fix(core/prodtest): fix prodtest run with unlocked bootloader

[no changelog]
trezor · Sep 7, 2024 · 5eb6897 · 5eb6897
1 parent be9255a
commit 5eb6897
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/core/embed/prodtest/optiga_prodtest.c b/core/embed/prodtest/optiga_prodtest.c
@@ -143,6 +143,12 @@ void pair_optiga(void) {
   uint8_t secret[SECRET_OPTIGA_KEY_LEN] = {0};
 
   if (secret_optiga_get(secret) != sectrue) {
+    if (secret_optiga_writable() != sectrue) {
+      // optiga pairing secret is unwritable, so fail
+      optiga_pairing_state = OPTIGA_PAIRING_ERR_WRITE_FLASH;
+      return;
+    }
+
     // Generate the pairing secret.
     if (OPTIGA_SUCCESS != optiga_get_random(secret, sizeof(secret))) {
       optiga_pairing_state = OPTIGA_PAIRING_ERR_RNG;