• Home
  • Line#
  • Scopes#
  • Navigate#
  • Raw
  • Download
1#
2# Copyright (c) 2013-2020, ARM Limited and Contributors. All rights reserved.
3#
4# SPDX-License-Identifier: BSD-3-Clause
5#
6
7#
8# Trusted Firmware Version
9#
10VERSION_MAJOR			:= 2
11VERSION_MINOR			:= 2
12
13# Default goal is build all images
14.DEFAULT_GOAL			:= all
15
16# Avoid any implicit propagation of command line variable definitions to
17# sub-Makefiles, like CFLAGS that we reserved for the firmware images'
18# usage. Other command line options like "-s" are still propagated as usual.
19MAKEOVERRIDES =
20
21MAKE_HELPERS_DIRECTORY := make_helpers/
22include ${MAKE_HELPERS_DIRECTORY}build_macros.mk
23include ${MAKE_HELPERS_DIRECTORY}build_env.mk
24
25################################################################################
26# Default values for build configurations, and their dependencies
27################################################################################
28
29include ${MAKE_HELPERS_DIRECTORY}defaults.mk
30
31# Assertions enabled for DEBUG builds by default
32ENABLE_ASSERTIONS		:= ${DEBUG}
33ENABLE_PMF			:= ${ENABLE_RUNTIME_INSTRUMENTATION}
34PLAT				:= ${DEFAULT_PLAT}
35
36################################################################################
37# Checkpatch script options
38################################################################################
39
40CHECKCODE_ARGS		:=	--no-patch
41# Do not check the coding style on imported library files or documentation files
42INC_LIB_DIRS_TO_CHECK	:=	$(sort $(filter-out			\
43					include/lib/libfdt		\
44					include/lib/libc,		\
45					$(wildcard include/lib/*)))
46INC_DIRS_TO_CHECK	:=	$(sort $(filter-out			\
47					include/lib,			\
48					$(wildcard include/*)))
49LIB_DIRS_TO_CHECK	:=	$(sort $(filter-out			\
50					lib/compiler-rt			\
51					lib/libfdt%			\
52					lib/libc,			\
53					$(wildcard lib/*)))
54ROOT_DIRS_TO_CHECK	:=	$(sort $(filter-out			\
55					lib				\
56					include				\
57					docs				\
58					%.rst,				\
59					$(wildcard *)))
60CHECK_PATHS		:=	${ROOT_DIRS_TO_CHECK}			\
61				${INC_DIRS_TO_CHECK}			\
62				${INC_LIB_DIRS_TO_CHECK}		\
63				${LIB_DIRS_TO_CHECK}
64
65
66################################################################################
67# Process build options
68################################################################################
69
70# Verbose flag
71ifeq (${V},0)
72        Q:=@
73        ECHO:=@echo
74        CHECKCODE_ARGS	+=	--no-summary --terse
75else
76        Q:=
77        ECHO:=$(ECHO_QUIET)
78endif
79
80ifneq ($(findstring s,$(filter-out --%,$(MAKEFLAGS))),)
81        Q:=@
82        ECHO:=$(ECHO_QUIET)
83endif
84
85export Q ECHO
86
87# Process Debug flag
88$(eval $(call add_define,DEBUG))
89ifneq (${DEBUG}, 0)
90        BUILD_TYPE	:=	debug
91        TF_CFLAGS	+= 	-g
92
93        ifneq ($(findstring clang,$(notdir $(CC))),)
94             ASFLAGS		+= 	-g
95        else
96             ASFLAGS		+= 	-g -Wa,--gdwarf-2
97        endif
98
99        # Use LOG_LEVEL_INFO by default for debug builds
100        LOG_LEVEL	:=	40
101else
102        BUILD_TYPE	:=	release
103        # Use LOG_LEVEL_NOTICE by default for release builds
104        LOG_LEVEL	:=	20
105endif
106
107# Default build string (git branch and commit)
108ifeq (${BUILD_STRING},)
109        BUILD_STRING	:=	$(shell git describe --always --dirty --tags 2> /dev/null)
110endif
111VERSION_STRING		:=	v${VERSION_MAJOR}.${VERSION_MINOR}(${BUILD_TYPE}):${BUILD_STRING}
112
113# The cert_create tool cannot generate certificates individually, so we use the
114# target 'certificates' to create them all
115ifneq (${GENERATE_COT},0)
116        FIP_DEPS += certificates
117        FWU_FIP_DEPS += fwu_certificates
118endif
119
120# Process BRANCH_PROTECTION value and set
121# Pointer Authentication and Branch Target Identification flags
122ifeq (${BRANCH_PROTECTION},0)
123	# Default value turns off all types of branch protection
124	BP_OPTION := none
125else ifneq (${ARCH},aarch64)
126        $(error BRANCH_PROTECTION requires AArch64)
127else ifeq (${BRANCH_PROTECTION},1)
128	# Enables all types of branch protection features
129	BP_OPTION := standard
130	ENABLE_BTI := 1
131	ENABLE_PAUTH := 1
132else ifeq (${BRANCH_PROTECTION},2)
133	# Return address signing to its standard level
134	BP_OPTION := pac-ret
135	ENABLE_PAUTH := 1
136else ifeq (${BRANCH_PROTECTION},3)
137	# Extend the signing to include leaf functions
138	BP_OPTION := pac-ret+leaf
139	ENABLE_PAUTH := 1
140else
141        $(error Unknown BRANCH_PROTECTION value ${BRANCH_PROTECTION})
142endif
143
144# USE_SPINLOCK_CAS requires AArch64 build
145ifeq (${USE_SPINLOCK_CAS},1)
146ifneq (${ARCH},aarch64)
147        $(error USE_SPINLOCK_CAS requires AArch64)
148else
149        $(info USE_SPINLOCK_CAS is an experimental feature)
150endif
151endif
152
153# USE_DEBUGFS experimental feature recommended only in debug builds
154ifeq (${USE_DEBUGFS},1)
155ifeq (${DEBUG},1)
156        $(warning DEBUGFS experimental feature is enabled.)
157else
158        $(warning DEBUGFS experimental, recommended in DEBUG builds ONLY)
159endif
160endif
161
162################################################################################
163# Toolchain
164################################################################################
165
166HOSTCC			:=	gcc
167export HOSTCC
168
169CC			:=	${CROSS_COMPILE}gcc
170CPP			:=	${CROSS_COMPILE}cpp
171AS			:=	${CROSS_COMPILE}gcc
172AR			:=	${CROSS_COMPILE}ar
173LINKER			:=	${CROSS_COMPILE}ld
174OC			:=	${CROSS_COMPILE}objcopy
175OD			:=	${CROSS_COMPILE}objdump
176NM			:=	${CROSS_COMPILE}nm
177PP			:=	${CROSS_COMPILE}gcc -E
178DTC			:=	dtc
179
180# Use ${LD}.bfd instead if it exists (as absolute path or together with $PATH).
