Fix an off-by-one on the sbat self-check.

Signed-off-by: Peter Jones <pjones@redhat.com>

1 files changed, 1 insertions, 1 deletions

diff --git a/shim.c b/shim.c
index b00fa5fc..c5cfbb83 100644
--- a/shim.c
+++ b/shim.c
@@ -1956,7 +1956,7 @@ efi_main (EFI_HANDLE passed_image_handle, EFI_SYSTEM_TABLE *passed_systab)
 			goto die;
 		}
 
-		efi_status = handle_sbat(sbat_start, sbat_end - sbat_start);
+		efi_status = handle_sbat(sbat_start, sbat_end - sbat_start - 1);
 		if (EFI_ERROR(efi_status)) {
 			perror(L"Verifiying shim SBAT data failed: %r\n",
 			       efi_status);