other repository tests

[jclab-joseph]

/review-bot https://github.com/zeronsoftn/shim-review/tree/zeronsoftn-shim-x86_64_ia32_aarch64-20230915

[github-actions[bot]]

Disclaimer: I am not a not an authorized reviewer. Automatic reproduction check bot (https://github.com/jc-lab/shim-review-bot). Job URL : https://github.com/jc-lab/shim-review-bot/actions/runs/6245794121 Used Dockerfile: Dockerfile

Vendor Certificate

Source: https://github.com/zeronsoftn/shim-review/tree/zeronsoftn-shim-x86_64_ia32_aarch64-20230915/vendor_cert.der

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

• Issuer : CN=ZeronsoftN CA,O=ZeronsoftN,C=KR
• Subject : CN=ZeronsoftN Secure Boot Signing (2022),OU=Secure Boot,O=ZeronsoftN,C=KR
• NotAfter : 2029-06-25 04:35:17 +0000 UTC
• [X] KeyUsage/DigitalSignature : OK
• [X] ExtKeyUsage/CodeSigning : OK

SBAT LEVEL (in prebuilt efi file)

sbat,1,2022111500
shim,2
grub,3

SBAT

Source: https://github.com/zeronsoftn/shim-review/tree/zeronsoftn-shim-x86_64_ia32_aarch64-20230915/sbat.csv

sbat,1,SBAT Version,sbat,1,https://github.com/rhboot/shim/blob/main/SBAT.md
shim,3,UEFI shim,shim,1,https://github.com/rhboot/shim
shim.zeronsoftn,2,ZeronsoftN,shim,15.7-0zeron2,https://github.com/zeronsoftn/shim-release

• [X] CSV Format Check : OK (Caution: Check only csv format, not sbatContent format)

EFI FILE: shimaa64.efi

• reproduced file: /work/output/aarch64/boot/efi/EFI/ZeronsoftN/shimaa64.efi
• prebuilt file: https://github.com/zeronsoftn/shim-review/tree/zeronsoftn-shim-x86_64_ia32_aarch64-20230915/review/shimaa64.efi
• [X] Reproduce: Same hash
• hash (sha256) : 8b1acf748a7390afcc8084fb5c6b2561eae8074cc4885db0c3c7f9666c5962a2
• [X] sbat : SAME
• [X] vendor_cert : SAME
• [X] NX Compat: True
• [X] buggy gcc/binutils #533: Not affected

EFI FILE: shimia32.efi

• reproduced file: /work/output/ia32/boot/efi/EFI/ZeronsoftN/shimia32.efi
• prebuilt file: https://github.com/zeronsoftn/shim-review/tree/zeronsoftn-shim-x86_64_ia32_aarch64-20230915/review/shimia32.efi
• [X] Reproduce: Same hash
• hash (sha256) : a340c4acba8e5b0b0a6502790ade67289624dca8dd6b165401e08b3da8c47137
• [X] sbat : SAME
• [X] vendor_cert : SAME
• [X] NX Compat: True
• [X] buggy gcc/binutils #533: Not affected

EFI FILE: shimx64.efi

• reproduced file: /work/output/x86_64/boot/efi/EFI/ZeronsoftN/shimx64.efi
• prebuilt file: https://github.com/zeronsoftn/shim-review/tree/zeronsoftn-shim-x86_64_ia32_aarch64-20230915/review/shimx64.efi
• [X] Reproduce: Same hash
• hash (sha256) : c8300ef317ff4bdfe2ca223690062a43ccd350cad4ee65abb3d71349a5d32f63
• [X] sbat : SAME
• [X] vendor_cert : SAME
• [X] NX Compat: True
• [X] buggy gcc/binutils #533: Not affected

Patch Files

:robot: Human, “Why patches are being applied?” Please check.

