Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

BinSkim warns that Microsoft.Web.WebView2.Core.dll does not enable Control-flow Enforcement Technology (CET) Shadow Stack mitigation #3689

Closed
aschultz opened this issue Aug 4, 2023 · 2 comments
Assignees
Labels
bug Something isn't working tracked We are tracking this work internally.

Comments

@aschultz
Copy link

aschultz commented Aug 4, 2023

Description
warning BA2025: 'Microsoft.Web.WebView2.Core.dll' does not enable the Control-flow Enforcement Technology (CET) Shadow Stack mitigation. To resolve this issue, pass /CETCOMPAT on the linker command lines

Version
microsoft.web.webview2.1.0.1901.177

Regression
No

Repro Steps

  1. Download and unzip BinSkim (https://github.com/Microsoft/binskim) from NuGet
  2. Run BinSkim against dlls
binskim analyze --sympath Cache*C:\SymCache;SRV*https://symweb;SRV*https://msdl.microsoft.com/download/symbols C:\temp\microsoft.web.webview2.1.0.1901.177\runtimes\win-x64\native_uap\Microsoft.Web.WebView2.Core.dll

Expectation:
No issues

AB#45872653

@aschultz aschultz added the bug Something isn't working label Aug 4, 2023
@champnic champnic added the tracked We are tracking this work internally. label Aug 7, 2023
@champnic
Copy link
Member

champnic commented Aug 7, 2023

Thanks for the bug report @aschultz. I've added this bug to our backlog to take a look.

@champnic
Copy link
Member

champnic commented Nov 2, 2023

This should be fixed in runtime versions 119.0.2111.0+. Thanks!

@champnic champnic closed this as completed Nov 2, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working tracked We are tracking this work internally.
Projects
None yet
Development

No branches or pull requests

2 participants