Hi Igor, Thank you for the series.
On Mon, Jul 27, 2026 at 12:08, Igor Opaniuk <[email protected]> wrote: > The vendored libavb under lib/libavb/ has been frozen at a ~2019 AOSP > snapshot (AVB version 1.1.0) for about six years. A v1.1.0 library > rejects any vbmeta whose required libavb minor version is greater than 1 > with UNSUPPORTED_VERSION, so an image signed by a newer avbtool that uses > a 1.2/1.3 feature fails to verify. This series re-syncs the library to > version 1.3.0 and picks up the accumulated upstream fixes. > > The vendored files are taken verbatim from AOSP external/avb commit > a1fe228b8654 ("libavb: support chain partition no ab"), the commit that > introduced version 1.3.0 [1]. > > Functionality the library now parses: > - AvbVBMetaImageHeader.rollback_index_location (v1.2) > - AvbChainPartitionDescriptor flags / DO_NOT_USE_AB (v1.3) > - AvbHashtreeDescriptor FLAGS_CHECK_AT_MOST_ONCE > - AVB_HASHTREE_ERROR_MODE_PANIC > > Scope / integration impact: > - The AvbOps callback set is unchanged between 1.1.0 and 1.3.0, so the > U-Boot integration in common/avb_verify.c needs no changes. > - The U-Boot port is preserved rather than pulling upstream's > BoringSSL-oriented crypto restructure (sha/, boringssl/): > avb_sysdeps.h / avb_sysdeps_posix.c and the flat avb_sha.h / > avb_sha256.c / avb_sha512.c are kept as-is. The SHA API signatures > are unchanged, so the retained implementation stays compatible. > - Per-file licenses are preserved (avb_rsa.c stays MIT OR > BSD-3-Clause). The Apache-2.0-licensed avb_crc32.c is not imported, > as it is unused by U-Boot. > > Note: patch 1 is a verbatim upstream import and therefore triggers a > number of checkpatch style warnings. The files are intentionally left in > upstream (AOSP) coding style to keep them diffable against external/avb; > they are deliberately not reformatted to U-Boot style. > > [1] > https://android.googlesource.com/platform/external/avb/+/a1fe228b86543a21739c51352f5ce72f134fccfa > > Signed-off-by: Igor Opaniuk <[email protected]> Applied to u-boot-dfu: https://git.u-boot-project.org/u-boot/custodians/u-boot-dfu
