On Jan 20 21:18, Takashi Yano via Cygwin wrote:
> On Fri, 20 Jan 2023 12:30:29 +0100
> Corinna Vinschen wrote:
> > Also, your ffplay executable isn't high-entropy-VA enabled, by any
> > chance?
>
> I'm sorry, but the high-entropy-va is ebabled.
>
> $ peflags -v /usr/bin/ff{mpeg,probe,play}
> /usr/bin/ffmpeg:
> coff(0x022e[+executable_image,+line_nums_stripped,+local_syms_stripped,+bigaddr,+sepdbg])
> pe(0x8160[+high-entropy-va,+dynamicbase,+nxcompat,+tsaware])
> /usr/bin/ffprobe:
> coff(0x022e[+executable_image,+line_nums_stripped,+local_syms_stripped,+bigaddr,+sepdbg])
> pe(0x8160[+high-entropy-va,+dynamicbase,+nxcompat,+tsaware])
> /usr/bin/ffplay:
> coff(0x022e[+executable_image,+line_nums_stripped,+local_syms_stripped,+bigaddr,+sepdbg])
> pe(0x8160[+high-entropy-va,+dynamicbase,+nxcompat,+tsaware])
>
> peflags -e0 /usr/bin/ff{mpeg,probe,play} solves the issue.
> Thansk!
I'm glad to read that, actually!
> Shoud I remove dynamicbase flag as well?
I did a lot of local testing with ASLR locally, and it's fine for DLLs,
but not so much for the application executable itself.
You can keep dynamicbase for testing, but currently it's not advised
to do so, and you should definitely remove it for distro executables.
Thanks,
Corinna
--
Problem reports: https://cygwin.com/problems.html
FAQ: https://cygwin.com/faq/
Documentation: https://cygwin.com/docs.html
Unsubscribe info: https://cygwin.com/ml/#unsubscribe-simple
