Hi,
kexec_file_load failed recently with a Fedora kernel 5.7.10-200.fc32.x86_64:
# kexec -s -l
/boot/cffa62f902ee423bafa9f42e6ab99f3c/5.7.10-200.fc32.x86_64/linux
kexec_file_load failed: Accessing a corrupted shared library
kernel give below debug output:
[101114.084765] PEFILE: checksum @ da
[101114.084768] PEFILE: header size = 200
[101114.084770] PEFILE: cert = 1290 @a4e440 [46 09 00 00 00 02 02 00 30 82 09
3a 06 09 2a 86 48 86 f7 0d 01 07 02 a0 82 09 2b 30 82 09 27 02 01 01 31 0f 30
0d 06 09 60 86 48 01 65 03 04 02 01 05 00 30 5c 06 0a 2b 06 01 04 01 82 37 02
01]
[101114.084773] PEFILE: sig wrapper = { 946, 200, 2 }
[101114.084775] PEFILE: Signature wrapper len wrong
[101114.084777] kexec_file: kernel signature verification failed (-80).
It seems here:
static int pefile_strip_sig_wrapper(const void *pebuf,
struct pefile_context *ctx)
{
...
if (round_up(wrapper.length, 8) != ctx->sig_len) {
pr_debug("Signature wrapper len wrong\n");
return -ELIBBAD;
}
...
I also cced Lenny see if he has idea.
Thanks
Dave
_______________________________________________
kernel mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/[email protected]