Max `pBuffer` size for `stse_data_storage_update_data_zone()` unclear due to hidden overhead bytes
I maintainer di solito rispondono entro 1 giorno
Nessuno ha ancora preso questa issue.
Valutazione
- Difficoltà
- 3/5
- Tempo stimato
- 1-2 giorni
- Idoneità per principianti
- 45/100
- Tipo di issue
- Bug
- Chiarezza
- Abbastanza chiara
- Stato di attività
- Tranquilla
- Stack tecnologico
- c
- Ambito
- embedded-iot, security
Direzione di ricerca
Start in api/stse_data_storage.h, then trace stsafea_update_data_zone() in services/stsafea/stsafea_data_partition.c through stsafea_frame_transmit() in stsafea_frame_transfer.c and stse_platform_i2c_send_start(). Verify how payload, command fields, CRC, and response length contribute to frame_length; done means the maximum pBuffer size and the >= check are clearly established.
Scritto dal modello di indicizzazione a partire dal testo della issue.
Descrizione
I need to write a 639-byte DER certificate into the data partition (NVM zone index 1) of the STSAFE-A110, which has 700 bytes available. I cannot write all 639 bytes in a single call because we configured our Platform Abstraction Layer to use a buffer of STSAFEA_MAX_FRAME_LENGTH_A110 + 3 (507 + 3 = 510) bytes for I2C communication. So I considered implementing a function that writes the certificate by sending it in chunks of up to STSAFEA_MAX_FRAME_LENGTH_A110 (507) bytes via multiple calls to stse_data_storage_update_data_zone().
The problem is that if I try to write a chunk of 507 bytes, STSE_SERVICE_FRAME_SIZE_ERROR is immediately returned because the following condition evaluates to true (507 >= 507). I’m wondering why >= is used instead of simply >, is that a BUG?:
https://github.com/STMicroelectronics/STSELib/blob/7b34b7c9a5cc35eab6bd7c08c29a41efe3d88d8c/services/stsafea/stsafea_data_partition.c#L381-L383
In any case, I reduced the maximum chunk size to STSAFEA_MAX_FRAME_LENGTH_A110 - 1 (506), but then the failure occurs later due to stse_platform_i2c_send_start(), which returns STSE_PLATFORM_BUFFER_ERR, because frame_length is 513 bytes:
stse_ReturnCode_t stse_platform_i2c_send_start(PLAT_UI8 bus_id, PLAT_UI8 dev_addr, PLAT_UI16 speed,
PLAT_UI16 frame_length)
{
/* Check buffer overflow */
if (esc_stse_i2c[bus_id].tx_rx_buffer_length < frame_length) // 510 < 513
{
return STSE_PLATFORM_BUFFER_ERR;
}
esc_stse_i2c[bus_id].tx_rx_frame_length = frame_length;
esc_stse_i2c[bus_id].tx_rx_frame_offset = 0;
return STSE_OK;
}
Note that esc_stse_i2c[bus_id].tx_rx_buffer_length is set by us to STSAFEA_MAX_FRAME_LENGTH_A110 + 3 (507 + 3 = 510).
I would have expected the frame_length argument to be 509 (506 + 3), since here (https://github.com/STMicroelectronics/STSELib/issues/53#issuecomment-3809960369) @TofMassilia13320 mentioned that setting the I2C platform buffer to the maximum value STSAFEA_MAX_FRAME_LENGTH_Axxx + 3 bytes ensures full command coverage of the selected STSAFE-A without overflow at the I2C platform layer.
This led me to assume that STSELib would invoke stse_platform_i2c_send_start() with a frame_length argument that could reach at most STSAFEA_MAX_FRAME_LENGTH_Axxx + 3 (510 in my case).
In other words, I understood that STSELib adds at most 3 bytes to the user data (2 bytes for the response length + 1 byte for the command or response header), as mentioned by @nils-cercariolo-st here: https://github.com/STMicroelectronics/STSELib/issues/53#issuecomment-3802661164. However, this does not seem to hold true, as in my case frame_length is actually 513.
