[U-Boot] [PATCH] image-fit: Fix signature checking

andrej at inversepath.com andrej at inversepath.com
Wed Oct 14 17:45:40 CEST 2015


From: Andrej Rosano <andrej at inversepath.com>

On signature verification failures fit_image_verify() should
exit with error.

Signed-off-by: Andrej Rosano <andrej at inversepath.com>
---
 common/image-fit.c | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/common/image-fit.c b/common/image-fit.c
index 28f7aa8..c531ee7 100644
--- a/common/image-fit.c
+++ b/common/image-fit.c
@@ -1030,8 +1030,10 @@ int fit_image_verify(const void *fit, int image_noffset)
 					strlen(FIT_SIG_NODENAME))) {
 			ret = fit_image_check_sig(fit, noffset, data,
 							size, -1, &err_msg);
-			if (ret)
+			if (ret) {
 				puts("- ");
+				goto error;
+			}
 			else
 				puts("+ ");
 		}
-- 
2.1.4



More information about the U-Boot mailing list