Enable compiler generation of CFG security checks

AlexeySotkin · Jul 30, 2019 · 38a1ba4 · 38a1ba4
1 parent dfd0a1e
commit 38a1ba4
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/CMakeLists.txt b/CMakeLists.txt
@@ -294,6 +294,11 @@ if (WIN32)
             "RC_PRODUCT_NAME=\"${RC_PRODUCT_NAME}\""
             "RC_PRODUCT_VERSION=\"${RC_FILE_VERSION}\""
             "RC_COPYRIGHT=\"Copyright ${RC_CHAR_C} 2018 Intel Corporation. All rights reserved.\"")
+    # Enable compiler generation of Control Flow Guard security checks.
+    target_compile_options(${TARGET_NAME} PUBLIC "/guard:cf")
+    set_property(TARGET ${TARGET_NAME} APPEND_STRING PROPERTY
+        LINK_FLAGS "/DYNAMICBASE /GUARD:CF")
+
 elseif(UNIX)
     set_property(TARGET ${TARGET_NAME} APPEND_STRING PROPERTY
         COMPILE_DEFINITIONS LIBCOMMON_CLANG_NAME="$<TARGET_SONAME_FILE_NAME:${TARGET_NAME}>")