From: Timo Röhling <roehling@debian.org>
Date: Fri, 17 May 2024 16:11:16 +0000 (+0200)
Subject: Force non-executable stack
X-Git-Tag: archive/raspbian/1.9.25+dfsg3-1+rpi1^2~24
X-Git-Url: https://dgit.raspbian.org/?a=commitdiff_plain;h=f528a0aec4c128f3c1730ce603ddfde857c68c33;p=filament.git

Force non-executable stack

The material files which are included in the shared objects lack the GCC
sections which usually let the compiler conclude that it is safe to mark
the stack as non-executable. Therefore, we force the issue.
---

diff --git a/debian/rules b/debian/rules
index d3d9ef9..ef1b8f7 100755
--- a/debian/rules
+++ b/debian/rules
@@ -16,6 +16,7 @@ SUPPORTS_VULKAN = OFF
 endif
 
 export DEB_CPPFLAGS_MAINT_APPEND += -DNDEBUG
+export DEB_LDFLAGS_MAINT_APPEND = -Wl,-z,noexecstack
 
 ifneq (,$(filter $(DEB_HOST_ARCH), armel m68k mipsel powerpc sh4))
   export DEB_CXXFLAGS_MAINT_APPEND += -Wl,--no-as-needed -latomic -Wl,--as-needed