Re: [U-Boot] [PATCH v3] Prevent a buffer overflow in mkimage when signing with SHA256

30 May 2014


      On 30 May 2014 12:59,  michael@smart-africa.com wrote:
...
From: Michael van der Westhuizen michael@smart-africa.com
Due to the FIT_MAX_HASH_LEN constant not having been updated
to support SHA256 signatures one will always see a buffer
overflow in fit_image_process_hash when signing images that
use this larger hash.  This is exposed by vboot_test.sh.
Signed-off-by: Michael van der Westhuizen michael@smart-africa.com
Acked-by: Simon Glass sjg@chromium.org
Regards,
Simon