disable executable stack sections

[felix winkelmann]

(reported by Marijn Schouten)

automatic scanning by our package manager reports that the following files
contain executable stack sections[1]:

 * RWX --- --- usr/bin/chicken-bug
 * !WX --- --- usr/lib64/libuchickenchicken-4.1.0.tar.gz:apply-hack.x86-64.o
 * !WX --- --- usr/lib64/libchickenchicken-4.1.0.tar.gz:apply-hack.x86-64.o
 * RWX --- --- usr/lib64/libchicken.so
 * RWX --- --- usr/lib64/libuchicken.so

​http://www.gentoo.org/proj/en/hardened/gnu-stack.xml indicates that at least the hacked-apply assembly files need to be patched.

[Jim Ursetto]

non-exec stack

[Jim Ursetto]

Looks like patching apply-hack.x86.s and apply-hack.x86-64.s does fix the issue according to scanelf/readelf from the pax-utils package.

[Jim Ursetto]

FYI, prior to patch:

~/scheme/chicken-4$ scanelf -qe *
!WX --- ---  apply-hack.x86-64.o
RWX --- ---  chicken-boot
RWX --- ---  chicken-bug
RWX --- ---  libchicken.so
RWX --- ---  libuchicken.so

After patch and make:

~/scheme/chicken-4$ scanelf -qe *
RWX --- ---  chicken-boot

After make bootstrap:

~/scheme/chicken-4$ scanelf -qe *

[felix winkelmann]

Applied in r15484. Thanks for testing this.

[(none)]

Milestone 4.2.0 deleted