pool/coreboot-utils
SHA256
17
0
Fork 1
Code Issues Pull Requests Activity

Compare commits

merge into: pool:leap-16.0
Branches Tags
pool:factory pool:leap-16.0 pool:leap-16.1
...
pull from: pool:factory
Branches Tags
pool:factory pool:leap-16.0 pool:leap-16.1

11 Commits
leap-16.0 ... factory

Author SHA256 Message Date
Ana Guerrero
3dfe78a344 Accepting request 1314353 from hardware 
OBS-URL: https://build.opensuse.org/request/show/1314353
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/coreboot-utils?expand=0&rev=33
 2025-10-29 20:08:43 +00:00
Thomas Renninger
093337e9e7 - Fix bsc#1252626, CVE-2025-62813 
A lz4_CVE-2025-62813_null_pointer_check.patch

OBS-URL: https://build.opensuse.org/package/show/hardware/coreboot-utils?expand=0&rev=52
 2025-10-29 12:21:27 +00:00
Dominique Leuenberger
cec126ff96 Accepting request 1310744 from hardware 
- Update to version 25.09
  * https://coreboot.org/releases/coreboot-25.09-relnotes.txt
- Update coreboot-utils.keyring
  -> New Key: C75A AA4E 5C9D B017 C1DC 6EDB DB1B 0EC2 9202 D874
              Matt DeVillier <matt.devillier@gmail.com> (forwarded request 1310741 from mnhauke)

OBS-URL: https://build.opensuse.org/request/show/1310744
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/coreboot-utils?expand=0&rev=32
 2025-10-11 20:51:12 +00:00
Jan Engelhardt
6b1e0865cb - Update to version 25.09 
* https://coreboot.org/releases/coreboot-25.09-relnotes.txt
- Update coreboot-utils.keyring
  -> New Key: C75A AA4E 5C9D B017 C1DC 6EDB DB1B 0EC2 9202 D874
              Matt DeVillier <matt.devillier@gmail.com>

OBS-URL: https://build.opensuse.org/package/show/hardware/coreboot-utils?expand=0&rev=50
 2025-10-11 17:00:22 +00:00
Jan Engelhardt
f3e0b2f125 Drop gcc15.diff 
OBS-URL: https://build.opensuse.org/package/show/hardware/coreboot-utils?expand=0&rev=49
 2025-07-06 17:00:53 +00:00
Jan Engelhardt
9d69071649 Drop treewide-Work-around-GCC-15-Werror-unterminated-string-initialization.patch 
OBS-URL: https://build.opensuse.org/package/show/hardware/coreboot-utils?expand=0&rev=48
 2025-07-06 17:00:34 +00:00
Jan Engelhardt
57a1e55970 delete 25.03 tarballs 
OBS-URL: https://build.opensuse.org/package/show/hardware/coreboot-utils?expand=0&rev=47
 2025-07-06 17:00:11 +00:00
Jan Engelhardt
bcf663ae01 Accepting request 1290871 from home:mnhauke 
- Update to version 25.06
  * https://coreboot.org/releases/coreboot-25.06-relnotes.txt
- Drop not longer needed patches:
  * gcc15.diff
  * treewide-Work-around-GCC-15-Werror-unterminated-string-initialization.patch

OBS-URL: https://build.opensuse.org/request/show/1290871
OBS-URL: https://build.opensuse.org/package/show/hardware/coreboot-utils?expand=0&rev=46
 2025-07-06 14:26:34 +00:00
Thomas Renninger
6b1f9cf4d1 Accepting request 1290675 from home:trenn:branches:hardware 
- Update to version 25.03
- Fix gcc15 string init issue (bsc#1244466)
A gcc15.diff
A treewide-Work-around-GCC-15-Werror-unterminated-string-initialization.patch
- Not needed anymore, builds fine without:
D no-pie.patch

OBS-URL: https://build.opensuse.org/request/show/1290675
OBS-URL: https://build.opensuse.org/package/show/hardware/coreboot-utils?expand=0&rev=45
 2025-07-04 11:57:09 +00:00
Ana Guerrero
8c2bd115ac Accepting request 1233042 from hardware 
- Update to version 24.08
  * https://coreboot.org/releases/coreboot-24.08-relnotes.txt
- Update to version 24.05
  * https://coreboot.org/releases/coreboot-24.05-relnotes.txt
- Update to version 24.02.01
  * https://coreboot.org/releases/coreboot-24.02.01-relnotes.txt (forwarded request 1233041 from mnhauke)

OBS-URL: https://build.opensuse.org/request/show/1233042
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/coreboot-utils?expand=0&rev=31
 2024-12-22 17:08:51 +00:00
Jan Engelhardt
747bca8000 - Update to version 24.08 
* https://coreboot.org/releases/coreboot-24.08-relnotes.txt
- Update to version 24.05
  * https://coreboot.org/releases/coreboot-24.05-relnotes.txt
- Update to version 24.02.01
  * https://coreboot.org/releases/coreboot-24.02.01-relnotes.txt

OBS-URL: https://build.opensuse.org/package/show/hardware/coreboot-utils?expand=0&rev=43
 2024-12-22 13:56:09 +00:00
9 changed files with 140 additions and 91 deletions
Expand all files Collapse all files

3
coreboot-25.09.tar.xz Normal file
View File

@@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:7bdc8f177bc3705e11099fef1d0028a39fc9ae659c9b1e5055781a9a762f6da4
size 65414208

14
coreboot-25.09.tar.xz.sig Normal file
View File

@@ -0,0 +1,14 @@
-----BEGIN PGP SIGNATURE-----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=9Z+u
-----END PGP SIGNATURE-----

3
coreboot-4.22.01.tar.xz
View File

@@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:3d1a36dfb2a654133c7f36cf4da436f0d79f535644069adfe7cdcad962532c3f
size 60113964

16
coreboot-4.22.01.tar.xz.sig
View File

@@ -1,16 +0,0 @@
-----BEGIN PGP SIGNATURE-----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=U/el
-----END PGP SIGNATURE-----

45
coreboot-utils.changes
View File

@@ -1,3 +1,47 @@
-------------------------------------------------------------------
Wed Oct 29 09:47:38 UTC 2025 - Thomas Renninger <trenn@suse.de>
- Fix bsc#1252626, CVE-2025-62813
A lz4_CVE-2025-62813_null_pointer_check.patch
-------------------------------------------------------------------
Sat Oct 11 16:02:48 UTC 2025 - Martin Hauke <mardnh@gmx.de>
- Update to version 25.09
* https://coreboot.org/releases/coreboot-25.09-relnotes.txt
- Update coreboot-utils.keyring
-> New Key: C75A AA4E 5C9D B017 C1DC 6EDB DB1B 0EC2 9202 D874
Matt DeVillier <matt.devillier@gmail.com>
-------------------------------------------------------------------
Sun Jul 6 12:05:58 UTC 2025 - Martin Hauke <mardnh@gmx.de>
- Update to version 25.06
* https://coreboot.org/releases/coreboot-25.06-relnotes.txt
- Drop not longer needed patches:
* gcc15.diff
* treewide-Work-around-GCC-15-Werror-unterminated-string-initialization.patch
-------------------------------------------------------------------
Fri Jul 4 09:27:32 UTC 2025 - Thomas Renninger <trenn@suse.de>
- Update to version 25.03
- Fix gcc15 string init issue (bsc#1244466)
A gcc15.diff
A treewide-Work-around-GCC-15-Werror-unterminated-string-initialization.patch
- Not needed anymore, builds fine without:
D no-pie.patch
-------------------------------------------------------------------
Sun Dec 22 13:22:14 UTC 2024 - Martin Hauke <mardnh@gmx.de>
- Update to version 24.08
* https://coreboot.org/releases/coreboot-24.08-relnotes.txt
- Update to version 24.05
* https://coreboot.org/releases/coreboot-24.05-relnotes.txt
- Update to version 24.02.01
* https://coreboot.org/releases/coreboot-24.02.01-relnotes.txt
------------------------------------------------------------------- -------------------------------------------------------------------
Mon Feb 26 11:35:58 UTC 2024 - Dominique Leuenberger <dimstar@opensuse.org> Mon Feb 26 11:35:58 UTC 2024 - Dominique Leuenberger <dimstar@opensuse.org>
@@ -400,4 +444,3 @@ Thu Jan 10 11:41:16 CET 2008 - bwalle@suse.de
- initial package - initial package
-------------------------------------------------------------------

