April 2018 - coreboot - mail.coreboot.org

Re: [coreboot] x220: cannot modify nvramcui options with newest coreboot (git a96e31b)
by Mat April 27, 2018

April 27, 2018

I've gathered more details about the problem. coreboot version that works is 9d0aa99 (Nov 24, 2017). Configuration that works is at the bottom. To make it NOT working, I've put the .config below to newest coreboot (git a96e31b), run "make menuconfig" just to update the config, then immediatelly exit, then 'make' to build the coreboot.rom, then write it to x220. here is the config BEFORE I've made "make menuconfig" within coreboot git a96e31b: # # Automatically generated file; DO NOT EDIT. # coreboot configuration # # # General setup # CONFIG_COREBOOT_BUILD=y CONFIG_LOCALVERSION="" CONFIG_CBFS_PREFIX="fallback" CONFIG_COMPILER_GCC=y # CONFIG_COMPILER_LLVM_CLANG is not set # CONFIG_ANY_TOOLCHAIN is not set # CONFIG_CCACHE is not set # CONFIG_FMD_GENPARSER is not set # CONFIG_UTIL_GENPARSER is not set CONFIG_USE_OPTION_TABLE=y # CONFIG_STATIC_OPTION_TABLE is not set CONFIG_COMPRESS_RAMSTAGE=y CONFIG_INCLUDE_CONFIG_FILE=y # CONFIG_COLLECT_TIMESTAMPS is not set CONFIG_USE_BLOBS=y # CONFIG_COVERAGE is not set # CONFIG_UBSAN is not set CONFIG_RELOCATABLE_RAMSTAGE=y # CONFIG_UPDATE_IMAGE is not set # CONFIG_BOOTSPLASH_IMAGE is not set # # Mainboard # # # Important: Run 'make distclean' before switching boards # # CONFIG_VENDOR_A_TREND is not set # CONFIG_VENDOR_AAEON is not set # CONFIG_VENDOR_ABIT is not set # CONFIG_VENDOR_ADI is not set # CONFIG_VENDOR_ADLINK is not set # CONFIG_VENDOR_ADVANSUS is not set # CONFIG_VENDOR_AMD is not set # CONFIG_VENDOR_AOPEN is not set # CONFIG_VENDOR_APPLE is not set # CONFIG_VENDOR_ARTECGROUP is not set # CONFIG_VENDOR_ASROCK is not set # CONFIG_VENDOR_ASUS is not set # CONFIG_VENDOR_AVALUE is not set # CONFIG_VENDOR_AZZA is not set # CONFIG_VENDOR_BACHMANN is not set # CONFIG_VENDOR_BAP is not set # CONFIG_VENDOR_BCOM is not set # CONFIG_VENDOR_BIOSTAR is not set # CONFIG_VENDOR_BROADCOM is not set # CONFIG_VENDOR_COMPAQ is not set # CONFIG_VENDOR_COMPULAB is not set # CONFIG_VENDOR_CUBIETECH is not set # CONFIG_VENDOR_DIGITALLOGIC is not set # CONFIG_VENDOR_DMP is not set # CONFIG_VENDOR_ECS is not set # CONFIG_VENDOR_ELMEX is not set # CONFIG_VENDOR_EMULATION is not set # CONFIG_VENDOR_ESD is not set # CONFIG_VENDOR_FOXCONN is not set # CONFIG_VENDOR_GETAC is not set # CONFIG_VENDOR_GIGABYTE is not set # CONFIG_VENDOR_GIZMOSPHERE is not set # CONFIG_VENDOR_GOOGLE is not set # CONFIG_VENDOR_HP is not set # CONFIG_VENDOR_IBASE is not set # CONFIG_VENDOR_IEI is not set # CONFIG_VENDOR_INTEL is not set # CONFIG_VENDOR_IWAVE is not set # CONFIG_VENDOR_IWILL is not set # CONFIG_VENDOR_JETWAY is not set # CONFIG_VENDOR_KONTRON is not set # CONFIG_VENDOR_LANNER is not set CONFIG_VENDOR_LENOVO=y # CONFIG_VENDOR_LINUTOP is not set # CONFIG_VENDOR_LIPPERT is not set # CONFIG_VENDOR_LOWRISC is not set # CONFIG_VENDOR_MITAC is not set # CONFIG_VENDOR_MSI is not set # CONFIG_VENDOR_NEC is not set # CONFIG_VENDOR_NOKIA is not set # CONFIG_VENDOR_NVIDIA is not set # CONFIG_VENDOR_PACKARDBELL is not set # CONFIG_VENDOR_PCENGINES is not set # CONFIG_VENDOR_PURISM is not set # CONFIG_VENDOR_RCA is not set # CONFIG_VENDOR_RODA is not set # CONFIG_VENDOR_SAMSUNG is not set # CONFIG_VENDOR_SAPPHIRE is not set # CONFIG_VENDOR_SIEMENS is not set # CONFIG_VENDOR_SOYO is not set # CONFIG_VENDOR_SUNW is not set # CONFIG_VENDOR_SUPERMICRO is not set # CONFIG_VENDOR_TECHNEXION is not set # CONFIG_VENDOR_THOMSON is not set # CONFIG_VENDOR_TI is not set # CONFIG_VENDOR_TRAVERSE is not set # CONFIG_VENDOR_TYAN is not set # CONFIG_VENDOR_VIA is not set # CONFIG_VENDOR_WINENT is not set # CONFIG_VENDOR_WINNET is not set # CONFIG_VENDOR_WYSE is not set CONFIG_BOARD_SPECIFIC_OPTIONS=y CONFIG_MAINBOARD_DIR="lenovo/x220" CONFIG_MAINBOARD_PART_NUMBER="ThinkPad X220" CONFIG_MAINBOARD_VENDOR="LENOVO" CONFIG_MAX_CPUS=8 CONFIG_CACHE_ROM_SIZE_OVERRIDE=0x0 CONFIG_CBFS_SIZE=0x100000 CONFIG_PAYLOAD_CONFIGFILE="" CONFIG_VGA_BIOS_ID="8086,0126" # CONFIG_ONBOARD_VGA_IS_PRIMARY is not set CONFIG_DIMM_SPD_SIZE=256 # CONFIG_VGA_BIOS is not set CONFIG_DCACHE_RAM_BASE=0xfefe0000 CONFIG_DCACHE_RAM_SIZE=0x20000 CONFIG_VGA_BIOS_FILE="pci8086,0126.rom" CONFIG_MAINBOARD_PCI_SUBSYSTEM_VENDOR_ID=0x17aa CONFIG_MAINBOARD_PCI_SUBSYSTEM_DEVICE_ID=0x21db CONFIG_HAVE_IFD_BIN=y CONFIG_HAVE_ME_BIN=y CONFIG_DRAM_RESET_GATE_GPIO=10 CONFIG_MMCONF_BASE_ADDRESS=0xf8000000 # CONFIG_POST_IO is not set CONFIG_DEVICETREE="devicetree.cb" CONFIG_MAX_REBOOT_CNT=3 CONFIG_HAVE_GBE_BIN=y CONFIG_USBDEBUG_HCD_INDEX=2 