scottk/OpenCellular
1
0
Fork 0
mirror of https://github.com/Telecominfraproject/OpenCellular.git synced 2026-01-02 21:25:03 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
a04a310913100b6c04eb25746b49f5cd56aa9e31
OpenCellular/common
History
Nicolas Boichat a04a310913 rwsig/update_fw: Prevent race in rollback protection 
There is a window where the rollback information in RW could
potentially be updated during RW signature verification. We make
sure this cannot happen by:
 - Preventing update over USB while RWSIG is running
 - When system is locked, only update rollback information if
   RW region is locked: this guarantees that RW cannot be modified
   from boot until RW is validated, and then until rollback
   information is updated.

Also, remove rollback_lock() in rwsig_check_signature:
rwsig_jump_now() protects all flash, which also protects rollback.
This reduces the number of required reboots on rollback update.

BRANCH=none
BUG=b:35586219
BUG=b:35587171
TEST=Add long delay in rwsig_check_signature, make sure EC cannot
     be updated while verification is in progress.

Change-Id: I7a51fad8a64b7e258b3a7e15d75b3dab64ce1c94
Reviewed-on: https://chromium-review.googlesource.com/479176
Commit-Ready: Nicolas Boichat <drinkcat@chromium.org>
Tested-by: Nicolas Boichat <drinkcat@chromium.org>
Reviewed-by: Randall Spangler <rspangler@chromium.org>
2017-04-26 04:28:08 -07:00
..
acpi.c
common: Add tablet_mode API
2016-11-08 17:11:28 -08:00
adc.c
cleanup: DECLARE_CONSOLE_COMMAND only needs 4 args
2016-08-24 16:30:10 +00:00
als.c
cleanup: DECLARE_CONSOLE_COMMAND only needs 4 args
2016-08-24 16:30:10 +00:00
ap_hang_detect.c
cleanup: DECLARE_CONSOLE_COMMAND only needs 4 args
2016-08-24 16:30:10 +00:00
backlight_lid.c
Support backlight control via lid only
2013-09-27 23:07:21 +00:00
battery.c
cleanup: DECLARE_CONSOLE_COMMAND only needs 4 args
2016-08-24 16:30:10 +00:00
bluetooth_le.c
btle: Cleanup: Moved constants, renamed functions
2016-08-11 14:46:33 -07:00
btle_hci_controller.c
cleanup: DECLARE_CONSOLE_COMMAND only needs 4 args
2016-08-24 16:30:10 +00:00
btle_ll.c
btle_ll.c: Initialize variables to fix GCC warnings
2016-11-16 19:04:31 -08:00
build.mk
common/rollback: Add support for rollback protection
2017-04-06 03:29:38 -07:00
button.c
console: Add non-verbose print config option
2017-02-11 13:06:38 -08:00
capsense.c
Deferred: Use deferred_data instead of function pointer
2016-04-18 17:32:40 -07:00
case_closed_debug.c
g: use devid 0 and 1 to create a serial number
2016-10-11 23:01:59 -07:00
charge_manager.c
charge_ramp: Specify port number in board_is_vbus_too_low()
2017-02-02 19:09:52 -08:00
charge_ramp.c
chg_ramp: Don't change ICL until vals are init'd.
2017-03-30 17:35:44 -07:00
charge_state_v2.c
charger: Add state for discharge + full
2017-03-03 17:11:30 -08:00
charger_profile_override.c
charger_profile: support multiple battery voltage range thresholds
2017-02-10 19:02:55 -08:00
charger.c
cleanup: DECLARE_CONSOLE_COMMAND only needs 4 args
2016-08-24 16:30:10 +00:00
chipset.c
cleanup: DECLARE_CONSOLE_COMMAND only needs 4 args
2016-08-24 16:30:10 +00:00
clz.c
Add option to enable GCC LTO
2015-05-19 02:46:27 +00:00
console_output.c
Cr50: The chan command is not safe.
