efi: check if all sections of our EFI binaries are properly aligned

(cherry picked from commit 7ff3b88)

Related: RHEL-30372

meson.build

@@ -1913,6 +1913,7 @@ catalogs = []
 
 ############################################################
 
+check_efi_alignment_py = find_program('tools/check-efi-alignment.py')
 # Include these now as they provide gnu-efi detection.
 subdir('src/fundamental')
 subdir('src/boot/efi')

src/boot/efi/meson.build

@@ -494,4 +494,9 @@ foreach tuple : [['systemd-boot@0@.@1@', systemd_boot_objects, false, 'systemd-b
                 install_dir : bootlibdir)
 
         alias_target(tuple[3], efi)
+
+        test('check-alignment-@0@'.format(tuple[0].format(efi_arch[0], 'efi')),
+             check_efi_alignment_py,
+             args : efi.full_path(),
+             suite : 'efi')
 endforeach

tools/check-efi-alignment.py

@@ -0,0 +1,32 @@
+#!/usr/bin/python3
+# SPDX-License-Identifier: LGPL-2.1-or-later
+# vi: set tw=110 sw=4 ts=4 et:
+
+import sys
+
+import pefile
+
+
+def main():
+    pe = pefile.PE(sys.argv[1], fast_load=True)
+
+    for section in pe.sections:
+        name = section.Name.rstrip(b"\x00").decode()
+        file_addr = section.PointerToRawData
+        virt_addr = section.VirtualAddress
+        print(f"{name:10s} file=0x{file_addr:08x} virt=0x{virt_addr:08x}")
+
+        if file_addr % 512 != 0:
+            print(f"File address of {name} section is not aligned to 512 bytes", file=sys.stderr)
+            return 1
+
+        if virt_addr % 512 != 0:
+            print(f"Virt address of {name} section is not aligned to 512 bytes", file=sys.stderr)
+            return 1
+
+if __name__ == '__main__':
+    if len(sys.argv) != 2:
+        print(f"Usage: {sys.argv[0]} pe-image")
+        sys.exit(1)
+
+    sys.exit(main())