CONFIG_ID_SECTION_OFFSET=0x80 # CONFIG_POST_DEVICE is not set # CONFIG_VBOOT is not set CONFIG_BOOT_DEVICE_SPI_FLASH_BUS=0 CONFIG_FMDFILE="" CONFIG_PRERAM_CBMEM_CONSOLE_SIZE=0xc00 # CONFIG_DRIVERS_UART_8250IO is not set CONFIG_IFD_BIN_PATH="3rdparty/blobs/mainboard/$(MAINBOARDDIR)/descriptor.bin" CONFIG_ME_BIN_PATH="3rdparty/blobs/mainboard/$(MAINBOARDDIR)/me.bin" # CONFIG_BOARD_LENOVO_G505S is not set # CONFIG_BOARD_LENOVO_L520 is not set # CONFIG_BOARD_LENOVO_R400 is not set # CONFIG_BOARD_LENOVO_S230U is not set # CONFIG_BOARD_LENOVO_T400 is not set # CONFIG_BOARD_LENOVO_T420 is not set # CONFIG_BOARD_LENOVO_T420S is not set # CONFIG_BOARD_LENOVO_THINKPAD_T430 is not set # CONFIG_BOARD_LENOVO_T430S is not set # CONFIG_BOARD_LENOVO_T500 is not set # CONFIG_BOARD_LENOVO_T520 is not set # CONFIG_BOARD_LENOVO_T530 is not set # CONFIG_BOARD_LENOVO_T60 is not set # CONFIG_BOARD_LENOVO_X1_CARBON_GEN1 is not set # CONFIG_BOARD_LENOVO_X200 is not set # CONFIG_BOARD_LENOVO_X201 is not set CONFIG_BOARD_LENOVO_X220=y # CONFIG_BOARD_LENOVO_X220I is not set # CONFIG_BOARD_LENOVO_X230 is not set # CONFIG_BOARD_LENOVO_X60 is not set CONFIG_CPU_ADDR_BITS=36 CONFIG_DEFAULT_CONSOLE_LOGLEVEL=8 # CONFIG_USBDEBUG is not set CONFIG_DRIVERS_PS2_KEYBOARD=y # CONFIG_PCIEXP_L1_SUB_STATE is not set # CONFIG_NO_POST is not set CONFIG_BOARD_ROMSIZE_KB_8192=y # CONFIG_COREBOOT_ROMSIZE_KB_64 is not set # CONFIG_COREBOOT_ROMSIZE_KB_128 is not set # CONFIG_COREBOOT_ROMSIZE_KB_256 is not set # CONFIG_COREBOOT_ROMSIZE_KB_512 is not set # CONFIG_COREBOOT_ROMSIZE_KB_1024 is not set # CONFIG_COREBOOT_ROMSIZE_KB_2048 is not set # CONFIG_COREBOOT_ROMSIZE_KB_4096 is not set CONFIG_COREBOOT_ROMSIZE_KB_8192=y # CONFIG_COREBOOT_ROMSIZE_KB_10240 is not set # CONFIG_COREBOOT_ROMSIZE_KB_12288 is not set # CONFIG_COREBOOT_ROMSIZE_KB_16384 is not set # CONFIG_COREBOOT_ROMSIZE_KB_32768 is not set # CONFIG_COREBOOT_ROMSIZE_KB_65536 is not set CONFIG_COREBOOT_ROMSIZE_KB=8192 CONFIG_ROM_SIZE=0x800000 # CONFIG_MAINBOARD_HAS_TPM2 is not set CONFIG_SYSTEM_TYPE_LAPTOP=y # CONFIG_CBFS_AUTOGEN_ATTRIBUTES is not set # # Chipset # # # SoC # CONFIG_CPU_SPECIFIC_OPTIONS=y CONFIG_RAMTOP=0x200000 CONFIG_HEAP_SIZE=0x4000 CONFIG_RAMBASE=0x100000 CONFIG_EHCI_BAR=0xfef00000 CONFIG_SERIRQ_CONTINUOUS_MODE=y CONFIG_SMM_TSEG_SIZE=0x800000 CONFIG_ACPI_CPU_STRING="\\_PR.CP%02d" # CONFIG_SOC_BROADCOM_CYGNUS is not set CONFIG_BOOTBLOCK_CPU_INIT="cpu/intel/model_206ax/bootblock.c" # CONFIG_SOC_INTEL_GLK is not set CONFIG_C_ENV_BOOTBLOCK_SIZE=0x10000 CONFIG_X86_TOP4G_BOOTMEDIA_MAP=y CONFIG_ROMSTAGE_ADDR=0x2000000 CONFIG_VERSTAGE_ADDR=0x2000000 CONFIG_SPI_FLASH_INCLUDE_ALL_DRIVERS=y CONFIG_DCACHE_RAM_MRC_VAR_SIZE=0x0 # CONFIG_BUILD_WITH_FAKE_IFD is not set CONFIG_PCIEXP_ASPM=y CONFIG_PCIEXP_COMMON_CLOCK=y # CONFIG_PCIEXP_CLK_PM is not set CONFIG_BOOTBLOCK_NORTHBRIDGE_INIT="northbridge/intel/sandybridge/bootblock.c" CONFIG_BOOTBLOCK_SOUTHBRIDGE_INIT="southbridge/intel/bd82x6x/bootblock.c" CONFIG_CACHE_MRC_SIZE_KB=512 CONFIG_STACK_SIZE=0x1000 CONFIG_CONSOLE_CBMEM=y CONFIG_UART_PCI_ADDR=0x0 CONFIG_HPET_MIN_TICKS=0x80 # CONFIG_SOC_INTEL_KABYLAKE is not set # CONFIG_SOC_LOWRISC_LOWRISC is not set # CONFIG_SOC_MARVELL_MVMAP2315 is not set # CONFIG_SOC_MEDIATEK_MT8173 is not set # CONFIG_SOC_NVIDIA_TEGRA124 is not set # CONFIG_SOC_NVIDIA_TEGRA210 is not set # CONFIG_SOC_QC_IPQ40XX is not set # CONFIG_SOC_QC_IPQ806X is not set # CONFIG_SOC_ROCKCHIP_RK3288 is not set # CONFIG_SOC_ROCKCHIP_RK3399 is not set # CONFIG_CPU_SAMSUNG_EXYNOS5250 is not set # CONFIG_CPU_SAMSUNG_EXYNOS5420 is not set # CONFIG_SOC_UCB_RISCV is not set # # CPU # # CONFIG_CPU_ALLWINNER_A10 is not set CONFIG_SOCKET_SPECIFIC_OPTIONS=y CONFIG_XIP_ROM_SIZE=0x20000 CONFIG_NUM_IPI_STARTS=2 # CONFIG_CPU_AMD_AGESA is not set # CONFIG_CPU_AMD_PI is not set # CONFIG_CPU_ARMLTD_CORTEX_A9 is not set CONFIG_CPU_INTEL_MODEL_206AX=y CONFIG_SSE2=y CONFIG_CPU_INTEL_SOCKET_RPGA989=y # CONFIG_CPU_INTEL_FIRMWARE_INTERFACE_TABLE is not set # CONFIG_CPU_INTEL_TURBO_NOT_PACKAGE_SCOPED is not set CONFIG_CPU_INTEL_COMMON=y CONFIG_ENABLE_VMX=y # CONFIG_SET_VMX_LOCK_BIT is not set # CONFIG_CPU_TI_AM335X is not set # CONFIG_PARALLEL_CPU_INIT is not set # CONFIG_PARALLEL_MP is not set # CONFIG_UDELAY_IO is not set # CONFIG_UDELAY_LAPIC is not set CONFIG_UDELAY_TSC=y CONFIG_TSC_CONSTANT_RATE=y CONFIG_TSC_MONOTONIC_TIMER=y # CONFIG_UDELAY_TIMER2 is not set # CONFIG_TSC_SYNC_LFENCE is not set CONFIG_TSC_SYNC_MFENCE=y # CONFIG_NO_FIXED_XIP_ROM_SIZE is not set CONFIG_LOGICAL_CPUS=y CONFIG_SMM_TSEG=y CONFIG_SMM_MODULE_HEAP_SIZE=0x4000 # CONFIG_SMM_LAPIC_REMAP_MITIGATION is not