Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Disable the defmt feature in the BootInSuccessState #81

Merged
merged 2 commits into from
Sep 11, 2024

Conversation

imrank03
Copy link
Contributor

@imrank03 imrank03 commented Sep 9, 2024

This PR addresses critical issues in rustBoot related to the improper handling of the integrity and authenticity checks, which allowed compromised firmware to run without proper validation

panic() Function Behavior: The panic() function, intended to halt the system if all boot options are exhausted or an emergency update fails, was not triggering due to a condition related to the defmt feature. This allowed execution to continue outside of the match statement, leading to BootInSuccessState being executed each time. This has been resolved, ensuring the system halts as expected when a critical failure occurs, preventing compromised firmware from running.

Fixes: #79

@nihalpasham nihalpasham self-assigned this Sep 11, 2024
@nihalpasham nihalpasham added the bug Something isn't working label Sep 11, 2024
@nihalpasham
Copy link
Owner

Looks good.

@nihalpasham nihalpasham merged commit d4394d3 into nihalpasham:main Sep 11, 2024
13 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Firmware with corrupted rustboot header run by rustboot
2 participants