firmware_handler: prevent writing to verify blob
Prevent writing to the verify blob id.
Signed-off-by: Patrick Venture <venture@google.com>
Change-Id: Id7351e1d32b355dccacd5a9720785949fce20156
diff --git a/firmware_handler.cpp b/firmware_handler.cpp
index af3788c..8c9ad43 100644
--- a/firmware_handler.cpp
+++ b/firmware_handler.cpp
@@ -456,9 +456,13 @@
return false;
}
- /* TODO: Prevent writing to the verification blob before they trigger
+ /* Prevent writing to the verification blob before they trigger
* verification.
*/
+ if (item->second->activePath == verifyBlobID)
+ {
+ return false;
+ }
std::vector<std::uint8_t> bytes;