enable Control Flow Guard, vs2015+: https://www.owasp.org/index.php/C…

…-Based_Toolchain_Hardening#Visual_Studio
FauxFaux · Sep 21, 2015 · 60100b1 · 60100b1
1 parent 247e0d7
commit 60100b1
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/mkfiles.pl b/mkfiles.pl
@@ -634,10 +634,11 @@ sub manpages {
       "# C compilation flags\n".
       "CFLAGS = /nologo /W3 /GS /Zi " .
       "/D_CRT_SECURE_CPP_OVERLOAD_SECURE_NAMES=1 ".
-      "/D_CRT_SECURE_NO_WARNINGS=1 ".
+      "/D_CRT_SECURE_NO_WARNINGS=1 ".
+      "/d2guard4 ".
        (join " ", map {"-I$dirpfx$_"} @srcdirs) .
        " /D_WINDOWS /D_WIN32_WINDOWS=0x500 /DWINVER=0x500\n".
-      "LFLAGS = /dynamicbase /nxcompat /debug\n".
+      "LFLAGS = /dynamicbase /nxcompat /debug /guard:cf\n".
       "!if \"\$(DEBUG)\" == \"1\"\n".
       "CFLAGS=\$(CFLAGS) /Od /DDEBUG /RTC1\n".
       "!else\n".