esp-idf

mirror of https://github.com/espressif/esp-idf.git synced 2026-10-18 19:43:17 +03:00

Files

T

Mahavir Jain 8829e6b864 fix(esp_image_verify): reject segments extending past the partition before hashing

A corrupted segment data_len was only caught by the image length check
after all segments had been checksummed/hashed. On chips with 32-bit cache
mapping (e.g. ESP32-P4 with CONFIG_BOOTLOADER_CACHE_32BIT_ADDR_QUAD_FLASH)
nothing bounds that walk, so a ~1.8 GB data_len trips the task WDT in the
app and the RTC WDT in the bootloader, which then reset-loops on the
corrupted partition.

Check that each segment header and its data lie inside the partition
before processing the segment data.

2026-10-11 14:30:19 +05:30

bootloader_flash

feat(mspi): added mspi flash error (aligned with rom)

2026-09-09 14:17:00 +08:00

include

feat(esp_image_verify): split image verification out of bootloader_support

2026-08-12 08:39:18 +05:30

private_include

feat(esp_image_verify): split image verification out of bootloader_support

2026-08-12 08:39:18 +05:30

src

fix(bootloader_support): accept unburnable SPI_DOWNLOAD_MSPI_DIS in release-mode checks

2026-09-23 15:56:58 +05:30

test_apps

fix(esp_image_verify): reject segments extending past the partition before hashing

2026-10-11 14:30:19 +05:30

CMakeLists.txt

refactor(bootloader_support): unify secure-boot & flash-encryption secure features

2026-09-23 15:56:58 +05:30

hints.yml

feat(bootloader_support, esp_image_verify): add monitor hints for security errors

2026-09-23 13:44:40 +05:30

README.rst

…

README.rst

Bootloader Support Component
============================

Overview
--------

"Bootloader support" contains APIs which are used by the bootloader but are also needed for the main app.

Code in this component needs to be aware of being executed in a bootloader environment (no RTOS available, BOOTLOADER_BUILD macro set) or in an esp-idf app environment (RTOS running, need locking support.)