xref: /rk3399_ARM-atf/Makefile (revision ca661a0092c8ead5ac7df57c55fffcc835d9c0b9)
1#
2# Copyright (c) 2013-2020, ARM Limited and Contributors. All rights reserved.
3#
4# SPDX-License-Identifier: BSD-3-Clause
5#
6
7#
8# Trusted Firmware Version
9#
10VERSION_MAJOR			:= 2
11VERSION_MINOR			:= 2
12
13# Default goal is build all images
14.DEFAULT_GOAL			:= all
15
16# Avoid any implicit propagation of command line variable definitions to
17# sub-Makefiles, like CFLAGS that we reserved for the firmware images'
18# usage. Other command line options like "-s" are still propagated as usual.
19MAKEOVERRIDES =
20
21MAKE_HELPERS_DIRECTORY := make_helpers/
22include ${MAKE_HELPERS_DIRECTORY}build_macros.mk
23include ${MAKE_HELPERS_DIRECTORY}build_env.mk
24
25################################################################################
26# Default values for build configurations, and their dependencies
27################################################################################
28
29include ${MAKE_HELPERS_DIRECTORY}defaults.mk
30
31# Assertions enabled for DEBUG builds by default
32ENABLE_ASSERTIONS		:= ${DEBUG}
33ENABLE_PMF			:= ${ENABLE_RUNTIME_INSTRUMENTATION}
34PLAT				:= ${DEFAULT_PLAT}
35
36################################################################################
37# Checkpatch script options
38################################################################################
39
40CHECKCODE_ARGS		:=	--no-patch
41# Do not check the coding style on imported library files or documentation files
42INC_LIB_DIRS_TO_CHECK	:=	$(sort $(filter-out			\
43					include/lib/libfdt		\
44					include/lib/libc,		\
45					$(wildcard include/lib/*)))
46INC_DIRS_TO_CHECK	:=	$(sort $(filter-out			\
47					include/lib,			\
48					$(wildcard include/*)))
49LIB_DIRS_TO_CHECK	:=	$(sort $(filter-out			\
50					lib/compiler-rt			\
51					lib/libfdt%			\
52					lib/libc,			\
53					$(wildcard lib/*)))
54ROOT_DIRS_TO_CHECK	:=	$(sort $(filter-out			\
55					lib				\
56					include				\
57					docs				\
58					%.rst,				\
59					$(wildcard *)))
60CHECK_PATHS		:=	${ROOT_DIRS_TO_CHECK}			\
61				${INC_DIRS_TO_CHECK}			\
62				${INC_LIB_DIRS_TO_CHECK}		\
63				${LIB_DIRS_TO_CHECK}
64
65
66################################################################################
67# Process build options
68################################################################################
69
70# Verbose flag
71ifeq (${V},0)
72        Q:=@
73        ECHO:=@echo
74        CHECKCODE_ARGS	+=	--no-summary --terse
75else
76        Q:=
77        ECHO:=$(ECHO_QUIET)
78endif
79
80ifneq ($(findstring s,$(filter-out --%,$(MAKEFLAGS))),)
81        Q:=@
82        ECHO:=$(ECHO_QUIET)
83endif
84
85export Q ECHO
86
87# Process Debug flag
88$(eval $(call add_define,DEBUG))
89ifneq (${DEBUG}, 0)
90        BUILD_TYPE	:=	debug
91        TF_CFLAGS	+= 	-g
92
93        ifneq ($(findstring clang,$(notdir $(CC))),)
94             ASFLAGS		+= 	-g
95        else
96             ASFLAGS		+= 	-g -Wa,--gdwarf-2
97        endif
98
99        # Use LOG_LEVEL_INFO by default for debug builds
100        LOG_LEVEL	:=	40
101else
102        BUILD_TYPE	:=	release
103        # Use LOG_LEVEL_NOTICE by default for release builds
104        LOG_LEVEL	:=	20
105endif
106
107# Default build string (git branch and commit)
108ifeq (${BUILD_STRING},)
109        BUILD_STRING	:=	$(shell git describe --always --dirty --tags 2> /dev/null)
110endif
111VERSION_STRING		:=	v${VERSION_MAJOR}.${VERSION_MINOR}(${BUILD_TYPE}):${BUILD_STRING}
112
113# The cert_create tool cannot generate certificates individually, so we use the
114# target 'certificates' to create them all
115ifneq (${GENERATE_COT},0)
116        FIP_DEPS += certificates
117        FWU_FIP_DEPS += fwu_certificates
118endif
119
120# Process BRANCH_PROTECTION value and set
121# Pointer Authentication and Branch Target Identification flags
122ifeq (${BRANCH_PROTECTION},0)
123	# Default value turns off all types of branch protection
124	BP_OPTION := none
125else ifneq (${ARCH},aarch64)
126        $(error BRANCH_PROTECTION requires AArch64)
127else ifeq (${BRANCH_PROTECTION},1)
128	# Enables all types of branch protection features
129	BP_OPTION := standard
130	ENABLE_BTI := 1
131	ENABLE_PAUTH := 1
132else ifeq (${BRANCH_PROTECTION},2)
133	# Return address signing to its standard level
134	BP_OPTION := pac-ret
135	ENABLE_PAUTH := 1
136else ifeq (${BRANCH_PROTECTION},3)
137	# Extend the signing to include leaf functions
138	BP_OPTION := pac-ret+leaf
139	ENABLE_PAUTH := 1
140else
141        $(error Unknown BRANCH_PROTECTION value ${BRANCH_PROTECTION})
142endif
143
144# USE_SPINLOCK_CAS requires AArch64 build
145ifeq (${USE_SPINLOCK_CAS},1)
146ifneq (${ARCH},aarch64)
147        $(error USE_SPINLOCK_CAS requires AArch64)
148else
149        $(info USE_SPINLOCK_CAS is an experimental feature)
150endif
151endif
152
153# USE_DEBUGFS experimental feature recommended only in debug builds
154ifeq (${USE_DEBUGFS},1)
155ifeq (${DEBUG},1)
156        $(warning DEBUGFS experimental feature is enabled.)
