Skip to content

Signing broke by #8507 and arduino-builder update #8659

@earlephilhower

Description

@earlephilhower

See discussion in earlephilhower/arduino-pico#783

arduino-builder no longer includes {build.path} in the includes, so the generated Updater_Signing.h is never used.

#8507 adjusts _size here but it should be binSize:

int binSize = _size;
if (expectedSigLen > 0) {
_size -= (sigLen + sizeof(uint32_t) /* The siglen word */);
}

That means the signature will be calculated over the entire blob, including the signature itself, causing failure.

See the prior line:

int binSize = _size - sigLen - sizeof(uint32_t) /* The siglen word */;

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions