Sync ulitebox to latest main by jaybosamiya-ms · Pull Request #1301 · microsoft/litebox

Jay Bosamiya (Microsoft) (jaybosamiya-ms) · 2026-09-05T00:31:20Z

This PR resyncs ulitebox to recent changes in main, fixing conflicts, as well as fixing up code that needs updates due to recent changes on main. Last such sync was #1074.

Pre-set the ACCESSED and DIRTY flags when creating page table entries, matching Linux’s `_KERNPG_TABLE` behavior. This avoids atomic read-modify-write operations by the CPU page-table walker on first access. Co-authored-by: Claude <noreply@anthropic.com>

This PR adds supports for generating identity signing key (IDK_S) to the OP-TEE shim. A new function, `generate_identity_signing_key`, generates an IDK_S key pair based on the platform's CSPRNG and writes the public portion of it to the VTL0-side buffer. Currently, it generates and returns an uncompressed SEC1 P-384 public key. --------- Co-authored-by: Sangho Lee <sanghle@microsoft.com>

This PR merges some operations to use a single `Handle` enum, rather than do them individually. This simplifies the `Backend` interface and also allows for supporting `chmod` of `/` (for example), which is needed as more backends move to the new design.

This PR switches our in-memory filesystem to the new core file system design (see #887). Concretely, it adds a `InMem` backend, migrates all old usage of `in_mem::FileSystem` to a resolver-backed one to use the new `InMem` backend, and then removes the old `in_mem::FileSystem`. It also revamps the in-mem backend initialization design, moving away from the ugly "temporarily change user and do operations" to an actual controlled initialization, which reduces the chances of footguns, and also makes future improvements easier :)

Require search/read perms on target/parents depending on situation

This PR separates the HEKI/HVCI features from `litebox_platform_lvbs`. It introduces a `litebox_service_heki` crate which hosts all HEKI/HVCI features (algorithms). This crate and the runner rely on `Vtl0Gate`, `Vtl0PrivilegedWrite`, and `Vtl1Gate` abstraction concretized by `litebox_platform_lvbs` to gate VTL0 interaction and self-protect VTL1. --------- Co-authored-by: Sangho Lee <sanghle@microsoft.com>

This PR fixes handling of OP-TEE `ldelf` segment padding. `ldelf` can place paddings (unmapped/free pages) before and after a segment. Previously, we assumed that the paddings of different segments are disjoint, but they are not. Also, since `ldelf` is unaware of the syscall trampoline, we should ignore a trampoline page when we deal with paddings. --------- Co-authored-by: Sangho Lee <sanghle@microsoft.com>

Fix Python runner tests failing with: `ModuleNotFoundError: No module named 'encodings'` `rust-cache` removes staged files while preserving empty directory structures under `target/tmp`. The staging logic previously treated an existing destination directory as complete and skipped copying its contents. Add a cache-excluded completion marker after each Python directory is staged. Missing markers now trigger a fresh copy, covering empty, partial, and interrupted staging directories.

By storing a tiny bit of data, we don't need to bother grabbing a lock before we know which subsystem an FD belongs to when iterating, and can selectively only grab locks when pointing at the correct subsystem.

This PR switches our 9p filesystem to the new core file system design (see #887). Like prior migrations, it adds a new backend, migrates all old usages to a resolver-backed one to use the new backend, and then removes the old `FileSystem` object. Additionally, as a drive-by-fix, the old `read_dir`'s check reports every entry as a regular file (because it looked at `e.typ` rather than `e.qid.typ`); the new backend fixes this.

This PR fixes some rare deadlocks that occur on Windows. Specifically, a still-running thread races with process teardown, which on Windows can in rare cases get stuck. Doing a `join` fixes this. It also helps surface panics _if_ they occur on the thread.

The existing implementation of `box_new_zeroed` was unnecessarily complex. This PR simplifies it. Co-authored-by: Leon Schuermann <t-leonsc@microsoft.com>

This PR makes the OP-TEE shim's mmap allocate virtual addresses (VAs) from low to high addresses. OP-TEE allocates userspace VAs bottom-up, whereas LiteBox allocates them top-down. This mismatch can lead to incompatibilities (e.g., padding management). --------- Co-authored-by: Sangho Lee <sanghle@microsoft.com>

Fixes #1159: replace independently atomic resource-limit fields with an `RwLock`-protected array.

