discover/boot: abort kexec on any error from validation

[petitboot] / discover / boot.c

diff --git a/discover/boot.c b/discover/boot.c
index 0da40e3d8f4b11d6f13b20c2147ef5a3dfd521a3..09e42f2c1b3fb0df7bd266a9b56c55f96f0fb4b2 100644 (file)
--- a/discover/boot.c
+++ b/discover/boot.c
@@ -76,13 +76,13 @@ static int kexec_load(struct boot_task *boot_task)
                if (result == KEXEC_LOAD_DECRYPTION_FALURE) {
                        pb_log("%s: Aborting kexec due to"
                                " decryption failure\n", __func__);
-                       goto abort_kexec;
                }
                if (result == KEXEC_LOAD_SIGNATURE_FAILURE) {
                        pb_log("%s: Aborting kexec due to signature"
                                " verification failure\n", __func__);
-                       goto abort_kexec;
                }
+
+               goto abort_kexec;
        }
 
        const char* local_initrd = (boot_task->local_initrd_override) ?