#include STM32_HAL_H #include #include "common.h" #include "display.h" #include "image.h" #define LOADER_FGCOLOR 0xFFFF #define LOADER_BGCOLOR 0x0000 #define LOADER_PRINT(X) do { display_print(X, -1); display_print_out(LOADER_FGCOLOR, LOADER_BGCOLOR); } while(0) #define LOADER_PRINTLN(X) do { display_print(X "\n", -1); display_print_out(LOADER_FGCOLOR, LOADER_BGCOLOR); } while(0) void pendsv_isr_handler(void) { __fatal_error("pendsv"); } void display_vendor(const uint8_t *vimg, const char *vstr, uint32_t vstr_len) { display_clear(); if (memcmp(vimg, "TOIf", 4) != 0) { return; } uint16_t w = *(uint16_t *)(vimg + 4); uint16_t h = *(uint16_t *)(vimg + 6); if (w != 120 || h != 120) { return; } uint32_t datalen = *(uint32_t *)(vimg + 8); display_image((DISPLAY_RESX - w) / 2, (DISPLAY_RESY - h) / 2, w, h, vimg + 12, datalen); display_text_center(DISPLAY_RESX / 2, DISPLAY_RESY * 3 / 4 + 20, vstr, vstr_len, FONT_BOLD, 0xFFFF, 0x0000); display_refresh(); } void check_and_jump(void) { LOADER_PRINTLN("checking firmware"); vendor_header vhdr; if (!vendor_parse_header((const uint8_t *)(FIRMWARE_START), &vhdr)) { LOADER_PRINTLN("invalid vendor header"); return; } if (!vendor_check_signature((const uint8_t *)(FIRMWARE_START))) { LOADER_PRINTLN("unsigned vendor header"); return; } // TODO: use keys from vendor header in image_check_signature if (image_check_signature((const uint8_t *)(FIRMWARE_START + vhdr.hdrlen))) { LOADER_PRINTLN("valid firmware image"); // TODO: remove debug wait display_vendor(vhdr.vimg, (const char *)vhdr.vstr, vhdr.vstr_len); HAL_Delay(1000); // end LOADER_PRINTLN("JUMP!"); jump_to(FIRMWARE_START + vhdr.hdrlen + HEADER_SIZE); } else { LOADER_PRINTLN("invalid firmware image"); } } int main(void) { SCB->VTOR = LOADER_START + HEADER_SIZE; periph_init(); display_init(); display_clear(); display_backlight(255); LOADER_PRINTLN("TREZOR Loader"); LOADER_PRINTLN("============="); LOADER_PRINTLN("starting loader"); check_and_jump(); __fatal_error("halt"); return 0; }