• 0001-Make-sbat_var.S-parse-right-with-buggy-gcc-binutils.patch
• 0002-Enable-the-NX-compatibility-flag-by-default.patch
• 0003-Don-t-loop-forever-in-load_certs-with-buggy-firmware.patch
• 0004-Add-validation-function-for-Microsoft-signing.patch

SUCCESS

[jclab-joseph]

/review-bot https://github.com/zeronsoftn/shim-review/tree/zerox-shim-x86_64_ia32_aarch64-20230925

[github-actions[bot]]

Disclaimer: I am not a not an authorized reviewer. Automatic reproduction check bot (https://github.com/jc-lab/shim-review-bot). Job URL : https://github.com/jc-lab/shim-review-bot/actions/runs/6297143676 Used Dockerfile: Dockerfile

Vendor Certificate

Source: https://github.com/zeronsoftn/shim-review/tree/zerox-shim-x86_64_ia32_aarch64-20230925/vendor_cert.der

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

• Issuer : CN=ZeronsoftN CA,O=ZeronsoftN,C=KR
• Subject : CN=ZeronsoftN Secure Boot Signing (2022),OU=Secure Boot,O=ZeronsoftN,C=KR
• NotAfter : 2029-06-25 04:35:17 +0000 UTC
• [X] KeyUsage/DigitalSignature : OK
• [X] ExtKeyUsage/CodeSigning : OK

SBAT LEVEL (in prebuilt efi file)

sbat,1,2022111500
shim,2
grub,3

SBAT

Source: https://github.com/zeronsoftn/shim-review/tree/zerox-shim-x86_64_ia32_aarch64-20230925/sbat.csv

sbat,1,SBAT Version,sbat,1,https://github.com/rhboot/shim/blob/main/SBAT.md
shim,3,UEFI shim,shim,1,https://github.com/rhboot/shim
shim.zeronsoftn,2,ZeronsoftN,shim,15.7-0zeron2,https://github.com/zeronsoftn/shim-release

• [X] CSV Format Check : OK (Caution: Check only csv format, not sbatContent format)

EFI FILE: shimaa64.efi

• reproduced file: /work/output/aarch64/boot/efi/EFI/ZeronsoftN/shimaa64.efi
• prebuilt file: https://github.com/zeronsoftn/shim-review/tree/zerox-shim-x86_64_ia32_aarch64-20230925/review/shimaa64.efi
• [X] Reproduce: Same hash
• hash (sha256) : f3366e185ee06249cde1c95b04fa734d987cc16606843dd99f8d9b2cf1a4fe5b
• [X] sbat : SAME
• [X] vendor_cert : SAME
• [X] NX Compat: True
• [X] buggy gcc/binutils #533: Not affected

EFI FILE: shimia32.efi

• reproduced file: /work/output/ia32/boot/efi/EFI/ZeronsoftN/shimia32.efi
• prebuilt file: https://github.com/zeronsoftn/shim-review/tree/zerox-shim-x86_64_ia32_aarch64-20230925/review/shimia32.efi
• [X] Reproduce: Same hash
• hash (sha256) : f43610923d846658e1b74e1df8d9c9f1f1295c6a5a0f9d4cb3ae2485c6bbb8a1
• [X] sbat : SAME
• [X] vendor_cert : SAME
• [X] NX Compat: True
• [X] buggy gcc/binutils #533: Not affected

EFI FILE: shimx64.efi

• reproduced file: /work/output/x86_64/boot/efi/EFI/ZeronsoftN/shimx64.efi
• prebuilt file: https://github.com/zeronsoftn/shim-review/tree/zerox-shim-x86_64_ia32_aarch64-20230925/review/shimx64.efi
• [X] Reproduce: Same hash
• hash (sha256) : 8399c9109d658ec81461bd8c68bc1fa9103ca05b261e0b273feb843b55e76fd4
• [X] sbat : SAME
• [X] vendor_cert : SAME
• [X] NX Compat: True
• [X] buggy gcc/binutils #533: Not affected

Patch Files

:robot: Human, “Why patches are being applied?” Please check.

• 0001-Make-sbat_var.S-parse-right-with-buggy-gcc-binutils.patch
• 0002-Enable-the-NX-compatibility-flag-by-default.patch
• 0003-Don-t-loop-forever-in-load_certs-with-buggy-firmware.patch
• 0004-Add-validation-function-for-Microsoft-signing.patch
• 0005-feat-zerox-shim.patch

SUCCESS

[THS-on]

/review-bot https://github.com/MuthuvelKuppusamy/shim-review/tree/microfocus-shim-x64-ia32-20230224

[github-actions[bot]]

Disclaimer: I am not a not an authorized reviewer. Automatic reproduction check bot (https://github.com/jc-lab/shim-review-bot). Job URL : https://github.com/jc-lab/shim-review-bot/actions/runs/6308785423 Used Dockerfile: Dockerfile

REVIEW ERROR

open vendor_cert.der: no such file or directory

FAILED

[jclab-joseph]

@THS-on Hi!