157else
158        $(warning DEBUGFS experimental, recommended in DEBUG builds ONLY)
159endif
160endif
161
162################################################################################
163# Toolchain
164################################################################################
165
166HOSTCC			:=	gcc
167export HOSTCC
168
169CC			:=	${CROSS_COMPILE}gcc
170CPP			:=	${CROSS_COMPILE}cpp
171AS			:=	${CROSS_COMPILE}gcc
172AR			:=	${CROSS_COMPILE}ar
173LINKER			:=	${CROSS_COMPILE}ld
174OC			:=	${CROSS_COMPILE}objcopy
175OD			:=	${CROSS_COMPILE}objdump
176NM			:=	${CROSS_COMPILE}nm
177PP			:=	${CROSS_COMPILE}gcc -E
178DTC			:=	dtc
179
180# Use ${LD}.bfd instead if it exists (as absolute path or together with $PATH).
181ifneq ($(strip $(wildcard ${LD}.bfd) \
182	$(foreach dir,$(subst :, ,${PATH}),$(wildcard ${dir}/${LINKER}.bfd))),)
183LINKER			:=	${LINKER}.bfd
184endif
185
186ifeq (${ARM_ARCH_MAJOR},7)
187target32-directive	= 	-target arm-none-eabi
188# Will set march32-directive from platform configuration
189else
190target32-directive	= 	-target armv8a-none-eabi
191
192# Set the compiler's target architecture profile based on ARM_ARCH_MINOR option
193ifeq (${ARM_ARCH_MINOR},0)
194march32-directive	= 	-march=armv8-a
195march64-directive	= 	-march=armv8-a
196else
197march32-directive	= 	-march=armv8.${ARM_ARCH_MINOR}-a
198march64-directive	= 	-march=armv8.${ARM_ARCH_MINOR}-a
199endif
200endif
201
202ifneq ($(findstring armclang,$(notdir $(CC))),)
203TF_CFLAGS_aarch32	=	-target arm-arm-none-eabi $(march32-directive)
204TF_CFLAGS_aarch64	=	-target aarch64-arm-none-eabi $(march64-directive)
205LD			=	$(LINKER)
206AS			=	$(CC) -c -x assembler-with-cpp $(TF_CFLAGS_$(ARCH))
207CPP			=	$(CC) -E $(TF_CFLAGS_$(ARCH))
208PP			=	$(CC) -E $(TF_CFLAGS_$(ARCH))
209else ifneq ($(findstring clang,$(notdir $(CC))),)
210TF_CFLAGS_aarch32	=	$(target32-directive) $(march32-directive)
211TF_CFLAGS_aarch64	=	-target aarch64-elf $(march64-directive)
212LD			=	ld.lld
213ifeq (, $(shell which $(LD)))
214$(error "No $(LD) in PATH, make sure it is installed or set LD to a different linker")
215endif
216AS			=	$(CC) -c -x assembler-with-cpp $(TF_CFLAGS_$(ARCH))
217CPP			=	$(CC) -E
218PP			=	$(CC) -E
219else ifneq ($(findstring gcc,$(notdir $(CC))),)
220TF_CFLAGS_aarch32	=	$(march32-directive)
221TF_CFLAGS_aarch64	=	$(march64-directive)
222ifeq ($(ENABLE_LTO),1)
223	# Enable LTO only for aarch64
224	ifeq (${ARCH},aarch64)
225		LTO_CFLAGS	=	-flto
226		# Use gcc as a wrapper for the ld, recommended for LTO
227		LINKER		:=	${CROSS_COMPILE}gcc
228	endif
229endif
230LD			=	$(LINKER)
231else
232TF_CFLAGS_aarch32	=	$(march32-directive)
233TF_CFLAGS_aarch64	=	$(march64-directive)
234LD			=	$(LINKER)
235endif
236
237ifeq (${AARCH32_INSTRUCTION_SET},A32)
238TF_CFLAGS_aarch32	+=	-marm
239else ifeq (${AARCH32_INSTRUCTION_SET},T32)
240TF_CFLAGS_aarch32	+=	-mthumb
241else
242$(error Error: Unknown AArch32 instruction set ${AARCH32_INSTRUCTION_SET})
243endif
244
245TF_CFLAGS_aarch32	+=	-mno-unaligned-access
246TF_CFLAGS_aarch64	+=	-mgeneral-regs-only -mstrict-align
247
248ifneq (${BP_OPTION},none)
249TF_CFLAGS_aarch64	+=	-mbranch-protection=${BP_OPTION}
250endif
251
252ASFLAGS_aarch32		=	$(march32-directive)
253ASFLAGS_aarch64		=	$(march64-directive)
254
255# General warnings
256WARNINGS		:=	-Wall -Wmissing-include-dirs -Wunused	\
257				-Wdisabled-optimization	-Wvla -Wshadow	\
258				-Wno-unused-parameter -Wredundant-decls
259
260# Additional warnings
261# Level 1
262WARNING1 := -Wextra
263WARNING1 += -Wmissing-format-attribute
264WARNING1 += -Wmissing-prototypes
265WARNING1 += -Wold-style-definition
266
267# Level 2
268WARNING2 := -Waggregate-return
269WARNING2 += -Wcast-align
270WARNING2 += -Wnested-externs
271
272WARNING3 := -Wbad-function-cast
273WARNING3 += -Wcast-qual
274WARNING3 += -Wconversion
275WARNING3 += -Wpacked
276WARNING3 += -Wpointer-arith
277WARNING3 += -Wswitch-default
278
279ifeq (${W},1)
280WARNINGS += $(WARNING1)
281else ifeq (${W},2)
282WARNINGS += $(WARNING1) $(WARNING2)
283else ifeq (${W},3)
284WARNINGS += $(WARNING1) $(WARNING2) $(WARNING3)
285endif
286
287# Compiler specific warnings
288ifeq ($(findstring clang,$(notdir $(CC))),)
289# not using clang
290WARNINGS	+=		-Wunused-but-set-variable -Wmaybe-uninitialized	\
291				-Wpacked-bitfield-compat -Wshift-overflow=2 \
292				-Wlogical-op
293else
294# using clang
295WARNINGS	+=		-Wshift-overflow -Wshift-sign-overflow \
296				-Wlogical-op-parentheses
297endif
298
299ifneq (${E},0)
300ERRORS := -Werror
301endif
302
303CPPFLAGS		=	${DEFINES} ${INCLUDES} ${MBEDTLS_INC} -nostdinc	\
304				$(ERRORS) $(WARNINGS)
305ASFLAGS			+=	$(CPPFLAGS) $(ASFLAGS_$(ARCH))			\
306				-ffreestanding -Wa,--fatal-warnings
307TF_CFLAGS		+=	$(CPPFLAGS) $(TF_CFLAGS_$(ARCH))		\
308				-ffunction-sections -fdata-sections		\
