d108ec594a
- Introduces a new package, grub2-x86_64-efi-bls, which includes a straightforward grubbls.efi file. This file can be copied to the EFI System Partition (ESP) along with boot fragments in the Boot Loader Specification (BLS) format * 0001-Streamline-BLS-and-improve-PCR-stability.patch - Fix crash in bli module (bsc#1226497) * 0001-bli-Fix-crash-in-get_part_uuid.patch - Rework package dependencies: grub2-common now includes common userland utilities and is required by grub2 platform packages. grub2 is now a meta package that pulls in the default platform package. OBS-URL: https://build.opensuse.org/request/show/1196023 OBS-URL: https://build.opensuse.org/package/show/Base:System/grub2?expand=0&rev=512
60 lines
2.3 KiB
Diff
60 lines
2.3 KiB
Diff
From 3741c6807923ae97b0d87e61c59c8de8af544484 Mon Sep 17 00:00:00 2001
|
|
From: Javier Martinez Canillas <javierm@redhat.com>
|
|
Date: Thu, 23 Apr 2020 15:06:46 +0200
|
|
Subject: [PATCH 6/9] efi: Set image base address before jumping to the PE/COFF
|
|
entry point
|
|
|
|
Upstream GRUB uses the EFI LoadImage() and StartImage() to boot the Linux
|
|
kernel. But our custom EFI loader that supports Secure Boot instead uses
|
|
the EFI handover protocol (for x86) or jumping directly to the PE/COFF
|
|
entry point (for aarch64).
|
|
|
|
This is done to allow the bootloader to verify the images using the shim
|
|
lock protocol to avoid booting untrusted binaries.
|
|
|
|
Since the bootloader loads the kernel from the boot media instead of using
|
|
LoadImage(), it is responsible to set the Loaded Image base address before
|
|
booting the kernel.
|
|
|
|
Otherwise the kernel EFI stub will complain that it was not set correctly
|
|
and print the following warning message:
|
|
|
|
EFI stub: ERROR: FIRMWARE BUG: efi_loaded_image_t::image_base has bogus value
|
|
|
|
Resolves: rhbz#1825411
|
|
|
|
Signed-off-by: Javier Martinez Canillas <javierm@redhat.com>
|
|
---
|
|
grub-core/loader/arm64/efi/linux.c | 12 ++++++++++++
|
|
1 file changed, 12 insertions(+)
|
|
|
|
Index: grub-2.06~rc1/grub-core/loader/arm64/efi/linux.c
|
|
===================================================================
|
|
--- grub-2.06~rc1.orig/grub-core/loader/arm64/efi/linux.c
|
|
+++ grub-2.06~rc1/grub-core/loader/arm64/efi/linux.c
|
|
@@ -58,9 +58,24 @@ static grub_err_t
|
|
grub_efi_linux_boot (void *kernel_address, grub_off_t offset,
|
|
void *kernel_params)
|
|
{
|
|
+ grub_efi_loaded_image_t *loaded_image = NULL;
|
|
handover_func hf;
|
|
|
|
+ /*
|
|
+ * Since the EFI loader is not calling the LoadImage() and StartImage()
|
|
+ * services for loading the kernel and booting respectively, it has to
|
|
+ * set the Loaded Image base address.
|
|
+ */
|
|
+ loaded_image = grub_efi_get_loaded_image (grub_efi_image_handle);
|
|
+ if (loaded_image)
|
|
+ loaded_image->image_base = kernel_addr;
|
|
+ else
|
|
+ grub_dprintf ("linux", "Loaded Image base address could not be set\n");
|
|
+
|
|
+ grub_dprintf ("linux", "kernel_addr: %p handover_offset: %p params: %p\n",
|
|
+ kernel_address, (void *)(grub_efi_uintn_t)offset, kernel_params);
|
|
hf = (handover_func)((char *)kernel_address + offset);
|
|
+ grub_dprintf ("linux", "handover_func() = %p\n", hf);
|
|
hf (grub_efi_image_handle, grub_efi_system_table, kernel_params);
|
|
|
|
return GRUB_ERR_BUG;
|