From 924778eb073c47a0defc7319e98029c712129ede Mon Sep 17 00:00:00 2001 From: Laurent Pinchart Date: Tue, 12 May 2020 19:24:23 +0300 Subject: ipa: Only sign IPA modules that are being installed The ipa-sign-install.sh script, run when installing libcamera, signs all IPA modules present in the module directory. This would result in third-party modules being signed if any are present in the directory. Fix it by explicitly passing the list of IPA modules to the ipa-sign-install.sh script. Signed-off-by: Laurent Pinchart Tested-by: Tomasz Figa Reviewed-by: Tomasz Figa --- src/ipa/meson.build | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) (limited to 'src/ipa/meson.build') diff --git a/src/ipa/meson.build b/src/ipa/meson.build index 64deb601..ab73c347 100644 --- a/src/ipa/meson.build +++ b/src/ipa/meson.build @@ -21,10 +21,12 @@ subdir('libipa') ipa_sign = files('ipa-sign.sh') ipas = ['raspberrypi', 'rkisp1', 'vimc'] +ipa_names = [] foreach pipeline : get_option('pipelines') if ipas.contains(pipeline) subdir(pipeline) + ipa_names += join_paths(ipa_install_dir, ipa_name + '.so') endif endforeach @@ -33,6 +35,6 @@ if ipa_sign_module # .sign files, as meson strips the DT_RPATH and DT_RUNPATH from binaries at # install time, which invalidates the signatures. meson.add_install_script('ipa-sign-install.sh', - ipa_install_dir, - ipa_priv_key.full_path()) + ipa_priv_key.full_path(), + ipa_names) endif -- cgit v1.2.1