set # CONFIG_SERIALIZED_SMM_INITIALIZATION is not set # CONFIG_X86_AMD_FIXED_MTRRS is not set # CONFIG_PLATFORM_USES_FSP1_0 is not set # CONFIG_MIRROR_PAYLOAD_TO_RAM_BEFORE_LOADING is not set # CONFIG_SOC_SETS_MSRS is not set CONFIG_CACHE_AS_RAM=y # CONFIG_NO_CAR_GLOBAL_MIGRATION is not set CONFIG_SMP=y CONFIG_AP_SIPI_VECTOR=0xfffff000 CONFIG_MMX=y CONFIG_SSE=y CONFIG_SUPPORT_CPU_UCODE_IN_CBFS=y # CONFIG_USES_MICROCODE_HEADER_FILES is not set CONFIG_CPU_MICROCODE_CBFS_GENERATE=y # CONFIG_CPU_MICROCODE_CBFS_EXTERNAL_HEADER is not set # CONFIG_CPU_MICROCODE_CBFS_NONE is not set # CONFIG_CPU_MICROCODE_MULTIPLE_FILES is not set CONFIG_CPU_UCODE_BINARIES="" # # Northbridge # # CONFIG_NORTHBRIDGE_AMD_AGESA is not set # CONFIG_NO_MMCONF_SUPPORT is not set # CONFIG_AMD_NB_CIMX is not set # CONFIG_NORTHBRIDGE_AMD_CIMX_RD890 is not set # CONFIG_NORTHBRIDGE_AMD_PI is not set CONFIG_NORTHBRIDGE_INTEL_COMMON_MRC_CACHE=y CONFIG_MRC_CACHE_SIZE=0x10000 CONFIG_NORTHBRIDGE_INTEL_SANDYBRIDGE=y CONFIG_USE_NATIVE_RAMINIT=y # CONFIG_NATIVE_RAMINIT_IGNORE_MAX_MEM_FUSES is not set # CONFIG_NATIVE_RAMINIT_IGNORE_XMP_MAX_DIMMS is not set CONFIG_SANDYBRIDGE_IVYBRIDGE_LVDS=y CONFIG_IF_NATIVE_VGA_INIT=y CONFIG_HPET_ADDRESS=0xfed00000 CONFIG_MAX_PIRQ_LINKS=4 # # Southbridge # # CONFIG_AMD_SB_CIMX is not set # CONFIG_SOUTHBRIDGE_AMD_CIMX_SB800 is not set # CONFIG_SOUTHBRIDGE_AMD_CIMX_SB900 is not set CONFIG_SOUTHBRIDGE_INTEL_C216=y CONFIG_SOUTH_BRIDGE_OPTIONS=y CONFIG_LOCK_SPI_FLASH_NONE=y # CONFIG_LOCK_SPI_FLASH_RO is not set # CONFIG_LOCK_SPI_FLASH_NO_ACCESS is not set CONFIG_SOUTHBRIDGE_INTEL_COMMON=y CONFIG_SOUTHBRIDGE_INTEL_COMMON_GPIO=y CONFIG_SOUTHBRIDGE_INTEL_COMMON_SMBUS=y CONFIG_HAVE_INTEL_CHIPSET_LOCKDOWN=y # CONFIG_INTEL_CHIPSET_LOCKDOWN is not set # CONFIG_LOCK_MANAGEMENT_ENGINE is not set # # Super I/O # # CONFIG_SUPERIO_NUVOTON_NCT6776_COM_A is not set # # Embedded Controllers # CONFIG_EC_ACPI=y CONFIG_EC_LENOVO_H8=y CONFIG_SEABIOS_PS2_TIMEOUT=3000 CONFIG_H8_BEEP_ON_DEATH=y CONFIG_H8_FLASH_LEDS_ON_DEATH=y CONFIG_EC_LENOVO_PMH7=y CONFIG_HAVE_INTEL_FIRMWARE=y # # Intel Firmware # # CONFIG_EM100 is not set # CONFIG_CHECK_ME is not set # CONFIG_USE_ME_CLEANER is not set CONFIG_GBE_BIN_PATH="3rdparty/blobs/mainboard/$(MAINBOARDDIR)/gbe.bin" # CONFIG_HAVE_EC_BIN is not set # CONFIG_MAINBOARD_HAS_CHROMEOS is not set # CONFIG_GOOGLE_SMBIOS_MAINBOARD_VERSION is not set # CONFIG_UEFI_2_4_BINDING is not set # CONFIG_UDK_2015_BINDING is not set # CONFIG_USE_SIEMENS_HWILIB is not set # CONFIG_ARCH_ARM is not set # CONFIG_ARCH_BOOTBLOCK_ARM is not set # CONFIG_ARCH_VERSTAGE_ARM is not set # CONFIG_ARCH_ROMSTAGE_ARM is not set # CONFIG_ARCH_RAMSTAGE_ARM is not set # CONFIG_ARCH_BOOTBLOCK_ARMV4 is not set # CONFIG_ARCH_VERSTAGE_ARMV4 is not set # CONFIG_ARCH_ROMSTAGE_ARMV4 is not set # CONFIG_ARCH_RAMSTAGE_ARMV4 is not set # CONFIG_ARCH_BOOTBLOCK_ARMV7 is not set # CONFIG_ARCH_VERSTAGE_ARMV7 is not set # CONFIG_ARCH_ROMSTAGE_ARMV7 is not set # CONFIG_ARCH_RAMSTAGE_ARMV7 is not set # CONFIG_ARCH_BOOTBLOCK_ARMV7_M is not set # CONFIG_ARCH_VERSTAGE_ARMV7_M is not set # CONFIG_ARCH_BOOTBLOCK_ARMV7_R is not set # CONFIG_ARCH_VERSTAGE_ARMV7_R is not set # CONFIG_ARCH_ROMSTAGE_ARMV7_R is not set # CONFIG_ARCH_RAMSTAGE_ARMV7_R is not set # CONFIG_ARM_LPAE is not set # CONFIG_ARCH_ARM64 is not set # CONFIG_ARCH_BOOTBLOCK_ARM64 is not set # CONFIG_ARCH_VERSTAGE_ARM64 is not set # CONFIG_ARCH_ROMSTAGE_ARM64 is not set # CONFIG_ARCH_RAMSTAGE_ARM64 is not set # CONFIG_ARCH_BOOTBLOCK_ARMV8_64 is not set # CONFIG_ARCH_VERSTAGE_ARMV8_64 is not set # CONFIG_ARCH_ROMSTAGE_ARMV8_64 is not set # CONFIG_ARCH_RAMSTAGE_ARMV8_64 is not set # CONFIG_ARM64_A53_ERRATUM_843419 is not set # CONFIG_ARCH_MIPS is not set # CONFIG_ARCH_BOOTBLOCK_MIPS is not set # CONFIG_ARCH_VERSTAGE_MIPS is not set # CONFIG_ARCH_ROMSTAGE_MIPS is not set # CONFIG_ARCH_RAMSTAGE_MIPS is not set # CONFIG_ARCH_POWER8 is not set # CONFIG_ARCH_BOOTBLOCK_POWER8 is not set # CONFIG_ARCH_VERSTAGE_POWER8 is not set # CONFIG_ARCH_ROMSTAGE_POWER8 is not set # CONFIG_ARCH_RAMSTAGE_POWER8 is not set # CONFIG_ARCH_RISCV is not set # CONFIG_ARCH_BOOTBLOCK_RISCV is not set # CONFIG_ARCH_VERSTAGE_RISCV is not set # CONFIG_ARCH_ROMSTAGE_RISCV is not set # CONFIG_ARCH_RAMSTAGE_RISCV is not set CONFIG_ARCH_X86=y CONFIG_ARCH_BOOTBLOCK_X86_32=y CONFIG_ARCH_VERSTAGE_X86_32=y CONFIG_ARCH_ROMSTAGE_X86_32=y CONFIG_ARCH_RAMSTAGE_X86_32=y # CONFIG_ARCH_BOOTBLOCK_X86_64 is not set # CONFIG_ARCH_VERSTAGE_X86_64 is not set # CONFIG_ARCH_ROMSTAGE_X86_64 is not set # CONFIG_ARCH_RAMSTAGE_X86_64 is not set # CONFIG_USE_MARCH_586 is not set # CONFIG_AP_IN_SIPI_WAIT is not set # CONFIG_SIPI_VECTOR_IN_ROM is not set # CONFIG_ROMCC is not set # CONFIG_CBMEM_TOP_BACKUP is not set # CONFIG_LATE_CBMEM_INIT is not set # CONFIG_EARLY_EBDA_INIT is not set CONFIG_PC80_SYSTEM=y # CONFIG_BOOTBLOCK_DEBUG_SPINLOOP is not set # CONFIG_BOOTBLOCK_SAVE_BIST_AND_TIMESTAMP is not set CONFIG_HAVE_CMOS_DEFAULT=y CONFIG_CMOS_DEFAULT_FILE="src/mainboard/$(MAINBOARDDIR)/cmos.default" CONFIG_IOAPIC_INTERRUPTS_ON_FSB=y # CONFIG_IOAPIC_INTERRUPTS_ON_APIC_SERIAL_BUS is not set # CONFIG_POSTCAR_STAGE is not set # CONFIG_VERSTAGE_DEBUG_SPINLOOP is not set # CONFIG_ROMSTAGE_DEBUG_SPINLOOP is not set CONFIG_BOOTBLOCK_SIMPLE=y # CONFIG_BOOTBLOCK_NORMAL is not set CONFIG_BOOTBLOCK_SOURCE="bootblock_simple.c" # # Devices # CONFIG_HAVE_VGA_TEXT_FRAMEBUFFER=y CONFIG_HAVE_LINEAR_FRAMEBUFFER=y CONFIG_MAINBOARD_HAS_NATIVE_VGA_INIT=y # CONFIG_MAINBOARD_FORCE_NATIVE_VGA_INIT is not set CONFIG_MAINBOARD_HAS_LIBGFXINIT=y CONFIG_MAINBOARD_DO_NATIVE_VGA_INIT=y # CONFIG_MAINBOARD_USE_LIBGFXINIT is not set # CONFIG_VGA_ROM_RUN is not set # CONFIG_NO_GFX_INIT is not set # CONFIG_MULTIPLE_VGA_ADAPTERS is not set # # Display # CONFIG_VGA_TEXT_FRAMEBUFFER=y # CONFIG_GENERIC_LINEAR_FRAMEBUFFER is not set # CONFIG_SMBUS_HAS_AUX_CHANNELS is not set CONFIG_PCI=y CONFIG_MMCONF_SUPPORT=y # CONFIG_HYPERTRANSPORT_PLUGIN_SUPPORT is not set CONFIG_PCIX_PLUGIN_SUPPORT=y CONFIG_CARDBUS_PLUGIN_SUPPORT=y # CONFIG_AZALIA_PLUGIN_SUPPORT is not set CONFIG_PCIEXP_PLUGIN_SUPPORT=y # CONFIG_EARLY_PCI_BRIDGE is not set CONFIG_SUBSYSTEM_VENDOR_ID=0x0000 CONFIG_SUBSYSTEM_DEVICE_ID=0x0000 # CONFIG_INTEL_GMA_ADD_VBT_DATA_FILE is not set # CONFIG_SOFTWARE_I2C is not set # # Generic Drivers # # CONFIG_DRIVERS_AS3722_RTC is not set # CONFIG_GIC is not set # CONFIG_IPMI_KCS is not set # CONFIG_DRIVERS_LENOVO_WACOM is not set # CONFIG_RT8168_GET_MAC_FROM_VPD is not set # CONFIG_RT8168_SET_LED_MODE is not set CONFIG_SPI_FLASH=y CONFIG_BOOT_DEVICE_SPI_FLASH_RW_NOMMAP=y # CONFIG_BOOT_DEVICE_SPI_FLASH_RW_NOMMAP_EARLY is not set # CONFIG_SPI_FLASH_SMM is not set # CONFIG_SPI_FLASH_NO_FAST_READ is not set CONFIG_SPI_FLASH_ADESTO=y CONFIG_SPI_FLASH_AMIC=y CONFIG_SPI_FLASH_ATMEL=y CONFIG_SPI_FLASH_EON=y CONFIG_SPI_FLASH_GIGADEVICE=y CONFIG_SPI_FLASH_MACRONIX=y CONFIG_SPI_FLASH_SPANSION=y CONFIG_SPI_FLASH_SST=y CONFIG_SPI_FLASH_STMICRO=y CONFIG_SPI_FLASH_WINBOND=y # CONFIG_SPI_FLASH_FAST_READ_DUAL_OUTPUT_3B is not set # CONFIG_SPI_FLASH_HAS_VOLATILE_GROUP is not set # CONFIG_HAVE_SPI_CONSOLE_SUPPORT is not set # CONFIG_DRIVERS_UART is not set CONFIG_NO_UART_ON_SUPERIO=y # CONFIG_UART_OVERRIDE_INPUT_CLOCK_DIVIDER is not set # CONFIG_UART_OVERRIDE_REFCLK is not set # CONFIG_DRIVERS_UART_8250MEM is not set # CONFIG_DRIVERS_UART_8250MEM_32 is not set # CONFIG_HAVE_UART_SPECIAL is not set # CONFIG_DRIVERS_UART_OXPCIE is not set # CONFIG_DRIVERS_UART_PL011 is not set # CONFIG_UART_USE_REFCLK_AS_INPUT_CLOCK is not set CONFIG_HAVE_USBDEBUG=y CONFIG_HAVE_USBDEBUG_OPTIONS=y # CONFIG_DRIVERS_AMD_PI is not set CONFIG_SMBIOS_PROVIDED_BY_MOBO=y # CONFIG_DRIVERS_I2C_MAX98927 is not set # CONFIG_DRIVERS_I2C_PCF8523 is not set # CONFIG_DRIVERS_I2C_RT5663 is not set # CONFIG_DRIVERS_I2C_RTD2132 is not set # CONFIG_DRIVERS_I2C_RX6110SA is not set # CONFIG_MAINBOARD_HAS_I2C_TPM_ATMEL is not set # CONFIG_MAINBOARD_HAS_I2C_TPM_CR50 is not set # CONFIG_INTEL_DDI is not set CONFIG_INTEL_EDID=y CONFIG_INTEL_INT15=y CONFIG_INTEL_GMA_ACPI=y # CONFIG_INTEL_GMA_SSC_ALTERNATE_REF is not set CONFIG_GFX_GMA=y CONFIG_GFX_GMA_CPU="Sandybridge" CONFIG_GFX_GMA_CPU_VARIANT="Normal" # CONFIG_GFX_GMA_INTERNAL_IS_EDP is not set CONFIG_GFX_GMA_INTERNAL_IS_LVDS=y CONFIG_GFX_GMA_INTERNAL_PORT="LVDS" CONFIG_GFX_GMA_ANALOG_I2C_PORT="PCH_DAC" # CONFIG_DRIVER_INTEL_I210 is not set # CONFIG_DRIVERS_INTEL_MIPI_CAMERA is not set CONFIG_DRIVERS_INTEL_WIFI=y # CONFIG_USE_SAR is not set # CONFIG_DRIVERS_LENOVO_HYBRID_GRAPHICS is not set # CONFIG_DRIVER_MAXIM_MAX77686 is not set # CONFIG_DRIVER_PARADE_PS8625 is not set # CONFIG_DRIVER_PARADE_PS8640 is not set CONFIG_DRIVERS_MC146818=y CONFIG_MAINBOARD_HAS_LPC_TPM=y # CONFIG_LPC_TPM is not set CONFIG_VGA=y CONFIG_DRIVERS_RICOH_RCE822=y # CONFIG_DRIVER_SIEMENS_NC_FPGA is not set # CONFIG_NC_FPGA_NOTIFY_CB_READY is not set # CONFIG_DRIVERS_SIL_3114 is not set # CONFIG_MAINBOARD_HAS_SPI_TPM_CR50 is not set # CONFIG_DRIVER_TI_TPS65090 is not set # CONFIG_DRIVERS_TI_TPS65913 is not set # CONFIG_DRIVERS_TI_TPS65913_RTC is not set # CONFIG_DRIVER_XPOWERS_AXP209 is not set # CONFIG_COMMONLIB_STORAGE is not set # # Security # # # Verified Boot (vboot) # CONFIG_ACPI_SATA_GENERATOR=y