Adding upstream version 7.0.6-dfsg.upstream/7.0.6-dfsgupstream

Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>

1 files changed, 936 insertions, 0 deletions

diff --git a/src/VBox/HostDrivers/Support/Makefile.kmk b/src/VBox/HostDrivers/Support/Makefile.kmk
new file mode 100644
index 00000000..85f5cfe9
--- /dev/null
+++ b/src/VBox/HostDrivers/Support/Makefile.kmk
@@ -0,0 +1,936 @@
+# $Id: Makefile.kmk $
+## @file
+# Sub-Makefile for the support library and the drivers/modules/kexts it uses.
+#
+
+#
+# Copyright (C) 2006-2022 Oracle and/or its affiliates.
+#
+# This file is part of VirtualBox base platform packages, as
+# available from https://www.virtualbox.org.
+#
+# This program is free software; you can redistribute it and/or
+# modify it under the terms of the GNU General Public License
+# as published by the Free Software Foundation, in version 3 of the
+# License.
+#
+# This program is distributed in the hope that it will be useful, but
+# WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+# General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, see <https://www.gnu.org/licenses>.
+#
+# The contents of this file may alternatively be used under the terms
+# of the Common Development and Distribution License Version 1.0
+# (CDDL), a copy of it is provided in the "COPYING.CDDL" file included
+# in the VirtualBox distribution, in which case the provisions of the
+# CDDL are applicable instead of those of the GPL.
+#
+# You may elect to license modified versions of this file under the
+# terms and conditions of either the GPL or the CDDL or both.
+#
+# SPDX-License-Identifier: GPL-3.0-only OR CDDL-1.0
+#
+
+SUB_DEPTH = ../../../..
+include $(KBUILD_PATH)/subheader.kmk
+
+#
+# Globals.
+#
+VBOX_PATH_SUP_SRC            := $(PATH_SUB_CURRENT)
+VBOX_PATH_SUPR3_CERTIFICATES := $(PATH_SUB_CURRENT)/Certificates
+VBOX_PATH_RUNTIME_SRC        ?= $(PATH_ROOT)/src/VBox/Runtime
+
+
+#
+# Targets
+#
+LIBRARIES += SUPR3 SUPR3Static
+if   defined(VBOX_WITH_HARDENING) \
+ && !defined(VBOX_ONLY_VALIDATIONKIT)
+ LIBRARIES += SUPR3HardenedStatic
+endif
+ifndef VBOX_ONLY_BUILD
+ DLLS.win += VBoxSupLib
+endif
+ifdef VBOX_WITH_32_ON_64_MAIN_API
+ LIBRARIES += SUPR3-x86
+endif
+if !defined(VBOX_ONLY_DOCS)
+ if1of ($(VBOX_LDR_FMT), pe lx)
+  LIBRARIES += SUPR0
+ endif
+endif
+if !defined(VBOX_ONLY_BUILD) && defined(VBOX_WITH_RAW_MODE)
+ LIBRARIES += SUPRC
+endif
+if  !defined(VBOX_ONLY_DOCS) \
+ && !defined(VBOX_ONLY_EXTPACKS) \
+ && !defined(VBOX_ONLY_VALIDATIONKIT) \
+ && "$(intersects $(KBUILD_TARGET_ARCH),$(VBOX_SUPPORTED_HOST_ARCHS))" != ""
+ ifdef VBOX_WITH_SUPSVC
+  PROGRAMS += VBoxSupSvc
+ endif
+ ifdef VBOX_WITH_VBOXDRV
+  LIBRARIES       += SUPR0IdcClient
+  SYSMODS.os2     += VBoxDrv
+ endif
+ INSTALLS.linux   += vboxdrv-src
+ INSTALLS.freebsd += vboxdrv-src
+
+ #
+ # Include sub-makefile(s).
+ #
+ include $(PATH_SUB_CURRENT)/testcase/Makefile.kmk
+
+ #
+ # Populate FILES_VBOXDRV_NOBIN and FILES_VBOXDRV_BIN
+ #
+ ifeq ($(KBUILD_TARGET),linux)
+  include $(PATH_SUB_CURRENT)/linux/files_vboxdrv
+ endif
+ ifeq ($(KBUILD_TARGET),freebsd)
+  include $(PATH_SUB_CURRENT)/freebsd/files_vboxdrv
+ endif
+endif # !VBOX_ONLY_DOCS && !VBOX_ONLY_EXTPACKS && !VBOX_ONLY_VALIDATIONKIT
+
+#
+# Authenticode related trust anchors and certificates -> .cpp
+#
+VBOX_SUP_WIN_CERTS_FILE = $(SUPR3_0_OUTDIR)/TrustAnchorsAndCerts.cpp
+VBOX_SUP_WIN_CERTS := \
+       SpcRootMicrosoft0=SpcRoot-MicrosoftAuthenticodeTmRootAuthority-01.taf \
+       SpcRootMicrosoft1=SpcRoot-MicrosoftRootAuthority-00c1008b3c3c8811d13ef663ecdf40.taf \
+       SpcRootMicrosoft2=SpcRoot-MicrosoftRootCertificateAuthority-79ad16a14aa0a5ad4c7358f407132e65.taf \
+       SpcRootMicrosoft3=SpcRoot-MicrosoftRootCertificateAuthority2010-28cc3a25bfba44ac449a9b586b4339aa.taf \
+       SpcRootMicrosoft4=SpcRoot-MicrosoftRootCertificateAuthority2011-3f8bc8b5fc9fb29643b569d66c42e144.taf \
+       SpcRootMicrosoft5=SpcRoot-MicrosoftDigitalMediaAuthority2005-6eff330eb6e7569740680870104baaba.taf \
+       SpcRootMicrosoft6=SpcRoot-MicrosoftDevelopmentRootCertificateAuthority2014-078f0a9d03df119e434e4fec1bf0235a.taf \
+       SpcRootMicrosoft7=SpcRoot-MicrosoftTestingRootCertificateAuthority2010-8a334aa8052dd244a647306a76b8178fa215f344.taf \
+       NtRootMicrosoft8=NtRoot-MicrosoftCodeVerificationRoot-729404101f3e0ca347837fca175a8438.taf \
+       TimeRootMicrosoft0=Timestamp-CopyrightC1997MicrosoftCorp-01.taf \
+       TimeRootOracle0=Timestamp-VBoxLegacyWinCA.taf \
+       TimeRootOracle1=Timestamp-VBoxLegacyWinSha1CA.taf \
+       TrustedCertVBox0=Trusted-OracleCorporationVirtualBox-05308b76ac2e15b29720fb4395f65f38.taf \
+       AppleRoot0=AppleRoot-2bd06947947609fef46b8d2e40a6f7474d7f085e.taf \
+       AppleRoot1=AppleRoot-G2-c499136c1803c27bc0a3a00d7f72807a1c77268d.taf
+# Hack Alert! Because the DigiCert cross signing certificate we use expired 2020-04-15, we add it as a trusted NT kernel
+#             signing root instead, so we can bypass the expiry check in IPRT.  NtRootMicrosoft8 is the one found in the
+#             6.1.20 extpack, NtRootMicrosoft9 is the one bird uses at home.
