Skip to content

Commit bfcdc21

Browse files
committed
build: make sure OpenSSL heeds noexecstack
This passes `-Wa,--noexecstack` to the assembler when building platform-specific assembly files, to signal that a non-executable stack can be used. This is the same approach as used by Debian (see https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=430583)
1 parent a1d623d commit bfcdc21

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

depends/packages/openssl.mk

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -10,7 +10,7 @@ $(package)_config_opts=--prefix=$(host_prefix) --openssldir=$(host_prefix)/etc/o
1010
$(package)_config_opts+=no-krb5 no-camellia no-capieng no-cast no-cms no-dtls1 no-gost no-gmp no-heartbeats no-idea no-jpake no-md2
1111
$(package)_config_opts+=no-mdc2 no-rc5 no-rdrand no-rfc3779 no-rsax no-sctp no-seed no-sha0 no-static_engine no-whirlpool no-rc2 no-rc4 no-ssl2 no-ssl3
1212
$(package)_config_opts+=$($(package)_cflags) $($(package)_cppflags)
13-
$(package)_config_opts_linux=-fPIC
13+
$(package)_config_opts_linux=-fPIC -Wa,--noexecstack
1414
$(package)_config_opts_x86_64_linux=linux-x86_64
1515
$(package)_config_opts_i686_linux=linux-generic32
1616
$(package)_config_opts_arm_linux=linux-generic32

0 commit comments

Comments
 (0)