Daisuke Nojiri 0f0d7bdef6 EC-EFS: Fix in-place signature replacement ...

When futility replaces the old signature in the input file with a
new one, it assumes the signature is at the end of RW region. This
assumption is wrong for EC-EFS binaries because they place a
signature at each end of two EC_RW areas.

This patch fixes the issue by specifying the signature address via
'old_sig', which points to the (first) signature address regardless
of the input file format (EFS v.s. non-EFS, FMAP v.s. no FMAP).

BUG=b:66956286
BRANCH=none
TEST=Run
'futility sign --type rwsig --prikey key_ec_efs.vbprik2 ec.bin'.
Then run 'futility show --type rwsig ec.bin', which prints
'Signature verification succeeded.'
make runtests

Change-Id: I730fd31be640de3e9381f156d084162dd4093ba6
Signed-off-by: Daisuke Nojiri <dnojiri@chromium.org>
Reviewed-on: https://chromium-review.googlesource.com/767596

2017-11-14 16:03:22 -08:00

..

bdb_helper.c

bdb: Enable futility-show to dump more header info

2016-10-17 15:23:12 -07:00

cmd_bdb.c

expand the BDB acronym in a few key places

2016-12-14 22:57:46 -08:00

cmd_create.c

Update for openssl 1.1

2017-07-07 00:57:17 -07:00

cmd_dump_fmap.c

Fix more coverity warnings in utilities

2016-09-15 16:16:12 -07:00

cmd_dump_kernel_config.c

futility: Let each command provide its own help

2015-03-18 23:07:36 +00:00

cmd_gbb_utility.c

futility: Change 'gbb_utility' to sub command 'gbb'.

2017-06-20 11:30:47 -07:00

cmd_load_fmap.c

futility: Let each command provide its own help

2015-03-18 23:07:36 +00:00

cmd_pcr.c

vboot: Convert vboot1 SHA calls to use vboot2

2016-07-22 18:40:04 -07:00

cmd_show.c

Drop pre-vboot2 safe guards

2017-06-27 17:56:16 -07:00

cmd_sign.c

futility: Make rwsig sign command produce EC_RW image

2017-09-09 02:26:17 -07:00

cmd_validate_rec_mrc.c

futility: Fix issues with validation of recovery MRC cache

2017-06-15 15:17:15 -07:00

cmd_vbutil_firmware.c

vboot: Add vb2_unpack_key_buffer

2016-11-06 02:34:03 +00:00

cmd_vbutil_kernel.c

Add missing arg to debug message

2017-04-12 20:22:36 -07:00

cmd_vbutil_key.c

vboot: Remove the remainder of vb1 cryptolib

2016-11-06 02:33:19 +00:00

cmd_vbutil_keyblock.c

vbutil_keyblock: Force checking the signature if signpubkey is provided

2017-03-16 11:25:47 -07:00

dump_kernel_config_lib.c

futility: use vboot2 functions for kernel preamble

2016-09-06 22:02:21 -07:00

file_type_bios.c

futility: Use vboot 2.0 APIs for public keys

2016-09-02 01:28:37 -07:00

file_type_bios.h

futility: put all the BIOS stuff into a separate file

2015-03-31 06:28:25 +00:00

file_type_rwsig.c

EC-EFS: Fix in-place signature replacement

2017-11-14 16:03:22 -08:00

file_type_usbpd1.c

vboot_reference: Add support for 2048-bit exponent 3 keys

2017-02-18 00:39:28 -08:00

file_type.c

futility/host lib: Fix coverity warnings

2016-09-14 13:05:02 -07:00

file_type.h

futility: refactor to handle each file type individually

2015-03-31 06:28:09 +00:00

file_type.inc

bdb: Make 'futility show' support BDB

2016-10-04 21:19:12 -07:00

futility_options.h

futility: use vboot2 functions for kernel preamble

2016-09-06 22:02:21 -07:00

futility.c

futility: Initialize stack variables

2015-04-13 18:44:24 +00:00

futility.h

futility: Compute / verify root key hash

2015-07-21 21:11:28 +00:00

kernel_blob.h

futility: Verify linux kernel signature

2017-05-08 12:40:52 -07:00

misc.c

vboot: Convert vboot1 SHA calls to use vboot2

2016-07-22 18:40:04 -07:00

ryu_root_header.c

vboot: Remove the remainder of vb1 cryptolib

2016-11-06 02:33:19 +00:00

vb1_helper.c

futility: Verify linux kernel signature

2017-05-08 12:40:52 -07:00

vb1_helper.h

vboot: Remove vboot1 cryptolib padding source

2016-11-06 02:33:02 +00:00

vb2_helper.c

Update for openssl 1.1

2017-07-07 00:57:17 -07:00