From a7126edcb321e6d02e5d83a6f4a7eeac777c1fe2 Mon Sep 17 00:00:00 2001 From: Niko Mauno Date: Thu, 3 Aug 2017 09:53:24 +0300 Subject: splash_source: Verify FIT magic Before reading entire FIT image, add sanity check by testing image header against FDT_MAGIC. This should help avoid problems in situations where FIT is not yet available from storage device, for example when performing initial programming of device. Cc: Anatolij Gustschin Acked-by: Tomas Melin --- common/splash_source.c | 5 +++++ 1 file changed, 5 insertions(+) (limited to 'common') diff --git a/common/splash_source.c b/common/splash_source.c index a21ad62f82..e0defdebd6 100644 --- a/common/splash_source.c +++ b/common/splash_source.c @@ -317,6 +317,11 @@ static int splash_load_fit(struct splash_location *location, u32 bmp_load_addr) return res; img_header = (struct image_header *)bmp_load_addr; + if (image_get_magic(img_header) != FDT_MAGIC) { + printf("Could not find FDT magic\n"); + return -EINVAL; + } + fit_size = fdt_totalsize(img_header); /* Read in entire FIT */ -- cgit v1.2.3