From c02b4a1cc8c718d4e6a1ef5fbb547388bb4636df Mon Sep 17 00:00:00 2001 From: Ruud van Asseldonk Date: Tue, 13 Aug 2019 22:20:16 +0200 Subject: libressl: do not set noexecstack on Darwin at all It is not needed on Darwin. [1] Thanks Matthew for explaining this. [1]: https://github.com/NixOS/nixpkgs/pull/66454#issuecomment-520970986 --- pkgs/development/libraries/libressl/default.nix | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) (limited to 'pkgs/development/libraries/libressl') diff --git a/pkgs/development/libraries/libressl/default.nix b/pkgs/development/libraries/libressl/default.nix index 32b58c736fb29..f30ead30b3bb2 100644 --- a/pkgs/development/libraries/libressl/default.nix +++ b/pkgs/development/libraries/libressl/default.nix @@ -25,9 +25,11 @@ let # Ensure that the output libraries do not require an executable stack. # Without this, libcrypto would be built with the executable stack flag set. - # For Clang, the flag is '--noexecstack', for GCC it is '-z noexecstack'. + # For GCC the flag is '-z noexecstack'. Clang, which is used on Darwin, + # expects '--noexecstack'. Execstack is an ELF thing, so it is not needed + # on Darwin. NIX_LDFLAGS = if stdenv.isDarwin - then ["--noexecstack"] + then [] else ["-z" "noexecstack"]; enableParallelBuilding = true; -- cgit 1.4.1