309				-ffreestanding -fno-builtin -fno-common		\
310				-Os -std=gnu99
311
312ifeq (${SANITIZE_UB},on)
313TF_CFLAGS		+=	-fsanitize=undefined -fno-sanitize-recover
314endif
315ifeq (${SANITIZE_UB},trap)
316TF_CFLAGS		+=	-fsanitize=undefined -fno-sanitize-recover	\
317				-fsanitize-undefined-trap-on-error
318endif
319
320GCC_V_OUTPUT		:=	$(shell $(CC) -v 2>&1)
321
322# LD = armlink
323ifneq ($(findstring armlink,$(notdir $(LD))),)
324TF_LDFLAGS		+=	--diag_error=warning --lto_level=O1
325TF_LDFLAGS		+=	--remove --info=unused,unusedsymbols
326TF_LDFLAGS		+=	$(TF_LDFLAGS_$(ARCH))
327
328# LD = gcc (used when GCC LTO is enabled)
329else ifneq ($(findstring gcc,$(notdir $(LD))),)
330# Pass ld options with Wl or Xlinker switches
331TF_LDFLAGS		+=	-Wl,--fatal-warnings -O1
332TF_LDFLAGS		+=	-Wl,--gc-sections
333ifeq ($(ENABLE_LTO),1)
334	ifeq (${ARCH},aarch64)
335		TF_LDFLAGS	+=	-flto -fuse-linker-plugin
336	endif
337endif
338# GCC automatically adds fix-cortex-a53-843419 flag when used to link
339# which breaks some builds, so disable if errata fix is not explicitly enabled
340ifneq (${ERRATA_A53_843419},1)
341	TF_LDFLAGS	+= 	-mno-fix-cortex-a53-843419
342endif
343TF_LDFLAGS		+= 	-nostdlib
344TF_LDFLAGS		+=	$(subst --,-Xlinker --,$(TF_LDFLAGS_$(ARCH)))
345
346# LD = gcc-ld (ld) or llvm-ld (ld.lld) or other
347else
348TF_LDFLAGS		+=	--fatal-warnings -O1
349TF_LDFLAGS		+=	--gc-sections
350# ld.lld doesn't recognize the errata flags,
351# therefore don't add those in that case
352ifeq ($(findstring ld.lld,$(notdir $(LD))),)
353TF_LDFLAGS		+=	$(TF_LDFLAGS_$(ARCH))
354endif
355endif
356
357DTC_FLAGS		+=	-I dts -O dtb
358DTC_CPPFLAGS		+=	-P -nostdinc -Iinclude -Ifdts -undef -x assembler-with-cpp
359
360################################################################################
361# Common sources and include directories
362################################################################################
363include lib/compiler-rt/compiler-rt.mk
364
365BL_COMMON_SOURCES	+=	common/bl_common.c			\
366				common/tf_log.c				\
367				common/${ARCH}/debug.S			\
368				drivers/console/multi_console.c		\
369				lib/${ARCH}/cache_helpers.S		\
370				lib/${ARCH}/misc_helpers.S		\
371				plat/common/plat_bl_common.c		\
372				plat/common/plat_log_common.c		\
373				plat/common/${ARCH}/plat_common.c	\
374				plat/common/${ARCH}/platform_helpers.S	\
375				${COMPILER_RT_SRCS}
376
377ifeq ($(notdir $(CC)),armclang)
378BL_COMMON_SOURCES	+=	lib/${ARCH}/armclang_printf.S
379endif
380
381ifeq (${SANITIZE_UB},on)
382BL_COMMON_SOURCES	+=	plat/common/ubsan.c
383endif
384
385INCLUDES		+=	-Iinclude				\
386				-Iinclude/arch/${ARCH}			\
387				-Iinclude/lib/cpus/${ARCH}		\
388				-Iinclude/lib/el3_runtime/${ARCH}	\
389				${PLAT_INCLUDES}			\
390				${SPD_INCLUDES}
391
392include common/backtrace/backtrace.mk
393
394################################################################################
395# Generic definitions
396################################################################################
397
398include ${MAKE_HELPERS_DIRECTORY}plat_helpers.mk
399
400BUILD_BASE		:=	./build
401BUILD_PLAT		:=	${BUILD_BASE}/${PLAT}/${BUILD_TYPE}
402
403SPDS			:=	$(sort $(filter-out none, $(patsubst services/spd/%,%,$(wildcard services/spd/*))))
404
405# Platforms providing their own TBB makefile may override this value
406INCLUDE_TBBR_MK		:=	1
407
408
409################################################################################
410# Include SPD Makefile if one has been specified
411################################################################################
412
413ifneq (${SPD},none)
414ifeq (${ARCH},aarch32)
415        $(error "Error: SPD is incompatible with AArch32.")
416endif
417ifdef EL3_PAYLOAD_BASE
418        $(warning "SPD and EL3_PAYLOAD_BASE are incompatible build options.")
419        $(warning "The SPD and its BL32 companion will be present but ignored.")
420endif
421        # We expect to locate an spd.mk under the specified SPD directory
422        SPD_MAKE	:=	$(wildcard services/spd/${SPD}/${SPD}.mk)
423
424        ifeq (${SPD_MAKE},)
425                $(error Error: No services/spd/${SPD}/${SPD}.mk located)
426        endif
427        $(info Including ${SPD_MAKE})
428        include ${SPD_MAKE}
429
430        # If there's BL32 companion for the chosen SPD, we expect that the SPD's
431        # Makefile would set NEED_BL32 to "yes". In this case, the build system
432        # supports two mutually exclusive options:
433        # * BL32 is built from source: then BL32_SOURCES must contain the list
434        #   of source files to build BL32
435        # * BL32 is a prebuilt binary: then BL32 must point to the image file
436        #   that will be included in the FIP
437        # If both BL32_SOURCES and BL32 are defined, the binary takes precedence
438        # over the sources.
