dangernoodle-io / TaipanMiner / 24543844009

90%

push

github

fix: close rollback-to-garbage window on first-boot partition fixup (#103)

Two complementary safeguards for the brick window identified on the
N8-T first-flash audit: when partition_fixup rewrites a foreign table
(e.g. BLACKBOX factory+ota_0) to our ota_0/ota_1 layout, ota_1 is
left pointing at whatever bytes happened to live at 0x200000 — not a
valid app.

- partition_fixup: duplicate ota_0 into ota_1 after writing the new
  partition table, using the existing chunked erase+read+write pattern.
  Anti-rollback now targets a valid copy on first boot.

- ota_validator: preflight the other OTA slot in ota_validator_start().
  If rollback would land on an invalid image, mark-valid immediately
  rather than arming the 15-minute timer against a rollback that would
  brick the device.

230 of 290 branches covered (79.31%)

Branch coverage included in aggregate %.

690 of 709 relevant lines covered (97.32%)

586521.93 hits per line