Commit 28b4b011 authored by Daniel Verkamp's avatar Daniel Verkamp
Browse files

build: enable noexecstack 



Modern toolchains already enable noexecstack by default, but set it
explicitly just to be sure.

Change-Id: I2866220db5a5ed0bb6e78a4e83763839ea3b93b0
Signed-off-by: default avatarDaniel Verkamp <daniel.verkamp@intel.com>
parent ed3b72fb

mk/spdk.common.mk

+4 −0
Original line number Diff line number Diff line
@@ -49,6 +49,10 @@ COMMON_CFLAGS = -g $(C_OPT) -Wall -Werror -fno-strict-aliasing -march=native -m6 
# This allows the GOT to be made read-only early in the loading process.

LDFLAGS += -Wl,-z,relro,-z,now



# Make the stack non-executable.

# This is the default in most environments, but it doesn't hurt to set it explicitly.

LDFLAGS += -Wl,-z,noexecstack



ifeq ($(OS),FreeBSD)

LIBS += -L/usr/local/lib

COMMON_CFLAGS += -I/usr/local/include