Disable data page (heap) execution when running on Mac OS X 10.7 ("Lion")

build/common.gypi

 # Copyright (c) 2011 The Chromium Authors. All rights reserved.
 # Use of this source code is governed by a BSD-style license that can be
 # found in the LICENSE file.
 
 # IMPORTANT:
 # Please don't directly include this file if you are building via gyp_chromium,
 # since gyp_chromium is automatically forcing its inclusion.
 {
   # Variables expected to be overriden on the GYP command line (-D) or by
   # ~/.gyp/include.gypi.
@@ skipping 1642 matching lines @@
             }],
           ],
         },
         'target_conditions': [
           ['_type!="static_library"', {
             'xcode_settings': {'OTHER_LDFLAGS': ['-Wl,-search_paths_first']},
           }],
           ['_mac_bundle', {
             'xcode_settings': {'OTHER_LDFLAGS': ['-Wl,-ObjC']},
           }],
+          ['_type=="executable"', {
+            'postbuilds': [
+              {
+                # Arranges for data (heap) pages to be protected against
+                # code execution when running on Mac OS X 10.7 ("Lion").
+                'variables': {
+                  # Define make_heap_non_executable in a variable ending in
+                  # _path so that gyp understands it's a path and performs
+                  # proper relativization during dict merging.
+                  'make_heap_non_executable_path':
+                      'mac/make_heap_non_executable_from_xcode.sh',
+                },
+                'postbuild_name': 'Make Heap Non-Executable',
+                'action': ['<(make_heap_non_executable_path)'],
+              },
+            ],
+          }],
           ['_type=="executable" and release_valgrind_build==0', {
             # Turn on position-independence (ASLR) for executables. When PIE
             # is on for the Chrome executables, the framework will also be
             # subject to ASLR.
             # Don't do this when building for Valgrind because Valgrind
             # doesn't understand slide. TODO: Make Valgrind on Mac OS X
             # understand slide, and get rid of the Valgrind check.
             'xcode_settings': {
               'OTHER_LDFLAGS': [
                 '-Wl,-pie',  # Position-independent executable (MH_PIE)
@@ skipping 261 matching lines @@
     # settings in target dicts.  SYMROOT is a special case, because many other
     # Xcode variables depend on it, including variables such as
     # PROJECT_DERIVED_FILE_DIR.  When a source group corresponding to something
     # like PROJECT_DERIVED_FILE_DIR is added to a project, in order for the
     # files to appear (when present) in the UI as actual files and not red
     # red "missing file" proxies, the correct path to PROJECT_DERIVED_FILE_DIR,
     # and therefore SYMROOT, needs to be set at the project level.
     'SYMROOT': '<(DEPTH)/xcodebuild',
   },
 }