Bug 6387 – scanelf (from pax-utils) criticizes dmd generated object files

Created attachment 1012 noexecstack patch for dmd compiler On Gentoo Linux the package manager runs "scanelf" to check for vulnerabilities and compatibility issues of installed binaries and issues QA warnings. scanelf -qyAF "%e %p" /usr/lib/libdruntime.a /usr/lib/libphobos2.a The output of this is what I see on screen when installing dmd from the sources included in the zip file on the digital mars ftp server. I discussed this with some people on #gentoo and someone mentioned a missing ».note.GNU-stack« section. That was in fact the key. A gentoo hacker came up with a simple patch for the dmd backend that makes it emit that section and the warnings are now gone! If there are no implications with this it should be the default on GNU Linux (I think). A note on ».note.GNU-stack«: http://en.chys.info/2010/12/note-gnu-stack/ The role of pax-utils in gentoo: http://www.gentoo.org/proj/en/hardened/pax-utils.xml

The patch has now been merged into the dmd source on GitHub.

For reference, that is https://github.com/D-Programming-Language/dmd/pull/276 https://github.com/D-Programming-Language/dmd/commit/2d906bd48ba6ebf0068b9c43f4fe79c8187bbe5f