Security Improvement: Enable Control Flow Guard on Windows - https://docs.microsoft.com/en-us/cpp/build/reference/guard-enable-control-flow-guard
This commit is contained in:
parent
6a29577ab3
commit
7faec8e5eb
1 changed files with 8 additions and 1 deletions
|
@ -244,9 +244,16 @@
|
||||||
# perform FPO regardless, so we must explicitly disable.
|
# perform FPO regardless, so we must explicitly disable.
|
||||||
# We still want the false setting above to avoid having
|
# We still want the false setting above to avoid having
|
||||||
# "/Oy /Oy-" and warnings about overriding.
|
# "/Oy /Oy-" and warnings about overriding.
|
||||||
'AdditionalOptions': ['/Oy-'],
|
'AdditionalOptions': ['/Oy-', '/d2guard4'],
|
||||||
},
|
},
|
||||||
'VCLinkerTool': {
|
'VCLinkerTool': {
|
||||||
|
# Control Flow Guard is a security feature in Windows
|
||||||
|
# 8.1 and higher designed to prevent exploitation of
|
||||||
|
# indirect calls in executables.
|
||||||
|
# Control Flow Guard is enabled using the /d2guard4
|
||||||
|
# compiler setting in combination with the /guard:cf
|
||||||
|
# linker setting.
|
||||||
|
'AdditionalOptions': ['/guard:cf'],
|
||||||
# Turn off incremental linking to save binary size.
|
# Turn off incremental linking to save binary size.
|
||||||
'LinkIncremental': '1', # /INCREMENTAL:NO
|
'LinkIncremental': '1', # /INCREMENTAL:NO
|
||||||
},
|
},
|
||||||
|
|
Loading…
Add table
Add a link
Reference in a new issue