Fixes #1171: take the `raw_descriptor_store` write lock once in `sys_pipe2` and hold it across both inserts and the rollback, so the writer's slot cannot be recycled.

This PR fixes forced delivery of a signal. Two issues fixed: 1. `handle_exception_request` covers `SIGFPE`, `SIGTRAP`, and `SIGILL`, but `force_signal_with_info` asserts the signal is `SIGKILL` or `SIGSEGV`. 2. `siginfo_exception` is used to return `SigInfo` with a fixed code (`SI_KERNEL`), ignoring other codes like `FPE_INTDIV` and `ILL_ILLOPN`. --------- Co-authored-by: Sangho Lee <sanghle@microsoft.com>

Move the TA UUID-to-binary map out of individual shim instances so TA binaries can be registered once and reused across instances. This global map is required to support Dyanamically Loading TAs and using them across sessions. Protect the map with a spin-based RwLock and expose shim methods for storing and retrieving TA binaries. Register the LVBS runner's embedded TA during BSP initialization and resolve new TA instances through the shared map. --------- Signed-off-by: Praveen K Paladugu <prapal@linux.microsoft.com>

This PR pins GitHub Actions to full-length commit SHAs and adds a 7 day cooldown to Dependabot configuration for GitHub Actions. See more detail at https://aka.ms/action-pinning.

Update `actions/checkout` from 6.1.0 to 7.0.1, `actions/setup-node` from 6.5.0 to 7.0.0, `actions/cache` from 5.1.0 to 6.1.0 Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Avoid panicking during initialization when an embedded TA binary is an empty placeholder. Fixes: e33f6ff: share TA binaries through a global UUID map Signed-off-by: Praveen K Paladugu <prapal@linux.microsoft.com>

This PR removes the old layered file system, which had to deal with two different semantics with non-trivial complexity, instead to an overlay-based file system. This is aided by work I'd done to set up the ability to mount things (via the composer, #995), as well as a backend trait more amenable to the necessary composition (`Backend`, #887). With this PR, the last of the remaining layered file systems are removed.

This PR fixes the out-of-memory (OOM) handling of page-sized memory allocation. Currently, LiteBox's allocator panics when its page-sized memory allocation fails. This prevents us from using fallible APIs like `try_reserve` which expect the allocator reports OOM by returning `null`. Co-authored-by: Sangho Lee <sanghle@microsoft.com>

This PR mechanically removes the legacy `FileSystem` trait, so that everything is now based on the new `Backend`-based interface (#887). The relevant north interface now sits as inherent methods of `Resolver`.

This PR switches the file system resolver to explicit `Context`s, so that the underlying file system(s) and the context that they are used in are separated. Essentially, this means that nothing within the file system is itself aware of CWD (current working dir) or acting user now, and the `Context` object explicitly carries this. This means that the Linux shim no longer needs to maintain its own `cwd: String` field and manipulation of it, allowing resolution + permission decisions to live in one place. Along with this, I also updated the in-mem backend to use the resolver context rather than maintain its own user management, closing out yet another place of unnecessary duplication and potential inconsistency. Finally, as a drive-by fix: `getcwd` no longer returns a trailing `/`, making it more consistent with Linux.

…ns group (#1243) Update `taiki-e/install-action` from 2.86.3 to 2.86.5 Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

This PR prevents the exception fixup path from misclassifying asynchronous faults as memory faults. Currently, an asynchronous signal delivered during exception fixup execution is handled as a memory fault, causing `memcpy_fallible` to abort and the signal to be lost. --------- Co-authored-by: Sangho Lee <sanghle@microsoft.com>

When running on forks, the auth tokens do not allow the CI to put the normal automated semver comment, which makes it hard to keep track of when something actually might tweak semver behavior for PRs from a fork. This PR changes it so that when something is semver-changing, it requires a comment (which it gives precisely the comment to copy-paste into place) so actually succeed on a fork.

