On Tue, 25 Aug 2026 15:19:48 +0100, Pranav Rajendran wrote:
> Changes in v2:
> - Kept patches 1-3 as separate changes per Simon's request (distinct
> Fixes: targets, easier to back-port independently).
> - Patch 2: documented the new -EINVAL return in the kernel-doc block,
> per Simon's review comment.
> - Added patch 5: a fit_cipher sandbox test suite covering all three
> defects (non-block-aligned 'data', a truncated
> 'data-size-unciphered', and an oversized unciphered size), per
> Simon's request for regression tests since these are security fixes.
> - Added patch 4 as a prerequisite for patch 5: <u-boot/aes.h> defines
> the disabled-config cipher stubs with external linkage, so a second
> translation unit including it (the new test file) failed to link
> until those stubs were made static inline. Found while writing the
> test, not previously reported.
>
> [...]
Applied to u-boot/next, thanks!
[1/5] lib: aes: reject a ciphertext length that is not a whole number of blocks
commit: 38363ac783de606798c273175e9fa746651e5e06
[2/5] image-fit: check the length of the data-size-unciphered property
commit: c2b8eefd4e108b7fee67eccb08a345668a29d677
[3/5] lib: aes: reject an unciphered size larger than the ciphertext
commit: 2dde840a70f91fb184ecb6b997a8203f6c6f91ad
[4/5] include: u-boot: aes: make disabled cipher stubs static inline
commit: 4dc05884af34f75ac3a66f2f2ef4dd662cecfb97
[5/5] test: boot: add regression tests for the FIT cipher bounds checks
commit: 973a05bb1b1677a9ab7ecfe3807b82582039ff6f
--
Tom
