build: enable noexecstack
Modern toolchains already enable noexecstack by default, but set it explicitly just to be sure. Change-Id: I2866220db5a5ed0bb6e78a4e83763839ea3b93b0 Signed-off-by: Daniel Verkamp <daniel.verkamp@intel.com>
This commit is contained in:
parent
ed3b72fba9
commit
28b4b01136
@ -49,6 +49,10 @@ COMMON_CFLAGS = -g $(C_OPT) -Wall -Werror -fno-strict-aliasing -march=native -m6
|
||||
# This allows the GOT to be made read-only early in the loading process.
|
||||
LDFLAGS += -Wl,-z,relro,-z,now
|
||||
|
||||
# Make the stack non-executable.
|
||||
# This is the default in most environments, but it doesn't hurt to set it explicitly.
|
||||
LDFLAGS += -Wl,-z,noexecstack
|
||||
|
||||
ifeq ($(OS),FreeBSD)
|
||||
LIBS += -L/usr/local/lib
|
||||
COMMON_CFLAGS += -I/usr/local/include
|
||||
|
Loading…
x
Reference in New Issue
Block a user