efi-boot-shim.git/gnu-efi, branch 15.4

arm/aa64 targets: put .rel* and .dyn* in .rodata

2021-03-30T15:40:32+00:00

For every problem, there exists a solution which is simple, elegant, and wrong. d74629207188d290810db15dbfe91a89e7751ffb is that solution. This patch leaves that intact, but adds a .rodata section wrapping .rel/.rela and .dynsym/.dynstr., so that they are correctly incorporated into the authenticode hash. Signed-off-by: Peter Jones

Make building outside of the top directory work.

2021-03-25T18:36:53+00:00

This also makes the cross-build targets (and not the others) /use/ this functionality, so we'll catch it if we break it again. This fixes issue #340. Signed-off-by: Peter Jones

Fix cross-compilation from x86_64->i686

2021-03-22T20:43:44+00:00

Signed-off-by: Peter Jones

arm and aarch64: include the aligned part in SizeOfRawData of sbat

2021-03-19T02:47:38+00:00

Similar to x86_64, the .sbat section is aligned to 4096, so we should include the aligned part in SizeOfRawData as objcopy does for x86_64. For VirtualSize, _sbat_vsize is used to reflect the actually size of sbat. This also fixes a strange hash mismatching in openSUSE build service when attaching signature to AArch64 EFI images from shim package. Signed-off-by: Gary Lin

arm and aarch64: fix some PE headers.

2021-03-16T00:08:27+00:00

This fixes the SizeOfImage and SizeOfInitializedData headers on arm and aa64. Signed-off-by: Peter Jones

More va_* work

2021-03-12T09:15:01+00:00

Be much more explicit about exactly which va_* stuff comes from which ABI in both shim and gnu-efi. This fixes the problem where we see: | (null):0:(null)() v->name:"(null)" v->rtname:"(null)" | (null):0:(null)() v->data_size:0 v->data:0x0 and similar messages where everything is NULL. Signed-off-by: Peter Jones

arm arches: include .sbat in our section headers.

2021-03-12T09:15:01+00:00

Signed-off-by: Peter Jones

Consolidate most of our standard lib functions to lib

2021-03-10T20:54:20+00:00

Signed-off-by: Peter Jones

build: Import gnu-efi as a submodule and build against it

2021-03-09T21:52:53+00:00

Shim is rather more friendly with EFI internals than most code, and as a result can end up making assumptions that are out of step with those made by gnu-efi. Since both projects are developed independently, and since distributions are often trying to build versions of shim against whatever version of gnu-efi they are shipping, this can result in awkward build failures. The easiest way to handle this is to use a git submodule and import a known-good version of shim directly into the build tree. Given static linking, this will also make reproducible builds easier. Plus some changes from pjones: - Fix up some more include paths - more fine grained clean rules - use our make ARCH - use an rhboot/ repo for the gnu-efi remote Signed-off-by: Matthew Garrett