bugGNU GRUB - Bugs: bug #46707, double free when kernel does not...

 
 

You are not allowed to post comments on this tracker with your current authentication level.

bug #46707: double free when kernel does not match secure boot key

Submitter:  Linus Torvalds <torvalds>
Submitted:  Thu 17 Dec 2015 11:18:26 PM UTC
   
 
Category:  Booting Severity:  Major
Priority:  3 - Low Item Group:  Software Error
Status:  None Privacy:  Public
Assigned to:  None Originator Name:  Linus Torvalds
Open/Closed:  Open Release:  2.02~beta1
Release:  Reproducibility:  Every Time
Planned Release:  2.03+

Fri 18 Dec 2015 03:13:06 AM UTC, comment #1: 

The code in question (secure boot) is fedora-specific. We don't currently support this functionality upstream. I'll keep the bug open as a reminder to look into it during patch uplift

Vladimir Serbinenko <phcoder>
Group administrator
Thu 17 Dec 2015 11:18:26 PM UTC, original submission:  

I already submitted this to the Fedora bugzilla, since it happens wioth the F23 grub, which seems to be based on some 2.02 prerelease.

It may be Fedora-specific, but since I tend to try making upstream reports too, here goes..

When I installed Fedora 23 on my new desktop machine everything worked fine. I then built my own kernel (of course), and tried to boot it, but I never got into the kernel, because grub2 failed with:

  double free at 0x616f5760
  Aborted. Press any key to edit.

which is not very helpful, and is obviously a Grub bug.

However, booting the Fedora kernel worked fine, so I screatched my head for a while, and then realized that I had never touched the BIOS secure boot settings - and I don't sign my kernels with some silly vendor signature.

And sure enough, when I disable secure boot, Grub2 works fine.

So clearly Grub2 does not handle secure boot key failures very gracefully. I don't expect you to actually boot the kernel, but I would expect a useful error message, rather than a bug about double free's. Something like

  Not able to boot unsigned kernel in secure mode.
  Aborted. Press any key to edit.

..and hey, if this is all just the Fedora version of Grub2, you can ignore this bug report, of course.

Linus Torvalds <torvalds>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by phcoder (Posted a comment)
  • -email is unavailable- added by torvalds (Submitted the item)
  •  

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

     

    Follow 2 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2016-10-11 phcoder Priority5 - Normal 3 - Low
    2016-03-02 phcoder Planned ReleaseNone 2.03+

    Back to the top

    Powered by Savane 3.13-f8d8.
    Corresponding source code