summaryrefslogtreecommitdiff
path: root/SecurityPkg
diff options
context:
space:
mode:
authorsfu5 <sfu5@6f19259b-4bc3-4df7-8a09-765794883524>2012-05-28 04:51:53 +0000
committersfu5 <sfu5@6f19259b-4bc3-4df7-8a09-765794883524>2012-05-28 04:51:53 +0000
commit4ef15e6e336325c78eeab67d93fadf1b6d9dfdde (patch)
tree12ca97f46b3bce5b968b78dd39df64a015ca3cc6 /SecurityPkg
parent97627ad45ab9951d83f3f73a4541e95697afec56 (diff)
downloadedk2-4ef15e6e336325c78eeab67d93fadf1b6d9dfdde.zip
edk2-4ef15e6e336325c78eeab67d93fadf1b6d9dfdde.tar.gz
edk2-4ef15e6e336325c78eeab67d93fadf1b6d9dfdde.tar.bz2
Fix a bug in DxeImageVerificationLib to use the correct certificate length when verifying a signed EFI image.
Signed-off-by: Fu Siyuan <siyuan.fu@intel.com> Reviewed-by: Dong Guo <guo.dong@intel.com> Reviewed-by: Ye Ting <ting.ye@intel.com> git-svn-id: https://edk2.svn.sourceforge.net/svnroot/edk2/trunk/edk2@13364 6f19259b-4bc3-4df7-8a09-765794883524
Diffstat (limited to 'SecurityPkg')
-rw-r--r--SecurityPkg/Library/DxeImageVerificationLib/DxeImageVerificationLib.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/SecurityPkg/Library/DxeImageVerificationLib/DxeImageVerificationLib.c b/SecurityPkg/Library/DxeImageVerificationLib/DxeImageVerificationLib.c
index 3e0bbe1..843ca2a 100644
--- a/SecurityPkg/Library/DxeImageVerificationLib/DxeImageVerificationLib.c
+++ b/SecurityPkg/Library/DxeImageVerificationLib/DxeImageVerificationLib.c
@@ -946,7 +946,7 @@ IsPkcsSignedDataVerifiedBySignatureList (
//
VerifyStatus = AuthenticodeVerify (
PkcsCertData->CertData,
- mSecDataDir->Size - sizeof(PkcsCertData->Hdr),
+ PkcsCertData->Hdr.dwLength - sizeof(PkcsCertData->Hdr),
RootCert,
RootCertSize,
mImageDigest,