On 26 May 2014 06:27, Michael van der Westhuizen michael.vanderwesthuizen@smart-africa.com wrote:

Due to the FIT_MAX_HASH_LEN constant not having been updated to support SHA256 signatures one will always see a buffer overflow in fit_image_process_hash when signing images that use this larger hash. This is exposed by vboot_test.sh.

Signed-off-by: Michael van der Westhuizen michael@smart-africa.com

Acked-by: Simon Glass sjg@chromium.org