From 97df81de448d8dc85ecaa96636cb0fea26bfa9b2 Mon Sep 17 00:00:00 2001 From: bunnie Date: Mon, 19 Jan 2026 03:34:55 +0800 Subject: [PATCH] fix permissible function code on altboot this allows recovery from revoked keys and trying to load a dev-boot signed image from alt-boot loader --- libs/bao1x-api/src/pubkeys/mod.rs | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/libs/bao1x-api/src/pubkeys/mod.rs b/libs/bao1x-api/src/pubkeys/mod.rs index a89dd1651..8a12bdd8d 100644 --- a/libs/bao1x-api/src/pubkeys/mod.rs +++ b/libs/bao1x-api/src/pubkeys/mod.rs @@ -72,12 +72,16 @@ pub const BOOT0_TO_BOOT1: SecurityConfiguration = SecurityConfiguration { }; /// This is different from a jump directly to loader/baremetal because the -/// function codes *must* be for Boot1. +/// function codes *must* be for Boot1 or Baremetal. Loader is not a valid option. pub const BOOT0_TO_ALTBOOT1: SecurityConfiguration = SecurityConfiguration { image_ptr: crate::LOADER_START as *const u32, pubkey_ptr: crate::BOOT0_START as *const u32, revocation_owc: crate::BOOT0_REVOCATION_OFFSET, - function_codes: &[FunctionCode::Boot1 as u32, FunctionCode::UpdatedBoot1 as u32], + function_codes: &[ + FunctionCode::Boot1 as u32, + FunctionCode::UpdatedBoot1 as u32, + FunctionCode::Baremetal as u32, + ], }; pub const BOOT1_TO_LOADER_OR_BAREMETAL: SecurityConfiguration = SecurityConfiguration {