86
coreboot-utils.keyring
View File

@@ -1,51 +1,41 @@
-----BEGIN PGP PUBLIC KEY BLOCK----- -----BEGIN PGP PUBLIC KEY BLOCK-----
mQINBFf7BTIBEAC1qr3AjGeuob577RsPe2UawIJCOfDKA17lYtLDoPbklPSbOkS3 mQGNBGXLplcBDADavVz0F9cGkbmPAihbcmyN3/DlI1E7ZyNd4TqVobf7z9P9sUyA
EdJdr1xhaI7ohAvIttyppyeYuEVA6lM+h7dCCml9vfNn/EVRdg0FJ2ROLtMGq3E7 RUhCRD0tPQ7KHBfbJMiBbRzrHYB+qu1Rvjt5snZqFYzsh7t8A3hyZxq907PEsix7
7gdx4v8CBgpIKa8GtnCqz8kAI8ZbpXkcBaasLZ1LKsmXjHvfH3GBQK6HjnZ7yCvr jh960tqEZAqaXih2Fg8poI/prBu/x0+8W4oKeubjK3f4BZYkipvpDdH1so+dQWe6
+44m/7XX2rJYsAx1/b07fhplE3Mq4d+2zFzStwW8913gkgtA5R6HAPVU83zAKuR2 XztljGQGWcCfN1MSOCs3X7OIyUFQ2LQlqPOmaQ4UVzFlXoVxu/Y/gA6QbVEQIXSa
bvTjyMLCTKYXu9am545dzOwbHAmDv8yA+eTYMM6Rf9IquK43muwsl3knHPtXlzwZ zsdKDF/OdAdmN03jT8AUOirSXWz80lStg1Z/jB613vdXrybsIXk2te+2oX63k9lV
vaoYIgYEROGD15z9/MY1/mRTUVsFVs18mAtYli6LmXHo2wwQaO+CZ+dHCzeJwTMV U7h64GuKGURwnRFyMU7s4hpBrhwKKm5PhIFtfGL/nJv45f4gNJwW71VprEXfB2aH
7aFhpWqk6jFctVeQWlP2IBLszFBUQQ48XI5qIpUFYOiF1iJfq+YK2qNlidFq4Ddh lLovl+WhYkbsomZY7h3QJD0svXmXxK04XHbmKFNnv46GkEXRr79dGdGtLRbr+Sop
V07Kf9ZYodzYL/tamPlo4gCjWyAdX0rmbKp8pSrkuLCAcY+SXlMigfhri7kFc8Ks +onYlLQ1qpw6fkyrZhQKomskEGPjtwfmELT2y4AiiNAizrvAu/7jR2469ubD3SUo
N3K8Zf17TYZXTURohqiWBOYlh/er/2wou9yI9sCIW6y/0+nR3mIZ+ytlMkUyq+Pi QeLllzGeGVGq9JkAEQEAAbQpTWF0dCBEZVZpbGxpZXIgPG1hdHQuZGV2aWxsaWVy
2syqAE1qjJpvl5J+2LVtE1Q69b0qKKOJdC7XeEaGX/18AB8Ufp5gXx+xbM8r5pec QGdtYWlsLmNvbT6JAc4EEwEKADgWIQTHWqpOXJ2wF8HcbtvbGw7CkgLYdAUCZcum
InepxDYSV9MXw7ogLKacQ76zKP3xgUfAxj0MNvsFqHf9PprQIhEE0MDHvQARAQAB VwIbAwULCQgHAgYVCgkICwIEFgIDAQIeAQIXgAAKCRDbGw7CkgLYdCuDC/9SktFs
tDZNYXJ0aW4gUm90aCAoY29yZWJvb3QgZGV2ZWxvcGVyKSA8bWFydGluQGNvcmVi YRu3URj9eosJcu48ysCEczHpKuaLvECkiuS+yzKVt4yvHuLgePmUx3mMn9+yN6Gz
