diff options
| author | Gary Lin <glin@suse.com> | 2021-05-11 10:41:43 +0800 |
|---|---|---|
| committer | Steve McIntyre <48764113+steve-mcintyre@users.noreply.github.com> | 2021-06-23 23:09:33 +0100 |
| commit | 9f973e4e95b1136b8c98051dbbdb1773072cc998 (patch) | |
| tree | d00bb84359660a7dd2a072fe2132e8afb62d08d6 /lib/variables.c | |
| parent | 05875f3aed1c90fe071c66de05744ca2bcbc2b9e (diff) | |
| download | efi-boot-shim-9f973e4e95b1136b8c98051dbbdb1773072cc998.tar.gz efi-boot-shim-9f973e4e95b1136b8c98051dbbdb1773072cc998.zip | |
Relax the check for import_mok_state()
An openSUSE user reported(*) that shim 15.4 failed to boot the system
with the following message:
"Could not create MokListXRT: Out of Resources"
In the beginning, I thought it's caused by the growing size of
vendor-dbx. However, we found the following messages after set
SHIM_VERBOSE:
max_var_sz:8000 remaining_sz:85EC max_storage_sz:9000
SetVariable(“MokListXRT”, ... varsz=0x1404) = Out of Resources
Even though the firmware claimed the remaining storage size is 0x85EC
and the maximum variable size is 0x8000, it still rejected MokListXRT
with size 0x1404. It seems that the return values from QueryVariableInfo()
are not reliable. Since this firmware didn't really support Secure Boot,
the variable mirroring is not so critical, so we can just accept the
failure of import_mok_state() and continue boot.
(*) https://bugzilla.suse.com/show_bug.cgi?id=1185261
Signed-off-by: Gary Lin <glin@suse.com>
Diffstat (limited to 'lib/variables.c')
0 files changed, 0 insertions, 0 deletions