yann@1365: Original patch from: gentoo/src/patchsets/glibc/2.9/3000_all_2.3.6-dl_execstack-PaX-support.patch yann@1365: yann@1365: -= BEGIN original header =- yann@1365: With latest versions of glibc, a lot of apps failed on a PaX enabled yann@1365: system with: yann@1365: cannot enable executable stack as shared object requires: Permission denied yann@1365: yann@1365: This is due to PaX 'exec-protecting' the stack, and ld.so then trying yann@1365: to make the stack executable due to some libraries not containing the yann@1365: PT_GNU_STACK section. Bug #32960. (12 Nov 2003). yann@1365: yann@1365: Patch also NPTL. Bug #116086. (20 Dec 2005). yann@1365: yann@1365: -= END original header =- yann@1365: yann@1365: diff -durN glibc-2_9.orig/nptl/allocatestack.c glibc-2_9/nptl/allocatestack.c yann@1365: --- glibc-2_9.orig/nptl/allocatestack.c 2008-08-16 00:35:27.000000000 +0200 yann@1365: +++ glibc-2_9/nptl/allocatestack.c 2009-02-02 22:01:20.000000000 +0100 yann@1365: @@ -299,7 +299,8 @@ yann@1365: # error "Define either _STACK_GROWS_DOWN or _STACK_GROWS_UP" yann@1365: #endif yann@1365: if (mprotect (stack, len, PROT_READ | PROT_WRITE | PROT_EXEC) != 0) yann@1365: - return errno; yann@1365: + if (errno != EACCES) /* PAX is enabled */ yann@1365: + return errno; yann@1365: yann@1365: return 0; yann@1365: } yann@1365: diff -durN glibc-2_9.orig/sysdeps/unix/sysv/linux/dl-execstack.c glibc-2_9/sysdeps/unix/sysv/linux/dl-execstack.c yann@1365: --- glibc-2_9.orig/sysdeps/unix/sysv/linux/dl-execstack.c 2006-01-08 09:21:15.000000000 +0100 yann@1365: +++ glibc-2_9/sysdeps/unix/sysv/linux/dl-execstack.c 2009-02-02 22:01:20.000000000 +0100 yann@1365: @@ -63,7 +63,10 @@ yann@1365: else yann@1365: # endif yann@1365: { yann@1365: - result = errno; yann@1365: + if (errno == EACCES) /* PAX is enabled */ yann@1365: + result = 0; yann@1365: + else yann@1365: + result = errno; yann@1365: goto out; yann@1365: } yann@1365: } yann@1365: @@ -89,7 +92,12 @@ yann@1365: page -= size; yann@1365: else yann@1365: { yann@1365: - if (errno != ENOMEM) /* Unexpected failure mode. */ yann@1365: + if (errno == EACCES) /* PAX is enabled */ yann@1365: + { yann@1365: + result = 0; yann@1365: + goto out; yann@1365: + } yann@1365: + else if (errno != ENOMEM) /* Unexpected failure mode. */ yann@1365: { yann@1365: result = errno; yann@1365: goto out; yann@1365: @@ -115,7 +123,12 @@ yann@1365: page += size; yann@1365: else yann@1365: { yann@1365: - if (errno != ENOMEM) /* Unexpected failure mode. */ yann@1365: + if (errno == EACCES) /* PAX is enabled */ yann@1365: + { yann@1365: + result = 0; yann@1365: + goto out; yann@1365: + } yann@1365: + else if (errno != ENOMEM) /* Unexpected failure mode. */ yann@1365: { yann@1365: result = errno; yann@1365: goto out;