Digging into STSELib, I concluded that the extra 7 bytes are added by stsafea_update_data_zone() and stsafea_frame_transmit(). Specifically:
-
stsafea_update_data_zone()adds 5 bytes at the beginning of the I2C frame: 1 byte header, 1 byte zone access option, 1 byte zone index, and 2 bytes offset:
https://github.com/STMicroelectronics/STSELib/blob/7b34b7c9a5cc35eab6bd7c08c29a41efe3d88d8c/services/stsafea/stsafea_data_partition.c#L374-L379 -
stsafea_frame_transmit()adds 2 bytes of CRC at the end of the I2C frame:
https://github.com/STMicroelectronics/STSELib/blob/7b34b7c9a5cc35eab6bd7c08c29a41efe3d88d8c/services/stsafea/stsafea_frame_transfer.c#L63-L64
So the problem is: how can I determine the maximum length of the buffer pBuffer that I am allowed to pass to stse_data_storage_update_data_zone()?
https://github.com/STMicroelectronics/STSELib/blob/7b34b7c9a5cc35eab6bd7c08c29a41efe3d88d8c/api/stse_data_storage.h#L88-L112
- Lingua principale
- C
- Stelle
- 15
- Fork
- 12
- Merge medio
- 1g 5h
- PR unite (30g)
- 11
Preparare l'ambiente
- Nessun Dockerfile né file Docker Compose
- Ha un modello di pull request
- Leggi la guida per i contributori
Come iniziare
- Leggi tutta la issue e poi la guida ai contributi del progetto.
- Commenta sulla issue per dire che te ne occupi tu — evita che due persone facciano lo stesso lavoro.
- Fai un fork del repository e lavora su un branch.
- Apri una pull request che faccia riferimento al numero della issue.
Altre issue di STMicroelectronics/STSELib
-
Difficoltà 3/5 1-2 giorni Idoneità per principianti 65/100
STMicroelectronics/STSELib#115 ·
I maintainer di solito rispondono entro 1 giorno
-
# Bug: `stse_perso_info_t` AC status 2-bit mask truncates valid AC valuesForse di nuovo libera @Grom- l’ha presa 199 giorni fa e non c’è nessuna pull request aperta. Apertabug
STMicroelectronics/STSELib#69 · 1 commento · 1 assegnatario ·
I maintainer di solito rispondono entro 1 giorno
-
`stse_platform_Crc16_Accumulate()` is not safeForse di nuovo libera @nils-cercariolo-st l’ha presa 188 giorni fa e non c’è nessuna pull request aperta. Aperta
STMicroelectronics/STSELib#65 · 3 commenti · 1 assegnatario ·
I maintainer di solito rispondono entro 1 giorno
-
STSAFE A120: Reprovisioning is successful, but returns error STSE_INVALID_C_MACForse di nuovo libera @Grom- l’ha presa 331 giorni fa e non c’è nessuna pull request aperta. Apertabug
STMicroelectronics/STSELib#47 · 1 commento · 1 assegnatario ·
I maintainer di solito rispondono entro 1 giorno
Tutte le issue di STMicroelectronics/STSELib
Issue simili
-
Difficoltà 2/5 1-3 ore Idoneità per principianti 76/100
osam-cologne/archlinux-proaudio#909 ·
I maintainer di solito rispondono entro 1 giorno
-
Difficoltà 2/5 1-3 ore Idoneità per principianti 84/100
ARM-software/CMSIS-DSP#354 ·
-
ci: Verify install never runs examples_install or tests_install, so a clear they widen passesApertaseverity: low
Difficoltà 2/5 1-3 ore Idoneità per principianti 68/100
luainkernel/lunatik#1876 ·
I maintainer di solito rispondono entro 1 giorno
-
good first issue help wanted
Difficoltà 2/5 1-3 ore Idoneità per principianti 77/100
I maintainer di solito rispondono entro 1 giorno
-
documentation good first issue help wanted
Difficoltà 2/5 1-3 ore Idoneità per principianti 76/100
ai-quokka-wannabe/link#40 ·