439endif
440
441################################################################################
442# Include the platform specific Makefile after the SPD Makefile (the platform
443# makefile may use all previous definitions in this file)
444################################################################################
445
446include ${PLAT_MAKEFILE_FULL}
447
448$(eval $(call MAKE_PREREQ_DIR,${BUILD_PLAT}))
449
450ifeq (${ARM_ARCH_MAJOR},7)
451include make_helpers/armv7-a-cpus.mk
452endif
453
454PIE_FOUND		:=	$(findstring --enable-default-pie,${GCC_V_OUTPUT})
455ifneq ($(PIE_FOUND),)
456	TF_CFLAGS	+=	-fno-PIE
457endif
458
459ifneq ($(findstring gcc,$(notdir $(LD))),)
460	PIE_LDFLAGS	+=	-Wl,-pie -Wl,--no-dynamic-linker
461else
462	PIE_LDFLAGS	+=	-pie --no-dynamic-linker
463endif
464
465ifeq ($(ENABLE_PIE),1)
466ifeq ($(BL2_AT_EL3),1)
467ifneq ($(BL2_IN_XIP_MEM),1)
468	BL2_CFLAGS	+=	-fpie
469	BL2_LDFLAGS	+=	$(PIE_LDFLAGS)
470endif
471endif
472	BL31_CFLAGS	+=	-fpie
473	BL31_LDFLAGS	+=	$(PIE_LDFLAGS)
474ifeq ($(ARCH),aarch64)
475	BL32_CFLAGS	+=	-fpie
476	BL32_LDFLAGS	+=	$(PIE_LDFLAGS)
477endif
478endif
479
480# Include the CPU specific operations makefile, which provides default
481# values for all CPU errata workarounds and CPU specific optimisations.
482# This can be overridden by the platform.
483include lib/cpus/cpu-ops.mk
484
485ifeq (${ARCH},aarch32)
486NEED_BL32 := yes
487
488################################################################################
489# Build `AARCH32_SP` as BL32 image for AArch32
490################################################################################
491ifneq (${AARCH32_SP},none)
492# We expect to locate an sp.mk under the specified AARCH32_SP directory
493AARCH32_SP_MAKE	:=	$(wildcard bl32/${AARCH32_SP}/${AARCH32_SP}.mk)
494
495ifeq (${AARCH32_SP_MAKE},)
496  $(error Error: No bl32/${AARCH32_SP}/${AARCH32_SP}.mk located)
497endif
498
499$(info Including ${AARCH32_SP_MAKE})
500include ${AARCH32_SP_MAKE}
501endif
502
503endif
504
505################################################################################
506# Include libc if not overridden
507################################################################################
508ifeq (${OVERRIDE_LIBC},0)
509include lib/libc/libc.mk
510endif
511
512################################################################################
513# Check incompatible options
514################################################################################
515
516ifdef EL3_PAYLOAD_BASE
517        ifdef PRELOADED_BL33_BASE
518                $(warning "PRELOADED_BL33_BASE and EL3_PAYLOAD_BASE are \
519                incompatible build options. EL3_PAYLOAD_BASE has priority.")
520        endif
521        ifneq (${GENERATE_COT},0)
522                $(error "GENERATE_COT and EL3_PAYLOAD_BASE are incompatible build options.")
523        endif
524        ifneq (${TRUSTED_BOARD_BOOT},0)
525                $(error "TRUSTED_BOARD_BOOT and EL3_PAYLOAD_BASE are incompatible build options.")
526        endif
527endif
528
529ifeq (${NEED_BL33},yes)
530        ifdef EL3_PAYLOAD_BASE
531                $(warning "BL33 image is not needed when option \
532                BL33_PAYLOAD_BASE is used and won't be added to the FIP file.")
533        endif
534        ifdef PRELOADED_BL33_BASE
535                $(warning "BL33 image is not needed when option \
536                PRELOADED_BL33_BASE is used and won't be added to the FIP \
537                file.")
538        endif
539endif
540
541# When building for systems with hardware-assisted coherency, there's no need to
542# use USE_COHERENT_MEM. Require that USE_COHERENT_MEM must be set to 0 too.
543ifeq ($(HW_ASSISTED_COHERENCY)-$(USE_COHERENT_MEM),1-1)
544$(error USE_COHERENT_MEM cannot be enabled with HW_ASSISTED_COHERENCY)
545endif
546
547#For now, BL2_IN_XIP_MEM is only supported when BL2_AT_EL3 is 1.
548ifeq ($(BL2_AT_EL3)-$(BL2_IN_XIP_MEM),0-1)
549$(error "BL2_IN_XIP_MEM is only supported when BL2_AT_EL3 is enabled")
550endif
551
552# For RAS_EXTENSION, require that EAs are handled in EL3 first
553ifeq ($(RAS_EXTENSION),1)
554    ifneq ($(HANDLE_EA_EL3_FIRST),1)
555        $(error For RAS_EXTENSION, HANDLE_EA_EL3_FIRST must also be 1)
556    endif
557endif
558
559# When FAULT_INJECTION_SUPPORT is used, require that RAS_EXTENSION is enabled
560ifeq ($(FAULT_INJECTION_SUPPORT),1)
561    ifneq ($(RAS_EXTENSION),1)
562        $(error For FAULT_INJECTION_SUPPORT, RAS_EXTENSION must also be 1)
563    endif
564endif
565
566# DYN_DISABLE_AUTH can be set only when TRUSTED_BOARD_BOOT=1
567ifeq ($(DYN_DISABLE_AUTH), 1)
568    ifeq (${TRUSTED_BOARD_BOOT}, 0)
569        $(error "TRUSTED_BOARD_BOOT must be enabled for DYN_DISABLE_AUTH to be set.")
570    endif
571endif
572
573# If pointer authentication is used in the firmware, make sure that all the
574# registers associated to it are also saved and restored.
575# Not doing it would leak the value of the keys used by EL3 to EL1 and S-EL1.
576ifeq ($(ENABLE_PAUTH),1)
577    ifeq ($(CTX_INCLUDE_PAUTH_REGS),0)
578        $(error Pointer Authentication requires CTX_INCLUDE_PAUTH_REGS=1)
579    endif
580endif
581
582ifeq ($(CTX_INCLUDE_PAUTH_REGS),1)
583    ifneq (${ARCH},aarch64)
584        $(error CTX_INCLUDE_PAUTH_REGS requires AArch64)
585    else
586        $(info CTX_INCLUDE_PAUTH_REGS is an experimental feature)
587    endif
588endif
589
590ifeq ($(ENABLE_PAUTH),1)
591    $(info Pointer Authentication is an experimental feature)
592endif
593
594ifeq ($(ENABLE_BTI),1)
595    $(info Branch Protection is an experimental feature)
596endif
597
598ifeq ($(CTX_INCLUDE_MTE_REGS),1)
599    ifneq (${ARCH},aarch64)
600        $(error CTX_INCLUDE_MTE_REGS requires AArch64)
601    else
602        $(info CTX_INCLUDE_MTE_REGS is an experimental feature)
603    endif
604endif
605
606################################################################################
607# Process platform overrideable behaviour
608################################################################################
609
610# Using BL2 implies that a BL33 image also needs to be supplied for the FIP and
611# Certificate generation tools. This flag can be overridden by the platform.