181ifneq ($(strip $(wildcard ${LD}.bfd) \
182	$(foreach dir,$(subst :, ,${PATH}),$(wildcard ${dir}/${LINKER}.bfd))),)
183LINKER			:=	${LINKER}.bfd
184endif
185
186ifeq (${ARM_ARCH_MAJOR},7)
187target32-directive	= 	-target arm-none-eabi
188# Will set march32-directive from platform configuration
189else
190target32-directive	= 	-target armv8a-none-eabi
191
192# Set the compiler's target architecture profile based on ARM_ARCH_MINOR option
193ifeq (${ARM_ARCH_MINOR},0)
194march32-directive	= 	-march=armv8-a
195march64-directive	= 	-march=armv8-a
196else
197march32-directive	= 	-march=armv8.${ARM_ARCH_MINOR}-a
198march64-directive	= 	-march=armv8.${ARM_ARCH_MINOR}-a
199endif
200endif
201
202ifneq ($(findstring armclang,$(notdir $(CC))),)
203TF_CFLAGS_aarch32	=	-target arm-arm-none-eabi $(march32-directive)
204TF_CFLAGS_aarch64	=	-target aarch64-arm-none-eabi $(march64-directive)
205LD			=	$(LINKER)
206AS			=	$(CC) -c -x assembler-with-cpp $(TF_CFLAGS_$(ARCH))
207CPP			=	$(CC) -E $(TF_CFLAGS_$(ARCH))
208PP			=	$(CC) -E $(TF_CFLAGS_$(ARCH))
209else ifneq ($(findstring clang,$(notdir $(CC))),)
210TF_CFLAGS_aarch32	=	$(target32-directive) $(march32-directive)
211TF_CFLAGS_aarch64	=	-target aarch64-elf $(march64-directive)
212LD			=	ld.lld
213ifeq (, $(shell which $(LD)))
214$(error "No $(LD) in PATH, make sure it is installed or set LD to a different linker")
215endif
216AS			=	$(CC) -c -x assembler-with-cpp $(TF_CFLAGS_$(ARCH))
217CPP			=	$(CC) -E
218PP			=	$(CC) -E
219else ifneq ($(findstring gcc,$(notdir $(CC))),)
220TF_CFLAGS_aarch32	=	$(march32-directive)
221TF_CFLAGS_aarch64	=	$(march64-directive)
222ifeq ($(ENABLE_LTO),1)
223	# Enable LTO only for aarch64
224	ifeq (${ARCH},aarch64)
225		LTO_CFLAGS	=	-flto
226		# Use gcc as a wrapper for the ld, recommended for LTO
227		LINKER		:=	${CROSS_COMPILE}gcc
228	endif
229endif
230LD			=	$(LINKER)
231else
232TF_CFLAGS_aarch32	=	$(march32-directive)
233TF_CFLAGS_aarch64	=	$(march64-directive)
234LD			=	$(LINKER)
235endif
236
237ifeq (${AARCH32_INSTRUCTION_SET},A32)
238TF_CFLAGS_aarch32	+=	-marm
239else ifeq (${AARCH32_INSTRUCTION_SET},T32)
240TF_CFLAGS_aarch32	+=	-mthumb
241else
242$(error Error: Unknown AArch32 instruction set ${AARCH32_INSTRUCTION_SET})
243endif
244
245TF_CFLAGS_aarch32	+=	-mno-unaligned-access
246TF_CFLAGS_aarch64	+=	-mgeneral-regs-only -mstrict-align
247
248ifneq (${BP_OPTION},none)
249TF_CFLAGS_aarch64	+=	-mbranch-protection=${BP_OPTION}
250endif
251
252ASFLAGS_aarch32		=	$(march32-directive)
253ASFLAGS_aarch64		=	$(march64-directive)
254
255# General warnings
256WARNINGS		:=	-Wall -Wmissing-include-dirs -Wunused	\
257				-Wdisabled-optimization	-Wvla -Wshadow	\
258				-Wno-unused-parameter -Wredundant-decls
259
260# Additional warnings
261# Level 1
262WARNING1 := -Wextra
263WARNING1 += -Wmissing-format-attribute
264WARNING1 += -Wmissing-prototypes
265WARNING1 += -Wold-style-definition
266
267# Level 2
268WARNING2 := -Waggregate-return
269WARNING2 += -Wcast-align
270WARNING2 += -Wnested-externs
271
272WARNING3 := -Wbad-function-cast
273WARNING3 += -Wcast-qual
274WARNING3 += -Wconversion
275WARNING3 += -Wpacked
276WARNING3 += -Wpointer-arith
277WARNING3 += -Wswitch-default
278
279ifeq (${W},1)
280WARNINGS += $(WARNING1)
281else ifeq (${W},2)
282WARNINGS += $(WARNING1) $(WARNING2)
283else ifeq (${W},3)
284WARNINGS += $(WARNING1) $(WARNING2) $(WARNING3)
285endif
286
287# Compiler specific warnings
288ifeq ($(findstring clang,$(notdir $(CC))),)
289# not using clang
290WARNINGS	+=		-Wunused-but-set-variable -Wmaybe-uninitialized	\
291				-Wpacked-bitfield-compat -Wshift-overflow=2 \
292				-Wlogical-op
293else
294# using clang
295WARNINGS	+=		-Wshift-overflow -Wshift-sign-overflow \
296				-Wlogical-op-parentheses
297endif
298
299ifneq (${E},0)
300ERRORS := -Werror
301endif
302
303CPPFLAGS		=	${DEFINES} ${INCLUDES} ${MBEDTLS_INC} -nostdinc	\
304				$(ERRORS) $(WARNINGS)
305ASFLAGS			+=	$(CPPFLAGS) $(ASFLAGS_$(ARCH))			\
306				-ffreestanding -Wa,--fatal-warnings
307TF_CFLAGS		+=	$(CPPFLAGS) $(TF_CFLAGS_$(ARCH))		\
308				-ffunction-sections -fdata-sections		\
309				-ffreestanding -fno-builtin -fno-common		\
310				-Os -std=gnu99
311
312ifeq (${SANITIZE_UB},on)
313TF_CFLAGS		+=	-fsanitize=undefined -fno-sanitize-recover
314endif
315ifeq (${SANITIZE_UB},trap)
316TF_CFLAGS		+=	-fsanitize=undefined -fno-sanitize-recover	\
317				-fsanitize-undefined-trap-on-error
318endif
319
320GCC_V_OUTPUT		:=	$(shell $(CC) -v 2>&1)
321
322# LD = armlink
323ifneq ($(findstring armlink,$(notdir $(LD))),)
324TF_LDFLAGS		+=	--diag_error=warning --lto_level=O1
325TF_LDFLAGS		+=	--remove --info=unused,unusedsymbols
326TF_LDFLAGS		+=	$(TF_LDFLAGS_$(ARCH))
327
328# LD = gcc (used when GCC LTO is enabled)
329else ifneq ($(findstring gcc,$(notdir $(LD))),)
330# Pass ld options with Wl or Xlinker switches
331TF_LDFLAGS		+=	-Wl,--fatal-warnings -O1
332TF_LDFLAGS		+=	-Wl,--gc-sections
333ifeq ($(ENABLE_LTO),1)
334	ifeq (${ARCH},aarch64)
335		TF_LDFLAGS	+=	-flto -fuse-linker-plugin
336	endif
337endif
338# GCC automatically adds fix-cortex-a53-843419 flag when used to link
