Merge pull request #50 from hallyn/2023-10-26/fileleak

Delete /tmp/setvendordb file when done
project-machine · Oct 28, 2023 · 0b9a8e5 · 0b9a8e5
2 parents 584f3a4 + e0d57ca
commit 0b9a8e5
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/go/pkg/shim/shim.go b/go/pkg/shim/shim.go
@@ -6,6 +6,7 @@ import (
 	"fmt"
 	"io"
 	"io/ioutil"
+	"os"
 	"unsafe"
 
 	efi "github.com/canonical/go-efilib"
@@ -73,8 +74,10 @@ func SetVendorDB(shim string, db, dbx efi.SignatureDatabase) error {
 	if err != nil {
 		return err
 	}
+	defer os.Remove(fp.Name())
 
 	if err := VendorDBSectionWrite(fp, db, dbx); err != nil {
+		fp.Close()
 		return err
 	}