128 	int err = 0;  in validate_signature()  local
143 		err = ENOMEM;  in validate_signature()
150 	err = rsa_make_pub(rsa_ctx,  in validate_signature()
153 	if (err) {  in validate_signature()
158 	err = rsa_verify_pkcs1v15(rsa_ctx, CC_DIGEST_OID_SHA256,  in validate_signature()
162 	if (err) {  in validate_signature()
173 	if (err) {  in validate_signature()
174 		return err;  in validate_signature()
185 	int err = 0;  in validate_root_image()  local
202 	vp = imgboot_get_image_file(root_path, &fsize, &err);  in validate_root_image()
207 	if ((err = VNOP_OPEN(vp, FREAD, ctx)) != 0) {  in validate_root_image()
224 				err = ENOMEM;  in validate_root_image()
232 			err = EINVAL;  in validate_root_image()
236 		err = vn_rdwr(UIO_READ, vp, (caddr_t)buf, chk->chunk_size,  in validate_root_image()
238 		if (err) {  in validate_root_image()
239 			AUTHPRNT("vn_rdrw fail (err = %d, resid = %d)", err, resid);  in validate_root_image()
243 			err = EINVAL;  in validate_root_image()
258 			err = EINVAL;  in validate_root_image()
263 			err = EINVAL;  in validate_root_image()
271 		err = EINVAL;  in validate_root_image()
285 	return err;  in validate_root_image()
331 	int err = 0;  in validate_chunklist()  local
397 …err = validate_signature(key->key, CHUNKLIST_PUBKEY_LEN, (uint8_t *)((uintptr_t)buf + hdr->cl_sig_…  in validate_chunklist()
399 		if (err == 0) {  in validate_chunklist()
418 	if (err) {  in validate_chunklist()
419 		return err;  in validate_chunklist()
437 	int err = 0;  in authenticate_root_with_chunklist()  local
440 	err = construct_chunklist_path(chunklist_path, rootdmg_path);  in authenticate_root_with_chunklist()
441 	if (err) {  in authenticate_root_with_chunklist()
453 	err = imageboot_read_file(chunklist_path, &chunklist_buf, &chunklist_len, NULL);  in authenticate_root_with_chunklist()
454 	if (err) {  in authenticate_root_with_chunklist()
460 	err = validate_chunklist(chunklist_buf, chunklist_len);  in authenticate_root_with_chunklist()
461 	if (err) {  in authenticate_root_with_chunklist()
468 	err = validate_root_image(rootdmg_path, chunklist_buf);  in authenticate_root_with_chunklist()
469 	if (err) {  in authenticate_root_with_chunklist()
470 		AUTHPRNT("failed to validate root image against chunklist (%d)", err);  in authenticate_root_with_chunklist()
479 	if (err && (csr_check(CSR_ALLOW_ANY_RECOVERY_OS) == 0)) {  in authenticate_root_with_chunklist()
481 		err = 0;  in authenticate_root_with_chunklist()
491 	return err;  in authenticate_root_with_chunklist()
511 	int err = 0;  in authenticate_bootkc_uuid()  local
516 	err = imageboot_read_file(bootkc_path, &buf, &bufsz, NULL);  in authenticate_bootkc_uuid()
517 	if (err) {  in authenticate_bootkc_uuid()
525 		err = EINVAL;  in authenticate_bootkc_uuid()
531 		err = EINVAL;  in authenticate_bootkc_uuid()
545 		err = EINVAL;  in authenticate_bootkc_uuid()
552 	return err;  in authenticate_bootkc_uuid()
561 	int err = 0;  in authenticate_libkern_uuid()  local
567 	err = imageboot_read_file(libkern_path, &buf, &bufsz, &fsize);  in authenticate_libkern_uuid()
568 	if (err) {  in authenticate_libkern_uuid()
576 			err = EINVAL;  in authenticate_libkern_uuid()
582 		err = imageboot_read_file_from_offset(libkern_path, fat_arch.offset, &buf, &bufsz);  in authenticate_libkern_uuid()
583 		if (err) {  in authenticate_libkern_uuid()
592 		err = EINVAL;  in authenticate_libkern_uuid()
598 	err = OSKextGetUUIDForName(libkern_bundle, live_uuid);  in authenticate_libkern_uuid()
599 	if (err) {  in authenticate_libkern_uuid()
614 		err = EINVAL;  in authenticate_libkern_uuid()
621 	return err;  in authenticate_libkern_uuid()