X-Git-Url: https://git.sur5r.net/?p=u-boot;a=blobdiff_plain;f=Kconfig;h=c8b86cd3843decd86f2f5f477b249717cc4eb365;hp=5a82c95dd80f909200b3c6fb24d3b014822cf31e;hb=HEAD;hpb=add7aa9f97f73ed20e2883f7fc6156b72276cdbc

diff --git a/Kconfig b/Kconfig
index 5a82c95dd8..c8b86cd384 100644
--- a/Kconfig
+++ b/Kconfig
@@ -267,6 +267,16 @@ config FIT_SIGNATURE
 	  format support in this case, enable it using
 	  CONFIG_IMAGE_FORMAT_LEGACY.
 
+config FIT_SIGNATURE_MAX_SIZE
+	hex "Max size of signed FIT structures"
+	depends on FIT_SIGNATURE
+	default 0x10000000
+	help
+	  This option sets a max size in bytes for verified FIT uImages.
+	  A sane value of 256MB protects corrupted DTB structures from overlapping
+	  device memory. Assure this size does not extend past expected storage
+	  space.
+
 config FIT_VERBOSE
 	bool "Show verbose messages when FIT images fail"
 	help