RE: SecureFault on NRF9160 after upgrading to HW model v2 and NCS 2.9.0

Susheel Nuguru — Thu, 27 Feb 2025 07:54:01 GMT

Yes, unfortunately you might seem to need to compromise with 13.3. It seems like using later compiler versions might have exhausted the stack size of some of the thread or buffer which was already pretty close to being full. We will discover them when we move to newer version and most likely increase the stack sizes accordingly.

RE: SecureFault on NRF9160 after upgrading to HW model v2 and NCS 2.9.0

Martin Vitek — Wed, 26 Feb 2025 14:39:42 GMT

Yes, application builded with nrf sdk v2.9.0 is working fine. Unfortunately bundled GCC 12.2 is quite old for me, because I'm using new C++23/26 features.

I did some debugging:

- GCC 14.1 with binutils 2.43 from Fedora - working build, secure fault

- GCC 14.1 with binutils 2.44 from Fedora - build failing

[134/138] Linking C executable bin/tfm_s.axf
FAILED: bin/tfm_s.axf 
: && /usr/bin/arm-none-eabi-gcc -mcpu=cortex-m33+nofp -O2 -g -DNDEBUG -mcpu=cortex-m33+nofp --entry=Reset_Handler -specs=nano.specs -specs=nosys.specs -Wl,-check-sections -Wl,-fatal-warnings -Wl,--gc-sections -Wl,--no-wchar-size-warning -Wl,--print-memory-usage -Wl,-Map=/home/admin/Stažené/cm01test_2/build_fedora/tfm/bin/tfm_s.map -mfloat-abi=soft -Wl,--cmse-implib,--out-implib=/home/admin/Stažené/cm01test_2/build_fedora/tfm/secure_fw/s_veneers.o -T /home/admin/Stažené/cm01test_2/build_fedora/tfm/platform/target/nrf91/nrf_common/CMakeFiles/tfm_s_scatter.dir/./__/__/__/__/common/gcc/tfm_common_s.ld secure_fw/CMakeFiles/tfm_s.dir/partitions/ns_agent_tz/psa_api_veneers_v80m.o secure_fw/CMakeFiles/tfm_s.dir/__/platform/ext/target/nordic_nrf/common/core/startup.o secure_fw/CMakeFiles/tfm_s.dir/__/platform/ext/target/nordic_nrf/common/core/startup_nrf91.o secure_fw/CMakeFiles/tfm_s.dir/__/platform/ext/common/faults.o secure_fw/CMakeFiles/tfm_s.dir/__/generated/secure_fw/partitions/crypto/auto_generated/load_info_tfm_crypto.o secure_fw/CMakeFiles/tfm_s.dir/__/generated/secure_fw/partitions/platform/auto_generated/load_info_tfm_platform.o secure_fw/CMakeFiles/tfm_s.dir/partitions/ns_agent_tz/load_info_ns_agent_tz.o secure_fw/CMakeFiles/tfm_s.dir/__/platform/ext/common/syscalls_stub.o -o bin/tfm_s.axf  platform/libplatform_s.a  secure_fw/partitions/lib/runtime/libtfm_sprt.a  secure_fw/spm/libtfm_spm.a  secure_fw/partitions/crypto/libtfm_psa_rot_partition_crypto.a  platform/libplatform_crypto_keys.a  secure_fw/partitions/crypto/mbedcrypto/nrf_security_src/libcrypto_service_mbedcrypto.a  secure_fw/partitions/platform/libtfm_psa_rot_partition_platform.a  secure_fw/partitions/lib/runtime/libtfm_sp_log.a  secure_fw/partitions/crypto/mbedcrypto/nrf_security_src/libmbedcrypto_base.a  secure_fw/partitions/crypto/mbedcrypto/nrf_security_src/core/nrf_oberon/liboberon_psa_core.a  secure_fw/partitions/crypto/mbedcrypto/nrf_security_src/libnrf_security_utils.a  secure_fw/partitions/crypto/mbedcrypto/nrf_security_src/drivers/nrf_oberon/liboberon_psa_driver.a  /home/admin/Repos/ncs/v2.9.0/nrfxlib/crypto/nrf_oberon/lib/cortex-m33/soft-float/liboberon_mbedtls_3.0.15.a  platform/libplatform_s.a  secure_fw/partitions/lib/runtime/libtfm_sprt.a  secure_fw/spm/libtfm_spm.a  secure_fw/partitions/crypto/libtfm_psa_rot_partition_crypto.a  platform/libplatform_crypto_keys.a  secure_fw/partitions/crypto/mbedcrypto/nrf_security_src/libcrypto_service_mbedcrypto.a  secure_fw/partitions/platform/libtfm_psa_rot_partition_platform.a  secure_fw/partitions/lib/runtime/libtfm_sp_log.a  secure_fw/partitions/crypto/mbedcrypto/nrf_security_src/libmbedcrypto_base.a  secure_fw/partitions/crypto/mbedcrypto/nrf_security_src/core/nrf_oberon/liboberon_psa_core.a  secure_fw/partitions/crypto/mbedcrypto/nrf_security_src/libnrf_security_utils.a  secure_fw/partitions/crypto/mbedcrypto/nrf_security_src/drivers/nrf_oberon/liboberon_psa_driver.a  /home/admin/Repos/ncs/v2.9.0/nrfxlib/crypto/nrf_oberon/lib/cortex-m33/soft-float/liboberon_mbedtls_3.0.15.a  platform/libplatform_s.a  secure_fw/partitions/lib/runtime/libtfm_sprt.a  secure_fw/spm/libtfm_spm.a  secure_fw/partitions/crypto/libtfm_psa_rot_partition_crypto.a  platform/libplatform_crypto_keys.a  secure_fw/partitions/crypto/mbedcrypto/nrf_security_src/libcrypto_service_mbedcrypto.a  secure_fw/partitions/platform/libtfm_psa_rot_partition_platform.a  secure_fw/partitions/lib/runtime/libtfm_sp_log.a  secure_fw/partitions/crypto/mbedcrypto/nrf_security_src/libmbedcrypto_base.a  secure_fw/partitions/crypto/mbedcrypto/nrf_security_src/core/nrf_oberon/liboberon_psa_core.a  secure_fw/partitions/crypto/mbedcrypto/nrf_security_src/libnrf_security_utils.a  secure_fw/partitions/crypto/mbedcrypto/nrf_security_src/drivers/nrf_oberon/liboberon_psa_driver.a  /home/admin/Repos/ncs/v2.9.0/nrfxlib/crypto/nrf_oberon/lib/cortex-m33/soft-float/liboberon_mbedtls_3.0.15.a  /home/admin/Repos/ncs/v2.9.0/nrfxlib/crypto/nrf_cc310_platform/lib/cortex-m33/soft-float/no-interrupts/libnrf_cc310_platform_0.9.19.a  -lc  /home/admin/Repos/ncs/v2.9.0/nrfxlib/crypto/nrf_oberon/lib/cortex-m33/soft-float/liboberon_3.0.15.a && :
/usr/lib/gcc/arm-none-eabi/14.1.0/../../../../arm-none-eabi/bin/ld: /usr/lib/gcc/arm-none-eabi/14.1.0/thumb/v8-m.main/nofp/libgcc.a(cmse_nonsecure_call.o)(__gnu_cmse_nonsecure_call): Unknown destination type (ARM/Thumb) in platform/libplatform_s.a(ns_fault_service.o)
platform/libplatform_s.a(ns_fault_service.o): in function `call_ns_callback':
/home/admin/Repos/ncs/v2.9.0/nrf/modules/trusted-firmware-m/tfm_boards/common/ns_fault_service.c:139:(.text.call_ns_callback+0xc8): dangerous relocation: unsupported relocation
Memory region         Used Size  Region Size  %age Used
           FLASH:       31996 B        32 KB     97.64%
             RAM:       14560 B        32 KB     44.43%
collect2: error: ld returned 1 exit status
ninja: build stopped: subcommand failed.
