nccgroup / depthcharge

A U-Boot hacking toolkit for security researchers and tinkerers
https://depthcharge.readthedocs.io
BSD 3-Clause "New" or "Revised" License
257 stars 14 forks source link

Add CONFIG_ENV_IS_* support #88

Closed nickg-ca closed 2 years ago

nickg-ca commented 3 years ago

Describe new feature

CONFIG_ENV_IS_NOWHERE can be enabled to prevent loading environment variables from external storage. It should be enabled, although if I understand correctly, the lack of any ENV_IS_IN_* flag will also enable this, so it isn't necessary as long as none of those are defined.

Describe the solution you'd like Add a check to the configuration analyzer (depthcharge-audit-config) to look for any ENV_IS_IN_* being set without CONFIG_ENV_IS_NOWHERE being set.

Describe alternatives you've considered None

Additional context None