From nobody Sun Feb 8 12:37:53 2026 Delivered-To: importer@patchew.org Received-SPF: pass (zoho.com: domain of gnu.org designates 209.51.188.17 as permitted sender) client-ip=209.51.188.17; envelope-from=qemu-devel-bounces+importer=patchew.org@nongnu.org; helo=lists.gnu.org; Authentication-Results: mx.zohomail.com; spf=pass (zoho.com: domain of gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=qemu-devel-bounces+importer=patchew.org@nongnu.org; dmarc=fail(p=none dis=none) header.from=redhat.com ARC-Seal: i=1; a=rsa-sha256; t=1557309155; cv=none; d=zoho.com; s=zohoarc; b=egRP4UB92bPmugpZ2YpjbjCNHLS8ge/jIPec7Vqysv4HpYe1BDvfDtfiJyNnefg+/2obSdYhGwcXcpbyPMd1VgHGO3mTL7qWZvUlYpkm3HuDFuOde6WxXWPHbtG788Afx0Udezkx3W2tmOWjg9dE3ld/1pLktkzaiVYcThgSb28= ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=zoho.com; s=zohoarc; t=1557309155; h=Content-Transfer-Encoding:Cc:Date:From:In-Reply-To:List-Subscribe:List-Post:List-Id:List-Archive:List-Help:List-Unsubscribe:MIME-Version:Message-ID:References:Sender:Subject:To:ARC-Authentication-Results; bh=i3WlWLH+BchluyN63VNjMdpJnyhiWwD3vn3UrRW7EwU=; b=KXNh662DQYRMoo9QsYIwaV1KBiawGdN0N43Ni18/p1YdNW8ecAuWu06llOkB4m2KTszAsp3FdvCpjS5RgtpicFCsEHuoX3faxnkQS3AlAopJzQN2BgGLSDfkgfeUB9MtlNiXCyWGGo1WkQ5Fv9SfLvyFxvSGYV+oEzDk1YPZVPE= ARC-Authentication-Results: i=1; mx.zoho.com; spf=pass (zoho.com: domain of gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=qemu-devel-bounces+importer=patchew.org@nongnu.org; dmarc=fail header.from= (p=none dis=none) header.from= Return-Path: Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) by mx.zohomail.com with SMTPS id 1557309155769470.654169226925; Wed, 8 May 2019 02:52:35 -0700 (PDT) Received: from localhost ([127.0.0.1]:34069 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1hOJFS-0007wY-Ne for importer@patchew.org; Wed, 08 May 2019 05:52:26 -0400 Received: from eggs.gnu.org ([209.51.188.92]:51596) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1hOJCJ-0004j0-J2 for qemu-devel@nongnu.org; Wed, 08 May 2019 05:49:13 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1hOJCH-0000BE-IX for qemu-devel@nongnu.org; Wed, 08 May 2019 05:49:11 -0400 Received: from mx1.redhat.com ([209.132.183.28]:55220) by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1hOJCG-0000AL-G2; Wed, 08 May 2019 05:49:09 -0400 Received: from smtp.corp.redhat.com (int-mx04.intmail.prod.int.phx2.redhat.com [10.5.11.14]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by mx1.redhat.com (Postfix) with ESMTPS id 3C4B7307D95F; Wed, 8 May 2019 09:49:07 +0000 (UTC) Received: from thuth.com (ovpn-116-100.ams2.redhat.com [10.36.116.100]) by smtp.corp.redhat.com (Postfix) with ESMTP id C72F55D9C8; Wed, 8 May 2019 09:49:05 +0000 (UTC) From: Thomas Huth To: cohuck@redhat.com, qemu-s390x@nongnu.org Date: Wed, 8 May 2019 11:48:56 +0200 Message-Id: <20190508094857.21145-3-thuth@redhat.com> In-Reply-To: <20190508094857.21145-1-thuth@redhat.com> References: <20190508094857.21145-1-thuth@redhat.com> MIME-Version: 1.0 X-Scanned-By: MIMEDefang 2.79 on 10.5.11.14 X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.5.16 (mx1.redhat.com [10.5.110.48]); Wed, 08 May 2019 09:49:07 +0000 (UTC) Content-Transfer-Encoding: quoted-printable X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Received-From: 209.132.183.28 