vbatts/sbsigntools
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

sbsiglist: fix signature size check

Browse source 
Rather than checking the size with the EFI_SIGNATURE_DATA header, just
check the data len.

Also, fix the definition for the SHA256 size.

Signed-off-by: Jeremy Kerr <jeremy.kerr@canonical.com>
This commit is contained in:
Jeremy Kerr 2012-08-22 18:15:00 +08:00
parent fd553e841a
commit a7228c8307
1 changed files with 2 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
src/sbsiglist.c
View file

@ -85,7 +85,7 @@ struct cert_type {
struct cert_type cert_types[] = {
{ "x509", EFI_CERT_X509_GUID, 0 },
{ "sha256", EFI_CERT_SHA256_GUID, sizeof(EFI_SIGNATURE_DATA) + 16 },
{ "sha256", EFI_CERT_SHA256_GUID, 32 },
};
struct siglist_context {
@ -132,8 +132,7 @@ static int siglist_create(struct siglist_context *ctx)
EFI_SIGNATURE_DATA *sigdata;
uint32_t size;
if (ctx->type->sigsize && ctx->data_len + sizeof(*sigdata)
!= ctx->type->sigsize) {
if (ctx->type->sigsize && ctx->data_len != ctx->type->sigsize) {
fprintf(stderr, "Error: signature lists of type '%s' expect "
"%d bytes of data, "
"%zd bytes provided.\n",