u-boot.git/include/image.h, branch v2014.07-rc3

Prevent a buffer overflow in mkimage when signing with SHA256

2014-06-05T21:01:23+00:00

Due to the FIT_MAX_HASH_LEN constant not having been updated
to support SHA256 signatures one will always see a buffer
overflow in fit_image_process_hash when signing images that
use this larger hash.  This is exposed by vboot_test.sh.

Signed-off-by: Michael van der Westhuizen 
Acked-by: Simon Glass 
[trini: Rework a bit so move the exportable parts of hash.h outside of
 !USE_HOSTCC and only need that as a new include to image.h]
Signed-off-by: Tom Rini

bootm: make use of legacy image format configurable

2014-06-05T18:44:56+00:00

make the use of legacy image format configurable through
the config define CONFIG_IMAGE_FORMAT_LEGACY.

When relying on signed FIT images with required signature check
the legacy image format should be disabled. Therefore introduce
this new define and enable legacy image format if CONFIG_FIT_SIGNATURE
is not set. If CONFIG_FIT_SIGNATURE is set disable per default
the legacy image format.

Signed-off-by: Heiko Schocher 
Cc: Simon Glass 
Cc: Lars Steubesand 
Cc: Mike Pearce 
Cc: Wolfgang Denk 
Cc: Tom Rini 
Cc: Michal Simek 
Acked-by: Simon Glass

mkimage: add atmelimage

2014-05-26T22:10:48+00:00

The new atmelimage converts a machine code BLOB to bootable ROM image. Atmel
ROM has no sophisticated image format, it only checks the first 7 ARM vectors.
The vectors can contain valid B or LDR opcodes, the 6'th vector contains the
image size to load.

Additionally the PMECC header can be written by the atmelimage target. The
parameters must be given via the -n switch as a coma separated list. For
example:

mkimage -T atmelimage \
 -n usePmecc=1,sectorPerPage=4,sectorSize=512,spareSize=64,eccBits=4,eccOffset=36 \
 -d spl/u-boot-spl.bin boot.bin

A provided image can be checked for correct header setup. It prints out the
PMECC header parameters if it has one and the 6'th interrupt vector content.

---8<---
Image Type:	ATMEL ROM-Boot Image with PMECC Header
		PMECC header
		====================
		eccOffset:        36
		sectorSize:      512
		eccBitReq:         4
		spareSize:        64
		nbSectorPerPage:   4
		usePmecc:          1
		====================
		6'th vector has 17044 set
--->8---

A SPL binary modified with the atmelimage mkimage target was succesfully
booted on a sama5d34ek via MMC and NAND.

Signed-off-by: Andreas Bießmann 
Cc: Bo Shen 
Cc: Heiko Schocher 
Tested-by: Bo Shen

Merge branch 'master' of git://git.denx.de/u-boot-usb

2014-05-22T16:56:15+00:00

Merge branch 'u-boot/master'

2014-05-09T09:50:14+00:00

Conflicts:
	drivers/net/Makefile

(trivial merge)

image: add support for Android's boot image format

2014-05-08T08:38:29+00:00

This patch adds support for the Android boot-image format. The header
file is from the Android project and got slightly alterted so the struct +
its defines are not generic but have something like a namespace. The
header file is from bootloader/legacy/include/boot/bootimg.h. The header
parsing has been written from scratch and I looked at
bootloader/legacy/usbloader/usbloader.c for some details.
The image contains the physical address (load address) of the kernel and
ramdisk. This address is considered only for the kernel image.
The "second image" defined in the image header is currently not
supported. I haven't found anything that is creating this.

v3 (Rob Herring):
This is based on http://patchwork.ozlabs.org/patch/126797/ with the
following changes:
- Rebased to current mainline
- Moved android image handling to separate functions in
  common/image-android.c
- s/u8/char/ in header to fix string function warnings
- Use SPDX identifiers for licenses
- Cleaned-up file source information:
  android_image.h is from file include/boot/bootimg.h in repository:
  https://android.googlesource.com/platform/bootable/bootloader/legacy
  The git commit hash is 4205b865141ff2e255fe1d3bd16de18e217ef06a
  usbloader.c would be from the same commit, but it does not appear
  to have been used for any actual code.
v4:
- s/andriod/android/
- Use a separate flag ep_found to track if the entry point has been set
rather than using a magic value.

Cc: Wolfgang Denk 
Signed-off-by: Sebastian Andrzej Siewior 
Signed-off-by: Rob Herring 
Reviewed-by: Tom Rini 
Reviewed-by: Lukasz Majewski

tools: mkimage: add support for gpimage format

2014-04-17T21:24:38+00:00

This patch add support for gpimage format as a preparatory
patch for porting u-boot for keystone2 devices and is
based on omapimage format. It re-uses gph header to store the
size and loadaddr as done in omapimage.c

Signed-off-by: Vitaly Andrianov 
Signed-off-by: Murali Karicheri 
Acked-by: Tom Rini

tools, fit_check_sign: verify a signed fit image

2014-03-21T20:40:38+00:00

add host tool "fit_check_sign" which verifies, if a fit image is
signed correct.

Signed-off-by: Heiko Schocher 
Cc: Simon Glass

rsa: add sha256,rsa4096 algorithm

2014-03-21T20:39:35+00:00

Add support for sha256,rsa4096 signatures in u-boot.

Signed-off-by: Heiko Schocher 
Acked-by: Simon Glass 
Cc: andreas@oetken.name

rsa: add sha256-rsa2048 algorithm

2014-03-21T20:39:34+00:00

based on patch from andreas@oetken.name:

http://patchwork.ozlabs.org/patch/294318/
commit message:
I currently need support for rsa-sha256 signatures in u-boot and found out that
the code for signatures is not very generic. Thus adding of different
hash-algorithms for rsa-signatures is not easy to do without copy-pasting the
rsa-code. I attached a patch for how I think it could be better and included
support for rsa-sha256. This is a fast first shot.

aditionally work:
- removed checkpatch warnings
- removed compiler warnings
- rebased against current head

Signed-off-by: Heiko Schocher 
Cc: andreas@oetken.name
Cc: Simon Glass