Crash_Override/OVMS3-idf
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity
OVMS3-idf/components
History
Angus Gratton f8b191cfae secure boot: Pad to avoid data after the signature mapping into the address space 
Because address space is mapped in 64KB pages, it was possible for unauthenticated data after the
app .bin to become mapped into the flash cache address space.

This problem is solved by 2 changes:

* "esptool elf2image --secure-pad" will pad the image so that the signature block ends close to the
  64KB boundary. Due to alignment constraints it will be 12 bytes too short after signing (but
  with flash encryption, these 12 bytes are still encrypted as part of the last block and can't be
  arbitrarily changed).
* By default, secure boot now requires all app partitions to be a multiple of 64KB in size.
2018-07-23 13:45:55 +10:00
..
app_trace gcc8_newlib3: Compilation warnings and errors not specific to newlib v3 2018-07-16 14:19:57 +08:00
app_update remove executable permission from source files 2018-05-29 20:07:45 +08:00
aws_iot aws_iot: add support for MQTT TLS over port 443 2018-04-23 18:27:28 +05:30
bootloader secure boot: Pad to avoid data after the signature mapping into the address space 2018-07-23 13:45:55 +10:00
bootloader_support secure boot: Pad to avoid data after the signature mapping into the address space 2018-07-23 13:45:55 +10:00
bt component/bt: bugfix for erroneous data reporting always enabled 2018-07-11 20:08:36 +08:00
coap gcc8_newlib3: Compilation warnings and errors not specific to newlib v3 2018-07-16 14:19:57 +08:00
console gcc8_newlib3: Compilation warnings and errors not specific to newlib v3 2018-07-16 14:19:57 +08:00
cxx gcc8_newlib3: Compilation warnings and errors not specific to newlib v3 2018-07-16 14:19:57 +08:00
driver gcc8_newlib3: Compilation warnings and errors not specific to newlib v3 2018-07-16 14:19:57 +08:00
esp-tls Merge branch 'bugfix/esp_tls_error_logging' into 'master' 2018-04-23 20:18:30 +08:00
esp32 gcc8_newlib3: Compilation warnings and errors not specific to newlib v3 2018-07-16 14:19:57 +08:00
esp_adc_cal bugfix/Fix BLK3_RESERVED_FLAG register and other minor bugs 2018-03-16 15:51:36 +08:00
esp_http_client Remove unused macro 2018-05-22 12:04:47 +07:00
espcoredump bugfix: fixed path to esptool when there is no compiled python module for it 2017-03-21 13:30:38 +03:00
esptool_py secure boot: Pad to avoid data after the signature mapping into the address space 2018-07-23 13:45:55 +10:00
ethernet remove executable permission from source files 2018-05-29 20:07:45 +08:00
expat gcc8_newlib3: Compilation warnings and errors not specific to newlib v3 2018-07-16 14:19:57 +08:00
fatfs FATFS support without wear levelling 2018-06-16 16:02:35 +08:00
freertos gcc8_newlib3: Compilation warnings and errors not specific to newlib v3 2018-07-16 14:19:57 +08:00
heap assert: Fix. Move useful functions from wrapped assert functions 2018-06-25 11:05:54 +08:00
idf_test test/fix bug refresh cache after connect 2018-06-06 02:17:06 +00:00
jsmn Add jsmn JSON parser component 2017-03-07 10:18:47 +11:00
json cJSON : Include only source file objects 2018-04-30 13:51:54 +05:30
libsodium gcc8_newlib3: Compilation warnings and errors not specific to newlib v3 2018-07-16 14:19:57 +08:00
log doc: fix the level inconsistent issue in Kconfig document 2018-06-05 10:36:18 +00:00
lwip lwip: minor fix about ip route 2018-07-16 17:21:46 +08:00
mbedtls gcc8_newlib3: Compilation warnings and errors not specific to newlib v3 2018-07-16 14:19:57 +08:00
mdns fix(mdns): fix the exception when remove one of multiple service 2018-06-03 17:29:49 +08:00
micro-ecc micro-ecc: update to v1.0 2018-06-10 21:20:55 +08:00
newlib vfs, fatfs: Add file truncate for fatfs 2018-06-14 06:37:21 +08:00
nghttp gcc8_newlib3: Compilation warnings and errors not specific to newlib v3 2018-07-16 14:19:57 +08:00
nvs_flash docs: add error codes reference 2018-06-15 15:49:24 +08:00
openssl remove executable permission from source files 2018-05-29 20:07:45 +08:00
partition_table secure boot: Pad to avoid data after the signature mapping into the address space 2018-07-23 13:45:55 +10:00
pthread pthread: implement local storage using pvTaskGetThreadLocalStoragePointer 2018-04-19 18:28:55 +05:30
sdmmc remove executable permission from source files 2018-05-29 20:07:45 +08:00
smartconfig_ack remove executable permission from source files 2018-05-29 20:07:45 +08:00
soc soc: Fix check_long_hold_gpio and move def to soc 2018-06-26 12:47:55 +05:00
spi_flash spi_flash: Fix error unit tests on host 2018-06-19 14:30:25 +05:00
spiffs spi_flash: Enable flash emulation down to ROM function calls 2018-06-06 17:35:30 +00:00
tcpip_adapter remove executable permission from source files 2018-05-29 20:07:45 +08:00
ulp remove executable permission from source files 2018-05-29 20:07:45 +08:00
vfs Merge branch 'feature/fs_truncate_support' into 'master' 2018-06-14 13:56:39 +08:00
wear_levelling spi_flash: Enable flash emulation down to ROM function calls 2018-06-06 17:35:30 +00:00
wpa_supplicant gcc8_newlib3: Compilation warnings and errors not specific to newlib v3 2018-07-16 14:19:57 +08:00
xtensa-debug-module remove executable permission from source files 2018-05-29 20:07:45 +08:00