Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Improve on bootloader security when Security Bit is set #592

Open
wants to merge 2 commits into
base: master
Choose a base branch
from

Conversation

ksmith3036
Copy link
Contributor

@ksmith3036 ksmith3036 commented Dec 31, 2020

A way to gain access to the flash content, would be for an attacker to reflash only a small part of the Arduino sketch. The code in this pull request tries to prevent this for a client issuing Write word, Write halfword or Write byte commands writing an Erase Row command into the CTRLA register. If these command writes are detected while Security Bit is set, the entire Arduino sketch is erased. Since Erase Row is required before a Flash Write may be executed, this should improve security.

The code changes still allows for sketch updates to be flashed using Arduino Studio and BOSSAC.

@ksmith3036 ksmith3036 marked this pull request as ready for review December 31, 2020 14:43
… word, Half words or Byte combinations, by flashing entire Arduino sketch.
… to optimize bootloader size, to make the bootloader for MKR VIDOR 4000 less than 8 KByte in size.
@CLAassistant
Copy link

CLAassistant commented Apr 9, 2021

CLA assistant check
All committers have signed the CLA.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants