From bc1e3b078bc28b68a51b4c863152e241a7c8e470 Mon Sep 17 00:00:00 2001
From: Harinn <prinn.dev@pm.me>
Date: Tue, 19 May 2026 14:36:34 +0700
Subject: [PATCH] python3Packages.donut-shellcode: clear executable-stack flag

---
 pkgs/development/python-modules/donut-shellcode/default.nix | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/pkgs/development/python-modules/donut-shellcode/default.nix b/pkgs/development/python-modules/donut-shellcode/default.nix
index 42be76fc8c3f..118ffa80a5b2 100644
--- a/pkgs/development/python-modules/donut-shellcode/default.nix
+++ b/pkgs/development/python-modules/donut-shellcode/default.nix
@@ -17,6 +17,9 @@ buildPythonPackage rec {
     hash = "sha256-gKa7ngq2+r4EYRdwH9AWnJodJjCdppzKch4Ve/4ZPhk=";
   };
 
+  # aplib64.a objects lack .note.GNU-stack; linker marks .so executable-stack, breaking dlopen.
+  env.NIX_LDFLAGS = "-z,noexecstack";
+
   build-system = [ setuptools ];
 
   pythonImportsCheck = [ "donut" ];