[REBASE && FF] Add Stack Cookie Support for IA32, ARM, and AARCH64

[TaylorBeebe]

This update changes the following:

Basetools update

CI builds would use the basetools installed via pip if available. Because we have Project Mu edits to basetools and the project has little support in EDK2, this update causes all builds to use our in-tree basetools.

Fix NULL lib parsing

When parsing INF files, Basetools treats both libraries and modules the same. When the library dependencies are being collected for a module/library, libraries linked via:

NULL|Path/To/Library

would be included in the list of dependencies for libraries which does not match how these expressions are expected to be interpreted. This update changes the evaluation loop to skip NULL links when collecting dependencies for libraries.

Add GCC ARM, AARCH64, IA32 support and MSVC IA32 support for StackCheckLibNull

MSVC IA32 requires the __security_check_cookie function to specify byte size (@__security_check_cookie@4). This change also declares __stack_chk_fail() in StackCheckLibNull.c to support GCC.

Implement Stack Cookie Support for MSVC IA32 and GCC IA32, ARM, and AARCH64

This update replaces StackCheckLib with StackCheckLibStaticInit and StackCheckLibDynamicInit. The new libraries have GCC support for ARM, AARCH64, IA32 and X64 builds. The libraries have MSVC support for IA32 and X64 builds.

StackCheckLibStaticInit does not have a library constructor and should be used whenever the stack cookie value cannot be updated during driver execution (i.e. when the stack cookie is not in a writable or no RNG library is available). The value of the stack cookie is generated at buildtime via a Basetools update.

StackCheckLibDynamicInit has a library constructor and should be used whenever the stack cookie value can be updated at runtime (i.e. for DXE modules and shadowed PEIMs).

Update StackCheckFailureLib to StackCheckFailureHookLib

To clarify the purpose of StackCheckFailureLib, this PR renames it to StackCheckFailureHookLib. Also, the failure address is passed as an argument to the hook function to allow the hook to trace the fault. An interrupt will still be called after the hook returns.

How This Was Tested

Tested on a Q35 GCC and MSVC builds by purposefully performing a stack overflow and verifying the stack check failure hook was called followed by the stack check failure interrupt.

Integration Instructions

Platforms will need to explicitly declare the StackCheckLib and StackCheckFailureLib instances for their platforms.

EXAMPLE:

StackCheckFailureHookLib|MdePkg/Library/StackCheckFailureHookLibNull/StackCheckFailureHookLibNull.inf
[LibraryClasses.common.SEC, LibraryClasses.common.PEI_CORE]
  NULL|MdePkg/Library/StackCheckLibNull/StackCheckLibNull.inf

[LibraryClasses.common.PEIM, LibraryClasses.common.MM_CORE_STANDALONE, LibraryClasses.common.MM_STANDALONE]
  NULL|MdePkg/Library/StackCheckLib/StackCheckLibStaticInit.inf

[LibraryClasses.common.DXE_CORE, LibraryClasses.common.SMM_CORE, LibraryClasses.common.DXE_SMM_DRIVER, LibraryClasses.common.DXE_DRIVER, LibraryClasses.common.DXE_RUNTIME_DRIVER, LibraryClasses.common.DXE_SAL_DRIVER, LibraryClasses.common.UEFI_DRIVER, LibraryClasses.common.UEFI_APPLICATION]
  NULL|MdePkg/Library/StackCheckLib/StackCheckLibDynamicInit.inf

[codecov-commenter]

Codecov Report

Attention: Patch coverage is 0% with 43 lines in your changes are missing coverage. Please review.

Project coverage is 1.01%. Comparing base (f44f0fe) to head (c0fe779).

Files	Patch %	Lines
MdePkg/Library/StackCheckLib/StackCheckLibCommon.c	0.00%	30 Missing ⚠️
...ackCheckFailureHookLibNull/StackCheckFailureHook.c	0.00%	8 Missing ⚠️
...g/Library/StackCheckLib/StackCheckLibDynamicInit.c	0.00%	5 Missing ⚠️

Additional details and impacted files

@@                Coverage Diff                 @@
##           release/202302     #714      +/-   ##
==================================================
- Coverage            1.01%    1.01%   -0.01%     
==================================================
  Files                1277     1278       +1     
  Lines              325202   325231      +29     
  Branches             4774     4774              
==================================================
  Hits                 3316     3316              
- Misses             321847   321876      +29     
  Partials               39       39              

Flag	Coverage Δ
MdeModulePkg	0.72% <ø> (ø)
MdePkg	3.61% <0.00%> (-0.01%)	⬇️
NetworkPkg	0.00% <ø> (ø)
PolicyServicePkg	30.20% <ø> (ø)
UnitTestFrameworkPkg	∅ <ø> (∅)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.