[Bug 1459872] Update Released

[Steve Langasek]

The verification of the Stable Release Update for grub2 has completed
successfully and the package has now been released to -updates.
Subsequently, the Ubuntu Stable Release Updates Team is being
unsubscribed and will not receive messages about this bug report.  In
the event that you encounter a regression using the package from
-updates please report a new bug using ubuntu-bug and tag the bug report
regression-update so we can easily find any regressions.

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to grub2 in Ubuntu.
https://bugs.launchpad.net/bugs/1459872

Title:
  using progress mod w/ net files crashes

Status in grub2 package in Ubuntu:
  Fix Released
Status in grub2 source package in Trusty:
  Fix Released
Status in grub2 source package in Vivid:
  Fix Committed
Status in grub2 source package in Wily:
  Fix Released

Bug description:
  [Impact]
  If the progress module is loaded, GRUB will crash when loading files over the network. A common scenario where this occurs is when building a GRUB image for EFI netbooting w/ all modules included. MAAS does this when generating it's grubnet EFI binary. MAAS currently works around this by explicitly blacklisting the progress module - but only on arm64 (we'd only observed this on arm64 at the time, and didn't yet know the root cause).

  While the easy workaround is to just omit the progress module, it
  isn't at all obvious from the crash that progress.mod is the cause.

  [Test Case]
  The simple case is to create a grub image with *just* the progress module and netboot it. For arm64:

  $ grub-mkimage -v -o grubaa64.efi -O arm64-efi -d
  /home/dannf/x/usr/lib/grub/arm64-efi progress

  Booting the resulting image:

  [1] PXE
  [2] ubuntu
  [3] Shell
  [4] Boot Manager
  Start: 1
  ..

  Synchronous Exception at 0x0000000FF7C3DDC8

  Synchronous Exception at 0x0000000FF7C3DDC8

  Synchronous Exception at 0x0000000FF7C3DDC8

  Synchronous Exception at 0x0000000FF7C3DDC8
  [...]

  [Regression Risk]
  The upstream fix for this is a pretty surgical fix to check for NULL before dereferencing a pointer.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/1459872/+subscriptions