[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Date: Sun, 9 Dec 2012 20:07:09 +0400
From: Solar Designer <solar@...nwall.com>
To: john-dev@...ts.openwall.com
Subject: enable ASLR or/and DEP for Windows builds of JtR
Hi,
Here are some recent tweets on this:
RT @dchest: Common Windows apps still without DEP and ASLR
http://0xdabbad00.com/2012/12/05/finding-slop-common-windows-apps-still-without-dep-and-aslr/
<@solardiz> @dchest Apparently, it's "-Wl,--dynamicbase -Wl,--nxcompat" or "peflags --dynamicbase=true --nxcompat=true MyApp.exe"
<@solardiz> @dchest Apparently, both work with MinGW, but -Wl,--dynamicbase / --dynamicbase=true is expected to break things with Cygwin
<@solardiz> @dchest Apparently, DEP only needs to be enabled on the .exe, whereas its setting on DLLs does not matter: http://0xdabbad00.com
<solardiz> Enable ASLR (breaks Cygwin? http://t.co/d1DJ4X2z) and DEP for MinGW & Cygwin: http://t.co/sowAUxRY http://t.co/i9Atd3BV http://t.co/izCOwthf
Last 4 links expanded:
http://cygwin.com/ml/cygwin/2012-04/msg00443.html
http://pidgin.im/pipermail/commits/2012-September/021591.html
http://www.ziki.com/fr/gcouprie+37899/post/enable-dep-and-aslr-with-mingw+10897502
http://stackoverflow.com/questions/8066266/how-can-i-enable-dep-nx-and-aslr-on-a-delphi-2006-or-earlier-executable
Summary: we should probably try adding -Wl,--nxcompat to Cygwin targets,
and -Wl,--dynamicbase -Wl,--nxcompat to MinGW targets.
Anyone ready to try that? (Then see if the flags are actually set, or
better yet if ASLR or/and DEP actually work when the program is run.)
Alexander
Powered by blists - more mailing lists
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