2016-10-01 03:13:43 +00:00
console.c
console: ensure "Console is enabled" string is intact
2017-03-20 19:30:15 -07:00
crc8.c
crc8: Support crc calculation across non-contiguous data
2016-03-18 22:16:53 -07:00
crc.c
Move software CRC implementation to common
2014-08-08 03:11:38 +00:00
curve25519.c
curve25519: strip-down, build and test
2017-02-23 16:02:03 -08:00
device_state.c
device_state: signal if device_set_state changed the state
2017-01-23 13:38:22 -08:00
dptf.c
eve: Move DPTF tablet mode support to common code
2017-02-14 14:50:36 -08:00
ec.libsharedobjs.ld
build-infr: Add support for shared RO library.
2015-07-17 03:17:50 +00:00
extension.c
cr50: add vendor command to restore corrupted header
2017-03-22 18:03:48 -07:00
extpower_gpio.c
extpower: Allow board to override signal debounce time
2016-09-02 07:11:33 -07:00
fan.c
cleanup: DECLARE_CONSOLE_COMMAND only needs 4 args
2016-08-24 16:30:10 +00:00
firmware_image.lds.S
common: Split rwsig parts from rsa.h header
2017-04-11 20:22:32 -07:00
firmware_image.S
common/rollback: Add support for rollback protection
2017-04-06 03:29:38 -07:00
flash.c
flash: ensure proper pstate alignment
2017-03-24 09:32:53 -07:00
fmap.c
common: Split rwsig parts from rsa.h header
2017-04-11 20:22:32 -07:00
gesture.c
Fix various misspellings in comments
2016-11-15 17:41:53 -08:00
gpio_commands.c
Cr50: Mark several console commands as safe
2016-08-31 17:20:26 +00:00
gpio.c
servo_micro: add gpio mode get and set
2016-04-27 14:04:07 -07:00
hooks.c
cleanup: Remove charge_state_v1
2017-02-06 14:50:32 -08:00
host_command_master.c
cleanup: DECLARE_CONSOLE_COMMAND only needs 4 args
2016-08-24 16:30:10 +00:00
host_command_pd.c
charge_state_v2: Limit i/p current to meet allowed MAX i/p system power
2016-12-05 16:43:00 -08:00
host_command.c
common: add feature bit for fingerprint support
2017-03-13 17:53:58 -07:00
host_event_commands.c
mkbp: Always keep memmap host event mask up-to-date
2016-12-01 19:59:04 -08:00
i2c_wedge.c
cleanup: DECLARE_CONSOLE_COMMAND only needs 4 args
2016-08-24 16:30:10 +00:00
i2c.c
common/i2c.c: Check that i2c port is always 0 or greater
2016-12-16 15:42:47 -08:00
i2cs_tpm.c
Cr50: i2cs: Added counter for write mismatch error
2017-02-02 12:29:30 -08:00
inductive_charging.c
Deferred: Use deferred_data instead of function pointer
2016-04-18 17:32:40 -07:00
keyboard_8042_sharedlib.c
libsharedobjs: Add 8042 scancodes to shared lib.
2015-07-17 03:18:03 +00:00
keyboard_8042.c
cleanup: DECLARE_CONSOLE_COMMAND only needs 4 args
2016-08-24 16:30:10 +00:00
keyboard_mkbp.c
system: Fixups in emulated sysrq code
2017-04-06 22:27:01 -07:00
keyboard_scan.c
keyboard: Always call keyboard_state_changed
2016-11-17 07:08:25 -08:00
keyboard_test.c
Move keyboard dimension and key constants to keyboard_config.h
2013-03-22 11:24:29 -07:00
lb_common.c
ryu: fix max lightbar brightness
2015-09-25 09:13:34 -07:00
led_common.c
rambi: fix led command
2014-01-14 09:19:45 +00:00
led_policy_std.c
led_policy_std: turn off power led when system shutdown
2017-04-13 12:55:33 -07:00
lid_angle.c
oak: enable lid angle update
2016-03-02 13:39:47 -08:00
lid_switch.c
cleanup: DECLARE_CONSOLE_COMMAND only needs 4 args
2016-08-24 16:30:10 +00:00
lightbar.c
cleanup: DECLARE_CONSOLE_COMMAND only needs 4 args
2016-08-24 16:30:10 +00:00
mag_cal.c
common: Add magnetometer online calibration.
