From nobody Fri May 3 01:04:17 2024 Delivered-To: importer@patchew.org Received-SPF: pass (zohomail.com: domain of groups.io designates 66.175.222.108 as permitted sender) client-ip=66.175.222.108; envelope-from=bounce+27952+72990+1787277+3901457@groups.io; helo=mail02.groups.io; Authentication-Results: mx.zohomail.com; dkim=pass; spf=pass (zohomail.com: domain of groups.io designates 66.175.222.108 as permitted sender) smtp.mailfrom=bounce+27952+72990+1787277+3901457@groups.io ARC-Seal: i=1; a=rsa-sha256; t=1616006613; cv=none; d=zohomail.com; s=zohoarc; b=KoosqbMtHmR+tlRtdy10Iv4iJzElXxx9IHL6WANp/SfsbI3RJyb+VLiz/j9pHNbb1+9Wfpy1v3CiGQ1KXwwXkFFL7vS6uOpe2RPp/0inL82PUwoBq27tGcDSkcO7V4/DxVbOVu46oPQdJiDymSnQOrPuIBab/+MfcSCoNOofx+Q= ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=zohomail.com; s=zohoarc; t=1616006613; h=Content-Transfer-Encoding:Date:From:List-Id:List-Unsubscribe:MIME-Version:Message-ID:Reply-To:Sender:Subject:To; bh=kMGZ+6QuH9Gc2FGFViND3CJa7A1HDBsqilIrUxITlhM=; b=Adhhjy0/PqaHsIF19Du5mu73ikNOX+9pRMeAmJYvyf/K2u1ySVjo8dr0fBFXj436oCbi47BE4bIoqJ+PzQHrH58J7wKeoV+544hEUKy/+8d/Z4XHcVeu0GcTBHC6ANd6JL8x+gz9p/UxHJUAy/lenQh+KdbyZkmHIRtu1DXYYkE= ARC-Authentication-Results: i=1; mx.zohomail.com; dkim=pass; spf=pass (zohomail.com: domain of groups.io designates 66.175.222.108 as permitted sender) smtp.mailfrom=bounce+27952+72990+1787277+3901457@groups.io Received: from mail02.groups.io (mail02.groups.io [66.175.222.108]) by mx.zohomail.com with SMTPS id 1616006613469181.57165582664572; Wed, 17 Mar 2021 11:43:33 -0700 (PDT) Return-Path: X-Received: by 127.0.0.2 with SMTP id Pc9TYY1788612xsWb6EhrYnP; Wed, 17 Mar 2021 11:43:33 -0700 X-Received: from foss.arm.com (foss.arm.com [217.140.110.172]) by mx.groups.io with SMTP id smtpd.web12.1028.1615995564481033712 for ; Wed, 17 Mar 2021 08:39:24 -0700 X-Received: from usa-sjc-imap-foss1.foss.arm.com (unknown [10.121.207.14]) by usa-sjc-mx-foss1.foss.arm.com (Postfix) with ESMTP id C6D93ED1 for ; Wed, 17 Mar 2021 08:39:22 -0700 (PDT) X-Received: from oss-tx204.lab.cambridge.arm.com (usa-sjc-imap-foss1.foss.arm.com [10.121.207.14]) by usa-sjc-imap-foss1.foss.arm.com (Postfix) with ESMTPSA id 706423F792 for ; Wed, 17 Mar 2021 08:39:22 -0700 (PDT) From: "Ross Burton" To: devel@edk2.groups.io Subject: [edk2-devel] [PATCH] OvmfPkg: strip build paths in release builds Date: Wed, 17 Mar 2021 15:39:18 +0000 Message-Id: <20210317153918.591140-1-ross.burton@arm.com> MIME-Version: 1.0 Precedence: Bulk List-Unsubscribe: Sender: devel@edk2.groups.io List-Id: Mailing-List: list devel@edk2.groups.io; contact devel+owner@edk2.groups.io Reply-To: devel@edk2.groups.io,ross@burtonini.com X-Gm-Message-State: aPiavQVnaDWhjs4NuB0EoSkfx1787277AA= Content-Transfer-Encoding: quoted-printable DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=groups.io; q=dns/txt; s=20140610; t=1616006613; bh=bdOml6X94p9QVbseOkruR6bP4G+2vmq1WhfIKJFhj9M=; h=Date:From:Reply-To:Subject:To; b=cEh0F+0MBqnmoxtuauZ9nnIuMD3WLQJmR/Jp8jgKFWOCpfmnEq6E9dkWpr/tBrLIMP+ mJlsX9vZA7HJTnkEudBF1Q98C4kh3nIXxiUPGlCRqOPsEPo6o4+kEg8JhaSY2xk7WMy1W lIaGpaif3yrCKyIBhYjsU+AtmXlU0oDrRo4= X-ZohoMail-DKIM: pass (identity @groups.io) Content-Type: text/plain; charset="utf-8" GenFw will embed a NM10 section which