shaba/systemd
1
0
Fork 0
mirror of https://github.com/systemd/systemd.git synced 2025-05-27 21:05:55 +03:00
Code

pcrlock: Pad pe hash to a multiple of 8 bytes

Browse Source 
All other tools (sbsigntools, osslsigncode, sbctl, goblin) do this
as well so let's follow suite.
This commit is contained in:
Daan De Meyer 2024-11-03 21:45:29 +01:00
parent 867e2c2a60
commit e37701a8cd
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
src/pcrlock/pehash.c
View File

@ -135,6 +135,10 @@ int pe_hash(int fd,
r = hash_file(fd, mdctx, p, st.st_size - p - certificate_table->Size);
if (r < 0)
return r;
/* If the file size is not a multiple of 8 bytes, pad the hash with zero bytes. */
if (st.st_size % 8 != 0 && EVP_DigestUpdate(mdctx, (const uint8_t[8]) {}, 8 - (st.st_size % 8)) != 1)
return log_debug_errno(SYNTHETIC_ERRNO(ENOTRECOVERABLE), "Unable to hash data.");
}
int hsz = EVP_MD_CTX_size(mdctx);