339# which breaks some builds, so disable if errata fix is not explicitly enabled
340ifneq (${ERRATA_A53_843419},1)
341	TF_LDFLAGS	+= 	-mno-fix-cortex-a53-843419
342endif
343TF_LDFLAGS		+= 	-nostdlib
344TF_LDFLAGS		+=	$(subst --,-Xlinker --,$(TF_LDFLAGS_$(ARCH)))
345
346# LD = gcc-ld (ld) or llvm-ld (ld.lld) or other
347else
348TF_LDFLAGS		+=	--fatal-warnings -O1
349TF_LDFLAGS		+=	--gc-sections
350# ld.lld doesn't recognize the errata flags,
351# therefore don't add those in that case
352ifeq ($(findstring ld.lld,$(notdir $(LD))),)
353TF_LDFLAGS		+=	$(TF_LDFLAGS_$(ARCH))
354endif
355endif
356
357DTC_FLAGS		+=	-I dts -O dtb
358DTC_CPPFLAGS		+=	-P -nostdinc -Iinclude -Ifdts -undef -x assembler-with-cpp
359
360################################################################################
361# Common sources and include directories
362################################################################################
363include lib/compiler-rt/compiler-rt.mk
364
365BL_COMMON_SOURCES	+=	common/bl_common.c			\
366				common/tf_log.c				\
367				common/${ARCH}/debug.S			\
368				drivers/console/multi_console.c		\
369				lib/${ARCH}/cache_helpers.S		\
370				lib/${ARCH}/misc_helpers.S		\
371				plat/common/plat_bl_common.c		\
372				plat/common/plat_log_common.c		\
373				plat/common/${ARCH}/plat_common.c	\
374				plat/common/${ARCH}/platform_helpers.S	\
375				${COMPILER_RT_SRCS}
376
377ifeq ($(notdir $(CC)),armclang)
378BL_COMMON_SOURCES	+=	lib/${ARCH}/armclang_printf.S
379endif
380
381ifeq (${SANITIZE_UB},on)
382BL_COMMON_SOURCES	+=	plat/common/ubsan.c
383endif
384
385INCLUDES		+=	-Iinclude				\
386				-Iinclude/arch/${ARCH}			\
387				-Iinclude/lib/cpus/${ARCH}		\
388				-Iinclude/lib/el3_runtime/${ARCH}	\
389				${PLAT_INCLUDES}			\
390				${SPD_INCLUDES}
391
392include common/backtrace/backtrace.mk
393
394################################################################################
395# Generic definitions
396################################################################################
397
398include ${MAKE_HELPERS_DIRECTORY}plat_helpers.mk
399
400BUILD_BASE		:=	./build
401BUILD_PLAT		:=	${BUILD_BASE}/${PLAT}/${BUILD_TYPE}
402
403SPDS			:=	$(sort $(filter-out none, $(patsubst services/spd/%,%,$(wildcard services/spd/*))))
404
405# Platforms providing their own TBB makefile may override this value
406INCLUDE_TBBR_MK		:=	1
407
408
409################################################################################
410# Include SPD Makefile if one has been specified
411################################################################################
412
413ifneq (${SPD},none)
414ifeq (${ARCH},aarch32)
415        $(error "Error: SPD is incompatible with AArch32.")
416endif
417ifdef EL3_PAYLOAD_BASE
418        $(warning "SPD and EL3_PAYLOAD_BASE are incompatible build options.")
419        $(warning "The SPD and its BL32 companion will be present but ignored.")
420endif
421        # We expect to locate an spd.mk under the specified SPD directory
422        SPD_MAKE	:=	$(wildcard services/spd/${SPD}/${SPD}.mk)
423
424        ifeq (${SPD_MAKE},)
425                $(error Error: No services/spd/${SPD}/${SPD}.mk located)
426        endif
427        $(info Including ${SPD_MAKE})
428        include ${SPD_MAKE}
429
430        # If there's BL32 companion for the chosen SPD, we expect that the SPD's
431        # Makefile would set NEED_BL32 to "yes". In this case, the build system
432        # supports two mutually exclusive options:
433        # * BL32 is built from source: then BL32_SOURCES must contain the list
434        #   of source files to build BL32
435        # * BL32 is a prebuilt binary: then BL32 must point to the image file
436        #   that will be included in the FIP
437        # If both BL32_SOURCES and BL32 are defined, the binary takes precedence
438        # over the sources.
439endif
440
441################################################################################
442# Include the platform specific Makefile after the SPD Makefile (the platform
443# makefile may use all previous definitions in this file)
444################################################################################
445
446include ${PLAT_MAKEFILE_FULL}
447
448$(eval $(call MAKE_PREREQ_DIR,${BUILD_PLAT}))
449
450ifeq (${ARM_ARCH_MAJOR},7)
451include make_helpers/armv7-a-cpus.mk
452endif
453
454PIE_FOUND		:=	$(findstring --enable-default-pie,${GCC_V_OUTPUT})
455ifneq ($(PIE_FOUND),)
456	TF_CFLAGS	+=	-fno-PIE
457endif
458
459ifneq ($(findstring gcc,$(notdir $(LD))),)
460	PIE_LDFLAGS	+=	-Wl,-pie -Wl,--no-dynamic-linker
461else
462	PIE_LDFLAGS	+=	-pie --no-dynamic-linker
463endif
464
465ifeq ($(ENABLE_PIE),1)
466ifeq ($(BL2_AT_EL3),1)
467ifneq ($(BL2_IN_XIP_MEM),1)
468	BL2_CFLAGS	+=	-fpie
469	BL2_LDFLAGS	+=	$(PIE_LDFLAGS)
470endif
471endif
472	BL31_CFLAGS	+=	-fpie
473	BL31_LDFLAGS	+=	$(PIE_LDFLAGS)
474ifeq ($(ARCH),aarch64)
475	BL32_CFLAGS	+=	-fpie
476	BL32_LDFLAGS	+=	$(PIE_LDFLAGS)
477endif
478endif
479
480# Include the CPU specific operations makefile, which provides default
481# values for all CPU errata workarounds and CPU specific optimisations.
