MediaTek secure-boot tooling signs the raw DDR-loader and SPL payload
before adding the BootROM headers. Signing mtk-boot.bin would instead
sign an image that already carries the unsigned headers.

Have binman emit the existing payload section as mtk-boot-payload.bin.
This keeps the fixed DDR-loader and SPL layout in one description and
does not change mtk-boot.bin.

Signed-off-by: Carlo Caione <[email protected]>
---
 arch/arm/dts/mtk-genio-mtk-boot-binman-u-boot.dtsi | 1 +
 1 file changed, 1 insertion(+)

diff --git a/arch/arm/dts/mtk-genio-mtk-boot-binman-u-boot.dtsi 
b/arch/arm/dts/mtk-genio-mtk-boot-binman-u-boot.dtsi
index 8fdafbd750d..1d51210ec7d 100644
--- a/arch/arm/dts/mtk-genio-mtk-boot-binman-u-boot.dtsi
+++ b/arch/arm/dts/mtk-genio-mtk-boot-binman-u-boot.dtsi
@@ -18,6 +18,7 @@
                               "-n", CONFIG_MTK_BROM_HEADER_INFO;
 
                        section {
+                               filename = "mtk-boot-payload.bin";
                                pad-byte = <0>;
 #include "mtk-genio-loader-spl-binman-u-boot.dtsi"
                        };

-- 
2.55.0

Reply via email to