003cgbiv@chromium.org\u003e\nCommit-Queue: Adrian Ratiu \u003cadrian.ratiu@collabora.corp-partner.google.com\u003e\n" }, { "commit": "7dfa482d6a843e1e25b615d6b0200028cedce29f", "tree": "33443e9f8ca4916d343d0302b5c3694fb7c8a3a9", "parents": [ "df42473a4221c5e3d27e1edc52d0c7fa7ebf8f51" ], "author": { "name": "Benjamin Doron", "email": "benjamin.doron@9elements.com", "time": "Wed Apr 22 18:15:45 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Apr 24 07:15:53 2026" }, "message": "host/Makefile.inc: Allow deprecated OpenSSL functions\n\nhost/lib/ contains most of the userspace code, which means that\nmuch of the deprecated OpenSSL function use is over here.\n\nAs of f4964de1d8ad (Split Makefile to subdirectories), this directory\nis no longer covered with the needed error exclusion.\n\nChange-Id: Idbeacb48ccc96703d20c65b6dd271c09eb235b72\nSigned-off-by: Benjamin Doron \u003cbenjamin.doron@9elements.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7786000\nTested-by: Jakub \"Kuba\" Czapiga \u003cczapiga@google.com\u003e\nReviewed-by: Jakub \"Kuba\" Czapiga \u003cczapiga@google.com\u003e\nCommit-Queue: Jakub \"Kuba\" Czapiga \u003cczapiga@google.com\u003e\nReviewed-by: Julius Werner \u003cjwerner@chromium.org\u003e\n" }, { "commit": "df42473a4221c5e3d27e1edc52d0c7fa7ebf8f51", "tree": "717c24bb902629e50fb7970a175e71d39ec51009", "parents": [ "a5f112e0ef33cc3adb97c374f775bce56d96266e" ], "author": { "name": "Tomasz Michalec", "email": "tmichalec@google.com", "time": "Wed Apr 22 14:21:06 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Apr 24 01:07:49 2026" }, "message": "firmware: Add dev fastboot lock flag\n\nAdd fastboot lock flag which blocks fastboot access in developer mode\nwhen set. This flag can be overridden by fastboot GBB flag. Fastboot\nlock is cleared when transitioning from normal to developer mode.\n\nBRANCH\u003dmain\nBUG\u003db:500693610\nTEST\u003dIn developer mode set fastboot lock and check that fastboot is\n blocked. After switching to normal mode and back to dev mode,\n fastboot is unblocked.\n\nChange-Id: I517c87c710ea9349898314e5d36a9e6bbe21597f\nSigned-off-by: Tomasz Michalec \u003ctmichalec@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7784694\nReviewed-by: Julius Werner \u003cjwerner@chromium.org\u003e\nCommit-Queue: Konrad Adamczyk \u003ckonrada@google.com\u003e\n" }, { "commit": "a5f112e0ef33cc3adb97c374f775bce56d96266e", "tree": "c8f73eaa0ab80689090f2b8c80a008a8e5c2ee4a", "parents": [ "d15cf2008daef56182977a3bd0cbcc93cc026059" ], "author": { "name": "Tomasz Michalec", "email": "tmichalec@google.com", "time": "Wed Apr 22 10:20:24 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Apr 23 21:53:23 2026" }, "message": "firmware: Enable external boot in dev mode by default\n\nEnable external boot mode when in normal mode, so it is set by default\nwhen transitioning to dev mode. User may still disable external boot\nwhen dev mode is already enabled.\n\nBRANCH\u003dmain\nBUG\u003db:500693610\nTEST\u003dFW in dev mode. Disable dev_boot_usb. External boot not allowed.\n Switch to normal mode. Switch to dev mode. External boot allowed.\n Disable dev_boot_usb. External boot not allowed.\n\nChange-Id: I25f1f559a0faeb2900f360ea8eeaff1a20a81dcc\nSigned-off-by: Tomasz Michalec \u003ctmichalec@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7784693\nReviewed-by: Julius Werner \u003cjwerner@chromium.org\u003e\nCommit-Queue: Julius Werner \u003cjwerner@chromium.org\u003e\n" }, { "commit": "d15cf2008daef56182977a3bd0cbcc93cc026059", "tree": "bed58e851117710eb8bc75bda885810c163b0bbf", "parents": [ "a5668dcb0b505d903d4d19d24690cf892d542205" ], "author": { "name": "Jakub Czapiga", "email": "czapiga@google.com", "time": "Mon Apr 20 14:52:32 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Wed Apr 22 05:26:28 2026" }, "message": "Move Android.bp to Android repository\n\nAccording to Android build system owners the Android.bp file should\nreside on the Android side in case of external/third-party imported\nprojects. Thus, this file shall be removed from CrOS vboot_reference\nand shall live on the ag/\n\nThe next update of the vboot copy in the Android repository should be\ndone manually with `git merge -s ours update_origin/main` to ignore this\ncommit and leave Android.bp on the fork side.\n\nBRANCH\u003dNone\nBUG\u003db:39500530\nTEST\u003dCQ\n\nChange-Id: Ie318cf9c235d5c0fd0c96e82895cff3eaecb8a1f\nSigned-off-by: Jakub Czapiga \u003cczapiga@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7776911\nReviewed-by: Elliott Hughes \u003cenh@google.com\u003e\nReviewed-by: Grzegorz Bernacki \u003cbernacki@google.com\u003e\n" }, { "commit": "a5668dcb0b505d903d4d19d24690cf892d542205", "tree": "560f717e757711716f7d5c29b3f31a8fde70de4e", "parents": [ "b8f56590bae9621438ecb3f873ed75d5064c92cd" ], "author": { "name": "Tomasz Michalec", "email": "tmichalec@google.com", "time": "Wed Apr 15 13:05:38 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Apr 16 18:58:53 2026" }, "message": "firmware: Add context flag for OEM Lock\n\nFirmware UI displays special error message when entering developer mode\nwith OEM Lock.\n\nBRANCH\u003dmain\nBUG\u003db:492057028\nTEST\u003dEnter developer mode with OEM Lock set and see the error message\n\nChange-Id: I6b3d0ac73e8e8462af959fd4dd9580c75e257fcb\nSigned-off-by: Tomasz Michalec \u003ctmichalec@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7764627\nReviewed-by: Jakub \"Kuba\" Czapiga \u003cczapiga@google.com\u003e\nReviewed-by: Konrad Adamczyk \u003ckonrada@google.com\u003e\nReviewed-by: Julius Werner \u003cjwerner@chromium.org\u003e\n" }, { "commit": "b8f56590bae9621438ecb3f873ed75d5064c92cd", "tree": "ce0256f52e93b363117da576cabc66c44c695055", "parents": [ "f4964de1d8ad66eb891967bae47585fa03ba0d32" ], "author": { "name": "Grzegorz Bernacki", "email": "bernacki@google.com", "time": "Fri Mar 13 12:26:15 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Apr 16 18:58:50 2026" }, "message": "vboot: Explicitly return rollback error from vb2api_load_kernel\n\nPreviously, vb2api_load_kernel() collapsed all kernel loading errors\ninto generic VB2_ERROR_LK_INVALID_KERNEL_FOUND or\nVB2_ERROR_LK_NO_KERNEL_FOUND. This prevented the caller from\nidentifying rollback protection failures.\n\nModify vb2api_load_kernel() to specifically translate\nVB2_ERROR_AVB_ERROR_ROLLBACK_INDEX into a new VB2_ERROR_LK_ROLLBACK\nerror code. This allows the UI layer to display a specific error\nmessage for rollback violations (e.g., \"Outdated recovery image\")\ninstead of a generic failure screen.\n\nBUG\u003db:488131983\nBRANCH\u003dnone\nTEST\u003dVerified that the \"Outdated recovery image\" screen is displayed\n when a rollback error occurs during recovery.\n\nCq-Depend: chromium:7666120\nChange-Id: I9c0c090730fdad7dd4acc06bd83fb04919c2e1b7\nSigned-off-by: Grzegorz Bernacki \u003cbernacki@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7666079\nReviewed-by: Julius Werner \u003cjwerner@chromium.org\u003e\nReviewed-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nTested-by: Tomasz Michalec \u003ctmichalec@google.com\u003e\nReviewed-by: Konrad Adamczyk \u003ckonrada@google.com\u003e\nCommit-Queue: Tomasz Michalec \u003ctmichalec@google.com\u003e\n" }, { "commit": "f4964de1d8ad66eb891967bae47585fa03ba0d32", "tree": "cb91ff9c7347cd898e4e7de66a5f0ce6fe7d05ec", "parents": [ "9fcfe9d35813d69be39c57a89d65443687ebb4ea" ], "author": { "name": "Jakub Czapiga", "email": "czapiga@google.com", "time": "Thu Apr 02 20:23:32 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Apr 16 10:36:23 2026" }, "message": "Split Makefile to subdirectories\n\nThis patch was mostly done with Gemini CLI with manual fixes and\ncorrections applied.\n\nThe important change is that the non-debug build of vboot is nowbuilt\nwith -Os and not -g -Os.\n\nDone By: gemini-cli\n\nBRANCH\u003dNone\nBUG\u003db:124141368\nTEST\u003dmake unit-tests\nTEST\u003dUSE\u003davb emerge-brya coreboot libpayload depthcharge\n\nChange-Id: I0b8affd9988e69726786833781f6b30ea2634bb0\nSigned-off-by: Jakub Czapiga \u003cczapiga@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7725944\nReviewed-by: Grzegorz Bernacki \u003cbernacki@google.com\u003e\nReviewed-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\n" }, { "commit": "9fcfe9d35813d69be39c57a89d65443687ebb4ea", "tree": "d10cca40693a939cefc4dadc715d2b9d89fe0946", "parents": [ "fd1d33fbafc2d0dedd5b433ca5deb19db9fd527d" ], "author": { "name": "Jeffery Miller", "email": "jefferymiller@google.com", "time": "Fri Apr 10 20:43:24 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Tue Apr 14 15:22:52 2026" }, "message": "Android.bp: Set the temporary path to /tmp for recovery builds\n\nrecovery needs to execute crossystem to clear the tpm.\nThe recovery domain is neverallowed to modify files in the\n/data partition. In android recovery /tmp is available to\nbe used for the lockfile.\n\nBUG\u003db:497901840\nBRANCH\u003dnone\nTEST\u003dconfirm crossystem clear_tpm_owner_request\u003d1 uses /tmp in recovery\nTEST\u003dconfirm crossystem creates its log in the recovery domain\n\nChange-Id: I39fb62c97bb982780e24263bd60025ab4a66e100\nSigned-off-by: Jeffery Miller \u003cjefferymiller@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7748951\nReviewed-by: Jakub \"Kuba\" Czapiga \u003cczapiga@google.com\u003e\n" }, { "commit": "fd1d33fbafc2d0dedd5b433ca5deb19db9fd527d", "tree": "2640299feaa6a0209e7c1e321b8cefdb65d6af7c", "parents": [ "83bcd11e28c8fab0f194d62c5e1f6ff84473dc1e" ], "author": { "name": "Jeffery Miller", "email": "jefferymiller@google.com", "time": "Thu Apr 09 16:53:11 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Mon Apr 13 23:38:23 2026" }, "message": "crossystem: Make it available for android recovery\n\nMake crossystem available to be included in an android\nrecovery image. Add crossystem.recovery to the package list\nto include this in recovery.\nIt will be used to clear the TPM in android recovery.\n\nBUG\u003db:497901840\nBRANCH\u003dnone\nTEST\u003dadd to PACKAGES, confirm it is included in boot recovery\n\nChange-Id: I39e09e4a41cdadd5fa4aaae36111ca5178f1068c\nSigned-off-by: Jeffery Miller \u003cjefferymiller@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7748950\nReviewed-by: Jakub \"Kuba\" Czapiga \u003cczapiga@google.com\u003e\n" }, { "commit": "83bcd11e28c8fab0f194d62c5e1f6ff84473dc1e", "tree": "656f16cd27a6ef4bf1e0eb00b7d015546b880b16", "parents": [ "1accb279b195241cdd6ea47f95747bb8664442a2" ], "author": { "name": "Grzegorz Bernacki", "email": "bernacki@google.com", "time": "Fri Apr 10 10:33:07 2026" }, "committer": { "name": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Mon Apr 13 15:36:14 2026" }, "message": "vboot: fix futility build for Android\n\nBRANCH\u003dmain\nBUG\u003db:444173574\nTEST\u003dm futility\n\nChange-Id: Ic2edfae5d413d56ff8e538217a2c1553477784c1\nSigned-off-by: Grzegorz Bernacki \u003cbernacki@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7748467\nReviewed-by: Jakub \"Kuba\" Czapiga \u003cczapiga@google.com\u003e\n" }, { "commit": "1accb279b195241cdd6ea47f95747bb8664442a2", "tree": "c030f4a52a54784a2e7c353009f91c0ce713ecc5", "parents": [ "915f62b7eb8c0d7c697dcda183332dbf2d6d1fe1" ], "author": { "name": "Jakub Czapiga", "email": "czapiga@google.com", "time": "Thu Apr 09 11:19:36 2026" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Mon Apr 13 08:02:39 2026" }, "message": "Remove GPT support for NOR memory (MTD)\n\nThere are no devices using GPT on NOR.