wip - lock still points to patched mgs

Author: lzrd

Cargo.lock

@@ -508,10 +508,13 @@ impl idl::InOrderUpdateImpl for ServerImpl<'_> {
                 if active == slot {
                     return Err(UpdateError::InvalidSlotIdForOperation.into());
                 }
-                // Since we will be enforcing rollback protection at the time when the
-                // boot preference is set, we cannot yet have the alternate image as the
-                // preferred image. The full image needs to be in place in order to
-                // evaluate the policy.
+                // Rollback protection will be implemented by refusing to set
+                // boot preference to an image that has a lower EPOC vale in the
+                // caboose.
+                //
+                // Setting the boot preference before updating would sidestep that
+                // protection. So, we will fail the prepare step if any
+                // preference settings are selecting the update target image.
                 let (persistent, pending_persistent, transient) = self.boot_preferences()?;
                 if let Some(pref) = transient {
                     if active != pref {
@@ -532,7 +535,6 @@ impl idl::InOrderUpdateImpl for ServerImpl<'_> {
             _ => return Err(UpdateError::InvalidSlotIdForOperation.into()),
         };
 
-
         self.image = image;
         self.state = UpdateState::InProgress;
         ringbuf_entry!(Trace::State(self.state));