Infinite loop in TA would cause system crashed. about optee_os HOT 4 CLOSED

Hi,

We have no immediate plans to handle this. An endless loop in a TA is a DOS attack and TAs are supposed to be signed with a key that you can trust. Terminating a TA before it's done can be dangerous as it could be part of an attack from normal world.

Regards,
Jens

from optee_os.

Hi,

Yes, you are right. But as I know that any one can get the UUID of TA if he can see the name its stored. It is possible to design a fake TA, and replace the real one. To avoid it, the sign should be verified before the TA loaded. Do you have plan to added this function?

Best Regards,

from optee_os.

Hi,

That question is answered here. It's "planned", but there is no date when this will happen.

// Regards Joakim

from optee_os.

OK, I got that. Thanks.

from optee_os.