[PATCH 0/1] libcamera: ipa: allow trusting modules by checksum
libcamera at bzzt.net
libcamera at bzzt.net
Mon Jan 22 12:40:39 CET 2024
From: Arnout Engelen <arnout at bzzt.net>
This is a variation on
https://lists.libcamera.org/pipermail/libcamera-devel/2024-January/040186.html
that embeds the checksums in the installed binary instead of
loading a configuration file. Post-processing the library like
this is of course rather icky, but testing with `ipa_verify` it
does appear to work. I have not tested this in a 'real' application
yet, and have not tested yet with more than a single module available,
as I wanted to collect feedback on the approach first.
Arnout Engelen (1):
libcamera: ipa: allow trusting modules by checksum
include/libcamera/internal/ipa_manager.h | 9 ++-
include/libcamera/internal/ipa_module.h | 2 +
meson_options.txt | 8 +++
src/apps/ipa-verify/main.cpp | 43 +++++++++++-
src/apps/ipa-verify/meson.build | 2 +-
src/ipa/ipa-checksum-install.sh | 24 +++++++
src/ipa/meson.build | 7 ++
src/libcamera/ipa_manager.cpp | 88 +++++++++++++++++++++---
src/libcamera/ipa_module.cpp | 30 ++++++++
src/meson.build | 18 ++++-
10 files changed, 215 insertions(+), 16 deletions(-)
create mode 100644 src/ipa/ipa-checksum-install.sh
--
2.43.0
More information about the libcamera-devel
mailing list