Implement non-swap upgrade method

Description

As shows, it is hard to get the swap upgrade process to be correct. Since the bootloader will often be written to protected memory, and never upgraded, we really want its code to be as simple as possible.

This ticket is to track implementing a compile-time-chosen alternative to swapping that merely takes the image in slot 1 and writes it to slot 0. This is more robust against these power and reset situations, because if the signature of slot 0 is not correct, the copy can just be restarted, and as long as the device is eventually left on long enough to finish, the upgrade will complete.

Status

Assignee

David Brown

Reporter

David Brown

Labels

None

Fix versions

Priority

Medium