Re: [PATCH v2] mkimage: fit: Fix signing of configs with external data

On Thu, 20 Oct 2022 at 13:41, Sean Anderson sean.anderson@seco.com wrote:

Just like we exclude data-size, data-position, and data-offset from fit_config_check_sig, we must exclude them while signing as well.

While we're at it, use the FIT_DATA_* defines for fit_config_check_sig as welll.

Fixes: 8edecd3110e ("fit: Fix verification of images with external data") Fixes: c522949a29d ("rsa: sig: fix config signature check for fit with padding") Signed-off-by: Sean Anderson sean.anderson@seco.com

---

Changes in v2:

• Use FIT_DATA_* defines

boot/image-fit-sig.c | 8 ++++---- tools/image-host.c | 7 ++++++- 2 files changed, 10 insertions(+), 5 deletions(-)

Reviewed-by: Simon Glass sjg@chromium.org