<feed xmlns='http://www.w3.org/2005/Atom'>
<title>efi-boot-shim.git/Make.defaults, branch 15.7</title>
<subtitle> (mirror of https://github.com/vyos/efi-boot-shim.git)
</subtitle>
<id>https://git.amelek.net/vyos/efi-boot-shim.git/atom?h=15.7</id>
<link rel='self' href='https://git.amelek.net/vyos/efi-boot-shim.git/atom?h=15.7'/>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/efi-boot-shim.git/'/>
<updated>2022-11-14T19:04:12+00:00</updated>
<entry>
<title>Add -malign-double to IA32 compiler flags</title>
<updated>2022-11-14T19:04:12+00:00</updated>
<author>
<name>Nicholas Bishop</name>
<email>nicholasbishop@google.com</email>
</author>
<published>2022-10-06T20:08:56+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/efi-boot-shim.git/commit/?id=0cf43ac6d78c6f47f8b91210639ac1aa63665f0b'/>
<id>urn:sha1:0cf43ac6d78c6f47f8b91210639ac1aa63665f0b</id>
<content type='text'>
This changes the alignment of UINT64 data to 8 bytes on IA32, which
matches EDK2's understanding of alignment. In particular this change
affects the offset where shim writes `EFI_LOADED_IMAGE.ImageSize`.

Fixes https://github.com/rhboot/shim/issues/515

Signed-off-by: Nicholas Bishop &lt;nicholasbishop@google.com&gt;
</content>
</entry>
<entry>
<title>Modernize aarch64</title>
<updated>2022-05-13T19:08:56+00:00</updated>
<author>
<name>Peter Jones</name>
<email>pjones@redhat.com</email>
</author>
<published>2022-04-26T21:47:56+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/efi-boot-shim.git/commit/?id=d6eb9c6cc7826cea02f31580ac0e56726ae80ad5'/>
<id>urn:sha1:d6eb9c6cc7826cea02f31580ac0e56726ae80ad5</id>
<content type='text'>
Now that we've got "objcopy --target efi-app-aarch64" and similar, we
don't have to go through heroic effort to try to make aarch64 builds
work.

This patch updates to a gnu-efi branch that has newer aarch64 crt0 code,
and makes efi_aarch64_efi.lds be nearly identical to efi_x86_64_efi.lds.

Signed-off-by: Peter Jones &lt;pjones@redhat.com&gt;
</content>
</entry>
<entry>
<title>shim: Don't parse load options if invoked from removable media path</title>
<updated>2021-10-12T14:50:44+00:00</updated>
<author>
<name>Julian Andres Klode</name>
<email>julian.klode@canonical.com</email>
</author>
<published>2021-08-04T08:46:45+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/efi-boot-shim.git/commit/?id=b43758465a553d289b9f92aa5892244f19c1a76d'/>
<id>urn:sha1:b43758465a553d289b9f92aa5892244f19c1a76d</id>
<content type='text'>
We see various reports of boot failures because the generated
boot entries contain garbage/tagging that we do not expect, and
that we then parse as a second stage boot loader.
</content>
</entry>
<entry>
<title>More minor improvements to support for COMPILER=clang</title>
<updated>2021-09-07T21:05:04+00:00</updated>
<author>
<name>Peter Jones</name>
<email>pjones@redhat.com</email>
</author>
<published>2021-08-02T17:09:28+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/efi-boot-shim.git/commit/?id=116a8310ab93d803fa51f9ba9f3d6d0cb691e2bf'/>
<id>urn:sha1:116a8310ab93d803fa51f9ba9f3d6d0cb691e2bf</id>
<content type='text'>
A couple of places snuck in where building with COMPILER=clang didn't
work right; this makes them work again.

Signed-off-by: Peter Jones &lt;pjones@redhat.com&gt;
</content>
</entry>
<entry>
<title>Post-process our PE to be sure.</title>
<updated>2021-05-25T15:03:26+00:00</updated>
<author>
<name>Peter Jones</name>
<email>pjones@redhat.com</email>
</author>
<published>2021-05-14T00:42:18+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/efi-boot-shim.git/commit/?id=05875f3aed1c90fe071c66de05744ca2bcbc2b9e'/>
<id>urn:sha1:05875f3aed1c90fe071c66de05744ca2bcbc2b9e</id>
<content type='text'>
On some versions of binutils[0], including binutils-2.23.52.0.1-55.el7,
do not correctly initialize the data when computing the PE optional
header checksum.  Unfortunately, this means that any time you get a
build that reproduces correctly using the version of objcopy from those
versions, it's just a matter of luck.

This patch introduces a new utility program, post-process-pe, which does
some basic validation of the resulting binaries, and if necessary,
performs some minor repairs:

- sets the timestamp to 0
  - this was previously done with dd using constant offsets that aren't
    really safe.
- re-computes the checksum.

