[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#926596: fwupdate: arm64 version of PE/COFF efi binary is corrupt



Would you be able to check if this also affects fwupd?  The fwupdate binary was also merged into that project a while back and I would suspect it's affecting both.

-----Original Message-----
From: Ard Biesheuvel <ard.biesheuvel@linaro.org> 
Sent: Sunday, April 7, 2019 10:46 PM
To: Debian Bug Tracking System
Subject: Bug#926596: fwupdate: arm64 version of PE/COFF efi binary is corrupt


[EXTERNAL EMAIL] 

Package: fwupdate
Version: 12-4
Severity: important

Dear Maintainer,

Version 12-4 of fwupdate is broken for arm64. The included binary fwupaa64.efi is corrupt, resulting in EFI_LOAD_ERROR to be returned by the firmware when trying to invoke it.

The binary layout looks like this:

Detected 'AArch64' type PE/COFF image consisting of 2 sections Section alignment: 0x1000 File alignment: 0x200 Image size: 0xd890 Section '.text' @ 0x00001000 File offset: 0x1000 Virtual size: 0xac20 Raw size: 0xac20 Section '.data' @ 0x0000bc20 File offset: 0xbc20 Virtual size: 0x1d70 Raw size: 0x1d70

Note that file offset + size of section #2 exceeds the total image size. But the file offset of that section is not even a multiple of the file alignment, so the whole image seems pretty broken.



-- System Information:
Debian Release: 9.8
  APT prefers stable
  APT policy: (990, 'stable'), (500, 'stable-updates'), (500, 'testing')
Architecture: arm64 (aarch64)

Kernel: Linux 5.1.0-rc2+ (SMP w/24 CPU cores; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages fwupdate depends on:
ii  e2fsprogs    1.43.4-2
ii  efibootmgr   14-2
ii  libc6        2.28-8
ii  libefiboot1  37-2
ii  libefivar1   37-2
ii  libfwup1     12-4
ii  libpopt0     1.16-10+b2

Versions of packages fwupdate recommends:
ii  fwupdate-arm64-signed [fwupdate-signed]  12+4

fwupdate suggests no packages.

-- no debconf information


Reply to: