feat(core/bootloader): show build version numbers
What changed, and why it matters
This commit is a minor user-interface change in the Trezor bootloader. It simply adds the build version number to the version string shown on screen. There is no security issue here.
No security action needed. This is a cosmetic feature change.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The change modifies format_ver() in core/embed/projects/bootloader/bootui.c to append the build field (version >> 24 & 0xFF) to the displayed version string. Previously this field was ignored. The function only writes to a local display buffer; there is no buffer overflow (the existing cstr_append helpers respect buffer_len), no change to parsing logic, no cryptographic changes, and no trust boundary crossed.
Changed components
core/embed/projects/bootloader/bootui.cInspect captured patch +3 / −1
diff --git a/core/embed/projects/bootloader/.changelog.d/6245.added b/core/embed/projects/bootloader/.changelog.d/6245.added
new file mode 100644
index 00000000..11b53bd1
--- /dev/null
+++ b/core/embed/projects/bootloader/.changelog.d/6245.added
@@ -0,0 +1 @@
+Adjusted version strings to show build version number.
diff --git a/core/embed/projects/bootloader/bootui.c b/core/embed/projects/bootloader/bootui.c
index d27ed725..13a54ca4 100644
--- a/core/embed/projects/bootloader/bootui.c
+++ b/core/embed/projects/bootloader/bootui.c
@@ -42,7 +42,8 @@ static void format_ver(uint32_t version, char *buffer, size_t buffer_len) {
cstr_append_int32(buffer, buffer_len, ((version >> 8) & 0xFF));
cstr_append(buffer, buffer_len, ".");
cstr_append_int32(buffer, buffer_len, ((version >> 16) & 0xFF));
- // ignore build field
+ cstr_append(buffer, buffer_len, ".");
+ cstr_append_int32(buffer, buffer_len, ((version >> 24) & 0xFF));
}
// boot UI
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.