From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1032215AbdD0Mll (ORCPT ); Thu, 27 Apr 2017 08:41:41 -0400 Received: from mail-wm0-f44.google.com ([74.125.82.44]:37548 "EHLO mail-wm0-f44.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1031888AbdD0Mla (ORCPT ); Thu, 27 Apr 2017 08:41:30 -0400 Subject: Re: [PATCH v2 0/3] efi: add support for non-standard capsule headers To: Ard Biesheuvel References: <20170425150005.GR24360@codeblueprint.co.uk> <3fe85a2e-c846-5545-7896-c838bec6f251@nexus-software.ie> Cc: Matt Fleming , Jan Kiszka , "linux-efi@vger.kernel.org" , Linux Kernel Mailing List , Andy Shevchenko , Hock Leong Kweh , Borislav Petkov , Sascha Weisenberger From: "Bryan O'Donoghue" Message-ID: Date: Thu, 27 Apr 2017 13:46:14 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Thunderbird/45.8.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On 25/04/17 16:08, Ard Biesheuvel wrote: > On 25 April 2017 at 16:07, Bryan O'Donoghue >> I'm OOO until Thursday however, I could test this out on a Galileo for >> you with the CSH stripped out. As Jan has pointed out Galileo aka Quark >> x1000 non-secure (not to be called insecure) will just skips past the >> CSH anyway - so - we can give it a conformant capsule by stripping the >> CSH junk off the top. >> >> How about you queue it up and I'll let you know if there's a problem >> Thursday? >> > > That would be highly appreciated, thanks. > Looks good. I stripped the header dd skip=1024 bs=1 if=firmware.cap of=firmware-no-csh.cap Downloaded the now conformat capsule and update/reflash succeeded. --- bod From mboxrd@z Thu Jan 1 00:00:00 1970 From: Bryan O'Donoghue Subject: Re: [PATCH v2 0/3] efi: add support for non-standard capsule headers Date: Thu, 27 Apr 2017 13:46:14 +0100 Message-ID: References: <20170425150005.GR24360@codeblueprint.co.uk> <3fe85a2e-c846-5545-7896-c838bec6f251@nexus-software.ie> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: Sender: linux-efi-owner-u79uwXL29TY76Z2rM5mHXA@public.gmane.org To: Ard Biesheuvel Cc: Matt Fleming , Jan Kiszka , "linux-efi-u79uwXL29TY76Z2rM5mHXA@public.gmane.org" , Linux Kernel Mailing List , Andy Shevchenko , Hock Leong Kweh , Borislav Petkov , Sascha Weisenberger List-Id: linux-efi@vger.kernel.org On 25/04/17 16:08, Ard Biesheuvel wrote: > On 25 April 2017 at 16:07, Bryan O'Donoghue >> I'm OOO until Thursday however, I could test this out on a Galileo for >> you with the CSH stripped out. As Jan has pointed out Galileo aka Quark >> x1000 non-secure (not to be called insecure) will just skips past the >> CSH anyway - so - we can give it a conformant capsule by stripping the >> CSH junk off the top. >> >> How about you queue it up and I'll let you know if there's a problem >> Thursday? >> > > That would be highly appreciated, thanks. > Looks good. I stripped the header dd skip=1024 bs=1 if=firmware.cap of=firmware-no-csh.cap Downloaded the now conformat capsule and update/reflash succeeded. --- bod