146 Commits (37d3bf56fa9c3d5ee1b0527c5927009a8ab85af1)

Author	SHA1	Message	Date
matejcik	37d3bf56fa	fix(core): make sure run-time settings are reset after wipe (fixes #1322)	4 years ago
matejcik	4ca8f7b0d6	style(core): use relative imports everywhere ... except Monero, which has a rather complex structure and I don't want to search&replace mess with it in case some of the things break memory layout	4 years ago
Martin Milata	830592f2d9	feat(core): add experimental_features setting ... The setting is off by default. When it is enabled protobuf messages marked UNSTABLE are rejected after decoding.	4 years ago
matejcik	e4785d47e0	style: apply black 20.8b1	4 years ago
matejcik	244b264b47	chore(core): fix typing and kwargs usage	4 years ago
Martin Milata	cff4955f93	core: implement SafetyChecks.PromptTemporarily ... Also reword safety checks confirmation dialogs.	4 years ago
Martin Milata	1b982659c4	core: fix boot loop after uploading invalid homescreen (#1205)	4 years ago
Pavol Rusnak	4e11735d22	core/modtrezorui: remove prefill from text functions ... use display.bar where needed to prefill the areas	4 years ago
matejcik	fdcb64ac24	all: rename protobuf `unsafe_prompts` to `safety_checks`	4 years ago
matejcik	57b08c98ed	core: raise error on setting passphrase-on-device without passphrase	4 years ago
matejcik	8e44132d3c	core: replace load_settings with individual setters	4 years ago
matejcik	1109250dcf	core: add option to allow unsafe prompts	4 years ago
Martin Milata	fd117a0c9f	core: raise error on auto-lock value out of range	4 years ago
matejcik	051763575d	core: touch idle timer in keyboards (fixes #1099)	4 years ago
Tomas Susanka	a6acefbdf5	core: wipe before reset and recovery; introduce 'intialized' field	4 years ago
Tomas Susanka	b67be7dd9e	core: forbid all settings if not initialized	4 years ago
matejcik	872e0fb0e0	core: lower scheduler resolution to milliseconds ... This avoids problems with large timeouts causing the scheduler queue to think the time counter has overflown, and ordering the autolock task before immediate tasks. The maximum reasonable time difference is 0x20000000, which in microseconds is ~8 minutes, but in milliseconds a more reasonable ~6 days.	4 years ago
matejcik	01832d5ae9	core: call close_others() in place of ButtonRequest ... this makes sense, really: close_others() requests UI exclusivity, and that is something that generally happens at the same places we emit a ButtonRequest	4 years ago
matejcik	4035aad51b	core: implement auto-lock after a configurable timeout (fixes #75)	4 years ago
matejcik	246998910a	core: refactor usage of input_signals ... this prevents a certain class of UI test failure. It also localizes the use of debuglink signals into the layout classes instead of call sites, which is a design we were already using for confirm_signals	4 years ago
matejcik	09af8aed4e	core: consider lockscreen to be a separate homescreen ... this involves some changes to the workflow defaults: * workflow.start_default() takes no arguments * workflow.set_default() (originally replace_default) configures the default that will be started by next call to start_default(). The intended usecase is to set_default() first and then start it separately. * apps.base.set_homescreen() factors out the logic originally in main.py, that decides which homescreen should be launched. This uses set_default() call. start_default() is then used explicitly in main.py	4 years ago
matejcik	32fcc4ad9c	core: make verify_user_pin accept a Context argument	4 years ago
matejcik	8ca7ffc3b8	core: use wire.PinCancelled/PinInvalid instead of custom versions ... also refactor show_pin_invalid and its usages so that it raises directly note that we are now using PinCancelled instead of ActionCancelled where appropriate	4 years ago
matejcik	eabfcab9b9	core: add default messages to some error codes	4 years ago
Tomas Susanka	1ac0f60550	core: update isort config to place relative imports last	4 years ago
Tomas Susanka	0b7a8449f8	core: style	4 years ago
Tomas Susanka	bf20537f41	core: add option to omit cancel button in HoldToConfirm; add it to reset	4 years ago
Tomas Susanka	aa71c20f2c	core: require hold to confirm	4 years ago
Konnor Klashinsky	70a1f957ed	Fix BackupDevice layout on 18-word seed wallets	4 years ago
matejcik	1e9352b9e0	core: add SD format dialog, generalize sdcard usage	4 years ago
matejcik	938f347514	core: use DUMMY_CONTEXT constant instead of own instance	4 years ago
Tomas Susanka	d5763d9cab	all: implement code review comments	4 years ago
Tomas Susanka	cd09f9ce94	all: modify passphrase source to always on device	4 years ago
Tomas Susanka	277e494ffa	core/recovery: end dry run before showing success ... updates #815	4 years ago
Tomas Susanka	0053511c66	utils: introduce format_plural and move format functions to strings.py	4 years ago
matejcik	f90ba10af3	core: modify function signatures to match python-shamir-mnemonic	4 years ago
Tomas Susanka	d8e956fc6d	core/recovery: change exceptions types; modifications in tests	4 years ago
Tomas Susanka	7f730cb6f9	core/recovery: refactor to exceptions	4 years ago
Tomas Susanka	f4e11a9176	core/recovery: rework arguments	4 years ago
Tomas Susanka	faa9078c2b	core/recovery: refactor word checks and add a test	5 years ago
Tomas Susanka	6594ee9368	core/recovery: correctly inform about share already entered inside first group	5 years ago
Andrew Kozlik	a3b608d8dd	storage, core: Reveal the wipe code status after the device is unlocked.	5 years ago
Andrew Kozlik	a168d661cf	core: Add support for ChangeWipeCode message.	5 years ago
matejcik	34913a328a	all: disallow most RecoveryDevice fields in dry-run (fixes #666)	5 years ago
matejcik	09962708d3	core: move load_device to the debug app	5 years ago
matejcik	fd8aed6105	all: drop XPRV feature of LoadDevice	5 years ago
Pavol Rusnak	16af7f1353	common: add {needs,no}_backup flags to LoadDevice, make it debug only	5 years ago
Tomas Susanka	a8b82975a1	core/management: get next u2f counter	5 years ago
matejcik	0c4fa03575	core/sd_salt: properly await ensure_sd_card	5 years ago
matejcik	75622d92d2	Merge branch 'master' into matejcik/storage-relocation	5 years ago