trezor-firmware/bootloader/bootloader.c

/*
 * This file is part of the TREZOR project, https://trezor.io/
 *
 * Copyright (C) 2014 Pavol Rusnak <stick@satoshilabs.com>
 *
 * This library is free software: you can redistribute it and/or modify
 * it under the terms of the GNU Lesser General Public License as published by
 * the Free Software Foundation, either version 3 of the License, or
 * (at your option) any later version.
 *
 * This library is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU Lesser General Public License for more details.
 *
 * You should have received a copy of the GNU Lesser General Public License
 * along with this library.  If not, see <http://www.gnu.org/licenses/>.
 */

#include <string.h>

#include <libopencm3/stm32/rcc.h>
#include <libopencm3/stm32/gpio.h>
#include <libopencm3/cm3/scb.h>

#include "bootloader.h"
#include "signatures.h"
#include "buttons.h"
#include "setup.h"
#include "usb.h"
#include "oled.h"
#include "util.h"
#include "signatures.h"
#include "layout.h"
#include "rng.h"
#include "timer.h"
#include "memory.h"

void layoutFirmwareFingerprint(const uint8_t *hash)
{
	char str[4][17];
	for (int i = 0; i < 4; i++) {
		data2hex(hash + i * 8, 8, str[i]);
	}
	layoutDialog(&bmp_icon_question, "Abort", "Continue", "Compare fingerprints", str[0], str[1], str[2], str[3], NULL, NULL);
}

bool get_button_response(void)
{
	do {
		delay(100000);
		buttonUpdate();
	} while (!button.YesUp && !button.NoUp);
	return button.YesUp;
}

void show_halt(const char *line1, const char *line2)
{
	layoutDialog(&bmp_icon_error, NULL, NULL, NULL, line1, line2, NULL, "Unplug your TREZOR,", "reinstall firmware.", NULL);
	shutdown();
}

static void show_unofficial_warning(const uint8_t *hash)
{
	layoutDialog(&bmp_icon_warning, "Abort", "I'll take the risk", NULL, "WARNING!", NULL, "Unofficial firmware", "detected.", NULL, NULL);

	bool but = get_button_response();
	if (!but) {  // no button was pressed -> halt
		show_halt("Unofficial firmware", "aborted.");
	}

	layoutFirmwareFingerprint(hash);

	but = get_button_response();
	if (!but) {  // no button was pressed -> halt
		show_halt("Unofficial firmware", "aborted.");
	}

	// everything is OK, user pressed 2x Continue -> continue program
}

static void __attribute__((noreturn)) load_app(int signed_firmware)
{
	// zero out SRAM
	memset_reg(_ram_start, _ram_end, 0);

	jump_to_firmware((const vector_table_t *) FLASH_PTR(FLASH_APP_START), signed_firmware);
}

static void bootloader_loop(void)
{
	oledClear();
	oledDrawBitmap(0, 0, &bmp_logo64);
	if (firmware_present_new()) {
		oledDrawStringCenter(90, 10, "TREZOR", FONT_STANDARD);
		oledDrawStringCenter(90, 30, "Bootloader", FONT_STANDARD);
		oledDrawStringCenter(90, 50, VERSTR(VERSION_MAJOR) "." VERSTR(VERSION_MINOR) "." VERSTR(VERSION_PATCH), FONT_STANDARD);
	} else {
		oledDrawStringCenter(90, 10, "Welcome!", FONT_STANDARD);
		oledDrawStringCenter(90, 30, "Please visit", FONT_STANDARD);
		oledDrawStringCenter(90, 50, "trezor.io/start", FONT_STANDARD);
	}
	oledRefresh();

	usbLoop();
}

int main(void)
{
#ifndef APPVER
	setup();
#endif
	__stack_chk_guard = random32(); // this supports compiler provided unpredictable stack protection checks
#ifndef APPVER
	memory_protect();
	oledInit();
#endif

	mpu_config_bootloader();

#ifndef APPVER
	// at least one button is unpressed
	uint16_t state = gpio_port_read(BTN_PORT);
	int unpressed = ((state & BTN_PIN_YES) == BTN_PIN_YES || (state & BTN_PIN_NO) == BTN_PIN_NO);

	if (firmware_present_new() && unpressed) {

		oledClear();
		oledDrawBitmap(40, 0, &bmp_logo64_empty);
		oledRefresh();

		const image_header *hdr = (const image_header *)FLASH_PTR(FLASH_FWHEADER_START);

		uint8_t fingerprint[32];
		int signed_firmware = signatures_new_ok(hdr, fingerprint);
		if (SIG_OK != signed_firmware) {
			show_unofficial_warning(fingerprint);
			timer_init();
		}

		if (SIG_OK != check_firmware_hashes(hdr)) {
			layoutDialog(&bmp_icon_error, NULL, NULL, NULL, "Broken firmware", "detected.", NULL, "Unplug your TREZOR,", "reinstall firmware.", NULL);
			shutdown();
		}

		mpu_config_off();
		load_app(signed_firmware);
	}
#endif

	bootloader_loop();

	return 0;
}