esp-idf/tools
Mahavir Jain 6d2153d703 fix(ota): additional checks for secure version in anti-rollback case
Some additional checks related to secure version of the application in
anti-rollback case have been added to avoid any attempts to boot lower
security version but valid application (e.g., passive partition image).

- Read secure_version under sha256 protection

- First check has been added in the bootloader to ensure correct secure
  version after application verification and loading stage. This check
  happens before setting up the flash cache mapping and handling over
  the final control to application. This check ensures that application
  was not swapped (e.g., to lower security version but valid image) just
  before the load stage in bootloader.

- Second check has been added in the application startup code to ensure
  that currently booting app has higher security version than the one
  programmed in the eFuse for anti-rollback scenario. This will ensure
  that only the legit application boots-up on the device for
  anti-rollback case.
2024-02-15 15:23:19 +02:00
..
ble ble-wifi-example-tests: Add fixes and cleanups to ble and wifi tests 2021-05-28 19:50:28 +05:30
catch Whitespace: Automated whitespace fixes (large commit) 2020-11-11 07:36:35 +00:00
ci ci: change known_failure_cases workflow 2024-01-31 12:17:48 +08:00
cmake versions: Update version to 4.4.6 2023-09-26 07:11:21 +00:00
docker feat (cmock): add ruby and libbsd-dev to docker image 2023-03-10 17:54:33 +08:00
esp_app_trace style: format python files with isort and double-quote-string-fixer 2021-01-26 10:49:01 +08:00
esp_prov wifi_prov: Added support for WPA3_PSK and WPA2_WPA3_PSK APs 2022-06-21 11:17:09 +05:30
find_build_apps esp32h2: add esp32h2 build target 2021-07-01 19:51:33 +08:00
idf_monitor_base bug(monitor/console_reader): replace TIOCSTI with busy wait to suppport kernel > 6.2 2023-04-21 15:52:13 +02:00
idf_py_actions fix(tools): fix autocomplete for --port option 2023-09-08 09:30:42 +02:00
idf_size_yaml tools/idf_size: improve readability 2021-10-06 15:28:05 +02:00
kconfig Whitespace: Automated whitespace fixes (large commit) 2020-11-11 07:36:35 +00:00
kconfig_new kconfig: support plain comment in the menu 2024-02-02 10:33:59 +08:00
ldgen fix(ldgen): duplicate entries in the generated .ld file 2023-09-21 19:41:32 +08:00
mass_mfg tools: Introduce support for blank lines in config and value files for mfg utility 2022-07-26 23:17:33 +02:00
mocks further fix spi flash/ram current leakage 2022-07-28 13:11:55 +08:00
templates/sample_component add new command to idf 2020-09-21 23:38:52 +02:00
test_apps fix(ota): additional checks for secure version in anti-rollback case 2024-02-15 15:23:19 +02:00
test_idf_monitor Tools: Remove IDF Monitor coredump tests 2023-06-20 15:27:19 +02:00
test_idf_py Tools: Make idf.py tests independent on extra extensions 2022-05-27 11:14:08 +02:00
test_idf_size idf_size.py: Fix issue where diram size was halved in cases where iram was not fully filled with cache 2022-12-19 14:22:00 +01:00
test_idf_tools tools: add GDB version '11.2_20220823' as a tool 2022-10-10 18:43:27 +04:00
test_mkdfu mkdfu.py: Support setting flash parameters 2022-05-27 16:24:13 +02:00
test_mkuf2 style: format python files with isort and double-quote-string-fixer 2021-01-26 10:49:01 +08:00
unit-test-app Merge branch 'feature/lower-iram-utilization-of-heap-component_v4.4' into 'release/v4.4' 2023-02-07 16:54:58 +08:00
windows tools: move idf_exe out of IDF 2021-12-09 17:24:43 +01:00
build_apps.py ci: Include context from failed build logs in the CI job log 2021-04-12 05:48:40 +00:00
check_python_dependencies.py fix(tools): check_python_version accept dev releases as requirement 2023-08-04 14:19:29 +02:00
check_term.py style: format python files with isort and double-quote-string-fixer 2021-01-26 10:49:01 +08:00
detect_python.fish tools: Prefer python3 during install and export 2021-02-13 11:34:40 +01:00
detect_python.sh tools: Prefer python3 during install and export 2021-02-13 11:34:40 +01:00
eclipse-code-style.xml tools: add code formatter rules for Eclipse 2016-11-03 18:41:00 +08:00
find_apps.py style: format python files with isort and double-quote-string-fixer 2021-01-26 10:49:01 +08:00
format-minimal.sh global: use '/usr/bin/env bash' instead of '/usr/bin/bash' in shebangs 2020-04-03 01:10:02 +02:00
format.sh global: use '/usr/bin/env bash' instead of '/usr/bin/bash' in shebangs 2020-04-03 01:10:02 +02:00
gdb_panic_server.py tools: gdb_panic_server: enable esp32h2 support 2021-09-15 19:24:14 +08:00
gen_esp_err_to_name.py Tools: Fix Python style warnings 2022-08-09 14:30:52 +02:00
idf_monitor.py bugfix(tools): idf.py monitor now reads correctly on Linux 2022-11-25 11:41:24 +01:00
idf_size.py idf_size.py: Fix issue where diram size was halved in cases where iram was not fully filled with cache 2022-12-19 14:22:00 +01:00
idf_tools.py Tools: Update the certificate of idf_tools.py 2023-05-25 16:30:22 +02:00
idf.py Merge branch 'bugfix/fix_windows_path_case_sensitivity_v4.4' into 'release/v4.4' 2023-02-03 14:40:32 +08:00
mkdfu.py mkdfu.py: Support setting flash parameters 2022-05-27 16:24:13 +02:00
mkuf2.py Tools: Fix Python style warnings 2022-08-09 14:30:52 +02:00
python_version_checker.py Drop support for unsupported Python versions 2021-06-21 21:48:49 +02:00
set-submodules-to-github.sh global: use '/usr/bin/env bash' instead of '/usr/bin/bash' in shebangs 2020-04-03 01:10:02 +02:00
toolchain_versions.mk tools: update GCC-Toolchain version to 'esp-2021r2-patch5-8.4.0' 2022-09-18 18:27:54 +07:00
tools_schema.json tools: add distro links for macos-arm64 2022-04-27 08:56:33 +02:00
tools.json feat(tools): Update OpenOCD version to v0.12.0-esp32-20230921 2023-10-18 10:59:52 +02:00