namespace: avoid assertion failure (#6649)

If the root image is not decrypted, it must not be relinquished.

diff --git a/src/core/namespace.c b/src/core/namespace.c
index 3eb171c7027a6f9735e6998c348c695a8071ed21..09eac6bfe8deac5a4dec612e5a7aa04168a36cbd 100644 (file)
--- a/src/core/namespace.c
+++ b/src/core/namespace.c
@@ -1063,9 +1063,11 @@ int setup_namespace(
                 if (r < 0)
                         goto finish;
 
-                r = decrypted_image_relinquish(decrypted_image);
-                if (r < 0)
-                        goto finish;
+                if (decrypted_image) {
+                        r = decrypted_image_relinquish(decrypted_image);
+                        if (r < 0)
+                                goto finish;
+                }
 
                 loop_device_relinquish(loop_device);