From 37dabb06e23a2435eab0a0b37d87258d92d0fd50 Mon Sep 17 00:00:00 2001
From: Warner Losh <imp@FreeBSD.org>
Date: Fri, 8 Jul 2022 10:34:44 -0600
Subject: [PATCH] stand: Add comment about CFLAGS pollution

Add a note that veriexec / bearssl builds will pollute the CFLAGS in a
way that's somewhat hard to fix, so I'm just noting it for now.

Sponsored by:		Netflix
---
 stand/libsa/Makefile | 1 +
 1 file changed, 1 insertion(+)

diff --git a/stand/libsa/Makefile b/stand/libsa/Makefile
index 09637bd5e9d..dc35fe00750 100644
--- a/stand/libsa/Makefile
+++ b/stand/libsa/Makefile
@@ -184,6 +184,7 @@ SRCS+=  explicit_bzero.c crc32_libkern.c
 .endif
 
 .if ${MK_LOADER_VERIEXEC} == "yes" && ${MK_BEARSSL} == "yes"
+# XXX Note that these pollutes CFLAGS in a way that's not easy to fix
 .include "${SRCTOP}/lib/libbearssl/Makefile.libsa.inc"
 .include "${SRCTOP}/lib/libsecureboot/Makefile.libsa.inc"
 .endif