[0] I suspect, but have not yet fully verified, that this is
    accidentally fixed by the following upstream binutils commit:

    commit cf7a3c01d82abdf110ef85ab770e5997d8ac28ac
    Author: Alan Modra &lt;amodra@gmail.com&gt;
    Date:   Tue Dec 15 22:09:30 2020 +1030

      Lose some COFF/PE static vars, and peicode.h constify

      This patch tidies some COFF and PE code that unnecessarily used static
      variables to communicate between functions.

v2 - MAP_PRIVATE was totally wrong...

Signed-off-by: Peter Jones &lt;pjones@redhat.com&gt;
</content>
</entry>
<entry>
<title>Make building outside of the top directory work.</title>
<updated>2021-03-25T18:36:53+00:00</updated>
<author>
<name>Peter Jones</name>
<email>pjones@redhat.com</email>
</author>
<published>2021-03-24T21:51:48+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/efi-boot-shim.git/commit/?id=8578b75f9c18fd267c8a0746192ab3f051561df2'/>
<id>urn:sha1:8578b75f9c18fd267c8a0746192ab3f051561df2</id>
<content type='text'>
This also makes the cross-build targets (and not the others) /use/ this
functionality, so we'll catch it if we break it again.

This fixes issue #340.

Signed-off-by: Peter Jones &lt;pjones@redhat.com&gt;
</content>
</entry>
<entry>
<title>Fix cross-compilation from x86_64-&gt;i686</title>
<updated>2021-03-22T20:43:44+00:00</updated>
<author>
<name>Peter Jones</name>
<email>pjones@redhat.com</email>
</author>
<published>2021-03-21T17:14:20+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/efi-boot-shim.git/commit/?id=e03ce7ed85195107fce206c7390263ff9afeaece'/>
<id>urn:sha1:e03ce7ed85195107fce206c7390263ff9afeaece</id>
<content type='text'>
Signed-off-by: Peter Jones &lt;pjones@redhat.com&gt;
</content>
</entry>
<entry>
<title>build: load local build configuration from Make.local if present</title>
<updated>2021-03-16T17:23:17+00:00</updated>
<author>
<name>Paul Moore</name>
<email>pmoore2@cisco.com</email>
</author>
<published>2020-10-20T17:26:37+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/efi-boot-shim.git/commit/?id=6fa1c8e6820421a5ca3c422cf8c7a7c6d7851460'/>
<id>urn:sha1:6fa1c8e6820421a5ca3c422cf8c7a7c6d7851460</id>
<content type='text'>
If the file Make.local exists, use it as a source of local build
configuration by including it in Make.defaults.

(cherry picked from commit 57e38a1ebf73 in the shim-15.2 branch)

Signed-off-by: Paul Moore &lt;pmoore2@cisco.com&gt;
</content>
</entry>
<entry>
<title>Stop using EFI_PATH, and error out if people try to use it</title>
<updated>2021-03-15T23:50:53+00:00</updated>
<author>
<name>Steve McIntyre</name>
<email>steve@einval.com</email>
</author>
<published>2021-03-15T21:06:00+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/efi-boot-shim.git/commit/?id=2d1d11567f9706a703d22d0d17996cb81c5ae4de'/>
<id>urn:sha1:2d1d11567f9706a703d22d0d17996cb81c5ae4de</id>
<content type='text'>
We need to be using our patched version of gnu-efi

Signed-off-by: Steve McIntyre &lt;93sam@debian.org&gt;
</content>
</entry>
<entry>
<title>Fix include order</title>
<updated>2021-03-12T09:15:01+00:00</updated>
<author>
<name>Peter Jones</name>
<email>pjones@redhat.com</email>
</author>
<published>2021-03-11T16:31:42+00:00</published>
<link rel='alternate' type='text/html' href='https://git.amelek.net/vyos/efi-boot-shim.git/commit/?id=3c00db33e53d0cab3b701c1569a79c64878f202d'/>
<id>urn:sha1:3c00db33e53d0cab3b701c1569a79c64878f202d</id>
<content type='text'>
scan-build helpfully notes:

| In file included from shim.c:14:
| In file included from /home/pjones/devel/github.com/shim/sbat-aarch64/shim.h:183:
| /home/pjones/devel/github.com/shim/sbat-aarch64/include/hexdump.h:123:2: error: 'va_start' used in Win64 ABI function
|         va_start(ap, at);
|         ^
| /usr/lib/gcc/x86_64-redhat-linux/10/include/stdarg.h:47:23: note: expanded from macro 'va_start'
| #define va_start(v,l)   __builtin_va_start(v,l)
|                         ^

This is because one of the patches for the builtin swizzling is missing
a correction for the include order.  This patch fixes that order.

Signed-off-by: Peter Jones &lt;pjones@redhat.com&gt;
</content>
</entry>
</feed>
