Describe the bug
npcap-1.85.exe: error BA2009: 'npcap-1.85.exe' is marked as DYNAMICBASE but relocation data has been stripped from the image, preventing address space layout randomization.
To Reproduce
- Download binskim following instructions from https://github.com/microsoft/binskim
- run
binskim analyze npcap-1.85.exe
Expected behavior
No issues detected in the binary.
Additional context
https://github.com/microsoft/binskim/blob/main/docs/BinSkimRules.md#rule-ba2009enableaddressspacelayoutrandomization
Binaries should linked as DYNAMICBASE to be eligible for relocation by Address Space Layout Randomization (ASLR). ASLR is an important mitigation that makes it more difficult for an attacker to exploit memory corruption vulnerabilities. Configure your tools to build with this feature enabled. For C and C++ binaries, add /DYNAMICBASE to your linker command line. For .NET applications, use a compiler shipping with Visual Studio 2008 or later.