[rom] The ROM_EXT selection is based on the security version
Open
@cfrantz is already working on this.
Since May 28, 2024.
SW:ROM
Type:FutureRelease
- Dominant language
- SystemVerilog
- Stars
- 3.6k
- Forks
- 1.1k
- Avg merge
- 2d 22h
- Merged PRs (30d)
- 141
Description
### Description
The ROM currently uses only the `security_version` field in the manifest to select which ROM_EXT to boot.
This makes it impossible to build and distribute a new ROM_EXT that doesn't advance the security version. This is at odds with some testing and roll-out models where a new ROM_EXT (with new features or bugfixes) is created and rolled out as a test before rolling out a version that protects against rollback.
The ROM should use the manifest version fields to select the preferred ROM_EXT to boot. The security version should be used to prevent rollback to known-bad ROM_EXTs.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.