[dgarske]

Description

An OP-TEE trusted application links libutee, not a C library: no descriptors, sockets, directories or wall clock, and a single thread.

• settings.h - a WOLFSSL_OPTEE block beside WOLFSSL_SGX, setting NO_FILESYSTEM, SINGLE_THREADED, NO_ASN_TIME and the related no-IO options.
• wc_port.c - adds !defined(WOLFSSL_OPTEE) to the CLOEXEC helper gate, which already excludes WOLFSSL_KERNEL_MODE, WOLFSSL_ZEPHYR and WOLFSSL_SGX.

That gate keys off __unix__, which a Linux cross compiler predefines even for a TA, so the block compiled in and failed on missing fcntl.h.

Testing

Validated on an NVIDIA Jetson Orin Nano (L4T R36.4.4): wolfCrypt built into a TA, ML-DSA and ML-KEM run in the secure world and cross-checked on the host. The TA does not build without the macro. Linux default, --enable-all and --enable-cryptonly builds are unaffected; make check passes.

[github-actions]

MemBrowse Memory Report · Explore what changed →

No memory changes detected for:

• gcc-arm-cortex-m0plus
• gcc-arm-cortex-m3
• gcc-arm-cortex-m4
• gcc-arm-cortex-m4-baremetal
• gcc-arm-cortex-m4-crypto-only
• gcc-arm-cortex-m4-dtls13
• gcc-arm-cortex-m4-min-ecc
• gcc-arm-cortex-m4-openssl-compat
• gcc-arm-cortex-m4-pkcs7
• gcc-arm-cortex-m4-pq
• gcc-arm-cortex-m4-rsa-only
• gcc-arm-cortex-m4-sp-math
• gcc-arm-cortex-m4-tls12
• gcc-arm-cortex-m4-tls13
• gcc-arm-cortex-m7
• gcc-arm-cortex-m7-pq
• gcc-arm-cortex-m7-tls13
• stm32-sim-stm32h753

---

_{Catch memory regressions in CI with MemBrowse. Free for open source.}