| commit | 244705b69784320256d4aae848de2b9e0daeb9cb | [log] [tgz] |
|---|---|---|
| author | Simon Glass <sjg@chromium.org> | Mon Feb 15 17:08:10 2021 -0700 |
| committer | Tom Rini <trini@konsulko.com> | Mon Feb 15 22:31:53 2021 -0500 |
| tree | 44a5f450549070b7b1929380202f61c852ad54d1 | |
| parent | d563c2572e6bb485e88d74742e74b71d235bda3e [diff] |
image: Add an option to do a full check of the FIT Some strange modifications of the FIT can introduce security risks. Add an option to check it thoroughly, using libfdt's fdt_check_full() function. Enable this by default if signature verification is enabled. CVE-2021-27097 Signed-off-by: Simon Glass <sjg@chromium.org> Reported-by: Bruce Monroe <bruce.monroe@intel.com> Reported-by: Arie Haenel <arie.haenel@intel.com> Reported-by: Julien Lenoir <julien.lenoir@intel.com>