2015-10-13 05:28:54 -07:00
main.c
rwsig: Make it possible to run as a task
2017-04-11 20:22:32 -07:00
mat33.c
common: Add magnetometer online calibration.
2015-10-13 05:28:54 -07:00
mat44.c
common: Add magnetometer online calibration.
2015-10-13 05:28:54 -07:00
math_util.c
math_util: Fix rotation by identity.
2016-08-24 17:40:27 -07:00
memory_commands.c
Add more CONFIG_CMD_* options for console commands
2016-10-01 00:02:01 -07:00
mkbp_event.c
mkbp_event: Properly queue events during host sleep
2016-11-04 18:31:37 -07:00
motion_lid.c
motion_lid: no angle correction when lid close
2017-03-17 20:12:23 -07:00
motion_sense.c
motion: Add opt3001 as a motion sensor
2017-02-16 18:03:59 -08:00
nvmem_vars.c
cr50: Store console lock state in NvMem vars.
2017-02-27 18:50:12 -08:00
nvmem.c
cr50: Make sure TPM wipe only clears TPM data.
2017-02-23 01:19:07 -08:00
onewire.c
Move onewire bus support from chip/lm4 to common
2013-08-02 18:22:57 -07:00
panic_output.c
Cr50: The panicinfo command is not safe
2016-10-01 03:14:07 +00:00
pd_log.c
Fix various misspellings in comments
2016-11-15 17:41:53 -08:00
port80.c
cleanup: DECLARE_CONSOLE_COMMAND only needs 4 args
2016-08-24 16:30:10 +00:00
power_button_x86.c
power_button_x86: Reset power button setting on chipset transitions
2017-04-17 16:23:50 -07:00
power_button.c
cleanup: DECLARE_CONSOLE_COMMAND only needs 4 args
2016-08-24 16:30:10 +00:00
printf.c
console: Add non-verbose print config option
2017-02-11 13:06:38 -08:00
pstore_commands.c
pstore: Fix issue with block calculation for pstore blocks
2017-01-03 15:13:58 -08:00
pwm_kblight.c
cleanup: DECLARE_CONSOLE_COMMAND only needs 4 args
2016-08-24 16:30:10 +00:00
pwm.c
pwm: PWM is disabled when duty is set to max value
2016-09-08 17:57:51 -07:00
queue_policies.c
Stream: Remove in_stream/out_stream interface
2015-06-11 00:08:49 +00:00
queue.c
Queue: Add ability to modify contiguous units inplace
2015-07-15 21:57:36 +00:00
rollback.c
rollback: Update and lock rollback block as part of rwsig verification
2017-04-11 20:22:31 -07:00
rsa.c
common/rsa: Add support for exponent 3 RSA keys
2016-11-10 21:28:28 -08:00
rwsig.c
rwsig/update_fw: Prevent race in rollback protection
2017-04-26 04:28:08 -07:00
sensor_common.c
console: Add non-verbose print config option
2017-02-11 13:06:38 -08:00
sha1.c
Add SHA-1 hash
2014-05-17 20:14:17 +00:00
sha256.c
common: Drop unused data structure
2016-05-05 19:16:50 -07:00
shared_mem.c
Cr50: Mark several console commands as safe
2016-08-31 17:20:26 +00:00
shmalloc.c
common: introduce malloc/free implementation
2017-01-05 21:13:09 -08:00
smbus.c
smbus: Re-write smbus driver
2016-03-21 16:35:33 -07:00
spi_commands.c