FAILED: modules/trusted-firmware-m/tfm-prefix/src/tfm-stamp/tfm-build tfm/bin/tfm_s.elf tfm/bin/tfm_s.bin tfm/bin/tfm_s.hex tfm/bin/tfm_s_signed.bin tfm/bin/tfm_s_ns_signed.bin tfm/api_ns/interface/lib/s_veneers.o tfm/api_ns/interface/src/tfm_attest_api.c tfm/api_ns/interface/src/tfm_crypto_api.c tfm/api_ns/interface/src/tfm_fwu_api.c tfm/api_ns/interface/src/tfm_its_api.c tfm/api_ns/interface/src/tfm_platform_api.c tfm/api_ns/interface/src/tfm_ps_api.c tfm/api_ns/interface/src/tfm_tz_psa_ns_api.c tfm/api_ns/interface/src/tfm_ioctl_core_ns_api.c /home/admin/Stažené/cm01test_2/build_fedora/modules/trusted-firmware-m/tfm-prefix/src/tfm-stamp/tfm-build /home/admin/Stažené/cm01test_2/build_fedora/tfm/bin/tfm_s.elf /home/admin/Stažené/cm01test_2/build_fedora/tfm/bin/tfm_s.bin /home/admin/Stažené/cm01test_2/build_fedora/tfm/bin/tfm_s.hex /home/admin/Stažené/cm01test_2/build_fedora/tfm/bin/tfm_s_signed.bin /home/admin/Stažené/cm01test_2/build_fedora/tfm/bin/tfm_s_ns_signed.bin /home/admin/Stažené/cm01test_2/build_fedora/tfm/api_ns/interface/lib/s_veneers.o /home/admin/Stažené/cm01test_2/build_fedora/tfm/api_ns/interface/src/tfm_attest_api.c /home/admin/Stažené/cm01test_2/build_fedora/tfm/api_ns/interface/src/tfm_crypto_api.c /home/admin/Stažené/cm01test_2/build_fedora/tfm/api_ns/interface/src/tfm_fwu_api.c /home/admin/Stažené/cm01test_2/build_fedora/tfm/api_ns/interface/src/tfm_its_api.c /home/admin/Stažené/cm01test_2/build_fedora/tfm/api_ns/interface/src/tfm_platform_api.c /home/admin/Stažené/cm01test_2/build_fedora/tfm/api_ns/interface/src/tfm_ps_api.c /home/admin/Stažené/cm01test_2/build_fedora/tfm/api_ns/interface/src/tfm_tz_psa_ns_api.c /home/admin/Stažené/cm01test_2/build_fedora/tfm/api_ns/interface/src/tfm_ioctl_core_ns_api.c 
cd /home/admin/Stažené/cm01test_2/build_fedora/tfm && /usr/bin/cmake --build .
ninja: build stopped: subcommand failed.

- GCC 14.2.1 with binutils 2.43.1 from ARM - working build, secure fault

- GCC 13.3.1 with binutils 2.42 from ARM - working build, working app

- GCC 12.3.1 with binutils 2.40 from ARM - working build, working app

- GCC 14.2.1 with binutils 2.42 from ARM - working build, secure fault

For me now, using GCC 13.3 from ARM seems to be a solution.

RE: SecureFault on NRF9160 after upgrading to HW model v2 and NCS 2.9.0

Susheel Nuguru — Mon, 17 Feb 2025 16:09:27 GMT

wait, seems like you are running this in linux with tools outside the nrf connect sdk.

I used windows with tools that came with nrf connect sdk v2.9.0

If you are testing this outside the toolbox that we recommend for our sdk, then I cannot test all those combinations. Please try to install our sdk and run your example with our toolchain that comes with it.

RE: SecureFault on NRF9160 after upgrading to HW model v2 and NCS 2.9.0

Susheel Nuguru — Mon, 17 Feb 2025 16:07:50 GMT

Just ran your project at my end and I see no assert. The main is running for a while in debugger and without debugger quite fine