esp-idf/components/esp_system
Mahavir Jain 6d2153d703 fix(ota): additional checks for secure version in anti-rollback case
Some additional checks related to secure version of the application in
anti-rollback case have been added to avoid any attempts to boot lower
security version but valid application (e.g., passive partition image).

- Read secure_version under sha256 protection

- First check has been added in the bootloader to ensure correct secure
  version after application verification and loading stage. This check
  happens before setting up the flash cache mapping and handling over
  the final control to application. This check ensures that application
  was not swapped (e.g., to lower security version but valid image) just
  before the load stage in bootloader.

- Second check has been added in the application startup code to ensure
  that currently booting app has higher security version than the one
  programmed in the eFuse for anti-rollback scenario. This will ensure
  that only the legit application boots-up on the device for
  anti-rollback case.
2024-02-15 15:23:19 +02:00
..
include feat(wifi): optimize iperf performance (Backport V4.4) 2023-10-13 11:36:03 +08:00
ld fix(memory): no enough memory for rodata 2023-10-25 08:02:02 +00:00
port fix(clk): clear all lpclk source at clk init 2024-02-06 16:07:40 +08:00
test Change: rewrite EXT1 triggle mode all_low to any_low when not esp32 2023-07-25 17:52:09 +08:00
test_apps ulp-riscv: add support for using ADC as well as an example show-casing it. 2022-08-09 09:21:15 +08:00
test_eh_frame_parser espsystem: Rearchitecture and fix eh_frame_parser bugs 2021-07-15 12:47:51 +08:00
app.lf esp32: move common fragment definitions 2021-03-31 19:17:33 +08:00
CMakeLists.txt debug_stubs: Refactor and add support for RISCV 2022-02-08 22:24:54 +03:00
component.mk esp_system: fix high level interrupt handler not linked for GNU Make 2021-10-26 11:26:45 +02:00
crosscore_int.c esp32h2: update esp_system and esp_hw_support to support esp32h2 2021-07-01 19:53:11 +08:00
debug_stubs.c debug_stubs: Refactor and add support for RISCV 2022-02-08 22:24:54 +03:00
eh_frame_parser.c espsystem: Rearchitecture and fix eh_frame_parser bugs 2021-07-15 12:47:51 +08:00
esp_err.c esp_common: move esp_err 2021-02-24 12:16:37 +08:00
esp_system.c bugfix: unstall other cpu on core reset 2022-12-08 15:38:01 +08:00
fpga_overrides.c esp32: App can boot on FPGA image 2021-07-16 10:50:06 +10:00
freertos_hooks.c esp_common: move freertos hooks 2021-02-24 12:16:37 +08:00
int_wdt.c components/bt: add config option to choose Bluetooth intterupt level. 2021-09-09 11:29:17 +08:00
Kconfig fix(rtc): fixed bbpll not calibrated from bootloader issue 2024-01-16 18:09:48 +08:00
linker.lf system: add option to enable undefined behavior sanitizer (UBSAN) 2021-04-22 23:33:45 +02:00
Makefile.projbuild esp32: move app linker scripts 2021-07-16 20:14:27 +08:00
panic.c [Panic] also print to secondary USB Serial/JTAG Console 2022-11-09 23:54:44 +01:00
README.md brownout: Disable the hardware BOD when BOD interrupt is enabled 2023-11-28 17:01:19 +08:00
sdkconfig.rename esp32h2: update esp_system and esp_hw_support to support esp32h2 2021-07-01 19:53:11 +08:00
stack_check.c esp_system: fix placement of __stack_chk_fail from flash to RAM 2022-12-14 12:57:08 +01:00
startup.c fix(ota): additional checks for secure version in anti-rollback case 2024-02-15 15:23:19 +02:00
system_time.c esp32h2: update esp_system and esp_hw_support to support esp32h2 2021-07-01 19:53:11 +08:00
task_wdt.c fix(wdt): fixed potential WDT timeout when deinitializing task watchdog 2023-09-14 13:16:46 +08:00
ubsan.c system: add option to enable undefined behavior sanitizer (UBSAN) 2021-04-22 23:33:45 +02:00
xt_wdt.c WDT: Add support for XTAL32K Watchdog timer 2021-09-02 09:09:00 +08:00

System Notes

Timekeeping

The following are the timekeeping mechanisms available and their differences:

  1. System time (esp_system_get_time)

Time with the origin at g_startup_time. The implementation is not handled by esp_system, but it does provide a default implementation using RTC timer. Currently, esp_timer provides system time, since the hardware timers are under the control of that component. However, no matter the underlying timer, the system time provider should maintain the definition of having the origin point at g_startup_time.

  1. esp_timer time (esp_timer_get_time)

This is the time read from an underlying hardware timer, controlled through config. Origin is at the point where the underlying timer starts counting.

  1. newlib time (gettimeofday)

Timekeeping function in standard library. Can be set (settimeofday) or moved forward/backward (adjtime); with the possibility of the changes being made persistent through config. Currently implemented in terms of system time, as the point of origin is fixed. If persistence is enabled, RTC time is also used in conjuction with system time.

  1. RTC time (esp_rtc_get_time_us)

Time read from RTC timer.

Brownout

on some boards, we name BOD1 as ana_bod, to unify the usage, using BOD1 in following passage.

BOD1 will be a little faster then BOD0, but BOD0 can be widely used(can reset rf, flash, or using interrupt, etc.) So, in IDF code, we use BOD1 in bootloader and BOD0 in the app.