ci: disable strict mode for v2.0c devices
What changed, and why it matters
This change only relaxes a test-suite memory-check for one specific hardware board variant (JADE_V2C). It does not alter the actual device firmware, wallet logic, or any code that end users rely on for security. It is a testing/CI adjustment, not a security fix or vulnerability.
No security action required. Treat as routine test-configuration change. If investigating, confirm the TODO is tracked and strict mode is re-enabled for JADE_V2C once the underlying memory-test discrepancy is resolved.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The commit modifies test_jade.py to pass strict=False to check_mem_stats() when the device under test reports BOARD_TYPE ‘JADE_V2C’. A TODO comment indicates this is temporary. The change is confined to test infrastructure and does not touch firmware, cryptographic, or communication code.
Changed components
test_jade.py CI/test infrastructureInspect captured patch +4 / −2
diff --git a/test_jade.py b/test_jade.py
index cf52ee2..26b6c78 100644
--- a/test_jade.py
+++ b/test_jade.py
@@ -3838,7 +3838,8 @@ def run_api_tests(jadeapi, isble, qemu, authuser=False):
wait(5) # Lets idle tasks clean up
endinfo = jadeapi.get_version_info()
- check_mem_stats(startinfo, endinfo, has_psram, has_ble)
+ strict = endinfo['BOARD_TYPE'] != 'JADE_V2C' # TODO: enable for v2.0c
+ check_mem_stats(startinfo, endinfo, has_psram, has_ble, strict=strict)
rslt = jadeapi.clean_reset()
assert rslt is True
@@ -3943,7 +3944,8 @@ def run_interface_tests(jadeapi,
wait(5) # Lets idle tasks clean up
endinfo = jadeapi.get_version_info()
- check_mem_stats(startinfo, endinfo, has_psram, has_ble)
+ strict = endinfo['BOARD_TYPE'] != 'JADE_V2C' # TODO: enable for v2.0c
+ check_mem_stats(startinfo, endinfo, has_psram, has_ble, strict=strict)
rslt = jadeapi.clean_reset()
assert rslt is True
Why this scored 12/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.