612ifdef BL2_SOURCES
613        ifdef EL3_PAYLOAD_BASE
614                # If booting an EL3 payload there is no need for a BL33 image
615                # in the FIP file.
616                NEED_BL33		:=	no
617        else
618                ifdef PRELOADED_BL33_BASE
619                        # If booting a BL33 preloaded image there is no need of
620                        # another one in the FIP file.
621                        NEED_BL33		:=	no
622                else
623                        NEED_BL33		?=	yes
624                endif
625        endif
626endif
627
628# If SCP_BL2 is given, we always want FIP to include it.
629ifdef SCP_BL2
630        NEED_SCP_BL2		:=	yes
631endif
632
633# For AArch32, BL31 is not currently supported.
634ifneq (${ARCH},aarch32)
635    ifdef BL31_SOURCES
636        # When booting an EL3 payload, there is no need to compile the BL31 image nor
637        # put it in the FIP.
638        ifndef EL3_PAYLOAD_BASE
639            NEED_BL31 := yes
640        endif
641    endif
642endif
643
644# Process TBB related flags
645ifneq (${GENERATE_COT},0)
646        # Common cert_create options
647        ifneq (${CREATE_KEYS},0)
648                $(eval CRT_ARGS += -n)
649                $(eval FWU_CRT_ARGS += -n)
650                ifneq (${SAVE_KEYS},0)
651                        $(eval CRT_ARGS += -k)
652                        $(eval FWU_CRT_ARGS += -k)
653                endif
654        endif
655        # Include TBBR makefile (unless the platform indicates otherwise)
656        ifeq (${INCLUDE_TBBR_MK},1)
657                include make_helpers/tbbr/tbbr_tools.mk
658        endif
659endif
660
661ifneq (${FIP_ALIGN},0)
662FIP_ARGS += --align ${FIP_ALIGN}
663endif
664
665################################################################################
666# Include libraries' Makefile that are used in all BL
667################################################################################
668
669include lib/stack_protector/stack_protector.mk
670
671################################################################################
672# Auxiliary tools (fiptool, cert_create, etc)
673################################################################################
674
675# Variables for use with Certificate Generation Tool
676CRTTOOLPATH		?=	tools/cert_create
677CRTTOOL			?=	${CRTTOOLPATH}/cert_create${BIN_EXT}
678
679# Variables for use with Firmware Image Package
680FIPTOOLPATH		?=	tools/fiptool
681FIPTOOL			?=	${FIPTOOLPATH}/fiptool${BIN_EXT}
682
683# Variables for use with sptool
684SPTOOLPATH		?=	tools/sptool
685SPTOOL			?=	${SPTOOLPATH}/sptool${BIN_EXT}
686
687# Variables for use with ROMLIB
688ROMLIBPATH		?=	lib/romlib
689
690# Variable for use with Python
691PYTHON			?=	python3
692
693# Variables for use with PRINT_MEMORY_MAP
694PRINT_MEMORY_MAP_PATH		?=	tools/memory
695PRINT_MEMORY_MAP		?=	${PRINT_MEMORY_MAP_PATH}/print_memory_map.py
696
697################################################################################
698# Include BL specific makefiles
699################################################################################
700ifdef BL1_SOURCES
701NEED_BL1 := yes
702include bl1/bl1.mk
703endif
704
705ifdef BL2_SOURCES
706NEED_BL2 := yes
707include bl2/bl2.mk
708endif
709
710ifdef BL2U_SOURCES
711NEED_BL2U := yes
712include bl2u/bl2u.mk
713endif
714
715ifeq (${NEED_BL31},yes)
716ifdef BL31_SOURCES
717include bl31/bl31.mk
718endif
719endif
720
721ifdef FDT_SOURCES
722NEED_FDT := yes
723endif
724
725################################################################################
726# Build options checks
727################################################################################
728
729$(eval $(call assert_boolean,COLD_BOOT_SINGLE_CPU))
730$(eval $(call assert_boolean,CREATE_KEYS))
731$(eval $(call assert_boolean,CTX_INCLUDE_AARCH32_REGS))
732$(eval $(call assert_boolean,CTX_INCLUDE_FPREGS))
733$(eval $(call assert_boolean,CTX_INCLUDE_PAUTH_REGS))
734$(eval $(call assert_boolean,CTX_INCLUDE_MTE_REGS))
735$(eval $(call assert_boolean,DEBUG))
736$(eval $(call assert_boolean,DYN_DISABLE_AUTH))
737$(eval $(call assert_boolean,EL3_EXCEPTION_HANDLING))
738$(eval $(call assert_boolean,ENABLE_AMU))
739$(eval $(call assert_boolean,ENABLE_ASSERTIONS))
740$(eval $(call assert_boolean,ENABLE_MPAM_FOR_LOWER_ELS))
741$(eval $(call assert_boolean,ENABLE_PIE))
742$(eval $(call assert_boolean,ENABLE_PMF))
743$(eval $(call assert_boolean,ENABLE_PSCI_STAT))
744$(eval $(call assert_boolean,ENABLE_RUNTIME_INSTRUMENTATION))
745$(eval $(call assert_boolean,ENABLE_SPE_FOR_LOWER_ELS))
746$(eval $(call assert_boolean,ENABLE_SVE_FOR_NS))
747$(eval $(call assert_boolean,ERROR_DEPRECATED))
748$(eval $(call assert_boolean,FAULT_INJECTION_SUPPORT))
749$(eval $(call assert_boolean,GENERATE_COT))
750$(eval $(call assert_boolean,GICV2_G0_FOR_EL3))
751$(eval $(call assert_boolean,HANDLE_EA_EL3_FIRST))
752$(eval $(call assert_boolean,HW_ASSISTED_COHERENCY))
753$(eval $(call assert_boolean,NS_TIMER_SWITCH))
754$(eval $(call assert_boolean,OVERRIDE_LIBC))
755$(eval $(call assert_boolean,PL011_GENERIC_UART))
756$(eval $(call assert_boolean,PROGRAMMABLE_RESET_ADDRESS))
757$(eval $(call assert_boolean,PSCI_EXTENDED_STATE_ID))
758$(eval $(call assert_boolean,RAS_EXTENSION))
759$(eval $(call assert_boolean,RESET_TO_BL31))
760$(eval $(call assert_boolean,SAVE_KEYS))
761$(eval $(call assert_boolean,SEPARATE_CODE_AND_RODATA))
762$(eval $(call assert_boolean,SEPARATE_NOBITS_REGION))
763$(eval $(call assert_boolean,SPIN_ON_BL1_EXIT))
764$(eval $(call assert_boolean,SPM_MM))
765$(eval $(call assert_boolean,TRUSTED_BOARD_BOOT))
766$(eval $(call assert_boolean,USE_COHERENT_MEM))
767$(eval $(call assert_boolean,USE_DEBUGFS))
768$(eval $(call assert_boolean,USE_ROMLIB))
769$(eval $(call assert_boolean,USE_TBBR_DEFS))
770$(eval $(call assert_boolean,WARMBOOT_ENABLE_DCACHE_EARLY))
771$(eval $(call assert_boolean,BL2_AT_EL3))
772$(eval $(call assert_boolean,BL2_IN_XIP_MEM))
773$(eval $(call assert_boolean,BL2_INV_DCACHE))
774$(eval $(call assert_boolean,USE_SPINLOCK_CAS))
775
776$(eval $(call assert_numeric,ARM_ARCH_MAJOR))
777$(eval $(call assert_numeric,ARM_ARCH_MINOR))
778$(eval $(call assert_numeric,BRANCH_PROTECTION))
779
780ifdef KEY_SIZE
781        $(eval $(call assert_numeric,KEY_SIZE))
782endif
783
784ifeq ($(filter $(SANITIZE_UB), on off trap),)
785        $(error "Invalid value for SANITIZE_UB: can be one of on, off, trap")
786endif
787
788################################################################################
789# Add definitions to the cpp preprocessor based on the current build options.
