From c67e07f34e89346ed4ee8b7f42972b679583ba96 Mon Sep 17 00:00:00 2001 From: ko-zu Date: Sat, 13 Nov 2021 22:48:33 +0900 Subject: [PATCH] Remove executable flag from GNU_STACK section Putting stack marking into every assembly files is required to indicate that the stack does not need to be executable. Executable flag on stack conflicts with some security measures, Systemd MemoryDenyWriteExecute=yes for example. --- lib/decompress/huf_decompress_amd64.S | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/lib/decompress/huf_decompress_amd64.S b/lib/decompress/huf_decompress_amd64.S index 83e3d7565..97646a2e1 100644 --- a/lib/decompress/huf_decompress_amd64.S +++ b/lib/decompress/huf_decompress_amd64.S @@ -1,5 +1,12 @@ #if !defined(HUF_DISABLE_ASM) && defined(__x86_64__) +/* Stack marking + * ref: https://wiki.gentoo.org/wiki/Hardened/GNU_stack_quickstart + */ +#if defined(__linux__) && defined(__ELF__) +.section .note.GNU-stack,"",%progbits +#endif + /* Calling convention: * * %rdi contains the first argument: HUF_DecompressAsmArgs*. -- 2.47.2