chore(core): add VENDOR_FW_TYPE_CA to vendor_fw_type_t
What the developer wrote
Authored by M1nd3r
chore(core): add VENDOR_FW_TYPE_CA to vendor_fw_type_t
[no changelog]
What changed, and why it matters
This commit simply adds a new named label, VENDOR_FW_TYPE_CA, to a list of firmware types in a header file. It does not change any executable code, logic, or security behavior. It is a routine code-maintenance change with no security relevance visible in the diff.
No security action required. Review the follow-up commits that consume this new enumerator to ensure any future logic using VENDOR_FW_TYPE_CA enforces appropriate trust boundaries.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The patch extends the vendor_fw_type_t enum in core/embed/sec/image/inc/sec/image.h with one additional enumerator (value 5) labeled VENDOR_FW_TYPE_CA. No functions, parsing logic, validation checks, or image-handling code are modified. The change is purely additive and declarative.
Changed components
core/embed/sec/image/inc/sec/image.hInspect captured patch +2 / −0
diff --git a/core/embed/sec/image/inc/sec/image.h b/core/embed/sec/image/inc/sec/image.h
index 4b92b132..d87b533a 100644
--- a/core/embed/sec/image/inc/sec/image.h
+++ b/core/embed/sec/image/inc/sec/image.h
@@ -98,6 +98,8 @@ typedef enum {
VENDOR_FW_TYPE_BTC_ONLY = 3,
// Factory tester firmware
VENDOR_FW_TYPE_PRODTEST = 4,
+ // Trezor CA firmware
+ VENDOR_FW_TYPE_CA = 5,
} vendor_fw_type_t;
typedef struct {
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.