790# This is done after including the platform specific makefile to allow the
791# platform to overwrite the default options
792################################################################################
793
794$(eval $(call add_define,ARM_ARCH_MAJOR))
795$(eval $(call add_define,ARM_ARCH_MINOR))
796$(eval $(call add_define,COLD_BOOT_SINGLE_CPU))
797$(eval $(call add_define,CTX_INCLUDE_AARCH32_REGS))
798$(eval $(call add_define,CTX_INCLUDE_FPREGS))
799$(eval $(call add_define,CTX_INCLUDE_PAUTH_REGS))
800$(eval $(call add_define,EL3_EXCEPTION_HANDLING))
801$(eval $(call add_define,CTX_INCLUDE_MTE_REGS))
802$(eval $(call add_define,ENABLE_AMU))
803$(eval $(call add_define,ENABLE_ASSERTIONS))
804$(eval $(call add_define,ENABLE_BTI))
805$(eval $(call add_define,ENABLE_MPAM_FOR_LOWER_ELS))
806$(eval $(call add_define,ENABLE_PAUTH))
807$(eval $(call add_define,ENABLE_PIE))
808$(eval $(call add_define,ENABLE_PMF))
809$(eval $(call add_define,ENABLE_PSCI_STAT))
810$(eval $(call add_define,ENABLE_RUNTIME_INSTRUMENTATION))
811$(eval $(call add_define,ENABLE_SPE_FOR_LOWER_ELS))
812$(eval $(call add_define,ENABLE_SVE_FOR_NS))
813$(eval $(call add_define,ERROR_DEPRECATED))
814$(eval $(call add_define,FAULT_INJECTION_SUPPORT))
815$(eval $(call add_define,GICV2_G0_FOR_EL3))
816$(eval $(call add_define,HANDLE_EA_EL3_FIRST))
817$(eval $(call add_define,HW_ASSISTED_COHERENCY))
818$(eval $(call add_define,LOG_LEVEL))
819$(eval $(call add_define,NS_TIMER_SWITCH))
820$(eval $(call add_define,PL011_GENERIC_UART))
821$(eval $(call add_define,PLAT_${PLAT}))
822$(eval $(call add_define,PROGRAMMABLE_RESET_ADDRESS))
823$(eval $(call add_define,PSCI_EXTENDED_STATE_ID))
824$(eval $(call add_define,RAS_EXTENSION))
825$(eval $(call add_define,RESET_TO_BL31))
826$(eval $(call add_define,SEPARATE_CODE_AND_RODATA))
827$(eval $(call add_define,SEPARATE_NOBITS_REGION))
828$(eval $(call add_define,RECLAIM_INIT_CODE))
829$(eval $(call add_define,SPD_${SPD}))
830$(eval $(call add_define,SPIN_ON_BL1_EXIT))
831$(eval $(call add_define,SPM_MM))
832$(eval $(call add_define,TRUSTED_BOARD_BOOT))
833$(eval $(call add_define,USE_COHERENT_MEM))
834$(eval $(call add_define,USE_DEBUGFS))
835$(eval $(call add_define,USE_ROMLIB))
836$(eval $(call add_define,USE_TBBR_DEFS))
837$(eval $(call add_define,WARMBOOT_ENABLE_DCACHE_EARLY))
838$(eval $(call add_define,BL2_AT_EL3))
839$(eval $(call add_define,BL2_IN_XIP_MEM))
840$(eval $(call add_define,BL2_INV_DCACHE))
841$(eval $(call add_define,USE_SPINLOCK_CAS))
842
843ifeq (${SANITIZE_UB},trap)
844        $(eval $(call add_define,MONITOR_TRAPS))
845endif
846
847# Define the EL3_PAYLOAD_BASE flag only if it is provided.
848ifdef EL3_PAYLOAD_BASE
849        $(eval $(call add_define,EL3_PAYLOAD_BASE))
850else
851        # Define the PRELOADED_BL33_BASE flag only if it is provided and
852        # EL3_PAYLOAD_BASE is not defined, as it has priority.
853        ifdef PRELOADED_BL33_BASE
854                $(eval $(call add_define,PRELOADED_BL33_BASE))
855        endif
856endif
857
858# Define the DYN_DISABLE_AUTH flag only if set.
859ifeq (${DYN_DISABLE_AUTH},1)
860$(eval $(call add_define,DYN_DISABLE_AUTH))
861endif
862
863ifneq ($(findstring armlink,$(notdir $(LD))),)
864$(eval $(call add_define,USE_ARM_LINK))
865endif
866
867################################################################################
868# Build targets
869################################################################################
870
871.PHONY:	all msg_start clean realclean distclean cscope locate-checkpatch checkcodebase checkpatch fiptool sptool fip fwu_fip certtool dtbs memmap
872.SUFFIXES:
873
874all: msg_start
875
876msg_start:
877	@echo "Building ${PLAT}"
878
879ifeq (${ERROR_DEPRECATED},0)
880# Check if deprecated declarations and cpp warnings should be treated as error or not.
