Fix an off-by-one on the sbat self-check.

Signed-off-by: Peter Jones <[email protected]>
rhboot · Mar 30, 2021 · 369e2ef · 369e2ef
1 parent 212ba30
commit 369e2ef
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/shim.c b/shim.c
@@ -1956,7 +1956,7 @@ efi_main (EFI_HANDLE passed_image_handle, EFI_SYSTEM_TABLE *passed_systab)
 			goto die;
 		}
 
-		efi_status = handle_sbat(sbat_start, sbat_end - sbat_start);
+		efi_status = handle_sbat(sbat_start, sbat_end - sbat_start - 1);
 		if (EFI_ERROR(efi_status)) {
 			perror(L"Verifiying shim SBAT data failed: %r\n",
 			       efi_status);