\n\nBRANCH\u003dNone\nBUG\u003db:184812319,b:124141368\nTEST\u003dcros_run_unit_tests --host --packages vboot_reference\nTEST\u003dUSE\u003davb FW_NAME\u003dredrix emerge-brya libpayload depthcharge\nTEST\u003dCQ\n\nChange-Id: I45971fc8e9e8cb9f56fec1f86a17db49ad0a6d48\nSigned-off-by: Jakub Czapiga \u003cczapiga@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7743264\nReviewed-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nReviewed-by: Grzegorz Bernacki \u003cbernacki@google.com\u003e\nCommit-Queue: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\n" }, { "commit": "915f62b7eb8c0d7c697dcda183332dbf2d6d1fe1", "tree": "960859f097de808d8fdcc55ca471ee32a818c5b2", "parents": [ "1c511e33b4d4d028c2c3d05e42011fbdb89dd63b" ], "author": { "name": "Grzegorz Bernacki", "email": "bernacki@google.com", "time": "Tue Apr 07 11:59:54 2026" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Apr 09 14:40:01 2026" }, "message": "vboot: Add tpmc utility to Android.bp\n\nBRANCH\u003dnone\nBUG\u003db:405345695\nTEST\u003dVerified that tpmc builds successfully for Android.\n\nChange-Id: Ia0ee891bbb78c1d4dc0555785b6286ebb42a7ba3\nSigned-off-by: Grzegorz Bernacki \u003cbernacki@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7735365\nReviewed-by: Jakub \"Kuba\" Czapiga \u003cczapiga@google.com\u003e\n" }, { "commit": "1c511e33b4d4d028c2c3d05e42011fbdb89dd63b", "tree": "42ae60307913f9107af5e0d6d7ca792f9a936d3f", "parents": [ "36daffbbe4f85b26b2577552e31c3f6910284d00" ], "author": { "name": "Vadim Bendebury", "email": "vbendeb@google.com", "time": "Tue Apr 07 20:16:09 2026" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Wed Apr 08 00:25:43 2026" }, "message": "ti50a: support signing nightly images.\n\nLet\u0027s check explicitly for the bit of 0x20000 to tell if the image is\nallowed to be signed for nightly testing. This will cover both Ti50\nand Ti50a Dauntless images.\n\nBRANCH\u003dnone\nBUG\u003db:498346002\nTEST\u003dnone\n\nChange-Id: I9797c342a6677e93928d59051f42a44ad04eefea\nSigned-off-by: Vadim Bendebury \u003cvbendeb@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7735992\nCommit-Queue: ChromeOS Auto Runner \u003cchromeos-auto-runner@chromeos-bot.iam.gserviceaccount.com\u003e\nReviewed-by: Allen Webb \u003callenwebb@google.com\u003e\nCommit-Queue: Allen Webb \u003callenwebb@google.com\u003e\n" }, { "commit": "36daffbbe4f85b26b2577552e31c3f6910284d00", "tree": "4b917c0f9452b87f42025ac0a5aa6059d02b96e8", "parents": [ "229ebbd4fc1426acea28abf69cbeb6b2d4716e1a" ], "author": { "name": "Benjamin Doron", "email": "benjamin.doron@9elements.com", "time": "Tue Mar 31 17:15:22 2026" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Tue Apr 07 01:06:25 2026" }, "message": "host/lib: Use public key\u0027s PKCS11 handle for retrieving modulus\n\nEven if the modulus attribute can be exposed on the private key,\nit\u0027s more typical for it to be on the public key handle. Therefore,\nacquire a handle to the public key too, and use it for this purpose.\n\nBUG\u003dNone\nTEST\u003d Sign a coreboot ROM with SoftHSM\n\nChange-Id: Idc27df5b456d3b3d179203e192aa8ea8a9546b1b\nSigned-off-by: Benjamin Doron \u003cbenjamin.doron@9elements.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7718619\nReviewed-by: Julius Werner \u003cjwerner@chromium.org\u003e\nCommit-Queue: Julius Werner \u003cjwerner@chromium.org\u003e\nTested-by: Julius Werner \u003cjwerner@chromium.org\u003e\nReviewed-by: Benjamin Shai \u003cbshai@google.com\u003e\n" }, { "commit": "229ebbd4fc1426acea28abf69cbeb6b2d4716e1a", "tree": "10541d11e53c083d58d68ce66de2b9e254a97e5a", "parents": [ "6b6eb03e4ad8772cba5094ffa5a853e0fe542b76" ], "author": { "name": "Benjamin Doron", "email": "benjamin.doron@9elements.com", "time": "Tue Mar 31 17:13:14 2026" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Tue Apr 07 01:06:22 2026" }, "message": "host/lib: Login to PKCS11 session if a PIN is provided\n\nSome PKCS11 sessions will require login via a PIN for sensitive\noperations. If the user provides one, then call `C_Login`.\n\nAn environment variable is presumed safe, as a build and signing server\nmust be sufficiently secure anyways.\n\nBUG\u003dNone\nTEST\u003d Sign a coreboot ROM with SoftHSM\n\nChange-Id: Idfa1ce3f1b7a8cabc0833965b17f37650ac23b43\nSigned-off-by: Benjamin Doron \u003cbenjamin.doron@9elements.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7718618\nTested-by: Julius Werner \u003cjwerner@chromium.org\u003e\nCommit-Queue: Julius Werner \u003cjwerner@chromium.org\u003e\nReviewed-by: Julius Werner \u003cjwerner@chromium.org\u003e\nReviewed-by: Benjamin Shai \u003cbshai@google.com\u003e\n" }, { "commit": "6b6eb03e4ad8772cba5094ffa5a853e0fe542b76", "tree": "c997338089d102fbf67f67a4598975fce7ee47c0", "parents": [ "dae6677f43bf0cdfdf429df6fada445b66d38d55" ], "author": { "name": "Benjamin Doron", "email": "benjamin.doron@9elements.com", "time": "Fri Apr 03 17:48:05 2026" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Tue Apr 07 01:06:20 2026" }, "message": "host/lib: Let the PKCS11 library cleanup on exit\n\nCalling `C_Finalize` allows the library to perform cleanup that\nthe kernel might not be able to do, such as releasing locks or\ninforming external devices that the connection is being closed.\nIt also allows the library to wipe secrets from memory.\n\nWhile no bugs may have been encountered yet, being clean helps avoid\nany possible problems in the future.\n\nBUG\u003dNone\nTEST\u003d Sign a coreboot ROM with SoftHSM\n\nChange-Id: I31bc6fde1d2e125f8f3487dc435362952defacbf\nSigned-off-by: Benjamin Doron \u003cbenjamin.doron@9elements.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7727271\nReviewed-by: Julius Werner \u003cjwerner@chromium.org\u003e\nTested-by: Julius Werner \u003cjwerner@chromium.org\u003e\nReviewed-by: Benjamin Shai \u003cbshai@google.com\u003e\nCommit-Queue: Julius Werner \u003cjwerner@chromium.org\u003e\n" }, { "commit": "dae6677f43bf0cdfdf429df6fada445b66d38d55", "tree": "1629717630fce2cb80505982d8c0d91e881a430a", "parents": [ "a037219e34fb03f4e4c36e79b3963b7e24541086" ], "author": { "name": "Jakub Czapiga", "email": "czapiga@google.com", "time": "Mon Mar 23 11:11:05 2026" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Apr 02 14:08:54 2026" }, "message": "firmware: Add context flag for fastboot policy\n\nFastboot should be available only in certain conditions i.e.:\n - In developer mode including forced with GBB flag\n - In any mode with Fastboot GBB flag enabled\n\nThis commit adds a new context flag which is set based on the above\nconditions.\n\nBRANCH\u003dNone\nBUG\u003db:484260435\nTEST\u003dmake runtests # In CrOS-SDK\nTEST\u003dVerify that fastboot is unavailable w/o disabling OEM Lock or\nsetting GBB flags\n\nChange-Id: I70bc431785d1b802231b8a0b363cf8cf0fd0e8a1\nSigned-off-by: Jakub Czapiga \u003cczapiga@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7689794\nReviewed-by: Tomasz Michalec \u003ctmichalec@google.com\u003e\n" }, { "commit": "a037219e34fb03f4e4c36e79b3963b7e24541086", "tree": "e0ef58d482b036d4365984eb26e383e9540e4cef", "parents": [ "814c77561764d95b19bf4e08d1583e17cad1daba" ], "author": { "name": "Jakub Czapiga", "email": "czapiga@google.com", "time": "Wed Apr 01 10:48:17 2026" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Apr 02 10:49:37 2026" }, "message": "Revert \"vboot: Add vb2api_is_oem_lock_enabled function\"\n\nThis reverts commit 6536877b04021b0de9624e29da6ef3ebf05e61da.\n\nRevert reason: API not needed anymore with new fastboot locking.\n\nBRANCH\u003dNone\nBUG\u003db:484260435\nTEST\u003dmake runtests # In CrOS-SDK\n\nChange-Id: I51bbbced4ee5e040ba8f2a7c4a087d1f196981e6\nSigned-off-by: Jakub Czapiga \u003cczapiga@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7720625\nReviewed-by: Tomasz Michalec \u003ctmichalec@google.com\u003e\n" }, { "commit": "814c77561764d95b19bf4e08d1583e17cad1daba", "tree": "59e05e0ef01d5b8fdd24cd62f3bf42e90b491cda", "parents": [ "563ecd738345bfaafc6511db522a3a7ec29fae0f" ], "author": { "name": "Grzegorz Bernacki", "email": "bernacki@google.com", "time": "Fri Mar 27 11:00:45 2026" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Apr 02 06:43:49 2026" }, "message": "2lib: Do not process incorrect ramdisk fragments\n\nBUG\u003db:349304841\nTEST\u003dcq\nBRANCH\u003dmain\n\nChange-Id: I7c5263cc747b3a7cfa1f6fef36e136f30d3bec2e\nSigned-off-by: Grzegorz Bernacki \u003cbernacki@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7705335\nReviewed-by: Julius Werner \u003cjwerner@chromium.org\u003e\n" }, { "commit": "563ecd738345bfaafc6511db522a3a7ec29fae0f", "tree": "a9069ad7539bbbb7d86b08bb33e109ac9fda1487", "parents": [ "6536877b04021b0de9624e29da6ef3ebf05e61da" ], "author": { "name": "David Cross", "email": "davidmcross@google.com", "time": "Fri Oct 03 23:40:31 2025" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Mon Mar 30 17:34:11 2026" }, "message": "futility: add RO checksum (ro_chksum) signer\n\nAdd support in the EC (Zephyr) build system for including SHA256\nchecksum of defined area in binary. This feature is needed when\nsecure boot is disabled in order to run an integrity check of the\nRead-Only (RO) portion of flash.\n\nBRANCH\u003dmain\nBUG\u003db:444173574\nTEST\u003dfutility show --type ro_chksum {blob}\nTEST\u003dfutility sign --type ro_chksum {blob} {chksum}\nTEST\u003dmake runfutiltests\nTEST\u003dhead -c {data_size} {filename} | sha256sum\n\nSigned-off-by: David Cross \u003cdavidmcross@google.com\u003e\nChange-Id: I5b2ab3434e604f7345e91bb48d78eaf8075dcf02\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7005008\nReviewed-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\n" }, { "commit": "6536877b04021b0de9624e29da6ef3ebf05e61da", "tree": "7bd20b015fd456d0d0fa2df37f63f0a291a5ff52", "parents": [ "daa6096e7039dd016635fb5767274a64fcf074bf" ], "author": { "name": "Tomasz Michalec", "email": "tmichalec@google.com", "time": "Tue Mar 17 16:27:35 2026" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Wed Mar 18 17:05:08 2026" }, "message": "vboot: Add vb2api_is_oem_lock_enabled function\n\nAdd vb2api_is_oem_lock_enabled function that allows depthcharge to check\ncurrent state of OEM Lock in nvdata.