This PR uses `Arc` reference counters for LVBS/OP-TEE page tables to safely share them across cores. In particular, it makes the page-table lifetime/ownership explicit rather than relies on session-level serialization. --------- Co-authored-by: Sangho Lee <sanghle@microsoft.com>

Fix #1170: keep FD allocation and exact replacement atomic under the raw descriptor table lock.

The old code assumed that `rsp` is restored to `host_sp` and then read thread context via `*rsp` to `rcx`, but `rsp` is actually assigned to `host_sp - EXCEPTION_RECORD`. This PR fixes it by directly assigning `*host_sp` to `rcx`.

…1257) This PR enables direct memory copy between VTL0 (normal world) and VTL1 (secure world) userspace. Currently, we should use in-VTL1-kernel (in-LiteBox) bounce buffers to copy data between these two foreign memory domains regardless of whether the kernel/LiteBox checks the content. This results in pure time delay and memory pressure. Note that this direct memory copy does not affect LiteBox's memory safety because both source and destination are not Rust (kernel) memory. --------- Co-authored-by: Sangho Lee <sanghle@microsoft.com>

Fix #1172: hold the descriptor-table write lock across both socketpair fd insertions and rollback.

Store directory positions as shared entry metadata so duplicated descriptors share `getdents64` and `lseek` updates. Add a C regression test that runs on both host Linux and LiteBox. Fix #1262

) This PR lets LiteBox/LVBS secure kernel directly copy data between normal-world shared memory and TA memory without relying on kernel-owned bounce buffers. It does not harm our security guarantee because source and destination addresses as well as their data sizes are tightly checked. It still ensures that TAs never directly access normal-world memory. --------- Co-authored-by: Sangho Lee <sanghle@microsoft.com>

Move clone stack validation before child TID allocation and `CLONE_PARENT_SETTID` publication. This prevents an invalid `clone3` call from exposing a TID for a child that was never created. Fixes #1266

This PR fixes a race in TA classification by rechecking the TA flags (i.e., single- or multi-instance). It eliminates a small window where a single-instance TA could be loaded more than once. Co-authored-by: Sangho Lee <sanghle@microsoft.com>

This PR fixes a few remaining stack alignment issues in LVBS boot trampolines. Co-authored-by: Sangho Lee <sanghle@microsoft.com>

Jay Bosamiya (Microsoft) (jaybosamiya-ms) · 2026-09-05T00:31:46Z

Meant to be normally-merged, not squash-merged; I'll handle that once I get a CI green.

github-actions · 2026-09-05T01:14:21Z

🤖 SemverChecks 🤖 ⚠️ Potential breaking API changes detected ⚠️

Click for details

--- failure enum_variant_added: enum variant added on exhaustive enum ---

Description:
A publicly-visible enum without #[non_exhaustive] has a new variant.
        ref: https://doc.rust-lang.org/cargo/reference/semver.html#enum-variant-new
       impl: https://github.com/obi1kenobi/cargo-semver-checks/tree/v0.50.0/src/lints/enum_variant_added.ron

Failed in:
  variant VsmFunction:GenerateIdentitySigningKey in /home/runner/work/litebox/litebox/litebox_common_lvbs/src/lib.rs:80

--- failure enum_variant_missing: pub enum variant removed or renamed ---

Description:
A publicly-visible enum has at least one variant that is no longer available under its prior name. It may have been renamed or removed entirely.
        ref: https://doc.rust-lang.org/cargo/reference/semver.html#item-remove
       impl: https://github.com/obi1kenobi/cargo-semver-checks/tree/v0.50.0/src/lints/enum_variant_missing.ron

Failed in:
  variant VsmError::BootSignalPageCopyFailed, previously in file /home/runner/work/litebox/litebox/target/semver-checks/git-ulitebox/64a81c558caa875f391b8f64e687872375ef6ebc/litebox_common_lvbs/src/lib.rs:160
  variant VsmError::BootSignalWriteFailed, previously in file /home/runner/work/litebox/litebox/target/semver-checks/git-ulitebox/64a81c558caa875f391b8f64e687872375ef6ebc/litebox_common_lvbs/src/lib.rs:166
  variant VsmError::DiscontiguousMemoryRange, previously in file /home/runner/work/litebox/litebox/target/semver-checks/git-ulitebox/64a81c558caa875f391b8f64e687872375ef6ebc/litebox_common_lvbs/src/lib.rs:279
  variant VsmError::SymbolParseFailed, previously in file /home/runner/work/litebox/litebox/target/semver-checks/git-ulitebox/64a81c558caa875f391b8f64e687872375ef6ebc/litebox_common_lvbs/src/lib.rs:292

