mirror of
https://github.com/SCST-project/scst.git
synced 2026-10-22 14:12:33 +00:00
Gleb Chesnokov
1c2365291a
Build standalone Sparse and Smatch from recorded revisions, applying the reviewed SCST Smatch frontend correction. Install matching native Smatch data without replacing standalone Sparse or adding project models. Reuse the existing checksum-pinned kernel headers. Record source commits, patch and binary hashes, and installed model contents for CI evidence. Fail preparation instead of silently falling back to different tools; no SCST modules are built or loaded while preparing this image.
60 lines
2.5 KiB
Bash
60 lines
2.5 KiB
Bash
#!/usr/bin/env bash
|
|
# SPDX-License-Identifier: GPL-2.0-only
|
|
# Run only while building the dedicated analyzer container.
|
|
set -euo pipefail
|
|
HERE=$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)
|
|
# shellcheck source=analyzers.env
|
|
source "$HERE/analyzers.env"
|
|
# shellcheck source=kernel.env
|
|
source "$HERE/kernel.env"
|
|
install -d /usr/local/share/scst-ci
|
|
|
|
package="kernel-devel-$KERNEL_BUILD.x86_64.rpm"
|
|
(
|
|
cd /tmp
|
|
curl --fail --location --retry 3 \
|
|
"https://kojipkgs.fedoraproject.org/packages/kernel/${KERNEL_BUILD%-*}/${KERNEL_BUILD#*-}/x86_64/$package" \
|
|
--output "$package"
|
|
awk -v package="$package" '$2 == package {print; found=1} END {if (!found) exit 1}' \
|
|
"$HERE/kernel.SHA256SUMS" | sha256sum --check
|
|
dnf install -y --setopt=install_weak_deps=False "./$package"
|
|
test -s "/usr/src/kernels/$KERNEL_BUILD.x86_64/Module.symvers"
|
|
rm "$package"
|
|
)
|
|
dnf clean all
|
|
|
|
fetch_source()
|
|
{
|
|
local name=$1 repository=$2 revision=$3
|
|
git init "/opt/$name"
|
|
git -C "/opt/$name" remote add origin "$repository"
|
|
git -C "/opt/$name" fetch --depth 1 origin "$revision"
|
|
git -C "/opt/$name" checkout --detach FETCH_HEAD
|
|
test "$(git -C "/opt/$name" rev-parse HEAD)" = "$revision"
|
|
printf 'Repository: %s\nCommit: %s\n' "$repository" "$revision" \
|
|
> "/usr/local/share/scst-ci/$name-source.txt"
|
|
}
|
|
|
|
fetch_source sparse https://git.kernel.org/pub/scm/devel/sparse/sparse.git "$SPARSE_REVISION"
|
|
CFLAGS='-O2 -g -std=gnu99' make -C /opt/sparse -j"$(nproc)" sparse
|
|
install /opt/sparse/sparse /usr/local/bin/sparse
|
|
|
|
fetch_source smatch https://github.com/error27/smatch.git "$SMATCH_REVISION"
|
|
patch="$HERE/typeof-address-space.patch"
|
|
git -C /opt/smatch apply --check "$patch"
|
|
git -C /opt/smatch apply "$patch"
|
|
sha256sum "$patch" >> /usr/local/share/scst-ci/smatch-source.txt
|
|
CFLAGS='-O2 -g -std=gnu99' make -C /opt/smatch -j"$(nproc)" PREFIX=/usr/local smatch
|
|
# Do not replace standalone Sparse with Smatch's bundled frontend.
|
|
make -C /opt/smatch PREFIX=/usr/local INST_PROGRAMS=smatch install-bin install-assets
|
|
test -s /usr/local/share/smatch/smatch_data/kernel.unreachable.turn_off
|
|
for tool in sparse smatch; do
|
|
"$tool" --version >> "/usr/local/share/scst-ci/$tool-source.txt"
|
|
sha256sum "$(command -v "$tool")" >> "/usr/local/share/scst-ci/$tool-source.txt"
|
|
done
|
|
# Record all installed Smatch model contents, without adding project models.
|
|
(cd /usr/local/share/smatch/smatch_data &&
|
|
find . -type f -print0 | sort -z | xargs -0 sha256sum) \
|
|
> /usr/local/share/scst-ci/smatch-data.sha256
|
|
rm -rf /opt/sparse /opt/smatch
|