[U-Boot-Users] Fail Safe: Redundant U-boot Images in Flash??? ?

[Eisenhut, Daniel (GE Healthcare)]

> > 
> > > So what happens if the CRC is correct, but the new image has
> > a
> > > bug (functional ?) in it....
> > 
> > Then you should of tested your code before you released it. 
> > If the
> > CRC passes, then it is the same as what you tested.
> > 
> Famous last words. Sometimes corner cases are missed. I don't
> know about you, but I realized a long time ago I am not perfect
> and make mistakes. So what do you do when the hardware reboots
> because of some unforseen proble? Just sit in a loop and reboot
> forever?

No, no one is perfect.  But to imply that we should forgo implementing
fail safes to protect against the power failing right as we are
programming flash or flash becoming corrupt just because we might
still have a bug in our code, is just plain foolish.