\n\nBRANCH\u003dmain\nBUG\u003db:484260435\nTEST\u003dCheck OEM Lock in depthcharge\n\nChange-Id: I83f6579d51a905464bf79d2c878a4e30f9a2c266\nSigned-off-by: Tomasz Michalec \u003ctmichalec@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7674957\nReviewed-by: Jakub \"Kuba\" Czapiga \u003cczapiga@google.com\u003e\n" }, { "commit": "daa6096e7039dd016635fb5767274a64fcf074bf", "tree": "2a5c6351f705b80e4cdd1565d5b9d0962891c3cc", "parents": [ "5c360ef458b0a013d8a6d47724bb0fffb5accbcf" ], "author": { "name": "Yu-Ping Wu", "email": "yupingso@google.com", "time": "Thu Mar 05 08:03:49 2026" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Mar 12 11:39:41 2026" }, "message": "firmware/2lib: Remove HWID from vb2api_get_debug_info()\n\nThe API vb2api_gbb_read_hwid() allows depthcharge to get the HWID by\nitself. Therefore, remove HWID from vb2api_get_debug_info() and instead\nlet depthcharge to add it to the debug info string.\n\nBUG\u003db:478879402\nTEST\u003dmake run2tests -j\nTEST\u003demerge-rauru depthcharge\nBRANCH\u003dnone\n\nCq-Depend: chromium:7632777\nChange-Id: I7749e3566d418979caa1a490173dbbe6ef4d1bb5\nSigned-off-by: Yu-Ping Wu \u003cyupingso@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7636022\nCommit-Queue: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nReviewed-by: Julius Werner \u003cjwerner@chromium.org\u003e\nAuto-Submit: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nTested-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nReviewed-by: Jakub \"Kuba\" Czapiga \u003cczapiga@google.com\u003e\n" }, { "commit": "5c360ef458b0a013d8a6d47724bb0fffb5accbcf", "tree": "1a7540bfca8e55ad3e785cd3b6ee4907f78de4ad", "parents": [ "24655cd2309e2758e553780bd2f0bc883a408da8" ], "author": { "name": "Yu-Ping Wu", "email": "yupingso@chromium.org", "time": "Wed Mar 11 03:26:07 2026" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Wed Mar 11 15:30:27 2026" }, "message": "lib20: Add vb2api_verify_kernel_data back\n\nThis reverts commit a11ad5ccdeaebb265c0775735a92f322e3b6d676\n(\"lib20: remove unused code\").\n\nReason for revert: vb2api_verify_kernel_data is used in coreboot.\n\nOriginal change\u0027s description:\n\u003e lib20: remove unused code\n\u003e\n\u003e This commit performs cleanup and refactoring of code related to lib20.\n\u003e Specifically, the changes include:\n\u003e - Removal of unused code from the lib20 with associated tests.\n\u003e - Moving valid keyblock hash test to a new, dedicated file.\n\u003e - Renaming of `vb20_rsa_padding_tests.c` and `vb20_verify_fw.c`\n\u003e to remove the stale `vb20` prefix\n\u003e\n\u003e BRANCH\u003dmain\n\u003e BUG\u003db:124141368\n\u003e TEST\u003dbuild \u0026 unit tests\n\u003e\n\u003e Change-Id: Ib10289999aca5862712f07064e449443550ebf92\n\u003e Signed-off-by: Grzegorz Bernacki \u003cbernacki@google.com\u003e\n\u003e Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7124844\n\u003e Reviewed-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\n\u003e Reviewed-by: Jakub \"Kuba\" Czapiga \u003cczapiga@google.com\u003e\n\nBUG\u003db:124141368\nTEST\u003dcq\nBRANCH\u003dnone\n\nChange-Id: I310cff2be4095e7ec3e0d6712a93044c7f803906\nSigned-off-by: Yu-Ping Wu \u003cyupingso@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7652320\nReviewed-by: Jakub \"Kuba\" Czapiga \u003cczapiga@google.com\u003e\nReviewed-by: Grzegorz Bernacki \u003cbernacki@google.com\u003e\nAuto-Submit: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nCommit-Queue: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nTested-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\n" }, { "commit": "24655cd2309e2758e553780bd2f0bc883a408da8", "tree": "d0ca9cc3a80d682546a739e3c448dd396d184ee3", "parents": [ "b9ea1075a7d2192cf2f0cc0fd8f250616b008ea3" ], "author": { "name": "Mike Banon", "email": "mikebdp2@gmail.com", "time": "Mon Mar 09 15:01:40 2026" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Tue Mar 10 02:18:46 2026" }, "message": "cbfstool: fix const-discarding warning in extract_config_value\n\nIn extract_config_value(), strchr() is called on a const char* pointer,\nreturning a char* that discards the const qualifier. Storing this result\nin a char* variable triggers a compiler warning (or an error with\n-Werror\u003ddiscarded-qualifiers). Change the variable to const char*\nto match the const semantics of the data - it is used only for pointer\nsubtraction and as an endpoint for strndup(), both of which accept const\nchar* without issue. This change fixes the warning with no downsides.\n\nChange-Id: Id5d72005232eed9a9aa15845df419d4878793130\nSigned-off-by: Mike Banon \u003cmikebdp2@gmail.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7649170\nReviewed-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nTested-by: Jakub \"Kuba\" Czapiga \u003cczapiga@google.com\u003e\nReviewed-by: Jakub \"Kuba\" Czapiga \u003cczapiga@google.com\u003e\nCommit-Queue: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\n" }, { "commit": "b9ea1075a7d2192cf2f0cc0fd8f250616b008ea3", "tree": "2ccd37005d575192def0af724cff0c3869ac12b0", "parents": [ "7934c1c9c99175f391bcdf5a103ae71d1da72976" ], "author": { "name": "Jakub Czapiga", "email": "czapiga@google.com", "time": "Wed Mar 04 11:48:26 2026" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Mar 06 12:08:53 2026" }, "message": "firmware/2lib: Remove unused vb2_sha256_extend function\n\nRemove vb2_sha256_extend() implementation and declaration as it is no\nlonger used in the project (only by its own unit tests).\n\nBRANCH\u003dmain\nBUG\u003db:124141368\nTEST\u003dmake run2tests\n\nChange-Id: I6025cc381dc2af8f48fe2643f32f3593fee6c473\nSigned-off-by: Jakub Czapiga \u003cczapiga@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7632947\nReviewed-by: Grzegorz Bernacki \u003cbernacki@google.com\u003e\nReviewed-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\n" }, { "commit": "7934c1c9c99175f391bcdf5a103ae71d1da72976", "tree": "a59d1b1022ccc420652877df111e8dcce9d37da7", "parents": [ "25083888d265bdddeb7f462f304d0132da277384" ], "author": { "name": "Jakub Czapiga", "email": "czapiga@google.com", "time": "Wed Mar 04 11:19:20 2026" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Mar 05 23:45:54 2026" }, "message": "firmware/2lib: Remove dead kernel verification function references\n\nRemove references to non-existent kernel verification functions from\npublic headers and comments. These functions (vb2api_get_kernel_size,\nvb2api_kernel_load_vblock, etc.) were either renamed or removed in\nprevious refactors but their declarations in comments and return codes\nremained.\n\nUpdated comments to correctly reference vb2api_load_kernel().\n\nBRANCH\u003dmain\nBUG\u003db:124141368\nTEST\u003dmake runtests run2tests\n\nChange-Id: I8f00ad7dabac66688072585aa729d82370ac2f12\nSigned-off-by: Jakub Czapiga \u003cczapiga@google.com\u003e\nCq-Depend: chromium:7637740\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7632946\nReviewed-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nCommit-Queue: Jeffery Miller \u003cjefferymiller@google.com\u003e\n" }, { "commit": "25083888d265bdddeb7f462f304d0132da277384", "tree": "f4a05f636475d5896ef7ca95ee90e8296e584c49", "parents": [ "3109519e884133d59ed971a35c311d2fc3b6d945" ], "author": { "name": "Jakub Czapiga", "email": "czapiga@google.com", "time": "Thu Mar 05 08:56:27 2026" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Mar 05 12:17:11 2026" }, "message": "Add .editorconfig\n\n.editorconfig is a standard code description file respected by many\neditors and IDEs. It\u0027s addition will improve development experience and\nstreamline workflow allowing to avoid unnecessary review steps for\nfixing the indentation.\n\nBRANCH\u003dmain\nBUG\u003dNone\nTEST\u003dVerify that VIM respects .editorconfig after changing VIM config to\nincompatible indentation by default.\n\nChange-Id: Ieee8ce4eb31c0abe976f3f1ee3f90973a64472e6\nSigned-off-by: Jakub Czapiga \u003cczapiga@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7633306\nReviewed-by: Grzegorz Bernacki \u003cbernacki@google.com\u003e\nReviewed-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\n" }, { "commit": "3109519e884133d59ed971a35c311d2fc3b6d945", "tree": "a3dc6eccb0189de2e3cd86c10da86948bc01889d", "parents": [ "850cf0fbe5b5cfe70267cecfe7931e232c7c9310" ], "author": { "name": "Jakub Czapiga", "email": "czapiga@google.com", "time": "Wed Mar 04 11:02:46 2026" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Mar 05 11:04:39 2026" }, "message": "tests: Remove unused sha_tests.c\n\nsha_tests is not used. tests/vb2_sha_tests.c replaced it long time ago.\n\nBRANCH\u003dmain\nBUG\u003db:124141368\nTEST\u003dmake runtests run2tests\n\nChange-Id: If31de75a2bcdc37d59f1bd762b9a884e64080e58\nSigned-off-by: Jakub Czapiga \u003cczapiga@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7632945\nReviewed-by: Grzegorz Bernacki \u003cbernacki@google.com\u003e\nReviewed-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\n" }, { "commit": "850cf0fbe5b5cfe70267cecfe7931e232c7c9310", "tree": "0b7c59e1caff35d53e6e7efa59680bae86e0b619", "parents": [ "42f5313871c66a1ea33c0f6bacd0a458d645a918" ], "author": { "name": "Jakub Czapiga", "email": "czapiga@google.com", "time": "Wed Mar 04 10:57:30 2026" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Mar 05 11:04:35 2026" }, "message": "tests/tpm_lite: Remove unused files\n\nBRANCH\u003dmain\nBUG\u003db:124141368\nTEST\u003dmake runtests\n\nChange-Id: I007c91063620c36b352461dc748285ea71bb495d\nSigned-off-by: Jakub Czapiga \u003cczapiga@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7632944\nReviewed-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\n" }, { "commit": "42f5313871c66a1ea33c0f6bacd0a458d645a918", "tree": "53404ce0308550ae976a763843b7c1335f976a88", "parents": [ "c16e6afaced43d18e37603fef5b6f50e585d4a1a" ], "author": { "name": "Jakub Czapiga", "email": "czapiga@google.com", "time": "Wed Feb 18 14:21:27 2026" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Mon Mar 02 22:49:55 2026" }, "message": "firmware: Do not allow for dev mode with oem_lock enabled\n\nBUG\u003db:484259211, b:484260435\nBRANCH\u003dmain\nTEST\u003dmake runtests\nTEST\u003dSet `crossystem oem_lock\u003d1` in Developer mode and observe the\nfirmware block developer mode and force switch to Normal mode\n\nChange-Id: I47eb034c153ed39aec1a93305f64bc42e1934f29\nSigned-off-by: Jakub Czapiga \u003cczapiga@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7587776\nReviewed-by: Julius Werner \u003cjwerner@chromium.org\u003e\nReviewed-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\n" }, { "commit": "c16e6afaced43d18e37603fef5b6f50e585d4a1a", "tree": "1be65db538c3d3b2f66f1f83a3447248018ffe96", "parents": [ "ed6cb4054134efdd67215d9504f501cd36030d6a" ], "author": { "name": "Jakub Czapiga", "email": "czapiga@google.com", "time": "Fri Feb 13 18:00:14 2026" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Feb 27 14:26:45 2026" }, "message": "firmware: host: Add OEM Lock flag to nvstorage dev field\n\nThe new field lives on the highest bit of the VB2_NV_OFFS_DEV.