mirror of
https://git.proxmox.com/git/efi-boot-shim
synced 2025-05-31 19:28:37 +00:00
Don't append an empty cert list to MokListRT if vendor_cert_size is 0.
Signed-off-by: Peter Jones <pjones@redhat.com>
This commit is contained in:
parent
a16340e3f7
commit
ada75ade4c
5
shim.c
5
shim.c
@ -1698,6 +1698,7 @@ EFI_STATUS mirror_mok_list()
|
|||||||
if (efi_status != EFI_SUCCESS)
|
if (efi_status != EFI_SUCCESS)
|
||||||
DataSize = 0;
|
DataSize = 0;
|
||||||
|
|
||||||
|
if (vendor_cert_size) {
|
||||||
FullDataSize = DataSize
|
FullDataSize = DataSize
|
||||||
+ sizeof (*CertList)
|
+ sizeof (*CertList)
|
||||||
+ sizeof (EFI_GUID)
|
+ sizeof (EFI_GUID)
|
||||||
@ -1729,6 +1730,10 @@ EFI_STATUS mirror_mok_list()
|
|||||||
|
|
||||||
CertData->SignatureOwner = SHIM_LOCK_GUID;
|
CertData->SignatureOwner = SHIM_LOCK_GUID;
|
||||||
CopyMem(p, vendor_cert, vendor_cert_size);
|
CopyMem(p, vendor_cert, vendor_cert_size);
|
||||||
|
} else {
|
||||||
|
FullDataSize = DataSize;
|
||||||
|
FullData = Data;
|
||||||
|
}
|
||||||
|
|
||||||
efi_status = uefi_call_wrapper(RT->SetVariable, 5, L"MokListRT",
|
efi_status = uefi_call_wrapper(RT->SetVariable, 5, L"MokListRT",
|
||||||
&shim_lock_guid,
|
&shim_lock_guid,
|
||||||
|
Loading…
Reference in New Issue
Block a user