Hi,
kexec_file_load failed recently with a Fedora kernel 5.7.10-200.fc32.x86_64:
# kexec -s -l /boot/cffa62f902ee423bafa9f42e6ab99f3c/5.7.10-200.fc32.x86_64/linux
kexec_file_load failed: Accessing a corrupted shared library
kernel give below debug output:
[101114.084765] PEFILE: checksum @ da
[101114.084768] PEFILE: header size = 200
[101114.084770] PEFILE: cert = 1290 @a4e440 [46 09 00 00 00 02 02 00 30 82 09 3a 06 09 2a
86 48 86 f7 0d 01 07 02 a0 82 09 2b 30 82 09 27 02 01 01 31 0f 30 0d 06 09 60 86 48 01 65
03 04 02 01 05 00 30 5c 06 0a 2b 06 01 04 01 82 37 02 01]
[101114.084773] PEFILE: sig wrapper = { 946, 200, 2 }
[101114.084775] PEFILE: Signature wrapper len wrong
[101114.084777] kexec_file: kernel signature verification failed (-80).
It seems here:
static int pefile_strip_sig_wrapper(const void *pebuf,
struct pefile_context *ctx)
{
...
if (round_up(wrapper.length, 8) != ctx->sig_len) {
pr_debug("Signature wrapper len wrong\n");
return -ELIBBAD;
}
...
I also cced Lenny see if he has idea.
Thanks
Dave
Show replies by date