build: fix TF-A linker flag compatibility

Author: MoozIiSP

SCRIPTS/02_prepare_package.sh

@@ -103,6 +103,15 @@ ensure_file_has_line() {
   echo "$label Ensured $(basename "$file_path") contains: $line"
 }
 
+fix_tfa_ldflags_compat() {
+  local tfa_include=./include/trusted-firmware-a.mk
+
+  [ -f "$tfa_include" ] || return 1
+
+  perl -0pi -e 's/LDFLAGS="-no-warn-rwx-segments"/LDFLAGS="-Wl,--no-warn-rwx-segments"/g' "$tfa_include"
+  echo "[BOOT] Patched trusted-firmware-a LDFLAGS compatibility in $(basename "$tfa_include")"
+}
+
 ### feeds 优化 ###
 # 先尝试 GitHub 镜像，失败后回退到 git.openwrt.org
 rewrite_feeds() {
@@ -313,6 +322,8 @@ ensure_file_has_line \
   "# CONFIG_USB_XHCI_MTK_DEBUGFS is not set" \
   "[KERNEL]"
 
+fix_tfa_ldflags_compat
+
 if ! ./scripts/feeds install -a; then
   echo "Feeds 安装部分失败，请检查上游仓库状态。" >&2
 fi

SCRIPTS/02_prepare_package_minimal.sh

@@ -103,6 +103,15 @@ ensure_file_has_line() {
   echo "$label Ensured $(basename "$file_path") contains: $line"
 }
 
+fix_tfa_ldflags_compat() {
+  local tfa_include=./include/trusted-firmware-a.mk
+
+  [ -f "$tfa_include" ] || return 1
+
+  perl -0pi -e 's/LDFLAGS="-no-warn-rwx-segments"/LDFLAGS="-Wl,--no-warn-rwx-segments"/g' "$tfa_include"
+  echo "[BOOT] Patched trusted-firmware-a LDFLAGS compatibility in $(basename "$tfa_include")"
+}
+
 disable_mtk_feed() {
   for feed_file in feeds.conf feeds.conf.default; do
     if [ -f "$feed_file" ]; then
@@ -310,6 +319,8 @@ ensure_file_has_line \
   "# CONFIG_USB_XHCI_MTK_DEBUGFS is not set" \
   "[KERNEL]"
 
+fix_tfa_ldflags_compat
+
 ./scripts/feeds install -a
 
 restore_openwrt_boot_package arm-trusted-firmware-mediatek || true