+VBOX_SUP_WIN_CERTS += NtRootDigiCert8=NtRoot-CrossSign-DigiCertAssuredIDRootCA-589567a6c1944d68f11ff3d86576092b.taf
+VBOX_SUP_WIN_CERTS += NtRootDigiCert9=NtRoot-CrossSign-DigiCertHighAssuranceEVRootCA-f4a38dbe86386c554d25f1ce2557a4fe.taf
+
+VBOX_SUP_WIN_CERT_NAMES := $(foreach cert,$(VBOX_SUP_WIN_CERTS),$(firstword $(subst =,$(SPACE) ,$(cert))))
+
+# 1=name, 2=filter, 3=buildcert?.
+if "$(KBUILD_TARGET)" == "win" && defined(VBOX_WITH_HARDENING)
+ VBOX_SUP_GEN_CERT_MACRO = 'SUPTAENTRY const g_aSUP$(1)TAs[] =' '{' \
+       $(if-expr "$(3)" == "",,'    SUPTAENTRY_GEN(g_abSUPBuildCert),') \
+	$(foreach certnm,$(filter $(2),$(VBOX_SUP_WIN_CERT_NAMES)), '    SUPTAENTRY_GEN(g_abSUP$(certnm)),') \
+	'};' 'unsigned const g_cSUP$(1)TAs = RT_ELEMENTS(g_aSUP$(1)TAs);' '' ''
+else
+ VBOX_SUP_GEN_CERT_MACRO = 'SUPTAENTRY const g_aSUP$(1)TAs[] =' '{' \
+	$(foreach certnm,$(filter $(2),$(VBOX_SUP_WIN_CERT_NAMES)), '    SUPTAENTRY_GEN(g_abSUP$(certnm)),') \
+	'};' 'unsigned const g_cSUP$(1)TAs = RT_ELEMENTS(g_aSUP$(1)TAs);' '' ''
+endif
+
+if  ("$(KBUILD_TARGET)" == "win"    && defined(VBOX_SIGNING_MODE)) \
+ || ("$(KBUILD_TARGET)" == "darwin" && defined(VBOX_WITH_DARWIN_R0_DARWIN_IMAGE_VERIFICATION) && defined(VBOX_SIGNING_MODE))
+ BLDPROGS += bldSUPSignedDummy
+ bldSUPSignedDummy_TEMPLATE         = VBoxBldProg
+ bldSUPSignedDummy_SOURCES          = bldSUPSignedDummy.cpp
+ bldSUPSignedDummy_ORDERDEPS.win    = $(VBOX_SIGN_IMAGE_ORDERDEPS)
+ bldSUPSignedDummy_POST_CMDS.win    = $(call VBOX_SIGN_IMAGE_FN,$(out),,2)
+ bldSUPSignedDummy_POST_CMDS.darwin = $(call VBOX_SIGN_MACHO_FN,$(out),org.virtualbox.org.bldtool.$(target))
+endif
+
+$$(VBOX_SUP_WIN_CERTS_FILE): $(MAKEFILE_CURRENT) \
+		$(foreach cert,$(VBOX_SUP_WIN_CERTS),$(VBOX_PATH_SUPR3_CERTIFICATES)/$(lastword $(subst =,$(SPACE) ,$(cert)))) \
+		$(VBOX_BIN2C) \
+		$(if-expr defined(bldSUPSignedDummy_SOURCES),$(VBOX_RTSIGNTOOL) $$(bldSUPSignedDummy_1_TARGET),) \
+		| $$(dir $$@)
+	$(QUIET)$(RM) -f -- $@ $@.cer
+	$(QUIET)$(APPEND) -n "$@" \
+       	'' \
+       	'#include <VBox/sup.h>' \
+               ''
+	$(foreach cert,$(VBOX_SUP_WIN_CERTS), $(NLTAB)$(VBOX_BIN2C) -ascii --append --static --no-size \
+		"SUP$(firstword $(subst =,$(SP) ,$(cert)))" \
+		"$(VBOX_PATH_SUPR3_CERTIFICATES)/$(lastword $(subst =,$(SP) ,$(cert)))" \
+		"$@")
+# The build certificate.
+ifdef bldSUPSignedDummy_SOURCES
+	$(VBOX_RTSIGNTOOL) extract-exe-signer-cert --exe "$(bldSUPSignedDummy_1_TARGET)" --output "$@.cer" --der
+	$(VBOX_BIN2C) -ascii --append SUPBuildCert "$@.cer" $@
+	$(QUIET)$(RM) -f -- $@.cer
+endif
+# Generate certificate lists.
+	$(QUIET)$(APPEND) -n "$@" '' \
+		$(call VBOX_SUP_GEN_CERT_MACRO,All,%,build) \
+		$(call VBOX_SUP_GEN_CERT_MACRO,SpcRoot,SpcRoot%) \
+		$(call VBOX_SUP_GEN_CERT_MACRO,NtKernelRoot,NtRoot%) \
+		$(call VBOX_SUP_GEN_CERT_MACRO,Timestamp,TimeRoot%) \
+		$(call VBOX_SUP_GEN_CERT_MACRO,AppleRoot,AppleRoot%) \
+		$(call VBOX_SUP_GEN_CERT_MACRO,Trusted,TrustedCert%,build)
+
+OTHER_CLEAN += $(VBOX_SUP_WIN_CERTS_FILE)
+
+tst: $(VBOX_SUP_WIN_CERTS_FILE)
+
+
+#
+# The Ring-3 Support Library (this is linked into the IPRT dll, VBoxRT).
+#
+SUPR3_TEMPLATE      = VBOXR3
+SUPR3_DEFS          = \
+	IN_SUP_R3 IN_RT_R3 \
+	$(if $(VBOX_WITH_SUPSVC),VBOX_WITH_SUPSVC) \
+	$(if $(VBOX_WITH_MAIN),VBOX_WITH_MAIN,) \
+	$(if $(VBOX_WITH_RAW_MODE),VBOX_WITH_RAW_MODE,) \
+	$(if $(VBOX_WITH_DRIVERLESS_NEM_FALLBACK),VBOX_WITH_DRIVERLESS_NEM_FALLBACK,) \
+	VBOX_PERMIT_MORE \
+	VBOX_PERMIT_EVEN_MORE
+SUPR3_INCS         := $(PATH_SUB_CURRENT)
+SUPR3_SOURCES       = \
+	SUPLib.cpp \
+	SUPLibLdr.cpp \
+	SUPLibSem.cpp \
+	SUPLibAll.cpp \
+	SUPR3HardenedIPRT.cpp \
+	SUPR3HardenedVerify.cpp \
+	$(KBUILD_TARGET)/SUPLib-$(KBUILD_TARGET).cpp \
+ 	$(VBOX_SUP_WIN_CERTS_FILE)
+SUPR3_SOURCES.amd64 = \
+	SUPLibTracerA.asm
+SUPR3_SOURCES.x86   = \
+	SUPLibTracerA.asm
+ifdef VBOX_WITH_HARDENING
+ SUPR3_SOURCES.win  = \
+ 	win/SUPHardenedVerifyImage-win.cpp
+endif
+
+SUPR3-x86_TEMPLATE = VBoxR3Dll-x86
+SUPR3-x86_EXTENDS  = SUPR3
+
+
+#
+# Static version of SUPR3.  This is more of a stub than anything else in a
+# hardened build, at least on windows.
