X-Git-Url: https://git.sur5r.net/?a=blobdiff_plain;f=Kconfig;h=c8b86cd3843decd86f2f5f477b249717cc4eb365;hb=1adbf2966adebe67de3dd17094749d387604194e;hp=5a82c95dd80f909200b3c6fb24d3b014822cf31e;hpb=8ada17dde84954e36d8bc6ff62a6956686eb0ec4;p=u-boot

diff --git a/Kconfig b/Kconfig
index 5a82c95dd8..c8b86cd384 100644
--- a/Kconfig
+++ b/Kconfig
@@ -267,6 +267,16 @@ config FIT_SIGNATURE
 	  format support in this case, enable it using
 	  CONFIG_IMAGE_FORMAT_LEGACY.
 
+config FIT_SIGNATURE_MAX_SIZE
+	hex "Max size of signed FIT structures"
+	depends on FIT_SIGNATURE
+	default 0x10000000
+	help
+	  This option sets a max size in bytes for verified FIT uImages.
+	  A sane value of 256MB protects corrupted DTB structures from overlapping
+	  device memory. Assure this size does not extend past expected storage
+	  space.
+
 config FIT_VERBOSE
 	bool "Show verbose messages when FIT images fail"
 	help