git: 0ea2924f8126 - stable/14 - libsecureboot: Report failure for unsupported hash algorithm

From: Ed Maste <emaste_at_FreeBSD.org>
Date: Tue, 18 Feb 2025 18:41:26 UTC
The branch stable/14 has been updated by emaste:

URL: https://cgit.FreeBSD.org/src/commit/?id=0ea2924f8126bb32ee704b071a87185140297ab3

commit 0ea2924f8126bb32ee704b071a87185140297ab3
Author:     Huwyler <simon.huwyler@gmail.com>
AuthorDate: 2025-01-17 14:55:15 +0000
Commit:     Ed Maste <emaste@FreeBSD.org>
CommitDate: 2025-02-18 18:41:07 +0000

    libsecureboot: Report failure for unsupported hash algorithm
    
    Reviewed by:    sjg
    Pull request:   https://github.com/freebsd/freebsd-src/pull/1574
    
    (cherry picked from commit caaeab697bf98bf96e2fa8cb4a1e22240511fbcc)
---
 lib/libsecureboot/openpgp/opgp_sig.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/lib/libsecureboot/openpgp/opgp_sig.c b/lib/libsecureboot/openpgp/opgp_sig.c
index a6aa787ee5c0..d69dbe4cfb2b 100644
--- a/lib/libsecureboot/openpgp/opgp_sig.c
+++ b/lib/libsecureboot/openpgp/opgp_sig.c
@@ -343,6 +343,7 @@ openpgp_verify(const char *filename,
 				break;
 			default:
 				warnx("unsupported hash algorithm: %s", hname);
+				rc = -1;
 				goto oops;
 			}
 			md->init(&mctx.vtable);