--- failure auto_trait_impl_removed: auto trait no longer implemented ---

Description:
A public type has stopped implementing one or more auto traits. This can break downstream code that depends on the traits being implemented.
        ref: https://doc.rust-lang.org/reference/special-types-and-traits.html#auto-traits
       impl: https://github.com/obi1kenobi/cargo-semver-checks/tree/v0.50.0/src/lints/auto_trait_impl_removed.ron

Failed in:
  type PerCpuVariables is no longer UnwindSafe, in /home/runner/work/litebox/litebox/litebox_platform_lvbs/src/host/per_cpu_variables.rs:28

--- failure copy_impl_added: type now implements Copy ---

Description:
A public type now implements Copy, causing non-move closures to capture it by reference instead of moving it.
        ref: https://github.com/rust-lang/rust/issues/100905
       impl: https://github.com/obi1kenobi/cargo-semver-checks/tree/v0.50.0/src/lints/copy_impl_added.ron

Failed in:
  litebox_platform_lvbs::mshv::HvPageProtFlags in /home/runner/work/litebox/litebox/litebox_platform_lvbs/src/mshv/mod.rs:192

--- failure enum_missing: pub enum removed or renamed ---

Description:
A publicly-visible enum cannot be imported by its prior path. A `pub use` may have been removed, or the enum itself may have been renamed or removed entirely.
        ref: https://doc.rust-lang.org/cargo/reference/semver.html#item-remove
       impl: https://github.com/obi1kenobi/cargo-semver-checks/tree/v0.50.0/src/lints/enum_missing.ron

Failed in:
  enum litebox_platform_lvbs::mshv::vsm::MemoryContainerError, previously in file /home/runner/work/litebox/litebox/target/semver-checks/git-ulitebox/64a81c558caa875f391b8f64e687872375ef6ebc/litebox_platform_lvbs/src/mshv/vsm.rs:2012
  enum litebox_platform_lvbs::mshv::vsm::PatchDataMapError, previously in file /home/runner/work/litebox/litebox/target/semver-checks/git-ulitebox/64a81c558caa875f391b8f64e687872375ef6ebc/litebox_platform_lvbs/src/mshv/vsm.rs:2301

--- failure function_missing: pub fn removed or renamed ---

Description:
A publicly-visible function cannot be imported by its prior path. A `pub use` may have been removed, or the function itself may have been renamed or removed entirely.
        ref: https://doc.rust-lang.org/cargo/reference/semver.html#item-remove
       impl: https://github.com/obi1kenobi/cargo-semver-checks/tree/v0.50.0/src/lints/function_missing.ron

