Changes in Makefile.aarch64

Changes in Makefile.aarch64 http://nxr.netbsd.org/rss/src/sys/arch/aarch64/conf/Makefile.aarch64 en Copyright 2005 Java Simplify fix for PR toolchain/57146 Introduce ARCH_STRIP_SYMBOLS variable to centralize logic for debug symbols from MD Makefile's to Makefile.kern.inc. /src/sys/arch/aarch64/conf/Makefile.aarch64 - 1.25 Fri Jul 28 02:41:30 UTC 2023 rin Fix kernel size inflation for arm and aarch64 (PR toolchain/57146) For some conditions, SYSTEM_LD_TAIL is set for arm and aarch64. Then, ctfmerge(1) in default SYSTEM_LD_TAIL is unintentionally skipped, which results in the catastrophic kernel size inflation, as reported in the PR. Also, introduce and use OBJCOPY_STRIPFLAGS variable instead of STRIPFLAGS, as strip(1) is replaced by objcopy(1) during MI kernel build procedure. XXX For Makefile.{arm,aarch64}, weird logic is used to determine how to handle debug symbols; MKDEBUG{,KERNEL} are taken into account later in sys/conf/Makefile.kern.inc. /src/sys/arch/aarch64/conf/Makefile.aarch64 - 1.24 Wed Jul 26 03:39:55 UTC 2023 rin branches: 1.23.12; In gcc10, -msign-return-address is no longer supported. Instead, (LLVM-compatible) -mbranch-protection option is supported. /src/sys/arch/aarch64/conf/Makefile.aarch64 - 1.23 Thu May 27 06:19:38 UTC 2021 ryo branches: 1.22.4; 1.22.6; add support kernel profiling on aarch64 - add MCOUNT_ENTER, MCOUNT_EXIT macro - __mcount() function should be aligned - add "-fno-optimize-sibling-calls" option when PROF. for accurate profiling, it is better to suppress the tail call. /src/sys/arch/aarch64/conf/Makefile.aarch64 - 1.22 Wed Feb 10 08:25:01 UTC 2021 ryo branches: 1.21.2; "options ARMV83_PAC" is now supported for gcc as well. - add "-msign-return-address=all" to CFLAGS for gcc when specified options ARMV83_PAC - AARCH64REG_{READ,WRITE}_INLINE3 macro can now use the APIAKey registers in both gcc and llvm. llvm requires asm(".arch armv8.3-a"), whereas gcc requires __attribute__((target("arch=armv8.3-a"))). - use ".arch armv8.3-a" rather than ".arch armv8.3-a+pac" in *.S for llvm. /src/sys/arch/aarch64/conf/Makefile.aarch64 - 1.21 Mon May 11 03:00:57 UTC 2020 ryo Add KASAN instrumentation on on-stack VLAs, same as amd64. /src/sys/arch/aarch64/conf/Makefile.aarch64 - 1.20 Mon Apr 13 07:32:36 UTC 2020 maxv Add support for Branch Target Identification (BTI). On the executable pages that have the GP (Guarded Page) bit, the semantic of the "br" and "blr" instructions is changed: the CPU expects the first instruction of the jump/call target to be "bti", and faults if it isn't. We add the GP bit on the kernel .text pages (and incidentally the .rodata pages, but we don't care). The compiler adds a "bti c" instruction at the beginning of each C function. We modify the ENTRY() macros to manually add "bti c" in the asm functions. cpuswitch.S needs a specific change: with "br x27" the CPU expects "bti j", which is bad because the functions begin with "bti c"; switch to "br x16", for the CPU to accept "bti c". BTI helps defend against JOP/COP. Tested on Qemu. /src/sys/arch/aarch64/conf/Makefile.aarch64 - 1.19 Mon Apr 13 05:40:25 UTC 2020 maxv Add support for Pointer Authentication (PAC). We use the "pac-ret" option, to sign the return instruction pointer on function entry, and authenticate it on function exit. This acts as a mitigation against ROP. The authentication uses a per-lwp (secret) I-A key stored in the 128bit APIAKey register and part of the lwp context. During lwp creation, the kernel generates a random key, and during context switches, it installs the key of the target lwp on the CPU. Userland cannot read the APIAKey register directly. However, it can sign its pointers with it, because the register is architecturally shared between userland and the kernel. Although part of the