\nThe default state is 0\u003ddisabled (unlocked).\nOEM Lock field will be used as a dev-mode guard together with FWMP and\nwill be switched by \"OEM Unlocked\" switch in the \"Developer Options\".\n\nBUG\u003db:484259211, b:484260435\nBRANCH\u003dmain\nTEST\u003dmake runtests\nTEST\u003dSet and get oem_lock value with crossystem\n\nChange-Id: I4ba835ae180134c355d157e6d80b478975124c19\nSigned-off-by: Jakub Czapiga \u003cczapiga@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7576554\nReviewed-by: Konrad Adamczyk \u003ckonrada@google.com\u003e\nReviewed-by: Julius Werner \u003cjwerner@chromium.org\u003e\nReviewed-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\n" }, { "commit": "ed6cb4054134efdd67215d9504f501cd36030d6a", "tree": "6a26a79f9f2adf9526855b4d4ed22a6c3aab689a", "parents": [ "606ca738a7d30536f3eae06e69525701d4068b8e" ], "author": { "name": "Grzegorz Bernacki", "email": "bernacki@google.com", "time": "Fri Jan 30 12:51:54 2026" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Feb 26 00:45:36 2026" }, "message": "tests: add test cases for booting OTA recovery partition\n\nBUG\u003db:454547338\nBRANCH\u003dnone\nTEST\u003d\u0027USE_AVB\u003d1 make runtests\u0027\n\nChange-Id: I168b980bdf8b4e1038cf312e8cf0aff313976b20\nSigned-off-by: Grzegorz Bernacki \u003cbernacki@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7535103\nCommit-Queue: ChromeOS Auto Retry \u003cchromeos-auto-retry@chromeos-bot.iam.gserviceaccount.com\u003e\nReviewed-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\n" }, { "commit": "606ca738a7d30536f3eae06e69525701d4068b8e", "tree": "d75684218cd2a0f8af7d19872b48d2f0869d2cfd", "parents": [ "7529e2837c555572294875a84bdb3c55aea66ae4" ], "author": { "name": "Grzegorz Bernacki", "email": "bernacki@google.com", "time": "Thu Jan 29 10:40:11 2026" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Feb 26 00:45:33 2026" }, "message": "vboot: Implement Network Based Recovery (NBR) using OTA recovery partition\n\nIntroduce a new recovery mechanism that searches for an OTA recovery\npartition in addition to the legacy MiniOS kernel.\n\nThe new mechanism looks for a nested GPT layout by searching for a\nspecific disk UUID (`GPT_DISK_UUID_RECOVERY`) in sector 1 of the disk\nregions. If found, it creates a sub-disk handle using the\n`vb2ex_slice_disk` callback and attempts to load a standard ChromeOS\nkernel from that slice.\n\nAs part of this change, rename `vb2api_load_minios_kernel` to\n`vb2api_load_nbr_kernel` and update internal helper functions to reflect\nthe broader \"Network Based Recovery\" (NBR) scope.\n\nBUG\u003db:454547338\nBRANCH\u003dnone\nTEST\u003dSuccessfully built for redrix and verified with OTA recovery image.\n\nCq-Depend: chromium:7535280\nChange-Id: I259f0581798c50241ec1a5ec8b5a2fffe074797f\nSigned-off-by: Grzegorz Bernacki \u003cbernacki@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7535102\nCommit-Queue: ChromeOS Auto Retry \u003cchromeos-auto-retry@chromeos-bot.iam.gserviceaccount.com\u003e\nReviewed-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nReviewed-by: Julius Werner \u003cjwerner@chromium.org\u003e\n" }, { "commit": "7529e2837c555572294875a84bdb3c55aea66ae4", "tree": "ca2e7dfd5b80328e26dc9c313371b03b70d3def9", "parents": [ "6aba77a84c2be45d4367b4ff97dc2bb040d74213" ], "author": { "name": "Grzegorz Bernacki", "email": "bernacki@google.com", "time": "Wed Feb 04 13:59:29 2026" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Feb 26 00:45:31 2026" }, "message": "2lib: rename functions \u0026 variables related to MiniOS\n\nFollowing commits introduce new OTA recovery mechanism, so some of the\nfunction and variables needs more generic names.\n\nBUG\u003db:454547338\nBRANCH\u003dnone\nTEST\u003dSuccessfully built for redrix and verified with OTA recovery image.\n\nCq-Depend: chromium:7535280\nChange-Id: If7c7fc0d90c843b231b7bbb6021edc3d0b3848be\nSigned-off-by: Grzegorz Bernacki \u003cbernacki@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7544572\nReviewed-by: Julius Werner \u003cjwerner@chromium.org\u003e\nReviewed-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nCommit-Queue: ChromeOS Auto Retry \u003cchromeos-auto-retry@chromeos-bot.iam.gserviceaccount.com\u003e\n" }, { "commit": "6aba77a84c2be45d4367b4ff97dc2bb040d74213", "tree": "a43d3b4ceadb9d8b8eadfd61c372428c550af96c", "parents": [ "ec74b34cd6ce5f1773dd93d3f8b9e799ae83144e" ], "author": { "name": "Grzegorz Bernacki", "email": "bernacki@google.com", "time": "Thu Jan 29 10:32:06 2026" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Feb 26 00:45:29 2026" }, "message": "vboot: Add GPT_DISK_UUID_RECOVERY marker\n\nDefine GPT_DISK_UUID_RECOVERY which is used as a marker to find the\nrecovery GPT table on the disk.\n\nBUG\u003db:454547338\nBRANCH\u003dnone\nTEST\u003dSuccessfully built for redrix and verified with OTA recovery image.\n\nChange-Id: I2bba4f2bb97ef41f1534e9502c9fc44ebcc52886\nSigned-off-by: Grzegorz Bernacki \u003cbernacki@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7535101\nCommit-Queue: ChromeOS Auto Retry \u003cchromeos-auto-retry@chromeos-bot.iam.gserviceaccount.com\u003e\nReviewed-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nReviewed-by: Konrad Adamczyk \u003ckonrada@google.com\u003e\n" }, { "commit": "ec74b34cd6ce5f1773dd93d3f8b9e799ae83144e", "tree": "a43901b8dde02b7f84eb624a2decd1ef1d8110ac", "parents": [ "e388d1f93c9573a79a04b633c3a0569ddbce6c94" ], "author": { "name": "Grzegorz Bernacki", "email": "bernacki@google.com", "time": "Thu Jan 29 10:18:02 2026" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Feb 26 00:45:23 2026" }, "message": "vboot: Add declaration of vb2ex_slice_disk() callback\n\nThis callback is used to create a sub-disk handle from an existing\ndisk, which is required for features like Network Based Recovery (NBR).\n\nBUG\u003db:454547338\nBRANCH\u003dnone\nTEST\u003dSuccessfully built for redrix and verified with OTA recovery image.\n\nCq-Depend: chromium:7535279\nChange-Id: Ibca6077fbf93ade93b7557f7342cdc90786a2095\nSigned-off-by: Grzegorz Bernacki \u003cbernacki@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7535100\nCommit-Queue: ChromeOS Auto Retry \u003cchromeos-auto-retry@chromeos-bot.iam.gserviceaccount.com\u003e\nReviewed-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nReviewed-by: Julius Werner \u003cjwerner@chromium.org\u003e\n" }, { "commit": "e388d1f93c9573a79a04b633c3a0569ddbce6c94", "tree": "4f67730d027da125d4cc5bf00e88277add365b50", "parents": [ "a1f54de5001c46eefb2a26ef1421bc9bc86e8fa6" ], "author": { "name": "Yu-Ping Wu", "email": "yupingso@google.com", "time": "Fri Jan 30 04:49:17 2026" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Mon Feb 02 03:20:30 2026" }, "message": "futility: Print programmer in logs\n\nPrint the programmer name in load_system_firmware() and\nwrite_system_firmware() logs. This would help differentiate between AP\nand EC errors.\n\nAlso add a log in update_ec_firmware(), and a warning in\ndut_get_wp_sw().\n\nBUG\u003db:479521993\nTEST\u003dmake futil -j\nBRANCH\u003dnone\n\nChange-Id: I32b8fa43becebd3388025d884fa61b00eddfcdc5\nSigned-off-by: Yu-Ping Wu \u003cyupingso@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7532376\nTested-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nAuto-Submit: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nReviewed-by: Hsuan Ting Chen \u003croccochen@chromium.org\u003e\nCommit-Queue: Hsuan Ting Chen \u003croccochen@chromium.org\u003e\n" }, { "commit": "a1f54de5001c46eefb2a26ef1421bc9bc86e8fa6", "tree": "fb18b7d822fac0bb3a50cb5950f8c39c5b877a29", "parents": [ "5040bde7243f019bea517267a788534ec268860a" ], "author": { "name": "Jeremy Bettis", "email": "jbettis@google.com", "time": "Mon Jan 26 20:53:37 2026" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Tue Jan 27 22:10:03 2026" }, "message": "Skip ec.config if there is no space\n\nWe want ec.config for test purposes, but the firmware will still work\nfine without it. If there isn\u0027t room for the ec.config, then just omit\nit.\n\nBRANCH\u003dNone\nBUG\u003db:478868222\nTEST\u003dswap_ec_rw --image image-gothrax.bin --ec ec.bin\n\nChange-Id: If9d28e4070a6ffec85cd7594c2b63eed05adc5c9\nSigned-off-by: Jeremy Bettis \u003cjbettis@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7517252\nCommit-Queue: Jeremy Bettis \u003cjbettis@chromium.org\u003e\nTested-by: Jeremy Bettis \u003cjbettis@chromium.org\u003e\nReviewed-by: Wai-Hong Tam \u003cwaihong@google.com\u003e\nAuto-Submit: Jeremy Bettis \u003cjbettis@chromium.org\u003e\nReviewed-by: Julius Werner \u003cjwerner@chromium.org\u003e\n" }, { "commit": "5040bde7243f019bea517267a788534ec268860a", "tree": "20c175230e6b89bf75eab2747327e1f3a3c00de1", "parents": [ "a5f6ef5e327ecfda7b349078849ffb6c07acc015" ], "author": { "name": "Yu-Ping Wu", "email": "yupingso@google.com", "time": "Tue Jan 27 10:31:32 2026" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Tue Jan 27 13:43:01 2026" }, "message": "futility: Prioritize identity.csv over Android property ro.product.name\n\nFor devices migrated from ChromeOS to Android, the property\n\u0027ro.product.name\u0027 may be incorrect. For example, on all Brya models, the\nproduct name would be \"brya\". Instead, the model should be detected from\nidentity.csv.\n\nFix the bug by moving the get_manifest_key_from_identity() call before\ndut_get_android_product().\n\nBUG\u003db:478938160, b:473962869\nTEST\u003dmake futil -j\nBRANCH\u003dnone\n\nChange-Id: Ide41d2c918737ebd4284bc4b631d219502e079de\nSigned-off-by: Yu-Ping Wu \u003cyupingso@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7519132\nAuto-Submit: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nCommit-Queue: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nReviewed-by: Jakub \"Kuba\" Czapiga \u003cczapiga@google.com\u003e\nTested-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nCommit-Queue: Jakub \"Kuba\" Czapiga \u003cczapiga@google.com\u003e\n" }, { "commit": "a5f6ef5e327ecfda7b349078849ffb6c07acc015", "tree": "2496cbac17b52740fef8d06a098e4112ac5f303b", "parents": [ "fa13af3ccc362943c6e9993d9e4bce1621d11877" ], "author": { "name": "Nicholas Bishop", "email": "nicholasbishop@google.com", "time": "Fri Jan 09 22:09:52 2026" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Wed Jan 14 01:02:36 2026" }, "message": "sign_uefi: Use the v2 crdyshim key for signing crdyboot\n\nNote that this will have no immediate effect on the reven board because\nthe `crdyboot_presigned` USE flag is set, so these signing operations\nare skipped for now.