Temporarily use -fno-ret-protector when building on OpenBSD

See #1091
MoarVM · Apr 11, 2019 · 0e94d75 · 0e94d75
1 parent 9b1b60f
commit 0e94d75
Showing 1 changed file with 8 additions and 4 deletions.
diff --git a/build/setup.pm b/build/setup.pm
@@ -505,7 +505,11 @@ our %OS_LINUX = (
 our %OS_OPENBSD = (
     %OS_POSIX,
 
-    syslibs => [ @{$OS_POSIX{syslibs}}, qw( kvm ) ],
+    syslibs     => [ @{$OS_POSIX{syslibs}}, qw( kvm ) ],
+    # XXX: this is required at the moment because of the legojit. If possible,
+    # the legojit should be protected against ROP vulnerabilities and this line
+    # should be removed.
+    ccmiscflags => '-fno-ret-protector',
 
     -thirdparty => {
         uv => { %TP_UVDUMMY, objects => '$(UV_OPENBSD)' },
@@ -559,9 +563,9 @@ our %OS_SOLARIS = (
 
     -thirdparty => {
         dc => { %TP_DC,
-	        rule  => 'cd 3rdparty/dyncall &&  CC=\'$(CC)\' CFLAGS=\'$(CFLAGS) -U_FILE_OFFSET_BITS\' $(MAKE) -f Makefile.embedded sun',
-	        clean => 'cd 3rdparty/dyncall &&  CC=\'$(CC)\' CFLAGS=\'$(CFLAGS)\' $(MAKE) -f Makefile.embedded clean',
-	    },
+            rule  => 'cd 3rdparty/dyncall &&  CC=\'$(CC)\' CFLAGS=\'$(CFLAGS) -U_FILE_OFFSET_BITS\' $(MAKE) -f Makefile.embedded sun',
+            clean => 'cd 3rdparty/dyncall &&  CC=\'$(CC)\' CFLAGS=\'$(CFLAGS)\' $(MAKE) -f Makefile.embedded clean',
+        },
         uv => { %TP_UVDUMMY, objects => '$(UV_SOLARIS)' },
     },
 );