Skip to content

libs built with executable stack on non amd64 architectures #2963

Closed
@pixelb

Description

@pixelb

Due to the effectively empty huf_decompress_amd64.S on non amd64 architectures,
the empty assembly file is still significant, and causes libs to be built with an executable stack.
This triggers various security issues, most obvious being failure to boot on non x86_64 fedora systems,
due to systemd not loading as it sees the dependent libzstd.so.1 as a security issue (which it is).

There were a few solutions discussed at https://bugzilla.redhat.com/2035802

A possible fix may be just to move the "non executable stack" directive outside the ifdef in the huf_decompress_amd64.S file

Metadata

Metadata

Assignees

Labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions