load_uefi_certs: Couldn't get size: 0x800000000000000e

[Paul Menzel]

Dear Josh,


On 04.10.19 14:24, Paul Menzel wrote:

> On a Dell Latitude E7250 with a self-built Linux 5.4-rc1 the error message
> below is printed on the screen.
> 
>      [    0.658664] Couldn't get size: 0x800000000000000e
> 
> Here are the message from the ring buffer (`dmesg`).
> 
> ```
> [    0.658329] calling  load_uefi_certs+0x0/0x217 @ 1
> [    0.658472] integrity: Loading X.509 certificate: UEFI:db
> [    0.658544] integrity: Loaded X.509 cert 'Microsoft Windows Production PCA 2011: a92902398e16c49778cd90f99e4f9ae17c55af53'
> [    0.658545] integrity: Loading X.509 certificate: UEFI:db
> [    0.658606] integrity: Loaded X.509 cert 'Microsoft Corporation UEFI CA 2011: 13adbf4309bd82709c8cd54f316ed522988a1bd4'
> [    0.658664] Couldn't get size: 0x800000000000000e
> [    0.658689] Couldn't get UEFI MokListRT
> [    0.658768] initcall load_uefi_certs+0x0/0x217 returned 0 after 426 usecs
> ```
> 
> Could this error message be improved, to give the user a hint, what is wrong,
> what the consequences are, and what should be done?
> 
> Should the message below be `pr_error`, and the other error debug?
> 
>      pr_info("Couldn't get UEFI MokListRT\n");
> 
> Please find the Linux messages and (`make savedefconfig`) configuration
> attached.
> 
> Do you know more about the reason, and if the Linux code can handle it more
> gracefully?
> 
> Commit 15ea0e1e (efi: Import certificates from UEFI Secure Boot) was already
> added in Linux 5.0, and I do not remember seeing it with Debian’s default
> Linux kernel. No idea, what is configured differently, or I just missed it.

I am still getting this with Linux 5.4-rc5.


Kind regards,

Paul