Max `pBuffer` size for `stse_data_storage_update_data_zone()` unclear due to hidden overhead bytes
Los mantenedores suelen responder en 1 día
Nadie ha tomado este issue todavía.
Evaluación
- Dificultad
- 3/5
- Tiempo estimado
- 1-2 días
- Aptitud para principiantes
- 45/100
- Tipo de issue
- Error
- Claridad
- Bastante claro
- Estado de actividad
- Tranquilo
- Stack tecnológico
- c
- Área
- embedded-iot, security
Línea de trabajo
Start in api/stse_data_storage.h, then trace stsafea_update_data_zone() in services/stsafea/stsafea_data_partition.c through stsafea_frame_transmit() in stsafea_frame_transfer.c and stse_platform_i2c_send_start(). Verify how payload, command fields, CRC, and response length contribute to frame_length; done means the maximum pBuffer size and the >= check are clearly established.
Escrito por el modelo de indexación a partir del texto del issue.
Descripción
I need to write a 639-byte DER certificate into the data partition (NVM zone index 1) of the STSAFE-A110, which has 700 bytes available. I cannot write all 639 bytes in a single call because we configured our Platform Abstraction Layer to use a buffer of STSAFEA_MAX_FRAME_LENGTH_A110 + 3 (507 + 3 = 510) bytes for I2C communication. So I considered implementing a function that writes the certificate by sending it in chunks of up to STSAFEA_MAX_FRAME_LENGTH_A110 (507) bytes via multiple calls to stse_data_storage_update_data_zone().
The problem is that if I try to write a chunk of 507 bytes, STSE_SERVICE_FRAME_SIZE_ERROR is immediately returned because the following condition evaluates to true (507 >= 507). I’m wondering why >= is used instead of simply >, is that a BUG?:
https://github.com/STMicroelectronics/STSELib/blob/7b34b7c9a5cc35eab6bd7c08c29a41efe3d88d8c/services/stsafea/stsafea_data_partition.c#L381-L383
In any case, I reduced the maximum chunk size to STSAFEA_MAX_FRAME_LENGTH_A110 - 1 (506), but then the failure occurs later due to stse_platform_i2c_send_start(), which returns STSE_PLATFORM_BUFFER_ERR, because frame_length is 513 bytes:
stse_ReturnCode_t stse_platform_i2c_send_start(PLAT_UI8 bus_id, PLAT_UI8 dev_addr, PLAT_UI16 speed,
PLAT_UI16 frame_length)
{
/* Check buffer overflow */
if (esc_stse_i2c[bus_id].tx_rx_buffer_length < frame_length) // 510 < 513
{
return STSE_PLATFORM_BUFFER_ERR;
}
esc_stse_i2c[bus_id].tx_rx_frame_length = frame_length;
esc_stse_i2c[bus_id].tx_rx_frame_offset = 0;
return STSE_OK;
}
Note that esc_stse_i2c[bus_id].tx_rx_buffer_length is set by us to STSAFEA_MAX_FRAME_LENGTH_A110 + 3 (507 + 3 = 510).
I would have expected the frame_length argument to be 509 (506 + 3), since here (https://github.com/STMicroelectronics/STSELib/issues/53#issuecomment-3809960369) @TofMassilia13320 mentioned that setting the I2C platform buffer to the maximum value STSAFEA_MAX_FRAME_LENGTH_Axxx + 3 bytes ensures full command coverage of the selected STSAFE-A without overflow at the I2C platform layer.
This led me to assume that STSELib would invoke stse_platform_i2c_send_start() with a frame_length argument that could reach at most STSAFEA_MAX_FRAME_LENGTH_Axxx + 3 (510 in my case).
In other words, I understood that STSELib adds at most 3 bytes to the user data (2 bytes for the response length + 1 byte for the command or response header), as mentioned by @nils-cercariolo-st here: https://github.com/STMicroelectronics/STSELib/issues/53#issuecomment-3802661164. However, this does not seem to hold true, as in my case frame_length is actually 513.
