From 002a4ea3c2cd232c89f201296b0aa80030b1e89c Mon Sep 17 00:00:00 2001 From: Marek Pieta Date: Fri, 12 Sep 2025 09:09:47 +0200 Subject: [PATCH] boot: zephyr: Cleanup RAM by default Enable the CONFIG_MCUBOOT_CLEANUP_RAM by deafult to improve security of the default configuration. Signed-off-by: Marek Pieta --- boot/zephyr/Kconfig | 1 + 1 file changed, 1 insertion(+) diff --git a/boot/zephyr/Kconfig b/boot/zephyr/Kconfig index 467b848dc2..930c6449b6 100644 --- a/boot/zephyr/Kconfig +++ b/boot/zephyr/Kconfig @@ -424,6 +424,7 @@ config MCUBOOT_CLEANUP_ARM_CORE config MCUBOOT_CLEANUP_RAM bool "Perform RAM cleanup" depends on CPU_CORTEX_M4 || CPU_CORTEX_M33 + default y help Sets contents of memory to 0 before jumping to application.