From 84ca65aa4bd0d03867e9e49805201d0564d3ffb0 Mon Sep 17 00:00:00 2001
From: Andrej Rosano <andrej@inversepath.com>
Date: Wed, 14 Oct 2015 17:45:40 +0200
Subject: [PATCH] image-fit: Fix signature checking
On signature verification failures fit_image_verify() should
exit with error.
Signed-off-by: Andrej Rosano <andrej@inversepath.com>
---
common/image-fit.c | 4 +++-
1 file changed, 3 insertions(+), 1 deletion(-)
diff --git a/common/image-fit.c b/common/image-fit.c
index 28f7aa83ba..c531ee74d7 100644
--- a/common/image-fit.c
+++ b/common/image-fit.c
@@ -1030,8 +1030,10 @@ int fit_image_verify(const void *fit, int image_noffset)
strlen(FIT_SIG_NODENAME))) {
ret = fit_image_check_sig(fit, noffset, data,
size, -1, &err_msg);
- if (ret)
+ if (ret) {
puts("- ");
+ goto error;
+ }
else
puts("+ ");
}
--
2.39.5