From: Michael Brown <mcb30@ipxe.org>
Date: Wed, 22 Nov 2023 23:36:35 +0000 (+0000)
Subject: [efi] Set NXCOMPAT bit in PE header
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=a9e89787d08df46daee85a871ba256daf84c6f34;p=thirdparty%2Fipxe.git

[efi] Set NXCOMPAT bit in PE header

Indicate that the binary is compatible with W^X protections by setting
the NXCOMPAT bit in the DllCharacteristics field of the PE header.

Signed-off-by: Michael Brown <mcb30@ipxe.org>
---

diff --git a/src/util/elf2efi.c b/src/util/elf2efi.c
index 4ed016c0f..f4d591d1e 100644
--- a/src/util/elf2efi.c
+++ b/src/util/elf2efi.c
@@ -225,6 +225,8 @@ static struct pe_header efi_pe_header = {
 			.FileAlignment = EFI_FILE_ALIGN,
 			.SizeOfImage = EFI_IMAGE_ALIGN,
 			.SizeOfHeaders = sizeof ( efi_pe_header ),
+			.DllCharacteristics =
+				IMAGE_DLLCHARACTERISTICS_NX_COMPAT,
 			.NumberOfRvaAndSizes = NUMBER_OF_DIRECTORY_ENTRIES,
 		},
 	},