b290Lm9yZz6JAjkEEwECACMFAlf7BTICGwMHCwkIBwMCAQYVCAIJCgsEFgIDAQIe uTQHkAf6wyRqt3v7QIGyTYg9TLe/cFGfItQrSsTbGDPKPHzuKz0YdrtJ54C3rLPl
AQIXgAAKCRAZeWwrPk9991KhD/9dQ3QpQmwumT9SIRS1sAbQ4GNrZqex7zQbtmmy t69nCVrmiNdLgVnnXAifDzuDyGQXtzGl/Fw0dJD0VmLAGYVIm6DD8jLri+M9irSI
eACQcfAV0Gget3HhG7DZf0YrOOSOkWb2L3LhEucM6qX+MN+eSWjkYsGktNQeBovK qFi8mNLCwHLqmNnc5AV/Gvp4MAbeG/slDQ/vUm6cVYsmQC8khs6qoDjDd5DpRRmC
VP8ZgnjYrs3cSi+Fgv8BgdvjfZ2Mr5UKJ290kUphuKBMb0UyAVnxm7h6ykB3kzJZ 2PUwJ+/JhEFKb0J3zi2HZ1iscE7Xyx/Agi++s81JiCFu1cxFoRz9/r7fm/6Dej2Z
lOoEgDfXNy7k9h5BPqnTYqTO0NzHtBkV7xwRldVwUZ33npeMcWaYlidZG29mRaYO +CrQFajtNwvgUpjUPiIeoSzSRXVofo3bq90QNKq9ZeJbbHLpD73Hcm+QV2R4KDjU
BUGLna11apX2xi7p7vXMWTZnCGgSgi47HlFdb6tcvwXK8EDu2QU96DprmOa8gAYU MqTRM/lSaaSmgSWvhFeSbkkJCyQk8wXfXavNNFN6kPbmFQ2TNWISZ3sllCNrf5OJ
fXaVMXjLL+cWNg1EY0m8i0yhxpLkEsB/MBUcN8FeTMoftLdWanqQDjbo51SZ5M2M ABEEwhLpVQNsydulQ2yADqijje/zujltMYi0ygrfcuU8WEkP4mKBecmy31q5AY0E
A0hdBp4f7PZPiRP1SFhndhCJBiPk1y0ebMwqRK6LG1aqE8DS6ZiFisNz+g2EZEMF ZcumVwEMAK0Oq3gvfLoVAaSxtLkwmb+0wDWPmr85jP6xftqwMOMsq/MGjCPotCEm
uUg2XH0B+SXgxOA/PKw29RTsqsSGh1xl6ajtVeaeMVc3hBPdtNnZ8cu2/IKvym8B TLpR4WMHCV8Kq3hLJrQ7xeD+UnjuF6eAOCxu6JerwZIRnmYRKF1mzuRPOK+Wur/d
kOO4O8Erdu9TUQEt9BIGzh5vqIKhrOdQ7nwumYsq8J5yHbCbPRv5/XjAvvJks/oU 12f2lDvf5JqKzQYXMiIHrXihZIXJ9YXElMtGGiz9wekNfqXJi9mJ0HQJYDJ7LFum
UfdmxkmBRo2+rj4R5a7fETizFf7dyYLC9tuY1+vks9I9+7GUP760MIH9EI8VZB/U 3cPa3qXYnmqyDaNaJrDjWhwmJg9zmMYjdxzCKTFiliPASEl9Vy6Uyg0eIb+TtE7R
DG8teRLVpi30ceGo/WZweqDXXATwIU3nsLolcEU+byKh5bwr7/iIyuXbt/Q2rSSQ 1RxSW9CqRTRnbd4hW6VX7MEvcHdiG679jkO0nN2kuKjXgzCTcoU8bTVBJLAorYh7
lAXzUbkCDQRX+wUyARAArRRH4MzJkCWBGdrmjmCsR1YEFUYsFpomJB+pyDRRu75t bNvOcf930ib58jIKGjTu+U9PnAoii66hqwZceldi3Yj4jiaBwS4f353S8kH4oIXL
