[Bug 1575971] [NEW] sbsign - gaps in the section table may result in different checksums

[mat troi]

Public bug reported:

sbsign -est/test-key.rsa --cert openssl_test/test-cert.pem --output shim_delete_please  build/amd64/shim.efi
warning: gap in section table:
    .dynsym : 0x000e4a00 - 0x000f1600,
    /14     : 0x000f1752 - 0x000f1f52,
gaps in the section table may result in different checksums
warning: data remaining[990720 vs 1092659]: gaps between PE/COFF sections?

When signing my shim.efi binary with sbsigntool I received the above
warnings.  I did a  little bit of googling and found if the shim is
compiled with gnu-efi 3.0q or earlier, this could be an issue; but my
shim.efi is compiled with gnu-efi 3.0u.

The end result from the error cause my shim not bootable.  I tried to
sign with pesign and everything works, so I think the error is in
sbsigntool.

** Affects: sbsigntool (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to sbsigntool in Ubuntu.
https://bugs.launchpad.net/bugs/1575971

Title:
  sbsign - gaps in the section table may result in different checksums

Status in sbsigntool package in Ubuntu:
  New

Bug description:
  sbsign -est/test-key.rsa --cert openssl_test/test-cert.pem --output shim_delete_please  build/amd64/shim.efi
  warning: gap in section table:
      .dynsym : 0x000e4a00 - 0x000f1600,
      /14     : 0x000f1752 - 0x000f1f52,
  gaps in the section table may result in different checksums
  warning: data remaining[990720 vs 1092659]: gaps between PE/COFF sections?

  When signing my shim.efi binary with sbsigntool I received the above
  warnings.  I did a  little bit of googling and found if the shim is
  compiled with gnu-efi 3.0q or earlier, this could be an issue; but my
  shim.efi is compiled with gnu-efi 3.0u.

  The end result from the error cause my shim not bootable.  I tried to
  sign with pesign and everything works, so I think the error is in
  sbsigntool.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/sbsigntool/+bug/1575971/+subscriptions