\n\nBRANCH\u003dNone\nBUG\u003db:421963848\nTEST\u003dmake runtests\nTEST\u003dcreate image with dev version of crdyshim\nTEST\u003dcrdyshim must include the changes from chromium:7416135\nTEST\u003dscripts/image_signing/sign_official_build.sh recovery \\\nTEST\u003d disk.unsigned tests/devkeys disk.signed\nTEST\u003dboot, verify crdyshim successfully verifies the signature\n\nChange-Id: I93af7f6edf44e09a8394353af344a48e6d5a038d\nSigned-off-by: Nicholas Bishop \u003cnicholasbishop@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7427950\nReviewed-by: Benjamin Shai \u003cbshai@google.com\u003e\n" }, { "commit": "fa13af3ccc362943c6e9993d9e4bce1621d11877", "tree": "1845e177e05042d478195ea4cff38805c0cf9bcd", "parents": [ "cca9e4a676f337af0090d95ed2fdb8d3806036fe" ], "author": { "name": "Yu-Ping Wu", "email": "yupingso@chromium.org", "time": "Fri Jan 09 03:47:24 2026" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Tue Jan 13 10:40:42 2026" }, "message": "futility: Support model detection by Android property ro.product.name\n\nOn Android, the manifest key (i.e., the key of signer_config.csv) is the\nAndroid product name, available by \u0027getprop ro.product.name\u0027. To support\nmodel detection on Android, create the dut_get_android_product() API,\nand utilize it in manifest_find_model().\n\nOn ChromeOS, we don\u0027t need to get the product name. Therefore, guard the\ndut_get_android_product() call with __ANDROID__. The __ANDROID__ is\ndefined by the Android toolchain.\n\nNote that this is only an interim solution, which doesn\u0027t work for\nremote devices (via --servo). To support the remote flashing, the\nproduct name needs to be either read from the RO VPD (if RO VPD is\nvalid), or passed explicitly by \u0027--model\u0027 (if RO VPD is corrupted). For\nnow, the VPD solution isn\u0027t implemented because we don\u0027t have any\ndevices with the product name provisioned on RO VPD to test with yet.\n\nBUG\u003db:473962869\nTEST\u003dmake ANDROID\u003d1 futil -j\nTEST\u003dfutility update --detect-model-only -a ap-ec-fw.zip # On Android\nBRANCH\u003dnone\n\nChange-Id: Id64eac531937ab5a7d2cb8f963bd25130cef7c4c\nSigned-off-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7414939\nReviewed-by: Patryk Busse \u003cpbusse@google.com\u003e\n" }, { "commit": "cca9e4a676f337af0090d95ed2fdb8d3806036fe", "tree": "2c5ee2efc953485dcb5535ec4f8e52eff14748ba", "parents": [ "0ee734db27fe06a92b92e0bdc58c8b7f35dfaf16" ], "author": { "name": "Tomasz Michalec", "email": "tmichalec@google.com", "time": "Tue Oct 28 09:27:27 2025" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Mon Jan 12 08:51:20 2026" }, "message": "vb2_sha: Use uint64_t for total size in SHA-2\n\nMessage for SHA-2 padding is ending with the length of message in bits\nwritten as 64-bit big-endian integer. Use uint64_t to store and\ncalculate the total size of message, so messages with length greater\nthan 512MiB can be hashed.\n\nBRANCH\u003dmain\nBUG\u003db:434894535, b:434895132\nTEST\u003dUse fastboot oem sha256 on large partition\n\nChange-Id: Ic7e7ce7fbe1fa3409a41b619e3d65e069b215ed0\nSigned-off-by: Tomasz Michalec \u003ctmichalec@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7090335\nReviewed-by: Julius Werner \u003cjwerner@chromium.org\u003e\n" }, { "commit": "0ee734db27fe06a92b92e0bdc58c8b7f35dfaf16", "tree": "16da368ee418a6550f369ba11f2376ed25731107", "parents": [ "5a45a5f32dcf544bef914976dcefb991ea75f370" ], "author": { "name": "Grzegorz Bernacki", "email": "bernacki@google.com", "time": "Mon Jan 05 10:21:44 2026" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Mon Jan 05 14:39:09 2026" }, "message": "test: fix problem with load android test cases\n\nAVB verify_data structure must be initialized with zeros. This commit\nalso initialize secdata structure to avoid warning messages.\n\nBUG\u003db:472612958\nTEST\u003d\"FEATURES\u003dtest emerge-amd64-generic vboot_reference\"\nBRANCH\u003dnone\n\nChange-Id: I3dde3d640534c9b4fea4c75329a5c66fb8540942\nSigned-off-by: Grzegorz Bernacki \u003cbernacki@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7369392\nReviewed-by: Tomasz Michalec \u003ctmichalec@google.com\u003e\n" }, { "commit": "5a45a5f32dcf544bef914976dcefb991ea75f370", "tree": "ca380f2ed2f7e8752fced4e26faf046a7a2f7820", "parents": [ "89b720193a095a03986bef2c5c1e58ebb404baef" ], "author": { "name": "Hsuan Ting Chen", "email": "roccochen@chromium.org", "time": "Tue Dec 30 09:50:50 2025" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Jan 02 04:13:34 2026" }, "message": "Android.bp: allow libvboot_host to be built as a shared library\n\nUpdate libvboot_host from cc_library_static to cc_library to allow it to\nbe built as both a static and shared library. This is needed for dynamic\nlinking in certain environments.\n\nBUG\u003db:471736833\nBRANCH\u003dnone\nTEST\u003dnone\n\nChange-Id: I3089d86473b20614639a70822103c43bb5a8ebe5\nSigned-off-by: Hsuan Ting Chen \u003croccochen@chromium.org\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7319082\nReviewed-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nCommit-Queue: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\n" }, { "commit": "89b720193a095a03986bef2c5c1e58ebb404baef", "tree": "48b183cbc6cda164b41b3542e620cdc00978d603", "parents": [ "c851dfa1e384a287c4ad191da1c19d925c762cdb" ], "author": { "name": "Grzegorz Bernacki", "email": "bernacki@google.com", "time": "Wed Dec 31 10:57:10 2025" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Jan 02 04:09:38 2026" }, "message": "tests: initialize cmdline for AVB verify data\n\nBUG\u003db:399612484\nTEST\u003d\u0027USE_AVB\u003d1 make runtests\u0027\nBRANCH\u003dmain\n\nChange-Id: Ie494fe2db6ba553ceca5cb91b851d2fc36ee1736\nSigned-off-by: Grzegorz Bernacki \u003cbernacki@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7367473\nReviewed-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nCommit-Queue: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\n" }, { "commit": "c851dfa1e384a287c4ad191da1c19d925c762cdb", "tree": "c67c477b4adf006fa411f4aad289fecc0c51a886", "parents": [ "86e3d6b720cb2814bc7715ecd4bdf2d02490d01d" ], "author": { "name": "Grzegorz Bernacki", "email": "bernacki@google.com", "time": "Wed Dec 17 15:11:58 2025" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Tue Dec 30 10:25:03 2025" }, "message": "tests: add vboot avb test cases\n\nBUG\u003db:399608548\nTEST\u003d\u0027USE_AVB\u003d1 make runtests\u0027\nBRANCH\u003dmain\n\nChange-Id: Ifc1970be74fcf7aa2ef9b1d19039a20ace766fa5\nSigned-off-by: Grzegorz Bernacki \u003cbernacki@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7280342\nReviewed-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\n" }, { "commit": "86e3d6b720cb2814bc7715ecd4bdf2d02490d01d", "tree": "415d439faabbfc12761be4d9a92ca674d78d0cd6", "parents": [ "4613982426047283fee4eaa0ddf27ea920db6af2" ], "author": { "name": "Grzegorz Bernacki", "email": "bernacki@google.com", "time": "Wed Dec 10 09:59:08 2025" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Tue Dec 30 10:25:01 2025" }, "message": "tests: add test cases to boot android kernel\n\nBUG\u003db:399612484\nTEST\u003d\u0027USE_AVB\u003d1 make runtests\u0027\nBRANCH\u003dmain\n\nCq-Depend: chromium:7260957\nChange-Id: I23c165ddfb8d1224f48d73d46d0e774232f1f67a\nSigned-off-by: Grzegorz Bernacki \u003cbernacki@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7251572\nReviewed-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\n" }, { "commit": "4613982426047283fee4eaa0ddf27ea920db6af2", "tree": "be4f08e5cdc7e69c52996570140142199cc3faaf", "parents": [ "7b8a96024b7c343783fa69f91c3ce62b1b1565dd" ], "author": { "name": "Yu-Ping Wu", "email": "yupingso@chromium.org", "time": "Tue Dec 23 09:21:08 2025" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Tue Dec 23 13:31:20 2025" }, "message": "Fix OpenSSL memory leaks and incorrect free() usage\n\nSeveral files contain memory management errors related to OpenSSL\nobjects, leading to memory leaks and potential memory corruption. Fix\nthe following issues:\n\n- Incorrect Deallocation: Replace `free()` with the correct\n `OPENSSL_free()` for memory allocated by `i2d_RSAPrivateKey()` in\n host/lib/host_key2.c and host/lib21/host_key.c.\n- Missing `RSA_free()`: Add a missing `RSA_free()` call in\n futility/cmd_show.c to prevent a memory leak of an `RSA` object\n allocated by `d2i_RSAPrivateKey()`.\n- Missing `BN_free()` and `BN_CTX_free()`: Add missing `BN_free()` and\n `BN_CTX_free()` calls in host/lib/util_misc.c and\n utility/dumpRSAPublicKey.c to prevent `BIGNUM` and `BN_CTX` objects\n from being leaked.\n\nAlso fix a missing free(key) in `vb2_read_private_key()`.\n\nBUG\u003db:467116815\nTEST\u003dfutility --debug create /tmp/cr50.pem # on Android (hylia)\nTEST\u003dmake runtests\nBRANCH\u003dnone\n\nChange-Id: If91885ffa1fd07d45f29798eb34ebed949032daf\nSigned-off-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7309125\nReviewed-by: Hsuan Ting Chen \u003croccochen@chromium.org\u003e\nCommit-Queue: Hsuan Ting Chen \u003croccochen@chromium.org\u003e\n" }, { "commit": "7b8a96024b7c343783fa69f91c3ce62b1b1565dd", "tree": "7dc805295ede2b531e06324b3fb41ea444b50d56", "parents": [ "dd0bab3146806a09777d3e2f2b4175d5ad3b313f" ], "author": { "name": "Hsuan Ting Chen", "email": "roccochen@chromium.org", "time": "Fri Sep 12 07:46:27 2025" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Wed Dec 17 15:19:18 2025" }, "message": "crossystem: Use libflashrom instead of flashrom CLI for USE_FLASHROM\u003d1\n\nWhen USE_FLASHROM\u003d1, crossystem currently invokes the flashrom binary\nfor flash operations via flashrom_read() and flashrom_write(). This is\ninconsistent with futility, which already use the libflashrom.\n\nThis CL replaces these functions with their libflashrom implementations\nflashrom_read_region() and flashrom_write_region(). This unifies the\nflash access logic with futility, making it easier to maintain.\n\nKey changes:\n* The do_verify parameter in write functions is changed from int to bool\n for correctness.\n* The new ...region() functions now require a non-NULL region name. The\n old implementation treated a NULL region as the entire chip; this is\n no longer supported by these functions.\n\nThe binary invocation logic in flashrom.c is kept for now and will be\nrefactored in subsequent CLs.