diff options
| author | Matthias Clasen <mclasen@redhat.com> | 2022-01-04 07:51:56 -0500 |
|---|---|---|
| committer | Matthias Clasen <mclasen@redhat.com> | 2022-01-04 07:51:56 -0500 |
| commit | 46509b6dd28c58ae8dd7e2c02a82a3ccb2751e88 (patch) | |
| tree | 34e213d6c92f08179d96b98e48aae3a0014ff8df | |
| parent | edd57004d35d4dc58e43f839c9f7eddb37613b5c (diff) | |
| download | gtk+-46509b6dd28c58ae8dd7e2c02a82a3ccb2751e88.tar.gz | |
Make our stack noexec
The change to use ld and objcopy for resources
had some side-effects: it leaked a few symbols
and made our stack executable. We don't want that.
Use -z nonexecstack and --strip-all to avoid this.
Fixes: #4598
| -rw-r--r-- | gtk/meson.build | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/gtk/meson.build b/gtk/meson.build index 91aefe1b17..6ce2c18320 100644 --- a/gtk/meson.build +++ b/gtk/meson.build @@ -927,6 +927,7 @@ if not meson.is_cross_build() and build_machine.system() == 'linux' and objcopy. input : gtk_gresource, output : 'gtkresources_blob.o', command : [ld, + '-z', 'noexecstack', '-r', '-b','binary', '@INPUT@', @@ -937,6 +938,7 @@ if not meson.is_cross_build() and build_machine.system() == 'linux' and objcopy. input : gtk_resources_binary, output : 'gtkresources_blob2.o', command : [objcopy, + '--strip-all', '--add-symbol','_gtk_resource_data=.data:0', '@INPUT@', '@OUTPUT@']) |