Digging into STSELib, I concluded that the extra 7 bytes are added by stsafea_update_data_zone() and stsafea_frame_transmit(). Specifically:
-
stsafea_update_data_zone()adds 5 bytes at the beginning of the I2C frame: 1 byte header, 1 byte zone access option, 1 byte zone index, and 2 bytes offset:
https://github.com/STMicroelectronics/STSELib/blob/7b34b7c9a5cc35eab6bd7c08c29a41efe3d88d8c/services/stsafea/stsafea_data_partition.c#L374-L379 -
stsafea_frame_transmit()adds 2 bytes of CRC at the end of the I2C frame:
https://github.com/STMicroelectronics/STSELib/blob/7b34b7c9a5cc35eab6bd7c08c29a41efe3d88d8c/services/stsafea/stsafea_frame_transfer.c#L63-L64
So the problem is: how can I determine the maximum length of the buffer pBuffer that I am allowed to pass to stse_data_storage_update_data_zone()?
https://github.com/STMicroelectronics/STSELib/blob/7b34b7c9a5cc35eab6bd7c08c29a41efe3d88d8c/api/stse_data_storage.h#L88-L112
- Lenguaje dominante
- C
- Estrellas
- 15
- Forks
- 12
- Merge medio
- 1 d 5 h
- PR fusionados (30 d)
- 11
Preparar el entorno
- Sin Dockerfile ni archivo de Docker Compose
- Tiene una plantilla de pull request
- Leer la guía de contribución
Primeros pasos
- Lee el issue completo y luego la guía de contribución del proyecto.
- Comenta en el issue que vas a ocuparte — evita que dos personas hagan lo mismo.
- Haz un fork del repositorio y trabaja en una rama.
- Abre un pull request que haga referencia al número del issue.
Más de STMicroelectronics/STSELib
-
Dificultad 3/5 1-2 días Aptitud para principiantes 65/100
STMicroelectronics/STSELib#115 ·
Los mantenedores suelen responder en 1 día
-
# Bug: `stse_perso_info_t` AC status 2-bit mask truncates valid AC valuesQuizá libre de nuevo @Grom- la tomó hace 203 días y no hay ningún pull request abierto. Abiertobug
STMicroelectronics/STSELib#69 · 1 comentario · 1 asignado ·
Los mantenedores suelen responder en 1 día
-
`stse_platform_Crc16_Accumulate()` is not safeQuizá libre de nuevo @nils-cercariolo-st la tomó hace 191 días y no hay ningún pull request abierto. Abierto
STMicroelectronics/STSELib#65 · 3 comentarios · 1 asignado ·
Los mantenedores suelen responder en 1 día
-
STSAFE A120: Reprovisioning is successful, but returns error STSE_INVALID_C_MACQuizá libre de nuevo @Grom- la tomó hace 335 días y no hay ningún pull request abierto. Abiertobug
STMicroelectronics/STSELib#47 · 1 comentario · 1 asignado ·
Los mantenedores suelen responder en 1 día
Todos los issues de STMicroelectronics/STSELib
Issues similares
-
[Issue]: hipsparselt.h C API as shipped now requires C23 -- ONLY because of missing include or guardAbierto
Dificultad 2/5 1-3 horas Aptitud para principiantes 62/100
ROCm/rocm-libraries#13736 ·
Los mantenedores suelen responder en 2 días
-
Dificultad 2/5 1-3 horas Aptitud para principiantes 80/100
Los mantenedores suelen responder en 1 día
-
`inverse()` of a controlled `CUGate` drops the phase parameter γPosiblemente ocupada @rupasri118 la tomó hoy. Abiertobug mod: circuit
Dificultad 2/5 1-3 horas Aptitud para principiantes 66/100
Qiskit/qiskit#17223 · 1 comentario ·
Los mantenedores suelen responder en 1 día
-
Dificultad 2/5 1-3 horas Aptitud para principiantes 68/100
PackageKit/PackageKit#1026 ·
-
Dificultad 2/5 1-3 horas Aptitud para principiantes 70/100
OpenPrinting/libcupsfilters#284 ·
Los mantenedores suelen responder en 1 día