From: Andrej Rosano <[email protected]>

On signature verification failures fit_image_verify() should
exit with error.

Signed-off-by: Andrej Rosano <[email protected]>
---
 common/image-fit.c | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/common/image-fit.c b/common/image-fit.c
index 28f7aa8..c531ee7 100644
--- a/common/image-fit.c
+++ b/common/image-fit.c
@@ -1030,8 +1030,10 @@ int fit_image_verify(const void *fit, int image_noffset)
                                        strlen(FIT_SIG_NODENAME))) {
                        ret = fit_image_check_sig(fit, noffset, data,
                                                        size, -1, &err_msg);
-                       if (ret)
+                       if (ret) {
                                puts("- ");
+                               goto error;
+                       }
                        else
                                puts("+ ");
                }
-- 
2.1.4

_______________________________________________
U-Boot mailing list
[email protected]
http://lists.denx.de/mailman/listinfo/u-boot

Reply via email to