kleidos/src/ota/ at main · jmrp.io/kleidos

[READ-ONLY] Mirror of https://github.com/jmrplens/kleidos. Kleidos — Hardware BLE password manager for ESP32-S3 (M5StickC Plus2, StickS3, M5Stack Gray, T-Deck, Cardputer) jmrplens.github.io/kleidos/

Fork 0

kleidos / src / ota /

at main 2 files

José M. Requena Plens Fix clang-tidy braces, init-variables, and use-auto findings 10d ago

9bf88695

ota_state_logic.cpp

Fix clang-tidy braces, init-variables, and use-auto findings

1 week ago

ota_state_logic.h

feat(ota): reject firmware downgrade in app version check Add versionIsAcceptable(running, candidate) to ota_state_logic: parses major.minor.patch numerically and returns false when candidate < running (defense-in-depth on top of eFuse SECURE_VERSION). Wire the check into AppUpdateSession::finishAndSetBootPartition(): read esp_app_desc_t.version from the staged partition after esp_ota_end() and abort before set_boot_partition when the candidate version would be a downgrade. Fail open if the description cannot be read. Logged via KLEIDOS_LOGW/I (no credentials). 17 new native test cases (TDD: RED stub -> GREEN implementation). Claude-Session: https://claude.ai/code/session_01SLSU3WoYEyX1J7qWXxmyKo

2 weeks ago

Configure Feed

Configure Feed