881ifneq ($(findstring clang,$(notdir $(CC))),)
882    CPPFLAGS		+= 	-Wno-error=deprecated-declarations
883else
884    CPPFLAGS		+= 	-Wno-error=deprecated-declarations -Wno-error=cpp
885endif
886# __ASSEMBLY__ is deprecated in favor of the compiler-builtin __ASSEMBLER__.
887ASFLAGS	+= -D__ASSEMBLY__
888# AARCH32/AARCH64 macros are deprecated in favor of the compiler-builtin __aarch64__.
889ifeq (${ARCH},aarch32)
890        $(eval $(call add_define,AARCH32))
891else
892        $(eval $(call add_define,AARCH64))
893endif
894endif # !ERROR_DEPRECATED
895
896$(eval $(call MAKE_LIB_DIRS))
897$(eval $(call MAKE_LIB,c))
898
899# Expand build macros for the different images
900ifeq (${NEED_BL1},yes)
901$(eval $(call MAKE_BL,1))
902endif
903
904ifeq (${NEED_BL2},yes)
905ifeq (${BL2_AT_EL3}, 0)
906FIP_BL2_ARGS := tb-fw
907endif
908
909$(if ${BL2}, $(eval $(call TOOL_ADD_IMG,bl2,--${FIP_BL2_ARGS})),\
910	$(eval $(call MAKE_BL,2,${FIP_BL2_ARGS})))
911endif
912
913ifeq (${NEED_SCP_BL2},yes)
914$(eval $(call TOOL_ADD_IMG,scp_bl2,--scp-fw))
915endif
916
917ifeq (${NEED_BL31},yes)
918BL31_SOURCES += ${SPD_SOURCES}
919$(if ${BL31}, $(eval $(call TOOL_ADD_IMG,bl31,--soc-fw)),\
920	$(eval $(call MAKE_BL,31,soc-fw)))
921endif
922
923# If a BL32 image is needed but neither BL32 nor BL32_SOURCES is defined, the
924# build system will call TOOL_ADD_IMG to print a warning message and abort the
925# process. Note that the dependency on BL32 applies to the FIP only.
926ifeq (${NEED_BL32},yes)
927
928BUILD_BL32 := $(if $(BL32),,$(if $(BL32_SOURCES),1))
929
930$(if ${BUILD_BL32}, $(eval $(call MAKE_BL,32,tos-fw)),\
931	$(eval $(call TOOL_ADD_IMG,bl32,--tos-fw)))
932endif
933
934# Add the BL33 image if required by the platform
935ifeq (${NEED_BL33},yes)
936$(eval $(call TOOL_ADD_IMG,bl33,--nt-fw))
937endif
938
939ifeq (${NEED_BL2U},yes)
940$(if ${BL2U}, $(eval $(call TOOL_ADD_IMG,bl2u,--ap-fwu-cfg,FWU_)),\
941	$(eval $(call MAKE_BL,2u,ap-fwu-cfg,FWU_)))
942endif
943
944# Expand build macros for the different images
945ifeq (${NEED_FDT},yes)
946    $(eval $(call MAKE_DTBS,$(BUILD_PLAT)/fdts,$(FDT_SOURCES)))
947endif
948
949locate-checkpatch:
950ifndef CHECKPATCH
951	$(error "Please set CHECKPATCH to point to the Linux checkpatch.pl file, eg: CHECKPATCH=../linux/scripts/checkpatch.pl")
952else
953ifeq (,$(wildcard ${CHECKPATCH}))
954	$(error "The file CHECKPATCH points to cannot be found, use eg: CHECKPATCH=../linux/scripts/checkpatch.pl")
955endif
956endif
957
958clean:
959	@echo "  CLEAN"
960	$(call SHELL_REMOVE_DIR,${BUILD_PLAT})
961	${Q}${MAKE} --no-print-directory -C ${FIPTOOLPATH} clean
962	${Q}${MAKE} PLAT=${PLAT} --no-print-directory -C ${CRTTOOLPATH} clean
963	${Q}${MAKE} --no-print-directory -C ${ROMLIBPATH} clean
964
965realclean distclean:
966	@echo "  REALCLEAN"
967	$(call SHELL_REMOVE_DIR,${BUILD_BASE})
968	$(call SHELL_DELETE_ALL, ${CURDIR}/cscope.*)
969	${Q}${MAKE} --no-print-directory -C ${FIPTOOLPATH} clean
970	${Q}${MAKE} --no-print-directory -C ${SPTOOLPATH} clean
971	${Q}${MAKE} PLAT=${PLAT} --no-print-directory -C ${CRTTOOLPATH} clean
972	${Q}${MAKE} --no-print-directory -C ${ROMLIBPATH} clean
973
974checkcodebase:		locate-checkpatch
975	@echo "  CHECKING STYLE"
976	@if test -d .git ; then						\
977		git ls-files | grep -E -v 'libfdt|libc|docs|\.rst' |	\
978		while read GIT_FILE ;					\
979		do ${CHECKPATCH} ${CHECKCODE_ARGS} -f $$GIT_FILE ;	\
980		done ;							\
981	else								\
982		 find . -type f -not -iwholename "*.git*"		\
983		 -not -iwholename "*build*"				\
984		 -not -iwholename "*libfdt*"				\
985		 -not -iwholename "*libc*"				\
986		 -not -iwholename "*docs*"				\
987		 -not -iwholename "*.rst"				\
988		 -exec ${CHECKPATCH} ${CHECKCODE_ARGS} -f {} \; ;	\
989	fi
990
991checkpatch:		locate-checkpatch
992	@echo "  CHECKING STYLE"
993	@if test -n "${CHECKPATCH_OPTS}"; then				\
994		echo "    with ${CHECKPATCH_OPTS} option(s)";		\
995	fi
996	${Q}COMMON_COMMIT=$$(git merge-base HEAD ${BASE_COMMIT});	\
997	for commit in `git rev-list $$COMMON_COMMIT..HEAD`; do		\
998		printf "\n[*] Checking style of '$$commit'\n\n";	\
999		git log --format=email "$$commit~..$$commit"		\
1000			-- ${CHECK_PATHS} |				\
1001			${CHECKPATCH} ${CHECKPATCH_OPTS} - || true;	\
1002		git diff --format=email "$$commit~..$$commit"		\
1003			-- ${CHECK_PATHS} |				\
1004			${CHECKPATCH}  ${CHECKPATCH_OPTS} - || true;	\
1005	done
1006
1007certtool: ${CRTTOOL}
1008
1009.PHONY: ${CRTTOOL}
1010${CRTTOOL}:
