Break out of our db checking loop at the appropriate time.

The break in check_db_cert is at the wrong level due to a typo in
indentation, and as a result only the last cert in the list can
correctly match.  Rectify that.

Signed-off-by: Peter Jones <pjones@redhat.com>

1 files changed, 2 insertions, 3 deletions

diff --git a/shim.c b/shim.c
index 6a3c054d..59825099 100644
--- a/shim.c
+++ b/shim.c
@@ -231,9 +231,8 @@ static CHECK_STATUS check_db_cert(CHAR16 *dbname, WIN_CERTIFICATE_EFI_PKCS *data
 							      Cert->SignatureData,
 							      CertList->SignatureSize,
 							      hash, SHA256_DIGEST_SIZE);
-					}
-			if (IsFound) {
-				break;
+				if (IsFound)
+					break;
 			}
 
 			Cert = (EFI_SIGNATURE_DATA *) ((UINT8 *) Cert + CertList->SignatureSize);