From 99df55bbb711150e7e3515f5c5a2c4d44654c278 Mon Sep 17 00:00:00 2001
From: John Baldwin <jhb@FreeBSD.org>
Date: Tue, 22 Nov 2022 08:37:04 -0800
Subject: [PATCH] libcrypto padlock.so: Link with -z noexecstack for ld.bfd.

The assembly source files do not contain GNU-stack annotations, so
ld.bfd defaults to using an executable stack.
---
 secure/lib/libcrypto/engines/padlock/Makefile | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/secure/lib/libcrypto/engines/padlock/Makefile b/secure/lib/libcrypto/engines/padlock/Makefile
index 0dbe5bd2a390..4b67c9d58f0d 100644
--- a/secure/lib/libcrypto/engines/padlock/Makefile
+++ b/secure/lib/libcrypto/engines/padlock/Makefile
@@ -9,6 +9,8 @@ SRCS+=	e_padlock-x86_64.S
 SRCS+=	e_padlock-x86.S
 .endif
 
+LDFLAGS.bfd+=	-Wl,-znoexecstack
+
 .include <bsd.lib.mk>
 
 .PATH:	${SRCTOP}/sys/crypto/openssl/${MACHINE_CPUARCH}