diff options
| author | Vadim Bendebury <vbendeb@chromium.org> | 2017-02-18 21:21:33 -0800 |
|---|---|---|
| committer | ChromeOS Commit Bot <chromeos-commit-bot@chromium.org> | 2017-03-02 16:30:16 +0000 |
| commit | 1210ff1b9c9b288ffe11bf8e123fc795b09a151d (patch) | |
| tree | 116568064d9822a9452a108352dc3435da7ba942 /core | |
| parent | 5fbdd1dbd710bb88c25ff9b287a8f3e24ceec516 (diff) | |
| download | chrome-ec-1.9308_B.0.tar.gz | |
g: harden upgrade validity checks for prod imagesv1.9308_B.0
Let's not allow downloading older images when in prod mode.
When the received chunk is destined into RO or RW header, verify that
the chunk's version is not lower than the current running version.
Also, if the chunk is not properly aligned with the header, verify
that it does not overlap with the header in any way.
BRANCH=none
BUG=chrome-os-partner:63098
TEST=verified that older images are rejected by prod images, and newer
and current level are accepted.
Verified that dev images still allow to downgrade.
Change-Id: I19c74f1d1bb5469cc935293a5841405149a968f6
Signed-off-by: Vadim Bendebury <vbendeb@chromium.org>
Reviewed-on: https://chromium-review.googlesource.com/448702
Reviewed-by: Randall Spangler <rspangler@chromium.org>
Diffstat (limited to 'core')
0 files changed, 0 insertions, 0 deletions