Revert does not check signature of reverted image

Description

After performing a revert, the code does not check the signature of slot 0 before running it. There are several ways this could be exploited, such as replacing slot 1's image after a test upgrade. It also is related to MCUB-63.

Environment

None

Status

Assignee

Fabio Utzig

Reporter

David Brown

Labels

None

Affects versions

1.0.0

Priority

Highest