From: Ard Biesheuvel Date: Fri, 10 Mar 2023 11:15:24 +0000 (+0100) Subject: efi/libstub: zboot: Mark zboot EFI application as NX compatible X-Git-Tag: v6.6.17~5257^2~11 X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;h=c7d9e628b8ff4d52a365a441bdacb3209ee83c81;p=platform%2Fkernel%2Flinux-rpi.git efi/libstub: zboot: Mark zboot EFI application as NX compatible Now that the zboot loader will invoke the EFI memory attributes protocol to remap the decompressed code and rodata as read-only/executable, we can set the PE/COFF header flag that indicates to the firmware that the application does not rely on writable memory being executable at the same time. Cc: # v6.2+ Signed-off-by: Ard Biesheuvel --- diff --git a/drivers/firmware/efi/libstub/zboot-header.S b/drivers/firmware/efi/libstub/zboot-header.S index ec4525d..445cb646 100644 --- a/drivers/firmware/efi/libstub/zboot-header.S +++ b/drivers/firmware/efi/libstub/zboot-header.S @@ -63,7 +63,7 @@ __efistub_efi_zboot_header: .long .Lefi_header_end - .Ldoshdr .long 0 .short IMAGE_SUBSYSTEM_EFI_APPLICATION - .short 0 + .short IMAGE_DLL_CHARACTERISTICS_NX_COMPAT #ifdef CONFIG_64BIT .quad 0, 0, 0, 0 #else