From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-10.1 required=3.0 tests=BAYES_00,DKIMWL_WL_HIGH, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,INCLUDES_PATCH,MAILING_LIST_MULTI, SIGNED_OFF_BY,SPF_HELO_NONE,SPF_PASS,URIBL_BLOCKED autolearn=unavailable autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id DB70DC43457 for ; Tue, 13 Oct 2020 16:03:17 +0000 (UTC) Received: from vger.kernel.org (vger.kernel.org [23.128.96.18]) by mail.kernel.org (Postfix) with ESMTP id 7EF5325234 for ; Tue, 13 Oct 2020 16:03:17 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=kernel.org; s=default; t=1602604997; bh=SwaVRPFQtG8+V3cPbMIHVuvl5nvXUk2f0GCLvP5WjA8=; h=References:In-Reply-To:From:Date:Subject:To:Cc:List-ID:From; b=Rg6pypguojlNpvlAaMhAenIMgBvO6SUV405KZX3W7l4axZQkbgA4L1luV50x1EdBr EAg98Yi1X7HkWBtQ2sL7J7qPNKP06I2QvLEndIREFOWNgnHcBR/FujCWW3YkNdHuRC Uw6BUHwmvEU9fe+jaqlf0WFMGoLyy4Qt9SgBQuPg= Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1731457AbgJMQDQ (ORCPT ); Tue, 13 Oct 2020 12:03:16 -0400 Received: from conssluserg-04.nifty.com ([210.131.2.83]:48141 "EHLO conssluserg-04.nifty.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1726744AbgJMQDP (ORCPT ); Tue, 13 Oct 2020 12:03:15 -0400 Received: from mail-pj1-f45.google.com (mail-pj1-f45.google.com [209.85.216.45]) (authenticated) by conssluserg-04.nifty.com with ESMTP id 09DG2vTG009053; Wed, 14 Oct 2020 01:02:57 +0900 DKIM-Filter: OpenDKIM Filter v2.10.3 conssluserg-04.nifty.com 09DG2vTG009053 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nifty.com; s=dec2015msa; t=1602604978; bh=3Doy0JIMW8UlEO9WI984BiymwAAc3PcCowImi1wWrlc=; h=References:In-Reply-To:From:Date:Subject:To:Cc:From; b=j1iFKrZFjKmYB3TS8hS72+3ACn6mEqyeXyYK+OY/XcWRDiCLMKufgU6PI75iJ58FZ ZqD5aLNvA39nMpysKLZC72E0xGyW4sUckhjz3n8gIUAl6h4kyMvPLBXh+3D6sKuZgq 9cG4qFz+WchFkOtXJdWjeeCRbIqifjTOC+FLInKWf6g0+tv0J+3G7ht7fzrqeTNEdJ v5kDS0j9pSdICvj5MU3estuPiL7nPx1xsi/cRk22nNIwntgtgS5IxjFK26ZgrzQh0a Bof89zfD3ncfUS3jTnaZbcQF0ztFME3JhZwXAjf5wF7UZGbrVnzEeQPdD9dnPNtU3y pRitjo25wXk9Q== X-Nifty-SrcIP: [209.85.216.45] Received: by mail-pj1-f45.google.com with SMTP id g16so109301pjv.3; Tue, 13 Oct 2020 09:02:57 -0700 (PDT) X-Gm-Message-State: AOAM533Iil0a6heFHSsh2tMXZnYFQlDaOTnF0XAQEpIMaSuAzLjL4rDq VtFNL0rwBumTwejiaR0fCmqu8qGO61qZ2m+jGYU= X-Google-Smtp-Source: ABdhPJwppXe7uVVWc+nfoNIz3RPoqqMPJii8V+bgs/KaSKZBm5bodncuyboRoJgCH3YbpjaBw+5sUrG7IlnA22ZMdAo= X-Received: by 2002:a17:902:c3d4:b029:d3:df24:1619 with SMTP id j20-20020a170902c3d4b02900d3df241619mr159914plj.1.1602604976734; Tue, 13 Oct 2020 09:02:56 -0700 (PDT) MIME-Version: 1.0 References: <20201012170631.1241502-1-ujjwalkumar0501@gmail.com> <20201012170631.1241502-3-ujjwalkumar0501@gmail.com> <53b7257e-b192-07da-9dd3-06497ce826f0@petrovitsch.priv.at> In-Reply-To: <53b7257e-b192-07da-9dd3-06497ce826f0@petrovitsch.priv.at> From: Masahiro Yamada Date: Wed, 14 Oct 2020 01:02:19 +0900 X-Gmail-Original-Message-ID: Message-ID: Subject: Re: [PATCH v2 2/2] kbuild: use interpreters to invoke scripts To: Bernd Petrovitsch Cc: Ujjwal Kumar , Lukas Bulwahn , Michal Marek , Andrew Morton , Kees Cook , Nathan Chancellor , Nick Desaulniers , Linux Kbuild mailing list , Linux Kernel Mailing List , linux-arm-kernel , linux-ia64@vger.kernel.org, clang-built-linux , linux-kernel-mentees@lists.linuxfoundation.org Content-Type: text/plain; charset="UTF-8" Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Tue, Oct 13, 2020 at 4:03 AM Bernd Petrovitsch wrote: > > Hi all! > > On 12/10/2020 18:42, Ujjwal Kumar wrote: > > On 12/10/20 11:50 pm, Lukas Bulwahn wrote: > >> > >> > >> On