+#
+SUPR3Static_TEMPLATE = VBOXR3STATIC
+SUPR3Static_EXTENDS = SUPR3
+SUPR3Static_DEFS = $(SUPR3_DEFS) IN_SUP_R3_STATIC
+SUPR3Static_SOURCES.win = $(filter-out win/SUPHardenedVerifyImage-win.cpp, $(SUPR3_SOURCES.win))
+
+
+#
+# The static part of the hardened support library (ring-3).
+#
+SUPR3HardenedStatic_TEMPLATE = VBOXR3HARDENEDLIB
+SUPR3HardenedStatic_DEFS     = IN_SUP_HARDENED_R3
+SUPR3HardenedStatic_DEFS    += \
+	$(if $(VBOX_WITH_SUPSVC),VBOX_WITH_SUPSVC,) \
+	$(if $(VBOX_WITH_MAIN),VBOX_WITH_MAIN,) \
+	$(if $(VBOX_WITH_RAW_MODE),VBOX_WITH_RAW_MODE,) \
+	$(if $(VBOX_WITH_DRIVERLESS_NEM_FALLBACK),VBOX_WITH_DRIVERLESS_NEM_FALLBACK,) \
+	$(if $(VBOX_WITHOUT_DEBUGGER_CHECKS),VBOX_WITHOUT_DEBUGGER_CHECKS,) \
+	$(if $(VBOX_PERMIT_VISUAL_STUDIO_PROFILING),VBOX_PERMIT_VISUAL_STUDIO_PROFILING,) \
+	VBOX_PERMIT_MORE \
+	VBOX_PERMIT_EVEN_MORE
+ifdef VBOX_WITH_VISTA_NO_SP
+ SUPR3HardenedStatic_DEFS.win += VBOX_WITH_VISTA_NO_SP
+endif
+SUPR3HardenedStatic_INCS     = .
+SUPR3HardenedStatic_SOURCES  = \
+	SUPR3HardenedMain.cpp \
+	SUPR3HardenedVerify.cpp \
+	SUPR3HardenedNoCrt.cpp \
+	$(KBUILD_TARGET)/SUPLib-$(KBUILD_TARGET).cpp
+SUPR3HardenedStatic_SOURCES.win = \
+	win/SUPR3HardenedMain-win.cpp \
+	win/SUPR3HardenedMainA-win.asm \
+	win/SUPR3HardenedMainImports-win.cpp \
+	win/SUPHardenedVerifyProcess-win.cpp \
+	win/SUPHardenedVerifyImage-win.cpp \
+	$(VBOX_SUP_WIN_CERTS_FILE)
+SUPR3HardenedStatic_SOURCES.x86 += \
+	$(VBOX_PATH_RUNTIME_SRC)/common/asm/ASMMemFirstMismatchingU8.asm
+SUPR3HardenedStatic_SOURCES.amd64 += \
+	$(VBOX_PATH_RUNTIME_SRC)/common/asm/ASMMemFirstMismatchingU8.asm
+
+
+if "$(KBUILD_TARGET)" == "win" && defined(VBOX_WITH_HARDENING) && !defined(VBOX_ONLY_VALIDATIONKIT) ## @todo some of this move up.
+ SUPR3HardenedStatic_DEFS += \
+ 	IN_RT_R3 \
+ 	IN_RT_STATIC \
+ 	IN_DIS \
+	IN_DIS_STATIC \
+ 	DIS_CORE_ONLY \
+  	IPRT_NO_CRT \
+ 	RT_WITH_NOCRT_ALIASES \
+ 	LOG_DISABLED \
+ 	IPRT_NO_ERROR_DATA \
+       IPRT_WITHOUT_DIGEST_MD4
+ SUPR3HardenedStatic_DEFS.win += LDR_ONLY_PE __STRALIGN_H_
+
+ SUPR3HardenedStatic_INCS += $(PATH_ROOT)/include/iprt/nocrt  $(VBOX_PATH_RUNTIME_SRC)/include
+
+ SUPR3HardenedStatic_SOURCES += \
+	$(VBOX_PATH_RUNTIME_SRC)/common/ldr/ldr.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/ldr/ldrEx.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/ldr/ldrPE.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/alloc/heapsimple.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/asn1/asn1-basics.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/asn1/asn1-cursor.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/asn1/asn1-default-allocator.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/asn1/asn1-safer-allocator.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/asn1/asn1-dump.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/asn1/asn1-encode.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/asn1/asn1-ut-bitstring.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/asn1/asn1-ut-bitstring-decode.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/asn1/asn1-ut-boolean.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/asn1/asn1-ut-boolean-decode.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/asn1/asn1-ut-core.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/asn1/asn1-ut-core-decode.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/asn1/asn1-ut-dyntype.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/asn1/asn1-ut-dyntype-decode.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/asn1/asn1-ut-integer.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/asn1/asn1-ut-integer-decode.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/asn1/asn1-ut-null.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/asn1/asn1-ut-null-decode.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/asn1/asn1-ut-objid.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/asn1/asn1-ut-objid-decode.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/asn1/asn1-ut-octetstring.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/asn1/asn1-ut-octetstring-decode.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/asn1/asn1-ut-string.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/asn1/asn1-ut-string-decode.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/asn1/asn1-ut-time.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/asn1/asn1-ut-time-decode.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/crypto/digest-core.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/crypto/digest-builtin.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/crypto/key.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/crypto/pkcs7-asn1-decoder.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/crypto/pkcs7-core.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/crypto/pkcs7-init.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/crypto/pkcs7-sanity.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/crypto/pkcs7-verify.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/crypto/pkix-signature-builtin.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/crypto/pkix-signature-core.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/crypto/pkix-signature-rsa.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/crypto/pkix-verify.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/crypto/pkix-util.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/crypto/rsa-asn1-decoder.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/crypto/rsa-core.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/crypto/rsa-init.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/crypto/rsa-sanity.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/crypto/spc-asn1-decoder.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/crypto/spc-core.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/crypto/spc-init.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/crypto/spc-sanity.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/crypto/x509-asn1-decoder.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/crypto/x509-certpaths.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/crypto/x509-core.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/crypto/x509-init.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/crypto/x509-sanity.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/crypto/x509-verify.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/crypto/store.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/crypto/store-inmem.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/crypto/taf-asn1-decoder.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/crypto/taf-core.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/crypto/taf-init.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/crypto/taf-sanity.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/crypto/tsp-asn1-decoder.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/crypto/tsp-core.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/crypto/tsp-init.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/crypto/tsp-sanity.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/checksum/alt-md2.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/checksum/alt-md5.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/checksum/alt-sha1.