To use Bot, you need the following content in your Dockerfile.

# REVIEW
RUN echo "::review hash-start" && \
    for name in $(find /work/output/ -type f -name "shim*.efi"); do sha256sum $name; done && \
    echo "::review hash-end"

And trigger again as shown below.

/review-bot https://github.com/MuthuvelKuppusamy/shim-review/tree/microfocus-shim-x64-ia32-20230224

sbat: sbat.mfzenworks.csv
vendor-cert: microfocus_zenworks_secureboot1.cer

[github-actions[bot]]

Disclaimer: I am not a not an authorized reviewer. Automatic reproduction check bot (https://github.com/jc-lab/shim-review-bot). Job URL : https://github.com/jc-lab/shim-review-bot/actions/runs/6308813541 Used Dockerfile: Dockerfile

Vendor Certificate

Source: https://github.com/MuthuvelKuppusamy/shim-review/tree/microfocus-shim-x64-ia32-20230224/microfocus_zenworks_secureboot1.cer

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

• Issuer : CN=Micro Focus
• Subject : CN=Micro Focus
• NotAfter : 2031-04-12 00:13:05 +0000 UTC
• [ ] KeyUsage/DigitalSignature : NO DigitalSignature in Key Usage!!!
• [ ] ExtKeyUsage/CodeSigning : NO DigitalSignature in Key Usage!!!

SBAT LEVEL (in prebuilt efi file)

SBAT

Source: https://github.com/MuthuvelKuppusamy/shim-review/tree/microfocus-shim-x64-ia32-20230224/sbat.mfzenworks.csv

sbat,1,SBAT Version,sbat,1,https://github.com/rhboot/shim/blob/main/SBAT.md
shim,3,UEFI shim,shim,1,https://github.com/rhboot/shim
shim.MFZENworks,3,MicroFocus,shim,15.7,https://www.microfocus.com/

• [X] CSV Format Check : OK (Caution: Check only csv format, not sbatContent format)

Not Built EFI File:

• [ ] It is prebuilt, but not built as a Dockerfile.
• hash : b80b3505ed0d9802b781e668989b2d41fbf7d9fffb5f5364350f93dbfb179585

Not Built EFI File:

• [ ] It is prebuilt, but not built as a Dockerfile.
• hash : 25c77ed8bdd494f080cfa8583298cb1a638c6f34c1734c47f4b0bb036bd4416a

Patch Files

:robot: Human, “Why patches are being applied?” Please check.

• 1_Enable_the_NX_compatibility_flag_by_default.patch
• 2_Add_validation_function_for_Microsoft_signing.patch
• 3_Make-sbat_var.S-parse-right-with-buggy-gcc-binutils.patch
• 4_prefer_proxyOfferReceived.patch

FAILED

[THS-on]

@jclab-joseph thanks! This is not my Shim, so I cannot change the Dockerfile. The other information are still very useful.

[jclab-joseph]

/review-bot https://github.com/MuthuvelKuppusamy/shim-review/tree/microfocus-shim-x64-ia32-20230224

sbat: sbat.mfzenworks.csv
vendor-cert: microfocus_zenworks_secureboot1.cer

[github-actions[bot]]

Disclaimer: I am not a not an authorized reviewer. Automatic reproduction check bot (https://github.com/jc-lab/shim-review-bot). Job URL : https://github.com/jc-lab/shim-review-bot/actions/runs/6310625047 Used Dockerfile: Dockerfile

Vendor Certificate

Source: https://github.com/MuthuvelKuppusamy/shim-review/tree/microfocus-shim-x64-ia32-20230224/microfocus_zenworks_secureboot1.cer

