pesign: Remove the first signature unless another is specified

Signed-off-by: Egor Ignatov <[email protected]>
rhboot · Mar 7, 2024 · 8f9e830 · 8f9e830
1 parent 1f9e2fa
commit 8f9e830
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/src/file_pe.c b/src/file_pe.c
@@ -231,8 +231,9 @@ pe_handle_action(pesign_context *ctxp, int action, int padding)
 			open_input(ctxp);
 			open_output(ctxp);
 			close_input(ctxp);
-			if(ctxp->signum < 0 ||
-			   ctxp->signum >= ctxp->cms_ctx->num_signatures) {
+			if (ctxp->signum < 0)
+				ctxp->signum = 0;
+			if (ctxp->signum >= ctxp->cms_ctx->num_signatures) {
 				warnx("Invalid signature number %d.",
 				      ctxp->signum);
 				errx(1, "Must be between 0 and %d.",