contains the path to the input file, which means the output files have build paths embedded in them. To reduce information leakage and ensure reproducible builds, pass --zero in release builds to remove this information. Ref: https://bugzilla.tianocore.org/show_bug.cgi?id=3D3256 Change-Id: Ie607893b979674e237cf04ead5c7690d7b1aedaf Signed-off-by: Ross Burton --- OvmfPkg/AmdSev/AmdSevX64.dsc | 1 + OvmfPkg/Bhyve/BhyveX64.dsc | 1 + OvmfPkg/OvmfPkgIa32.dsc | 2 ++ OvmfPkg/OvmfPkgIa32X64.dsc | 1 + OvmfPkg/OvmfPkgX64.dsc | 1 + OvmfPkg/OvmfXen.dsc | 1 + 6 files changed, 7 insertions(+) diff --git a/OvmfPkg/AmdSev/AmdSevX64.dsc b/OvmfPkg/AmdSev/AmdSevX64.dsc index 65c42284d9..69a05feea9 100644 --- a/OvmfPkg/AmdSev/AmdSevX64.dsc +++ b/OvmfPkg/AmdSev/AmdSevX64.dsc @@ -78,6 +78,7 @@ GCC:*_*_X64_GENFW_FLAGS =3D --keepexceptiontable INTEL:*_*_X64_GENFW_FLAGS =3D --keepexceptiontable !endif + RELEASE_*_*_GENFW_FLAGS =3D --zero =20 # # Disable deprecated APIs. diff --git a/OvmfPkg/Bhyve/BhyveX64.dsc b/OvmfPkg/Bhyve/BhyveX64.dsc index 4a1cdf5aca..132f55cf69 100644 --- a/OvmfPkg/Bhyve/BhyveX64.dsc +++ b/OvmfPkg/Bhyve/BhyveX64.dsc @@ -76,6 +76,7 @@ GCC:*_*_X64_GENFW_FLAGS =3D --keepexceptiontable INTEL:*_*_X64_GENFW_FLAGS =3D --keepexceptiontable !endif + RELEASE_*_*_GENFW_FLAGS =3D --zero =20 # # Disable deprecated APIs. diff --git a/OvmfPkg/OvmfPkgIa32.dsc b/OvmfPkg/OvmfPkgIa32.dsc index 1eaf3e99c6..ce20f09df8 100644 --- a/OvmfPkg/OvmfPkgIa32.dsc +++ b/OvmfPkg/OvmfPkgIa32.dsc @@ -90,6 +90,8 @@ =20 !include NetworkPkg/NetworkBuildOptions.dsc.inc =20 + RELEASE_*_*_GENFW_FLAGS =3D --zero + [BuildOptions.common.EDKII.DXE_RUNTIME_DRIVER] GCC:*_*_*_DLINK_FLAGS =3D -z common-page-size=3D0x1000 XCODE:*_*_*_DLINK_FLAGS =3D -seg1addr 0x1000 -segalign 0x1000 diff --git a/OvmfPkg/OvmfPkgIa32X64.dsc b/OvmfPkg/OvmfPkgIa32X64.dsc index 4a5a430147..97cc438250 100644 --- a/OvmfPkg/OvmfPkgIa32X64.dsc +++ b/OvmfPkg/OvmfPkgIa32X64.dsc @@ -84,6 +84,7 @@ GCC:*_*_X64_GENFW_FLAGS =3D --keepexceptiontable INTEL:*_*_X64_GENFW_FLAGS =3D --keepexceptiontable !endif + RELEASE_*_*_GENFW_FLAGS =3D --zero =20 # # Disable deprecated APIs. diff --git a/OvmfPkg/OvmfPkgX64.dsc b/OvmfPkg/OvmfPkgX64.dsc index d4d601b444..f544fb04bf 100644 --- a/OvmfPkg/OvmfPkgX64.dsc +++ b/OvmfPkg/OvmfPkgX64.dsc @@ -84,6 +84,7 @@ GCC:*_*_X64_GENFW_FLAGS =3D --keepexceptiontable INTEL:*_*_X64_GENFW_FLAGS =3D --keepexceptiontable !endif + RELEASE_*_*_GENFW_FLAGS =3D --zero =20 # # Disable deprecated APIs. diff --git a/OvmfPkg/OvmfXen.dsc b/OvmfPkg/OvmfXen.dsc index 507029404f..fcaa35acf1 100644 --- a/OvmfPkg/OvmfXen.dsc +++ b/OvmfPkg/OvmfXen.dsc @@ -74,6 +74,7 @@ GCC:*_*_X64_GENFW_FLAGS =3D --keepexceptiontable INTEL:*_*_X64_GENFW_FLAGS =3D --keepexceptiontable !endif + RELEASE_*_*_GENFW_FLAGS =3D --zero =20 # # Disable deprecated APIs. --=20 2.25.1 -=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D- Groups.io Links: You receive all messages sent to this group. View/Reply Online (#72990): https://edk2.groups.io/g/devel/message/72990 Mute This Topic: https://groups.io/mt/81410931/1787277 Group Owner: devel+owner@edk2.groups.io Unsubscribe: https://edk2.groups.io/g/devel/unsub [importer@patchew.org] -=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-