April 2018 - coreboot - mail.coreboot.org

Re: [coreboot] lenovo x220, tool to extract binary blobs from BIOS update
by diffusae April 26, 2018

April 26, 2018

Hello! On 24.04.2018 21:27, Mat wrote: > That's why I (believe I) need the blobs from the newest update. Is the reasoning correct, or I could do it more wise? AFAIK: You only really need the microcode update from Intel. Don't know, if gbe.bin or ifd.bin is vulnerable. If you apply the microcode cpu206A7 from 2018-02-07 you will get the following results. Regards, Reiner --

2 1

ANN: "corporate" group on gerrit
by Patrick Georgi April 26, 2018

April 26, 2018

Hi everybody, yesterday I created a user group "corporate" on review.coreboot.org and added all people who I assume are paid for working on coreboot (based on their email address domains). Corporate contributions tend to be high volume and there are usually multiple people interested in getting them through review, so they're typically well-covered with regard to review activity. At the same time due to these properties they risk drowning out individual contributions which are often smaller and by developers without large teams supporting them: Simple by the number of commits and the amount of activity, corporate contributions tend to fill up the first page of commits in gerrit (which is sorted by activity), pushing other contributions into the back catalog. Using the group as a filter https://review.coreboot.org/q/is:open+-ownerin:corporate provides a view of just the changes that might otherwise be overlooked. If you want you can add it as a shortcut to Gerrit's menu at https://review.coreboot.org/settings/#Menu (entries defined here appear in the "Your" menu) The group isn't perfect (there are some folks still missing, and I'm still tuning my scripts to help with automatic group maintenance), but I hope it's already a helpful tool for increasing visibility of non-corporate community members' contributions. Regards, Patrick Georgi -- Google Germany GmbH, ABC-Str. 19, 20354 Hamburg Registergericht und -nummer: Hamburg, HRB 86891, Sitz der Gesellschaft: Hamburg Geschäftsführer: Paul Manicle, Halimah DeLaine Prado

1 0

Re: [coreboot] ACPI error booting Windows
by Matt DeVillier April 25, 2018

April 25, 2018

you can take a look at all my configs as as well as all the patches in my tree in my github there. They aren't all fully up to date, but should be useful. Check Caroline, Cave, Chell, Sentry for Skylake CrOS devices, which should all be the same ACPI-wise as kblrvp3. I haven't pushed the config for the KabyLake CrOS device yet since it's not yet released, but it it doesn't require any additional patches from what's in my tree now. On Wed, Apr 25, 2018 at 9:02 PM Alex Feinman <alexfeinman(a)hotmail.com> wrote: > That unfortunately did not help. Would it be possible to take a look at > your .config? Perhaps I'll be able to spot something > ------------------------------ > *From:* Matt DeVillier <matt.devillier(a)gmail.com> > *Sent:* Wednesday, April 25, 2018 4:14 PM > *To:* alexfeinman(a)hotmail.com > *Cc:* coreboot > *Subject:* Re: [coreboot] ACPI error booting Windows > > I have Windows booting on a KBL CrOS device, and looking at my tree, > pretty sure the only change I have that would potentially address that > error is adding the pcon value to the IGD ACPI OpRegion header: > > https://github.com/MattDevo/coreboot/commit/3349065354709c85276555516827246… > > there were a few others but they've all since been merged upstream > > > On Wed, Apr 25, 2018 at 6:00 PM Alex Feinman <alexfeinman(a)hotmail.com> > wrote: > > I've built a Coreboot image (from the HEAD) for my custom Kaby Lake board. > The build uses Chrome EC and is based on kblrvp3 mainboard configuration. > Linux runs fine, but when I attempt to install Windows 10 (or boot a > preinstalled Windows image from USB) I instantly get ACPI_BIOS_ERROR > (0xC00000A5). There is a Microsoft document that provides a large amount of > possible reasons for this error, however I can't even narrow it down > because cleverly Windows 10 no longer prints the bug check parameters, at > least not in this case. > > I would appreciate some pointers if possible. > > Thank you > Alex > -- > coreboot mailing list: coreboot(a)coreboot.org > https://mail.coreboot.org/mailman/listinfo/coreboot > >

1 0

Re: [coreboot] ACPI error booting Windows
by Alex Feinman April 25, 2018

April 25, 2018

That unfortunately did not help. Would it be possible to take a look at your .config? Perhaps I'll be able to spot something ________________________________ From: Matt DeVillier <matt.devillier(a)gmail.com> Sent: Wednesday, April 25, 2018 4:14 PM To: alexfeinman(a)hotmail.com Cc: coreboot Subject: Re: [coreboot] ACPI error booting Windows I have Windows booting on a KBL CrOS device, and looking at my tree, pretty sure the only change I have that would potentially address that error is adding the pcon value to the IGD ACPI OpRegion header: https://github.com/MattDevo/coreboot/commit/3349065354709c85276555516827246… there were a few others but they've all since been merged upstream On Wed, Apr 25, 2018 at 6:00 PM Alex Feinman <alexfeinman(a)hotmail.com<mailto:alexfeinman@hotmail.com>> wrote: I've built a Coreboot image (from the HEAD) for my custom Kaby Lake board. The build uses Chrome EC and is based on kblrvp3 mainboard configuration. Linux runs fine, but when I attempt to install Windows 10 (or boot a preinstalled Windows image from USB) I instantly get ACPI_BIOS_ERROR (0xC00000A5). There is a Microsoft document that provides a large amount of possible reasons for this error, however I can't even narrow it down because cleverly Windows 10 no longer prints the bug check parameters, at least not in this case. I would appreciate some pointers if possible. Thank you Alex -- coreboot mailing list: coreboot(a)coreboot.org<mailto:coreboot@coreboot.org> https://mail.coreboot.org/mailman/listinfo/coreboot