-----BEGIN CERTIFICATE-----
MIIDAjCCAeqgAwIBAgIJAPzcDa/Sz8O8MA0GCSqGSIb3DQEBCwUAMBYxFDASBgNV
BAMMC01pY3JvIEZvY3VzMB4XDTIxMDQxNDAwMTMwNVoXDTMxMDQxMjAwMTMwNVow
FjEUMBIGA1UEAwwLTWljcm8gRm9jdXMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQDTB0D3rjbrOzr8ZcdCPud1xp2lJuS+y2itqWpcoZWoSCcvuQcEW0Ns
X5/Ct2kvqfM5G+SX4HMcBF2OSXRwo2nu8laaJqvDcTgZXhwr0oBMlMdQ0lt/vNrF
k+hDHP6yghrlxh4xcV3gil+kKkDAV10KBOFsCQExz+TYuVw0Rt9sIOq8HWhyrrSB
ZjRun+o0iidiOzRWVudZijPiIq8OaI2rsLnrSMPu3TG2QoYVYDW8gn8Wt7FkorsK
SLdtM1KuuIRFMfywf8WVa7SwK+Hi8TX9GBVeoa436dM0zbQISvapY7NUOZlHZU1f
sUe1b5bYtUfL6r/rWTfdX+/8EnvkMUBtAgMBAAGjUzBRMB0GA1UdDgQWBBRMGsT2
cb/wbJ7soi0As1sFRGcgdjAfBgNVHSMEGDAWgBRMGsT2cb/wbJ7soi0As1sFRGcg
djAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQDMawHJNPPuyoTZ
xzmNloBzDqpSUh0q26k3FSs4wTWQZDPzWwPTIpJXcoFaFAZCF0ygRyprCNNbo9/A
9mCeAyq879sqqtBVeqT1V/exg+sLxs+pmN05q0llrS4rBYDPSIOu+sZHaq20hdNg
THRm2flIPhJhIHWEO7ohJh4wUuGNUqj/0vLVl/r3Cc92gsBlp6PY6zFzwXziu/mY
zK121MohZi91CrOdSLUqQiZUQXOdgWLUaDpw70Wvl+zdCh6u0vAooAGJbfhLwVWd
yUDhIYJvYmy7Lrn+9o4nWUB79Kp1gAzj8pH/DDyeHpsO/Tz1gZsvAXeZWBeg7qqu
zG3meBuq
-----END CERTIFICATE-----

• Issuer : CN=Micro Focus
• Subject : CN=Micro Focus
• NotAfter : 2031-04-12 00:13:05 +0000 UTC
• [ ] KeyUsage/DigitalSignature : NO DigitalSignature in Key Usage!!!
• [ ] ExtKeyUsage/CodeSigning : NO DigitalSignature in Key Usage!!!

SBAT LEVEL (in prebuilt efi file)

sbat,1,2022111500
shim,2
grub,3

SBAT

Source: https://github.com/MuthuvelKuppusamy/shim-review/tree/microfocus-shim-x64-ia32-20230224/sbat.mfzenworks.csv

sbat,1,SBAT Version,sbat,1,https://github.com/rhboot/shim/blob/main/SBAT.md
shim,3,UEFI shim,shim,1,https://github.com/rhboot/shim
shim.MFZENworks,3,MicroFocus,shim,15.7,https://www.microfocus.com/

• [X] CSV Format Check : OK (Caution: Check only csv format, not sbatContent format)

EFI FILE: shimia32.efi

• reproduced file: shimia32/shimia32.efi
• computed hash (sha256) : b80b3505ed0d9802b781e668989b2d41fbf7d9fffb5f5364350f93dbfb179585
• prebuilt file: https://github.com/MuthuvelKuppusamy/shim-review/tree/microfocus-shim-x64-ia32-20230224/shimia32.efi
• [X] Reproduce: Same hash
• [X] sbat : SAME
• [X] vendor_cert : SAME
• [X] NX Compat: True
• [X] buggy gcc/binutils #533: Not affected

EFI FILE: shimx64.efi

• reproduced file: shimx64/shimx64.efi
• computed hash (sha256) : 25c77ed8bdd494f080cfa8583298cb1a638c6f34c1734c47f4b0bb036bd4416a
• prebuilt file: https://github.com/MuthuvelKuppusamy/shim-review/tree/microfocus-shim-x64-ia32-20230224/shimx64.efi
• [X] Reproduce: Same hash
• [X] sbat : SAME
• [X] vendor_cert : SAME
• [X] NX Compat: True
• [X] buggy gcc/binutils #533: Not affected

Patch Files

:robot: Human, “Why patches are being applied?” Please check.

