linux-kernel - Re: 2.6.23-rc1: no setup signature found...

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <46A8E02D.8010609@zytor.com>
Date:	Thu, 26 Jul 2007 10:55:57 -0700
From:	"H. Peter Anvin" <hpa@...or.com>
To:	Xudong Guan <xudong.guan@...il.com>
CC:	Linux Kernel Mailing List <linux-kernel@...r.kernel.org>
Subject: Re: 2.6.23-rc1: no setup signature found...

Xudong Guan wrote:
> On 09:26(-0700) Thu 26 Jul, H. Peter Anvin wrote:
>> Xudong Guan wrote:
>>> On 09:11(-0700) Thu 26 Jul, H. Peter Anvin wrote:
>>>> Could you send me a copy of that Qemu image?
>>> I can only upload the 70M bz2 file 2 hours later, when I return home
>>> and have no upload restrictions. If you can not wait, you can try
>>> to download some old DSL ISO image and play with it in qemu to
>>> install it to a harddisk image yourself.
>>> Sorry I can not figure out which ISO version I used.
>>> http://www.damnsmalllinux.org/download.html
>>>
>> Waiting is fine; it's morning here.
> 
> I removed almost all the files in the file system and reduced the file to 9M.
> 
> http://www.ebanpo.com/roamingo/256M.raw.gz   9884879 bytes
> md5sum: 55b3b0836ca61695627a0d0e43293651
> 
> The Makefile that I used to play with it is also included below.
> 

Tracing through this with gdb, it appears that grub is trying to load
the correct number of sectors, but ends up with garbage in the latter
part of the setup code.  It is wrong before the kernel has executed even
a single instruction, so it's not the kernel's fault.

It is not random garbage, either, which implies that Grub is loading
from the wrong part of the disk -- specifically, the first 8K look
correct in memory, and anything beyond that is total garbage.

The protected-mode part of the kernel looks correct in memory, and it
starts at the right point, so it's not a matter of grub simply loading
the wrong number of sectors that the kernel could conceivably fix up.

I doubt the Grub people are interested in a bug report for a version
this ancient.  Looking through the Grub changelog, it looks to me that
this bug was fixed on 2002-07-12 "Rewrite the Linux booting support
radically", over five years ago; the first release which had that fix in
it was 0.93.

	-hpa
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/