Fix an off-by-one on the sbat self-check.

vathpela · vathpela · commit 369e2eff10d8 · 2021-03-30T11:40:32.000-04:00
Signed-off-by: Peter Jones &lt;pjones@redhat.com&gt;
diff --git a/shim.c b/shim.c
@@ -1956,7 +1956,7 @@ efi_main (EFI_HANDLE passed_image_handle, EFI_SYSTEM_TABLE *passed_systab)
 			goto die;
 		}
 
-		efi_status = handle_sbat(sbat_start, sbat_end - sbat_start);
+		efi_status = handle_sbat(sbat_start, sbat_end - sbat_start - 1);
 		if (EFI_ERROR(efi_status)) {
 			perror(L"Verifiying shim SBAT data failed: %r\n",
 			       efi_status);

Original file line number	Diff line number	Diff line change
`@@ -1956,7 +1956,7 @@ efi_main (EFI_HANDLE passed_image_handle, EFI_SYSTEM_TABLE *passed_systab)`
`1956`	`1956`	`goto die;`
`1957`	`1957`	`}`
`1958`	`1958`
`1959`		`- efi_status = handle_sbat(sbat_start, sbat_end - sbat_start);`
	`1959`	`+ efi_status = handle_sbat(sbat_start, sbat_end - sbat_start - 1);`
`1960`	`1960`	`if (EFI_ERROR(efi_status)) {`
`1961`	`1961`	`perror(L"Verifiying shim SBAT data failed: %r\n",`
`1962`	`1962`	`efi_status);`