]> code.ossystems Code Review - openembedded-core.git/commit
kernel-fitimage: Don't use unit addresses on FIT
authorKlaus Heinrich Kiwi <klaus@linux.vnet.ibm.com>
Mon, 22 Feb 2021 18:38:19 +0000 (15:38 -0300)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Tue, 23 Feb 2021 22:31:55 +0000 (22:31 +0000)
commit6047be9f8f0f5d616fda11d83b682c1b8aeaa0ae
treefcfea98e3bfd42dabd423cc80b6bfedfb837d142
parent801c10b33eb2074677d46b361e46f47b693b573a
kernel-fitimage: Don't use unit addresses on FIT

Das U-Boot 2021.4-rc1 has the following commit:

    commit 3f04db891a353f4b127ed57279279f851c6b4917
    Author: Simon Glass <sjg@chromium.org>
    Date:   Mon Feb 15 17:08:12 2021 -0700

        image: Check for unit addresses in FITs

        Using unit addresses in a FIT is a security risk. Add a check for
        this and disallow it.

        CVE-2021-27138

Adjust the kernel-fitimage.bbclass accordingly to not use unit
addresses. This changte is required before we can bump U-Boot to 2021.4.

Signed-off-by: Klaus Heinrich Kiwi <klaus@linux.vnet.ibm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
meta/classes/kernel-fitimage.bbclass
meta/lib/oeqa/selftest/cases/fitimage.py