bugGNU GRUB - Bugs: bug #46707, double free when kernel does not...

 
 

You are not allowed to post comments on this tracker with your current authentication level.

bug #46707: double free when kernel does not match secure boot key

Submitted by:  Linus Torvalds <torvalds>
Submitted on:  Thu 17 Dec 2015 11:18:26 PM UTC  
 
Category: BootingSeverity: Major
Priority: 3 - LowItem Group: Software Error
Status: NonePrivacy: Public
Assigned to: NoneOriginator Name: Linus Torvalds
Open/Closed: OpenRelease: 
Release: 2.02~beta1Reproducibility: Every Time
Planned Release: 2.03+

Fri 18 Dec 2015 03:13:06 AM UTC, comment #1:

The code in question (secure boot) is fedora-specific. We don't currently support this functionality upstream. I'll keep the bug open as a reminder to look into it during patch uplift

Vladimir Serbinenko <phcoder>
Project Administrator
Thu 17 Dec 2015 11:18:26 PM UTC, original submission:

I already submitted this to the Fedora bugzilla, since it happens wioth the F23 grub, which seems to be based on some 2.02 prerelease.

It may be Fedora-specific, but since I tend to try making upstream reports too, here goes..

When I installed Fedora 23 on my new desktop machine everything worked fine. I then built my own kernel (of course), and tried to boot it, but I never got into the kernel, because grub2 failed with:

double free at 0x616f5760
Aborted. Press any key to edit.

which is not very helpful, and is obviously a Grub bug.

However, booting the Fedora kernel worked fine, so I screatched my head for a while, and then realized that I had never touched the BIOS secure boot settings - and I don't sign my kernels with some silly vendor signature.

And sure enough, when I disable secure boot, Grub2 works fine.

So clearly Grub2 does not handle secure boot key failures very gracefully. I don't expect you to actually boot the kernel, but I would expect a useful error message, rather than a bug about double free's. Something like

Not able to boot unsigned kernel in secure mode.
Aborted. Press any key to edit.

..and hey, if this is all just the Fedora version of Grub2, you can ignore this bug report, of course.

Linus Torvalds <torvalds>

 

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -unavailable- added by phcoder (Posted a comment)
  • -unavailable- added by torvalds (Submitted the item)
  •  

    Do you think this task is very important?
    If so, you can click here to add your encouragement to it.
    This task has 0 encouragements so far.

    Only logged-in users can vote.

     

    Please enter the title of George Orwell's famous dystopian book (it's a date):

     

     

    Follow 2 latest changes.

    Date Changed By Updated Field Previous Value => Replaced By
    Tue 11 Oct 2016 12:34:27 PM UTCphcoderPriority5 - Normal=>3 - Low
    Wed 02 Mar 2016 01:33:03 PM UTCphcoderPlanned ReleaseNone=>2.03+

    Back to the top


    Powered by Savane 3.1-cleanup1