From b734a4d288b82e96b0aa277a89648dd28f905dec Mon Sep 17 00:00:00 2001 From: BtbN Date: Tue, 19 Sep 2023 21:04:27 +0200 Subject: [PATCH] Harden implib trampolines --- images/base-linux64/gen-implib.sh | 2 +- images/base-linuxarm64/gen-implib.sh | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/images/base-linux64/gen-implib.sh b/images/base-linux64/gen-implib.sh index fd1930f..389996f 100755 --- a/images/base-linux64/gen-implib.sh +++ b/images/base-linux64/gen-implib.sh @@ -13,5 +13,5 @@ cd "$TMPDIR" set -x python3 /opt/implib/implib-gen.py --target x86_64-linux-gnu --dlopen --lazy-load --verbose "$IN" -${FFBUILD_CROSS_PREFIX}gcc $CFLAGS $STAGE_CFLAGS -DIMPLIB_HIDDEN_SHIMS -c *.tramp.S *.init.c +${FFBUILD_CROSS_PREFIX}gcc $CFLAGS $STAGE_CFLAGS -Wa,--noexecstack -DIMPLIB_HIDDEN_SHIMS -c *.tramp.S *.init.c ${FFBUILD_CROSS_PREFIX}ar -rcs "$OUT" *.tramp.o *.init.o diff --git a/images/base-linuxarm64/gen-implib.sh b/images/base-linuxarm64/gen-implib.sh index 71d6d46..1e6bc8e 100755 --- a/images/base-linuxarm64/gen-implib.sh +++ b/images/base-linuxarm64/gen-implib.sh @@ -13,5 +13,5 @@ cd "$TMPDIR" set -x python3 /opt/implib/implib-gen.py --target aarch64-linux-gnu --dlopen --lazy-load --verbose "$IN" -${FFBUILD_CROSS_PREFIX}gcc $CFLAGS $STAGE_CFLAGS -DIMPLIB_HIDDEN_SHIMS -c *.tramp.S *.init.c +${FFBUILD_CROSS_PREFIX}gcc $CFLAGS $STAGE_CFLAGS -Wa,--noexecstack -DIMPLIB_HIDDEN_SHIMS -c *.tramp.S *.init.c ${FFBUILD_CROSS_PREFIX}ar -rcs "$OUT" *.tramp.o *.init.o