Some i.MX6 configurations use the xload mechanism. With this the ROM only loads and verifies the PBL. The PBL will then load barebox proper. Without verification the barebox proper binary is untrusted and could be modified. Select PBL_VERIFY_PIGGY when HABV4 is enabled to ensure the barebox proper binary has not been tempered with. boards not using the xload mechanism don't need this option, but there is no good way to detect currently if the xload mechanism is used, so these boards will have to live with a slightly increased binary size for now. Signed-off-by: Sascha Hauer <s.hauer@xxxxxxxxxxxxxx> --- arch/arm/mach-imx/Kconfig | 1 + 1 file changed, 1 insertion(+) diff --git a/arch/arm/mach-imx/Kconfig b/arch/arm/mach-imx/Kconfig index 58b32b8e91..424c7d71a6 100644 --- a/arch/arm/mach-imx/Kconfig +++ b/arch/arm/mach-imx/Kconfig @@ -127,6 +127,7 @@ config ARCH_IMX6 select PINCTRL_IMX_IOMUX_V3 select COMMON_CLK_OF_PROVIDER select HW_HAS_PCI + select PBL_VERIFY_PIGGY if HABV4 config ARCH_IMX6SL bool -- 2.39.5