Failed in:
  function litebox_platform_lvbs::mshv::vsm::mshv_vsm_copy_secondary_key, previously in file /home/runner/work/litebox/litebox/target/semver-checks/git-ulitebox/64a81c558caa875f391b8f64e687872375ef6ebc/litebox_platform_lvbs/src/mshv/vsm.rs:834
  function litebox_platform_lvbs::mshv::vsm::mshv_vsm_boot_aps, previously in file /home/runner/work/litebox/litebox/target/semver-checks/git-ulitebox/64a81c558caa875f391b8f64e687872375ef6ebc/litebox_platform_lvbs/src/mshv/vsm.rs:119
  function litebox_platform_lvbs::mshv::vsm::mshv_vsm_lock_regs, previously in file /home/runner/work/litebox/litebox/target/semver-checks/git-ulitebox/64a81c558caa875f391b8f64e687872375ef6ebc/litebox_platform_lvbs/src/mshv/vsm.rs:192
  function litebox_platform_lvbs::mshv::vsm::mshv_vsm_free_guest_module_init, previously in file /home/runner/work/litebox/litebox/target/semver-checks/git-ulitebox/64a81c558caa875f391b8f64e687872375ef6ebc/litebox_platform_lvbs/src/mshv/vsm.rs:735
  function litebox_platform_lvbs::mshv::vsm::mshv_vsm_kexec_validate, previously in file /home/runner/work/litebox/litebox/target/semver-checks/git-ulitebox/64a81c558caa875f391b8f64e687872375ef6ebc/litebox_platform_lvbs/src/mshv/vsm.rs:844
  function litebox_platform_lvbs::mshv::vsm::vsm_dispatch, previously in file /home/runner/work/litebox/litebox/target/semver-checks/git-ulitebox/64a81c558caa875f391b8f64e687872375ef6ebc/litebox_platform_lvbs/src/mshv/vsm.rs:1140
  function litebox_platform_lvbs::mshv::vsm::mshv_vsm_enable_aps, previously in file /home/runner/work/litebox/litebox/target/semver-checks/git-ulitebox/64a81c558caa875f391b8f64e687872375ef6ebc/litebox_platform_lvbs/src/mshv/vsm.rs:112
  function litebox_platform_lvbs::mshv::vsm::mshv_vsm_secure_config_vtl0, previously in file /home/runner/work/litebox/litebox/target/semver-checks/git-ulitebox/64a81c558caa875f391b8f64e687872375ef6ebc/litebox_platform_lvbs/src/mshv/vsm.rs:164
  function litebox_platform_lvbs::mshv::vsm::mshv_vsm_end_of_boot, previously in file /home/runner/work/litebox/litebox/target/semver-checks/git-ulitebox/64a81c558caa875f391b8f64e687872375ef6ebc/litebox_platform_lvbs/src/mshv/vsm.rs:238
  function litebox_platform_lvbs::mshv::vsm::mshv_vsm_load_kdata, previously in file /home/runner/work/litebox/litebox/target/semver-checks/git-ulitebox/64a81c558caa875f391b8f64e687872375ef6ebc/litebox_platform_lvbs/src/mshv/vsm.rs:329
  function litebox_platform_lvbs::mshv::vsm::mshv_vsm_unload_guest_module, previously in file /home/runner/work/litebox/litebox/target/semver-checks/git-ulitebox/64a81c558caa875f391b8f64e687872375ef6ebc/litebox_platform_lvbs/src/mshv/vsm.rs:793
  function litebox_platform_lvbs::mshv::vsm::mshv_vsm_patch_text, previously in file /home/runner/work/litebox/litebox/target/semver-checks/git-ulitebox/64a81c558caa875f391b8f64e687872375ef6ebc/litebox_platform_lvbs/src/mshv/vsm.rs:966
  function litebox_platform_lvbs::mshv::vsm::mshv_vsm_configure_partition, previously in file /home/runner/work/litebox/litebox/target/semver-checks/git-ulitebox/64a81c558caa875f391b8f64e687872375ef6ebc/litebox_platform_lvbs/src/mshv/vsm.rs:178
  function litebox_platform_lvbs::mshv::vsm::mshv_vsm_protect_memory, previously in file /home/runner/work/litebox/litebox/target/semver-checks/git-ulitebox/64a81c558caa875f391b8f64e687872375ef6ebc/litebox_platform_lvbs/src/mshv/vsm.rs:246
  function litebox_platform_lvbs::mshv::vsm::mshv_vsm_validate_guest_module, previously in file /home/runner/work/litebox/litebox/target/semver-checks/git-ulitebox/64a81c558caa875f391b8f64e687872375ef6ebc/litebox_platform_lvbs/src/mshv/vsm.rs:596

--- failure struct_missing: pub struct removed or renamed ---

Description:
A publicly-visible struct cannot be imported by its prior path. A `pub use` may have been removed, or the struct itself may have been renamed or removed entirely.
        ref: https://doc.rust-lang.org/cargo/reference/semver.html#item-remove
       impl: https://github.com/obi1kenobi/cargo-semver-checks/tree/v0.50.0/src/lints/struct_missing.ron

