[efi] Set NXCOMPAT bit in PE header

Indicate that the binary is compatible with W^X protections by setting the NXCOMPAT bit in the DllCharacteristics field of the PE header. Signed-off-by: Michael Brown <[email protected]>
ipxe · Nov 23, 2023 · a9e8978 · a9e8978
1 parent 678a60f
commit a9e8978
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/src/util/elf2efi.c b/src/util/elf2efi.c
@@ -225,6 +225,8 @@ static struct pe_header efi_pe_header = {
 			.FileAlignment = EFI_FILE_ALIGN,
 			.SizeOfImage = EFI_IMAGE_ALIGN,
 			.SizeOfHeaders = sizeof ( efi_pe_header ),
+			.DllCharacteristics =
+				IMAGE_DLLCHARACTERISTICS_NX_COMPAT,
 			.NumberOfRvaAndSizes = NUMBER_OF_DIRECTORY_ENTRIES,
 		},
 	},