Enable check for DEP / NX page protection

src/trusted/service_runtime/sel_main_chrome.c

 /*
  * Copyright 2009 The Native Client Authors.  All rights reserved.
  * Use of this source code is governed by a BSD-style license that can
  * be found in the LICENSE file.
  */
 
 #include "native_client/src/include/portability.h"
 
 #if NACL_OSX
 #include <crt_externs.h>
 #endif
 
 #ifdef _WIN64  /* TODO(gregoryd): remove this when win64 issues are fixed */
 #define NACL_NO_INLINE
 #endif
 
 #include "native_client/src/shared/platform/nacl_check.h"
 #include "native_client/src/shared/platform/nacl_sync.h"
 #include "native_client/src/shared/platform/nacl_sync_checked.h"
 #include "native_client/src/trusted/service_runtime/nacl_globals.h"
 #include "native_client/src/trusted/service_runtime/env_cleanser.h"
 #include "native_client/src/trusted/service_runtime/expiration.h"
 #include "native_client/src/trusted/service_runtime/nacl_app.h"
 #include "native_client/src/trusted/service_runtime/nacl_all_modules.h"
 #include "native_client/src/trusted/service_runtime/nacl_debug.h"
 #include "native_client/src/trusted/service_runtime/nacl_signal.h"
 #include "native_client/src/trusted/service_runtime/sel_ldr.h"
+#include "native_client/src/trusted/platform_qualify/nacl_dep_qualify.h"
 #include "native_client/src/trusted/platform_qualify/nacl_os_qualify.h"
 
 static int const kSrpcFd = 5;
 
 int verbosity = 0;
 
 #ifdef __GNUC__
 
 /*
  * GDB's canonical overlay managment routine.
@@ skipping 77 matching lines @@
   /*
    * Ensure this operating system platform is supported.
    */
   if (!NaClOsIsSupported()) {
     errcode = LOAD_UNSUPPORTED_OS_PLATFORM;
     nap->module_load_status = errcode;
     fprintf(stderr, "Error while loading in SelMain: %s\n",
             NaClErrorString(errcode));
   }
 
+  /*
+   * Ensure this platform has Data Execution Prevention enabled.
+   */
+  if (!NaClCheckDEP()) {
+    errcode = LOAD_DEP_UNSUPPORTED;
+    nap->module_load_status = errcode;
+    fprintf(stderr, "Error while loading in SelMain: %s\n",
+            NaClErrorString(errcode));
+  }
+
   /* Give debuggers a well known point at which xlate_base is known.  */
   StopForDebuggerInit(&state);
 
   /*
    * If export_addr_to is set to a non-negative integer, we create a
    * bound socket and socket address pair and bind the former to
    * descriptor 3 and the latter to descriptor 4.  The socket address
    * is written out to the export_addr_to descriptor.
    *
    * The service runtime also accepts a connection on the bound socket
@@ skipping 69 matching lines @@
    */
   return ret_code;
 
  done:
   fflush(stdout);
 
   NaClAllModulesFini();
 
   return ret_code;
 }