3 files changed, 8 insertions, 3 deletions

diff --git a/crypto/asymmetric_keys/mscode_parser.c b/crypto/asymmetric_keys/mscode_parser.c
index 6a76d5c70ef6..9492e1c22d38 100644
--- a/crypto/asymmetric_keys/mscode_parser.c
+++ b/crypto/asymmetric_keys/mscode_parser.c
@@ -124,5 +124,10 @@ int mscode_note_digest(void *context, size_t hdrlen,
         struct pefile_context *ctx = context;
 
         ctx->digest = kmemdup(value, vlen, GFP_KERNEL);
-        return ctx->digest ? 0 : -ENOMEM;
+        if (!ctx->digest)
+                return -ENOMEM;
+
+        ctx->digest_len = vlen;
+
+        return 0;
 }
diff --git a/crypto/asymmetric_keys/pkcs7_verify.c b/crypto/asymmetric_keys/pkcs7_verify.c
index 44b746e9df1b..2ffd69769466 100644
--- a/crypto/asymmetric_keys/pkcs7_verify.c
+++ b/crypto/asymmetric_keys/pkcs7_verify.c
@@ -227,7 +227,7 @@ static int pkcs7_verify_sig_chain(struct pkcs7_message *pkcs7,
                                 if (asymmetric_key_id_same(p->id, auth))
                                         goto found_issuer_check_skid;
                         }
-                } else {
+                } else if (sig->auth_ids[1]) {
                         auth = sig->auth_ids[1];
                         pr_debug("- want %*phN\n", auth->len, auth->data);
                         for (p = pkcs7->certs; p; p = p->next) {
diff --git a/crypto/asymmetric_keys/restrict.c b/crypto/asymmetric_keys/restrict.c
index ac4bddf669de..19d1afb9890f 100644
--- a/crypto/asymmetric_keys/restrict.c
+++ b/crypto/asymmetric_keys/restrict.c
@@ -87,7 +87,7 @@ int restrict_link_by_signature(struct key *trust_keyring,
 
         sig = payload->data[asym_auth];
         if (!sig->auth_ids[0] && !sig->auth_ids[1])
-                return 0;
+                return -ENOKEY;
 
         if (ca_keyid && !asymmetric_key_id_partial(sig->auth_ids[1], ca_keyid))
                 return -EPERM;