From f528a0aec4c128f3c1730ce603ddfde857c68c33 Mon Sep 17 00:00:00 2001
From: =?utf8?q?Timo=20R=C3=B6hling?= <roehling@debian.org>
Date: Fri, 17 May 2024 18:11:16 +0200
Subject: [PATCH] Force non-executable stack

The material files which are included in the shared objects lack the GCC
sections which usually let the compiler conclude that it is safe to mark
the stack as non-executable. Therefore, we force the issue.
---
 debian/rules | 1 +
 1 file changed, 1 insertion(+)

diff --git a/debian/rules b/debian/rules
index d3d9ef9..ef1b8f7 100755
--- a/debian/rules
+++ b/debian/rules
@@ -16,6 +16,7 @@ SUPPORTS_VULKAN = OFF
 endif
 
 export DEB_CPPFLAGS_MAINT_APPEND += -DNDEBUG
+export DEB_LDFLAGS_MAINT_APPEND = -Wl,-z,noexecstack
 
 ifneq (,$(filter $(DEB_HOST_ARCH), armel m68k mipsel powerpc sh4))
   export DEB_CXXFLAGS_MAINT_APPEND += -Wl,--no-as-needed -latomic -Wl,--as-needed
-- 
2.30.2