tpm2-tools: packaging-time -O normalization; mark as fixed in OFLAG inventory (validated x86)

Signed-off-by: Thierry Laurion <insurgo@riseup.net>

Author: tlaurion

build_OFLAG_inventory.csv

@@ -63,7 +63,7 @@ pixman,,OK - no -O2/-O3, ,build/x86/log/pixman.log
 powerpc-utils,,OK - no -O2/-O3, ,build/ppc64/log/powerpc-utils.log
 purism-blobs,,N/A - binary blobs, ,
 qrencode,,OK - explicitly set -Oz, ,build/x86/log/qrencode.log
-tpm2-tools,,CONFIRMED - hardcoded -O2 (3 occurrences across logs), ,build/x86/log/tpm2-tools.log
+tpm2-tools,x86,fixed - pre-configure sed applied; validated V=1 (x86); commit TBD,"... -g -Oz -MT tools/tpm2-tpm2_tpm2.o ...","build/x86/log/tpm2-tools.log"
 u-root,,UNKNOWN - no logs, ,
 util-linux,,OK - no -O2/-O3, ,build/x86/log/util-linux.log
 zstd,,OK - no -O2/-O3, ,build/x86/log/zstd.log

doc/OFLAG_fixes.md

@@ -37,6 +37,11 @@ This document lists recent OFLAG (optimization flag) fixes applied in the reposi
   - Validation: V=1 builds completed for x86 & ppc64 and grep shows no remaining -O3 in build trees
   - Logs: build/x86/log/tpmtotp.log, build/ppc64/log/tpmtotp.log
 
+- tpm2-tools
+  - Fix: pre-configure sed normalizes `-O[0-9]+`/`-Os` -> `-Oz` and `CFLAGS`/`CXXFLAGS` set to `-g -Oz` defensively in `modules/tpm2-tools`.
+  - Validation: V=1 x86 build (board `msi_z790p_ddr5`) completed successfully and compile/link lines show `-Oz` only; configure-wrapper occurrences were addressed. TODO: run ppc64 validation if relevant.
+  - Logs: build/x86/log/tpm2-tools.log, build/x86/tpm2-tools-5.6/config.log
+
 - dropbear
   - Fix: packaging-time sed normalizes optimization flags to `-Oz` (replaces `-O[0-9]+` & `-Os` with `-Oz`) and configure is invoked with size-friendly env vars where applicable. We intentionally do not strip `-funroll-loops`/`-fomit-frame-pointer` at packaging time because reintroducing them into bundled libs did not change final binary sizes in our tests.
   - Validation: V=1 x86 build shows `-Oz` in `configure` and build logs. However, a size regression was observed versus the earlier CircleCI artifact: `dropbear` 184,832 → 241,248 (+56,416 bytes), `ssh` 176,416 → 233,048 (+56,632 bytes). Local builds used GCC 15.1.0 while the earlier artifact used GCC 9.4.0; most likely root cause is compiler/toolchain or upstream package-version changes rather than residual `-O` flags.

modules/tpm2-tools

@@ -27,11 +27,16 @@ tpm2-tools_hash := 52c8bcbaadca082abfe5eb7ee4967d2d632d84b1677675f2f071b6d2ec22c
 #  We pass additional remapping of prefix-map from $INSTALL to local dir
 #
 # TODO: remove all patches and uniformize with similar sed calls.
+# 	# normalize any -O[0-9]+ / -Os tokens introduced by upstream or patches \
+	# and remove any stray Makefile backups; set defensive CFLAGS/CXXFLAGS \
+
 tpm2-tools_configure := \
 	echo "$(tpm2-tools_version)" > ./VERSION \
 	&& ./bootstrap \
 	&& sed -i 's/hardcode_libdir_flag_spec=.*/hardcode_libdir_flag_spec=" "/' configure \
-	&& ./configure \
+	&& sed -E -i 's/-O[0-9]+/-Oz/g; s/-Os/-Oz/g' configure \
+	&& rm -f Makefile*bak* || true \
+	&& CFLAGS="-g -Oz" CXXFLAGS="-g -Oz" ./configure \
 	$(CROSS_TOOLS) \
 	--host $(MUSL_ARCH)-elf-linux \
 	--prefix "/" \