CONFIG_ACPI_INTEL_HARDWARE_SLEEP_VALUES=y # CONFIG_ACPI_AMD_HARDWARE_SLEEP_VALUES is not set # CONFIG_BOOT_DEVICE_NOT_SPI_FLASH is not set CONFIG_BOOT_DEVICE_SPI_FLASH=y CONFIG_BOOT_DEVICE_MEMORY_MAPPED=y # CONFIG_BOOT_DEVICE_SUPPORTS_WRITES is not set CONFIG_RTC=y # CONFIG_TPM is not set # CONFIG_MAINBOARD_HAS_TPM_CR50 is not set # # Console # CONFIG_SQUELCH_EARLY_SMP=y # CONFIG_SPKMODEM is not set # CONFIG_CONSOLE_NE2K is not set CONFIG_CONSOLE_CBMEM_BUFFER_SIZE=0x20000 # CONFIG_CONSOLE_CBMEM_DUMP_TO_UART is not set # CONFIG_CONSOLE_SPI_FLASH is not set CONFIG_DEFAULT_CONSOLE_LOGLEVEL_8=y # CONFIG_DEFAULT_CONSOLE_LOGLEVEL_7 is not set # CONFIG_DEFAULT_CONSOLE_LOGLEVEL_6 is not set # CONFIG_DEFAULT_CONSOLE_LOGLEVEL_5 is not set # CONFIG_DEFAULT_CONSOLE_LOGLEVEL_4 is not set # CONFIG_DEFAULT_CONSOLE_LOGLEVEL_3 is not set # CONFIG_DEFAULT_CONSOLE_LOGLEVEL_2 is not set # CONFIG_DEFAULT_CONSOLE_LOGLEVEL_1 is not set # CONFIG_DEFAULT_CONSOLE_LOGLEVEL_0 is not set # CONFIG_CMOS_POST is not set CONFIG_CONSOLE_POST=y # CONFIG_NO_EARLY_BOOTBLOCK_POSTCODES is not set CONFIG_HWBASE_DEBUG_CB=y CONFIG_HAVE_ACPI_RESUME=y # CONFIG_ACPI_HUGE_LOWMEM_BACKUP is not set CONFIG_RESUME_PATH_SAME_AS_BOOT=y CONFIG_HAVE_HARD_RESET=y # CONFIG_HAVE_ROMSTAGE_CONSOLE_SPINLOCK is not set # CONFIG_HAVE_ROMSTAGE_NVRAM_CBFS_SPINLOCK is not set # CONFIG_HAVE_ROMSTAGE_MICROCODE_CBFS_SPINLOCK is not set CONFIG_HAVE_MONOTONIC_TIMER=y # CONFIG_GENERIC_UDELAY is not set # CONFIG_TIMER_QUEUE is not set CONFIG_HAVE_OPTION_TABLE=y # CONFIG_PIRQ_ROUTE is not set CONFIG_HAVE_SMI_HANDLER=y # CONFIG_PCI_IO_CFG_EXT is not set CONFIG_IOAPIC=y CONFIG_USE_WATCHDOG_ON_BOOT=y # CONFIG_GFXUMA is not set CONFIG_HAVE_ACPI_TABLES=y CONFIG_COMMON_FADT=y # CONFIG_ACPI_NHLT is not set # # System tables # # CONFIG_GENERATE_MP_TABLE is not set # CONFIG_GENERATE_PIRQ_TABLE is not set CONFIG_GENERATE_SMBIOS_TABLES=y # # Payload # # CONFIG_PAYLOAD_NONE is not set # CONFIG_PAYLOAD_ELF is not set # CONFIG_PAYLOAD_BAYOU is not set # CONFIG_PAYLOAD_FILO is not set # CONFIG_PAYLOAD_GRUB2 is not set CONFIG_PAYLOAD_SEABIOS=y # CONFIG_PAYLOAD_UBOOT is not set # CONFIG_PAYLOAD_LINUX is not set # CONFIG_PAYLOAD_TIANOCORE is not set CONFIG_PAYLOAD_FILE="payloads/external/SeaBIOS/seabios/out/bios.bin.elf" # CONFIG_SEABIOS_STABLE is not set CONFIG_SEABIOS_MASTER=y # CONFIG_SEABIOS_REVISION is not set CONFIG_SEABIOS_THREAD_OPTIONROMS=y CONFIG_SEABIOS_VGA_COREBOOT=y CONFIG_SEABIOS_BOOTORDER_FILE="" CONFIG_PAYLOAD_VGABIOS_FILE="payloads/external/SeaBIOS/seabios/out/vgabios.bin" CONFIG_SEABIOS_DEBUG_LEVEL=-1 # # Using default SeaBIOS log level # CONFIG_PAYLOAD_OPTIONS="" # CONFIG_PXE is not set CONFIG_COMPRESSED_PAYLOAD_LZMA=y # CONFIG_PAYLOAD_IS_FLAT_BINARY is not set # # Secondary Payloads # # CONFIG_COREINFO_SECONDARY_PAYLOAD is not set # CONFIG_MEMTEST_SECONDARY_PAYLOAD is not set CONFIG_NVRAMCUI_SECONDARY_PAYLOAD=y # CONFIG_TINT_SECONDARY_PAYLOAD is not set # # Debugging # # CONFIG_FATAL_ASSERTS is not set # CONFIG_DEBUG_CBFS is not set CONFIG_HAVE_DEBUG_RAM_SETUP=y # CONFIG_DEBUG_RAM_SETUP is not set # CONFIG_HAVE_DEBUG_CAR is not set CONFIG_HAVE_DEBUG_SMBUS=y # CONFIG_DEBUG_SMBUS is not set # CONFIG_DEBUG_SMI is not set # CONFIG_DEBUG_SMM_RELOCATION is not set # CONFIG_DEBUG_MALLOC is not set # CONFIG_DEBUG_ACPI is not set # CONFIG_DEBUG_SPI_FLASH is not set # CONFIG_TRACE is not set # CONFIG_DEBUG_BOOT_STATE is not set # CONFIG_DEBUG_ADA_CODE is not set # CONFIG_ENABLE_APIC_EXT_ID is not set CONFIG_WARNINGS_ARE_ERRORS=y # CONFIG_POWER_BUTTON_DEFAULT_ENABLE is not set # CONFIG_POWER_BUTTON_DEFAULT_DISABLE is not set # CONFIG_POWER_BUTTON_FORCE_ENABLE is not set # CONFIG_POWER_BUTTON_FORCE_DISABLE is not set # CONFIG_POWER_BUTTON_IS_OPTIONAL is not set # CONFIG_REG_SCRIPT is not set # CONFIG_CREATE_BOARD_CHECKLIST is not set # CONFIG_MAKE_CHECKLIST_PUBLIC is not set # CONFIG_NO_XIP_EARLY_STAGES is not set CONFIG_EARLY_CBMEM_INIT=y # CONFIG_EARLY_CBMEM_LIST is not set CONFIG_RELOCATABLE_MODULES=y CONFIG_BOOTBLOCK_CUSTOM=y On Thu, Apr 26, 2018 at 10:34 PM, Mat <vibrysec(a)gmail.com> wrote: > I've compared configuration before and after. Here is the diff. > > The case is I didn't choose any new options, thus the difference probably > appears because of new options added to coreboot in the meantime. > > 22,23c22,24 > < # CONFIG_COLLECT_TIMESTAMPS is not set > < CONFIG_USE_BLOBS=y > --- > > CONFIG_COLLECT_TIMESTAMPS=y > > # CONFIG_TIMESTAMPS_ON_CONSOLE is not set > > # CONFIG_USE_BLOBS is not set > 26a28 > > CONFIG_CACHE_RELOCATED_RAMSTAGE_OUTSIDE_CBMEM=y > 37d38 > < # CONFIG_VENDOR_A_TREND is not set > 39d39 > < # CONFIG_VENDOR_ABIT is not set > 50d49 > < # CONFIG_VENDOR_AZZA is not set > 56d54 > < # CONFIG_VENDOR_COMPAQ is not set > 60,61d57 > < # CONFIG_VENDOR_DMP is not set > < # CONFIG_VENDOR_ECS is not set > 74d69 > < # CONFIG_VENDOR_IWAVE is not set > 78d72 > < # CONFIG_VENDOR_LANNER is not set > 83d76 > < # CONFIG_VENDOR_MITAC is not set > 85,86d77 > < # CONFIG_VENDOR_NEC is not set > < # CONFIG_VENDOR_NOKIA is not set > 91d81 > < # CONFIG_VENDOR_RCA is not set > 94a85 > > # CONFIG_VENDOR_SCALEWAY is not set > 96c87 > < # CONFIG_VENDOR_SOYO is not set > --- > > # CONFIG_VENDOR_SIFIVE is not set > 100d90 > < # CONFIG_VENDOR_THOMSON is not set > 107d96 > < # CONFIG_VENDOR_WYSE is not set > 128,129c117 > < CONFIG_MMCONF_BASE_ADDRESS=0xf8000000 > < # CONFIG_POST_IO is not set > --- > > CONFIG_POST_IO=y > 132d119 > < CONFIG_HAVE_GBE_BIN=y > 134,135c121,123 > < CONFIG_ID_SECTION_OFFSET=0x80 > < # CONFIG_POST_DEVICE is not set > --- > > CONFIG_HAVE_GBE_BIN=y > > CONFIG_MMCONF_BASE_ADDRESS=0xf0000000 > > CONFIG_POST_DEVICE=y > 153a142 > > # CONFIG_BOARD_LENOVO_W520 is not set > 155a145 > > # CONFIG_BOARD_LENOVO_X131E is not set > 162a153,154 > > # CONFIG_BOARD_LENOVO_Z61T is not set > > # CONFIG_BOARD_LENOVO_BASEBOARD_T520 is not set > 168a161 > > CONFIG_SMBIOS_ENCLOSURE_TYPE=0x09 > 185d177 > < # CONFIG_MAINBOARD_HAS_TPM2 is not set > 202a195 > > CONFIG_SMM_RESERVED_SIZE=0x100000 > 213a207 > > CONFIG_IED_REGION_SIZE=0x400000 > 221c215 > < # CONFIG_CONSOLE_CBMEM is not set > --- > > CONFIG_CONSOLE_CBMEM=y > 223d216 > < CONFIG_HPET_MIN_TICKS=0x80 > 231a225 > > # CONFIG_SOC_QUALCOMM_SDM845 is not set > 255c249 > < # CONFIG_SET_VMX_LOCK_BIT is not set > --- > > CONFIG_SET_VMX_LOCK_BIT=y > 299,300c293 > < CONFIG_NORTHBRIDGE_INTEL_COMMON_MRC_CACHE=y > < CONFIG_MRC_CACHE_SIZE=0x10000 > --- > > # CONFIG_NORTHBRIDGE_INTEL_COMMON_MRC_CACHE is not set > 307a301 > > CONFIG_HPET_MIN_TICKS=0x80 > 323a318,320 > > CONFIG_SOUTHBRIDGE_INTEL_COMMON_SPI=y > > CONFIG_SOUTHBRIDGE_INTEL_COMMON_PIRQ_ACPI_GEN=y > > CONFIG_SOUTHBRIDGE_INTEL_COMMON_RCBA_PIRQ=y > 325c322,323 > < # CONFIG_INTEL_CHIPSET_LOCKDOWN is not set > --- > > CONFIG_SOUTHBRIDGE_INTEL_COMMON_SMM=y > > CONFIG_INTEL_CHIPSET_LOCKDOWN=y > 340a339 > > # CONFIG_H8_SUPPORT_BT_ON_WIFI is not set > 355a355,359 > > # CONFIG_UDK_2017_BINDING is not set > > CONFIG_UDK_2013_VERSION=2013 > > CONFIG_UDK_2015_VERSION=2015 > > CONFIG_UDK_2017_VERSION=2017 > > CONFIG_UDK_VERSION=2013 > 385a390 > > CONFIG_ARCH_ARMV8_EXTENSION=0 > 397a403 > > # CONFIG_ARCH_RISCV_COMPRESSED is not set > 424a431 > > CONFIG_ID_SECTION_OFFSET=0x80 > 430a438,441 > > # CONFIG_COLLECT_TIMESTAMPS_NO_TSC is not set > > CONFIG_COLLECT_TIMESTAMPS_TSC=y > > # CONFIG_PAGING_IN_CACHE_AS_RAM is not set > > # CONFIG_IDT_IN_EVERY_STAGE is not set > 471a483,489 > > CONFIG_CACHE_MRC_SETTINGS=y > > CONFIG_MRC_SETTINGS_CACHE_SIZE=0x10000 > > # CONFIG_MRC_SETTINGS_PROTECT is not set > > # CONFIG_HAS_RECOVERY_MRC_CACHE is not set > > # CONFIG_MRC_CLEAR_NORMAL_CACHE_ON_RECOVERY_RETRAIN is not set > > # CONFIG_MRC_SETTINGS_VARIABLE_DATA is not set > > # CONFIG_MRC_WRITE_NV_LATE is not set > 505a524 > > # CONFIG_DRIVERS_I2C_MAX98373 is not set > 506a526 > > # CONFIG_DRIVERS_I2C_PCA9538 is not set > 512a533 > > # CONFIG_PLATFORM_USES_FSP2_0 is not set > 517a539 > > # CONFIG_INTEL_GMA_SWSMISCI is not set > 534d555 > < CONFIG_MAINBOARD_HAS_LPC_TPM=y > 554a576,583 > > > > # > > # Trusted Platform Module > > # > > # CONFIG_TPM is not set > > # CONFIG_MAINBOARD_HAS_TPM_CR50 is not set > > CONFIG_MAINBOARD_HAS_LPC_TPM=y > > # CONFIG_MAINBOARD_HAS_TPM2 is not set > 563,564d591 > < # CONFIG_TPM is not set > < # CONFIG_MAINBOARD_HAS_TPM_CR50 is not set > 571a599,600 > > CONFIG_CONSOLE_CBMEM_BUFFER_SIZE=0x20000 > > # CONFIG_CONSOLE_CBMEM_DUMP_TO_UART is not set > 583a613,616 > > CONFIG_POST_DEVICE_NONE=y > > # CONFIG_POST_DEVICE_LPC is not set > > # CONFIG_POST_DEVICE_PCI_PCIE is not set > > CONFIG_POST_IO_PORT=0x80 > 641a675 > > # CONFIG_COMPRESSED_PAYLOAD_LZ4 is not set > 642a677 > > CONFIG_COMPRESS_SECONDARY_PAYLOAD=y > > > On Thu, Apr 26, 2018 at 10:23 PM, Mat <vibrysec(a)gmail.com> wrote: > >> People >> I've just upgraded my corebot BIOS. >> To have ctrl <-> fn keyboard switch, I use nvramcui as secondary payload. >> >> The problem is that when I press esc to enter menu, then choose nvramcui, >> the exit operation (with f1 key) results with immediate system hang with >> large number of hexadecimal digits appearing on the screen. >> >> It didn't happen with previous version (around 2018.01) >> >> >> Could you please help? >> >> regards, >> Mat >> > >

