
14 Oct
2015
14 Oct
'15
5:45 p.m.
From: Andrej Rosano andrej@inversepath.com
On signature verification failures fit_image_verify() should exit with error.
Signed-off-by: Andrej Rosano andrej@inversepath.com --- common/image-fit.c | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-)
diff --git a/common/image-fit.c b/common/image-fit.c index 28f7aa8..c531ee7 100644 --- a/common/image-fit.c +++ b/common/image-fit.c @@ -1030,8 +1030,10 @@ int fit_image_verify(const void *fit, int image_noffset) strlen(FIT_SIG_NODENAME))) { ret = fit_image_check_sig(fit, noffset, data, size, -1, &err_msg); - if (ret) + if (ret) { puts("- "); + goto error; + } else puts("+ "); }
--
2.1.4