feat(core/bootloader): add red LED to workflow_wipe_device.
What changed, and why it matters
This change simply turns the device's LED red while the user is confirming a factory wipe, then turns it off afterward. It is a user-experience/visual indicator change in the bootloader and does not alter security logic, data handling, or access controls.
No security action needed; treat as normal feature/UX commit.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The commit adds conditional RGB LED calls around the existing ui_screen_wipe_confirm() prompt in the bootloader’s wipe-device workflow. If USE_RGB_LED is defined, rgb_led_set_color(RGBLED_RED) is set before the confirmation screen and RGBLED_OFF after. The actual wipe confirmation decision and abort handling are unchanged.
Changed components
core/embed/projects/bootloader/workflow/wf_wipe_device.cInspect captured patch +13 / −0
diff --git a/core/embed/projects/bootloader/workflow/wf_wipe_device.c b/core/embed/projects/bootloader/workflow/wf_wipe_device.c
index 209c2141..7fac10f6 100644
--- a/core/embed/projects/bootloader/workflow/wf_wipe_device.c
+++ b/core/embed/projects/bootloader/workflow/wf_wipe_device.c
@@ -30,6 +30,10 @@
#include <sys/backup_ram.h>
#endif
+#ifdef USE_RGB_LED
+#include <io/rgb_led.h>
+#endif
+
#include <sys/systick.h>
#include "bootui.h"
@@ -87,7 +91,16 @@ workflow_result_t workflow_wipe_device(protob_io_t* iface) {
recv_msg_wipe_device(iface, &msg_recv);
}
+#ifdef USE_RGB_LED
+ rgb_led_set_color(RGBLED_RED);
+#endif
+
confirm_result_t response = ui_screen_wipe_confirm();
+
+#ifdef USE_RGB_LED
+ rgb_led_set_color(RGBLED_OFF);
+#endif
+
if (CONFIRM != response) {
if (iface != NULL) {
send_user_abort(iface, "Wipe cancelled");
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.