On 6/11/25 05:35, Jan Beulich wrote: > On 10.06.2025 12:12, Frediano Ziglio wrote: >> For xen.gz file we strip all symbols and have an additional >> xen-syms file version with all symbols. >> Make xen.efi more coherent stripping all symbols too. > > And the other difference (compressed vs not) still remains. > >> xen.efi.elf can be used for debugging. > > Hmm, that's the result of ... > >> --- a/xen/arch/x86/Makefile >> +++ b/xen/arch/x86/Makefile >> @@ -238,6 +238,7 @@ endif >> > $@.map >> ifeq ($(CONFIG_DEBUG_INFO),y) >> $(if $(filter --strip-debug,$(EFI_LDFLAGS)),:$(space))$(OBJCOPY) -O >> elf64-x86-64 $@ $@.elf >> + $(if $(filter --strip-debug,$(EFI_LDFLAGS)),:$(space))$(STRIP) $@ >> endif >> rm -f $(dot-target).[0-9]* $(@D)/..$(@F).[0-9]* >> ifeq ($(CONFIG_XEN_IBT),y) > > ... objcopy. Having looked at the involved code in that utility, I mistrust > its > output from such a conversion to really be an exact representation of the > input. > IOW I'd much rather use the original file. As a possible compromise, could we > perhaps merely strip debug info, but retain the symbol table, matching the > prior default for $(efi-strip-opt)?
The string table and all debug symbols need to be stripped. This means no sections longer than 8 bytes and no debug information at all. This is a requirement of the Portable Executable specification, and I really do not want this to be messed with given UEFI Secure Boot requirements. -- Sincerely, Demi Marie Obenour (she/her/hers)
OpenPGP_0xB288B55FFF9C22C1.asc
Description: OpenPGP public key
OpenPGP_signature.asc
Description: OpenPGP digital signature
