Received: by 2002:ac0:a5a7:0:0:0:0:0 with SMTP id m36-v6csp618439imm; Wed, 15 Aug 2018 03:10:46 -0700 (PDT) X-Google-Smtp-Source: AA+uWPxw8je1mMh+I8xkdF4vL4pi2lbAlv+sAtB8f4mjHBOvCn6wmclEusw6tTsHG7e84me4NvWo X-Received: by 2002:a63:da56:: with SMTP id l22-v6mr24539471pgj.179.1534327846799; Wed, 15 Aug 2018 03:10:46 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1534327846; cv=none; d=google.com; s=arc-20160816; b=VV/PPTQdqSRrrqY+YUBz1kVtWjNDDXAODHYEt2q8Ug4uoEnXWKD7SQgpoF+tVDZMWd pgKbRX0wpB7vitYz7kjwxNSd9T+7LcjVCC1v5G5JKyKj7PVbGvBdO14FDcffNgeNE47b 0+DTtPC1qIQ/BBojBCSdgJvf9ohzBghfwrpdlqPCLPfXbMVmLW5u5sgPKq19RYavHUqv zmKjtWbAZt7JKdwstq9qwF6WMEtsSdWKvrXY1He1eOZhqYbsO9f69UpOXYUeqhgn1K+t IJV1tc680YFMcLGZxwha7e9Pqmud503kOvWqLvGGjueB3ck6ui1K5mISFYEXe8SY6Naf mPYA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:message-id:date:subject:cc:to:from :arc-authentication-results; bh=6jgnqzzEtuDbgs1RFpbW8ztwt04aTXcSslhHNZI1Tmw=; b=HiGjf/kL7hnzonD9cCmtJE9Mau/vvcliF3UEacd0PVCRK7qgansn2LPjhMKHd5CCtg R8CQi1Lgb0S6SpQdVAVxmCZLYsrPOMxC9mCNZ4hO3b+fiZI3p95rpoNn3WLwFPhk6+Lp V/rDRBwH9IUOWtY1RAMEjYWs+jtz5WoSoLx4Oyk00PT2g4nZcC/wXpeDhreo4SqzEkn0 8EwaIJOnqKp4ZCDyjEn96beUPu9HAbjGgG6tmYA+juMvDKY/dpos+3d2nPRmbxqo2VBv JAUp4QGW3mssMM7X2kVqBYcVLV5xHtNPjcwJhO2kLGIERlLEcStvTra+8P+9HjGk5umD sqcQ== ARC-Authentication-Results: i=1; mx.google.com; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Return-Path: Received: from vger.kernel.org (vger.kernel.org. [209.132.180.67]) by mx.google.com with ESMTP id e10-v6si24375365pge.48.2018.08.15.03.10.30; Wed, 15 Aug 2018 03:10:46 -0700 (PDT) Received-SPF: pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67; Authentication-Results: mx.google.com; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1729049AbeHONAn (ORCPT + 99 others); Wed, 15 Aug 2018 09:00:43 -0400 Received: from mail.sembritzki.me ([5.45.101.249]:59858 "EHLO mail.sembritzki.me" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1728583AbeHONAn (ORCPT ); Wed, 15 Aug 2018 09:00:43 -0400 X-Greylist: delayed 445 seconds by postgrey-1.27 at vger.kernel.org; Wed, 15 Aug 2018 09:00:42 EDT Received: from yannik-laptop.fritz.box (x4dbb4132.dyn.telefonica.de [77.187.65.50]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail.sembritzki.me (Postfix) with ESMTPSA id 02F76A7A94; Wed, 15 Aug 2018 12:01:45 +0200 (CEST) From: Yannik Sembritzki To: Thomas Gleixner , Ingo Molnar , "H. Peter Anvin" , x86@kernel.org, linux-kernel@vger.kernel.org Cc: Yannik Sembritzki Subject: [PATCH] Fix kexec forbidding kernels signed with custom platform keys to boot Date: Wed, 15 Aug 2018 12:00:53 +0200 Message-Id: <20180815100053.13609-1-yannik@sembritzki.me> X-Mailer: git-send-email 2.17.1 Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org --- arch/x86/kernel/kexec-bzimage64.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/arch/x86/kernel/kexec-bzimage64.c b/arch/x86/kernel/kexec-bzimage64.c index 7326078e..eaaa125d 100644 --- a/arch/x86/kernel/kexec-bzimage64.c +++ b/arch/x86/kernel/kexec-bzimage64.c @@ -532,7 +532,7 @@ static int bzImage64_cleanup(void *loader_data) static int bzImage64_verify_sig(const char *kernel, unsigned long kernel_len) { return verify_pefile_signature(kernel, kernel_len, - NULL, + (void *)1UL, VERIFYING_KEXEC_PE_SIGNATURE); } #endif -- 2.17.1 The exact scenario under which this issue occurs is described here: https://bugzilla.redhat.com/show_bug.cgi?id=1554113