linux-kernel - Re: efi boot failures due to PTI with 32 bit builds and Intel CPUs

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:   Thu, 30 Aug 2018 03:11:26 -0700
From:   Guenter Roeck <linux@...ck-us.net>
To:     Joerg Roedel <jroedel@...e.de>
Cc:     linux-kernel@...r.kernel.org, Thomas Gleixner <tglx@...utronix.de>,
        Michal Hocko <mhocko@...e.com>,
        Andi Kleen <ak@...ux.intel.com>,
        Linus Torvalds <torvalds@...ux-foundation.org>, x86@...nel.org,
        Dave Hansen <dave.hansen@...el.com>,
        Pavel Machek <pavel@....cz>
Subject: Re: efi boot failures due to PTI with 32 bit builds and Intel CPUs

On 08/30/2018 12:19 AM, Joerg Roedel wrote:
> Hey Guenter,
> 
> On Wed, Aug 29, 2018 at 01:16:59PM -0700, Guenter Roeck wrote:
>> I see boot failures on mainline when trying to boot x86 images with an efi
>> bios on Intel CPUs in qemu. Behavior is quite unusual: qemu dies silently
>> after the kernel displays "Run /sbin/init as init process". With debugging
>> enabled, qemu reports a CR3 update followed by a triple fault.
>> Here is the end of the log file:
>>
>> ----------------
>> IN:
>> 0xc75f1d1a:  66 90                    nop
>> 0xc75f1d1c:  0f 20 d8                 movl     %cr3, %eax
>> 0xc75f1d1f:  0d 00 10 00 00           orl      $0x1000, %eax
>> 0xc75f1d24:  0f 22 d8                 movl     %eax, %cr3
>>
>> CR3 update: CR3=0e39b000
> 
> Thanks for the bug report, from a quick glance it looks like the kernel
> is switching to an empty page-table. But I need to debug that further.
> 
>> qemu-system-i386 -kernel arch/x86/boot/bzImage -M q35 -cpu core2duo \
>> 	-no-reboot -m 256 \
>> 	-bios OVMF-pure-efi-32.fd \
>> 	-usb -device usb-storage,drive=d0 \
>> 	-drive file=rootfs.ext2,if=none,id=d0,format=raw \
>> 	--append 'root=/dev/sda rw rootwait mem=256M console=ttyS0 console=tty noreboot' \
>> 	-nographic
> 
> Can you please provide the exact OVMF-pure-efi-32.fd image and the
> .config of the kernel?
> 

OVMF image:

https://github.com/groeck/linux-build-test/blob/master/rootfs/firmware/OVMF-pure-efi-32.fd

root file system:

https://github.com/groeck/linux-build-test/blob/master/rootfs/x86/rootfs.ext2

Configuration is attached.

Guenter

View attachment "defconfig" of type "text/plain" (6871 bytes)