Reject the binary when there is no key in MokList

This commit is contained in:
Gary Ching-Pang Lin 2012-09-21 15:10:31 +08:00
parent 12e2d62500
commit 03953e08bc

4
shim.c
View File

@ -617,8 +617,10 @@ static EFI_STATUS verify_buffer (char *data, int datasize,
}
CopyMem(&MokNum, MokListData, sizeof(UINT32));
if (MokNum == 0)
if (MokNum == 0) {
status = EFI_ACCESS_DENIED;
goto done;
}
list = build_mok_list(MokNum,
(void *)MokListData + sizeof(UINT32),