image: Check hash-nodes when checking configurations
authorSimon Glass <sjg@chromium.org>
Wed, 18 Mar 2020 17:44:01 +0000 (11:44 -0600)
committerSimon Glass <sjg@chromium.org>
Wed, 1 Apr 2020 13:45:09 +0000 (07:45 -0600)
commit67acad3db71bb372458fbb8a77749f5eb88aa324
tree97c9dcc4cc92180ad1743ad38d2f04afe6dc997b
parent1b090032029b35080a5a87c9f1047882d894ab37
image: Check hash-nodes when checking configurations

It is currently possible to use a different configuration's signature and
thus bypass the configuration check. Make sure that the configuration node
that was hashed matches the one being checked, to catch this problem.

Also add a proper function comment to fit_config_check_sig() and make it
static.

Signed-off-by: Simon Glass <sjg@chromium.org>
common/image-sig.c