Failed in:
  struct litebox_platform_lvbs::mshv::vsm::ModuleMemoryRange, previously in file /home/runner/work/litebox/litebox/target/semver-checks/git-ulitebox/64a81c558caa875f391b8f64e687872375ef6ebc/litebox_platform_lvbs/src/mshv/vsm.rs:1402
  struct litebox_platform_lvbs::mshv::vsm::KexecMemoryMetadataIters, previously in file /home/runner/work/litebox/litebox/target/semver-checks/git-ulitebox/64a81c558caa875f391b8f64e687872375ef6ebc/litebox_platform_lvbs/src/mshv/vsm.rs:2110
  struct litebox_platform_lvbs::mshv::vsm::ModuleMemoryMetadataMap, previously in file /home/runner/work/litebox/litebox/target/semver-checks/git-ulitebox/64a81c558caa875f391b8f64e687872375ef6ebc/litebox_platform_lvbs/src/mshv/vsm.rs:1329
  struct litebox_platform_lvbs::mshv::vsm::MemoryContainer, previously in file /home/runner/work/litebox/litebox/target/semver-checks/git-ulitebox/64a81c558caa875f391b8f64e687872375ef6ebc/litebox_platform_lvbs/src/mshv/vsm.rs:1876
  struct litebox_platform_lvbs::mshv::vsm::KexecMemoryMetadataWrapper, previously in file /home/runner/work/litebox/litebox/target/semver-checks/git-ulitebox/64a81c558caa875f391b8f64e687872375ef6ebc/litebox_platform_lvbs/src/mshv/vsm.rs:2019
  struct litebox_platform_lvbs::mshv::vsm::PatchDataMap, previously in file /home/runner/work/litebox/litebox/target/semver-checks/git-ulitebox/64a81c558caa875f391b8f64e687872375ef6ebc/litebox_platform_lvbs/src/mshv/vsm.rs:2171
  struct litebox_platform_lvbs::mshv::vsm::KexecMemoryMetadata, previously in file /home/runner/work/litebox/litebox/target/semver-checks/git-ulitebox/64a81c558caa875f391b8f64e687872375ef6ebc/litebox_platform_lvbs/src/mshv/vsm.rs:2055
  struct litebox_platform_lvbs::mshv::vsm::ModuleMemoryMetadataIters, previously in file /home/runner/work/litebox/litebox/target/semver-checks/git-ulitebox/64a81c558caa875f391b8f64e687872375ef6ebc/litebox_platform_lvbs/src/mshv/vsm.rs:1569
  struct litebox_platform_lvbs::mshv::vsm::ModuleMemory, previously in file /home/runner/work/litebox/litebox/target/semver-checks/git-ulitebox/64a81c558caa875f391b8f64e687872375ef6ebc/litebox_platform_lvbs/src/mshv/vsm.rs:1808
  struct litebox_platform_lvbs::mshv::vsm::Vtl0KernelInfo, previously in file /home/runner/work/litebox/litebox/target/semver-checks/git-ulitebox/64a81c558caa875f391b8f64e687872375ef6ebc/litebox_platform_lvbs/src/mshv/vsm.rs:1254
  struct litebox_platform_lvbs::mshv::vsm::ModuleMemoryMetadata, previously in file /home/runner/work/litebox/litebox/target/semver-checks/git-ulitebox/64a81c558caa875f391b8f64e687872375ef6ebc/litebox_platform_lvbs/src/mshv/vsm.rs:1334
  struct litebox_platform_lvbs::mshv::vsm::KexecMemoryRange, previously in file /home/runner/work/litebox/litebox/target/semver-checks/git-ulitebox/64a81c558caa875f391b8f64e687872375ef6ebc/litebox_platform_lvbs/src/mshv/vsm.rs:2122
  struct litebox_platform_lvbs::mshv::vsm::Symbol, previously in file /home/runner/work/litebox/litebox/target/semver-checks/git-ulitebox/64a81c558caa875f391b8f64e687872375ef6ebc/litebox_platform_lvbs/src/mshv/vsm.rs:2309
  struct litebox_platform_lvbs::mshv::vsm::SymbolTable, previously in file /home/runner/work/litebox/litebox/target/semver-checks/git-ulitebox/64a81c558caa875f391b8f64e687872375ef6ebc/litebox_platform_lvbs/src/mshv/vsm.rs:2364

--- failure constructible_struct_adds_field: struct exhaustively constructible through public API adds field ---

