diff options
| author | Sean Anderson <sean.anderson@seco.com> | 2022-10-20 22:41:10 +0300 |
|---|---|---|
| committer | Tom Rini <trini@konsulko.com> | 2022-10-26 18:36:06 +0300 |
| commit | 0abe3323f5062032f8deb71cdc0635b124855d16 (patch) | |
| tree | 7d8428ec3c6ff3870d783717e546c9db3b124847 /boot/image-fit-sig.c | |
| parent | b487387226d49ba2f39757269fb95ea398e8f384 (diff) | |
| download | u-boot-0abe3323f5062032f8deb71cdc0635b124855d16.tar.xz | |
mkimage: fit: Fix signing of configs with external data
Just like we exclude data-size, data-position, and data-offset from
fit_config_check_sig, we must exclude them while signing as well.
While we're at it, use the FIT_DATA_* defines for fit_config_check_sig
as welll.
Fixes: 8edecd3110e ("fit: Fix verification of images with external data")
Fixes: c522949a29d ("rsa: sig: fix config signature check for fit with padding")
Signed-off-by: Sean Anderson <sean.anderson@seco.com>
Reviewed-by: Simon Glass <sjg@chromium.org>
Diffstat (limited to 'boot/image-fit-sig.c')
| -rw-r--r-- | boot/image-fit-sig.c | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/boot/image-fit-sig.c b/boot/image-fit-sig.c index a461d591a0..12369896fe 100644 --- a/boot/image-fit-sig.c +++ b/boot/image-fit-sig.c @@ -260,10 +260,10 @@ static int fit_config_check_sig(const void *fit, int noffset, int conf_noffset, char **err_msgp) { static char * const exc_prop[] = { - "data", - "data-size", - "data-position", - "data-offset" + FIT_DATA_PROP, + FIT_DATA_SIZE_PROP, + FIT_DATA_POSITION_PROP, + FIT_DATA_OFFSET_PROP, }; const char *prop, *end, *name; |