cleanup: DECLARE_CONSOLE_COMMAND only needs 4 args
2016-08-24 16:30:10 +00:00
spi_flash_reg.c
spi_flash_reg: Correct lengths for W25Q40/GD25LQ40
2016-10-20 01:55:59 -07:00
spi_flash.c
Enable spi_flash_read to read > SPI_FLASH_MAX_READ_SIZE
2016-10-05 20:58:37 -07:00
spi_nor.c
common/spi_nor: Differential erase support
2017-02-09 05:04:56 +00:00
switch.c
switch: Initialize switch state earlier during HOOK_INIT
2017-03-02 11:29:07 -08:00
system.c
Revert "system: Shutdown AP before entering hibernate mode"
2017-04-21 06:03:57 -07:00
tablet_mode.c
motion: Disable tablet mode if one accel is broken
2017-01-04 18:07:12 -08:00
temp_sensor.c
cleanup: DECLARE_CONSOLE_COMMAND only needs 4 args
2016-08-24 16:30:10 +00:00
test_util.c
cleanup: DECLARE_CONSOLE_COMMAND only needs 4 args
2016-08-24 16:30:10 +00:00
thermal.c
cleanup: DECLARE_CONSOLE_COMMAND only needs 4 args
2016-08-24 16:30:10 +00:00
throttle_ap.c
cleanup: DECLARE_CONSOLE_COMMAND only needs 4 args
2016-08-24 16:30:10 +00:00
timer.c
common: add decimal real number seconds value to timeirnfo output
2017-02-03 20:01:45 -08:00
tpm_registers.c
cr50: Store console lock state in NvMem vars.
2017-02-27 18:50:12 -08:00
uart_buffering.c
UART: Remove X-on/X-off flow control
2016-04-27 10:10:02 -07:00
update_fw.c
rwsig/update_fw: Prevent race in rollback protection
2017-04-26 04:28:08 -07:00
usb_charger.c
bd99955: Improve interrupt / USB charger task wake scheme
2016-06-16 12:27:42 -07:00
usb_i2c.c
cr50: Have INAs and I2Cm enabled when rdd is attached
2017-02-06 14:50:31 -08:00
usb_pd_policy.c
pd: prefer CD pin assignments over EF for USBC->USBC case.
2017-04-06 20:05:08 -07:00
usb_pd_protocol.c
tcpm: anx74xx: Improvements to low power mode for S3/G3 chipset state
2017-04-11 20:22:34 -07:00
usb_pd_tcpc.c
servo_v4: pd: Updated CC_NC and CC_RA macros
2017-03-26 02:15:54 -07:00
usb_port_power_dumb.c
cleanup: DECLARE_CONSOLE_COMMAND only needs 4 args
2016-08-24 16:30:10 +00:00
usb_port_power_smart.c
USB: Remove usb_charge_ports_enabled
2017-04-20 13:09:07 -07:00
usb_update.c
common/usb_update: add support for extra commands
2017-04-26 04:28:07 -07:00
util.c
util: add constant-time memcmp
2017-02-23 16:02:02 -08:00
vboot_hash.c
console: Add non-verbose print config option
2017-02-11 13:06:38 -08:00
vec3.c
common: Add magnetometer online calibration.
2015-10-13 05:28:54 -07:00
version.c
common/rollback: Add support for rollback protection
2017-04-06 03:29:38 -07:00
virtual_battery.c
i2c_passthru: fix virtual battery operation
2016-12-14 06:03:14 -08:00
vstore.c
ec: Add temporary secure storage for the host during boot
2016-01-25 21:46:48 -08:00
wireless.c
cleanup: DECLARE_CONSOLE_COMMAND only needs 4 args
2016-08-24 16:30:10 +00:00