UBUNTU: [Packaging] retpoline files must be sorted

CVE-2017-5715 (Spectre v2 Intel)

Signed-off-by: Andy Whitcroft <apw@canonical.com>

diff --git a/debian/rules.d/4-checks.mk b/debian/rules.d/4-checks.mk
index 0ea5ff62a0dfa2fa45f885a1d79c130534239cb8..108c80ecfe5908a5418cf76cc0726ea368893854 100644 (file)
--- a/debian/rules.d/4-checks.mk
+++ b/debian/rules.d/4-checks.mk
@@ -21,8 +21,8 @@ retpoline-check-%: $(stampdir)/stamp-build-%
        @echo Debug: $@
        install -d $(abidir)
        if grep -q CONFIG_RETPOLINE=y $(builddir)/build-$*/.config; then \
-               $(SHELL) $(DROOT)/scripts/retpoline-extract $(builddir)/build-$* \
-                       >$(abidir)/$*.retpoline; \
+               $(SHELL) $(DROOT)/scripts/retpoline-extract $(builddir)/build-$* | \
+                       sort >$(abidir)/$*.retpoline; \
        else \
                echo "# RETPOLINE NOT ENABLED" >$(abidir)/$*.retpoline; \
        fi