• 1_Enable_the_NX_compatibility_flag_by_default.patch
• 2_Add_validation_function_for_Microsoft_signing.patch
• 3_Make-sbat_var.S-parse-right-with-buggy-gcc-binutils.patch
• 4_prefer_proxyOfferReceived.patch

FAILED

[jclab-joseph]

@THS-on Now you can do it without modifying Dockerfile. :) https://github.com/jc-lab/shim-review-bot/issues/3#issuecomment-1735152415

[joseph-zeronsoftn]

/review-bot https://github.com/zeronsoftn/shim-review/tree/zeronsoftn-shim-x86_64_ia32_aarch64-20231017

[github-actions[bot]]

Disclaimer: I am not a not an authorized reviewer. Automatic reproduction check bot (https://github.com/jc-lab/shim-review-bot). Job URL : https://github.com/jc-lab/shim-review-bot/actions/runs/6541315168 Used Dockerfile: Dockerfile

Vendor Certificate

Source: https://github.com/zeronsoftn/shim-review/tree/zeronsoftn-shim-x86_64_ia32_aarch64-20231017/vendor_cert.der

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

• Issuer : CN=ZeronsoftN CA,O=ZeronsoftN,C=KR
• Subject : CN=ZeronsoftN Secure Boot Signing (2022),OU=Secure Boot,O=ZeronsoftN,C=KR
• NotAfter : 2029-06-25 04:35:17 +0000 UTC
• [X] KeyUsage/DigitalSignature : OK
• [X] ExtKeyUsage/CodeSigning : OK

SBAT LEVEL (in prebuilt efi file)

sbat,1,2022111500
shim,2
grub,3

SBAT

Source: https://github.com/zeronsoftn/shim-review/tree/zeronsoftn-shim-x86_64_ia32_aarch64-20231017/sbat.csv

sbat,1,SBAT Version,sbat,1,https://github.com/rhboot/shim/blob/main/SBAT.md
shim,3,UEFI shim,shim,1,https://github.com/rhboot/shim
shim.zeronsoftn,1,ZeronsoftN,shim,15.7-0zeron2,https://github.com/zeronsoftn/shim-release

• [X] CSV Format Check : OK (Caution: Check only csv format, not .sbat format)

EFI FILE: shimaa64.efi

• reproduced file: /work/output/aarch64/boot/efi/EFI/ZeronsoftN/shimaa64.efi
• computed hash (sha256) : 4f7684174ad593b76284ddde3f947064a3ef602dd6b5f47047ff10a51774fbec
• prebuilt file: https://github.com/zeronsoftn/shim-review/tree/zeronsoftn-shim-x86_64_ia32_aarch64-20231017/review/shimaa64.efi
• [X] Reproduce: Same hash
• hash (sha256) : 4f7684174ad593b76284ddde3f947064a3ef602dd6b5f47047ff10a51774fbec
• [X] sbat : SAME
• [X] vendor_cert : SAME
• [X] NX Compat: True
• [X] buggy gcc/binutils #533: Not affected

EFI FILE: shimia32.efi

• reproduced file: /work/output/ia32/boot/efi/EFI/ZeronsoftN/shimia32.efi
• computed hash (sha256) : 7797d060d0869d5976eb91a21ab3341bd7a30e1f2c945f5be74a2720470bcc0e
• prebuilt file: https://github.com/zeronsoftn/shim-review/tree/zeronsoftn-shim-x86_64_ia32_aarch64-20231017/review/shimia32.efi
• [X] Reproduce: Same hash
• hash (sha256) : 7797d060d0869d5976eb91a21ab3341bd7a30e1f2c945f5be74a2720470bcc0e
• [X] sbat : SAME
• [X] vendor_cert : SAME
• [X] NX Compat: True
• [X] buggy gcc/binutils #533: Not affected

EFI FILE: shimx64.efi

• reproduced file: /work/output/x86_64/boot/efi/EFI/ZeronsoftN/shimx64.efi
• computed hash (sha256) : bd455c5c85a0b6063cbd84015f097f63a8a0c8d199e5b9166406b622947be420
• prebuilt file: https://github.com/zeronsoftn/shim-review/tree/zeronsoftn-shim-x86_64_ia32_aarch64-20231017/review/shimx64.efi
• [X] Reproduce: Same hash
• hash (sha256) : bd455c5c85a0b6063cbd84015f097f63a8a0c8d199e5b9166406b622947be420
• [X] sbat : SAME
• [X] vendor_cert : SAME
• [X] NX Compat: True
• [X] buggy gcc/binutils #533: Not affected

Patch Files

:robot: Human, “Why patches are being applied?” Please check.

