refs/heads/upstream/main - third_party/vboot_reference

commit: c71f57be588c1ca69052e6f7208cc16437db513e
[log]
author: Jae Hoon Kim <kimjae@google.com>
Wed Jul 29 23:45:00 2026 +0000
committer: chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com <chromeos-scoped@luci-project-accounts.iam.gserviceaccount.com>
Wed Aug 12 15:22:39 2026 -0700
tree: b81ec8f6d36cb7b7521566d3aabf5127573519e1
parent: 46d1da74273ed4c84765937dfaeb5d549ac6aade [diff]

vboot_reference: Fix miniOS kernel version extraction in sign_official_build.sh

Update resign_minios_kernel() to extract the data key version from the keyblock
via 'futility show -P' and shift it right by 8 bits to determine the miniOS kernel
version floor, matching the verifier convention in 2load_kernel.c.

BUG=b:518787060
TEST=Verified version extraction and shift against sample keyblock outputs.

Change-Id: Ie951f05c1ec886e93c56a93d640877a550932016
Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/vboot_reference/+/8169682
Commit-Queue: Jae Hoon Kim <kimjae@chromium.org>
Reviewed-by: Julius Werner <jwerner@chromium.org>
Auto-Submit: Jae Hoon Kim <kimjae@chromium.org>
Tested-by: Jae Hoon Kim <kimjae@chromium.org>

scripts/image_signing/sign_official_build.sh[diff]

1 file changed

tree: b81ec8f6d36cb7b7521566d3aabf5127573519e1