From 28b4b01136b9bf6057db277e4749ed7bb696b823 Mon Sep 17 00:00:00 2001 From: Daniel Verkamp Date: Mon, 12 Oct 2015 16:35:31 -0700 Subject: [PATCH] build: enable noexecstack Modern toolchains already enable noexecstack by default, but set it explicitly just to be sure. Change-Id: I2866220db5a5ed0bb6e78a4e83763839ea3b93b0 Signed-off-by: Daniel Verkamp --- mk/spdk.common.mk | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/mk/spdk.common.mk b/mk/spdk.common.mk index 4ddfd327c..42b1587c3 100644 --- a/mk/spdk.common.mk +++ b/mk/spdk.common.mk @@ -49,6 +49,10 @@ COMMON_CFLAGS = -g $(C_OPT) -Wall -Werror -fno-strict-aliasing -march=native -m6 # This allows the GOT to be made read-only early in the loading process. LDFLAGS += -Wl,-z,relro,-z,now +# Make the stack non-executable. +# This is the default in most environments, but it doesn't hurt to set it explicitly. +LDFLAGS += -Wl,-z,noexecstack + ifeq ($(OS),FreeBSD) LIBS += -L/usr/local/lib COMMON_CFLAGS += -I/usr/local/include