1 From 5985253f2c9025d7c127443a3a9938946f80c2a1 Mon Sep 17 00:00:00 2001
2 From: =?UTF-8?q?Martin=20Hundeb=C3=B8ll?= <martin@geanix.com>
3 Date: Tue, 6 Nov 2018 14:50:47 +0100
4 Subject: [PATCH] buildinfo: strip sysroot and debug-prefix-map from compiler
7 Content-Type: text/plain; charset=UTF-8
8 Content-Transfer-Encoding: 8bit
10 The openssl build system generates buildinf.h containing the full
11 compiler command line used to compile objects. This breaks
12 reproducibility, as the compile command is baked into libcrypto, where
13 it is used when running `openssl version -f`.
15 Add stripped build variables for the compiler and cflags lines, and use
16 those when generating buildinfo.h.
18 This is based on a similar patch for older openssl versions:
19 https://patchwork.openembedded.org/patch/147229/
21 Upstream-Status: Inappropriate [OE specific]
22 Signed-off-by: Martin Hundebøll <martin@geanix.com>
24 Update to fix buildpaths qa issue for '-fmacro-prefix-map'.
26 Signed-off-by: Kai Kang <kai.kang@windriver.com>
28 Update to fix buildpaths qa issue for '-ffile-prefix-map'.
30 Signed-off-by: Khem Raj <raj.khem@gmail.com>
33 Configurations/unix-Makefile.tmpl | 12 +++++++++++-
34 crypto/build.info | 2 +-
35 2 files changed, 12 insertions(+), 2 deletions(-)
37 Index: openssl-3.0.4/Configurations/unix-Makefile.tmpl
38 ===================================================================
39 --- openssl-3.0.4.orig/Configurations/unix-Makefile.tmpl
40 +++ openssl-3.0.4/Configurations/unix-Makefile.tmpl
41 @@ -502,13 +502,23 @@ BIN_LDFLAGS={- join(' ', $target{bin_lflags} || (),
42 '$(CNF_LDFLAGS)', '$(LDFLAGS)') -}
43 BIN_EX_LIBS=$(CNF_EX_LIBS) $(EX_LIBS)
45 -# CPPFLAGS_Q is used for one thing only: to build up buildinf.h
46 +# *_Q variables are used for one thing only: to build up buildinf.h
47 CPPFLAGS_Q={- $cppflags1 =~ s|([\\"])|\\$1|g;
48 $cppflags2 =~ s|([\\"])|\\$1|g;
49 $lib_cppflags =~ s|([\\"])|\\$1|g;
50 join(' ', $lib_cppflags || (), $cppflags2 || (),
53 +CFLAGS_Q={- for (@{$config{CFLAGS}}) {
54 + s|-fdebug-prefix-map=[^ ]+|-fdebug-prefix-map=|g;
55 + s|-fmacro-prefix-map=[^ ]+|-fmacro-prefix-map=|g;
56 + s|-ffile-prefix-map=[^ ]+|-ffile-prefix-map=|g;
58 + join(' ', @{$config{CFLAGS}}) -}
60 +CC_Q={- $config{CC} =~ s|--sysroot=[^ ]+|--sysroot=recipe-sysroot|g;
61 + join(' ', $config{CC}) -}
63 PERLASM_SCHEME= {- $target{perlasm_scheme} -}
65 # For x86 assembler: Set PROCESSOR to 386 if you want to support
66 Index: openssl-3.0.4/crypto/build.info
67 ===================================================================
68 --- openssl-3.0.4.orig/crypto/build.info
69 +++ openssl-3.0.4/crypto/build.info
70 @@ -115,7 +115,7 @@ DEFINE[../libcrypto]=$UPLINKDEF
72 DEPEND[info.o]=buildinf.h
73 DEPEND[cversion.o]=buildinf.h
74 -GENERATE[buildinf.h]=../util/mkbuildinf.pl "$(CC) $(LIB_CFLAGS) $(CPPFLAGS_Q)" "$(PLATFORM)"
75 +GENERATE[buildinf.h]=../util/mkbuildinf.pl "$(CC_Q) $(CFLAGS_Q) $(CPPFLAGS_Q)" "$(PLATFORM)"
77 GENERATE[uplink-x86.S]=../ms/uplink-x86.pl
78 GENERATE[uplink-x86_64.s]=../ms/uplink-x86_64.pl