1011	${Q}${MAKE} PLAT=${PLAT} USE_TBBR_DEFS=${USE_TBBR_DEFS} --no-print-directory -C ${CRTTOOLPATH}
1012	@${ECHO_BLANK_LINE}
1013	@echo "Built $@ successfully"
1014	@${ECHO_BLANK_LINE}
1015
1016ifneq (${GENERATE_COT},0)
1017certificates: ${CRT_DEPS} ${CRTTOOL}
1018	${Q}${CRTTOOL} ${CRT_ARGS}
1019	@${ECHO_BLANK_LINE}
1020	@echo "Built $@ successfully"
1021	@echo "Certificates can be found in ${BUILD_PLAT}"
1022	@${ECHO_BLANK_LINE}
1023endif
1024
1025${BUILD_PLAT}/${FIP_NAME}: ${FIP_DEPS} ${FIPTOOL}
1026	${Q}${FIPTOOL} create ${FIP_ARGS} $@
1027	${Q}${FIPTOOL} info $@
1028	@${ECHO_BLANK_LINE}
1029	@echo "Built $@ successfully"
1030	@${ECHO_BLANK_LINE}
1031
1032ifneq (${GENERATE_COT},0)
1033fwu_certificates: ${FWU_CRT_DEPS} ${CRTTOOL}
1034	${Q}${CRTTOOL} ${FWU_CRT_ARGS}
1035	@${ECHO_BLANK_LINE}
1036	@echo "Built $@ successfully"
1037	@echo "FWU certificates can be found in ${BUILD_PLAT}"
1038	@${ECHO_BLANK_LINE}
1039endif
1040
1041${BUILD_PLAT}/${FWU_FIP_NAME}: ${FWU_FIP_DEPS} ${FIPTOOL}
1042	${Q}${FIPTOOL} create ${FWU_FIP_ARGS} $@
1043	${Q}${FIPTOOL} info $@
1044	@${ECHO_BLANK_LINE}
1045	@echo "Built $@ successfully"
1046	@${ECHO_BLANK_LINE}
1047
1048fiptool: ${FIPTOOL}
1049fip: ${BUILD_PLAT}/${FIP_NAME}
1050fwu_fip: ${BUILD_PLAT}/${FWU_FIP_NAME}
1051
1052.PHONY: ${FIPTOOL}
1053${FIPTOOL}:
1054	${Q}${MAKE} CPPFLAGS="-DVERSION='\"${VERSION_STRING}\"'" --no-print-directory -C ${FIPTOOLPATH}
1055
1056sptool: ${SPTOOL}
1057.PHONY: ${SPTOOL}
1058${SPTOOL}:
1059	${Q}${MAKE} CPPFLAGS="-DVERSION='\"${VERSION_STRING}\"'" --no-print-directory -C ${SPTOOLPATH}
1060
1061.PHONY: libraries
1062romlib.bin: libraries
1063	${Q}${MAKE} PLAT_DIR=${PLAT_DIR} BUILD_PLAT=${BUILD_PLAT} ENABLE_BTI=${ENABLE_BTI} ARM_ARCH_MINOR=${ARM_ARCH_MINOR} INCLUDES='${INCLUDES}' DEFINES='${DEFINES}' --no-print-directory -C ${ROMLIBPATH} all
1064
1065# Call print_memory_map tool
1066memmap: all
1067	${Q}${PYTHON} $(PRINT_MEMORY_MAP) $(BUILD_PLAT)
1068
1069cscope:
1070	@echo "  CSCOPE"
1071	${Q}find ${CURDIR} -name "*.[chsS]" > cscope.files
1072	${Q}cscope -b -q -k
1073
1074help:
1075	@echo "usage: ${MAKE} [PLAT=<platform>] [OPTIONS] [TARGET]"
1076	@echo ""
1077	@echo "PLAT is used to specify which platform you wish to build."
1078	@echo "If no platform is specified, PLAT defaults to: ${DEFAULT_PLAT}"
1079	@echo ""
1080	@echo "platform = ${PLATFORM_LIST}"
1081	@echo ""
1082	@echo "Please refer to the User Guide for a list of all supported options."
1083	@echo "Note that the build system doesn't track dependencies for build "
1084	@echo "options. Therefore, if any of the build options are changed "
1085	@echo "from a previous build, a clean build must be performed."
1086	@echo ""
1087	@echo "Supported Targets:"
1088	@echo "  all            Build all individual bootloader binaries"
1089	@echo "  bl1            Build the BL1 binary"
1090	@echo "  bl2            Build the BL2 binary"
1091	@echo "  bl2u           Build the BL2U binary"
1092	@echo "  bl31           Build the BL31 binary"
1093	@echo "  bl32           Build the BL32 binary. If ARCH=aarch32, then "
1094	@echo "                 this builds secure payload specified by AARCH32_SP"
1095	@echo "  certificates   Build the certificates (requires 'GENERATE_COT=1')"
1096	@echo "  fip            Build the Firmware Image Package (FIP)"
1097	@echo "  fwu_fip        Build the FWU Firmware Image Package (FIP)"
1098	@echo "  checkcodebase  Check the coding style of the entire source tree"
1099	@echo "  checkpatch     Check the coding style on changes in the current"
1100	@echo "                 branch against BASE_COMMIT (default origin/master)"
1101	@echo "  clean          Clean the build for the selected platform"
1102	@echo "  cscope         Generate cscope index"
1103	@echo "  distclean      Remove all build artifacts for all platforms"
1104	@echo "  certtool       Build the Certificate generation tool"
1105	@echo "  fiptool        Build the Firmware Image Package (FIP) creation tool"
1106	@echo "  sptool         Build the Secure Partition Package creation tool"
1107	@echo "  dtbs           Build the Device Tree Blobs (if required for the platform)"
1108	@echo "  memmap         Print the memory map of the built binaries"
1109	@echo ""
1110	@echo "Note: most build targets require PLAT to be set to a specific platform."
1111	@echo ""
1112	@echo "example: build all targets for the FVP platform:"
1113	@echo "  CROSS_COMPILE=aarch64-none-elf- make PLAT=fvp all"
1114