On Tue, 18 Feb 2025 15:04:06 +0100, Sascha Hauer wrote:
> Some i.MX6 configurations use the xload mechanism. With this the ROM
> only loads and verifies the PBL. The PBL will then load barebox proper.
> Without verification the barebox proper binary is untrusted and could be
> modified. Select PBL_VERIFY_PIGGY when HABV4 is enabled to ensure the
> barebox proper binary has not been tempered with.
>
> boards not using the xload mechanism don't need this option, but there
> is no good way to detect currently if the xload mechanism is used, so
> these boards will have to live with a slightly increased binary size
> for now.
>
> [...]
Applied, thanks!
[1/2] ARM: i.MX6: Enable PBL_VERIFY_PIGGY with HABV4 support
https://git.pengutronix.de/cgit/barebox/commit/?id=c2cf17685bf6 (link may not be stable)
[2/2] ARM: i.MX9: Enable PBL_VERIFY_PIGGY with non INSECURE
https://git.pengutronix.de/cgit/barebox/commit/?id=cab919df26f5 (link may not be stable)
Best regards,
--
Sascha Hauer <s.hauer@xxxxxxxxxxxxxx>
