diff options
| author | sfu5 <sfu5@6f19259b-4bc3-4df7-8a09-765794883524> | 2012-05-28 04:51:53 +0000 |
|---|---|---|
| committer | sfu5 <sfu5@6f19259b-4bc3-4df7-8a09-765794883524> | 2012-05-28 04:51:53 +0000 |
| commit | 4ef15e6e336325c78eeab67d93fadf1b6d9dfdde (patch) | |
| tree | 12ca97f46b3bce5b968b78dd39df64a015ca3cc6 /SecurityPkg/Library | |
| parent | 97627ad45ab9951d83f3f73a4541e95697afec56 (diff) | |
| download | edk2-platforms-4ef15e6e336325c78eeab67d93fadf1b6d9dfdde.tar.xz | |
Fix a bug in DxeImageVerificationLib to use the correct certificate length when verifying a signed EFI image.
Signed-off-by: Fu Siyuan <siyuan.fu@intel.com>
Reviewed-by: Dong Guo <guo.dong@intel.com>
Reviewed-by: Ye Ting <ting.ye@intel.com>
git-svn-id: https://edk2.svn.sourceforge.net/svnroot/edk2/trunk/edk2@13364 6f19259b-4bc3-4df7-8a09-765794883524
Diffstat (limited to 'SecurityPkg/Library')
| -rw-r--r-- | SecurityPkg/Library/DxeImageVerificationLib/DxeImageVerificationLib.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/SecurityPkg/Library/DxeImageVerificationLib/DxeImageVerificationLib.c b/SecurityPkg/Library/DxeImageVerificationLib/DxeImageVerificationLib.c index 3e0bbe1ee4..843ca2a92c 100644 --- a/SecurityPkg/Library/DxeImageVerificationLib/DxeImageVerificationLib.c +++ b/SecurityPkg/Library/DxeImageVerificationLib/DxeImageVerificationLib.c @@ -946,7 +946,7 @@ IsPkcsSignedDataVerifiedBySignatureList ( //
VerifyStatus = AuthenticodeVerify (
PkcsCertData->CertData,
- mSecDataDir->Size - sizeof(PkcsCertData->Hdr),
+ PkcsCertData->Hdr.dwLength - sizeof(PkcsCertData->Hdr),
RootCert,
RootCertSize,
mImageDigest,
|