components/openssl/openssl-1.0.1-fips-140/patches/23-noexstack.patch
author Misaki Miyashita <Misaki.Miyashita@Oracle.COM>
Mon, 09 Dec 2013 15:11:31 -0800
changeset 1586 2d3ec080d6a3
parent 363 components/openssl/openssl-0.9.8-fips-140/patches/23-noexstack.patch@9c0cad004039
permissions -rw-r--r--
PSARC/2013/383 OpenSSL FIPS 140-2 version update 15801760 SUNBT7181479 FIPS-capable version of OpenSSL using OpenSSL FIPS Object Module v2

--- /tmp/Makefile.shared	Mon Feb 14 14:33:05 2011
+++ openssl-1.0.0d/Makefile.shared	Mon Feb 14 14:35:56 2011
@@ -389,6 +389,7 @@
 		SHAREDFLAGS="$(CFLAGS) $(SHARED_LDFLAGS) -h $$SHLIB$$SHLIB_SOVER$$SHLIB_SUFFIX -Wl,-Bsymbolic"; \
 	fi; \
 	$(LINK_SO_A)
+# Make sure the apps have non-executable stacks and data (x86/x64 only).
 link_app.solaris:
 	@ if $(DETECT_GNU_LD); then \
 		$(DO_GNU_APP); \
@@ -395,6 +396,10 @@
 	else \
 		LDFLAGS="$(CFLAGS)"; \
 	fi; \
+	if expr $(PLATFORM) : '.*x86.*' > /dev/null; then \
+		LDFLAGS="$${LDFLAGS} -M/usr/lib/ld/map.noexdata"; \
+	fi; \
+	LDFLAGS="$${LDFLAGS} -M/usr/lib/ld/map.noexstk -M/usr/lib/ld/map.pagealign"; \
 	$(LINK_APP)
 
 # OpenServer 5 native compilers used