mpd

[:]|||[:] all binaries built by ghc have executable stacks

Jan 13, 2009 13:20

Ticket #703 (closed merge: fixed), Opened 3 years ago, Last modified 3 months ago

Non-executable stacks

The GNU toolchain supports marking object files that do not need to use an executable stack. Currently all object files produced by GHC lack these notes and so the linker defaults to using an executable stack for the resulting binary.

This makes some people grumpy. In particular it makes the Gentoo QA people grumpy. :-)

The long story:
http://www.gentoo.org/proj/en/hardened/gnu-stack.xml

The quick story:
Every .S file produced by ghc should include:
.section .note.GNU-stack,"",@progbits
Currently this does not happen for either -fasm or -fvia-C.

P.S.: I like Gentoo. Thanks, Daniel!

gentoo, freesoftware, linux, security, баян, posix

Previous post Next post
Up