CPU design, it is a bit of an undesired behavior, because it allows to forge valid kernel pointers from userland. To avoid that, we don't share the key with userland, and rather switch it in EL0<->EL1 transitions. This means that when userland executes, a different key is loaded in APIAKey than the one the kernel uses. For now the userland key is a fixed 128bit zero value. The DDB stack unwinder is changed to strip the authentication code from the pointers in lr. Two problems are known: * Currently the idlelwps' keys are not really secret. This is because the RNG is not yet available when we spawn these lwps. Not overly important, but would be nice to fix with UEFI RNG. * The key switching in EL0<->EL1 transitions is not the most optimized code on the planet. Instead of checking aarch64_pac_enabled, it would be better to hot-patch the code at boot time, but there currently is no hot-patch support on aarch64. Tested on Qemu. /src/sys/arch/aarch64/conf/Makefile.aarch64 - 1.18 Sun Apr 12 07:49:58 UTC 2020 maxv branches: 1.17.2; change kernel vm base address to use more than 256GB of memory. (up to 64TB) also enlarge KSEG(direct map) region from 512GB to 64TB. KASAN works ok. Note: -fasan-shadow-offset= KASAN_SHADOW_START - (CANONICAL_BASE >> 3) = 0xFFFF400000000000 - (0xFFFF000000000000 >> 3) = 0xDFFF600000000000 /src/sys/arch/aarch64/conf/Makefile.aarch64 - 1.17 Wed Mar 04 19:28:04 UTC 2020 ryo Fix alignment of .text section by changing load address to 0xffffffc000000000 and adding 64 bytes of padding before the entry point. /src/sys/arch/aarch64/conf/Makefile.aarch64 - 1.16 Wed Dec 04 11:24:31 UTC 2019 jmcneill branches: 1.15.4; Add KASAN use-after-scope detection in aarch64, tested by Ryo Shimizu, thanks. /src/sys/arch/aarch64/conf/Makefile.aarch64 - 1.15 Sun Mar 03 07:04:40 UTC 2019 maxv Track the stack with kASan on aarch64. Same principle as on amd64. Illegal accesses occurring there are now detected. Originally written by me, but reworked by ryo@, thanks. /src/sys/arch/aarch64/conf/Makefile.aarch64 - 1.14 Thu Nov 08 08:28:07 UTC 2018 maxv Add kASan support for aarch64. Stack tracking needs more investigation and will come in a separate commit. Reviewed by ryo@ jmcneill@ skrll@. /src/sys/arch/aarch64/conf/Makefile.aarch64 - 1.13 Thu Nov 01 20:34:49 UTC 2018 maxv - Determine KERN_AS automatically depending on whether OPT_MODULAR is set or not, in the same way as libcompat. - Specify OPT_MODULAR in the port Makefile instead of KERN_AS. Now, KERN_AS=library is used for kernels without module(7) for all ports. OK christos /src/sys/arch/aarch64/conf/Makefile.aarch64 - 1.12 Sat Sep 22 00:24:01 UTC 2018 rin s/A64/ARM/ no functional change /src/sys/arch/aarch64/conf/Makefile.aarch64 - 1.11 Fri Sep 14 08:51:06 UTC 2018 skrll branches: 1.10.2; locore.S is a MD_SFILES. This keeps the dependency handling in the loop, so rebuilds after changing options, say EARLYCONS, don't fail. /src/sys/arch/aarch64/conf/Makefile.aarch64 - 1.10 Sat Jun 23 01:51:03 UTC 2018 jakllsch Add initial support for ARMv8 (AARCH64) (by nisimura@ and ryo@) - sys/arch/evbarm64 is gone and integrated into sys/arch/evbarm. (by skrll@) - add support fdt. evbarm/conf/GENERIC64 fdt (bcm2837,sunxi,tegra) based generic 64bit kernel config. (by skrll@, jmcneill@) /src/sys/arch/aarch64/conf/Makefile.aarch64 - 1.9 Sun Apr 01 04:35:03 UTC 2018 ryo branches: 1.8.2; - Allow multiple .BEGIN targets - Make their protection consistent /src/sys/arch/aarch64/conf/Makefile.aarch64 - 1.8 Sun Dec 10 14:29:47 UTC 2017 christos Fix config(1) errors and warnings. Set up arm headers for the build. /src/sys/arch/aarch64/conf/Makefile.aarch64 - 1.7 Thu May 05 21:14:14 UTC 2016 rjs Define ${LINKSCRIPT} in one place. /src/sys/arch/aarch64/conf/Makefile.aarch64 - 1.6 Mon Aug 24 14:04:24 UTC 2015 uebayasi