Re: [edk2-devel] [PATCH] OvmfPkg: strip build paths in release builds

2021-03-18 Thread Laszlo Ersek
On 03/17/21 16:39, Ross Burton wrote: > GenFw will embed a NM10 section which contains the path to the input file, (1) typo: should be NB10. > which means the output files have build paths embedded in them. To reduce > information leakage and ensure reproducible builds, pass --zero in release >

[edk2-devel] [PATCH] OvmfPkg: strip build paths in release builds

2021-03-17 Thread Ross Burton
GenFw will embed a NM10 section which contains the path to the input file, which means the output files have build paths embedded in them. To reduce information leakage and ensure reproducible builds, pass --zero in release builds to remove this information. Ref: https://bugzilla.tianocore.org/sh