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/checksum/alt-sha256.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/checksum/alt-sha512.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/checksum/alt-sha3.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/checksum/md2str.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/checksum/md5str.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/checksum/sha1str.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/checksum/sha256str.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/checksum/sha512str.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/err/errinfo.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/path/RTPathChangeToUnixSlashes.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/path/RTPathExt.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/string/RTUtf16PrintHexBytes.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/string/RTUtf16ICmpAscii.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/string/RTUtf16NICmpAscii.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/string/RTUtf16CatAscii.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/string/RTUtf16CopyAscii.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/string/RTUtf16End.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/string/strstrip.cpp \
+       \
+	$(VBOX_PATH_RUNTIME_SRC)/common/err/errmsg.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/math/bignum.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/math/bignum-amd64-x86.asm \
+	$(VBOX_PATH_RUNTIME_SRC)/common/misc/RTAssertMsg1Weak.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/misc/RTAssertMsg2.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/misc/RTAssertMsg2Weak.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/misc/RTAssertMsg2WeakV.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/misc/zero.asm \
+	$(VBOX_PATH_RUNTIME_SRC)/common/path/RTPathAbsEx.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/path/RTPathFilename.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/path/RTPathParse.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/path/RTPathParsedReassemble.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/string/memchr.asm \
+	$(VBOX_PATH_RUNTIME_SRC)/common/string/memcmp.asm \
+	$(VBOX_PATH_RUNTIME_SRC)/common/string/memcpy.asm \
+	$(VBOX_PATH_RUNTIME_SRC)/common/string/memmove.asm \
+	$(VBOX_PATH_RUNTIME_SRC)/common/string/mempcpy.asm \
+	$(VBOX_PATH_RUNTIME_SRC)/common/string/memset.asm \
+	$(VBOX_PATH_RUNTIME_SRC)/common/string/strversion.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/string/RTStrPrintHexBytes.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/string/RTStrCat.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/string/RTStrCmp.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/string/RTStrCopy.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/string/RTStrEnd.asm \
+	$(VBOX_PATH_RUNTIME_SRC)/common/string/RTStrICmpAscii.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/string/RTStrNCmp.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/string/RTStrNLen.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/string/RTUtf16Copy.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/string/RTUtf16NLenEx.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/string/strchr.asm \
+	$(VBOX_PATH_RUNTIME_SRC)/common/string/strcmp.asm \
+	$(VBOX_PATH_RUNTIME_SRC)/common/string/strcpy.asm \
+	$(VBOX_PATH_RUNTIME_SRC)/common/string/strformat.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/string/RTStrFormat.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/string/strformatrt.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/string/strformattype.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/string/strformatnum.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/string/stringalloc.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/string/strlen.asm \
+	$(VBOX_PATH_RUNTIME_SRC)/common/string/strncmp.asm \
+	$(VBOX_PATH_RUNTIME_SRC)/common/string/strncpy.asm \
+	$(VBOX_PATH_RUNTIME_SRC)/common/string/strprintf.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/string/strprintf-ellipsis.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/string/strprintf2.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/string/strprintf2-ellipsis.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/string/strtonum.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/string/utf-16.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/string/utf-8.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/string/utf-8-case.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/string/unidata-upper.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/string/unidata-lower.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/common/time/time.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/generic/RTAssertShouldPanic-generic.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/generic/RTPathGetCurrentDrive-generic.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/generic/RTPathGetCurrentOnDrive-generic.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/generic/rtStrFormatKernelAddress-generic.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/generic/memsafer-generic.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/generic/uuid-generic.cpp \
+       \
+	../../Disassembler/DisasmCore.cpp \
+	../../Disassembler/DisasmTables.cpp \
+	../../Disassembler/DisasmTablesX64.cpp \
+	../../Disassembler/DisasmMisc.cpp
+
+ SUPR3HardenedStatic_SOURCES.amd64 += \
+ 	$(VBOX_PATH_RUNTIME_SRC)/common/math/RTUInt128MulByU64.asm \
+ 	$(VBOX_PATH_RUNTIME_SRC)/win/amd64/ASMGetCS.asm \
+ 	$(VBOX_PATH_RUNTIME_SRC)/win/amd64/ASMGetSS.asm
+
+ SUPR3HardenedStatic_SOURCES.win += \
+ 	win/SUPR3HardenedNoCrt-win.cpp \
+ 	$(VBOX_PATH_RUNTIME_SRC)/nt/RTErrConvertFromNtStatus.cpp \
+ 	$(VBOX_PATH_RUNTIME_SRC)/nt/RTNtPathFindPossible8dot3Name.cpp \
+ 	$(VBOX_PATH_RUNTIME_SRC)/nt/RTNtPathExpand8dot3Path.cpp \
+ 	$(VBOX_PATH_RUNTIME_SRC)/nt/RTNtPathExpand8dot3PathA.cpp \
+ 	$(VBOX_PATH_RUNTIME_SRC)/r3/nt/pathint-nt.cpp \
+ 	$(VBOX_PATH_RUNTIME_SRC)/win/RTErrConvertFromWin32.cpp \
+	$(VBOX_PATH_RUNTIME_SRC)/win/errmsgwin.cpp
+
+ # Add necessary compiler specific files from the compiler lib dir.
+ ifeq ($(KBUILD_TARGET),win)
+  include $(KBUILD_PATH)/tools/$(VBOX_VCC_TOOL).kmk
+  SUPR3HardenedStatic_SOURCES.win += \
+  	$(PATH_TOOL_$(VBOX_VCC_TOOL)_LIB)/chkstk.obj
+
+  # And a few extracted from the static libc to support -guard and cookes.
+  # In 14.2 these files does not import anything from the win32 API and are
+  # mostly tiny bits of code. Needs not initialization that I can spot.
+  ifneq ($(VBOX_VCC_LD_GUARD_CF),)
+   SUPR3HardenedStatic_SOURCES.win += \
+   	$(SUPR3HardenedStatic_0_OUTDIR)/loadcfg.obj
+   # These are for the /guard option.
+   SUPR3HardenedStatic_SOURCES.win += \
+   	$(SUPR3HardenedStatic_0_OUTDIR)/gs_cookie.obj \
+   	$(SUPR3HardenedStatic_0_OUTDIR)/guard_support.obj
+   SUPR3HardenedStatic_SOURCES.win.amd64 += \
+   	$(SUPR3HardenedStatic_0_OUTDIR)/guard_dispatch.obj \
+   	$(SUPR3HardenedStatic_0_OUTDIR)/guard_xfg_dispatch.obj
+   # These next ones are for supporting the /GS option.  We skip gs_report.obj as it
+   # import lots from kernel32 and we're better of reporting the problem ourselves.
