Audit get_variable() calls for correct FreePool() use.

Signed-off-by: Peter Jones <pjones@redhat.com>

3 files changed, 10 insertions, 3 deletions

diff --git a/MokManager.c b/MokManager.c
index cd569b6d..7e40a38f 100644
--- a/MokManager.c
+++ b/MokManager.c
@@ -1310,7 +1310,8 @@ static EFI_STATUS delete_keys(void *MokDel, UINTN MokDelSize, BOOLEAN MokX)
 		gRT->SetVariable(db_name, &SHIM_LOCK_GUID,
 				 EFI_VARIABLE_NON_VOLATILE |
 				 EFI_VARIABLE_BOOTSERVICE_ACCESS, 0, NULL);
-		return EFI_ACCESS_DENIED;
+		efi_status = EFI_ACCESS_DENIED;
+		goto error;
 	}
 
 	/* Nothing to do */
diff --git a/fallback.c b/fallback.c
index 574d296a..c3f5583c 100644
--- a/fallback.c
+++ b/fallback.c
@@ -33,14 +33,16 @@ get_fallback_verbose(void)
 		return state;
 	}
 
+	state = 0;
 	for (i = 0; i < dataSize; i++) {
 		if (data[i]) {
 			state = 1;
-			return state;
+			break;
 		}
 	}
 
-	state = 0;
+	if (data)
+		FreePool(data);
 	return state;
 }
 
@@ -990,6 +992,8 @@ debug_hook(void)
 		return;
 	}
 
+	if (data)
+		FreePool(data);
 	if (x)
 		return;
 
diff --git a/shim.c b/shim.c
index a66df76b..00155346 100644
--- a/shim.c
+++ b/shim.c
@@ -2497,6 +2497,8 @@ debug_hook(void)
 		return;
 	}
 
+	FreePool(data);
+
 	console_print(L"add-symbol-file "DEBUGDIR
 		      L"shim" EFI_ARCH L".efi.debug 0x%08x -s .data 0x%08x\n",
 		      &_text, &_data);