Description:
A pub struct that could be exhaustively constructed with a literal using only public API has a new pub field, breaking existing exhaustive literals.
        ref: https://doc.rust-lang.org/reference/expressions/struct-expr.html
       impl: https://github.com/obi1kenobi/cargo-semver-checks/tree/v0.50.0/src/lints/constructible_struct_adds_field.ron

Failed in:
  field TaRequestInfo.shm_info in /home/runner/work/litebox/litebox/litebox_shim_optee/src/msg_handler.rs:395

--- failure function_parameter_count_changed: pub fn parameter count changed ---

Description:
A publicly-visible function now takes a different number of parameters.
        ref: https://doc.rust-lang.org/cargo/reference/semver.html#fn-change-arity
       impl: https://github.com/obi1kenobi/cargo-semver-checks/tree/v0.50.0/src/lints/function_parameter_count_changed.ron

Failed in:
  litebox_shim_optee::msg_handler::update_optee_msg_args now takes 7 parameters instead of 6, in /home/runner/work/litebox/litebox/litebox_shim_optee/src/msg_handler.rs:581

--- failure method_parameter_count_changed: pub method parameter count changed ---

Description:
A publicly-visible method now takes a different number of parameters, not counting the receiver (self) parameter.
        ref: https://doc.rust-lang.org/cargo/reference/semver.html#fn-change-arity
       impl: https://github.com/obi1kenobi/cargo-semver-checks/tree/v0.50.0/src/lints/method_parameter_count_changed.ron

Failed in:
  litebox_shim_optee::OpteeShim::load_ldelf takes 3 parameters in /home/runner/work/litebox/litebox/target/semver-checks/git-ulitebox/64a81c558caa875f391b8f64e687872375ef6ebc/litebox_shim_optee/src/lib.rs:255, but now takes 2 parameters in /home/runner/work/litebox/litebox/litebox_shim_optee/src/lib.rs:257

--- failure struct_pub_field_missing: pub struct's pub field removed or renamed ---

Description:
A publicly-visible struct has at least one public field that is no longer available under its prior name. It may have been renamed or removed entirely.
        ref: https://doc.rust-lang.org/cargo/reference/semver.html#item-remove
       impl: https://github.com/obi1kenobi/cargo-semver-checks/tree/v0.50.0/src/lints/struct_pub_field_missing.ron

Failed in:
  field out_shm_info of struct TaRequestInfo, previously in file /home/runner/work/litebox/litebox/target/semver-checks/git-ulitebox/64a81c558caa875f391b8f64e687872375ef6ebc/litebox_shim_optee/src/msg_handler.rs:396

dywongcloud and others added 30 commits July 23, 2026 23:12

Fix checking of directory search/read perms (#1110)

0e50384

Require search/read perms on target/parents depending on situation

Reduce locking contention over fd iterations (#1111)

7af6242

By storing a tiny bit of data, we don't need to bother grabbing a lock before we know which subsystem an FD belongs to when iterating, and can selectively only grab locks when pointing at the correct subsystem.

Simplify via zerocopy::FromZeros::new_box_zeroed (#919)

9e197f0

The existing implementation of `box_new_zeroed` was unnecessarily complex. This PR simplifies it. Co-authored-by: Leon Schuermann <t-leonsc@microsoft.com>

Fix resource limit reads and updates (#1179)

4d6909e

Fixes #1159: replace independently atomic resource-limit fields with an `RwLock`-protected array.

Fix pipe2 fd-table race when the table is full (#1182)

0a13a99

Fixes #1171: take the `raw_descriptor_store` write lock once in `sys_pipe2` and hold it across both inserts and the rollback, so the writer's slot cannot be recycled.

Pin GitHub Actions to full-length commit SHAs (#1192)

12aa111

This PR pins GitHub Actions to full-length commit SHAs and adds a 7 day cooldown to Dependabot configuration for GitHub Actions. See more detail at https://aka.ms/action-pinning.

