Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 2915cc3e authored by Nick Kralevich's avatar Nick Kralevich
Browse files

Enable NX protections 

Add -Wa,--noexecstack and -Wl,-z,noexecstack as default
flags when compiling applications.  This enables NX
protections, which prevent code from executing on the
stack or heap.  NX protections can block a large number
of buffer overflow attacks, and is an important security
feature.

Change-Id: Iad4bab9f8664584ba6ce832a5318d07680d7a908
parent ac06ea78

core/combo/TARGET_linux-arm.mk

+2 −0
Original line number Diff line number Diff line
@@ -97,12 +97,14 @@ TARGET_GLOBAL_CFLAGS += \ 
			-ffunction-sections \

			-funwind-tables \

			-fstack-protector \

			-Wa,--noexecstack \

			-fno-short-enums \

			$(arch_variant_cflags) \

			-include $(android_config_h) \

			-I $(arch_include_dir)



TARGET_GLOBAL_LDFLAGS += \

			-Wl,-z,noexecstack \

			$(arch_variant_ldflags)



# We only need thumb interworking in cases where thumb support