shim buffer overflow on ipv6 option parsing
OOB access when parsing MOK List/Certificates on MOK enrollment
Make another integer compare be signed/unsigned safe as well.

Signed-off-by: Peter Jones <pjones@redhat.com>
Use -Werror=sign-compare .

I'm going to have to fix any errors that have this anyway, so may as
well do it here properly.

Signed-off-by: Peter Jones <pjones@redhat.com>
Correctly reject bad tftp addresses earlier, rather than later.

This check is for end == NULL but was meant to be *end == '\0'.  Without
this change, we'll pass a plausibly bad address (i.e. one with no ']' at
the end) to Mtftp(... READ_FILE ...), which should fail correctly, but
our error messaging will be inconsistent.

Signed-off-by: Peter Jones <pjones@redhat.com>
Bump version to 0.8