Skip empty embedded TA binaries during registration (#1197)

e58ae00

Avoid panicking during initialization when an embedded TA binary is an empty placeholder. Fixes: e33f6ff: share TA binaries through a global UUID map Signed-off-by: Praveen K Paladugu <prapal@linux.microsoft.com>

Retire legacy FileSystem trait (#1226)

a58c797

This PR mechanically removes the legacy `FileSystem` trait, so that everything is now based on the new `Backend`-based interface (#887). The relevant north interface now sits as inherent methods of `Resolver`.

Bump taiki-e/install-action from 2.86.3 to 2.86.5 in the github-actio…

f333acc

…ns group (#1243) Update `taiki-e/install-action` from 2.86.3 to 2.86.5 Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Fix races in Linux file descriptor duplication (#1181)

377309f

Fix #1170: keep FD allocation and exact replacement atomic under the raw descriptor table lock.

Fix Windows exception callback argument passing (#1256)

831b301

The old code assumed that `rsp` is restored to `host_sp` and then read thread context via `*rsp` to `rcx`, but `rsp` is actually assigned to `host_sp - EXCEPTION_RECORD`. This PR fixes it by directly assigning `*host_sp` to `rcx`.

Sangho Lee (sangho2) and others added 9 commits September 2, 2026 23:45

Fix socketpair fd-table race when the table is full (#1252)

beafa8c

Fix #1172: hold the descriptor-table write lock across both socketpair fd insertions and rollback.

Fix duplicated directory descriptor offsets (#1275)

e286947

Store directory positions as shared entry metadata so duplicated descriptors share `getdents64` and `lseek` updates. Add a C regression test that runs on both host Linux and LiteBox. Fix #1262

Validate clone3 stack arguments before publishing parent TID (#1280)

15344cf

Move clone stack validation before child TID allocation and `CLONE_PARENT_SETTID` publication. This prevents an invalid `clone3` call from exposing a TID for a child that was never created. Fixes #1266

Fix stack alignment in LVBS boot trampolines (#1296)

a990948

This PR fixes a few remaining stack alignment issues in LVBS boot trampolines. Co-authored-by: Sangho Lee <sanghle@microsoft.com>

Merge origin/main into ulitebox

27bfc40

Fix OP-TEE IDK randomness

ac2c9bc

Jay Bosamiya (Microsoft) (jaybosamiya-ms) marked this pull request as ready for review September 5, 2026 00:31

Jay Bosamiya (Microsoft) (jaybosamiya-ms) added 2 commits September 4, 2026 17:39

Fix ratchet due to merge

d38578a

Fix IDK signing test

8dd8b2f

Jay Bosamiya (Microsoft) (jaybosamiya-ms) force-pushed the jayb/resync-ulitebox-to-main branch from 502523d to 8dd8b2f Compare September 5, 2026 00:40

Jay Bosamiya (Microsoft) (jaybosamiya-ms) added 2 commits September 4, 2026 17:49

minor fixup unused import

8b2c2a6

fixup conflict resolution

04f3b35

Jay Bosamiya (Microsoft) (jaybosamiya-ms) force-pushed the jayb/resync-ulitebox-to-main branch from 9ba8fb6 to 04f3b35 Compare September 5, 2026 01:00

Jay Bosamiya (Microsoft) (jaybosamiya-ms) merged commit 18913eb into ulitebox Sep 5, 2026
10 checks passed

Jay Bosamiya (Microsoft) (jaybosamiya-ms) deleted the jayb/resync-ulitebox-to-main branch September 5, 2026 01:19

Navigation Menu

Sync ulitebox to latest main - #1301

Sync ulitebox to latest main#1301
Jay Bosamiya (Microsoft) (jaybosamiya-ms) merged 43 commits into
uliteboxfrom
jayb/resync-ulitebox-to-main

Jay Bosamiya (Microsoft) (jaybosamiya-ms) commented Sep 5, 2026

Uh oh!

Jay Bosamiya (Microsoft) (jaybosamiya-ms) commented Sep 5, 2026

Uh oh!

github-actions Bot commented Sep 5, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

7 participants

Conversation

Jay Bosamiya (Microsoft) (jaybosamiya-ms) commented Sep 5, 2026

Uh oh!

Jay Bosamiya (Microsoft) (jaybosamiya-ms) commented Sep 5, 2026

Uh oh!

github-actions Bot commented Sep 5, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

7 participants