CVSROOT: /cvs
Module name: src
Changes by: [email protected] 2018/10/30 05:10:03
Modified files:
sys/arch/arm64/conf: Makefile.arm64
sys/arch/armv7/conf: Makefile.armv7
Log message:
The way we currently generate gap.o using a linker script results in .rodata
and .data segments that have the X (executable) flag set when using lld.
This doesn't result in those sections being mapped executable in the bsd
kernel, but it does result in the X flag being set on those sections in
the final kernel binary, which confuses some scanning tools for (ROP)
gadgets.
Fix this by tweaking the generated gapdummy.c file that is used for
building gap.o. It now defines the .rodata section using inline asm.
This also fixes .data as it will inherit its flags from .rodata.
ok deraadt@, mortimer@
