fix: Bounds checking for common crc32 calculation func, bump preloader to v1.1

Author: tuxuser

firmware/common/bootloader.c

@@ -15,6 +15,16 @@ uint32_t calculateCrc32(uint8_t *data, uint32_t len) {
         return 0xFFFFFFFF;
     }
 
+    uintptr_t addr = (uintptr_t)data;
+
+    /* Require 32-bit words and word alignment */
+    if ((len % 4) != 0) return 0xFFFFFFFF;
+    if ((addr % 4) != 0) return 0xFFFFFFFF;
+
+    /* Bounds check (overflow-safe): addr + len must fit inside flash */
+    if (addr < FLASH_BASE) return 0xFFFFFFFF;
+    if (addr > ((FLASH_BASE + FLASH_SIZE) - len)) return 0xFFFFFFFF;
+
     /* Configure and reset CRC peripheral: use default algorithm */
     CRC->CR = CRC_CR_RESET;
 

firmware/preloader/src/main.c

@@ -12,7 +12,7 @@ __attribute__((used))
 const tombstone_t tombstone = {
     .magic = IAPL_MAGIC,
     .ver_major = 1,
-    .ver_minor = 0,
+    .ver_minor = 1,
     .size = 0x5A53, // ASCII: SZ
     .crc = 0x00435243, // ASCII: CRC + \0
     .reserved = {0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,0xFF, 0xFF, 0xFF, 0xFF,  0xFF, 0xFF, 0xFF, 0xFF },