X03GYfnYKvZfOsj4x1jJsATSRWvdom09RSpae+jFFvAcGVabNMRwksKz7dP3hiCg 3MhZA1XuphyHiWsU3jXlMV8C5gQ3vzOFoO3wzT69qlbVNlfKTH9FcVer/2VdZvcx
zS0tfQU0Q8ge3PXJ/COBNTIAETLBZ0j2YQnPmJpvD16BSDthBgKfec/l31s1bzXL 36shUCJxtm6Hhg8dFuPYsN+WfAxMhOaaFt+Au+gTZAoIpR7N9lDftwEXVf/3BAtp
qwtBDub6DJrtu+Iunpti+kDAsmfxyVlOkUImODqPzSOzDmoCntb0XEQmEW/b1KQW Xc/JWuAkVwARAQABiQG2BBgBCgAgFiEEx1qqTlydsBfB3G7b2xsOwpIC2HQFAmXL
L66/qs5EWS6vHjA4Bn/3aUNQrXuGOcpycc7fyix3RATjpNZah9ScZ2CPBlrwm1J4 plcCGwwACgkQ2xsOwpIC2HQVlAv/fa4psO24xJuCJzn3WRbderOyZmwnqtpcio7u
q9Pj0GPzeXY2DznnLQkmrJ0j8IJ4Bf4NpM8j7n0xevMiWvwi7+NxvstvcnKJi/oj OjULuhazl9+dKIhpjwjpsOm6HKRMdOf/VvdCp68YcJeWbAqGxRWwM5vtP5UpAXTd
rhGGRu+55s7JHTXA1kqD82rnAm0NMhhb+kSBamEQsuzIdKPFw7ep2dSveiwJMB2k QBUtr7ZKthW+Rg71p6rmTGmx02LcirQnVEAZItsxwPNWl7P+LpbHBtDcBG1Ur4O2
PdFXyxNIvlKMKr2FF87pIW3XLKPfmHQJ3wUdiImUAxFcvJAALH3bW6wd6aqRKOPy l4fHJH64PeUZbDEXoenyuP0ji+JRw+TSI/xTsWLiJHgUSnP19JOk068B/WNkw8hO
9IO9pUXVL65ZskDcxgGPGUlY6NPgSUD4jqh9vM0mbxkQ4rUfgVN7MHO4+UysY9+p OoQkDOK67Cw9/OAzJIJkMW4VrntxJNUp+UpZCcZHCNWf8yrgs3UFAxM3KbQ/4lN0
NDfKg09hF2tCm13OODY5AZTY2AE9Gv+BkVgiD01yYW3FNjUFXDNZXgkC70mRinMd 2iMkopuXIeruNBkPN4bsGm4V7YFDMMKJVcF3Khme62QO5LNsOAv6fcUQdaKHdZwt
ezEv93nFXoCvIqORX72Ien2lcGZALT/6bq9ouG6TbohFIjb8+qWZ0tzsRlblI58A e7vKotDabLmesylnAHBWHgvKBGFepNeg7XSasB/OxAlyi4u8IzviTsVnSY4qT/Q0
EQEAAYkCHwQYAQIACQUCV/sFMgIbDAAKCRAZeWwrPk999zo5EACpWJcNUeLiiUPr L3YC5416e5OWRq77cdmOUvQS2hiUElwWP75L9JvHZF5zEbLVKLPRTZriM83xF5Rj
ScvfITL39qBXPvMyfNtJADKqdfh/s3OWuw3zGbLYKtCYGm+VYqFXJEoLIGXvwXJe pfHVp/B2tOa6fRC3tAxXlPNeHs1P
dSb2vMhG1ME38234l/8c8sGCiVqLk+g31p+091gPpe25RbtJBwo4r5wmWkc69CTS =J+Zs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=ZArY
-----END PGP PUBLIC KEY BLOCK----- -----END PGP PUBLIC KEY BLOCK-----

