]> git.ipfire.org Git - thirdparty/openssl.git/commitdiff
Revert "Adding Control Flow guard to Windows Builds"
authorMathias Berchtold <mberchtold@gmail.com>
Sat, 22 Apr 2023 00:04:49 +0000 (18:04 -0600)
committerTomas Mraz <tomas@openssl.org>
Mon, 24 Apr 2023 09:49:39 +0000 (11:49 +0200)
Reasons:
- The patch was missing the linker flag /guard:cf
  As a result no binary with CFG was ever built
- /guard:cf is incompatible with NASM
  If the linker flag is added, the resulting binary fails with this exception:
  Unhandled exception at 0x00007FFFB8B93C90 (ntdll.dll) in openssl.exe: Indirect call guard check detected invalid control transfer.

Reviewed-by: Hugo Landau <hlandau@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/20807)

Configurations/10-main.conf

index accd4502f5d9da347d3c9e1d7aad30ac4c900da9..c42902cf39f08af1523f4f60be81f110a5ecae38 100644 (file)
@@ -1475,10 +1475,10 @@ my %targets = (
                                 "UNICODE", "_UNICODE",
                                 "_CRT_SECURE_NO_DEPRECATE",
                                 "_WINSOCK_DEPRECATED_NO_WARNINGS"),
-        lib_cflags       => add("/guard:cf /Zi /Fdossl_static.pdb"),
+        lib_cflags       => add("/Zi /Fdossl_static.pdb"),
         lib_defines      => add("L_ENDIAN"),
-        dso_cflags       => "/guard:cf /Zi /Fddso.pdb",
-        bin_cflags       => "/guard:cf /Zi /Fdapp.pdb",
+        dso_cflags       => "/Zi /Fddso.pdb",
+        bin_cflags       => "/Zi /Fdapp.pdb",
         # def_flag made to empty string so a .def file gets generated
         shared_defflag   => '',
         shared_ldflag    => "/dll",