+   SUPR3HardenedStatic_SOURCES.win.amd64 += \
+   	$(SUPR3HardenedStatic_0_OUTDIR)/amdsecgs.obj \
+   	$(SUPR3HardenedStatic_0_OUTDIR)/gshandler.obj
+   SUPR3HardenedStatic_SOURCES.win.x86 += \
+   	$(SUPR3HardenedStatic_0_OUTDIR)/secchk.obj \
+   	$(SUPR3HardenedStatic_0_OUTDIR)/alloca16.obj
+
+$$(SUPR3HardenedStatic_0_OUTDIR)/loadcfg.obj \
+$$(SUPR3HardenedStatic_0_OUTDIR)/gs_cookie.obj \
+$$(SUPR3HardenedStatic_0_OUTDIR)/guard_support.obj \
+$$(SUPR3HardenedStatic_0_OUTDIR)/guard_dispatch.obj \
+$$(SUPR3HardenedStatic_0_OUTDIR)/guard_xfg_dispatch.obj \
+$$(SUPR3HardenedStatic_0_OUTDIR)/amdsecgs.obj \
+$$(SUPR3HardenedStatic_0_OUTDIR)/gs_report.obj \
+$$(SUPR3HardenedStatic_0_OUTDIR)/gshandler.obj \
+$$(SUPR3HardenedStatic_0_OUTDIR)/secchk.obj \
+$$(SUPR3HardenedStatic_0_OUTDIR)/alloca16.obj \
+	: \
+		$(PATH_TOOL_$(VBOX_VCC_TOOL)_LIB)/libcmt.lib | $$(dir $$@)
+	set -x; $(TOOL_$(VBOX_VCC_TOOL)_AR) "/EXTRACT:$$($(TOOL_$(VBOX_VCC_TOOL)_AR) /LIST "$<" | $(SED_EXT) -e '/$(notdir $@)/!d' )" "/OUT:$@" "$<"
+  endif
+ endif
+endif
+
+# macOS specifics.
+ifeq ($(KBUILD_TARGET),darwin)
+ SUPR3HardenedStatic_DEFS += \
+ 	LOG_DISABLED
+
+ SUPR3HardenedStatic_INCS += $(VBOX_PATH_RUNTIME_SRC)/include
+
+ SUPR3HardenedStatic_SOURCES += \
+ 	darwin/SUPR3HardenedMain-darwin.cpp \
+       \
+ 	$(VBOX_PATH_RUNTIME_SRC)/common/misc/RTAssertMsg1Weak.cpp \
+ 	$(VBOX_PATH_RUNTIME_SRC)/common/misc/RTAssertMsg2.cpp \
+ 	$(VBOX_PATH_RUNTIME_SRC)/common/misc/RTAssertMsg2Weak.cpp \
+ 	$(VBOX_PATH_RUNTIME_SRC)/common/misc/RTAssertMsg2WeakV.cpp \
+ 	$(VBOX_PATH_RUNTIME_SRC)/generic/RTAssertShouldPanic-generic.cpp
+endif
+
+# Things specific to the rest of the posix crowd.
+if1of ($(KBUILD_TARGET), linux solaris)
+ SUPR3HardenedStatic_DEFS += \
+ 	IN_DIS \
+	IN_DIS_STATIC \
+ 	DIS_CORE_ONLY \
+ 	LOG_DISABLED
+ SUPR3HardenedStatic_DEFS.linux += \
+ 	SUP_HARDENED_WITH_DLMOPEN
+ SUPR3HardenedStatic_DEFS.solaris += \
+ 	SUP_HARDENED_WITH_DLMOPEN
+ SUPR3HardenedStatic_DEFS.asan    += SUP_HARDENED_WITHOUT_DLOPEN_PATCHING
+
+ SUPR3HardenedStatic_INCS += $(VBOX_PATH_RUNTIME_SRC)/include
+
+ SUPR3HardenedStatic_SOURCES += \
+ 	posix/SUPR3HardenedMain-posix.cpp \
+	posix/SUPR3HardenedMainA-posix.asm \
+       \
+ 	$(VBOX_PATH_RUNTIME_SRC)/common/misc/RTAssertMsg1Weak.cpp \
+ 	$(VBOX_PATH_RUNTIME_SRC)/common/misc/RTAssertMsg2.cpp \
+ 	$(VBOX_PATH_RUNTIME_SRC)/common/misc/RTAssertMsg2Weak.cpp \
+ 	$(VBOX_PATH_RUNTIME_SRC)/common/misc/RTAssertMsg2WeakV.cpp \
+ 	$(VBOX_PATH_RUNTIME_SRC)/generic/RTAssertShouldPanic-generic.cpp \
+       \
+ 	../../Disassembler/DisasmCore.cpp \
+ 	../../Disassembler/DisasmTables.cpp \
+ 	../../Disassembler/DisasmTablesX64.cpp \
+ 	../../Disassembler/DisasmMisc.cpp
+endif
+
+SUPR3HardenedMain.cpp_DEFS = VBOX_SVN_REV=$(VBOX_SVN_REV)
+
+
+#
+# VBoxSupLib - Windows DLL for catching thread creation and termination.
+#
+VBoxSupLib_TEMPLATE = VBoxR3StaticNoCrt
+VBoxSupLib_SDKS.win = VBOX_NTDLL
+VBoxSupLib_LDFLAGS.win.amd64 = -Entry:DllMainEntrypoint
+VBoxSupLib_LDFLAGS.win.x86   = -Entry:DllMainEntrypoint
+VBoxSupLib_DEFS = \
+	$(if $(VBOX_WITHOUT_DEBUGGER_CHECKS),VBOX_WITHOUT_DEBUGGER_CHECKS,)
+VBoxSupLib_SOURCES = \
+	$(KBUILD_TARGET)/VBoxSupLib-$(KBUILD_TARGET).cpp
+VBoxSupLib_SOURCES.win = \
+	win/VBoxSupLib.rc
+VBoxSupLib_LIBS.win.x86 = \
+	$(PATH_TOOL_$(TEMPLATE_VBOXR3STATIC_TOOL.win.x86)_LIB)/chkstk.obj
+VBoxSupLib_LIBS.win.amd64 = \
+	$(PATH_TOOL_$(TEMPLATE_VBOXR3STATIC_TOOL.win.amd64)_LIB)/chkstk.obj
+ifdef VBOX_WITH_HARDENING # for /guard:cf stuff
+ VBoxSupLib_LIBS.win.x86 = \
+ 	$(PATH_TOOL_$(TEMPLATE_VBOXR3STATIC_TOOL.win.x86)_LIB)/libcmt.lib
+ VBoxSupLib_LIBS.win.amd64 = \
+ 	$(PATH_TOOL_$(TEMPLATE_VBOXR3STATIC_TOOL.win.amd64)_LIB)/libcmt.lib
+endif
+VBoxSupLib_VBOX_IMPORT_CHECKER.win.x86   = xp
+VBoxSupLib_VBOX_IMPORT_CHECKER.win.amd64 = xp64
+
+
+#
+# VBoxSupSvc - The system wide service/daemon.
+#
+VBoxSupSvc_TEMPLATE = VBOXR3EXE
+VBoxSupSvc_SOURCES = \
+	SUPSvc.cpp \
+	SUPSvcGlobal.cpp \
+	$(KBUILD_TARGET)/SUPSvc-$(KBUILD_TARGET).cpp
+if1of ($(KBUILD_TARGET), win)
+ VBoxSupSvc_SOURCES += \
+	SUPSvcGrant.cpp
+endif
+ifn1of ($(KBUILD_TARGET), win)
+ VBoxSupSvc_SOURCES += \
+ 	SUPSvcMain-posix.cpp
+endif
+VBoxSupSvc_LIBS = \
+	$(LIB_RUNTIME)
+
+
+#
+# SUPR0 - The Ring-0 Import library.