1 0

[URGENT] - The KCMA-D8 is going to be removed from coreboot unless people cough up a board status update
by Taiidan＠gmx.com April 27, 2018

April 27, 2018

This is a great board that many use and it DOES work - it needs a status update ASAP to prevent it from being removed in the next release. I am unable to do this myself as I use mine for an important router. At the rate things are going soon there will be no non-development boards that are still in the repos due to the arbitrary increasing of standards.

6 5

New Defects reported by Coverity Scan for coreboot
by scan-admin＠coverity.com April 27, 2018

April 27, 2018

Hi, Please find the latest report on new defect(s) introduced to coreboot found with Coverity Scan. 4 new defect(s) introduced to coreboot found with Coverity Scan. 2 defect(s), reported by Coverity Scan earlier, were marked fixed in the recent build analyzed by Coverity Scan. New defect(s) Reported-by: Coverity Scan Showing 4 of 4 defect(s) ** CID 1390695: (RESOURCE_LEAK) /3rdparty/vboot/host/lib/crossystem.c: 110 in vb2_get_nv_storage() /3rdparty/vboot/host/lib/crossystem.c: 119 in vb2_get_nv_storage() ________________________________________________________________________________________________________ *** CID 1390695: (RESOURCE_LEAK) /3rdparty/vboot/host/lib/crossystem.c: 110 in vb2_get_nv_storage() 104 /* TODO: locking around NV access */ 105 if (!vnc_read) { 106 memset(&cached_ctx, 0, sizeof(cached_ctx)); 107 if (sh && sh->flags & VBSD_NVDATA_V2) 108 cached_ctx.flags |= VB2_CONTEXT_NVDATA_V2; 109 if (0 != vb2_read_nv_storage(&cached_ctx)) >>> CID 1390695: (RESOURCE_LEAK) >>> Variable "sh" going out of scope leaks the storage it points to. 110 return -1; 111 vb2_nv_init(&cached_ctx); 112 113 /* TODO: If vnc.raw_changed, attempt to reopen NVRAM for write 114 * and save the new defaults. If we're able to, log. */ 115 /3rdparty/vboot/host/lib/crossystem.c: 119 in vb2_get_nv_storage() 113 /* TODO: If vnc.raw_changed, attempt to reopen NVRAM for write 114 * and save the new defaults. If we're able to, log. */ 115 116 vnc_read = 1; 117 } 118 >>> CID 1390695: (RESOURCE_LEAK) >>> Variable "sh" going out of scope leaks the storage it points to. 119 return (int)vb2_nv_get(&cached_ctx, param); 120 } 121 122 int vb2_set_nv_storage(enum vb2_nv_param param, int value) 123 { 124 VbSharedDataHeader* sh = VbSharedDataRead(); ** CID 1390694: Insecure data handling (TAINTED_SCALAR) ________________________________________________________________________________________________________ *** CID 1390694: Insecure data handling (TAINTED_SCALAR) /3rdparty/vboot/firmware/lib/tpm_lite/tlcl.c: 215 in StartOSAPSession() 209 sizeof(TPM_NONCE)) != VB2_SUCCESS) { 210 return TPM_E_INTERNAL_ERROR; 211 } 212 213 /* Send OSAP command. */ 214 uint8_t response[TPM_LARGE_ENOUGH_COMMAND_SIZE]; >>> CID 1390694: Insecure data handling (TAINTED_SCALAR) >>> Passing tainted variable "cmd.buffer" to a tainted sink. 215 uint32_t result = TlclSendReceive(cmd.buffer, response, 216 sizeof(response)); 217 if (result != TPM_SUCCESS) { 218 return result; 219 } 220 ** CID 1390693: Insecure data handling (TAINTED_SCALAR) ________________________________________________________________________________________________________ *** CID 1390693: Insecure data handling (TAINTED_SCALAR) /3rdparty/vboot/firmware/lib/tpm_lite/tlcl.c: 1211 in TlclReadPubek() 1205 return TPM_E_INTERNAL_ERROR; 1206 } 1207 1208 /* The response contains the public endorsement key, so use a large 1209 * response buffer. */ 1210 uint8_t response[TPM_LARGE_ENOUGH_COMMAND_SIZE + TPM_RSA_2048_LEN]; >>> CID 1390693: Insecure data handling (TAINTED_SCALAR) >>> Passing tainted variable "cmd.buffer" to a tainted sink. 1211 uint32_t result = TlclSendReceive(cmd.buffer, response, 1212 sizeof(response)); 1213 if (result != TPM_SUCCESS) { 1214 return result; 1215 } 1216 ** CID 1390692: (RESOURCE_LEAK) /3rdparty/vboot/host/lib/crossystem.c: 132 in vb2_set_nv_storage() /3rdparty/vboot/host/lib/crossystem.c: 139 in vb2_set_nv_storage() /3rdparty/vboot/host/lib/crossystem.c: 143 in vb2_set_nv_storage() ________________________________________________________________________________________________________ *** CID 1390692: (RESOURCE_LEAK) /3rdparty/vboot/host/lib/crossystem.c: 132 in vb2_set_nv_storage() 126 127 /* TODO: locking around NV access */ 128 memset(&ctx, 0, sizeof(ctx)); 129 if (sh && sh->flags & VBSD_NVDATA_V2) 130 ctx.flags |= VB2_CONTEXT_NVDATA_V2; 131 if (0 != vb2_read_nv_storage(&ctx)) >>> CID 1390692: (RESOURCE_LEAK) >>> Variable "sh" going out of scope leaks the storage it points to. 132 return -1; 133 vb2_nv_init(&ctx); 134 vb2_nv_set(&ctx, param, (uint32_t)value); 135 136 if (ctx.flags & VB2_CONTEXT_NVDATA_CHANGED) { 137 vnc_read = 0; /3rdparty/vboot/host/lib/crossystem.c: 139 in vb2_set_nv_storage() 133 vb2_nv_init(&ctx); 134 vb2_nv_set(&ctx, param, (uint32_t)value); 135 136 if (ctx.flags & VB2_CONTEXT_NVDATA_CHANGED) { 137 vnc_read = 0; 138 if (0 != vb2_write_nv_storage(&ctx)) >>> CID 1390692: (RESOURCE_LEAK) >>> Variable "sh" going out of scope leaks the storage it points to. 139 return -1; 140 } 141 142 /* Success */ 143 return 0; 144 } /3rdparty/vboot/host/lib/crossystem.c: 143 in vb2_set_nv_storage() 137 vnc_read = 0; 138 if (0 != vb2_write_nv_storage(&ctx)) 139 return -1; 140 } 141 142 /* Success */ >>> CID 1390692: (RESOURCE_LEAK) >>> Variable "sh" going out of scope leaks the storage it points to. 143 return 0; 144 } 145 146 /* 147 * Set a param value, and try to flag it for persistent backup. It's okay if 148 * backup isn't supported (which it isn't, in current designs). It's ________________________________________________________________________________________________________ To view the defects in Coverity Scan visit, https://u2389337.ct.sendgrid.net/wf/click?upn=08onrYu34A-2BWcWUl-2F-2BfV0V0…

1 0

Re: [coreboot] [URGENT] - The KCMA-D8 is going to be removed from coreboot unless people cough up a board status update
by awokd April 27, 2018

April 27, 2018

On Thu, April 26, 2018 5:09 pm, Pierre P wrote: > Hi, > > > I have a KCMA-D8 and am willing to provide a status update but have no > idea what is the formal way to do it. > > I guess it begins with testing a specific version (4.7 or latest source > ?). Please could you point me to a procedure. Looks like there was a board status uploaded a few days ago so it should be OK for a while- https://www.coreboot.org/Supported_Motherboards#asus.2Fkcma-d8. However, to upload your own, check out https://www.coreboot.org/Board_Status. (I had a hard time finding this page and had to end up searching for it, is it linked somewhere on coreboot.org?) See also https://www.mail-archive.com/coreboot@coreboot.org/msg51438.html for a way to review information prior to uploading it.

2 1

Re: [coreboot] Re : Re: When does AMD release the fam15 spectre microcode updates?
by Rudolf Marek April 26, 2018

April 26, 2018

Hi Florentin, Dne 25.4.2018 v 18:42 echelon(a)free.fr napsal(a): > Hello Rudolf, > First thank your for finding these blobs and the hack to use them, and for testing and validating them. > But please could you tell us what was the setup for your tests : > - what was your hardware : cpu + mobo (chipset)? Sorry for the delay, it is Asus F2A85-M and trinity APU CPU fam15h model 10h cpuid: 0x00610f01 > - what was your linux kernel version? It was 4.16 Thanks Rudolf

1 0

Re: [coreboot] x220: cannot modify nvramcui options with newest coreboot (git a96e31b)
by Mat April 26, 2018

