New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 922263 link

Starred by 1 user

Issue metadata

Status: Untriaged
Owner: ----
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Chrome
Pri: 2
Type: Bug



Sign in to add a comment

attestationd crashes if TPM rejects AIKcert from PCA

Project Member Reported by apronin@chromium.org, Jan 15

Issue description

[Spawned from issue 922244; see it for full logs]

When the AIK certificate sent by the the PCA cannot be decrypted by the TPM, it returns RC_VALUE (issue 922244 is a case when AIKcert was encrypted with a wrong EK). After that attestationd crashes:

2019-01-15T11:24:23.902902-08:00 INFO cryptohomed[1320]: Started attestation thread.
2019-01-15T14:09:36.698525-08:00 ERR attestationd[1237]: ActivateIdentityForTpm2: Failed to activate: TPM_RC_VALUE
2019-01-15T14:09:36.734473-08:00 ERR attestationd[1237]: ActivateAttestationKeyInternal: Failed to activate identity 0.
2019-01-15T14:10:19.994270-08:00 ERR attestationd[1237]: ActivateIdentityForTpm2: Failed to activate: TPM_RC_VALUE
2019-01-15T14:10:20.029484-08:00 ERR attestationd[1237]: ActivateAttestationKeyInternal: Failed to activate identity 0.
2019-01-15T14:23:06.317849-08:00 CRIT attestationd[1237]: Check failed: sequence_checker_.CalledOnValidSequence(). #012/usr/lib64/libbase-core-456626.so(_ZN4base5debug10StackTraceC1Em+0x1c) [0x78c3ad09c61c]#012
2019-01-15T14:23:06.357320-08:00 WARNING crash_reporter[29121]: [user] Received crash notification for attestationd[1237] sig 6, user 247 group 247 (developer build - not testing - always dumping)
2019-01-15T14:23:06.420953-08:00 INFO crash_reporter[29121]: Stored minidump to /var/spool/crash/attestationd.20190115.142306.1237.dmp
2019-01-15T14:23:06.421375-08:00 INFO crash_reporter[29121]: Leaving core file at /proc/self/fd/5/attestationd.20190115.142306.1237.core due to developer image
2019-01-15T14:23:06.421863-08:00 WARNING crash_reporter[29121]: [ARC] Received crash notification for attestationd[1237] sig 6, user 247 group 247 (ignoring - crash origin is not ARC)
2019-01-15T14:23:06.429035-08:00 WARNING kernel: [10728.518162] init: attestationd main process (1237) killed by ABRT signal
For graphics-related bugs, please copy/paste the contents of the
about://gpu page at the end of this report.

RC_VALUE is WAI, but the crash is unexpected.
 
Cc: louiscollard@chromium.org
Labels: -Pri-3 Cros-Hwsec-Ready Pri-2

Comment 2 by louiscollard@chromium.org, Jan 18 (4 days ago)

Cc: cylai@chromium.org
Leo do you want to take a look at this?

Sign in to add a comment