Enable Control Flow Guard on Runtime DLLs

423
2
Jump to solution
12-15-2023 10:48 AM
Labels (2)
JeremyBridges
Occasional Contributor

Our PEN testers recently pointed out that the Runtime DLLs packaged with the Maps SDK are not compiled with Control Flow Guard enabled (RuntimeCoreNet100_15_1.dll and RuntimeCoreNet100_15_1.WPF.dll). If that can be done with the next nuget package, or that is already out there with later versions of the Runtime, that would be great. Thanks in advance!

https://learn.microsoft.com/en-us/windows/win32/secbp/control-flow-guard

0 Kudos
1 Solution

Accepted Solutions
dotMorten_esri
Esri Notable Contributor

Thank you for bringing this to our attention. We'll investigate and see if this is something we can enable in a future release without causing any unwanted side-effects. However it is unlikely such a change will make it into a 100.15 patch release, and more likely to be in an upcoming 200.x release.


Ref: devops/2940

View solution in original post

0 Kudos
2 Replies
dotMorten_esri
Esri Notable Contributor

Thank you for bringing this to our attention. We'll investigate and see if this is something we can enable in a future release without causing any unwanted side-effects. However it is unlikely such a change will make it into a 100.15 patch release, and more likely to be in an upcoming 200.x release.


Ref: devops/2940

0 Kudos
JeremyBridges
Occasional Contributor

Sounds great, Morten. We'll take up 200.x soon. Thank you!

0 Kudos