+#
+SUPR0_TEMPLATE      = VBoxR0
+if1of ($(VBOX_LDR_FMT), pe lx)
+ SUPR0_SOURCES       = $(SUPR0_0_OUTDIR)/SUPR0.def
+ SUPR0_CLEAN         = $(SUPR0_0_OUTDIR)/SUPR0.def
+$$(SUPR0_0_OUTDIR)/SUPR0.def: \
+		$(PATH_SUB_CURRENT)/SUPDrv.cpp \
+		$(PATH_SUB_CURRENT)/SUPR0-def-$(VBOX_LDR_FMT).sed \
+		| $$(dir $$@)
+	$(SED) \
+		-f $(dir $<)/SUPR0-def-$(VBOX_LDR_FMT).sed \
+		--output $@ \
+		$<
+ # Experiment: Let's see how blunt the ones messing our NULL_THUNK_DATA entries on W10 are.
+ ifeq ($(KBUILD_TARGET),win)
+  ifdef KLIBTWEAKER_EXT
+   SUPR0_POST_CMDS = $(KLIBTWEAKER_EXT) --clear-timestamps --fill-null_thunk_data $(out)
+  endif
+ endif
+endif
+
+
+#
+# SUPRC - The raw-mode context library.
+#
+SUPRC_TEMPLATE := VBoxRc
+SUPRC_DEFS     := IN_SUP_RC IN_RT_RC IN_VMM_RC
+SUPRC_SOURCES  := SUPLibAll.cpp
+
+
+#
+# SUPR0IdcClient - The Ring-0 IDC client driver library.
+#
+SUPR0IdcClient_TEMPLATE = VBoxR0DrvLib
+SUPR0IdcClient_DEFS = IN_RT_R0 IN_SUP_R0 IN_SUP_STATIC
+SUPR0IdcClient_SDKS.win = ReorderCompilerIncs $(VBOX_WINDDK) $(VBOX_WINPSDK_INCS)
+SUPR0IdcClient_SOURCES.$(KBUILD_TARGET) = \
+	$(KBUILD_TARGET)/SUPR0IdcClient-$(KBUILD_TARGET).c
+SUPR0IdcClient_SOURCES = \
+	SUPR0IdcClient.c \
+	SUPR0IdcClientComponent.c \
+	SUPR0IdcClientStubs.c
+
+
+
+if  !defined(VBOX_ONLY_DOCS) \
+ && !defined(VBOX_ONLY_EXTPACKS) \
+ && !defined(VBOX_ONLY_VALIDATIONKIT)
+
+ifeq ($(KBUILD_TARGET),os2)
+
+#
+# VBoxDrv.sys - The OS/2 driver.
+#
+VBoxDrv_TEMPLATE      = VBOXR0DRV
+VBoxDrv_DEFS          = IN_RT_R0 IN_SUP_R0
+VBoxDrv_INCS         := $(PATH_SUB_CURRENT)
+#VBoxDrv_LDFLAGS       = -s -t -v
+VBoxDrv_SOURCES       = \
+	os2/SUPDrvA-os2.asm \
+	os2/SUPDrv-os2.def
+VBoxDrv_LIBS          = \
+	$(VBoxDrvLib_1_TARGET) \
+	$(PATH_STAGE_LIB)/RuntimeR0Drv$(VBOX_SUFF_LIB) \
+	$(VBOX_GCC_LIBGCC) \
+	end
+
+# temp hack to ensure that SUPDrvA-os2.asm is first in the link.
+LIBRARIES += VBoxDrvLib
+VBoxDrvLib_TEMPLATE   = VBOXR0DRV
+VBoxDrvLib_INSTTYPE   = none
+VBoxDrvLib_DEFS       = IN_RT_R0 IN_SUP_R0
+VBoxDrvLib_INCS      := \
+	. \
+	$(PATH_ROOT)/src/VBox/Runtime/include
+VBoxDrvLib_SOURCES    = \
+	os2/SUPDrv-os2.cpp \
+	SUPDrv.cpp \
+	SUPDrvGip.cpp \
+	SUPDrvSem.cpp \
+	SUPLibAll.cpp
+
+endif # os2
+
+
+#
+# New VBoxDrv target. TODO: Convert all the above to use this!
+#
+if1of ($(KBUILD_TARGET), darwin freebsd solaris win)
+ ifdef VBOX_WITH_VBOXDRV
+  SYSMODS += VBoxDrv
+ endif
+ VBoxDrv_TEMPLATE         = VBOXR0DRV
+ VBoxDrv_NAME.freebsd     = vboxdrv
+ VBoxDrv_NAME.solaris     = vboxdrv
+ VBoxDrv_NAME.win         = VBoxSup
+ ifdef VBOX_SIGNING_MODE
+  VBoxDrv_INSTTYPE.win    = none
+  VBoxDrv_DEBUG_INSTTYPE.win = both
+ endif
+ VBoxDrv_INST.darwin      = $(INST_VBOXDRV)Contents/MacOS/
+ VBoxDrv_DEBUG_INST.darwin= $(patsubst %/,%,$(INST_VBOXDRV))
+ VBoxDrv_SDKS.win         = ReorderCompilerIncs $(VBOX_WINDDK) $(VBOX_WINPSDK_INCS)
+
+ VBoxDrv_DEFS            := IN_RT_R0 IN_SUP_R0 SUPDRV_WITH_RELEASE_LOGGER VBOX_SVN_REV=$(VBOX_SVN_REV)
+ ifdef VBOX_WITH_DTRACE_R0DRV
+  VBoxDrv_DEFS           += VBOX_WITH_DTRACE VBOX_WITH_DTRACE_R0DRV
+ endif
+ ifdef VBOX_WITHOUT_DEBUGGER_CHECKS
+  VBoxDrv_DEFS           += VBOX_WITHOUT_DEBUGGER_CHECKS
+ endif
+ ifdef VBOX_PERMIT_VISUAL_STUDIO_PROFILING
+  VBoxDrv_DEFS           += VBOX_PERMIT_VISUAL_STUDIO_PROFILING
+ endif
+ VBoxDrv_DEFS            += VBOX_PERMIT_MORE VBOX_PERMIT_EVEN_MORE
+ #VBoxDrv_DEFS.debug      += DEBUG_DARWIN_GIP
+ VBoxDrv_DEFS.darwin     := VBOX_WITH_HOST_VMX
+ ifdef VBOX_WITH_RAW_MODE
+  VBoxDrv_DEFS.darwin    += VBOX_WITH_RAW_MODE
+ endif
+ if defined(VBOX_WITH_DARWIN_R0_DARWIN_IMAGE_VERIFICATION) && defined(VBOX_SIGNING_MODE)
+  VBoxDrv_DEFS.darwin    += VBOX_WITH_DARWIN_R0_DARWIN_IMAGE_VERIFICATION
+  ifeq ($(VBOX_SIGNING_MODE),test)
+   VBoxDrv_DEFS.darwin   += VBOX_WITH_DARWIN_R0_TEST_SIGN
+  endif
+ endif
+ ifdef VBOX_WITH_NETFLT
+  VBoxDrv_DEFS.solaris   += VBOX_WITH_NETFLT
+ endif
+ ifdef VBOX_WITH_NATIVE_SOLARIS_LOADING
