[U-Boot] [PATCH v3] Prevent a buffer overflow in mkimage when signing with SHA256

Simon Glass sjg at chromium.org
Fri May 30 21:06:50 CEST 2014


On 30 May 2014 12:59,  <michael at smart-africa.com> wrote:
> From: Michael van der Westhuizen <michael at smart-africa.com>
>
> Due to the FIT_MAX_HASH_LEN constant not having been updated
> to support SHA256 signatures one will always see a buffer
> overflow in fit_image_process_hash when signing images that
> use this larger hash.  This is exposed by vboot_test.sh.
>
> Signed-off-by: Michael van der Westhuizen <michael at smart-africa.com>

Acked-by: Simon Glass <sjg at chromium.org>

Regards,
Simon


More information about the U-Boot mailing list