On Wed, 02 Sep 2026 22:23:22 +0100, Anton Ivanov wrote:
> The data-offset, data-position and data-size FIT properties are 32-bit
> unsigned values, but were read through signed int. Also, they are
> excluded from the configuration signature, so they are attacker
> controlled.
>
> Patch 1 switches the accessors and their callers to u32, removing
> the ad-hoc handling of "negative" values in U-Boot proper. This
> transition was discussed and agreed on in [1].
>
> [...]
Applied to u-boot/main, thanks!
[1/4] image-fit: Use unsigned types for external data properties
commit: c4d81d062790c76ef0db4ead2ac69cab7245c2fc
[2/4] test: spl: Factor out external-data FIT property checks
commit: 506ef1fd79c49d9c8326c9e73e89d35771cb650f
[3/4] spl: fit: Harden external-data offset and size arithmetic
commit: 01460dfbda162ca9a2fddbba001edacabc38dd2f
[4/4] spl: fit: Bound external data like U-Boot proper
commit: 3158b844335a4a84a5504a813f2daa6acff5985d
--
Tom