• 0001-Make-sbat_var.S-parse-right-with-buggy-gcc-binutils.patch
• 0002-Enable-the-NX-compatibility-flag-by-default.patch
• 0003-Don-t-loop-forever-in-load_certs-with-buggy-firmware.patch
• 0004-Add-validation-function-for-Microsoft-signing.patch
• linux-6.1.43.patch

SUCCESS

[joseph-zeronsoftn]

/review-bot https://github.com/zeronsoftn/shim-review/tree/zerox-shim-x86_64_ia32_aarch64-20231017

[github-actions[bot]]

Disclaimer: I am not a not an authorized reviewer. Automatic reproduction check bot (https://github.com/jc-lab/shim-review-bot). Job URL : https://github.com/jc-lab/shim-review-bot/actions/runs/6541605043 Used Dockerfile: Dockerfile

Vendor Certificate

Source: https://github.com/zeronsoftn/shim-review/tree/zerox-shim-x86_64_ia32_aarch64-20231017/vendor_cert.der

-----BEGIN CERTIFICATE-----
MIIE0DCCArigAwIBAgIIZFctyELjfl4wDQYJKoZIhvcNAQELBQAwOjEWMBQGA1UE
AwwNWmVyb25zb2Z0TiBDQTETMBEGA1UECgwKWmVyb25zb2Z0TjELMAkGA1UEBhMC
S1IwHhcNMjIwNjI3MDQzNTE3WhcNMjkwNjI1MDQzNTE3WjBoMS4wLAYDVQQDDCVa
ZXJvbnNvZnROIFNlY3VyZSBCb290IFNpZ25pbmcgKDIwMjIpMRQwEgYDVQQLDAtT
ZWN1cmUgQm9vdDETMBEGA1UECgwKWmVyb25zb2Z0TjELMAkGA1UEBhMCS1IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkeXQHo4f63bVMAdU4QSxkTFDe
HZ9F02Y7PTlrIWrfeRZfSKETg2hgOc+AbjaXmlmcAfnZdCzQPlj7/0y4KGBY+gQw
9HKqI14k3ao1So2qj3aeg30PmWQ9SBIZr4v/ypWqxmlqbpFztEGztMcqLUt09fFv
42Cg2KwFFhKfIIkLyjwl9lGRbfzEUmXjKffDL8eDmA4Z49z+We85THs3ufgjDUXs
QLkneyG415eLpwvDXTBLLKUMYa4HaLy+0So/D8GBfvNhD6/C73gKYNiD5M1RcCqu
Di3WYtH4D3W7ivxBH3lGbbk/T/QwJHagsVRmY2+l2JUgGlrpg36jyk9w4FKXAgMB
AAGjgaswgagwHQYDVR0OBBYEFAgWC2iJbaf5PoEYWzb4fm9HS95SMAwGA1UdEwEB
/wQCMAAwHwYDVR0jBBgwFoAU10j/Kz0uRFCxAPiiLJQ2gJVRe+QwMwYDVR0fBCww
KjAooCagJIYiaHR0cDovL3BraS56ZXJvbnNvZnRuLmNvbS9yb290L2NybDAOBgNV
HQ8BAf8EBAMCBsAwEwYDVR0lBAwwCgYIKwYBBQUHAwMwDQYJKoZIhvcNAQELBQAD
ggIBACdBcEk1TC1qaBXrgFh0ymFkaDF3GY5vE9E+bvNM1TyDpwZAuLVvzFdrd+AO
sshLb4uhQmx2OJb6OszK5jCQ3YFqLrdRYQobRO6S8qkhC1xmSLgaX6EOJDkdhc5A
eLjbOqprUe/FHwWUHuNhgLpSTvgkloTeDIs0H3EkIpGZNYFS6QFnibL1ESVGGRpv
wa9rYq9yqgNqGQYH/KpcRGzB7K8Qt9I6NBTazAUAO8shrMc9IwtJp9z5fj/jmh/o
YeER049Zm4fcysmowL8oLB/bVJGHQjYUZdG1dqJzffnHxn7PUU/cElDJ+VP+CGnP
lM8vsuXG+vQVNF5LUkucmrgKm0QSFIwm2Tot+vrnWuCDDkpSBAkNU9fNIWE6kTTN
+a/jKTqZbjmcy5BLxa9EIzK0pjJOiIiFo3rhbvHaQhyoEFz8aqkHTGhWl4wW+ELh
ZxIFvyB6mkkYJSOXBHjeE7fQpWrAR+RFRBq22/PZrYPIKZ7xfG9gqDrP3SJ5CdZf
bw+wUkrQGrRzXl1RjZZ1/htXjCuB7anyqFjhpjqQM9XpU1VzezUZI2dN7GsgneXu
Bpz8Nf5fzOKX1IzDvaqJ5Qnc6v3NlPaG0NB08ybQGHpJ0dpCbgQeVY20Nl9ILxvF
5k53NQL4LRikt7wob/hLxcO3ay0DqzBoYiSC8aFSuJYkcbgQ
-----END CERTIFICATE-----

