[PATCH 0/1] libcamera: ipa: allow trusting modules by checksum

libcamera at bzzt.net libcamera at bzzt.net
Mon Jan 22 12:40:39 CET 2024


From: Arnout Engelen <arnout at bzzt.net>

This is a variation on
https://lists.libcamera.org/pipermail/libcamera-devel/2024-January/040186.html
that embeds the checksums in the installed binary instead of
loading a configuration file. Post-processing the library like
this is of course rather icky, but testing with `ipa_verify` it
does appear to work. I have not tested this in a 'real' application
yet, and have not tested yet with more than a single module available,
as I wanted to collect feedback on the approach first.

Arnout Engelen (1):
  libcamera: ipa: allow trusting modules by checksum

 include/libcamera/internal/ipa_manager.h |  9 ++-
 include/libcamera/internal/ipa_module.h  |  2 +
 meson_options.txt                        |  8 +++
 src/apps/ipa-verify/main.cpp             | 43 +++++++++++-
 src/apps/ipa-verify/meson.build          |  2 +-
 src/ipa/ipa-checksum-install.sh          | 24 +++++++
 src/ipa/meson.build                      |  7 ++
 src/libcamera/ipa_manager.cpp            | 88 +++++++++++++++++++++---
 src/libcamera/ipa_module.cpp             | 30 ++++++++
 src/meson.build                          | 18 ++++-
 10 files changed, 215 insertions(+), 16 deletions(-)
 create mode 100644 src/ipa/ipa-checksum-install.sh

-- 
2.43.0



More information about the libcamera-devel mailing list