[PATCH v2 0/9] drivers: bus: add RISAB dump debug driver

From: Gatien Chevallier

Date: Thu Feb 12 2026 - 05:14:54 EST


The RISAB peripheral is part of the Resource Isolation Framework (RIF)
and is used to protect internal RAMs.

Memory firewalls configuration on stm32mp2x platforms can be quite
complex. The RIF configuration is done by the Trusted Domain CID
(TDCID) that is running in secure priviledged mode. However, the
configuration can be read in any mode.

In order to facilitate the memory firewall configuration (check if
correctly applied, what rights for which range, etc...), add a RISAB
configuration dump driver that is embedded only when CONFIG_DEBUGFS
is set. This driver creates a debugfs entry to dump the whole RISAB
configuration in a readable format [1], as for the RIFSC.

[1]: https://wiki.st.com/stm32mpu/wiki/How_to_analyze_IAC_%26_SERC_errors#RISAB_dump

Signed-off-by: Gatien Chevallier <gatien.chevallier@xxxxxxxxxxx>
---
Changes in v2:
- Move the RISAB driver in the bus directory to group it with other
STM32 firewall drivers and framework
- Change all RISAB node names to firewall (not official node name
looking at DT specs but seems generic enough)
- Change how the RISAB driver build the RISAB file entry name in the
stm32_firewall debugfs directory
- Elaborate what a RISAB is in commit messages/dt-bindings file
- Add more entries to maintaines stm32 firewall files
- Separate MAINTAINERS modifications in a single commit with added
entries
- Introduce CONFIG_STM32_FIREWALL_DEBUG switch for stm32 firewall
debug features
- Rework tags for patch 2
- Link to v1: https://lore.kernel.org/r/20260209-stm32_risab-v1-0-ef0b2b6a7e0a@xxxxxxxxxxx

---
Gatien Chevallier (9):
dt-bindings: bus: document the RISAB firewall peripheral
bus: add RISAB dump debug driver
bus: rifsc: use new CONFIG_STM32_FIREWALL_DEBUG switch
arm64: dts: st: add RISAB1/2/3/4/5/6 nodes to stm32mp251.dtsi
arm64: dts: st: add RISAB1/2/3/4/5/6 nodes to stm32mp231.dtsi
arm64: dts: st: enable all RISAB instances on the stm32mp257f-ev1 board
arm64: dts: st: enable all RISAB instances on the stm32mp257f-dk board
arm64: dts: st: enable all RISAB instances on the stm32mp235f-dk board
MAINTAINERS: add entries to maintained stm32 firewall files

.../bindings/bus/st,stm32mp25-risab.yaml | 75 +++++
MAINTAINERS | 4 +
arch/arm64/boot/dts/st/stm32mp231.dtsi | 48 +++
arch/arm64/boot/dts/st/stm32mp235f-dk.dts | 24 ++
arch/arm64/boot/dts/st/stm32mp251.dtsi | 48 +++
arch/arm64/boot/dts/st/stm32mp257f-dk.dts | 24 ++
arch/arm64/boot/dts/st/stm32mp257f-ev1.dts | 24 ++
drivers/bus/Kconfig | 9 +
drivers/bus/Makefile | 1 +
drivers/bus/stm32_rifsc.c | 48 ++-
drivers/bus/stm32_risab.c | 336 +++++++++++++++++++++
11 files changed, 616 insertions(+), 25 deletions(-)
---
base-commit: 05f7e89ab9731565d8a62e3b5d1ec206485eeb0b
change-id: 20260209-stm32_risab-4fbcdb834c43

Best regards,
--
Gatien Chevallier <gatien.chevallier@xxxxxxxxxxx>