\n\nBUG\u003db:441639102\nBUG\u003db:445126698\nBRANCH\u003dnone\nTEST\u003dsudo emerge -1 vboot_reference\nTEST\u003dsudo USE\u003d\"-flashrom\" emerge -1 vboot_reference\nTEST\u003demerge-corsola vboot_reference, deploy on DUT, check ldd to ensure\n running crossystem with libflashrom\nTEST\u003d(on corsola) crossystem fw_try_count\nTEST\u003d(on corsola) crossystem fw_try_count\u003d1\nTEST\u003dFEATURES\u003dtest emerge-corsola vboot_reference\nTEST\u003dmake clean \u0026\u0026 USE_FLASHROM\u003d1 make runtests\nTEST\u003dmake clean \u0026\u0026 USE_FLASHROM\u003d0 make runtests\n\nChange-Id: I65bf6d620687ca6a1214ed474e451596cb7eb325\nSigned-off-by: Hsuan Ting Chen \u003croccochen@chromium.org\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/6938951\nReviewed-by: Jakub \"Kuba\" Czapiga \u003cczapiga@google.com\u003e\nCommit-Queue: Jakub \"Kuba\" Czapiga \u003cczapiga@google.com\u003e\n" }, { "commit": "dd0bab3146806a09777d3e2f2b4175d5ad3b313f", "tree": "6dba77dfbb31b17fb4ec83f7cc225c148427be2d", "parents": [ "4f3a73dd50f04de330acd4240cc557a058bf37ca" ], "author": { "name": "Yu-Ping Wu", "email": "yupingso@chromium.org", "time": "Thu Nov 27 23:01:35 2025" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Tue Dec 16 13:57:47 2025" }, "message": "futility/updater: Check FMAP compatibility\n\nRW-only updates should check the FMAP compatibility between the system\nand target images, to avoid flashing the target RW section into a wrong\nflash offset (for example b/461559917).\n\nBUG\u003db:462619916\nTEST\u003dmake runfutiltestscripts\nTEST\u003dFEATURES\u003dtest emerge-skywalker vboot_reference\nBRANCH\u003dnone\n\nChange-Id: Ifef6b992873335f1c041dbc12ebb76d72ed824e9\nSigned-off-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7214906\nCommit-Queue: Jakub \"Kuba\" Czapiga \u003cczapiga@google.com\u003e\nReviewed-by: Jakub \"Kuba\" Czapiga \u003cczapiga@google.com\u003e\n" }, { "commit": "4f3a73dd50f04de330acd4240cc557a058bf37ca", "tree": "bf8aa5df39c8e4b2cbc4032f4e6bb6f327755fe8", "parents": [ "93711fc01e5a72eb90cc87c7a586f1b0674d18f1" ], "author": { "name": "Yu-Ping Wu", "email": "yupingso@chromium.org", "time": "Fri Dec 12 07:23:14 2025" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Tue Dec 16 13:57:44 2025" }, "message": "tests/futility/test_update: Make FROM_IMAGE and TO_IMAGE same board\n\nCurrently in most test cases, we update from a Peppy image to a Link\nimage. That is problematic, because their FMAP is different and\ntherefore incompatible. With b/462619916 we will add the FMAP\ncompatibility check to futility, so the test cases need to be fixed\nfirst.\n\nHere we change both FROM_IMAGE and TO_IMAGE to Trulo images. The\n15217.800.0 and 15217.900.0 images come from official builds\n(dev-signed). The Trulo board is selected for the following reasons:\n\n* Trulo is an Intel device, which is required to run those ME-preserving\n test cases.\n* Trulo has the RO_GSCVD FMAP region, which is required to test the \"AP\n RO locked\" case.\n* ifdtool supports locking/unlocking Trulo images.\n\nThe main differences between the new Trulo images and old Peppy/Link\nimages are:\n\n* Unsigned Trulo images are used for easier modification, in case we\n need to modify and re-sign them for verification-related futility\n tests.\n* Trulo images can be locked and unlocked by \u0027ifdtool -p adl\u0027, so we\n don\u0027t need to hard code the SI_DESC offset in the tests.\n* Trulo has the COREBOOT FMAP region, so the legacy BOOT_STUB handling\n can be removed.\n* Trulo has GBB v1.2, so we don\u0027t have to patch the image to create a\n special GBB v1.2 image for testing HWID digest. GBB v1.2 was\n introduced in CL:221360 (landed in 6393.0.0), so all boards with GBB\n v1.1 have reached AUE.\n* Trulo\u0027s RO_VPD and RW_VPD have the FMAP_AREA_PRESERVE flag.\n\nOther important changes in this patch:\n\n* A real Eve image bios_eve.bin is added for testing Eve-specific\n quirks \u0027unlock_csme_eve\u0027 and \u0027eve_smm_store\u0027. This avoid having to\n modify the hardcoded SI_DESC offset every time FROM_IMAGE/TO_IMAGE\n is changed to a different board.\n* The HWID patching is removed, because the new FROM_IMAGE and TO_IMAGE\n have the same HWID.\n* To create TO_IMAGE_WIPE_RW_VPD, we cannot pass \"$(printf \u0027\\000\u0027)\" to\n patch_file(), because the shell will interpret it as a Null-terminated\n empty string. Instead, \"\\x00\" must be used.\n* The unibuild archive is created, with a Trulo image being the custom\n label base image (customtip). A true custom label image (customtip-mp)\n is created by taking the MP key from the Link MP image.\n* Peppy and Voxel images are no longer used in the script.\n* Tests for unlocking ME are moved to test_ifdtool().\n\nBUG\u003db:462619916\nTEST\u003dmake runfutiltestscripts\nBRANCH\u003dnone\n\nChange-Id: I4f9f5911207972314fdd1a3df5504c3764ec947c\nSigned-off-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7206725\nReviewed-by: Jakub \"Kuba\" Czapiga \u003cczapiga@google.com\u003e\nCommit-Queue: Jakub \"Kuba\" Czapiga \u003cczapiga@google.com\u003e\n" }, { "commit": "93711fc01e5a72eb90cc87c7a586f1b0674d18f1", "tree": "70d3757c65f1f1b9f0fe9112e1f39356def477f0", "parents": [ "ad3b7b64283b93ef04ebcbcacefffc232d681ec3" ], "author": { "name": "Grzegorz Bernacki", "email": "bernacki@google.com", "time": "Thu May 08 14:44:37 2025" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Mon Dec 15 14:27:59 2025" }, "message": "2lib: Implement rollback protection for Android\n\nBUG\u003db:324230492\nTEST\u003dBoot Android with rollback set based on security\n timestamp\nBRANCH\u003dmain\n\nChange-Id: Ia41e99b1965c18265082949efdb3ad43f88ba539\nSigned-off-by: Grzegorz Bernacki \u003cbernacki@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/6597181\nReviewed-by: Julius Werner \u003cjwerner@chromium.org\u003e\nReviewed-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\n" }, { "commit": "ad3b7b64283b93ef04ebcbcacefffc232d681ec3", "tree": "17c4bf85a15ecf672bdb9d4b13ef561584c500d3", "parents": [ "6e8977429f532de7efb7e5f20b00dfa22d4a7df6" ], "author": { "name": "Nicholas Bishop", "email": "nicholasbishop@google.com", "time": "Mon Dec 08 22:36:00 2025" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Dec 11 18:57:44 2025" }, "message": "sign_uefi: Update handling for presigned crdyboot builds\n\nAs of https://crrev.com/c/7239307, presigned crdyboot files are\ninstalled to `efi/boot/presigned` instead of replacing the unsigned\nfiles. Update the signer code to overwrite the unsigned files if the\npresigned directory is present.\n\nBRANCH\u003dNone\nBUG\u003db:459486913\nTEST\u003dmake runtests\nTEST\u003dscripts/image_signing/sign_official_build.sh recovery \\\nTEST\u003d disk.unsigned tests/devkeys disk.signed\n\nChange-Id: I42418d5fe36218e562a301e279239a05d9c07cb9\nSigned-off-by: Nicholas Bishop \u003cnicholasbishop@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7239189\nReviewed-by: Benjamin Shai \u003cbshai@google.com\u003e\nCommit-Queue: Benjamin Shai \u003cbshai@google.com\u003e\n" }, { "commit": "6e8977429f532de7efb7e5f20b00dfa22d4a7df6", "tree": "9107494808dd044dc478abbab0ed1ee449c75527", "parents": [ "f963a5069755ed15842dd8b9702994fe1034761f" ], "author": { "name": "Grzegorz Bernacki", "email": "bernacki@google.com", "time": "Fri Nov 14 07:53:48 2025" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Dec 11 16:54:27 2025" }, "message": "avb: adjust Makefile for changes in AVB repo\n\nBUG\u003d467883623\nTEST\u003dbuild FW with AVB and boot Android\nBRANCH\u003dmain\n\nCq-Depend: chrome-internal:8836577\nChange-Id: I2ce4c2888e716301cce3c1e9abb891d9beaf4f0d\nSigned-off-by: Grzegorz Bernacki \u003cbernacki@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7246737\nReviewed-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\n" }, { "commit": "f963a5069755ed15842dd8b9702994fe1034761f", "tree": "31a4829a979ed993980b1ba657c8183d9f00005f", "parents": [ "1de7d46170ea1d9dc2c1a2b14e250407c09efa5b" ], "author": { "name": "Ihor Lukianov", "email": "lis05st@gmail.com", "time": "Mon Nov 03 18:03:24 2025" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Wed Dec 10 12:48:06 2025" }, "message": "host/flashrom_drv: refactor flashrom initialization\n\nThis change refactors the flashrom initialization code. Most of the\nfunctions in flashrom_drv.c had the same copy of it, so in this change\nit was moved to a separate function `flashrom_setup`, which handles all\nof the relevant errors in a single place. Labels `err_init` and\n`err_probe` have been removed, as they are no longer required.\n\nBRANCH\u003dmain\nBUG\u003dNone\nTEST\u003dmake USE_FLASHROM\u003d1 runtests\n\nChange-Id: I90d70d53ebc54f717467ff0c4f9ff4a22008c2f9\nSigned-off-by: Ihor Lukianov \u003clis05st@gmail.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7044447\nReviewed-by: Jakub \"Kuba\" Czapiga \u003cczapiga@google.com\u003e\nReviewed-by: Hsuan Ting Chen \u003croccochen@chromium.org\u003e\nCommit-Queue: Jakub \"Kuba\" Czapiga \u003cczapiga@google.com\u003e\n" }, { "commit": "1de7d46170ea1d9dc2c1a2b14e250407c09efa5b", "tree": "6711e2bc05cf7ad944712a46c1a702295767ff03", "parents": [ "ac9e57cffd22eabd9b34430ea535c1d7d2af9575" ], "author": { "name": "Yu-Ping Wu", "email": "yupingso@chromium.org", "time": "Fri Nov 28 08:32:55 2025" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Wed Dec 10 09:26:41 2025" }, "message": "tests/futility/test_update: Dynamically calculate image size\n\nStop hardcoding the image size.\n\nBUG\u003dnone\nTEST\u003dmake runfutiltestscripts\nBRANCH\u003dnone\n\nChange-Id: I796d81c22145faa01fcf9f34a055ad2a3b97267e\nSigned-off-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7206724\nReviewed-by: Jakub \"Kuba\" Czapiga \u003cczapiga@google.com\u003e\n" }, { "commit": "ac9e57cffd22eabd9b34430ea535c1d7d2af9575", "tree": "8a8f6be81d69bccdcfa2fcb0dbf00fb83c75d874", "parents": [ "b3780bbaaced2df344b663aa0d8041ff4f75f3e1" ], "author": { "name": "Yu-Ping Wu", "email": "yupingso@chromium.org", "time": "Thu Nov 27 23:55:03 2025" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Wed Dec 10 09:26:38 2025" }, "message": "tests/futility/run_test_scripts: Filter tests via FUTIL_TEST_SCRIPT\n\nThe run_test_scripts.sh script sequentially runs a list of test scripts.\nThat\u0027s inefficient in situations where developers want to run a single\ntest script only. Therefore, introduce a environment variable\nFUTIL_TEST_SCRIPT to filter the test script file names (excluding the\ndirectory path).\n\nBUG\u003dnone\nTEST\u003dmake FUTIL_TEST_SCRIPT\u003dtest_update runfutiltestscripts\nBRANCH\u003dnone\n\nChange-Id: I80fae6d9ea29746e9dd2d2a7aee44d4897704adb\nSigned-off-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7206722\nReviewed-by: Jakub \"Kuba\" Czapiga \u003cczapiga@google.com\u003e\n" }, { "commit": "b3780bbaaced2df344b663aa0d8041ff4f75f3e1", "tree": "0fbac275e0fd70c75eadc4c63d8a7cbad63898fd", "parents": [ "6b8337fb608b8a4980a917daf1b2d3cf1e026848" ], "author": { "name": "Jakub Czapiga", "email": "czapiga@google.com", "time": "Thu Dec 04 16:28:15 2025" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Mon Dec 08 07:10:15 2025" }, "message": "crossystem: Fix crossystem lock file unlocking\n\ncrossystem was calling flock(\u003cfile\u003e, F_UNLCK) to unlock a file. This is\nnot a correct behavior. Use LOCK_UN instead.