+  VBoxDrv_DEFS.solaris   += VBOX_WITH_NATIVE_SOLARIS_LOADING
+ endif
+ ifdef VBOX_WITHOUT_NATIVE_R0_LOADER
+  VBoxDrv_DEFS.win       += VBOX_WITHOUT_NATIVE_R0_LOADER
+ endif
+ ifdef VBOX_WITH_VISTA_NO_SP
+  VBoxDrv_DEFS.win       += VBOX_WITH_VISTA_NO_SP
+ endif
+ ifdef VBOX_WITH_HARDENING
+  VBoxDrv_ASDEFS         += VBOX_WITH_HARDENING
+ endif
+ ifdef VBOX_WITH_RAM_IN_KERNEL
+  VBoxDrv_DEFS           += VBOX_WITHOUT_EFLAGS_AC_SET_IN_VBOXDRV IPRT_WITHOUT_EFLAGS_AC_PRESERVING
+ else if ($(VBOX_VERSION_BUILD) % 2) == 1
+  VBoxDrv_DEFS           += VBOX_WITH_EFLAGS_AC_SET_IN_VBOXDRV IPRT_WITH_EFLAGS_AC_PRESERVING
+ endif
+
+ VBoxDrv_INCS             = . $(VBoxDrv_0_OUTDIR)
+ VBoxDrv_INCS.darwin      = ./darwin
+
+ VBoxDrv_LIBS             = $(PATH_STAGE_LIB)/RuntimeR0Drv$(VBOX_SUFF_LIB)
+ VBoxDrv_LIBS.win         = \
+ 	$(PATH_STAGE_LIB)/RuntimeR0Drv$(VBOX_SUFF_LIB) \
+ 	$(PATH_SDK_$(VBOX_WINDDK)_LIB)/ntoskrnl.lib \
+ 	$(PATH_SDK_$(VBOX_WINDDK)_LIB)/hal.lib
+ ifn1of ($(VBOX_WINDDK), WINDDK80 WINDDK71)
+  VBoxDrv_LIBS.win.x86    = \
+ 	$(PATH_SDK_$(VBOX_WINDDK)_LIB)/BufferOverflowK.lib
+ endif
+
+ #VBoxDrv_LDFLAGS.darwin   = -Wl,-sectcreate,__TEXT,__info_plist,$(VBoxDrv.kext_0_OUTDIR)/Info.plist
+ #VBoxDrv_LDFLAGS.darwin   = -v -Wl,-whyload -Wl,-v -Wl,-whatsloaded
+ VBoxDrv_LDFLAGS.solaris += -N misc/ctf
+ ifdef VBOX_WITH_NATIVE_DTRACE
+  VBoxDrv_LDFLAGS.solaris += -N drv/dtrace
+ endif
+ VBoxDrv_LDFLAGS.win.x86  = -Entry:DriverEntry@8
+ VBoxDrv_LDFLAGS.win.amd64= -Entry:DriverEntry
+
+ VBoxDrv_SOURCES.darwin   = \
+	darwin/SUPDrv-darwin.cpp
+ ifdef VBOX_WITH_DARWIN_R0_DARWIN_IMAGE_VERIFICATION
+  VBoxDrv_SOURCES.darwin += \
+  	$(VBOX_SUP_WIN_CERTS_FILE)
+ endif
+ VBoxDrv_SOURCES.solaris  = \
+	solaris/SUPDrv-solaris.c
+ VBoxDrv_SOURCES.win      = \
+	win/SUPDrv-win.cpp \
+	win/SUPDrvA-win.asm \
+	win/VBoxDrv.rc
+ ifdef VBOX_WITH_HARDENING
+  VBoxDrv_SOURCES.win    += \
+ 	win/SUPHardenedVerifyImage-win.cpp \
+ 	win/SUPHardenedVerifyProcess-win.cpp \
+ 	$(VBOX_SUP_WIN_CERTS_FILE)
+ endif
+ VBoxDrv_SOURCES          = \
+ 	SUPDrv.d \
+ 	SUPDrv.cpp \
+ 	SUPDrvGip.cpp \
+ 	SUPDrvSem.cpp \
+  	SUPDrvTracer.cpp \
+	SUPLibAll.cpp
+ ifdef VBOX_WITH_NATIVE_DTRACE
+  VBoxDrv_SOURCES        += \
+  	SUPDrv-dtrace.cpp
+  SUPDrv-dtrace.cpp_DEFS.darwin += VBOX_PATH_MACOSX_DTRACE_H=\"$(VBOX_PATH_MACOSX_SDK)/usr/include/sys/dtrace.h\"
+ endif
+ ifn1of ($(KBUILD_TARGET), linux freebsd)
+  VBoxDrv_SOURCES        += \
+ 	SUPDrvTracerA.asm
+ endif
+
+ linux/SUPDrv-linux.c_DEPS = $(VBOX_SVN_REV_HEADER)
+
+endif
+
+
+
+if defined(VBOX_WITH_VBOXDRV) && "$(KBUILD_TARGET)" == "darwin"
+ # Files necessary to make a darwin kernel extension bundle.
+ INSTALLS.darwin += VBoxDrv.kext
+ VBoxDrv.kext_INST     = $(INST_VBOXDRV)Contents/
+ VBoxDrv.kext_SOURCES  = $(VBoxDrv.kext_0_OUTDIR)/Contents/Info.plist
+ VBoxDrv.kext_CLEAN    = $(VBoxDrv.kext_0_OUTDIR)/Contents/Info.plist
+ VBoxDrv.kext_BLDDIRS  = $(VBoxDrv.kext_0_OUTDIR)/Contents/
+
+ $$(VBoxDrv.kext_0_OUTDIR)/Contents/Info.plist: \
+		$(PATH_SUB_CURRENT)/darwin/Info.plist \
+		$(VBOX_VERSION_MK) | $$(dir $$@)
+	$(call MSG_GENERATE,VBoxDrv,$@,$<)
+	$(QUIET)$(RM) -f $@
+	$(QUIET)$(SED) \
+		-e 's+@VBOX_VERSION_STRING@+$(if !defined(VBOX_MAVERICS_CODE_SIGNING_HACK),$(VBOX_VERSION_STRING),4.2.51)+g' \
+		-e 's+@VBOX_VERSION_MAJOR@+$(if  !defined(VBOX_MAVERICS_CODE_SIGNING_HACK),$(VBOX_VERSION_MAJOR),4)+g' \
+		-e 's+@VBOX_VERSION_MINOR@+$(if  !defined(VBOX_MAVERICS_CODE_SIGNING_HACK),$(VBOX_VERSION_MINOR),2)+g' \
+		-e 's+@VBOX_VERSION_BUILD@+$(if  !defined(VBOX_MAVERICS_CODE_SIGNING_HACK),$(VBOX_VERSION_BUILD),51)+g' \
+		-e 's+@VBOX_VENDOR@+$(VBOX_VENDOR)+g' \
+		-e 's+@VBOX_PRODUCT@+$(VBOX_PRODUCT)+g' \
+		-e 's+@VBOX_C_YEAR@+$(VBOX_C_YEAR)+g' \
+		--output $@ \
+		$<
+
+ $(evalcall2 VBOX_TEST_SIGN_KEXT,VBoxDrv)
+endif
+
+
+if1of ($(KBUILD_TARGET), darwin solaris)
+ ifdef VBOX_WITH_VBOXDRV
+  # Common manual loader script.
