build: Enable control flow guard on Windows
authorSlawomir Cygan <slawomir.cygan@intel.com>
Wed, 14 Jun 2017 17:15:31 +0000 (19:15 +0200)
committerLenny Komow <lenny@lunarg.com>
Tue, 27 Jun 2017 17:03:12 +0000 (11:03 -0600)
commit1ef324febd501175476be53851fa462ef8d540f2
tree1f868475941eabfe18051e62e7fc880e93b9eb46
parent21baabc6f066b9470b7c7a6c49576c4e33c7ad22
build: Enable control flow guard on Windows

This enables the 'Control Flow Guard' security feature, which
prevents memory corruption vulnerabilites by placing a restriction
on where application can execute from.

The change is applied to both VulkanRT and it's NSIS installer.

WARN:  This change requires re-patching and rebuillding NSIS with
attached patch.
WARN#2: This change requires Visual Studion 2015 or vs140 toolset to
take effect.

Control Flow Guard documentation:
https://msdn.microsoft.com/en-us/library/windows/desktop/mt637065(v=vs.85).aspx

Change-Id: I7683c0570087d994961c79fb64419509f83536a8
CMakeLists.txt
windowsRuntimeInstaller/ConfigureRT.vcxproj
windowsRuntimeInstaller/NSIS_Security.patch
windowsRuntimeInstaller/README.txt