482# This can be overridden by the platform.
483include lib/cpus/cpu-ops.mk
484
485ifeq (${ARCH},aarch32)
486NEED_BL32 := yes
487
488################################################################################
489# Build `AARCH32_SP` as BL32 image for AArch32
490################################################################################
491ifneq (${AARCH32_SP},none)
492# We expect to locate an sp.mk under the specified AARCH32_SP directory
493AARCH32_SP_MAKE	:=	$(wildcard bl32/${AARCH32_SP}/${AARCH32_SP}.mk)
494
495ifeq (${AARCH32_SP_MAKE},)
496  $(error Error: No bl32/${AARCH32_SP}/${AARCH32_SP}.mk located)
497endif
498
499$(info Including ${AARCH32_SP_MAKE})
500include ${AARCH32_SP_MAKE}
501endif
502
503endif
504
505################################################################################
506# Include libc if not overridden
507################################################################################
508ifeq (${OVERRIDE_LIBC},0)
509include lib/libc/libc.mk
510endif
511
512################################################################################
513# Check incompatible options
514################################################################################
515
516ifdef EL3_PAYLOAD_BASE
517        ifdef PRELOADED_BL33_BASE
518                $(warning "PRELOADED_BL33_BASE and EL3_PAYLOAD_BASE are \
519                incompatible build options. EL3_PAYLOAD_BASE has priority.")
520        endif
521        ifneq (${GENERATE_COT},0)
522                $(error "GENERATE_COT and EL3_PAYLOAD_BASE are incompatible build options.")
523        endif
524        ifneq (${TRUSTED_BOARD_BOOT},0)
525                $(error "TRUSTED_BOARD_BOOT and EL3_PAYLOAD_BASE are incompatible build options.")
526        endif
527endif
528
529ifeq (${NEED_BL33},yes)
530        ifdef EL3_PAYLOAD_BASE
531                $(warning "BL33 image is not needed when option \
532                BL33_PAYLOAD_BASE is used and won't be added to the FIP file.")
533        endif
534        ifdef PRELOADED_BL33_BASE
535                $(warning "BL33 image is not needed when option \
536                PRELOADED_BL33_BASE is used and won't be added to the FIP \
537                file.")
538        endif
539endif
540
541# When building for systems with hardware-assisted coherency, there's no need to
542# use USE_COHERENT_MEM. Require that USE_COHERENT_MEM must be set to 0 too.
543ifeq ($(HW_ASSISTED_COHERENCY)-$(USE_COHERENT_MEM),1-1)
544$(error USE_COHERENT_MEM cannot be enabled with HW_ASSISTED_COHERENCY)
545endif
546
547#For now, BL2_IN_XIP_MEM is only supported when BL2_AT_EL3 is 1.
548ifeq ($(BL2_AT_EL3)-$(BL2_IN_XIP_MEM),0-1)
549$(error "BL2_IN_XIP_MEM is only supported when BL2_AT_EL3 is enabled")
550endif
551
552# For RAS_EXTENSION, require that EAs are handled in EL3 first
553ifeq ($(RAS_EXTENSION),1)
554    ifneq ($(HANDLE_EA_EL3_FIRST),1)
555        $(error For RAS_EXTENSION, HANDLE_EA_EL3_FIRST must also be 1)
556    endif
557endif
558
559# When FAULT_INJECTION_SUPPORT is used, require that RAS_EXTENSION is enabled
560ifeq ($(FAULT_INJECTION_SUPPORT),1)
561    ifneq ($(RAS_EXTENSION),1)
562        $(error For FAULT_INJECTION_SUPPORT, RAS_EXTENSION must also be 1)
563    endif
564endif
565
566# DYN_DISABLE_AUTH can be set only when TRUSTED_BOARD_BOOT=1
567ifeq ($(DYN_DISABLE_AUTH), 1)
568    ifeq (${TRUSTED_BOARD_BOOT}, 0)
569        $(error "TRUSTED_BOARD_BOOT must be enabled for DYN_DISABLE_AUTH to be set.")
570    endif
571endif
572
573# If pointer authentication is used in the firmware, make sure that all the
574# registers associated to it are also saved and restored.
575# Not doing it would leak the value of the keys used by EL3 to EL1 and S-EL1.
576ifeq ($(ENABLE_PAUTH),1)
577    ifeq ($(CTX_INCLUDE_PAUTH_REGS),0)
578        $(error Pointer Authentication requires CTX_INCLUDE_PAUTH_REGS=1)
579    endif
580endif
581
582ifeq ($(CTX_INCLUDE_PAUTH_REGS),1)
583    ifneq (${ARCH},aarch64)
584        $(error CTX_INCLUDE_PAUTH_REGS requires AArch64)
585    else
586        $(info CTX_INCLUDE_PAUTH_REGS is an experimental feature)
587    endif
588endif
589
590ifeq ($(ENABLE_PAUTH),1)
591    $(info Pointer Authentication is an experimental feature)
592endif
593
594ifeq ($(ENABLE_BTI),1)
595    $(info Branch Protection is an experimental feature)
596endif
597
598ifeq ($(CTX_INCLUDE_MTE_REGS),1)
599    ifneq (${ARCH},aarch64)
600        $(error CTX_INCLUDE_MTE_REGS requires AArch64)
601    else
602        $(info CTX_INCLUDE_MTE_REGS is an experimental feature)
603    endif
604endif
605
606ifeq ($(MEASURED_BOOT),1)
607    ifneq (${TRUSTED_BOARD_BOOT},1)
608        $(error MEASURED_BOOT requires TRUSTED_BOARD_BOOT=1")
609    else
610        $(info MEASURED_BOOT is an experimental feature)
611    endif
612endif
613
614################################################################################
615# Process platform overrideable behaviour
616################################################################################
617
618# Using BL2 implies that a BL33 image also needs to be supplied for the FIP and
619# Certificate generation tools. This flag can be overridden by the platform.
