forked from pool/s390-tools
58e312617d
- The location of the udevadm binary was changed from /sbin/ to /usr/bin a while back. A symbolic link was added for compatibility. In the latest versions, that symbolic link has been removed, requiring changes to scripts that were depending on that. Added the following patches for bsc#1171587 * s390-tools-sles15sp2-lsluns-try-harder-to-find-udevadm.patch * s390-tools-sles15sp2-znetconf-introduce-better-ways-to-locate-udevadm.patch *s390-tools-sles15sp2-mon_tools-update-udevadm-location.patch - Added s390-tools-sles15sp2-zipl-prevent-endless-loop-during-IPL.patch (bsc#1174309) zipl: prevent endless loop during secure IPL - Added s390-tools-sles15sp2-zipl-check-for-valid-ipl-parmblock-lowcore-pointer.patch (bsc#1174310) zipl: check for valid ipl parmblock lowcore pointer - Added s390-tools-sles15sp2-01-zipl-libc-libc_stop-move-noreturn-to-declaration.patch s390-tools-sles15sp2-02-zipl-stage3-correctly-handle-diag308-response-code.patch (bsc1174311) zipl: Fix KVM IPL without bootindex - Updated cputype and read_values to recognize the new z15 models. - Added s390-tools-sles15sp2-zipl-prevent-endless-loop-during-IPL.patch (bsc#1174309) zipl: prevent endless loop during secure IPL - Added s390-tools-sles15sp2-zipl-check-for-valid-ipl-parmblock-lowcore-pointer.patch (bsc#1174310) zipl: check for valid ipl parmblock lowcore pointer - Added s390-tools-sles15sp2-01-zipl-libc-libc_stop-move-noreturn-to-declaration.patch s390-tools-sles15sp2-02-zipl-stage3-correctly-handle-diag308-response-code.patch (bsc1174311) zipl: Fix KVM IPL without bootindex - Updated cputype and read_values to recognize the new z15 models. - Added s390-tools-sles15sp2-vmcp-exit-code.patch (bsc#1173481) Change the vmcp exit code and return 'CP command failed' when both "CP command failed" and "response buffer is too small" error conditions are true. OBS-URL: https://build.opensuse.org/request/show/823200 OBS-URL: https://build.opensuse.org/package/show/Base:System/s390-tools?expand=0&rev=97
34 lines
1.1 KiB
Diff
34 lines
1.1 KiB
Diff
Subject: [PATCH] [BZ 186939] zipl: prevent endless loop during secure IPL
|
|
From: Stefan Haberland <sth@linux.ibm.com>
|
|
|
|
Description: zipl: prevent endless loop during secure IPL
|
|
Symptom: During IPL with secure boot enabled the loader may loop
|
|
infinitely.
|
|
Problem: In case secure boot is enabled but no components in the
|
|
IPL report are found it ends up in an endless loop in
|
|
the component verification.
|
|
Solution: To prevent this check if components are found and exit
|
|
if not.
|
|
Reproduction: IPL with secure boot enabled.
|
|
Upstream-ID: d5a88c1e56852881e8b0bb4056ffaa25bea818c5
|
|
Problem-ID: 186939
|
|
|
|
Signed-off-by: Stefan Haberland <sth@linux.ibm.com>
|
|
---
|
|
zipl/boot/stage3.c | 4 ++++
|
|
1 file changed, 4 insertions(+)
|
|
|
|
--- a/zipl/boot/stage3.c
|
|
+++ b/zipl/boot/stage3.c
|
|
@@ -104,6 +104,10 @@ is_verified_address(unsigned long image_
|
|
|
|
rb_hdr = (void *) rb_hdr + rb_hdr->len;
|
|
}
|
|
+
|
|
+ if (!comps)
|
|
+ return 0;
|
|
+
|
|
for_each_rb_entry(comp, comps) {
|
|
if (image_addr == comp->addr &&
|
|
comp->flags & IPL_RB_COMPONENT_FLAG_SIGNED &&
|