freebsd,linux,sunos: make stack non-executable

bnoordhuis · bnoordhuis · commit 4fae2356d105 · 2014-10-09T23:33:00.000+02:00
Link with -z,noexecstack to make stack memory non-executable. Makes shellcode injection through buffer overflows more difficult. Fixes: nodejs/node-v0.x-archive#7542 PR-URL: node-forward/node#8 Reviewed-By: Trevor Norris <trevnorris@gmail.com>
diff --git a/node.gyp b/node.gyp
@@ -365,6 +365,12 @@
             'PLATFORM="sunos"',
           ],
         }],
+        [ 'OS=="freebsd" or OS=="linux"', {
+          'ldflags': [ '-Wl,-z,noexecstack' ],
+        }],
+        [ 'OS=="sunos"', {
+          'ldflags': [ '-Wl,-M,/usr/lib/ld/map.noexstk' ],
+        }],
         [
           'OS in "linux freebsd" and node_shared_v8=="false"', {
             'ldflags': [
