Currently if the bootefi command fails due to missing authentication, the
user gets no feedback.

Write a log message 'Image not authenticated' if LoadImage() fails due to
missing authentication.

Signed-off-by: Heinrich Schuchardt <xypron.g...@gmx.de>
---
 lib/efi_loader/efi_image_loader.c | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/lib/efi_loader/efi_image_loader.c 
b/lib/efi_loader/efi_image_loader.c
index da50fc31f1..94f76ef6b8 100644
--- a/lib/efi_loader/efi_image_loader.c
+++ b/lib/efi_loader/efi_image_loader.c
@@ -762,10 +762,12 @@ efi_status_t efi_load_pe(struct efi_loaded_image_obj 
*handle,
        }

        /* Authenticate an image */
-       if (efi_image_authenticate(efi, efi_size))
+       if (efi_image_authenticate(efi, efi_size)) {
                handle->auth_status = EFI_IMAGE_AUTH_PASSED;
-       else
+       } else {
                handle->auth_status = EFI_IMAGE_AUTH_FAILED;
+               log_err("Image not authenticated\n");
+       }

        /* Calculate upper virtual address boundary */
        for (i = num_sections - 1; i >= 0; i--) {
--
2.28.0

Reply via email to