April 26, 2018

I've compared configuration before and after. Here is the diff. The case is I didn't choose any new options, thus the difference probably appears because of new options added to coreboot in the meantime. 22,23c22,24 < # CONFIG_COLLECT_TIMESTAMPS is not set < CONFIG_USE_BLOBS=y --- > CONFIG_COLLECT_TIMESTAMPS=y > # CONFIG_TIMESTAMPS_ON_CONSOLE is not set > # CONFIG_USE_BLOBS is not set 26a28 > CONFIG_CACHE_RELOCATED_RAMSTAGE_OUTSIDE_CBMEM=y 37d38 < # CONFIG_VENDOR_A_TREND is not set 39d39 < # CONFIG_VENDOR_ABIT is not set 50d49 < # CONFIG_VENDOR_AZZA is not set 56d54 < # CONFIG_VENDOR_COMPAQ is not set 60,61d57 < # CONFIG_VENDOR_DMP is not set < # CONFIG_VENDOR_ECS is not set 74d69 < # CONFIG_VENDOR_IWAVE is not set 78d72 < # CONFIG_VENDOR_LANNER is not set 83d76 < # CONFIG_VENDOR_MITAC is not set 85,86d77 < # CONFIG_VENDOR_NEC is not set < # CONFIG_VENDOR_NOKIA is not set 91d81 < # CONFIG_VENDOR_RCA is not set 94a85 > # CONFIG_VENDOR_SCALEWAY is not set 96c87 < # CONFIG_VENDOR_SOYO is not set --- > # CONFIG_VENDOR_SIFIVE is not set 100d90 < # CONFIG_VENDOR_THOMSON is not set 107d96 < # CONFIG_VENDOR_WYSE is not set 128,129c117 < CONFIG_MMCONF_BASE_ADDRESS=0xf8000000 < # CONFIG_POST_IO is not set --- > CONFIG_POST_IO=y 132d119 < CONFIG_HAVE_GBE_BIN=y 134,135c121,123 < CONFIG_ID_SECTION_OFFSET=0x80 < # CONFIG_POST_DEVICE is not set --- > CONFIG_HAVE_GBE_BIN=y > CONFIG_MMCONF_BASE_ADDRESS=0xf0000000 > CONFIG_POST_DEVICE=y 153a142 > # CONFIG_BOARD_LENOVO_W520 is not set 155a145 > # CONFIG_BOARD_LENOVO_X131E is not set 162a153,154 > # CONFIG_BOARD_LENOVO_Z61T is not set > # CONFIG_BOARD_LENOVO_BASEBOARD_T520 is not set 168a161 > CONFIG_SMBIOS_ENCLOSURE_TYPE=0x09 185d177 < # CONFIG_MAINBOARD_HAS_TPM2 is not set 202a195 > CONFIG_SMM_RESERVED_SIZE=0x100000 213a207 > CONFIG_IED_REGION_SIZE=0x400000 221c215 < # CONFIG_CONSOLE_CBMEM is not set --- > CONFIG_CONSOLE_CBMEM=y 223d216 < CONFIG_HPET_MIN_TICKS=0x80 231a225 > # CONFIG_SOC_QUALCOMM_SDM845 is not set 255c249 < # CONFIG_SET_VMX_LOCK_BIT is not set --- > CONFIG_SET_VMX_LOCK_BIT=y 299,300c293 < CONFIG_NORTHBRIDGE_INTEL_COMMON_MRC_CACHE=y < CONFIG_MRC_CACHE_SIZE=0x10000 --- > # CONFIG_NORTHBRIDGE_INTEL_COMMON_MRC_CACHE is not set 307a301 > CONFIG_HPET_MIN_TICKS=0x80 323a318,320 > CONFIG_SOUTHBRIDGE_INTEL_COMMON_SPI=y > CONFIG_SOUTHBRIDGE_INTEL_COMMON_PIRQ_ACPI_GEN=y > CONFIG_SOUTHBRIDGE_INTEL_COMMON_RCBA_PIRQ=y 325c322,323 < # CONFIG_INTEL_CHIPSET_LOCKDOWN is not set --- > CONFIG_SOUTHBRIDGE_INTEL_COMMON_SMM=y > CONFIG_INTEL_CHIPSET_LOCKDOWN=y 340a339 > # CONFIG_H8_SUPPORT_BT_ON_WIFI is not set 355a355,359 > # CONFIG_UDK_2017_BINDING is not set > CONFIG_UDK_2013_VERSION=2013 > CONFIG_UDK_2015_VERSION=2015 > CONFIG_UDK_2017_VERSION=2017 > CONFIG_UDK_VERSION=2013 385a390 > CONFIG_ARCH_ARMV8_EXTENSION=0 397a403 > # CONFIG_ARCH_RISCV_COMPRESSED is not set 424a431 > CONFIG_ID_SECTION_OFFSET=0x80 430a438,441 > # CONFIG_COLLECT_TIMESTAMPS_NO_TSC is not set > CONFIG_COLLECT_TIMESTAMPS_TSC=y > # CONFIG_PAGING_IN_CACHE_AS_RAM is not set > # CONFIG_IDT_IN_EVERY_STAGE is not set 471a483,489 > CONFIG_CACHE_MRC_SETTINGS=y > CONFIG_MRC_SETTINGS_CACHE_SIZE=0x10000 > # CONFIG_MRC_SETTINGS_PROTECT is not set > # CONFIG_HAS_RECOVERY_MRC_CACHE is not set > # CONFIG_MRC_CLEAR_NORMAL_CACHE_ON_RECOVERY_RETRAIN is not set > # CONFIG_MRC_SETTINGS_VARIABLE_DATA is not set > # CONFIG_MRC_WRITE_NV_LATE is not set 505a524 > # CONFIG_DRIVERS_I2C_MAX98373 is not set 506a526 > # CONFIG_DRIVERS_I2C_PCA9538 is not set 512a533 > # CONFIG_PLATFORM_USES_FSP2_0 is not set 517a539 > # CONFIG_INTEL_GMA_SWSMISCI is not set 534d555 < CONFIG_MAINBOARD_HAS_LPC_TPM=y 554a576,583 > > # > # Trusted Platform Module > # > # CONFIG_TPM is not set > # CONFIG_MAINBOARD_HAS_TPM_CR50 is not set > CONFIG_MAINBOARD_HAS_LPC_TPM=y > # CONFIG_MAINBOARD_HAS_TPM2 is not set 563,564d591 < # CONFIG_TPM is not set < # CONFIG_MAINBOARD_HAS_TPM_CR50 is not set 571a599,600 > CONFIG_CONSOLE_CBMEM_BUFFER_SIZE=0x20000 > # CONFIG_CONSOLE_CBMEM_DUMP_TO_UART is not set 583a613,616 > CONFIG_POST_DEVICE_NONE=y > # CONFIG_POST_DEVICE_LPC is not set > # CONFIG_POST_DEVICE_PCI_PCIE is not set > CONFIG_POST_IO_PORT=0x80 641a675 > # CONFIG_COMPRESSED_PAYLOAD_LZ4 is not set 642a677 > CONFIG_COMPRESS_SECONDARY_PAYLOAD=y On Thu, Apr 26, 2018 at 10:23 PM, Mat <vibrysec(a)gmail.com> wrote: > People > I've just upgraded my corebot BIOS. > To have ctrl <-> fn keyboard switch, I use nvramcui as secondary payload. > > The problem is that when I press esc to enter menu, then choose nvramcui, > the exit operation (with f1 key) results with immediate system hang with > large number of hexadecimal digits appearing on the screen. > > It didn't happen with previous version (around 2018.01) > > > Could you please help? > > regards, > Mat >

1 0

x220: cannot modify nvramcui options with newest coreboot (git a96e31b)
by Mat April 26, 2018

April 26, 2018

People I've just upgraded my corebot BIOS. To have ctrl <-> fn keyboard switch, I use nvramcui as secondary payload. The problem is that when I press esc to enter menu, then choose nvramcui, the exit operation (with f1 key) results with immediate system hang with large number of hexadecimal digits appearing on the screen. It didn't happen with previous version (around 2018.01) Could you please help? regards, Mat

1 0

Re: [coreboot] lenovo x220, tool to extract binary blobs from BIOS update
by Mat April 26, 2018

April 26, 2018

Thank You On Thu, Apr 26, 2018 at 5:09 PM, Matt DeVillier <matt.devillier(a)gmail.com> wrote: > On Thu, Apr 26, 2018 at 10:05 AM diffusae via coreboot < > coreboot(a)coreboot.org> wrote: > >> >> Don't know, if gbe.bin or ifd.bin is vulnerable. >> > > they are configuration "blobs" not binary blobs, no executable code > > -- > coreboot mailing list: coreboot(a)coreboot.org > https://mail.coreboot.org/mailman/listinfo/coreboot >

1 0

Re: [coreboot] lenovo x220, tool to extract binary blobs from BIOS update
by diffusae April 26, 2018

April 26, 2018

Hi! On 24.04.2018 21:27, Mat wrote: > I'd like to have system updated against spectre, and other possible vulnerabilities as much as possible. With the retpoline option in the Linux kernel, it should be usually safe (see attachment). "IBPB is considered as a good addition to retpoline for Variant 2 mitigation, but your CPU microcode doesn't support it" > 1. If I neutralize me.bin, then maybe updating it does not make sense? > Otherwise, maybe I could use MEanalyzer + its database to get newest ME, then neutralize it? Maybe not, don't think that there is a new ME version availabe? Wasn't it version 9? > place where fixes are possible to appear is CPU microcode? See above. Did you found the matching microcode? > 3. flashdescriptor.bin - can it contain vulnerabilities? If yes, where to get it from? I guess, that's only possible, if you fetch it from the flashed vendor bios. > 4. gbe.bin - the same questions here. Isn't that the firmware of the gigabit ethernet card? I think so. Regards, Reiner --

2 1

Re: [coreboot] [RFH] Status of the Lenovo X201
by Nicola Corna April 26, 2018

April 26, 2018

April 18, 2018 3:54 PM, "Kyösti Mälkki" <kyosti.malkki(a)gmail.com> wrote: > Having romstage stack smashed seems irrelevant for the no-boot issue. > That nehalem raminit code, struct raminfo, seems to eat a lot of stack > and an error message for that case was added with commit 2c3fd49. You > could try parent of that commit, but rumour is lenovo/x201 was a > no-boot case long time before that. I'll do some tests to find which commit caused the no-boot. > I can see int15h messages interleaved with SMP init, that looks odd to > me. Also, did the log really end inside 0:1f.0 PCI finalize or was > usbdebug logging just interrupted for some reason at that point? The log really ends there. > Try current master with default config instead of a one derived from > last reported board_status. There has been lot of changes on > framebuffer kconfig settings. And we probably need the .config you > used to assess what's happening there. I've tried with the current master on a fresh config, but the result is the same. Attached you can find the log and the .config. If needed I can do some tests on this PC. Nicola

3 2