• Issuer : CN=ZeronsoftN CA,O=ZeronsoftN,C=KR
• Subject : CN=ZeronsoftN Secure Boot Signing (2022),OU=Secure Boot,O=ZeronsoftN,C=KR
• NotAfter : 2029-06-25 04:35:17 +0000 UTC
• [X] KeyUsage/DigitalSignature : OK
• [X] ExtKeyUsage/CodeSigning : OK

SBAT LEVEL (in prebuilt efi file)

sbat,1,2022111500
shim,2
grub,3

SBAT

Source: https://github.com/zeronsoftn/shim-review/tree/zerox-shim-x86_64_ia32_aarch64-20231017/sbat.csv

sbat,1,SBAT Version,sbat,1,https://github.com/rhboot/shim/blob/main/SBAT.md
shim,3,UEFI shim,shim,1,https://github.com/rhboot/shim
shim.zeronsoftn-zerox,1,ZeronsoftN,shim,15.7-0zeron2,https://github.com/zeronsoftn/shim-release

• [X] CSV Format Check : OK (Caution: Check only csv format, not .sbat format)

EFI FILE: shimaa64.efi

• reproduced file: /work/output/aarch64/boot/efi/EFI/ZeronsoftN/shimaa64.efi
• computed hash (sha256) : 3a0ebd4dfb854e8c84e8f0d3205c3b3337ec1f75d9d52f4311ecc33a11f0491f
• prebuilt file: https://github.com/zeronsoftn/shim-review/tree/zerox-shim-x86_64_ia32_aarch64-20231017/review/shimaa64.efi
• [X] Reproduce: Same hash
• hash (sha256) : 3a0ebd4dfb854e8c84e8f0d3205c3b3337ec1f75d9d52f4311ecc33a11f0491f
• [X] sbat : SAME
• [X] vendor_cert : SAME
• [X] NX Compat: True
• [X] buggy gcc/binutils #533: Not affected

EFI FILE: shimia32.efi

• reproduced file: /work/output/ia32/boot/efi/EFI/ZeronsoftN/shimia32.efi
• computed hash (sha256) : e67d09053e37f63954b9fad64d2f05c95d7051edab934c534f0216312b9f95b9
• prebuilt file: https://github.com/zeronsoftn/shim-review/tree/zerox-shim-x86_64_ia32_aarch64-20231017/review/shimia32.efi
• [X] Reproduce: Same hash
• hash (sha256) : e67d09053e37f63954b9fad64d2f05c95d7051edab934c534f0216312b9f95b9
• [X] sbat : SAME
• [X] vendor_cert : SAME
• [X] NX Compat: True
• [X] buggy gcc/binutils #533: Not affected

EFI FILE: shimx64.efi

• reproduced file: /work/output/x86_64/boot/efi/EFI/ZeronsoftN/shimx64.efi
• computed hash (sha256) : c6d5b80a0f14445a7f489ba6bd6f88837abebf4d7ab4b5aa6a76d1f748721035
• prebuilt file: https://github.com/zeronsoftn/shim-review/tree/zerox-shim-x86_64_ia32_aarch64-20231017/review/shimx64.efi
• [X] Reproduce: Same hash
• hash (sha256) : c6d5b80a0f14445a7f489ba6bd6f88837abebf4d7ab4b5aa6a76d1f748721035
• [X] sbat : SAME
• [X] vendor_cert : SAME
• [X] NX Compat: True
• [X] buggy gcc/binutils #533: Not affected

Patch Files

:robot: Human, “Why patches are being applied?” Please check.

