• Ard Biesheuvel's avatar
    efi/arm64: libstub: Deal gracefully with EFI_RNG_PROTOCOL failure · d32de913
    Ard Biesheuvel authored
    Currently, on arm64, we abort on any failure from efi_get_random_bytes()
    other than EFI_NOT_FOUND when it comes to setting the physical seed for
    KASLR, but ignore such failures when obtaining the seed for virtual
    KASLR or for early seeding of the kernel's entropy pool via the config
    table. This is inconsistent, and may lead to unexpected boot failures.
    
    So let's permit any failure for the physical seed, and simply report
    the error code if it does not equal EFI_NOT_FOUND.
    
    Cc: <stable@vger.kernel.org> # v5.8+
    Reported-by: default avatarHeinrich Schuchardt <xypron.glpk@gmx.de>
    Signed-off-by: default avatarArd Biesheuvel <ardb@kernel.org>
    d32de913
arm64-stub.c 3.36 KB