mirror of
https://github.com/imjasonh/esp32
synced 2026-07-06 23:52:24 +00:00
sig.rs: - reject empty DSSE signatures array (was index panic) - check DSSE payloadType is application/vnd.in-toto+json - check each cert's notBefore/notAfter window vs wall clock - drop dead Sha256/Sha384 imports + _unused_keep_imports stub main.rs: - drop the demo ipify/wttr fetches; rollback no longer depends on third-party uptime - add a Wi-Fi connect watchdog that reboots after 60 s of hang - install_panic_restart_hook so panics flush+restart instead of landing in IDF's generic panic path - comment the dual-path tracing (registry layer + log-always to EspLogger) and the NVS-error-vs-missing semantics cloud_log.rs: - LogQueue mutex now recovers from poison via unwrap_or_else - replace hardcoded "esp32_blinky::*" target strings with module_path!() constants exported from each module - add insertId on every entry so Cloud Logging preserves stable within-second order - raise backoff exp cap to 6 so the 5 min ceiling is actually reachable ota.rs: - widen NVS string buffer for repo/tag (96 -> 256 B); 96 silently fell back to defaults if a repo string overflowed - debug_assert base >= 1 s in jittered() to catch a 0 s misconfig - assert sig index has exactly 1 manifest instead of silently picking the first - log verify_bundle elapsed ms (Xtensa P-256/P-384 perf canary) - note token-reuse risk between phase 1 and phase 2 provision tool: - --dry-run for parsing checks without embuild artifacts - warn loudly when sa_key_pem is inside the worktree - delete staged identities JSON after the partition image is generated publisher tool: - pull-verify now asserts layer mediaType matches the firmware type, not just layer count Makefile: - set -eo pipefail in the publish recipe so a publisher crash surfaces directly instead of being swallowed by the digest pipeline new module src/nvs_util.rs consolidates the read_str / read_blob helpers that were duplicated across cloud_log/trust/ota/main. https://claude.ai/code/session_01XkNKhsMjCMg4HMTzf3ZZYC |
||
|---|---|---|
| .. | ||
| .cargo | ||
| src | ||
| Cargo.lock | ||
| Cargo.toml | ||
| rust-toolchain.toml | ||