Subject: [Qemu-devel] [PULL SUBSYSTEM s390x 2/3] s390-bios: Skip bootmap signature entries X-BeenThere: qemu-devel@nongnu.org X-Mailman-Version: 2.1.21 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: jjherne@linux.ibm.com, borntraeger@de.ibm.com, qemu-devel@nongnu.org, armbru@redhat.com Errors-To: qemu-devel-bounces+importer=patchew.org@nongnu.org Sender: "Qemu-devel" Content-Type: text/plain; charset="utf-8" From: "Jason J. Herne" Newer versions of zipl have the ability to write signature entries to the b= oot script for secure boot. We don't yet support secure boot, but we need to sk= ip over signature entries while reading the boot script in order to maintain o= ur ability to boot guest operating systems that have a secure bootloader. Signed-off-by: Jason J. Herne Reviewed-by: Farhan Ali Message-Id: <1556543381-12671-1-git-send-email-jjherne@linux.ibm.com> Signed-off-by: Thomas Huth --- pc-bios/s390-ccw/bootmap.c | 19 +++++++++++++++++-- pc-bios/s390-ccw/bootmap.h | 10 ++++++---- 2 files changed, 23 insertions(+), 6 deletions(-) diff --git a/pc-bios/s390-ccw/bootmap.c b/pc-bios/s390-ccw/bootmap.c index 7aef65ab67..d13b7cbd15 100644 --- a/pc-bios/s390-ccw/bootmap.c +++ b/pc-bios/s390-ccw/bootmap.c @@ -254,7 +254,14 @@ static void run_eckd_boot_script(block_number_t bmt_bl= ock_nr, memset(sec, FREE_SPACE_FILLER, sizeof(sec)); read_block(block_nr, sec, "Cannot read Boot Map Script"); =20 - for (i =3D 0; bms->entry[i].type =3D=3D BOOT_SCRIPT_LOAD; i++) { + for (i =3D 0; bms->entry[i].type =3D=3D BOOT_SCRIPT_LOAD || + bms->entry[i].type =3D=3D BOOT_SCRIPT_SIGNATURE; i++) { + + /* We don't support secure boot yet, so we skip signature entries = */ + if (bms->entry[i].type =3D=3D BOOT_SCRIPT_SIGNATURE) { + continue; + } + address =3D bms->entry[i].address.load_address; block_nr =3D eckd_block_num(&bms->entry[i].blkptr.xeckd.bptr.chs); =20 @@ -489,7 +496,15 @@ static void zipl_run(ScsiBlockPtr *pte) =20 /* Load image(s) into RAM */ entry =3D (ComponentEntry *)(&header[1]); - while (entry->component_type =3D=3D ZIPL_COMP_ENTRY_LOAD) { + while (entry->component_type =3D=3D ZIPL_COMP_ENTRY_LOAD || + entry->component_type =3D=3D ZIPL_COMP_ENTRY_SIGNATURE) { + + /* We don't support secure boot yet, so we skip signature entries = */ + if (entry->component_type =3D=3D ZIPL_COMP_ENTRY_SIGNATURE) { + entry++; + continue; + } + zipl_load_segment(entry); =20 entry++; diff --git a/pc-bios/s390-ccw/bootmap.h b/pc-bios/s390-ccw/bootmap.h index a085212077..94f53a5f1e 100644 --- a/pc-bios/s390-ccw/bootmap.h +++ b/pc-bios/s390-ccw/bootmap.h @@ -98,8 +98,9 @@ typedef struct ScsiMbr { #define ZIPL_COMP_HEADER_IPL 0x00 #define ZIPL_COMP_HEADER_DUMP 0x01 =20 -#define ZIPL_COMP_ENTRY_LOAD 0x02 -#define ZIPL_COMP_ENTRY_EXEC 0x01 +#define ZIPL_COMP_ENTRY_EXEC 0x01 +#define ZIPL_COMP_ENTRY_LOAD 0x02 +#define ZIPL_COMP_ENTRY_SIGNATURE 0x03 =20 typedef struct XEckdMbr { uint8_t magic[4]; /* =3D=3D "xIPL" */ @@ -117,8 +118,9 @@ typedef struct BootMapScriptEntry { BootMapPointer blkptr; uint8_t pad[7]; uint8_t type; /* =3D=3D BOOT_SCRIPT_* */ -#define BOOT_SCRIPT_EXEC 0x01 -#define BOOT_SCRIPT_LOAD 0x02 +#define BOOT_SCRIPT_EXEC 0x01 +#define BOOT_SCRIPT_LOAD 0x02 +#define BOOT_SCRIPT_SIGNATURE 0x03 union { uint64_t load_address; uint64_t load_psw; --=20 2.21.0