mirror of
https://git.proxmox.com/git/efi-boot-shim
synced 2025-06-14 20:06:51 +00:00
MokManager: Discard the list contains an invalid signature
Signed-off-by: Gary Ching-Pang Lin <glin@suse.com>
This commit is contained in:
parent
439f031711
commit
efa9c47690
15
MokManager.c
15
MokManager.c
@ -183,10 +183,8 @@ static UINT32 count_keys(void *Data, UINTN DataSize)
|
||||
}
|
||||
|
||||
if (!is_valid_siglist(CertList->SignatureType, CertList->SignatureSize)) {
|
||||
dbsize -= CertList->SignatureListSize;
|
||||
CertList = (EFI_SIGNATURE_LIST *) ((UINT8 *) CertList +
|
||||
CertList->SignatureListSize);
|
||||
continue;
|
||||
console_errorbox(L"Invalid signature list found");
|
||||
return 0;
|
||||
}
|
||||
|
||||
MokNum++;
|
||||
@ -220,12 +218,9 @@ static MokListNode *build_mok_list(UINT32 num, void *Data, UINTN DataSize) {
|
||||
FreePool(list);
|
||||
return NULL;
|
||||
}
|
||||
if (!is_valid_siglist(CertList->SignatureType, CertList->SignatureSize)) {
|
||||
dbsize -= CertList->SignatureListSize;
|
||||
CertList = (EFI_SIGNATURE_LIST *)((UINT8 *) CertList +
|
||||
CertList->SignatureListSize);
|
||||
continue;
|
||||
}
|
||||
|
||||
/* Omit the signature check here since we already did it
|
||||
in count_keys() */
|
||||
|
||||
Cert = (EFI_SIGNATURE_DATA *) (((UINT8 *) CertList) +
|
||||
sizeof (EFI_SIGNATURE_LIST) + CertList->SignatureHeaderSize);
|
||||
|
Loading…
Reference in New Issue
Block a user