[PATCH] FIT: reconstruct hashed-nodes property during verification

[Sascha Hauer]

On Thu, 12 Mar 2026 14:55:25 +0100, Sascha Hauer wrote:
> The hashed-nodes property in FIT signed image configurations is used to
> determine which nodes are hashed, but is itself not hashed, so could be
> manipulated.
> 
> To fix this do not use the hashed-nodes property to calculate which
> nodes must be hashed, but instead reconstruct the hashed nodes list by
> the images used in a FIT configuration, the same way mkimage does it
> when creating the image.
> 
> [...]

Applied, thanks!

[1/1] FIT: reconstruct hashed-nodes property during verification
      https://git.pengutronix.de/cgit/barebox/commit/?id=55f25be5223b (link may not be stable)

Best regards,
-- 
Sascha Hauer <s.hauer at pengutronix.de>