diff options
| author | Gerald Combs <gerald@wireshark.org> | 2015-09-24 10:42:46 -0700 |
|---|---|---|
| committer | Gerald Combs <gerald@wireshark.org> | 2015-09-25 20:04:42 +0000 |
| commit | ff1dbba6ec981d32438235587c52ca4d0c039b0a (patch) | |
| tree | 7b9e5059c6b52351ee8a5a1d7ebef54e5b913f44 /CMakeLists.txt | |
| parent | 44d17c784483b1647500af1bb1afab58ca3295e2 (diff) | |
CMake: Add a hardening-check target.
On Windows, add a hardening-check target which checks for DYNAMICBASE
and NXCOMPAT using the PowerShell script Get-HardenFlags.ps1.
For a Visual Studio solution, run the check by calling:
msbuild /m /p:Configuration=RelWithDebInfo hardening-check.vcxproj
using the config as appropriate for your build.
Otherwise if we find the Debian/Fedora hardening-check script add a
target which runs it for each of our executables.
Change-Id: I62263e81d155c66e8c8edc751ffab535bf9f3b96
Reviewed-on: https://code.wireshark.org/review/10641
Reviewed-by: Gerald Combs <gerald@wireshark.org>
Diffstat (limited to 'CMakeLists.txt')
| -rw-r--r-- | CMakeLists.txt | 27 |
1 files changed, 27 insertions, 0 deletions
diff --git a/CMakeLists.txt b/CMakeLists.txt index 5bf8cdb9ca..aae4cb1752 100644 --- a/CMakeLists.txt +++ b/CMakeLists.txt @@ -2476,6 +2476,33 @@ add_custom_target(test-programs ) set_target_properties(test-programs PROPERTIES FOLDER "Tests") +if (WIN32) + file (TO_NATIVE_PATH ${CMAKE_SOURCE_DIR}/tools/Get-HardenFlags.ps1 _win_harden_flags) + add_custom_target(hardening-check + COMMAND ${POWERSHELL_COMMAND} "${_win_harden_flags}" "${CMAKE_BINARY_DIR}" + DEPENDS ${PROGLIST} + COMMENT "Checking binaries for security features" + ) + set_target_properties(hardening-check PROPERTIES FOLDER "Tests") +else () + find_program(HARDENING_CHECK_EXECUTABLE hardening-check + DOC "Path to the hardening-check utility." + ) + if (NOT "${HARDENING_CHECK_EXECUTABLE}" STREQUAL "HARDENING_CHECK_EXECUTABLE-NOTFOUND") + foreach(_prog ${PROGLIST}) + get_target_property(_prog_dir ${_prog} RUNTIME_OUTPUT_DIRECTORY) + if (${_prog_dir} STREQUAL "_prog_dir-NOTFOUND") + set(_prog_dir "${CMAKE_BINARY_DIR}/run") + endif() + set(_prog_paths ${_prog_paths} "${_prog_dir}/${_prog}") + endforeach() + add_custom_target(hardening-check + COMMAND ${HARDENING_CHECK_EXECUTABLE} ${_prog_paths} + DEPENDS ${PROGLIST} + COMMENT "Checking binaries for security features" + ) + endif() +endif() # # Editor modelines - http://www.wireshark.org/tools/modelines.html |