build(core): enable VCP for PYOPT=0 firmware
What the developer wrote
Authored by Martin Milata
build(core): enable VCP for PYOPT=0 firmware
[no changelog]
What changed, and why it matters
This commit changes the build settings for Trezor's core firmware so that when a special debug/development build is made (with optimization disabled, PYOPT=0), a Virtual COM Port (VCP) debug console is enabled. This is a build/debugging feature, not a change to production firmware. It does not appear to be a security fix or vulnerability patch, but enabling debug consoles can carry security risks if accidentally used in production devices.
No immediate action required. Treat as a build/debug configuration change. If reviewing supply chain security, verify that PYOPT=0 debug firmware with VCP enabled cannot be inadvertently shipped or flashed as production firmware, and that debug consoles are appropriately access-controlled.
Security signals we found
Debug console enabled for non-production firmware builds only
No changelog entry provided
No mention of security, CVE, vulnerability, or researcher attribution in commit
Evidence from the diff
The commit modifies core/Makefile to add --dbg-console vcp to the build options when PYOPT=0. PYOPT=0 is a non-optimized, debug-oriented firmware build. VCP (Virtual COM Port) provides a USB serial debug console. This change only affects debug builds and does not alter production (PYOPT=1) firmware. There is no direct evidence in the commit of a vulnerability, exploit, or security fix.
Changed components
core/MakefileTrezor Core firmware debug builds (PYOPT=0)Inspect captured patch +1 / −0
diff --git a/core/Makefile b/core/Makefile
index 0076e2bd..0f514b7d 100644
--- a/core/Makefile
+++ b/core/Makefile
@@ -51,6 +51,7 @@ XTASK_BUILD_OPTS += --pyopt true
else ifeq ($(PYOPT),0)
XTASK_BUILD_OPTS += --pyopt false
XTASK_BUILD_OPTS += --disable-animation
+XTASK_BUILD_OPTS += --dbg-console vcp
endif
ifeq ($(TREZOR_MEMPERF),1)
XTASK_BUILD_OPTS += --mem-perf
Why this scored 18/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.