WolfSSL
/
wolfBoot
mirror of https://github.com/wolfSSL/wolfBoot.git
1
0
Fork 0
Code Issues Releases Wiki Activity

boot: fail closed on flash protect errors

pull/745/head
Daniele Lacamera 2026-04-09 16:36:38 +02:00
parent cdf84024fa
commit 4c704a9440
5 changed files with 16 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
src/update_disk.c
View File

@ -549,7 +549,10 @@ void RAMFUNCTION wolfBoot_start(void)
(void)hal_hsm_server_cleanup();
#endif
#ifndef TZEN
(void)hal_flash_protect(WOLFBOOT_ORIGIN, BOOTLOADER_PARTITION_SIZE);
if (hal_flash_protect(WOLFBOOT_ORIGIN, BOOTLOADER_PARTITION_SIZE) < 0) {
wolfBoot_printf("Error protecting bootloader flash region\r\n");
wolfBoot_panic();
}
#endif
hal_prepare_boot();

5
src/update_flash.c
View File

@ -1503,7 +1503,10 @@ void RAMFUNCTION wolfBoot_start(void)
#endif
#ifndef TZEN
(void)hal_flash_protect(WOLFBOOT_ORIGIN, BOOTLOADER_PARTITION_SIZE);
if (hal_flash_protect(WOLFBOOT_ORIGIN, BOOTLOADER_PARTITION_SIZE) < 0) {
wolfBoot_printf("Error protecting bootloader flash region\n");
wolfBoot_panic();
}
#endif
hal_prepare_boot();

3
src/update_flash_hwswap.c
View File

@ -107,7 +107,8 @@ void RAMFUNCTION wolfBoot_start(void)
(void)hal_hsm_server_cleanup();
#endif
#ifndef TZEN
(void)hal_flash_protect(WOLFBOOT_ORIGIN, BOOTLOADER_PARTITION_SIZE);
if (hal_flash_protect(WOLFBOOT_ORIGIN, BOOTLOADER_PARTITION_SIZE) < 0)
boot_panic();
#endif
hal_prepare_boot();
#ifdef WOLFBOOT_HOOK_BOOT

5
src/update_ram.c
View File

@ -391,7 +391,10 @@ backup_on_failure:
#endif
#ifndef TZEN
(void)hal_flash_protect(WOLFBOOT_ORIGIN, BOOTLOADER_PARTITION_SIZE);
if (hal_flash_protect(WOLFBOOT_ORIGIN, BOOTLOADER_PARTITION_SIZE) < 0) {
wolfBoot_printf("Error protecting bootloader flash region\n");
wolfBoot_panic();
}
#endif
hal_prepare_boot();

2
tools/unit-tests/unit-update-flash.c
View File

@ -137,8 +137,10 @@ int hal_flash_protect(haladdr_t address, int len)
static void reset_mock_stats(void)
{
wolfBoot_staged_ok = 0;
#ifdef CUSTOM_ENCRYPT_KEY
mock_set_encrypt_key_ret = 0;
mock_set_encrypt_key_calls = 0;
#endif
#ifndef ARCH_SIM
wolfBoot_panicked = 0;
#endif