+  INSTALLS += SUPDrvScripts
+  SUPDrvScripts_INST = $(INST_DIST)
+  SUPDrvScripts_EXEC_SOURCES  = \
+  	$(KBUILD_TARGET)/load.sh
+ endif
+endif
+
+
+if1of ($(KBUILD_TARGET), linux freebsd)
+ if1of ($(KBUILD_TARGET_ARCH), $(VBOX_SUPPORTED_HOST_ARCHS))
+#
+# Targets for installing the linux sources.
+#
+vboxdrv-src_INST    = bin/src/vboxdrv/
+vboxdrv-src_SOURCES = \
+	$(subst $(DQUOTE),,$(FILES_VBOXDRV_NOBIN)) \
+	$(vboxdrv-src_0_OUTDIR)/Makefile
+vboxdrv-src_EXEC_SOURCES  = \
+	$(subst $(DQUOTE),,$(FILES_VBOXDRV_BIN))
+vboxdrv-src_CLEAN   = \
+	$(vboxdrv-src_0_OUTDIR)/Makefile \
+	$(PATH_TARGET)/vboxdrv-src-1.dep \
+
+# Scripts needed for building the kernel modules
+includedep $(PATH_TARGET)/vboxdrv-src-1.dep
+$$(vboxdrv-src_0_OUTDIR)/Makefile: \
+		$(PATH_SUB_CURRENT)/$(KBUILD_TARGET)/Makefile \
+		$$(if $$(eq $$(Support/$(KBUILD_TARGET)/Makefile_VBOX_HARDENED),$$(VBOX_WITH_HARDENING)),,FORCE) \
+		$$(if $$(eq $$(Support/$(KBUILD_TARGET)/Makefile_VBOX_RAM_IN_KERNEL),$$(VBOX_WITH_RAM_IN_KERNEL)),,FORCE) \
+		| $$(dir $$@)
+	$(call MSG_TOOL,Creating,,$@)
+	$(QUIET)$(SED) -e "" \
+		$(if-expr !defined(VBOX_WITH_HARDENING),-e "s;VBOX_WITH_HARDENING;;g",) \
+		--output $@ $<
+	%$(QUIET2)$(APPEND) -t -n '$(PATH_TARGET)/vboxdrv-src-1.dep' \
+		'Support/$(KBUILD_TARGET)/Makefile_VBOX_HARDENED=$(VBOX_WITH_HARDENING)' \
+		'Support/$(KBUILD_TARGET)/Makefile_VBOX_RAM_IN_KERNEL=$(VBOX_WITH_RAM_IN_KERNEL)'
+
+#
+# Build test for the linux host kernel modules.
+#
+$(evalcall2 VBOX_LINUX_KMOD_TEST_BUILD_RULE_FN,vboxdrv-src,,save_symvers)
+
+  ifdef VBOX_WITH_KMOD_WRAPPED_R0_MODS
+#
+# Common wrapper module files.
+#
+INSTALLS.linux += vboxwrappermod-common-src
+vboxwrappermod-common-src_INST = bin/src/common/
+vboxwrappermod-common-src_SOURCES = \
+	linux/SUPWrapperMod-linux.c=>SUPWrapperMod-linux.c \
+	linux/Makefile-wrapper.gmk=>Makefile-wrapper.gmk \
+	$(PATH_ROOT)/src/VBox/Installer/linux/Makefile-header.gmk=>Makefile-header.gmk \
+	$(PATH_ROOT)/src/VBox/Installer/linux/Makefile-footer.gmk=>Makefile-footer.gmk
+  endif
+
+ endif # supported host arch
+endif # linux freebsd
+
+
+ifeq ($(KBUILD_TARGET), win)
+ INSTALLS.win += VBoxSup-inf
+ VBoxSup-inf_TEMPLATE = VBoxR0DrvInfCat
+ VBoxSup-inf_SOURCES = \
+ 	$(PATH_TARGET)/VBoxSupCat.dir/VBoxSup.inf
+ VBoxSup-inf_CLEAN = $(VBoxSup-inf_SOURCES)
+ VBoxSup-inf_BLDDIRS = $(PATH_TARGET)/VBoxSupCat.dir
+
+ $(PATH_TARGET)/VBoxSupCat.dir/VBoxSup.inf: $(PATH_SUB_CURRENT)/win/VBoxSup.inf $(MAKEFILE_CURRENT) | $$(dir $$@)
+	$(call MSG_GENERATE,VBoxSup-inf,$@,$<)
+	$(call VBOX_EDIT_INF_FN,$<,$@)
+
+ ifdef VBOX_SIGNING_MODE
+  VBoxSup-inf_SOURCES += \
+  	$(PATH_TARGET)/VBoxSupCat.dir/VBoxSup.sys \
+  	$(PATH_TARGET)/VBoxSupCat.dir/VBoxSup.cat \
+  	$(PATH_TARGET)/VBoxSupCat.dir/VBoxSup.cat=>VBoxSup-PreW10.cat
+
+  $(PATH_TARGET)/VBoxSupCat.dir/VBoxSup.sys: $$(VBoxDrv_1_TARGET) | $$(dir $$@)
+	$(INSTALL) -m 644 -- "$<" "$(@D)"
+
+  $(PATH_TARGET)/VBoxSupCat.dir/VBoxSup.cat: \
+		$(PATH_TARGET)/VBoxSupCat.dir/VBoxSup.inf \
+		$(PATH_TARGET)/VBoxSupCat.dir/VBoxSup.sys
+	$(call MSG_TOOL,Inf2Cat,VBoxSup-inf,$@,$<)
+	$(call VBOX_MAKE_CAT_FN, $(@D),$@)
+ endif # signing
+endif # win
+
+#
+# Linux only.
+#
+PROGRAMS.linux += LnxPerfHack
+LnxPerfHack_TEMPLATE = VBoxR3Tool
+LnxPerfHack_SOURCES = linux/LnxPerfHack.cpp
+
+
+
+endif # !VBOX_ONLY_DOCS && !VBOX_ONLY_EXTPACKS && !VBOX_ONLY_VALIDATIONKIT
+include $(FILE_KBUILD_SUB_FOOTER)
+