Changeset 93275 in vbox

Timestamp:

Jan 17, 2022 3:01:26 PM (3 years ago)

Author:

vboxsync

svn:sync-xref-src-repo-rev:

149343

Message:

/Config.kmk,Support/Makefile.kmk,vboximportchecker.kmk: Use the import checker to make sure hardened executables does not import anything. Made vboximportchecker.kmk skip library targets. bugref:10162

Location:

trunk

Files:

• Config.kmk (modified) (1 diff)
• src/VBox/HostDrivers/Support/Makefile.kmk (modified) (1 diff)
• tools/kBuildUnits/vboximportchecker.kmk (modified) (1 diff)

trunk/Config.kmk

@@ -6344 +6344 @@
  TEMPLATE_VBOXR3HARDENEDEXE_LIBS.x86       = $(NOT_SUCH_VARIABLE)
  TEMPLATE_VBOXR3HARDENEDEXE_LIBS.amd64     = $(NOT_SUCH_VARIABLE)
+ TEMPLATE_VBOXR3HARDENEDEXE_USES.win       = $(TEMPLATE_VBOXR3EXE_USES.win) vboximportchecker
+ TEMPLATE_VBOXR3HARDENEDEXE_VBOX_IMPORT_CHECKER.win = noimports
 else ifn1of ($(KBUILD_TARGET), os2 solaris) # Keep RPATH on Solaris so we can find libgcc_1/libstdc++ within $(VBOX_WITH_RUNPATH).
  ifneq ($(KBUILD_TYPE),asan) # Keep RPATH in asan builds so we can find libasan.so.X and libubsan.so.Y.

trunk/src/VBox/HostDrivers/Support/Makefile.kmk

@@ -540 +540 @@
 VBoxSupLib_LIBS.win.amd64 = \
         $(PATH_TOOL_$(TEMPLATE_VBOXR3STATIC_TOOL.win.amd64)_LIB)/libcmt.lib # for __chkstk
+VBoxSupLib_VBOX_IMPORT_CHECKER.win.x86   = w2k
+VBoxSupLib_VBOX_IMPORT_CHECKER.win.amd64 = xp64
 
 

trunk/tools/kBuildUnits/vboximportchecker.kmk

@@ -27 +27 @@
 # Helper for expanding certain variables while assigning.
 define def_unit_vboximportchecker_internal_expand_twice
-$(target)_POST_CMDS += $$(NLTAB)$$(VBOX_RTLDRCHECKIMPORTS) -q -p "$$(KBUILD_DEVTOOLS)/$(bld_trg).$(bld_trg_arch)/exports/$$($(target)_2_VBOX_IMPORT_CHECKER)" $$(out)
+$(target)_POST_CMDS += $$(if-expr "$$(tool_do)" != "LINK_LIBRARY",$$(NLTAB)$$(VBOX_RTLDRCHECKIMPORTS) -q -p "$$(KBUILD_DEVTOOLS)/$(bld_trg).$(bld_trg_arch)/exports/$$($(target)_2_VBOX_IMPORT_CHECKER)" $$(out),)
 endef