components/openssl/openssl-0.9.8-fips-140/patches/23-noexstack.patch
changeset 363 9c0cad004039
--- /dev/null	Thu Jan 01 00:00:00 1970 +0000
+++ b/components/openssl/openssl-0.9.8-fips-140/patches/23-noexstack.patch	Sun Jul 03 23:28:09 2011 -0700
@@ -0,0 +1,21 @@
+diff -ruN openssl-0.9.8k/Makefile.shared openssl-0.9.8k/Makefile.shared
+--- openssl-0.9.8k/Makefile.shared	2008-09-17 17:56:40.000000000 +0200
++++ openssl-0.9.8k/Makefile.shared	2009-05-25 22:26:49.611468992 +0200
+@@ -347,12 +347,17 @@
+ 		SHAREDFLAGS="$(CFLAGS) $(SHARED_LDFLAGS) -h $$SHLIB$$SHLIB_SOVER$$SHLIB_SUFFIX -Wl,-Bsymbolic"; \
+ 	fi; \
+ 	$(LINK_SO_A)
++# Make sure the apps have non-executable stacks and data (x86/x64 only).
+ link_app.solaris:
+ 	@ if ${DETECT_GNU_LD}; then \
+ 		$(DO_GNU_APP); \
+ 	else \
+ 		LDFLAGS="$(CFLAGS)"; \
+ 	fi; \
++	if expr $(PLATFORM) : '.*x86.*' > /dev/null; then \
++		LDFLAGS="$${LDFLAGS} -M/usr/lib/ld/map.noexdata"; \
++	fi; \
++	LDFLAGS="$${LDFLAGS} -M/usr/lib/ld/map.noexstk -M/usr/lib/ld/map.pagealign"; \
+ 	$(LINK_APP)
+ 
+ # OpenServer 5 native compilers used