topic Re: Enable Control Flow Guard on Runtime DLLs in .NET Maps SDK Questions

Enable Control Flow Guard on Runtime DLLs

JeremyBridges — Fri, 15 Dec 2023 18:48:51 GMT

Our PEN testers recently pointed out that the Runtime DLLs packaged with the Maps SDK are not compiled with Control Flow Guard enabled (RuntimeCoreNet100_15_1.dll and RuntimeCoreNet100_15_1.WPF.dll). If that can be done with the next nuget package, or that is already out there with later versions of the Runtime, that would be great. Thanks in advance!

https://learn.microsoft.com/en-us/windows/win32/secbp/control-flow-guard

Re: Enable Control Flow Guard on Runtime DLLs

dotMorten_esri — Fri, 15 Dec 2023 22:39:52 GMT

Thank you for bringing this to our attention. We'll investigate and see if this is something we can enable in a future release without causing any unwanted side-effects. However it is unlikely such a change will make it into a 100.15 patch release, and more likely to be in an upcoming 200.x release.

Ref: devops/2940

Re: Enable Control Flow Guard on Runtime DLLs

JeremyBridges — Fri, 15 Dec 2023 23:20:40 GMT

Sounds great, Morten. We'll take up 200.x soon. Thank you!