git: 99df55bbb711 - main - libcrypto padlock.so: Link with -z noexecstack for ld.bfd.

From: John Baldwin <jhb_at_FreeBSD.org>
Date: Tue, 22 Nov 2022 16:37:48 UTC
The branch main has been updated by jhb:

URL: https://cgit.FreeBSD.org/src/commit/?id=99df55bbb711150e7e3515f5c5a2c4d44654c278

commit 99df55bbb711150e7e3515f5c5a2c4d44654c278
Author:     John Baldwin <jhb@FreeBSD.org>
AuthorDate: 2022-11-22 16:37:04 +0000
Commit:     John Baldwin <jhb@FreeBSD.org>
CommitDate: 2022-11-22 16:37:04 +0000

    libcrypto padlock.so: Link with -z noexecstack for ld.bfd.
    
    The assembly source files do not contain GNU-stack annotations, so
    ld.bfd defaults to using an executable stack.
---
 secure/lib/libcrypto/engines/padlock/Makefile | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/secure/lib/libcrypto/engines/padlock/Makefile b/secure/lib/libcrypto/engines/padlock/Makefile
index 0dbe5bd2a390..4b67c9d58f0d 100644
--- a/secure/lib/libcrypto/engines/padlock/Makefile
+++ b/secure/lib/libcrypto/engines/padlock/Makefile
@@ -9,6 +9,8 @@ SRCS+=	e_padlock-x86_64.S
 SRCS+=	e_padlock-x86.S
 .endif
 
+LDFLAGS.bfd+=	-Wl,-znoexecstack
+
 .include <bsd.lib.mk>
 
 .PATH:	${SRCTOP}/sys/crypto/openssl/${MACHINE_CPUARCH}