From mboxrd@z Thu Jan 1 00:00:00 1970 X-Msuck: nntp://news.gmane.org/gmane.linux.lib.musl.general/2052 Path: news.gmane.org!not-for-mail From: Rich Felker Newsgroups: gmane.linux.lib.musl.general Subject: Re: noexecstack Date: Wed, 3 Oct 2012 11:54:24 -0400 Message-ID: <20121003155424.GE254@brightrain.aerifal.cx> References: <20120805214624.GL544@brightrain.aerifal.cx> <20120806064306.GD30810@port70.net> <20120806093742.GA27715@brightrain.aerifal.cx> <20120806111918.GE30810@port70.net> <20120806113230.GB27715@brightrain.aerifal.cx> Reply-To: musl@lists.openwall.com NNTP-Posting-Host: plane.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Trace: ger.gmane.org 1349280233 16776 80.91.229.3 (3 Oct 2012 16:03:53 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Wed, 3 Oct 2012 16:03:53 +0000 (UTC) To: musl@lists.openwall.com Original-X-From: musl-return-2053-gllmg-musl=m.gmane.org@lists.openwall.com Wed Oct 03 18:03:58 2012 Return-path: Envelope-to: gllmg-musl@plane.gmane.org Original-Received: from mother.openwall.net ([195.42.179.200]) by plane.gmane.org with smtp (Exim 4.69) (envelope-from ) id 1TJRQC-0003JM-DT for gllmg-musl@plane.gmane.org; Wed, 03 Oct 2012 18:03:40 +0200 Original-Received: (qmail 13561 invoked by uid 550); 3 Oct 2012 16:03:34 -0000 Mailing-List: contact musl-help@lists.openwall.com; run by ezmlm Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: Original-Received: (qmail 13472 invoked from network); 3 Oct 2012 16:03:06 -0000 Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.5.21 (2010-09-15) Xref: news.gmane.org gmane.linux.lib.musl.general:2052 Archived-At: On Mon, Aug 06, 2012 at 11:11:33PM +0200, Kant wrote: > >> it seems gnu as has an undocumented --noexecstack flag for this > >> > >> gcc -Wa,--noexecstack -c foo.s > >> > >> adds the .notes.GNU-stack section > > > > So this seems to be the solution. I suspect it will need a configure > > check for the option being supported. Any other caveats? > > > > Rich > The glibc build is using this. clang also supports this. > > Should be okay to use. Sorry it took a long time to get this fixed -- I completely forgot it hadn't been done. Just committed to git. Please let me know if there are any problems, or if you know of other neglected issues like this one. Rich