Fix KeyBlockVerify() to take an explicit param for whether to use hash only.

utility/dev_sign_file.c

 /* Copyright (c) 2010 The Chromium OS Authors. All rights reserved.
  * Use of this source code is governed by a BSD-style license that can be
  * found in the LICENSE file.
  *
  * Developer file-signing utility
  */
 
 #include <errno.h>
 #include <getopt.h>
 #include <inttypes.h>  /* For PRIu64 */
@@ skipping 192 matching lines @@
   preamble = (VbKernelPreambleHeader*)(buf + current_buf_offset);
   Debug("Preamble is 0x%" PRIx64 " bytes\n", preamble->preamble_size);
   current_buf_offset += preamble->preamble_size;
   if (current_buf_offset > buf_size ) {
     error("preamble_size advances past the end of the buffer\n");
     return 1;
   }
 
   Debug("Current buf offset is at 0x%" PRIx64 " bytes\n", current_buf_offset);
 
-  /* Check the keyblock */
-  if (0 != KeyBlockVerify(key_block, file_size, NULL)) {
+  /* Check the key block (hash only) */
+  if (0 != KeyBlockVerify(key_block, file_size, NULL, 1)) {
     error("Error verifying key block.\n");
     return 1;
   }
 
   printf("Key block:\n");
   data_key = &key_block->data_key;
   printf("  Size:                0x%" PRIx64 "\n", key_block->key_block_size);
   printf("  Data key algorithm:  %" PRIu64 " %s\n", data_key->algorithm,
          (data_key->algorithm < kNumAlgorithms ?
           algo_strings[data_key->algorithm] : "(invalid)"));
@@ skipping 108 matching lines @@
 
     default:
       fprintf(stderr,
               "You must specify either --sign or --verify\n");
       return PrintHelp(progname);
   }
 
   /* NOTREACHED */
   return 1;
 }