620ifdef BL2_SOURCES
621        ifdef EL3_PAYLOAD_BASE
622                # If booting an EL3 payload there is no need for a BL33 image
623                # in the FIP file.
624                NEED_BL33		:=	no
625        else
626                ifdef PRELOADED_BL33_BASE
627                        # If booting a BL33 preloaded image there is no need of
628                        # another one in the FIP file.
629                        NEED_BL33		:=	no
630                else
631                        NEED_BL33		?=	yes
632                endif
633        endif
634endif
635
636# If SCP_BL2 is given, we always want FIP to include it.
637ifdef SCP_BL2
638        NEED_SCP_BL2		:=	yes
639endif
640
641# For AArch32, BL31 is not currently supported.
642ifneq (${ARCH},aarch32)
643    ifdef BL31_SOURCES
644        # When booting an EL3 payload, there is no need to compile the BL31 image nor
645        # put it in the FIP.
646        ifndef EL3_PAYLOAD_BASE
647            NEED_BL31 := yes
648        endif
649    endif
650endif
651
652# Process TBB related flags
653ifneq (${GENERATE_COT},0)
654        # Common cert_create options
655        ifneq (${CREATE_KEYS},0)
656                $(eval CRT_ARGS += -n)
657                $(eval FWU_CRT_ARGS += -n)
658                ifneq (${SAVE_KEYS},0)
659                        $(eval CRT_ARGS += -k)
660                        $(eval FWU_CRT_ARGS += -k)
661                endif
662        endif
663        # Include TBBR makefile (unless the platform indicates otherwise)
664        ifeq (${INCLUDE_TBBR_MK},1)
665                include make_helpers/tbbr/tbbr_tools.mk
666        endif
667endif
668
669ifneq (${FIP_ALIGN},0)
670FIP_ARGS += --align ${FIP_ALIGN}
671endif
672
673################################################################################
674# Include libraries' Makefile that are used in all BL
675################################################################################
676
677include lib/stack_protector/stack_protector.mk
678
679################################################################################
680# Auxiliary tools (fiptool, cert_create, etc)
681################################################################################
682
683# Variables for use with Certificate Generation Tool
684CRTTOOLPATH		?=	tools/cert_create
685CRTTOOL			?=	${CRTTOOLPATH}/cert_create${BIN_EXT}
686
687# Variables for use with Firmware Image Package
688FIPTOOLPATH		?=	tools/fiptool
689FIPTOOL			?=	${FIPTOOLPATH}/fiptool${BIN_EXT}
690
691# Variables for use with sptool
692SPTOOLPATH		?=	tools/sptool
693SPTOOL			?=	${SPTOOLPATH}/sptool${BIN_EXT}
694
695# Variables for use with ROMLIB
696ROMLIBPATH		?=	lib/romlib
697
698# Variable for use with Python
699PYTHON			?=	python3
700
701# Variables for use with PRINT_MEMORY_MAP
702PRINT_MEMORY_MAP_PATH		?=	tools/memory
703PRINT_MEMORY_MAP		?=	${PRINT_MEMORY_MAP_PATH}/print_memory_map.py
704
705# Variables for use with documentation build using Sphinx tool
706DOCS_PATH		?=	docs
707
708################################################################################
709# Include BL specific makefiles
710################################################################################
711ifdef BL1_SOURCES
712NEED_BL1 := yes
713include bl1/bl1.mk
714endif
715
716ifdef BL2_SOURCES
717NEED_BL2 := yes
718include bl2/bl2.mk
719endif
720
721ifdef BL2U_SOURCES
722NEED_BL2U := yes
723include bl2u/bl2u.mk
724endif
725
726ifeq (${NEED_BL31},yes)
727ifdef BL31_SOURCES
728include bl31/bl31.mk
729endif
730endif
731
732ifdef FDT_SOURCES
733NEED_FDT := yes
734endif
735
736################################################################################
737# Build options checks
738################################################################################
739
740$(eval $(call assert_boolean,COLD_BOOT_SINGLE_CPU))
741$(eval $(call assert_boolean,CREATE_KEYS))
742$(eval $(call assert_boolean,CTX_INCLUDE_AARCH32_REGS))
743$(eval $(call assert_boolean,CTX_INCLUDE_FPREGS))
744$(eval $(call assert_boolean,CTX_INCLUDE_PAUTH_REGS))
745$(eval $(call assert_boolean,CTX_INCLUDE_MTE_REGS))
746$(eval $(call assert_boolean,DEBUG))
747$(eval $(call assert_boolean,DYN_DISABLE_AUTH))
748$(eval $(call assert_boolean,EL3_EXCEPTION_HANDLING))
749$(eval $(call assert_boolean,ENABLE_AMU))
750$(eval $(call assert_boolean,ENABLE_ASSERTIONS))
751$(eval $(call assert_boolean,ENABLE_MPAM_FOR_LOWER_ELS))
752$(eval $(call assert_boolean,ENABLE_PIE))
753$(eval $(call assert_boolean,ENABLE_PMF))
754$(eval $(call assert_boolean,ENABLE_PSCI_STAT))
755$(eval $(call assert_boolean,ENABLE_RUNTIME_INSTRUMENTATION))
756$(eval $(call assert_boolean,ENABLE_SPE_FOR_LOWER_ELS))
757$(eval $(call assert_boolean,ENABLE_SVE_FOR_NS))
758$(eval $(call assert_boolean,ERROR_DEPRECATED))
759$(eval $(call assert_boolean,FAULT_INJECTION_SUPPORT))
760$(eval $(call assert_boolean,GENERATE_COT))
761$(eval $(call assert_boolean,GICV2_G0_FOR_EL3))
762$(eval $(call assert_boolean,HANDLE_EA_EL3_FIRST))
763$(eval $(call assert_boolean,HW_ASSISTED_COHERENCY))
764$(eval $(call assert_boolean,MEASURED_BOOT))
765$(eval $(call assert_boolean,NS_TIMER_SWITCH))
766$(eval $(call assert_boolean,OVERRIDE_LIBC))
767$(eval $(call assert_boolean,PL011_GENERIC_UART))
768$(eval $(call assert_boolean,PROGRAMMABLE_RESET_ADDRESS))
769$(eval $(call assert_boolean,PSCI_EXTENDED_STATE_ID))
770$(eval $(call assert_boolean,RAS_EXTENSION))
771$(eval $(call assert_boolean,RESET_TO_BL31))
772$(eval $(call assert_boolean,SAVE_KEYS))
773$(eval $(call assert_boolean,SEPARATE_CODE_AND_RODATA))
774$(eval $(call assert_boolean,SEPARATE_NOBITS_REGION))
775$(eval $(call assert_boolean,SPIN_ON_BL1_EXIT))
776$(eval $(call assert_boolean,SPM_MM))
777$(eval $(call assert_boolean,TRUSTED_BOARD_BOOT))
778$(eval $(call assert_boolean,USE_COHERENT_MEM))
779$(eval $(call assert_boolean,USE_DEBUGFS))
780$(eval $(call assert_boolean,USE_ROMLIB))
781$(eval $(call assert_boolean,USE_TBBR_DEFS))
782$(eval $(call assert_boolean,WARMBOOT_ENABLE_DCACHE_EARLY))
783$(eval $(call assert_boolean,BL2_AT_EL3))
784$(eval $(call assert_boolean,BL2_IN_XIP_MEM))
785$(eval $(call assert_boolean,BL2_INV_DCACHE))
786$(eval $(call assert_boolean,USE_SPINLOCK_CAS))
787
788$(eval $(call assert_numeric,ARM_ARCH_MAJOR))
789$(eval $(call assert_numeric,ARM_ARCH_MINOR))
790$(eval $(call assert_numeric,BRANCH_PROTECTION))
791
792ifdef KEY_SIZE
793        $(eval $(call assert_numeric,KEY_SIZE))
794endif
795
796ifeq ($(filter $(SANITIZE_UB), on off trap),)
797        $(error "Invalid value for SANITIZE_UB: can be one of on, off, trap")
798endif
799
800################################################################################
801# Add definitions to the cpp preprocessor based on the current build options.
