patrick/zephyr
1
0
Fork 0
Code Issues Pull requests Actions 7 Packages Projects Releases Wiki Activity

cmake: modules: extensions: Add function to verify binary blobs

Browse source 
Add a cmake helper function to verify if blobs have a valid checksum.

Signed-off-by: Pieter De Gendt <pieter.degendt@basalte.be>
This commit is contained in:
Pieter De Gendt 2024-01-15 10:59:15 +01:00 committed by Carles Cufí
parent fcaed380cd
commit b0150d3ac3
1 changed files with 67 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

67
cmake/modules/extensions.cmake
View file

@ -1566,6 +1566,73 @@ function(zephyr_syscall_header_ifdef feature_toggle)
endif() endif()
endfunction() endfunction()
# Verify blobs fetched using west. If the sha256 checksum isn't valid, a warning/
# fatal error message is printed (depends on REQUIRED flag).
#
# Usage:
# zephyr_blobs_verify(<MODULE module|FILES file [files...]> [REQUIRED])
#
# Example:
# zephyr_blobs_verify(MODULE my_module REQUIRED) # verify all blobs in my_module and fail on error
# zephyr_blobs_verify(FILES img/file.bin) # verify a single file and print on error
function(zephyr_blobs_verify)
cmake_parse_arguments(BLOBS_VERIFY "REQUIRED" "MODULE" "FILES" ${ARGN})
if((DEFINED BLOBS_VERIFY_MODULE) EQUAL (DEFINED BLOBS_VERIFY_FILES))
message(FATAL_ERROR "Either MODULE or FILES required when calling ${CMAKE_CURRENT_FUNCTION}")
endif()
if(NOT WEST)
return()
endif()
execute_process(
COMMAND ${WEST} blobs list ${BLOBS_VERIFY_MODULE} --format "{status} {abspath}"
OUTPUT_VARIABLE BLOBS_LIST_OUTPUT
OUTPUT_STRIP_TRAILING_WHITESPACE
COMMAND_ERROR_IS_FATAL ANY
)
if(${BLOBS_VERIFY_REQUIRED})
set(msg_lvl FATAL_ERROR)
else()
set(msg_lvl WARNING)
endif()
string(REPLACE "\n" ";" BLOBS_LIST ${BLOBS_LIST_OUTPUT})
if(DEFINED BLOBS_VERIFY_FILES)
foreach(file ${BLOBS_VERIFY_FILES})
# Resolve path.
if(IS_ABSOLUTE ${file})
file(REAL_PATH "${file}" real_path)
else()
file(REAL_PATH "${CMAKE_CURRENT_SOURCE_DIR}/${file}" real_path)
endif()
file(TO_NATIVE_PATH ${real_path} path)
message(VERBOSE "Verifying blob \"${path}\"")
# Each path that has a correct sha256 is prefixed with an A
if(NOT "A ${path}" IN_LIST BLOBS_LIST)
message(${msg_lvl} "Blob for path \"${path}\" isn't valid.")
endif()
endforeach()
else()
foreach(blob ${BLOBS_LIST})
separate_arguments(blob)
list(GET blob 0 status)
list(GET blob 1 path)
message(VERBOSE "Verifying blob \"${path}\"")
if(NOT "${status}" STREQUAL "A")
message(${msg_lvl} "Blob for path \"${path}\" isn't valid. Update with: west blobs fetch ${BLOBS_VERIFY_MODULE}")
endif()
endforeach()
endif()
endfunction()
######################################################## ########################################################
# 2. Kconfig-aware extensions # 2. Kconfig-aware extensions
######################################################## ########################################################