Mon, 12 Oct 2020, Ujjwal Kumar wrote: > >> > >>> We cannot rely on execute bits to be set on files in the repository. > >>> The build script should use the explicit interpreter when invoking any > >>> script from the repository. > >>> > >>> Link: https://lore.kernel.org/lkml/20200830174409.c24c3f67addcce0cea9a9d4c@linux-foundation.org/ > >>> Link: https://lore.kernel.org/lkml/202008271102.FEB906C88@keescook/ > >>> > >>> Suggested-by: Andrew Morton > >>> Suggested-by: Kees Cook > >>> Suggested-by: Lukas Bulwahn > >>> Signed-off-by: Ujjwal Kumar > >>> --- > >>> Makefile | 4 ++-- > >>> arch/arm64/kernel/vdso/Makefile | 2 +- > >>> arch/arm64/kernel/vdso32/Makefile | 2 +- > >>> arch/ia64/Makefile | 4 ++-- > >>> arch/nds32/kernel/vdso/Makefile | 2 +- > >>> scripts/Makefile.build | 2 +- > >>> scripts/Makefile.package | 4 ++-- > >>> 7 files changed, 10 insertions(+), 10 deletions(-) > >>> > >>> diff --git a/Makefile b/Makefile > >>> index 0af7945caa61..df20e71dd7c8 100644 > >>> --- a/Makefile > >>> +++ b/Makefile > >>> @@ -1256,7 +1256,7 @@ include/generated/utsrelease.h: include/config/kernel.release FORCE > >>> PHONY += headerdep > >>> headerdep: > >>> $(Q)find $(srctree)/include/ -name '*.h' | xargs --max-args 1 \ > >>> - $(srctree)/scripts/headerdep.pl -I$(srctree)/include > >>> + $(PERL) $(srctree)/scripts/headerdep.pl -I$(srctree)/include > >>> > >>> # --------------------------------------------------------------------------- > >>> # Kernel headers > >>> @@ -1312,7 +1312,7 @@ PHONY += kselftest-merge > >>> kselftest-merge: > >>> $(if $(wildcard $(objtree)/.config),, $(error No .config exists, config your kernel first!)) > >>> $(Q)find $(srctree)/tools/testing/selftests -name config | \ > >>> - xargs $(srctree)/scripts/kconfig/merge_config.sh -m $(objtree)/.config > >>> + xargs $(CONFIG_SHELL) $(srctree)/scripts/kconfig/merge_config.sh -m $(objtree)/.config > >>> $(Q)$(MAKE) -f $(srctree)/Makefile olddefconfig > >>> > >>> # --------------------------------------------------------------------------- > >>> diff --git a/arch/arm64/kernel/vdso/Makefile b/arch/arm64/kernel/vdso/Makefile > >>> index edccdb77c53e..fb07804b7fc1 100644 > >>> --- a/arch/arm64/kernel/vdso/Makefile > >>> +++ b/arch/arm64/kernel/vdso/Makefile > >>> @@ -65,7 +65,7 @@ $(obj)/%.so: $(obj)/%.so.dbg FORCE > >>> # Generate VDSO offsets using helper script > >>> gen-vdsosym := $(srctree)/$(src)/gen_vdso_offsets.sh > >>> quiet_cmd_vdsosym = VDSOSYM $@ > >>> - cmd_vdsosym = $(NM) $< | $(gen-vdsosym) | LC_ALL=C sort > $@ > >>> + cmd_vdsosym = $(NM) $< | $(CONFIG_SHELL) $(gen-vdsosym) | LC_ALL=C sort > $@ > >>> > >>> include/generated/vdso-offsets.h: $(obj)/vdso.so.dbg FORCE > >>> $(call if_changed,vdsosym) > >>> diff --git a/arch/arm64/kernel/vdso32/Makefile b/arch/arm64/kernel/vdso32/Makefile > >>> index 7f96a1a9f68c..617c9ac58156 100644 > >>> --- a/arch/arm64/kernel/vdso32/Makefile > >>> +++ b/arch/arm64/kernel/vdso32/Makefile > >>> @@ -205,7 +205,7 @@ quiet_cmd_vdsomunge = MUNGE $@ > >>> gen-vdsosym := $(srctree)/$(src)/../vdso/gen_vdso_offsets.sh > >>> quiet_cmd_vdsosym = VDSOSYM $@ > >>> # The AArch64 nm should be able to read an AArch32 binary > >>> - cmd_vdsosym = $(NM) $< | $(gen-vdsosym) | LC_ALL=C sort > $@ > >>> + cmd_vdsosym = $(NM) $< | $(CONFIG_SHELL) $(gen-vdsosym) | LC_ALL=C sort > $@ > >>> > >>> # Install commands for the unstripped file > >>> quiet_cmd_vdso_install = INSTALL32 $@ > >>> diff --git a/arch/ia64/Makefile b/arch/ia64/Makefile > >>> index 703b1c4f6d12..86d42a2d09cb 100644 > >>> --- a/arch/ia64/Makefile > >>> +++ b/arch/ia64/Makefile > >>> @@ -27,8 +27,8 @@ cflags-y := -pipe $(EXTRA) -ffixed-r13 -mfixed-range=f12-f15,f32-f127 \ > >>> -falign-functions=32 -frename-registers -fno-optimize-sibling-calls > >>> KBUILD_CFLAGS_KERNEL := -mconstant-gp > >>> > >>> -GAS_STATUS = $(shell $(srctree)/arch/ia64/scripts/check-gas "$(CC)" "$(OBJDUMP)") > >>> -KBUILD_CPPFLAGS += $(shell $(srctree)/arch/ia64/scripts/toolchain-flags "$(CC)" "$(OBJDUMP)" "$(READELF)") > >>> +GAS_STATUS = $(shell $(CONFIG_SHELL) $(srctree)/arch/ia64/scripts/check-gas "$(CC)" "$(OBJDUMP)") > >>> +KBUILD_CPPFLAGS += $(shell $(CONFIG_SHELL) $(srctree)/arch/ia64/scripts/toolchain-flags "$(CC)" "$(OBJDUMP)" "$(READELF)") > >> > >> Here is an instance of what Masahiro-san pointed out being wrong. > >> > >> Ujjwal, will you send a v3? > > > > Following is the quoted text from the reply mail from Masahiro > > > >>> -GAS_STATUS = $(shell $(srctree)/arch/ia64/scripts/check-gas "$(CC)" "$(OBJDUMP)") > >>> -KBUILD_CPPFLAGS += $(shell $(srctree)/arch/ia64/scripts/toolchain-flags "$(CC)" "$(OBJDUMP)" "$(READELF)") > >>> +GAS_STATUS = $($(CONFIG_SHELL) $(srctree)/arch/ia64/scripts/check-gas "$(CC)" "$(OBJDUMP)") > >>> +KBUILD_CPPFLAGS += $($(CONFIG_SHELL) $(srctree)/arch/ia64/scripts/toolchain-flags "$(CC)" "$(OBJDUMP)" "$(READELF)") > >> > >> > >> > >> These changes look wrong to me. > >> > >> $($(CONFIG_SHELL) -> $(shell $(CONFIG_SHELL) > >> > > > > From the above text, I understand as follows: > > Did you actually *test* that (expecially) these lines work > afterwards as good as before? > > > That my proposed change: > > $(shell $(src...) -> $($(CONFIG_SHELL) $(src...) > > > > is WRONG > > Yup, as it's in a Makefile and that's a Makefile construct. > > > and in the next line he suggested the required correction. > > That being: > > $($(CONFIG_SHELL) -> $(shell $(CONFIG_SHELL) > > Such stuff should generally not be needed as the to-be-used > shell can be set in Makefiles via a "SHELL = " assignment > (defaulting to /bin/sh - what else;-). > Flags for the shell can BTW set with ".SHELLFLAGS = ". You are talking about a different thing. Take the current code as an example: $(shell $(srctree)/arch/ia64/scripts/check-gas "$(CC)" "$(OBJDUMP)") Here are two shell invocations. [1] The command $(srctree)/arch/ia64/scripts/check-gas "$(CC)" "$(OBJDUMP)" is run in /bin/sh because the default value of SHELL is /bin/sh. [2] The script, arch/ia64/scripts/check-gas, is run in /bin/sh because the hash-bang (the first line of check-gas) specifies #!/bin/sh Bernd is talking about [1]. In contrast, this patch is addressing [2] because Andrew Morton suggested to run scripts without relying on the executable bit. (and, after this patch, we run scripts without relying on the hash-bang because we now specify the interpreter.) Of course, [1] and [2] can be different. I always want to use /bin/sh for [1], so please do not use bash-extension inside $(shell ...) You have more choices for [2]. If arch/ia64/scripts/check-gas had been written with bash-extension, the code would have been changed into: $(shell $(BASH) $(srctree)/arch/ia64/scripts/check-gas "$(CC)" "$(OBJDUMP)") I hope this will be clearer. > So please > -) learn basic "Makefile" + "make" before brainlessly patching > a Makefile. > -) actually testy your changes to make sure the patch didn't > broke anything > -) and - last but not least - check if there isn't a shell > already set (and which). > > MfG, > Bernd > -- > There is no cloud, just other people computers. > -- https://static.fsf.org/nosvn/stickers/thereisnocloud.svg -- Best Regards Masahiro Yamada