summaryrefslogtreecommitdiff
path: root/Cryptlib
diff options
context:
space:
mode:
authorSteve McIntyre <steve@einval.com>2023-01-22 13:05:10 +0000
committerSteve McIntyre <steve@einval.com>2023-01-22 13:05:10 +0000
commit2dd2f7600d41253fe621b8d040ab57f0c202d71b (patch)
tree603ffd3c05d9935fd879bb073f6d3edc672139cf /Cryptlib
parente6ace38abd705fbe24349152b7c90d473404e86e (diff)
downloadefi-boot-shim-upstream/15.7.tar.gz
efi-boot-shim-upstream/15.7.zip
New upstream version 15.7upstream/15.7
Diffstat (limited to 'Cryptlib')
-rw-r--r--Cryptlib/Pk/CryptAuthenticode.c4
1 files changed, 2 insertions, 2 deletions
diff --git a/Cryptlib/Pk/CryptAuthenticode.c b/Cryptlib/Pk/CryptAuthenticode.c
index 74e50a2e..f6f988b8 100644
--- a/Cryptlib/Pk/CryptAuthenticode.c
+++ b/Cryptlib/Pk/CryptAuthenticode.c
@@ -9,7 +9,7 @@
AuthenticodeVerify() will get PE/COFF Authenticode and will do basic check for
data structure.
-Copyright (c) 2011 - 2015, Intel Corporation. All rights reserved.<BR>
+Copyright (c) 2011 - 2019, Intel Corporation. All rights reserved.<BR>
This program and the accompanying materials
are licensed and made available under the terms and conditions of the BSD License
which accompanies this distribution. The full text of the license may be found at
@@ -106,7 +106,7 @@ AuthenticodeVerify (
//
// Check if it's PKCS#7 Signed Data (for Authenticode Scenario)
//
- if (!PKCS7_type_is_signed (Pkcs7)) {
+ if (!PKCS7_type_is_signed (Pkcs7) || PKCS7_get_detached (Pkcs7)) {
goto _Exit;
}