[Bug 948280] New: windows:mingw:win{32,64}/mingw{32,64}-filesystem: Add hardening options?
http://bugzilla.opensuse.org/show_bug.cgi?id=948280
Bug ID: 948280 Summary: windows:mingw:win{32,64}/mingw{32,64}-filesystem: Add hardening options? Classification: openSUSE Product: openSUSE.org Version: unspecified Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: 3rd party software Assignee: fstrba@suse.com Reporter: gerald@wireshark.org QA Contact: opensuse-communityscreening@forge.provo.novell.com CC: fridrich.strba@bluewin.ch, hib@hiberis.nl, idonmez@suse.com, mkbosmans@gmail.com, tlillqvist@suse.com Found By: --- Blocker: ---
It doesn't appear that any of the mingw:win32 or mingw:win64 packages are built with hardening options enabled, e.g. --dynamicbase, --nxcompat, and --highentropyva. Would it be possible to do so?
http://bugzilla.opensuse.org/show_bug.cgi?id=948280 http://bugzilla.opensuse.org/show_bug.cgi?id=948280#c2
Ralf Habacker ralf.habacker@freenet.de changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |ralf.habacker@freenet.de
--- Comment #2 from Ralf Habacker ralf.habacker@freenet.de --- (In reply to Gerald Combs from comment #0)
It doesn't appear that any of the mingw:win32 or mingw:win64 packages are built with hardening options enabled, e.g. --dynamicbase, --nxcompat, and --highentropyva. Would it be possible to do so?
https://sourceware.org/bugzilla/show_bug.cgi?id=19011#c9
x86_64-w64-mingw32-ld version 2.33, which is currently used by mingw32 provides the following options:
--dynamicbase Image base address may be relocated using address space layout randomization (ASLR) --nxcompat Image is compatible with data execution prevention
--high-entropy-va Image is compatible with 64-bit address space layout randomization (ASLR)
-
bugzilla_noreply＠novell.com -
bugzilla_noreply＠suse.com