build: mark font-unifont as noexecstack

ld automatically assumes that any binary input file requires an executable
stack. There's no way to tell it that it doesn't so we simply mark all
inputs as noexecstack.

Reported-by: Etam
Signed-off-by: David Herrmann <dh.herrmann@gmail.com>

diff --git a/Makefile.am b/Makefile.am
index 870564e..91e48e4 100644 (file)
--- a/Makefile.am
+++ b/Makefile.am
@@ -452,6 +452,7 @@ mod_unifont_la_LDFLAGS = \
        $(AM_LDFLAGS) \
        -module \
        -avoid-version \
+       -Wl,-z,noexecstack \
        -Wl,--format=binary -Wl,$(UNIFONT_BIN) -Wl,--format=default
 
 if BUILD_ENABLE_FONT_FREETYPE2