1 0

Re: [coreboot] ACPI error booting Windows
by Andrey Korolyov April 25, 2018

April 25, 2018

On Thu, Apr 26, 2018 at 1:59 AM, Alex Feinman <alexfeinman(a)hotmail.com> wrote: > I've built a Coreboot image (from the HEAD) for my custom Kaby Lake board. > The build uses Chrome EC and is based on kblrvp3 mainboard configuration. > Linux runs fine, but when I attempt to install Windows 10 (or boot a > preinstalled Windows image from USB) I instantly get ACPI_BIOS_ERROR > (0xC00000A5). There is a Microsoft document that provides a large amount of > possible reasons for this error, however I can't even narrow it down because > cleverly Windows 10 no longer prints the bug check parameters, at least not > in this case. > > I would appreciate some pointers if possible. > If you are able to obtain debug build of the failing O/S (or earlier version, if it runs on KBL), it would be possible to find a clue why exactly Windows ACPI parser is nagging.

1 0

Re: [coreboot] ACPI error booting Windows
by Matt DeVillier April 25, 2018

April 25, 2018

I have Windows booting on a KBL CrOS device, and looking at my tree, pretty sure the only change I have that would potentially address that error is adding the pcon value to the IGD ACPI OpRegion header: https://github.com/MattDevo/coreboot/commit/3349065354709c85276555516827246… there were a few others but they've all since been merged upstream On Wed, Apr 25, 2018 at 6:00 PM Alex Feinman <alexfeinman(a)hotmail.com> wrote: > I've built a Coreboot image (from the HEAD) for my custom Kaby Lake board. > The build uses Chrome EC and is based on kblrvp3 mainboard configuration. > Linux runs fine, but when I attempt to install Windows 10 (or boot a > preinstalled Windows image from USB) I instantly get ACPI_BIOS_ERROR > (0xC00000A5). There is a Microsoft document that provides a large amount of > possible reasons for this error, however I can't even narrow it down > because cleverly Windows 10 no longer prints the bug check parameters, at > least not in this case. > > I would appreciate some pointers if possible. > > Thank you > Alex > -- > coreboot mailing list: coreboot(a)coreboot.org > https://mail.coreboot.org/mailman/listinfo/coreboot

1 0

ACPI error booting Windows
by Alex Feinman April 25, 2018

April 25, 2018

I've built a Coreboot image (from the HEAD) for my custom Kaby Lake board. The build uses Chrome EC and is based on kblrvp3 mainboard configuration. Linux runs fine, but when I attempt to install Windows 10 (or boot a preinstalled Windows image from USB) I instantly get ACPI_BIOS_ERROR (0xC00000A5). There is a Microsoft document that provides a large amount of possible reasons for this error, however I can't even narrow it down because cleverly Windows 10 no longer prints the bug check parameters, at least not in this case. I would appreciate some pointers if possible. Thank you Alex

1 0

When does AMD release the fam15 spectre microcode updates?
by Taiidan＠gmx.com April 25, 2018

April 25, 2018

They said they would be releasing opteron microcode updates in a few weeks but it has been over a month and I am wondering when this is going to happen or if it already has and I should re-compile coreboot? https://www.amd.com/en/corporate/speculative-execution "We expect to make updates available for our previous generation products over the coming weeks." Thanks!

6 10

Re: [coreboot] lenovo x220, tool to extract binary blobs from BIOS update
by Mat April 24, 2018

April 24, 2018

> not sure what you are looking for, but I guess this is what you need, > (microcode updates are publicly available and gfx init is > open source) I'd like to have system updated against spectre, and other possible vulnerabilities as much as possible. If lenovo (or any other vendor) releases updates, which in this case address spectre vulnerability, then I'd need to get binary blobs from this update, compare them against previous BIOS version blobs and in case they differ, bundle them into coreboot BIOS, then save coreboot onto x220. The extra step I do is intel ME neutralization. That's why I (believe I) need the blobs from the newest update. Is the reasoning correct, or I could do it more wise? blobs I've initially taken are: flashregion_0_flashdescriptor.bin flashregion_2_intel_me.bin flashregion_3_gbe.bin but: 1. If I neutralize me.bin, then maybe updating it does not make sense? Otherwise, maybe I could use MEanalyzer + its database to get newest ME, then neutralize it? 2. as I know spectre fixes reside in CPU microcodes. If so, then maybe coreboot can be compiled with newest CPU microcode for given CPUID (I've found one on CPUmicrocodes @ github). Or maybe the only place where fixes are possible to appear is CPU microcode? 3. flashdescriptor.bin - can it contain vulnerabilities? If yes, where to get it from? 4. gbe.bin - the same questions here.

1 0

lenovo x220, tool to extract binary blobs from BIOS update
by Mat April 24, 2018

April 24, 2018

I have coreboot running on my x220. lately lenovo released firmware update (8duj29us.exe from https://support.lenovo.com/pl/en/downloads/ds018805) and I'd like to update coreboot with new blobs from that BIOS. Unfortunatelly I have difficulties with extracting binary blobs from it and need help. I was able to extract *.exe file with innoextract, but then running ifdtool to each file from extracted directory does not bring any success. I also tried MEAnalyzer on it, but no success at all. Please help

1 0