Bug#543451: needlessly executable stack

Kees Cook kees at debian.org
Tue Aug 25 02:04:01 UTC 2009


Package: john
Version: 1.7.2-3
Severity: normal
Tags: patch
User: ubuntu-devel at lists.ubuntu.com
Usertags: origin-ubuntu karmic ubuntu-patch

Hello!

It seems that john is built (in some situation) against assembly code that
lack stack markings[1].  This results in the entire program being built
with an executable stack.

The attached patch solve this by adding a default ASFLAGS option to turn
off executable stacks when assembling.

Thanks!

-Kees

[1] https://wiki.ubuntu.com/SecurityTeam/Roadmap/ExecutableStacks

-- 
Kees Cook                                            @debian.org
-------------- next part --------------
A non-text attachment was scrubbed...
Name: exec-stack.patch
Type: text/x-diff
Size: 898 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-john-devel/attachments/20090824/0cf71b25/attachment.patch>


More information about the Pkg-john-devel mailing list