proxmox-mirrors/efi-boot-shim
1
0
Fork 0
mirror of https://git.proxmox.com/git/efi-boot-shim synced 2025-06-14 20:06:51 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

MokManager: Discard the list contains an invalid signature

Browse Source 
Signed-off-by: Gary Ching-Pang Lin <glin@suse.com>
This commit is contained in:
Gary Ching-Pang Lin 2014-04-10 15:55:35 +08:00 committed by Peter Jones
parent 439f031711
commit efa9c47690
1 changed files with 5 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
MokManager.c
View File

@ -183,10 +183,8 @@ static UINT32 count_keys(void *Data, UINTN DataSize)
} }
if (!is_valid_siglist(CertList->SignatureType, CertList->SignatureSize)) { if (!is_valid_siglist(CertList->SignatureType, CertList->SignatureSize)) {
dbsize -= CertList->SignatureListSize; console_errorbox(L"Invalid signature list found");
CertList = (EFI_SIGNATURE_LIST *) ((UINT8 *) CertList + return 0;
CertList->SignatureListSize);
continue;
} }
MokNum++; MokNum++;
@ -220,12 +218,9 @@ static MokListNode *build_mok_list(UINT32 num, void *Data, UINTN DataSize) {
FreePool(list); FreePool(list);
return NULL; return NULL;
} }
if (!is_valid_siglist(CertList->SignatureType, CertList->SignatureSize)) {
dbsize -= CertList->SignatureListSize; /* Omit the signature check here since we already did it
CertList = (EFI_SIGNATURE_LIST *)((UINT8 *) CertList + in count_keys() */
CertList->SignatureListSize);
continue;
}
Cert = (EFI_SIGNATURE_DATA *) (((UINT8 *) CertList) + Cert = (EFI_SIGNATURE_DATA *) (((UINT8 *) CertList) +
sizeof (EFI_SIGNATURE_LIST) + CertList->SignatureHeaderSize); sizeof (EFI_SIGNATURE_LIST) + CertList->SignatureHeaderSize);