Digi
/
meta-digi
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

trustfence-sign-kernel: fix the IVT table address padding 

- The IVT table address inside the kernel image must be aligned at 0x1000
  bytes. The calculation of this offset was not working when the kernel image
  size was multiple of 0x1000 bytes. In this case the IVT table was moved an
  extra offset of 0x1000 bytes, causing U-Boot to fail to validate the image
  as the IVT table was not in the expected location.

  This fix uses the same offset calculation algorithm as U-Boot, ensuring both,
  the sign script and U-Boot will look for the IVT at the same address.

https://jira.digi.com/browse/DEL-3972

Signed-off-by: David Escalona <david.escalona@digi.com>
This commit is contained in:
David Escalona 2017-03-22 14:42:03 +01:00
parent 70f7c013da
commit 748ffed314
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
meta-digi-arm/recipes-digi/trustfence/trustfence-sign-tools/trustfence-sign-kernel.sh
View File

@ -156,7 +156,7 @@ dek_blob_offset="$((CONFIG_KERNEL_LOADADDR - DEK_BLOB_OFFSET))"
# Compute the layout: sizes and offsets.
uimage_size="$(stat -L -c %s ${UIMAGE_PATH})"
uimage_offset="0x0"
pad_len="$((uimage_size - uimage_size % 0x1000 + 0x1000))"
pad_len="$(((uimage_size + 0x1000 - 1) & ~(0x1000 - 1)))"
auth_len="$((pad_len + 0x20))"
sig_len="$((auth_len + CONFIG_CSF_SIZE))"