mirror of
https://github.com/veracrypt/VeraCrypt.git
synced 2026-07-06 04:58:01 -05:00
3650fdfca4
Validate SecureBoot firmware data before trusting fallback selection and mark the unsupported-db helper as noreturn. Record unsupported Secure Boot db refusals in EFI loader diagnostics, and avoid stale rescue-disk prompts after a refusal. Reuse the central EFI loader selection policy for elevated signing-support checks instead of duplicating fallback/refusal logic. Translate unsupported Secure Boot db failures across elevation without duplicate generic dialogs, surface stored-PIM refresh failures, and log unattended loader update failures.