Hi Tom, Here is a PR for main with the following:
Android: * avb: Update libavb to AOSP 1.3.0 * avb: Fix memory leak on mmc_part * bootmeth_android: Fix memory leaks for AvbOps and verify-data * bootmeth_android: Fix out-of-bounds access in bootconfig parsing Usb Gadget: * cmd: ums: Set serial# on iSerial device descriptor * dwc2: Set maxpacket_limit and endpoint capabilities to prepare for udc core migration * ci_udc: Fix ep type in ep_enable() * ci_udc: Set usb request status to handle complete callback * ci_udc: Ensure dtds are inactive before completing request CI: * https://git.u-boot-project.org/u-boot/custodians/u-boot-dfu/-/pipelines/769 Thanks, Mattijs The following changes since commit 1b8283bd3220e898d338fb98929f0b06ed63da84: cmd: read: fix unsigned overflow bypassing range check (2026-07-21 13:52:50 -0600) are available in the Git repository at: https://git.u-boot-project.org/u-boot/custodians/u-boot-dfu.git tags/u-boot-dfu-20260728 for you to fetch changes up to e6f091a208276db72596c8f7376648856a276d97: doc: android: refresh AVB provenance and pin libavb reference (2026-07-27 14:26:32 +0200) ---------------------------------------------------------------- u-boot-dfu-20260728 Android: * avb: Update libavb to AOSP 1.3.0 * avb: Fix memory leak on mmc_part * bootmeth_android: Fix memory leaks for AvbOps and verify-data * bootmeth_android: Fix out-of-bounds access in bootconfig parsing Usb Gadget: * cmd: ums: Set serial# on iSerial device descriptor * dwc2: Set maxpacket_limit and endpoint capabilities to prepare for udc core migration * ci_udc: Fix ep type in ep_enable() * ci_udc: Set usb request status to handle complete callback * ci_udc: Ensure dtds are inactive before completing request ---------------------------------------------------------------- Alexey Charkov (1): boot: android: fix out-of-bounds access in bootconfig parsing Igor Opaniuk (4): boot: android: fix AvbOps and verify-data leaks in AVB path avb: free mmc_part allocated by get_partition() libavb: update to AOSP 1.3.0 doc: android: refresh AVB provenance and pin libavb reference Jason He (1): usb: ci_udc: verify all dtds are inactive before completing request Marek Vasut (1): cmd: ums: Set Device Descriptor iSerial based on serial# env variable Mattijs Korpershoek (2): usb: gadget: dwc2: Use usb_ep_set_maxpacket_limit() for fifo sizes usb: gadget: dwc2: Set endpoint capabilities via .caps field Xu Yang (1): usb: ci_udc: set correct ep type in ep_enable() Ye Li (1): usb: ci_udc: Update usb request status boot/bootmeth_android.c | 37 ++-- boot/image-android.c | 30 ++- common/avb_verify.c | 29 ++- doc/android/avb2.rst | 7 +- drivers/usb/gadget/ci_udc.c | 30 ++- drivers/usb/gadget/ci_udc.h | 4 +- drivers/usb/gadget/dwc2_udc_otg.c | 26 ++- drivers/usb/gadget/f_mass_storage.c | 8 + lib/libavb/avb_chain_partition_descriptor.c | 1 + lib/libavb/avb_chain_partition_descriptor.h | 16 +- lib/libavb/avb_cmdline.c | 42 +--- lib/libavb/avb_descriptor.c | 62 ++++-- lib/libavb/avb_hashtree_descriptor.h | 3 + lib/libavb/avb_property_descriptor.h | 8 +- lib/libavb/avb_rsa.c | 6 +- lib/libavb/avb_slot_verify.c | 313 +++++++++++++++------------- lib/libavb/avb_slot_verify.h | 6 +- lib/libavb/avb_util.c | 46 +++- lib/libavb/avb_util.h | 140 +++++++------ lib/libavb/avb_vbmeta_image.c | 1 + lib/libavb/avb_vbmeta_image.h | 8 +- lib/libavb/avb_version.h | 2 +- 22 files changed, 501 insertions(+), 324 deletions(-)
