Skip to content

Commit

Permalink
Enable DEP and ASLR
Browse files Browse the repository at this point in the history
Enable DEP (Data Execution Prevention) and ASLR (Address Space Layout
Randomization) support. This applies to both 32bit and 64bit builds
and makes it substantially harder to exploit security holes in Git by
offering a much more unpredictable attack surface.

Signed-off-by: İsmail Dönmez <ismail@i10z.com>
Signed-off-by: Johannes Schindelin <johannes.schindelin@gmx.de>
  • Loading branch information
ismail authored and dscho committed Apr 30, 2016
1 parent bd0dba8 commit ca2365d
Showing 1 changed file with 4 additions and 0 deletions.
4 changes: 4 additions & 0 deletions config.mak.uname
Original file line number Diff line number Diff line change
Expand Up @@ -546,6 +546,10 @@ else
ifeq ($(shell expr "$(uname_R)" : '2\.'),2)
# MSys2
prefix = /usr/
# Enable DEP
BASIC_LDFLAGS += -Wl,--nxcompat
# Enable ASLR
BASIC_LDFLAGS += -Wl,--dynamicbase
ifeq (MINGW32,$(MSYSTEM))
prefix = /mingw32
BASIC_LDFLAGS += -Wl,--pic-executable,-e,_mainCRTStartup
Expand Down

0 comments on commit ca2365d

Please sign in to comment.