diff options
| author | Slawomir Cygan <slawomir.cygan@intel.com> | 2017-06-14 19:15:31 +0200 |
|---|---|---|
| committer | Lenny Komow <lenny@lunarg.com> | 2017-06-27 11:03:12 -0600 |
| commit | 1ef324febd501175476be53851fa462ef8d540f2 (patch) | |
| tree | 1f868475941eabfe18051e62e7fc880e93b9eb46 /windowsRuntimeInstaller/README.txt | |
| parent | 21baabc6f066b9470b7c7a6c49576c4e33c7ad22 (diff) | |
| download | usermoji-1ef324febd501175476be53851fa462ef8d540f2.tar.xz | |
build: Enable control flow guard on Windows
This enables the 'Control Flow Guard' security feature, which
prevents memory corruption vulnerabilites by placing a restriction
on where application can execute from.
The change is applied to both VulkanRT and it's NSIS installer.
WARN: This change requires re-patching and rebuillding NSIS with
attached patch.
WARN#2: This change requires Visual Studion 2015 or vs140 toolset to
take effect.
Control Flow Guard documentation:
https://msdn.microsoft.com/en-us/library/windows/desktop/mt637065(v=vs.85).aspx
Change-Id: I7683c0570087d994961c79fb64419509f83536a8
Diffstat (limited to 'windowsRuntimeInstaller/README.txt')
| -rw-r--r-- | windowsRuntimeInstaller/README.txt | 7 |
1 files changed, 4 insertions, 3 deletions
diff --git a/windowsRuntimeInstaller/README.txt b/windowsRuntimeInstaller/README.txt index 2653414d..c9863322 100644 --- a/windowsRuntimeInstaller/README.txt +++ b/windowsRuntimeInstaller/README.txt @@ -21,9 +21,10 @@ To build the Vulkan Runtime Installer: Instructions for building NSIS are available at
http://nsis//sourceforge.net/Docs/AppendixG.html.
- The security changes to NSIS involve adding the /DYMANICBASE and /GS options
- to the NSIS compile/link steps, so that the Runtime Installer and Uninstaller
- are built with address space layout randomization and buffer overrun checks.
+ The security changes to NSIS involve adding the /DYMANICBASE, /GS and
+ /guard:cf options to the NSIS compile/link steps, so that the Runtime
+ Installer and Uninstaller are built with address space layout randomization,
+ buffer overrun checks and control flow guard.
The security changes to NSIS can be made by applying the patch in the
NSIS_Security.patch file in this folder.
|