]> git.baikalelectronics.ru Git - uboot.git/commit
efi_loader: image_loader: add a missing digest verification for signed PE image
authorAKASHI Takahiro <takahiro.akashi@linaro.org>
Tue, 5 Jul 2022 05:48:14 +0000 (14:48 +0900)
committerHeinrich Schuchardt <heinrich.schuchardt@canonical.com>
Tue, 5 Jul 2022 12:37:16 +0000 (14:37 +0200)
commitc16671b803cbb366fa95d2faf233ecf415d5dd50
tree055a12c85f577b63233ec6f8a35658cf5c134ae5
parent633ed531f96bde02fe034bf03b8e8559ecb80960
efi_loader: image_loader: add a missing digest verification for signed PE image

At the last step of PE image authentication, an image's hash value must be
compared with a message digest stored as the content (of SpcPeImageData type)
of pkcs7's contentInfo.

Fixes: commit c1d77f71ac2c ("efi_loader: image_loader: support image authentication")
Signed-off-by: AKASHI Takahiro <takahiro.akashi@linaro.org>
lib/efi_loader/Kconfig
lib/efi_loader/efi_image_loader.c