Commit graph

2 commits

Author SHA1 Message Date
Shiji Yang
9dc4128e03 uboot-tools: update to v2025.07
Update to the latest version.

Remove upstreamed patches:
  010-image-fit-sig-skip-in-tools-build-if-key-is-missing.patch[1]
  011-tools-fit_check_sign-make-key-optional.patch[2]
  012-tools-fit_check_sign-no-libcrypto.patch[2]

[1] 40dcd5088b
[2] 9c79c8fe70

Signed-off-by: Shiji Yang <yangshiji66@outlook.com>
Link: https://github.com/openwrt/openwrt/pull/19342
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2025-07-12 16:37:49 +02:00
Daniel Golle
27adf03f70 uboot-tools: validate all uImage.FIT sub-images
uImage.FIT validation was restricted to certain sub-image types
which is problematic as it then won't validate eg. 'filesystem' type
subimages. Also prevent decompressing sub-images into a arbitrary
sized buffer just to then free that buffer -- there is not need to
do this and creating malicious compressed payloads which overflow the
buffer is too easy.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2025-04-24 06:43:59 +01:00