To the developers & maintainers of cygwin I wanted to reach out regarding Cygwin and its compatibility with Windows exploit protection mechanisms, specifically ASLR. My current understanding is that MSYS2 has difficulties supporting this feature due to limitations inherited from Cygwin. Certain functionality within the compatibility layer appears to rely on a fixed address layout, causing binaries with ASLR enabled to fail with error messages such as:
*** fatal error - cygheap base mismatch detected - 0xD5F410/0xE9F410 These are the results I observe when running binaries built with the DYNAMICBASE flag enabled. If my understanding of the situation is incorrect, I would greatly appreciate any clarification. I wanted to inquire whether there has been any recent discussion and/or development effort aimed at improving compatibility with ASLR on Windows, and whether there might be opportunities for collaboration or contribution in this area. Thank you for your time and effort. I look forward to hearing your thoughts on the technical challenges involved and whether we can establish a path forward together toward better support for these security features. Nikhil ---------------------------------------------------------------------- This email and any attachments are intended solely for the use of the individual or entity to whom they are addressed. This email may contain information that is confidential, privileged, or otherwise protected from disclosure. Any use of this information by anyone other than the intended recipient is prohibited. If you have received this email in error, please immediately contact the sender and delete all copies of this email and any attachments from your systems. Any unauthorized review, use, dissemination, distribution, or reproduction of this email by unintended recipients is not authorized and may be unlawful. Thank you for your cooperation. -- Problem reports: https://cygwin.com/problems.html FAQ: https://cygwin.com/faq/ Documentation: https://cygwin.com/docs.html Unsubscribe info: https://cygwin.com/ml/#unsubscribe-simple