\nF_UNLCK \u003d 3 and LOCK_UN \u003d 8. Using F_UNLCK instead is equal to passing\na value ( LOCK_SH | LOCK_EX ). LibC implementations would treat it as\neither LOCK_SH or LOCK_EX and the lock was usually used only in the\ncontext of the same program instance. The OS was removing the lock after\nthe program exited. This what allowed this error to sit unnoticed for\na long time.\nThe issue was introduced in:\ncommit 58efaacd8ad2 (\"crossystem: Add flock to prevent race conditions\")\n\nBRANCH\u003dNone\nBUG\u003db:466079501\nTEST\u003dCQ\nTEST\u003dRead and set crossystem variables\n\nChange-Id: Ie6ef3b4e9cf0516e4092f102b04fc8bef6a3fc82\nSigned-off-by: Jakub Czapiga \u003cczapiga@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7228944\nCommit-Queue: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nReviewed-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\n" }, { "commit": "6b8337fb608b8a4980a917daf1b2d3cf1e026848", "tree": "e0429a17697455f1508805dc7893fb3ac26b27d8", "parents": [ "5d6a647a1f294eda096d3b4d4e65baf2f8e76dfd" ], "author": { "name": "Yu-Ping Wu", "email": "yupingso@chromium.org", "time": "Thu Nov 27 23:54:35 2025" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Dec 04 05:38:30 2025" }, "message": "Add \u0027runfutiltestscripts\u0027 make target\n\nWhen modifying the futility updater, developers often need to modify and\nrun run_test_scripts.sh and nothing else. Therefore, extract it as a\nseparate make target \u0027runfutiltestscripts\u0027 for easier local testing.\n\nBUG\u003dnone\nTEST\u003dmake runfutiltestscripts\nBRANCH\u003dnone\n\nChange-Id: I2ca72dba34aab19697204978e11c6d235bf33868\nSigned-off-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7206721\nReviewed-by: Jakub \"Kuba\" Czapiga \u003cczapiga@google.com\u003e\n" }, { "commit": "5d6a647a1f294eda096d3b4d4e65baf2f8e76dfd", "tree": "b96055174c570c15bc4b8d0c0772e2f2f8c37a82", "parents": [ "d3f2d712c20555db1851b67bce31d1469c1568a3" ], "author": { "name": "Grzegorz Bernacki", "email": "bernacki@google.com", "time": "Thu Nov 13 09:29:04 2025" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Nov 28 17:18:50 2025" }, "message": "tests/vb2_avb_tests.c: add key validation tests\n\nThis commit adds tests cases for AVB key validation callback.\nNew *.avb keys were added to repo, which were created by:\navbtool extract_public_key --key \u003ckey.pem\u003e --output \u003ckey.avb\u003e\n\nBUG\u003db:399607322\nTEST\u003dUSE_AVB\u003d1 make runtests\nTEST\u003dFEATURES\u003dtest emerge-brya vboot_reference\nTEST\u003dcros_workon_make --board\u003dbrya vboot_reference --test\nTEST\u003dcros_run_unit_tests --board brya --packages vboot_reference\nBRANCH\u003dmain\n\nCq-Depend: chromium:7198663\nChange-Id: I6ebad0987fc50b31a5b4a1002edce2c79fae6030\nSigned-off-by: Grzegorz Bernacki \u003cbernacki@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7146233\nCommit-Queue: ChromeOS Auto Retry \u003cchromeos-auto-retry@chromeos-bot.iam.gserviceaccount.com\u003e\nReviewed-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\n" }, { "commit": "d3f2d712c20555db1851b67bce31d1469c1568a3", "tree": "84efb566cb80114cc006f33947d0724d6e66a01d", "parents": [ "67fb9d2b799af11f2c21ed1af2f7298f52948295" ], "author": { "name": "Grzegorz Bernacki", "email": "bernacki@google.com", "time": "Wed Nov 26 11:45:49 2025" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Nov 28 17:18:47 2025" }, "message": "avb: Fix format specifier for debug messages\n\nBUG\u003dnone\nTEST\u003demerge-arm-generic vboot_reference\nBRANCH\u003dmain\n\nCq-Depend: chromium:7198663\nChange-Id: Iec8a1b5ae5010cbda2718be5b414c5035fbbab4a\nSigned-off-by: Grzegorz Bernacki \u003cbernacki@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7207408\nCommit-Queue: ChromeOS Auto Retry \u003cchromeos-auto-retry@chromeos-bot.iam.gserviceaccount.com\u003e\nReviewed-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nReviewed-by: Jakub \"Kuba\" Czapiga \u003cczapiga@google.com\u003e\n" }, { "commit": "67fb9d2b799af11f2c21ed1af2f7298f52948295", "tree": "31ef94887a074b724a061d15a17de1dc1e436258", "parents": [ "4ce2c1a44c95b3bd306e29bcb678c0f88efefa4f" ], "author": { "name": "Patryk Busse", "email": "pbusse@google.com", "time": "Thu Nov 27 16:08:13 2025" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Nov 27 21:14:55 2025" }, "message": "futility: Add missing gscvd.c file to futility_srcs for Soong\n\nThe file was created in separated change but included only\nin Makefile causing the Soong build to fail due to missing\nfutil_valid_gscvd_header definition.\n\nBUG\u003db:464266359\nTEST\u003dmake futility\nBRANCH\u003dnone\n\nChange-Id: Icb3d87d65ab3244ae3d11bf83a8282adb340c677\nSigned-off-by: Patryk Busse \u003cpbusse@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7207419\nCommit-Queue: ChromeOS Auto Retry \u003cchromeos-auto-retry@chromeos-bot.iam.gserviceaccount.com\u003e\nReviewed-by: Jakub \"Kuba\" Czapiga \u003cczapiga@google.com\u003e\n" }, { "commit": "4ce2c1a44c95b3bd306e29bcb678c0f88efefa4f", "tree": "9370e9b9274dc2eb7b50e2962599f53760999162", "parents": [ "3c47ec0a951b375e1944dfdb379a299bb06cbad2" ], "author": { "name": "Patryk Busse", "email": "pbusse@google.com", "time": "Sun Nov 16 10:12:28 2025" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Mon Nov 24 16:03:40 2025" }, "message": "futility: add check-fwid flag to update command\n\nThis flag will verify firmware version to determine if update is\nneeded instead of comparing the entire firmware file.\n\nBUG\u003db:460346565\nBRANCH\u003dNone\nTEST\u003dmanual fw update with up to date image\nTEST\u003dmanual fw update with newer image\nTEST\u003dmanual fw update with emulator\nTEST\u003dmake runtests\n\nSigned-off-by: Patryk Busse \u003cpbusse@google.com\u003e\nChange-Id: I9ca1c3e04064d8dd508e77b73fdc57541e5058d6\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7197959\nReviewed-by: Jakub \"Kuba\" Czapiga \u003cczapiga@google.com\u003e\nReviewed-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\n" }, { "commit": "3c47ec0a951b375e1944dfdb379a299bb06cbad2", "tree": "fad3420d8d63b609f386e14fc125c5023b7ac0cb", "parents": [ "0413878d374ca9ccbb307af0fe720303a8e8f05b" ], "author": { "name": "Karthikeyan Ramasubramanian", "email": "kramasub@google.com", "time": "Tue Nov 11 22:07:48 2025" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Nov 20 17:40:14 2025" }, "message": "firmware/2lib: Move base DTB image into dtbo partition\n\nAs per Android VSR-3.7.4-002, devices launching with Android 10 or\nhigher MUST NOT:\n* Append DTB to the kernel image.\n* Use a separate DTB partition\n\nThe current implementation violates that requirement. Fix the\nimplementation by moving base DTB image into dtbo partition and remove\nany support for dtb partition. On the platform side, this migration can\nbe achieved by building all the device tree blobs into DTBO image.\n\nBUG\u003db:394980221\nBRANCH\u003dnone\nTEST\u003dBuild firmware image and boot to OS in Rauru/Hylia. Ensure that DTB\nimage is used from dtbo partition.\n\nCq-Depend: chromium:7153018\nChange-Id: If1f663bf221999021f15907a17e41bd0a8bc99d6\nSigned-off-by: Karthikeyan Ramasubramanian \u003ckramasub@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7141428\nReviewed-by: Julius Werner \u003cjwerner@chromium.org\u003e\nReviewed-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\n" }, { "commit": "0413878d374ca9ccbb307af0fe720303a8e8f05b", "tree": "49a9d12c6bb88d8a6497b6289bc59b1134fa3de0", "parents": [ "ffab62e169e88a796d4e9efb8026a8474cbee9ea" ], "author": { "name": "Yu-Ping Wu", "email": "yupingso@chromium.org", "time": "Thu Nov 13 09:07:00 2025" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Mon Nov 17 11:42:23 2025" }, "message": "futility: Support RO_GSCVD region for \u0027futility show\u0027\n\nAdd support for printing RO_GSCVD region information for \u0027futility\nshow\u0027.\n\nBUG\u003dnone\nTEST\u003dmake futil -j\nTEST\u003dmake runfutiltests\nBRANCH\u003dnone\n\nChange-Id: Ibf82320e01509a84e07146212e3d30532c8c210b\nSigned-off-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7148928\nCommit-Queue: Jakub \"Kuba\" Czapiga \u003cczapiga@google.com\u003e\nReviewed-by: Jakub \"Kuba\" Czapiga \u003cczapiga@google.com\u003e\n" }, { "commit": "ffab62e169e88a796d4e9efb8026a8474cbee9ea", "tree": "93c77e0fbdfefa79dc3f664477d66df857077295", "parents": [ "6c242361a8675019435cebf7d45e78ae6163269a" ], "author": { "name": "Yu-Ping Wu", "email": "yupingso@chromium.org", "time": "Thu Nov 13 09:05:00 2025" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Mon Nov 17 11:42:21 2025" }, "message": "futility: Add futil_valid_gscvd_header()\n\nExtract the code of validating RO_GSCVD region to\nfutil_valid_gscvd_header(), so that it can be reused with other\nfutility sub-commands such as \u0027futility show\u0027.\n\nBUG\u003dnone\nTEST\u003dmake futil -j\nBRANCH\u003dnone\n\nChange-Id: I268b4ae2f5df59425688bdcfa13aa90ec4295157\nSigned-off-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7148927\nReviewed-by: Jakub \"Kuba\" Czapiga \u003cczapiga@google.com\u003e\nCommit-Queue: Jakub \"Kuba\" Czapiga \u003cczapiga@google.com\u003e\n" }, { "commit": "6c242361a8675019435cebf7d45e78ae6163269a", "tree": "475a44ff747219612e47d462147d945fcb247997", "parents": [ "7a2ba18765eb39b09b692689c9f8d9462c1eaa49" ], "author": { "name": "Nicholas Bishop", "email": "nicholasbishop@google.com", "time": "Wed Nov 12 21:37:54 2025" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Nov 14 16:05:54 2025" }, "message": "sign_uefi: Skip crdyboot signing if already signed\n\nThis change allows a presigned version of crdyboot to be used. If the\nsignature files are present, the crdyboot executables and signatures are\nnot modified. Otherwise, signing occurs as normal.\n\nSee also crrev.com/c/7152547\n\nBRANCH\u003dNone\nBUG\u003db:459486913\nTEST\u003dmake runtests\nTEST\u003dscripts/image_signing/sign_official_build.sh recovery \\\nTEST\u003d disk.unsigned tests/devkeys disk.signed\n\nChange-Id: I212656eb5f88e9269123a6b90aa20259922cab28\nSigned-off-by: Nicholas Bishop \u003cnicholasbishop@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7147484\nReviewed-by: Benjamin Shai \u003cbshai@google.com\u003e\n" }, { "commit": "7a2ba18765eb39b09b692689c9f8d9462c1eaa49", "tree": "e0ec6c9caf0df25842771e1878b594ca630344e2", "parents": [ "5f958f17f4b6ba4c1c70750048f4f82707983574" ], "author": { "name": "Grzegorz Bernacki", "email": "bernacki@google.com", "time": "Fri Oct 17 09:20:06 2025" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Nov 14 11:00:49 2025" }, "message": "2lib: remove partition_number variable\n\nThis variable was not used by depthcharge anymore.