Boot loader failsafe mechanism

[mangelajo]

I'm theorising here, so there are chances I got something wrong. As I understood, if the boot loader copy process fails (device switched off during boot loader copy process) there's no recovery mechanism, because the copy orders are in RTC memory, and not in flash.

So, an idea here.

Why don't we save the end of the flash to set the boot loader command for upgrade?, then when an upgrade has properly finished, we erase that area.

Thoughts?

Want to back this issue? Post a bounty on it! We accept bounties via Bountysource.

[igrr]

Or rather, write a few more "finalizing" bytes to that area, indicating that the command has been processed. This would avoid having to erase that sector twice per update.

[mangelajo]

@igrr, right, that sounds even better.