Bug 45991 - Loading efivars on non-native EFI architecture triggers NULL deref
Summary: Loading efivars on non-native EFI architecture triggers NULL deref
Status: RESOLVED CODE_FIX
Alias: None
Product: Drivers
Classification: Unclassified
Component: Platform_x86 (show other bugs)
Hardware: IA-32 Linux
: P1 normal
Assignee: drivers_platform_x86@kernel-bugs.osdl.org
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2012-08-15 00:44 UTC by Maxim Kammerer
Modified: 2012-11-05 23:09 UTC (History)
6 users (show)

See Also:
Kernel Version: 3.4.7
Subsystem:
Regression: No
Bisected commit-id:

Attachments
NULL deref trace (2.41 KB, text/plain)
2012-08-15 00:45 UTC, Maxim Kammerer 		Details
Add an attachment (proposed patch, testcase, etc.)

Description Maxim Kammerer 2012-08-15 00:44:09 UTC 
In drivers/firmware/efivars.c, efivars_init() initializes "ops" struct from global "efi" struct, and then, e.g., calls ops->get_next_variable() in register_efivars().

If architecture is non-native (32-bit kernel on 64-bit EFI, or reverse), arch/x86/platform/efi/efi.c skips initialization of "efi" struct:

    if (!efi_native)
        goto out;

    (http://git.kernel.org/?p=linux/kernel/git/torvalds/linux.git;a=commitdiff;h=1adbfa3511ee1c1118e16a9a0246870f12fef4e6)

which causes a NULL deref when efivars is loaded.

The issue is still resent in current git tree, as far as I can see.
Comment 1 Maxim Kammerer 2012-08-15 00:45:15 UTC 
Created attachment 77741 [details]
NULL deref trace
Comment 2 Olof Johansson 2012-08-19 22:08:03 UTC 
Patch: https://lkml.org/lkml/2012/8/19/177
Comment 3 PaX Team 2012-08-20 07:03:25 UTC 
Hi Olof,

thanks for the fix but shouldn't there be a reference to the bug/reporter in the commit message as well?
Comment 4 Matt Fleming 2012-11-01 09:01:06 UTC 
This is now fixed in upstream in Linus' tree and in the 3.4 and 3.6 stable releases.

Thanks everyone.
Comment 5 Matt Fleming 2012-11-01 09:17:37 UTC 
Sorry, I should have noted the versions containing this fix are v3.7-rc3 (Linus' tree), and versions v3.4.17 and v3.6.5 of the stable trees.
Comment 6 Florian Mickler 2012-11-05 23:09:41 UTC 
A patch referencing this bug report has been merged in Linux v3.7-rc3:

commit 5189c2a7c7769ee9d037d76c1a7b8550ccf3481c
Author: Olof Johansson <olof@lixom.net>
Date:   Wed Oct 24 10:00:44 2012 -0700

    x86: efi: Turn off efi_enabled after setup on mixed fw/kernel
Note You need to log in before you can comment on or make changes to this bug.