\n\nBRANCH\u003dmain\nBUG\u003dnone\nTEST\u003dboot redrix \u0026 unit tests\n\nCq-Depend: chromium:7095397\nChange-Id: Ic80c68cb85dde99699d61c7dda470966cb93ffb0\nSigned-off-by: Grzegorz Bernacki \u003cbernacki@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7093360\nReviewed-by: Julius Werner \u003cjwerner@chromium.org\u003e\n" }, { "commit": "5f958f17f4b6ba4c1c70750048f4f82707983574", "tree": "50518e2b5d7126f4ee37ba7ca78ec3bb743dad1a", "parents": [ "a11ad5ccdeaebb265c0775735a92f322e3b6d676" ], "author": { "name": "Grzegorz Bernacki", "email": "bernacki@google.com", "time": "Thu Oct 16 13:17:49 2025" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Nov 14 11:00:45 2025" }, "message": "2lib: use correct structure for guid\n\nThis commit removes also GetCurrentKernelUniqueGuid(). It was used\nonly in one place and can be easily replaced with memcpy().\n\nBRANCH\u003dmain\nBUG\u003dnone\nTEST\u003dboot redrix \u0026 unit tests\n\nCq-Depend: chromium:7095396\nChange-Id: I23f1d9416fbb414b468aade79c03d95afa6705c0\nSigned-off-by: Grzegorz Bernacki \u003cbernacki@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7093359\nReviewed-by: Julius Werner \u003cjwerner@chromium.org\u003e\n" }, { "commit": "a11ad5ccdeaebb265c0775735a92f322e3b6d676", "tree": "ed06a91d8344c166aae60ce44c6a8c6333b708b5", "parents": [ "f290e75b74419a8f20972b2891b9ff040d84f179" ], "author": { "name": "Grzegorz Bernacki", "email": "bernacki@google.com", "time": "Thu Nov 06 14:05:34 2025" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Nov 14 09:45:46 2025" }, "message": "lib20: remove unused code\n\nThis commit performs cleanup and refactoring of code related to lib20.\nSpecifically, the changes include:\n- Removal of unused code from the lib20 with associated tests.\n- Moving valid keyblock hash test to a new, dedicated file.\n- Renaming of `vb20_rsa_padding_tests.c` and `vb20_verify_fw.c`\n to remove the stale `vb20` prefix\n\nBRANCH\u003dmain\nBUG\u003db:124141368\nTEST\u003dbuild \u0026 unit tests\n\nChange-Id: Ib10289999aca5862712f07064e449443550ebf92\nSigned-off-by: Grzegorz Bernacki \u003cbernacki@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7124844\nReviewed-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nReviewed-by: Jakub \"Kuba\" Czapiga \u003cczapiga@google.com\u003e\n" }, { "commit": "f290e75b74419a8f20972b2891b9ff040d84f179", "tree": "12fed3c2d749c0af863eb830eed536bedd1b1b1d", "parents": [ "24e62a619e81d3f902bf7589eadbc45218edb53f" ], "author": { "name": "Yu-Ping Wu", "email": "yupingso@chromium.org", "time": "Fri Nov 07 08:11:39 2025" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Nov 14 04:45:52 2025" }, "message": "futility: Utilize identity.csv for remote device\n\nFor remote flashing, currently futility always relies on FRID matching\nfor model detection. That\u0027s inaccurate, because an archive may contain\nmultiple images with same FRID (but with different versions).\n\nWith CL:6764273, the support for identity.csv allows us to accurately\nidentify the model from both FRID and SKU ID. Here we extend that\nfeature to remote devices as well. For remote flashing, if identity.csv\nexists in the archive, and both --frid and --sku-id are specified, then\nfutility will be able to identify the correct firmware image, even if\nthe existing system image is completely corrupted.\n\nBUG\u003db:452553577\nTEST\u003dmake futil\nTEST\u003dmake runfutiltests\nBRANCH\u003dnone\n\nChange-Id: I1d92262408819e16678944b9857dd79c76122ad6\nSigned-off-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7129822\nReviewed-by: Jakub \"Kuba\" Czapiga \u003cczapiga@google.com\u003e\n" }, { "commit": "24e62a619e81d3f902bf7589eadbc45218edb53f", "tree": "3fae6f7ee68d0d607825d812f4ac18fc2e5b5153", "parents": [ "f80af2766ecbfedf02261abd97c49b405fd4caf8" ], "author": { "name": "Yu-Ping Wu", "email": "yupingso@chromium.org", "time": "Fri Nov 07 08:11:02 2025" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Nov 14 04:45:50 2025" }, "message": "futility: Add --frid and --sku-id arguments\n\nThe purpose of identity.csv is to allow manifest key lookup in\nenvironments without crosid (such as flashing remotely via servo). For\nexample, when the system firmware is completely corrupted and we want to\nflash it via servo, currently there is no direct way to specify the\nimage to use in an archive. People would need to manually look up the\nfirmware manifest key (for example from ChromeOS configuration system)\nand then pass `--model\u003dMANIFEST_KEY` to futility.\n\nTo simplify the process, add --frid and --sku-id arguments. When passed,\nthey will override the system FRID and SKU ID obtained from the system.\nTogether with identity.csv, futility can use FRID and SKU ID to look up\nthe manifest key, and then select the correct firmware image for the\ngiven FRID and SKU ID.\n\nBUG\u003db:452553577\nTEST\u003dmake futil\nTEST\u003dmake runfutiltests\nBRANCH\u003dnone\n\nChange-Id: I374409637792ad9001db2c162e01f02ac623aa14\nSigned-off-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7129821\nReviewed-by: Jakub \"Kuba\" Czapiga \u003cczapiga@google.com\u003e\n" }, { "commit": "f80af2766ecbfedf02261abd97c49b405fd4caf8", "tree": "5f74f8758a1455e093bcd683d39f2562d872c128", "parents": [ "34431212e1e96c581be56902a385c783faf3ebe6" ], "author": { "name": "Randall Spangler", "email": "rspangler@chromium.org", "time": "Thu Apr 13 21:27:01 2017" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Nov 13 07:16:32 2025" }, "message": "firmware: GBB flag to ignore rollback applies to kernel too\n\nCurrently, VB2_GBB_FLAG_DISABLE_FW_ROLLBACK_CHECK applies only to the\nfirmware rollback check. It\u0027d be convenient if it applied to the\nkernel rollback check as well.\n\nBUG\u003db:37320328\nBRANCH\u003dnone\nTEST\u003dmake -j runtests\n\nChange-Id: I7c3bbe5b6f7086d55e84728dffaa169b5d406d9a\nSigned-off-by: Randall Spangler \u003crspangler@chromium.org\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/477451\nReviewed-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nReviewed-by: Julius Werner \u003cjwerner@chromium.org\u003e\nCommit-Queue: Grzegorz Bernacki \u003cbernacki@google.com\u003e\nTested-by: Grzegorz Bernacki \u003cbernacki@google.com\u003e\n" }, { "commit": "34431212e1e96c581be56902a385c783faf3ebe6", "tree": "ce2715c5d5ab884e36056641d0277944c108dec1", "parents": [ "a086faa63858ea0f15265f00f246abefa404fe93" ], "author": { "name": "Yu-Ping Wu", "email": "yupingso@chromium.org", "time": "Fri Nov 07 06:48:24 2025" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Tue Nov 11 08:14:14 2025" }, "message": "futility: Update --model help text\n\nThe `--model` argument is not only for debugging and testing purposes.\nFor example, in Android desktop we will use --model\u003dPRODUCT to identify\nthe firmware image to use.\n\nMove the help text out of the \"Debugging and testing options\" section.\nAlso elaborate on the usage of remote flashing (via servo).\n\nBUG\u003dnone\nTEST\u003dmake futil\nBRANCH\u003dnone\n\nChange-Id: I817ec087104132095f8c9de2a7982f043922fbcb\nSigned-off-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7129820\nReviewed-by: Hsuan Ting Chen \u003croccochen@chromium.org\u003e\n" }, { "commit": "a086faa63858ea0f15265f00f246abefa404fe93", "tree": "0bb0f4045d1048d58cf43df9ad960f21632febaf", "parents": [ "f90a1c7ab168d614ea7a962bae2202c7dafdd45e" ], "author": { "name": "Yidi Lin", "email": "yidilin@google.com", "time": "Fri Sep 19 05:20:00 2025" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Oct 31 11:14:07 2025" }, "message": "vboot: Rename vb2ex_get_android_bootmode to vb2ex_handle_android_misc_partition\n\nRepurpose `vb2ex_get_android_bootmode` to broaden its interaction with\nthe misc partition beyond merely retrieving the boot mode. Consequently,\nrename this function to `vb2ex_handle_android_misc_partition` to\naccurately reflect its comprehensive functionality.\n\nBRANCH\u003dnone\nBUG\u003db:438666196\nTEST\u003demerge-rauru libpayload depthcharge\n\nCq-Depend: chromium:6979175\nChange-Id: I710bd8115b21477c3128e654f5c0f55e6cb64416\nSigned-off-by: Yidi Lin \u003cyidilin@google.com\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/6979705\nReviewed-by: Jeff Xu \u003cjeffxu@google.com\u003e\nReviewed-by: Julius Werner \u003cjwerner@chromium.org\u003e\nReviewed-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\n" }, { "commit": "f90a1c7ab168d614ea7a962bae2202c7dafdd45e", "tree": "6e40b6948094d94f1f4c8d9ef1fa68a394c4ed47", "parents": [ "ed024e5cc5a7fd187c638dba3a20ab242d2183e1" ], "author": { "name": "Yu-Ping Wu", "email": "yupingso@chromium.org", "time": "Thu Oct 23 00:58:15 2025" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Oct 23 04:01:27 2025" }, "message": "tests/vb2_host_flashrom_tests: Fix missing \u0027\\0\u0027 for strncpy call\n\nReplace strncpy call with snprintf to auto-append the terminating null\ncharacter.\n\nBUG\u003dnone\nTEST\u003dmake run2tests\nBRANCH\u003dnone\n\nChange-Id: I56d86b66e3d4894b353059e3ed21762b79b63058\nSigned-off-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/7077335\nCommit-Queue: Hsuan Ting Chen \u003croccochen@chromium.org\u003e\nReviewed-by: Hsuan Ting Chen \u003croccochen@chromium.org\u003e\n" }, { "commit": "ed024e5cc5a7fd187c638dba3a20ab242d2183e1", "tree": "c29a360486742bc2c8e4f4cf558651246287b33b", "parents": [ "9cce699aa655796e445d51f06bdc658f2664f0ca" ], "author": { "name": "Hsuan Ting Chen", "email": "roccochen@chromium.org", "time": "Thu Sep 25 06:53:17 2025" }, "committer": { "name": "Chromeos LUCI", "email": "chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Tue Oct 21 06:04:49 2025" }, "message": "Makefile: fix runtests fails when USE_FLASHROM\u003d0\n\nDisable several flashrom-dependent futility tests when building with\nUSE_FLASHROM\u003d0 to allow `make runtests` to pass. The following tests are\nnow skipped in this configuration:\n* test_misc\n* test_updater_utils\n* test_updater_utils_servo\n* test_flash_util.sh\n* test_gbb_utility.sh\n* test_update.sh\n* test_read.sh\n\nBUG\u003db:447274416\nBRANCH\u003dnone\nTEST\u003dmake clean \u0026\u0026 USE_FLASHROM\u003d0 make runtests\nTEST\u003dmake clean \u0026\u0026 USE_FLASHROM\u003d1 make runtests\n\nChange-Id: I6d366182713b2152d1dbaf179986be5b8f5ec079\nSigned-off-by: Hsuan Ting Chen \u003croccochen@chromium.org\u003e\nReviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/6982902\nReviewed-by: Yu-Ping Wu \u003cyupingso@chromium.org\u003e\n" } ], "next": "9cce699aa655796e445d51f06bdc658f2664f0ca" }