802# This is done after including the platform specific makefile to allow the
803# platform to overwrite the default options
804################################################################################
805
806$(eval $(call add_define,ARM_ARCH_MAJOR))
807$(eval $(call add_define,ARM_ARCH_MINOR))
808$(eval $(call add_define,COLD_BOOT_SINGLE_CPU))
809$(eval $(call add_define,CTX_INCLUDE_AARCH32_REGS))
810$(eval $(call add_define,CTX_INCLUDE_FPREGS))
811$(eval $(call add_define,CTX_INCLUDE_PAUTH_REGS))
812$(eval $(call add_define,EL3_EXCEPTION_HANDLING))
813$(eval $(call add_define,CTX_INCLUDE_MTE_REGS))
814$(eval $(call add_define,ENABLE_AMU))
815$(eval $(call add_define,ENABLE_ASSERTIONS))
816$(eval $(call add_define,ENABLE_BTI))
817$(eval $(call add_define,ENABLE_MPAM_FOR_LOWER_ELS))
818$(eval $(call add_define,ENABLE_PAUTH))
819$(eval $(call add_define,ENABLE_PIE))
820$(eval $(call add_define,ENABLE_PMF))
821$(eval $(call add_define,ENABLE_PSCI_STAT))
822$(eval $(call add_define,ENABLE_RUNTIME_INSTRUMENTATION))
823$(eval $(call add_define,ENABLE_SPE_FOR_LOWER_ELS))
824$(eval $(call add_define,ENABLE_SVE_FOR_NS))
825$(eval $(call add_define,ERROR_DEPRECATED))
826$(eval $(call add_define,FAULT_INJECTION_SUPPORT))
827$(eval $(call add_define,GICV2_G0_FOR_EL3))
828$(eval $(call add_define,HANDLE_EA_EL3_FIRST))
829$(eval $(call add_define,HW_ASSISTED_COHERENCY))
830$(eval $(call add_define,LOG_LEVEL))
831$(eval $(call add_define,MEASURED_BOOT))
832$(eval $(call add_define,NS_TIMER_SWITCH))
833$(eval $(call add_define,PL011_GENERIC_UART))
834$(eval $(call add_define,PLAT_${PLAT}))
835$(eval $(call add_define,PROGRAMMABLE_RESET_ADDRESS))
836$(eval $(call add_define,PSCI_EXTENDED_STATE_ID))
837$(eval $(call add_define,RAS_EXTENSION))
838$(eval $(call add_define,RESET_TO_BL31))
839$(eval $(call add_define,SEPARATE_CODE_AND_RODATA))
840$(eval $(call add_define,SEPARATE_NOBITS_REGION))
841$(eval $(call add_define,RECLAIM_INIT_CODE))
842$(eval $(call add_define,SPD_${SPD}))
843$(eval $(call add_define,SPIN_ON_BL1_EXIT))
844$(eval $(call add_define,SPM_MM))
845$(eval $(call add_define,TRUSTED_BOARD_BOOT))
846$(eval $(call add_define,USE_COHERENT_MEM))
847$(eval $(call add_define,USE_DEBUGFS))
848$(eval $(call add_define,USE_ROMLIB))
849$(eval $(call add_define,USE_TBBR_DEFS))
850$(eval $(call add_define,WARMBOOT_ENABLE_DCACHE_EARLY))
851$(eval $(call add_define,BL2_AT_EL3))
852$(eval $(call add_define,BL2_IN_XIP_MEM))
853$(eval $(call add_define,BL2_INV_DCACHE))
854$(eval $(call add_define,USE_SPINLOCK_CAS))
855
856ifeq (${SANITIZE_UB},trap)
857        $(eval $(call add_define,MONITOR_TRAPS))
858endif
859
860# Define the EL3_PAYLOAD_BASE flag only if it is provided.
861ifdef EL3_PAYLOAD_BASE
862        $(eval $(call add_define,EL3_PAYLOAD_BASE))
863else
864        # Define the PRELOADED_BL33_BASE flag only if it is provided and
865        # EL3_PAYLOAD_BASE is not defined, as it has priority.
866        ifdef PRELOADED_BL33_BASE
867                $(eval $(call add_define,PRELOADED_BL33_BASE))
868        endif
869endif
870
871# Define the DYN_DISABLE_AUTH flag only if set.
872ifeq (${DYN_DISABLE_AUTH},1)
873$(eval $(call add_define,DYN_DISABLE_AUTH))
874endif
875
876ifneq ($(findstring armlink,$(notdir $(LD))),)
877$(eval $(call add_define,USE_ARM_LINK))
878endif
879
880################################################################################
881# Build targets
882################################################################################
883
884.PHONY:	all msg_start clean realclean distclean cscope locate-checkpatch checkcodebase checkpatch fiptool sptool fip fwu_fip certtool dtbs memmap doc
885.SUFFIXES:
886
887all: msg_start
888
889msg_start:
890	@echo "Building ${PLAT}"
891
892ifeq (${ERROR_DEPRECATED},0)
893# Check if deprecated declarations and cpp warnings should be treated as error or not.
