Mark AESNI files as not needing executable stacks Some Linux systems now come with facilities to mark the stack as non-executable, making it more difficult to exploit buffer overrun bugs. For this to work, object files built from assembly need a section added to note whether they require an executable stack. Patch from Dhiru Kholia with comments added. More information at: https://bugzilla.redhat.com/show_bug.cgi?id=1045699 https://wiki.gentoo.org/wiki/Hardened/GNU_stack_quickstart (cherry picked from commit c64e39c69a9a7ee32c00b0cf7918f6274a565544) https://github.com/krb5/krb5/commit/1cc36f83ae13d91c255c92add19bbfea54a4e9a0 Author: Greg Hudson Committer: Tom Yu Commit: 1cc36f83ae13d91c255c92add19bbfea54a4e9a0 Branch: krb5-1.12 src/lib/crypto/builtin/aes/iaesx64.s | 11 +++++++++++ src/lib/crypto/builtin/aes/iaesx86.s | 11 +++++++++++ 2 files changed, 22 insertions(+), 0 deletions(-)