@onekeyfe/hd-core 1.2.0-alpha.87 → 1.2.0-alpha.89

package/__tests__/check-all-firmware-release-protocol-v2.test.ts

@@ -25,6 +25,11 @@ const currentVersions: DeviceStateVersions = {
   se04: '1.0.0',
 };
 
+const validComponentIntegrity = {
+  expectedSize: 1024,
+  fingerprint: '1'.repeat(64),
+};
+
 const release: IFirmwareReleaseInfo = {
   required: true,
   version: [2, 0, 0],
@@ -40,21 +45,25 @@ const release: IFirmwareReleaseInfo = {
       target: 'BOOTLOADER',
       url: 'https://example.com/bootloader.bin',
       version: [1, 1, 0],
+      ...validComponentIntegrity,
     },
     applicationP1: {
       target: 'APPLICATION_P1',
       url: 'https://example.com/application-p1.bin',
       version: [2, 0, 0],
+      ...validComponentIntegrity,
     },
     se02: {
       target: 'SE02',
       url: 'https://example.com/se02.bin',
       version: [2, 0, 0],
+      ...validComponentIntegrity,
     },
     se03: {
       target: 'SE03',
       url: 'https://example.com/se03.bin',
       version: [1, 0, 0],
+      ...validComponentIntegrity,
     },
     romloader: {
       target: 'ROMLOADER',
@@ -395,11 +404,13 @@ describe('checkAllFirmwareRelease Protocol V2 support', () => {
           target: 'APPLICATION_P1',
           url: 'https://example.com/application-p1.okpkg',
           version: [1, 0, 0],
+          ...validComponentIntegrity,
         },
         coprocessor: {
           target: 'COPROCESSOR',
           url: 'https://example.com/coprocessor.okpkg',
           version: [1, 0, 0],
+          ...validComponentIntegrity,
         },
       },
     };
@@ -453,6 +464,7 @@ describe('checkAllFirmwareRelease Protocol V2 support', () => {
           target: 'APPLICATION_P1',
           url: 'https://example.com/application-p1.okpkg',
           version: [1, 0, 0],
+          ...validComponentIntegrity,
         },
       },
     };
@@ -526,8 +538,18 @@ describe('checkAllFirmwareRelease Protocol V2 support', () => {
       ...release,
       installOrder: ['se01', 'se02', 'se03', 'se04'],
       components: {
-        se01: { target: 'SE01', url: 'https://example.com/se01.bin', version: [1, 0, 0] },
-        se02: { target: 'SE02', url: 'https://example.com/se02.bin', version: [2, 0, 0] },
+        se01: {
+          target: 'SE01',
+          url: 'https://example.com/se01.bin',
+          version: [1, 0, 0],
+          ...validComponentIntegrity,
+        },
+        se02: {
+          target: 'SE02',
+          url: 'https://example.com/se02.bin',
+          version: [2, 0, 0],
+          ...validComponentIntegrity,
+        },
         se03: { target: 'SE03', url: 'https://example.com/se03.bin', version: [1, 0, 0] },
         se04: { target: 'SE04', url: 'https://example.com/se04.bin', version: [1, 0, 0] },
       },

package/__tests__/firmware-memory-host.test.ts

@@ -90,9 +90,13 @@ describe('prepareFirmwareUpdateV4MemoryHost', () => {
     expect(sdk.registerFirmwareUpdateHostBinding).toHaveBeenCalledWith(
       expect.objectContaining({ preparedPlanDigest: host.preparedPlan.preparedPlanDigest })
     );
-    expect(host.componentArtifacts.boot?.size).toBe(componentBinary.byteLength);
+    const componentArtifact = host.preparedPlan.artifacts.find(
+      artifact => artifact.target === 'boot'
+    )?.artifact;
+    expect(componentArtifact?.size).toBe(componentBinary.byteLength);
+    new Uint8Array(componentBinary).fill(9);
     const opened = await artifactReader!.open({
-      artifactRef: host.componentArtifacts.boot!.artifactRef,
+      artifactRef: componentArtifact!.artifactRef,
     });
     const chunk = await artifactReader!.read({
       readerId: opened.readerId,

package/__tests__/firmware-update/firmware-update-plan.test.ts

@@ -306,6 +306,8 @@ describe('buildFirmwareUpdatePlan', () => {
           applicationP1: {
             target: 'APPLICATION_P1',
             url: 'https://firmware.onekey.so/pro2/application-p1.bin',
+            expectedSize: 1024,
+            fingerprint: '1111111111111111111111111111111111111111111111111111111111111111',
           },
         },
       },
@@ -326,6 +328,8 @@ describe('buildFirmwareUpdatePlan', () => {
           applicationP1: {
             target: 'APPLICATION_P1',
             url: 'https://firmware.onekey.so/pro2/application-p1.bin',
+            expectedSize: 1024,
+            fingerprint: '1111111111111111111111111111111111111111111111111111111111111111',
           },
         },
       })
@@ -377,10 +381,14 @@ describe('buildFirmwareUpdatePlan', () => {
             bootloader: {
               target: 'BOOTLOADER',
               url: 'https://firmware.onekey.so/pro2/bootloader.bin',
+              expectedSize: 2048,
+              fingerprint: '2222222222222222222222222222222222222222222222222222222222222222',
             },
             se01: {
               target: 'SE01',
               url: 'https://firmware.onekey.so/pro2/se01.bin',
+              expectedSize: 512,
+              fingerprint: '3333333333333333333333333333333333333333333333333333333333333333',
             },
           },
         },
@@ -404,6 +412,41 @@ describe('buildFirmwareUpdatePlan', () => {
     );
   });
 
+  test.each([
+    {
+      expectedSize: undefined,
+      fingerprint: '1'.repeat(64),
+    },
+    {
+      expectedSize: 1024,
+      fingerprint: undefined,
+    },
+  ])('rejects a remote Pro2 component without complete integrity metadata', integrity => {
+    expectFirmwarePlanInvalid(
+      () =>
+        buildFirmwareUpdatePlan({
+          features: createFeatures({ deviceType: EDeviceType.Pro2 }),
+          firmwareType: EFirmwareType.Universal,
+          platform: 'desktop',
+          firmware: {
+            status: 'required',
+            release: {
+              components: {
+                applicationP1: {
+                  target: 'APPLICATION_P1',
+                  url: 'https://firmware.onekey.so/pro2/application-p1.bin',
+                  ...integrity,
+                },
+              },
+            },
+          },
+          ble: noUpdate,
+          bootloader: noUpdate,
+        }),
+      'integrity metadata is invalid'
+    );
+  });
+
   test('rejects Pro2 ROMLOADER because it requires a separate loader flow', () => {
     expect(() =>
       buildFirmwareUpdatePlan({
@@ -435,10 +478,14 @@ describe('buildFirmwareUpdatePlan', () => {
           application: {
             target: 'APPLICATION_P1',
             url: 'https://firmware.onekey.so/pro2/application.bin',
+            expectedSize: 1024,
+            fingerprint: '1111111111111111111111111111111111111111111111111111111111111111',
           },
           applicationDuplicate: {
             target: 'APPLICATION_P1',
             url: 'https://firmware.onekey.so/pro2/application-duplicate.bin',
+            expectedSize: 1024,
+            fingerprint: '2222222222222222222222222222222222222222222222222222222222222222',
           },
         },
       },