File 0001-shm-create-mfd-noexec-seal.patch of Package fuzzel

Overview Repositories Revisions Requests Users Attributes Meta

File 0001-shm-create-mfd-noexec-seal.patch of Package fuzzel (Revision a7aafe3336afa18fed518abee82d55ef)

Currently displaying revision a7aafe3336afa18fed518abee82d55ef , Show latest

From 31bef7d63aa71df8bbb49c82eebeeed5fe615939 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Daniel=20Ekl=C3=B6f?= <daniel@ekloef.se>
Date: Sun, 8 Oct 2023 11:07:11 +0200
Subject: [PATCH] shm: create memfd with MFD_NOEXEC_SEAL

---
 shm.c | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/shm.c b/shm.c
index ab63800..cff4c14 100644
--- a/shm.c
+++ b/shm.c
@@ -13,6 +13,12 @@
 #include "log.h"
 #include "stride.h"
 
+#if defined(MFD_NOEXEC_SEAL)
+    #define FUZZEL_MFD_FLAGS (MFD_CLOEXEC | MFD_ALLOW_SEALING | MFD_NOEXEC_SEAL)
+#else
+    #define FUZZEL_MFD_FLAGS (MFD_CLOEXEC | MFD_ALLOW_SEALING)
+#endif
+
 static tll(struct buffer) buffers;
 
 static void
@@ -69,7 +75,7 @@ shm_get_buffer(struct wl_shm *shm, int width, int height)
 
     /* Backing memory for SHM */
 #if defined(MEMFD_CREATE)
-    pool_fd = memfd_create("fuzzel-wayland-shm-buffer-pool", MFD_CLOEXEC);
+    pool_fd = memfd_create("fuzzel-wayland-shm-buffer-pool", FUZZEL_MFD_FLAGS);
 #elif defined(__FreeBSD__)
     // memfd_create on FreeBSD 13 is SHM_ANON without sealing support
     pool_fd = shm_open(SHM_ANON, O_RDWR | O_CLOEXEC, 0600);

Places

File 0001-shm-create-mfd-noexec-seal.patch of Package fuzzel (Revision a7aafe3336afa18fed518abee82d55ef)

Places