issue trigger test

[jclab-joseph]

/review-bot https://github.com/jc-lab/shim-review-bot/tree/master/sample-repo

[github-actions[bot]]

Disclaimer: I am not a not an authorized reviewer. Automatic reproduction check bot (https://github.com/jc-lab/shim-review-bot). Job URL : https://github.com/jc-lab/shim-review-bot/actions/runs/6230368857 Used Dockerfile: Dockerfile

Vendor Certificate

Source: https://github.com/jc-lab/shim-review-bot/tree/master/sample-repo/vendor_cert.der

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

• Issuer : CN=Shim Test
• Subject : CN=Shim Test
• NotAfter : 2033-09-13 05:25:00 +0000 UTC
• [ ] KeyUsage/DigitalSignature : NO DigitalSignature in Key Usage!!!
• [X] ExtKeyUsage/CodeSigning : OK

SBAT

Source: https://github.com/jc-lab/shim-review-bot/tree/master/sample-repo/sbat.csv

sbat,1,SBAT Version,sbat,1,https://github.com/rhboot/shim/blob/main/SBAT.md
shim,3,UEFI shim,shim,1,https://github.com/rhboot/shim
shim.test,1,Test,shim,15.7,https://github.com/rhboot/shim

• [X] CSV Format Check : OK (Caution: Check only csv format, not sbatContent format)

EFI FILE: shimaa64.efi

• reproduced file: /work/output/aarch64/boot/efi/EFI/Test/shimaa64.efi
• prebuilt file: https://github.com/jc-lab/shim-review-bot/tree/master/sample-repo/shimaa64.efi
• [X] Reproduce: Same hash
• hash (sha256) : caf8970f6c7339c54cf5a620e1201957813924c38e9eb0d95b428f93d6b3b690
• [X] sbat : SAME
• [X] vendor_cert : SAME
• [ ] NX Compat: False
• [X] buggy gcc/binutils #533: Not affected

EFI FILE: shimia32.efi

• reproduced file: /work/output/ia32/boot/efi/EFI/Test/shimia32.efi
• prebuilt file: https://github.com/jc-lab/shim-review-bot/tree/master/sample-repo/shimia32.efi
• [X] Reproduce: Same hash
• hash (sha256) : d69051453a43ba628c0f64f24c17f7b255eea5ac2506c0a3111b1ed74ec6df82
• [X] sbat : SAME
• [X] vendor_cert : SAME
• [ ] NX Compat: False
• [X] buggy gcc/binutils #533: Not affected

EFI FILE: shimx64.efi

• reproduced file: /work/output/x86_64/boot/efi/EFI/Test/shimx64.efi
• prebuilt file: https://github.com/jc-lab/shim-review-bot/tree/master/sample-repo/shimx64.efi
• [X] Reproduce: Same hash
• hash (sha256) : 3395aa0bef931b014ad9f1fef95f662659dd9177443833843ffb35cea768c75d
• [X] sbat : SAME
• [X] vendor_cert : SAME
• [ ] NX Compat: False
• [X] buggy gcc/binutils #533: Not affected

FAILED

[jclab-joseph]

/review-bot https://github.com/jc-lab/shim-review-bot/tree/master/sample-repo

[github-actions[bot]]

Disclaimer: I am not a not an authorized reviewer. Automatic reproduction check bot (https://github.com/jc-lab/shim-review-bot). Job URL : https://github.com/jc-lab/shim-review-bot/actions/runs/6245790297 Used Dockerfile: Dockerfile

Vendor Certificate

Source: https://github.com/jc-lab/shim-review-bot/tree/master/sample-repo/vendor_cert.der

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

• Issuer : CN=Shim Test
• Subject : CN=Shim Test
• NotAfter : 2033-09-13 05:25:00 +0000 UTC
• [ ] KeyUsage/DigitalSignature : NO DigitalSignature in Key Usage!!!
• [X] ExtKeyUsage/CodeSigning : OK

SBAT LEVEL (in prebuilt efi file)

sbat,1,2022111500
shim,2
grub,3

SBAT

Source: https://github.com/jc-lab/shim-review-bot/tree/master/sample-repo/sbat.csv

sbat,1,SBAT Version,sbat,1,https://github.com/rhboot/shim/blob/main/SBAT.md
shim,3,UEFI shim,shim,1,https://github.com/rhboot/shim
shim.test,1,Test,shim,15.7,https://github.com/rhboot/shim

• [X] CSV Format Check : OK (Caution: Check only csv format, not sbatContent format)

EFI FILE: shimaa64.efi

• reproduced file: /work/output/aarch64/boot/efi/EFI/Test/shimaa64.efi
• prebuilt file: https://github.com/jc-lab/shim-review-bot/tree/master/sample-repo/shimaa64.efi
• [X] Reproduce: Same hash
• hash (sha256) : 8b02e6818a1f2ec36ae091f15ac5eac59ccb24855260a5b07bab49935acd60b4
• [X] sbat : SAME
• [X] vendor_cert : SAME
• [X] NX Compat: True
• [X] buggy gcc/binutils #533: Not affected

EFI FILE: shimia32.efi

• reproduced file: /work/output/ia32/boot/efi/EFI/Test/shimia32.efi
• prebuilt file: https://github.com/jc-lab/shim-review-bot/tree/master/sample-repo/shimia32.efi
• [X] Reproduce: Same hash
• hash (sha256) : 5b1540fdd3bc9969ce6f8064e1cbdd47b027b2f5e853695c1fcb38f4a57d8853
• [X] sbat : SAME
• [X] vendor_cert : SAME
• [X] NX Compat: True
• [X] buggy gcc/binutils #533: Not affected

EFI FILE: shimx64.efi

• reproduced file: /work/output/x86_64/boot/efi/EFI/Test/shimx64.efi
• prebuilt file: https://github.com/jc-lab/shim-review-bot/tree/master/sample-repo/shimx64.efi
• [X] Reproduce: Same hash
• hash (sha256) : 3ba0251b8dc35d544cff0259b3b289b91efa3215479bd1f289bb7c0ca1773d74
• [X] sbat : SAME
• [X] vendor_cert : SAME
• [X] NX Compat: True
• [X] buggy gcc/binutils #533: Not affected

Patch Files

:robot: Human, “Why patches are being applied?” Please check.

• 0001-Make-sbat_var.S-parse-right-with-buggy-gcc-binutils.patch
• 0002-Enable-the-NX-compatibility-flag-by-default.patch
• 0003-Don-t-loop-forever-in-load_certs-with-buggy-firmware.patch
• 0004-Add-validation-function-for-Microsoft-signing.patch

FAILED