mcuboot icon indicating copy to clipboard operation
mcuboot copied to clipboard

Sw version based downgrade prevention

Open mateo-ligne-netatmo opened this issue 3 years ago • 2 comments

Hello everyone,

This PR follow a previous issue where I express my need of having a software version comparison before loading a new firmware through Recovery uart in a Single application slot configuration.

The firmware update will be monitored by MCUmgr, and in order to stop the update from it, I defined a new error type that will stop update process. This MCUmgr feature is the following open PR

I also added a commit allowing to use 2 UART peripheral at the same time one for Logs and the other for MCUmgr communication.

It's my first MCUBoot upload so don't hesitate to make feedbacks or suggestions, I will take them into account !

mateo-ligne-netatmo avatar Dec 13 '21 14:12 mateo-ligne-netatmo

Hello, I have rebased my PR with current MCUboot main especially following https://github.com/mcu-tools/mcuboot/pull/1255. It turns out that on a failed firmware update (for too low SW version for instance), stored binary won't be overwritten but it will be decrypted a second time which will break the applicative. To counter that, I've just had a return code check before decryption.

mateo-ligne-netatmo avatar Feb 08 '22 13:02 mateo-ligne-netatmo

I believe @utzig concerns have been addressed.

d3zd3z avatar Feb 09 '22 23:02 d3zd3z

This pull request has been marked as stale because it has been open (more than) 60 days with no activity. Remove the stale label or add a comment saying that you would like to have the label removed otherwise this pull request will automatically be closed in 14 days. Note, that you can always re-open a closed pull request at any time.

github-actions[bot] avatar Jan 05 '23 01:01 github-actions[bot]