Re: [Wrapper-user] DEP / ASLR on Windows x86 binaries

[yi-jing c. <yij...@gm...>]

Hi Maxime,

Thanks for your response.

Do you have any schedule to release the build to enable ASLR and DEP/NX?

For ASLR and DEP/NX in Windows x86, add "/NXCOMPAT" and "/DYNAMICBASE" into
compile options can enable them.
I understand your consideration about to support different platforms, but
for Windows x86 that is simple to add the compile options.
Could you please consider to release the build which ASLR and DEP/NX are
enabled for Windows x86 first?

Thanks.

Best regards,
Gino

2017-01-12 16:59 GMT+08:00 Maxime <ma...@ta...>:

> Hello
>
> Thank you for your email.
>
> The Wrapper is indeed not compiled with the ASLR and DEP/NX compile flags
> in its current version.
> We will investigate about the possible implications this may have on the
> different platforms we support, and consider adding these protections on a
> future release.
>
> Best Regards,
>
> Maxime
>
>
> On Wed, Jan 11, 2017 at 4:08 PM, yi-jing chou <yij...@gm...>
> wrote:
>
>> Hi,
>>
>> I find the wrapper.exe and wrapper.dll for Windows x86 doesn't enable
>> DEP(Data Execution Prevention) and ASLR(Address space layout randomization).
>> It is a security risk and some malicious code can attack the program if
>> it doesn't enable DEP / ASLR.
>>
>> Do you have plan to enhance it?
>>
>>
>> Thank you
>> Gino Chou
>>
>>
>> DEP / ASLR on Windows x86 binaries
>>
>> ------------------------------------------------------------
>> ------------------
>> Developer Access Program for Intel Xeon Phi Processors
>> Access to Intel Xeon Phi processor-based developer platforms.
>> With one year of Intel Parallel Studio XE.
>> Training and support from Colfax.
>> Order your platform today. http://sdm.link/xeonphi
>> _______________________________________________
>> Wrapper-user mailing list
>> Wra...@li...
>> https://lists.sourceforge.net/lists/listinfo/wrapper-user
>>
>>
>
> ------------------------------------------------------------
> ------------------
> Developer Access Program for Intel Xeon Phi Processors
> Access to Intel Xeon Phi processor-based developer platforms.
> With one year of Intel Parallel Studio XE.
> Training and support from Colfax.
> Order your platform today. http://sdm.link/xeonphi
> _______________________________________________
> Wrapper-user mailing list
> Wra...@li...
> https://lists.sourceforge.net/lists/listinfo/wrapper-user
>
>