]> granicus.if.org Git - esp-idf/commitdiff
app_update: Don't double-verify secure boot signature during OTA
authorAngus Gratton <angus@espressif.com>
Mon, 16 Jul 2018 06:38:08 +0000 (16:38 +1000)
committerAngus Gratton <gus@projectgus.com>
Mon, 23 Jul 2018 03:45:55 +0000 (13:45 +1000)
esp_image_load() already verifies the signature

components/app_update/esp_ota_ops.c

index 8e26ba162af2e3fc8cfc080909070627859df1ce..48542c23f66cf14ab706f898a421eaa4d42bb773 100644 (file)
@@ -240,14 +240,6 @@ esp_err_t esp_ota_end(esp_ota_handle_t handle)
         goto cleanup;
     }
 
-#ifdef CONFIG_SECURE_BOOT_ENABLED
-    ret = esp_secure_boot_verify_signature(it->part->address, data.image_len);
-    if (ret != ESP_OK) {
-        ret = ESP_ERR_OTA_VALIDATE_FAILED;
-        goto cleanup;
-    }
-#endif
-
  cleanup:
     LIST_REMOVE(it, entries);
     free(it);