f7884e7328
The current combination of -static and -fPIC creates a static executable with position-dependent addresses for global variables. Use -static-pie and -fPIE to create a proper static position independent executable that can be loaded at any address without a dynamic linker. When building the original "lea (encl_stack)(%rbx), %rax" assembly code with -static-pie -fPIE, the linker complains about a relocation it cannot resolve: /usr/local/bin/ld: /tmp/cchIWyfG.o: relocation R_X86_64_32S against `.data' can not be used when making a PIE object; recompile with -fPIE collect2: error: ld returned 1 exit status Thus, since only RIP-relative addressing is legit for local symbols, use "encl_stack(%rip)" and declare an explicit "__encl_base" symbol at the start of the linker script to be able to calculate the stack address relative to the current TCS in the enclave assembly entry code. Signed-off-by: Jo Van Bulck <jo.vanbulck@cs.kuleuven.be> Signed-off-by: Dave Hansen <dave.hansen@linux.intel.com> Reviewed-by: Jarkko Sakkinen <jarkko@kernel.org> Acked-by: Kai Huang <kai.huang@intel.com> Link: https://lore.kernel.org/all/f9c24d89-ed72-7d9e-c650-050d722c6b04@cs.kuleuven.be/ Link: https://lore.kernel.org/all/20231005153854.25566-8-jo.vanbulck%40cs.kuleuven.be
61 lines
1.5 KiB
Makefile
61 lines
1.5 KiB
Makefile
top_srcdir = ../../../..
|
|
|
|
include ../lib.mk
|
|
|
|
.PHONY: all clean
|
|
|
|
CAN_BUILD_X86_64 := $(shell ../x86/check_cc.sh "$(CC)" \
|
|
../x86/trivial_64bit_program.c)
|
|
|
|
ifndef OBJCOPY
|
|
OBJCOPY := $(CROSS_COMPILE)objcopy
|
|
endif
|
|
|
|
INCLUDES := -I$(top_srcdir)/tools/include
|
|
HOST_CFLAGS := -Wall -Werror -g $(INCLUDES) -fPIC
|
|
HOST_LDFLAGS := -z noexecstack -lcrypto
|
|
ENCL_CFLAGS += -Wall -Werror -static-pie -nostdlib -ffreestanding -fPIE \
|
|
-fno-stack-protector -mrdrnd $(INCLUDES)
|
|
ENCL_LDFLAGS := -Wl,-T,test_encl.lds,--build-id=none
|
|
|
|
TEST_CUSTOM_PROGS := $(OUTPUT)/test_sgx
|
|
TEST_FILES := $(OUTPUT)/test_encl.elf
|
|
|
|
ifeq ($(CAN_BUILD_X86_64), 1)
|
|
all: $(TEST_CUSTOM_PROGS) $(OUTPUT)/test_encl.elf
|
|
endif
|
|
|
|
$(OUTPUT)/test_sgx: $(OUTPUT)/main.o \
|
|
$(OUTPUT)/load.o \
|
|
$(OUTPUT)/sigstruct.o \
|
|
$(OUTPUT)/call.o \
|
|
$(OUTPUT)/sign_key.o
|
|
$(CC) $(HOST_CFLAGS) -o $@ $^ $(HOST_LDFLAGS)
|
|
|
|
$(OUTPUT)/main.o: main.c
|
|
$(CC) $(HOST_CFLAGS) -c $< -o $@
|
|
|
|
$(OUTPUT)/load.o: load.c
|
|
$(CC) $(HOST_CFLAGS) -c $< -o $@
|
|
|
|
$(OUTPUT)/sigstruct.o: sigstruct.c
|
|
$(CC) $(HOST_CFLAGS) -c $< -o $@
|
|
|
|
$(OUTPUT)/call.o: call.S
|
|
$(CC) $(HOST_CFLAGS) -c $< -o $@
|
|
|
|
$(OUTPUT)/sign_key.o: sign_key.S
|
|
$(CC) $(HOST_CFLAGS) -c $< -o $@
|
|
|
|
$(OUTPUT)/test_encl.elf: test_encl.c test_encl_bootstrap.S
|
|
$(CC) $(ENCL_CFLAGS) $^ -o $@ $(ENCL_LDFLAGS)
|
|
|
|
EXTRA_CLEAN := \
|
|
$(OUTPUT)/test_encl.elf \
|
|
$(OUTPUT)/load.o \
|
|
$(OUTPUT)/call.o \
|
|
$(OUTPUT)/main.o \
|
|
$(OUTPUT)/sigstruct.o \
|
|
$(OUTPUT)/test_sgx \
|
|
$(OUTPUT)/test_sgx.o \
|