• 0001-Make-sbat_var.S-parse-right-with-buggy-gcc-binutils.patch
• 0002-Enable-the-NX-compatibility-flag-by-default.patch
• 0003-Don-t-loop-forever-in-load_certs-with-buggy-firmware.patch
• 0004-Add-validation-function-for-Microsoft-signing.patch
• 0005-feat-zerox-shim.patch

SUCCESS

[jclab-joseph]

/review-bot https://github.com/zeronsoftn/shim-review/tree/zeronsoftn-shim-x86_64_ia32_aarch64-20240404

[github-actions[bot]]

Disclaimer: I am not a not an authorized reviewer. Automatic reproduction check bot (https://github.com/jc-lab/shim-review-bot). Job URL : https://github.com/jc-lab/shim-review-bot/actions/runs/8552160995 Used Dockerfile: Dockerfile

Vendor Certificate

Source: https://github.com/zeronsoftn/shim-review/tree/zeronsoftn-shim-x86_64_ia32_aarch64-20240404/vendor_cert.der

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

• Issuer : CN=ZeronsoftN CA,O=ZeronsoftN,C=KR
• Subject : CN=ZeronsoftN Secure Boot Signing (2022),OU=Secure Boot,O=ZeronsoftN,C=KR
• NotAfter : 2029-06-25 04:35:17 +0000 UTC
• [X] KeyUsage/DigitalSignature : OK
• [X] ExtKeyUsage/CodeSigning : OK

SBAT LEVEL (in prebuilt efi file)

sbat,1,2024010900
shim,4
grub,3
grub.debian,4

SBAT

Source: https://github.com/zeronsoftn/shim-review/tree/zeronsoftn-shim-x86_64_ia32_aarch64-20240404/sbat.csv

sbat,1,SBAT Version,sbat,1,https://github.com/rhboot/shim/blob/main/SBAT.md
shim,4,UEFI shim,shim,1,https://github.com/rhboot/shim
shim.zeronsoftn,1,ZeronsoftN,shim,15.8-0zeron1,https://github.com/zeronsoftn/shim-release

• [X] CSV Format Check : OK (Caution: Check only csv format, not .sbat format)

EFI FILE: shimaa64.efi

• reproduced file: /work/output/aarch64/boot/efi/EFI/ZeronsoftN/shimaa64.efi
• computed hash (sha256) : f6be6f0ab0bfe8896b19785143cc9595b9d8b0f124492537a02034ea3e6a75df
• prebuilt file: https://github.com/zeronsoftn/shim-review/tree/zeronsoftn-shim-x86_64_ia32_aarch64-20240404/review/shimaa64.efi
• [X] Reproduce: Same hash
• hash (sha256) : f6be6f0ab0bfe8896b19785143cc9595b9d8b0f124492537a02034ea3e6a75df
• [X] sbat : SAME
• [X] vendor_cert : SAME
• [ ] NX Compat: False
• [X] buggy gcc/binutils #533: Not affected

EFI FILE: shimia32.efi

• reproduced file: /work/output/ia32/boot/efi/EFI/ZeronsoftN/shimia32.efi
• computed hash (sha256) : f903dab7a5a95157f9d68c5d8dddfe835b2fa03d9f63797a4b0c464265662429
• prebuilt file: https://github.com/zeronsoftn/shim-review/tree/zeronsoftn-shim-x86_64_ia32_aarch64-20240404/review/shimia32.efi
• [X] Reproduce: Same hash
• hash (sha256) : f903dab7a5a95157f9d68c5d8dddfe835b2fa03d9f63797a4b0c464265662429
• [X] sbat : SAME
• [X] vendor_cert : SAME
• [ ] NX Compat: False
• [X] buggy gcc/binutils #533: Not affected

EFI FILE: shimx64.efi

• reproduced file: /work/output/x86_64/boot/efi/EFI/ZeronsoftN/shimx64.efi
• computed hash (sha256) : 6d16b244f8901cdf3c2abc27172390a3e7bf752bbb096c62b12eac4f3917c8f4
• prebuilt file: https://github.com/zeronsoftn/shim-review/tree/zeronsoftn-shim-x86_64_ia32_aarch64-20240404/review/shimx64.efi
• [X] Reproduce: Same hash
• hash (sha256) : 6d16b244f8901cdf3c2abc27172390a3e7bf752bbb096c62b12eac4f3917c8f4
• [X] sbat : SAME
• [X] vendor_cert : SAME
• [ ] NX Compat: False
• [X] buggy gcc/binutils #533: Not affected

Patch Files

• No Patch Files

FAILED