Date: Sun, 9 Dec 2012 20:07:09 +0400 From: Solar Designer <solar@...nwall.com> To: john-dev@...ts.openwall.com Subject: enable ASLR or/and DEP for Windows builds of JtR Hi, Here are some recent tweets on this: RT @dchest: Common Windows apps still without DEP and ASLR http://0xdabbad00.com/2012/12/05/finding-slop-common-windows-apps-still-without-dep-and-aslr/ <@solardiz> @dchest Apparently, it's "-Wl,--dynamicbase -Wl,--nxcompat" or "peflags --dynamicbase=true --nxcompat=true MyApp.exe" <@solardiz> @dchest Apparently, both work with MinGW, but -Wl,--dynamicbase / --dynamicbase=true is expected to break things with Cygwin <@solardiz> @dchest Apparently, DEP only needs to be enabled on the .exe, whereas its setting on DLLs does not matter: http://0xdabbad00.com <solardiz> Enable ASLR (breaks Cygwin? http://t.co/d1DJ4X2z) and DEP for MinGW & Cygwin: http://t.co/sowAUxRY http://t.co/i9Atd3BV http://t.co/izCOwthf Last 4 links expanded: http://cygwin.com/ml/cygwin/2012-04/msg00443.html http://pidgin.im/pipermail/commits/2012-September/021591.html http://www.ziki.com/fr/gcouprie+37899/post/enable-dep-and-aslr-with-mingw+10897502 http://stackoverflow.com/questions/8066266/how-can-i-enable-dep-nx-and-aslr-on-a-delphi-2006-or-earlier-executable Summary: we should probably try adding -Wl,--nxcompat to Cygwin targets, and -Wl,--dynamicbase -Wl,--nxcompat to MinGW targets. Anyone ready to try that? (Then see if the flags are actually set, or better yet if ASLR or/and DEP actually work when the program is run.) Alexander
Powered by blists - more mailing lists
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.