Skip to content

Relocation data has been stripped from npcap-1.85.exe, preventing address space layout randomization #828

@joaocpaiva

Description

@joaocpaiva

Describe the bug
npcap-1.85.exe: error BA2009: 'npcap-1.85.exe' is marked as DYNAMICBASE but relocation data has been stripped from the image, preventing address space layout randomization.

To Reproduce

  1. Download binskim following instructions from https://github.com/microsoft/binskim
  2. run binskim analyze npcap-1.85.exe

Expected behavior
No issues detected in the binary.

Additional context
https://github.com/microsoft/binskim/blob/main/docs/BinSkimRules.md#rule-ba2009enableaddressspacelayoutrandomization

Binaries should linked as DYNAMICBASE to be eligible for relocation by Address Space Layout Randomization (ASLR). ASLR is an important mitigation that makes it more difficult for an attacker to exploit memory corruption vulnerabilities. Configure your tools to build with this feature enabled. For C and C++ binaries, add /DYNAMICBASE to your linker command line. For .NET applications, use a compiler shipping with Visual Studio 2008 or later.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions