VBoot Reference: Make kernel_config a 4K byte block, and move it after the verified boot block.

src/platform/vboot_reference/tests/kernel_image_tests.c

 /* Copyright (c) 2010 The Chromium OS Authors. All rights reserved.
  * Use of this source code is governed by a BSD-style license that can be
  * found in the LICENSE file.
  *
  * Tests for kernel image library.
  */
 
 #include <stdio.h>
 #include <stdlib.h>
 
@@ skipping 22 matching lines @@
           VERIFY_KERNEL_SUCCESS,
           "Normal KernelImage Verification (Dev Mode)");
   TEST_EQ(VerifyKernelImage(firmware_key, image, DEV_MODE_DISABLED),
           VERIFY_KERNEL_SUCCESS,
           "Normal KernelImage Verification (Trusted)");
 }
 
 /* Tampered KernelImage Verification Tests. */
 void VerifyKernelImageTamperTest(KernelImage* image,
                                  RSAPublicKey* firmware_key) {
-  image->options.kernel_load_addr = 0xFFFF;
+  image->kernel_config[0] ^= 0xFF;
   TEST_EQ(VerifyKernelImage(firmware_key, image, DEV_MODE_ENABLED),
           VERIFY_KERNEL_CONFIG_SIGNATURE_FAILED,
           "KernelImage Config Tamper Verification (Dev Mode)");
   TEST_EQ(VerifyKernelImage(firmware_key, image, DEV_MODE_DISABLED),
           VERIFY_KERNEL_CONFIG_SIGNATURE_FAILED,
           "KernelImage Config Tamper Verification (Trusted)");
-  image->options.kernel_load_addr = 0;
+  image->kernel_config[0] ^= 0xFF;
 
   image->kernel_data[0] = 'T';
   TEST_EQ(VerifyKernelImage(firmware_key, image, DEV_MODE_ENABLED),
           VERIFY_KERNEL_SIGNATURE_FAILED,
           "KernelImage Tamper Verification (Dev Mode)");
   TEST_EQ(VerifyKernelImage(firmware_key, image, DEV_MODE_DISABLED),
           VERIFY_KERNEL_SIGNATURE_FAILED,
           "KernelImage Tamper Verification (Trusted)");
   image->kernel_data[0] = 'K';
 
@@ skipping 70 matching lines @@
 
 failure:
   Free(kernel_blob);
   KernelImageFree(image);
   Free(kernel_sign_key_buf);
   Free(firmware_key_blob);
   RSAPublicKeyFree(firmware_key);
 
   return error_code;
 }