894ifneq ($(findstring clang,$(notdir $(CC))),)
895    CPPFLAGS		+= 	-Wno-error=deprecated-declarations
896else
897    CPPFLAGS		+= 	-Wno-error=deprecated-declarations -Wno-error=cpp
898endif
899# __ASSEMBLY__ is deprecated in favor of the compiler-builtin __ASSEMBLER__.
900ASFLAGS	+= -D__ASSEMBLY__
901# AARCH32/AARCH64 macros are deprecated in favor of the compiler-builtin __aarch64__.
902ifeq (${ARCH},aarch32)
903        $(eval $(call add_define,AARCH32))
904else
905        $(eval $(call add_define,AARCH64))
906endif
907endif # !ERROR_DEPRECATED
908
909$(eval $(call MAKE_LIB_DIRS))
910$(eval $(call MAKE_LIB,c))
911
912# Expand build macros for the different images
913ifeq (${NEED_BL1},yes)
914$(eval $(call MAKE_BL,1))
915endif
916
917ifeq (${NEED_BL2},yes)
918ifeq (${BL2_AT_EL3}, 0)
919FIP_BL2_ARGS := tb-fw
920endif
921
922$(if ${BL2}, $(eval $(call TOOL_ADD_IMG,bl2,--${FIP_BL2_ARGS})),\
923	$(eval $(call MAKE_BL,2,${FIP_BL2_ARGS})))
924endif
925
926ifeq (${NEED_SCP_BL2},yes)
927$(eval $(call TOOL_ADD_IMG,scp_bl2,--scp-fw))
928endif
929
930ifeq (${NEED_BL31},yes)
931BL31_SOURCES += ${SPD_SOURCES}
932$(if ${BL31}, $(eval $(call TOOL_ADD_IMG,bl31,--soc-fw)),\
933	$(eval $(call MAKE_BL,31,soc-fw)))
934endif
935
936# If a BL32 image is needed but neither BL32 nor BL32_SOURCES is defined, the
937# build system will call TOOL_ADD_IMG to print a warning message and abort the
938# process. Note that the dependency on BL32 applies to the FIP only.
939ifeq (${NEED_BL32},yes)
940
941BUILD_BL32 := $(if $(BL32),,$(if $(BL32_SOURCES),1))
942
943$(if ${BUILD_BL32}, $(eval $(call MAKE_BL,32,tos-fw)),\
944	$(eval $(call TOOL_ADD_IMG,bl32,--tos-fw)))
945endif
946
947# Add the BL33 image if required by the platform
948ifeq (${NEED_BL33},yes)
949$(eval $(call TOOL_ADD_IMG,bl33,--nt-fw))
950endif
951
952ifeq (${NEED_BL2U},yes)
953$(if ${BL2U}, $(eval $(call TOOL_ADD_IMG,bl2u,--ap-fwu-cfg,FWU_)),\
954	$(eval $(call MAKE_BL,2u,ap-fwu-cfg,FWU_)))
955endif
956
957# Expand build macros for the different images
958ifeq (${NEED_FDT},yes)
959    $(eval $(call MAKE_DTBS,$(BUILD_PLAT)/fdts,$(FDT_SOURCES)))
960endif
961
962locate-checkpatch:
963ifndef CHECKPATCH
964	$(error "Please set CHECKPATCH to point to the Linux checkpatch.pl file, eg: CHECKPATCH=../linux/scripts/checkpatch.pl")
965else
966ifeq (,$(wildcard ${CHECKPATCH}))
967	$(error "The file CHECKPATCH points to cannot be found, use eg: CHECKPATCH=../linux/scripts/checkpatch.pl")
968endif
969endif
970
971clean:
972	@echo "  CLEAN"
973	$(call SHELL_REMOVE_DIR,${BUILD_PLAT})
974	${Q}${MAKE} --no-print-directory -C ${FIPTOOLPATH} clean
975	${Q}${MAKE} PLAT=${PLAT} --no-print-directory -C ${CRTTOOLPATH} clean
976	${Q}${MAKE} --no-print-directory -C ${ROMLIBPATH} clean
977
978realclean distclean:
979	@echo "  REALCLEAN"
980	$(call SHELL_REMOVE_DIR,${BUILD_BASE})
981	$(call SHELL_DELETE_ALL, ${CURDIR}/cscope.*)
982	${Q}${MAKE} --no-print-directory -C ${FIPTOOLPATH} clean
983	${Q}${MAKE} --no-print-directory -C ${SPTOOLPATH} clean
984	${Q}${MAKE} PLAT=${PLAT} --no-print-directory -C ${CRTTOOLPATH} clean
985	${Q}${MAKE} --no-print-directory -C ${ROMLIBPATH} clean
986
987checkcodebase:		locate-checkpatch
988	@echo "  CHECKING STYLE"
989	@if test -d .git ; then						\
990		git ls-files | grep -E -v 'libfdt|libc|docs|\.rst' |	\
991		while read GIT_FILE ;					\
992		do ${CHECKPATCH} ${CHECKCODE_ARGS} -f $$GIT_FILE ;	\
993		done ;							\
994	else								\
995		 find . -type f -not -iwholename "*.git*"		\
996		 -not -iwholename "*build*"				\
997		 -not -iwholename "*libfdt*"				\
998		 -not -iwholename "*libc*"				\
999		 -not -iwholename "*docs*"				\
1000		 -not -iwholename "*.rst"				\
1001		 -exec ${CHECKPATCH} ${CHECKCODE_ARGS} -f {} \; ;	\
1002	fi
1003
1004checkpatch:		locate-checkpatch
1005	@echo "  CHECKING STYLE"
1006	@if test -n "${CHECKPATCH_OPTS}"; then				\
1007		echo "    with ${CHECKPATCH_OPTS} option(s)";		\
1008	fi
1009	${Q}COMMON_COMMIT=$$(git merge-base HEAD ${BASE_COMMIT});	\
1010	for commit in `git rev-list $$COMMON_COMMIT..HEAD`; do		\
1011		printf "\n[*] Checking style of '$$commit'\n\n";	\
1012		git log --format=email "$$commit~..$$commit"		\
1013			-- ${CHECK_PATHS} |				\
1014			${CHECKPATCH} ${CHECKPATCH_OPTS} - || true;	\
1015		git diff --format=email "$$commit~..$$commit"		\
1016			-- ${CHECK_PATHS} |				\
1017			${CHECKPATCH}  ${CHECKPATCH_OPTS} - || true;	\
1018	done
1019
1020certtool: ${CRTTOOL}
1021
1022.PHONY: ${CRTTOOL}
1023${CRTTOOL}:
1024	${Q}${MAKE} PLAT=${PLAT} USE_TBBR_DEFS=${USE_TBBR_DEFS} COT=${COT} --no-print-directory -C ${CRTTOOLPATH}
