tree 44a5f450549070b7b1929380202f61c852ad54d1
parent c5819701a3de61e2ba2ef7ad0b616565b32305e5
author Simon Glass <sjg@chromium.org> 1613434090 -0700
committer Tom Rini <trini@konsulko.com> 1613446313 -0500

image: Add an option to do a full check of the FIT

Some strange modifications of the FIT can introduce security risks. Add an
option to check it thoroughly, using libfdt's fdt_check_full() function.

Enable this by default if signature verification is enabled.

CVE-2021-27097

Signed-off-by: Simon Glass <sjg@chromium.org>
Reported-by: Bruce Monroe <bruce.monroe@intel.com>
Reported-by: Arie Haenel <arie.haenel@intel.com>
Reported-by: Julien Lenoir <julien.lenoir@intel.com>