> In portable software, a grep for PROT_EXEC finds almost all the work > which still needs to be done...
I am suggesting grep is enough because the four forms one will find in code are: mmap(... PROT_EXEC, ...) mprotect(... PROT_EXEC, ...) prot = PROT_EXEC ... mmap(... prot, ... ) prot = PROT_EXEC ... mprotect(... prot, ....) To improve the situation, the roadmap would be to find those in the ecosystem, and ask people in those software projects to consider a fresh evaluation and improvement... Some of them will not be easy. But I've already mentioned chrome :)