[Bug 1574372] Re: sbsign crashes randomly
** Attachment removed: "pestudio_ZzHyi19A3x.png" https://bugs.launchpad.net/ubuntu/+source/sbsigntool/+bug/1574372/+attachment/5517653/+files/pestudio_ZzHyi19A3x.png -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1574372 Title: sbsign crashes randomly To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/sbsigntool/+bug/1574372/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1574372] Re: sbsign crashes randomly
Hi. I've tried to sign my efi unified kernel stub and uefi didn't load it saying 'signature verification failed'. I've signed the image with a different tool (osslsigncode) and it works now. It seems to be a bug in sbsign. Also, verification using sbverify doesn't work for the properly signed image which can be loaded by uefi. The difference is in hashes the utilities calculate for such files (the screenshot is attached). To reproduce the issue, you can take any manually created unified kernel image (tutorial I used to create it: https://wiki.archlinux.org/title/Systemd- boot#Preparing_a_unified_kernel_image) and try signing it with both tools. Maybe the problem is because there are some gaps in the image between sections since it's been created like this: $ objcopy \ --add-section .osrel="/usr/lib/os-release" --change-section-vma .osrel=0x2 \ --add-section .cmdline="/etc/kernel/cmdline" --change-section-vma .cmdline=0x3 \ --add-section .splash="/usr/share/systemd/bootctl/splash-arch.bmp" --change-section-vma .splash=0x4 \ --add-section .linux="vmlinuz-file" --change-section-vma .linux=0x200 \ --add-section .initrd="initrd-file" --change-section-vma .initrd=0x300 \ "/usr/lib/systemd/boot/efi/linuxx64.efi.stub" "linux.efi" However, anyway, the tool should work properly for any file... Regards, Anatoliy ** Attachment added: "pestudio_ZzHyi19A3x.png" https://bugs.launchpad.net/ubuntu/+source/sbsigntool/+bug/1574372/+attachment/5517653/+files/pestudio_ZzHyi19A3x.png -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1574372 Title: sbsign crashes randomly To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/sbsigntool/+bug/1574372/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1574372] Re: sbsign crashes randomly
Sorry, I didn't pay attention to the bug description. I will create another bug. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1574372 Title: sbsign crashes randomly To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/sbsigntool/+bug/1574372/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1574372] Re: sbsign crashes randomly
** Changed in: sbsigntool (Ubuntu) Status: Confirmed => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1574372 Title: sbsign crashes randomly To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/sbsigntool/+bug/1574372/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1574372] Re: sbsign crashes randomly
This problem seems to have disappeared with sbsigntool version 0.6-0ubuntu10.1. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1574372 Title: sbsign crashes randomly To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/sbsigntool/+bug/1574372/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1574372] Re: sbsign crashes randomly
To reproduce with the above test files, run: sbsign --key pvkey --cert db.crt --output testoutput.efi securegrubx64.efi If it works, just run it again until it doesn't. Again note that the EFI I posted is NOT signed, yet sometimes the tool incorrectly warns that it is, and then segfaults. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1574372 Title: sbsign crashes randomly To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/sbsigntool/+bug/1574372/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1574372] Re: sbsign crashes randomly
** Attachment added: "Private key (just for testing)" https://bugs.launchpad.net/ubuntu/+source/sbsigntool/+bug/1574372/+attachment/4658210/+files/pvkey -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1574372 Title: sbsign crashes randomly To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/sbsigntool/+bug/1574372/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1574372] Re: sbsign crashes randomly
I am also having this problem on Ubuntu 16.04. I was not having this problem in 15.10 so maybe it's a regression. I'm attaching a test case that fails for me on Ubuntu 16.04 with sbsigntool 0.6-0ubuntu10, libssl1.0.0 1.0.2g-1ubuntu4.1. It's truly random because successive invocations of sbsign with identical parameters may or may not crash. Obviously some undefined behavior. If it fails, I get this error: warning: overwriting existing signature Segmentation fault (core dumped) The warning is in error, because there is NOT an existing signature. This random misidentification is probably part of the problem. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1574372 Title: sbsign crashes randomly To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/sbsigntool/+bug/1574372/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1574372] Re: sbsign crashes randomly
** Attachment added: "db.crt" https://bugs.launchpad.net/ubuntu/+source/sbsigntool/+bug/1574372/+attachment/4658202/+files/db.crt -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1574372 Title: sbsign crashes randomly To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/sbsigntool/+bug/1574372/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1574372] Re: sbsign crashes randomly
** Attachment added: "GRUB image for signing" https://bugs.launchpad.net/ubuntu/+source/sbsigntool/+bug/1574372/+attachment/4658217/+files/securegrubx64.efi -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1574372 Title: sbsign crashes randomly To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/sbsigntool/+bug/1574372/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1574372] Re: sbsign crashes randomly
Can confirm same problem. Happy to upload crash dump as well if it'll help, but don't know how to gain permission from root -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1574372 Title: sbsign crashes randomly To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/sbsigntool/+bug/1574372/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1574372] Re: sbsign crashes randomly
Status changed to 'Confirmed' because the bug affects multiple users. ** Changed in: sbsigntool (Ubuntu) Status: New => Confirmed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1574372 Title: sbsign crashes randomly To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/sbsigntool/+bug/1574372/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1574372] Re: sbsign crashes randomly
** Attachment added: "Automated crash dump" https://bugs.launchpad.net/ubuntu/+source/sbsigntool/+bug/1574372/+attachment/4645831/+files/_usr_bin_sbsign.0.crash -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1574372 Title: sbsign crashes randomly To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/sbsigntool/+bug/1574372/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1574372] Re: sbsign crashes randomly
s/it did not occur with Ubuntu 16.04/it did not occur with Ubuntu 14.04/ Sorry for the typo. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1574372 Title: sbsign crashes randomly To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/sbsigntool/+bug/1574372/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
