On 7/1/21 12:07 PM, Teresa Remmet wrote:
Hi
[...]
Am Donnerstag, den 01.07.2021, 01:08 +0200 schrieb Marek Vasut:
In case the iMX8M boot from eMMC boot partition and the primary image is corrupted, the BootROM is capable of starting a secondary image in the other eMMC boot partition as a fallback.
I would like to ask a more general question. As I could not find information about that. What are the criteria for the BootROM to consider a image as corrupted? I remember on other platforms with NAND where it was a erased page or too many bitflips. What is it here with eMMC?
I didn't find much information on the unsigned images, so there I suspect it is just that parsing the IVT header fails, the DCD tag is missing, something along those lines. There is no checksum, so if there is a bitflip in the image itself, I can imagine it would go undetected. At least in the SPL part of flash.bin, the rest is fitImage and that has checksum.
For signed images, if there is a bitflip, the signature would no longer be valid, so this could be used to detect image corruption.
Maybe Peng (on CC) can clarify this better ?
[...]