12
coreboot-utils.spec
View File

@@ -1,7 +1,7 @@
# #
# spec file for package coreboot-utils # spec file for package coreboot-utils
# #
# Copyright (c) 2023 SUSE LLC # Copyright (c) 2025 SUSE LLC and contributors
# #
# All modifications and additions to the file contributed by third parties # All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed # remain the property of their copyright owners, unless otherwise agreed
@@ -17,7 +17,7 @@
Name: coreboot-utils Name: coreboot-utils
Version: 4.22.01 Version: 25.09
Release: 0 Release: 0
Summary: A universal flash programming utility Summary: A universal flash programming utility
License: GPL-2.0-only License: GPL-2.0-only
@@ -26,8 +26,8 @@ URL: https://coreboot.org/
Source0: https://www.coreboot.org/releases/coreboot-%{version}.tar.xz Source0: https://www.coreboot.org/releases/coreboot-%{version}.tar.xz
Source1: https://www.coreboot.org/releases/coreboot-%{version}.tar.xz.sig Source1: https://www.coreboot.org/releases/coreboot-%{version}.tar.xz.sig
Source3: %{name}.keyring Source3: %{name}.keyring
Patch1: no-pie.patch Patch1: do-explicit-fallthrough.patch
Patch3: do-explicit-fallthrough.patch Patch2: lz4_CVE-2025-62813_null_pointer_check.patch
BuildRequires: gcc-c++ BuildRequires: gcc-c++
BuildRequires: libopenssl-devel BuildRequires: libopenssl-devel
BuildRequires: pciutils-devel BuildRequires: pciutils-devel
@@ -43,10 +43,6 @@ used to develop and configure systems with coreboot.
%prep %prep
%autosetup -p1 -n coreboot-%{version} %autosetup -p1 -n coreboot-%{version}
# Upstream messed the timespamps in the tarball
# Fix these for the 4.19 tarball
find . | xargs touch
%build %build
make %{?_smp_mflags} CFLAGS="%{optflags}" -C util/ectool make %{?_smp_mflags} CFLAGS="%{optflags}" -C util/ectool
make %{?_smp_mflags} CC="cc %{optflags}" -C util/superiotool make %{?_smp_mflags} CC="cc %{optflags}" -C util/superiotool

37
lz4_CVE-2025-62813_null_pointer_check.patch Normal file
View File

@@ -0,0 +1,37 @@
commit 93137e9042bd72b5158eae6175a0c4f2f67bd176
Author: Thomas Renninger <trenn@suse.de>
Date: Wed Oct 29 10:51:52 2025 +0100
Fix CVE-2025-62813
This is a backport of lz4 mainline commit:
f64efec011c058bd70348576438abac222fe6c82
Which security people identified as a security vulnerability:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2025-62813
https://www.cve.org/CVERecord?id=CVE-2025-62813
https://github.com/lz4/lz4/commit/f64efec011c058bd70348576438abac222fe6c82
diff --git a/util/cbfstool/lz4/lib/lz4frame.c b/util/cbfstool/lz4/lib/lz4frame.c
index aef508d8df..15673d4ca6 100644
--- a/util/cbfstool/lz4/lib/lz4frame.c
+++ b/util/cbfstool/lz4/lib/lz4frame.c
@@ -64,6 +64,7 @@ You can contact the author at :
#include "lz4hc.h"
#include "xxhash.h"
+#include <assert.h>
/**************************************
* Basic Types
@@ -930,6 +931,10 @@ LZ4F_errorCode_t LZ4F_getFrameInfo(LZ4F_decompressionContext_t dCtx, LZ4F_frameI
{
LZ4F_dctx_t* dctxPtr = (LZ4F_dctx_t*)dCtx;
+ assert(dCtx != NULL);
+ if (frameInfoPtr == NULL || srcSizePtr == NULL)
+ return (size_t)-LZ4F_ERROR_srcPtr_wrong;
+
if (dctxPtr->dStage > dstage_storeHeader) /* note : requires dstage_* header related to be at beginning of enum */
{
size_t o=0, i=0;

15
no-pie.patch
View File

@@ -1,15 +0,0 @@
diff --git a/util/msrtool/Makefile.in b/util/msrtool/Makefile.in
index f50adc2..15552bb 100644
--- a/util/msrtool/Makefile.in
+++ b/util/msrtool/Makefile.in
@@ -19,8 +19,8 @@ PROGRAM = msrtool
CC = @CC@
INSTALL = @INSTALL@
PREFIX = @PREFIX@
-CFLAGS = @CFLAGS@
-LDFLAGS = @LDFLAGS@
+CFLAGS = @CFLAGS@ -fPIC -fno-PIE
+LDFLAGS = @LDFLAGS@ -fPIC -no-pie
TARGETS = geodegx2.o geodelx.o cs5536.o k8.o via_c7.o intel_pentium3_early.o intel_pentium3.o intel_pentium4_early.o intel_pentium4_later.o intel_pentium_d.o intel_core1.o intel_core2_early.o intel_core2_later.o intel_nehalem.o intel_atom.o
SYSTEMS = linux.o darwin.o freebsd.o