1025	@${ECHO_BLANK_LINE}
1026	@echo "Built $@ successfully"
1027	@${ECHO_BLANK_LINE}
1028
1029ifneq (${GENERATE_COT},0)
1030certificates: ${CRT_DEPS} ${CRTTOOL}
1031	${Q}${CRTTOOL} ${CRT_ARGS}
1032	@${ECHO_BLANK_LINE}
1033	@echo "Built $@ successfully"
1034	@echo "Certificates can be found in ${BUILD_PLAT}"
1035	@${ECHO_BLANK_LINE}
1036endif
1037
1038${BUILD_PLAT}/${FIP_NAME}: ${FIP_DEPS} ${FIPTOOL}
1039	${Q}${FIPTOOL} create ${FIP_ARGS} $@
1040	${Q}${FIPTOOL} info $@
1041	@${ECHO_BLANK_LINE}
1042	@echo "Built $@ successfully"
1043	@${ECHO_BLANK_LINE}
1044
1045ifneq (${GENERATE_COT},0)
1046fwu_certificates: ${FWU_CRT_DEPS} ${CRTTOOL}
1047	${Q}${CRTTOOL} ${FWU_CRT_ARGS}
1048	@${ECHO_BLANK_LINE}
1049	@echo "Built $@ successfully"
1050	@echo "FWU certificates can be found in ${BUILD_PLAT}"
1051	@${ECHO_BLANK_LINE}
1052endif
1053
1054${BUILD_PLAT}/${FWU_FIP_NAME}: ${FWU_FIP_DEPS} ${FIPTOOL}
1055	${Q}${FIPTOOL} create ${FWU_FIP_ARGS} $@
1056	${Q}${FIPTOOL} info $@
1057	@${ECHO_BLANK_LINE}
1058	@echo "Built $@ successfully"
1059	@${ECHO_BLANK_LINE}
1060
1061fiptool: ${FIPTOOL}
1062fip: ${BUILD_PLAT}/${FIP_NAME}
1063fwu_fip: ${BUILD_PLAT}/${FWU_FIP_NAME}
1064
1065.PHONY: ${FIPTOOL}
1066${FIPTOOL}:
1067	${Q}${MAKE} CPPFLAGS="-DVERSION='\"${VERSION_STRING}\"'" --no-print-directory -C ${FIPTOOLPATH}
1068
1069sptool: ${SPTOOL}
1070.PHONY: ${SPTOOL}
1071${SPTOOL}:
1072	${Q}${MAKE} CPPFLAGS="-DVERSION='\"${VERSION_STRING}\"'" --no-print-directory -C ${SPTOOLPATH}
1073
1074.PHONY: libraries
1075romlib.bin: libraries
1076	${Q}${MAKE} PLAT_DIR=${PLAT_DIR} BUILD_PLAT=${BUILD_PLAT} ENABLE_BTI=${ENABLE_BTI} ARM_ARCH_MINOR=${ARM_ARCH_MINOR} INCLUDES='${INCLUDES}' DEFINES='${DEFINES}' --no-print-directory -C ${ROMLIBPATH} all
1077
1078# Call print_memory_map tool
1079memmap: all
1080	${Q}${PYTHON} $(PRINT_MEMORY_MAP) $(BUILD_PLAT)
1081
1082doc:
1083	@echo "  BUILD DOCUMENTATION"
1084	${Q}${MAKE} --no-print-directory -C ${DOCS_PATH} html
1085
1086cscope:
1087	@echo "  CSCOPE"
1088	${Q}find ${CURDIR} -name "*.[chsS]" > cscope.files
1089	${Q}cscope -b -q -k
1090
1091help:
1092	@echo "usage: ${MAKE} [PLAT=<platform>] [OPTIONS] [TARGET]"
1093	@echo ""
1094	@echo "PLAT is used to specify which platform you wish to build."
1095	@echo "If no platform is specified, PLAT defaults to: ${DEFAULT_PLAT}"
1096	@echo ""
1097	@echo "platform = ${PLATFORM_LIST}"
1098	@echo ""
1099	@echo "Please refer to the User Guide for a list of all supported options."
1100	@echo "Note that the build system doesn't track dependencies for build "
1101	@echo "options. Therefore, if any of the build options are changed "
1102	@echo "from a previous build, a clean build must be performed."
1103	@echo ""
1104	@echo "Supported Targets:"
1105	@echo "  all            Build all individual bootloader binaries"
1106	@echo "  bl1            Build the BL1 binary"
1107	@echo "  bl2            Build the BL2 binary"
1108	@echo "  bl2u           Build the BL2U binary"
1109	@echo "  bl31           Build the BL31 binary"
1110	@echo "  bl32           Build the BL32 binary. If ARCH=aarch32, then "
1111	@echo "                 this builds secure payload specified by AARCH32_SP"
1112	@echo "  certificates   Build the certificates (requires 'GENERATE_COT=1')"
1113	@echo "  fip            Build the Firmware Image Package (FIP)"
1114	@echo "  fwu_fip        Build the FWU Firmware Image Package (FIP)"
1115	@echo "  checkcodebase  Check the coding style of the entire source tree"
1116	@echo "  checkpatch     Check the coding style on changes in the current"
1117	@echo "                 branch against BASE_COMMIT (default origin/master)"
1118	@echo "  clean          Clean the build for the selected platform"
1119	@echo "  cscope         Generate cscope index"
1120	@echo "  distclean      Remove all build artifacts for all platforms"
1121	@echo "  certtool       Build the Certificate generation tool"
1122	@echo "  fiptool        Build the Firmware Image Package (FIP) creation tool"
1123	@echo "  sptool         Build the Secure Partition Package creation tool"
1124	@echo "  dtbs           Build the Device Tree Blobs (if required for the platform)"
1125	@echo "  memmap         Print the memory map of the built binaries"
1126	@echo "  doc            Build html based documentation using Sphinx tool"
1127	@echo ""
1128	@echo "Note: most build targets require PLAT to be set to a specific platform."
1129	@echo ""
1130	@echo "example: build all targets for the FVP platform:"
1131	@echo "  CROSS_COMPILE=aarch64-none-elf- make PLAT=fvp all"
1132