This Bugzilla instance is a read-only archive of historic NetBeans bug reports. To report a bug in NetBeans please follow the project's instructions for reporting issues.

Bug 243074

Summary:	NetBeans binaries are missing secure runtime flags
Product:	platform	Reporter:	Tomas Hurka <thurka>
Component:	Launchers&CLI	Assignee:	Libor Fischmeistr <lfischmeistr>
Status:	VERIFIED FIXED
Severity:	normal	CC:	mmirilovic
Priority:	P1
Version:	8.0
Hardware:	PC
OS:	Windows 7
Issue Type:	DEFECT	Exception Reporter:

Description Tomas Hurka 2014-03-20 09:02:37 UTC

Some Windows binaries do not seem to be generated with secure build settings and are therefore missing important runtime security protections:
o.n.bootstrap/launcher/windows/nbexec.dll
o.n.bootstrap/launcher/windows/nbexec.exe
o.n.bootstrap/launcher/windows/nbexec64.dll
o.n.bootstrap/launcher/windows/nbexec64.exe

The lists above were generated with the checkbins tool, http://src.chromium.org/svn/branches/1312/src/tools/checkbins/checkbins.py

Comment 1 Tomas Hurka 2014-03-20 09:06:34 UTC

The issue is already fixed in trunk. See http://hg.netbeans.org/releases/rev/a62621d2ba71

Comment 2 Tomas Hurka 2014-03-20 09:08:06 UTC

Please backport the change set to release80 branch.

Comment 3 Tomas Hurka 2014-03-20 09:16:24 UTC

Verified in trunk:
Checking C:\Users\root\Documents\Projects\releases\o.n.bootstrap\launcher\windows\nbexec.dll for /DYNAMICBASE... PASS
Checking C:\Users\root\Documents\Projects\releases\o.n.bootstrap\launcher\windows\nbexec.dll for /NXCOMPAT... PASS
Checking C:\Users\root\Documents\Projects\releases\o.n.bootstrap\launcher\windows\nbexec.dll for /SAFESEH... PASS
Checking C:\Users\root\Documents\Projects\releases\o.n.bootstrap\launcher\windows\nbexec.exe for /DYNAMICBASE... PASS
Checking C:\Users\root\Documents\Projects\releases\o.n.bootstrap\launcher\windows\nbexec.exe for /NXCOMPAT... PASS
Checking C:\Users\root\Documents\Projects\releases\o.n.bootstrap\launcher\windows\nbexec.exe for /SAFESEH... PASS
Checking C:\Users\root\Documents\Projects\releases\o.n.bootstrap\launcher\windows\nbexec64.dll for /DYNAMICBASE... PASS
Checking C:\Users\root\Documents\Projects\releases\o.n.bootstrap\launcher\windows\nbexec64.dll for /NXCOMPAT... PASS
Checking C:\Users\root\Documents\Projects\releases\o.n.bootstrap\launcher\windows\nbexec64.dll for /SAFESEH... PASS
Checking C:\Users\root\Documents\Projects\releases\o.n.bootstrap\launcher\windows\nbexec64.exe for /DYNAMICBASE... PASS
Checking C:\Users\root\Documents\Projects\releases\o.n.bootstrap\launcher\windows\nbexec64.exe for /NXCOMPAT... PASS
Checking C:\Users\root\Documents\Projects\releases\o.n.bootstrap\launcher\windows\nbexec64.exe for /SAFESEH... PASS
Result: 4 files found, 4 files passed

Comment 4 Tomas Hurka 2014-03-20 11:30:17 UTC

Additional changeset, which fixes this bug:
http://hg.netbeans.org/releases/rev/e134ada7aced

Comment 5 Libor Fischmeistr 2014-03-20 13:15:12 UTC

Fixed in release80 branch, changeset -  http://hg.netbeans.org/releases/rev/33bf4f35e46d

Tomas, please verify it.

Thanks

Comment 6 Tomas Hurka 2014-03-20 15:57:03 UTC

Verified in release80 branch:

C:\Users\root\Documents\Projects\releases\o.n.bootstrap>hg branch
release80

C:\Users\root\Documents\Projects\releases\o.n.bootstrap>"\Program Files\Python27
\python.exe" \Users\root\Documents\Projects\checkbins.py -v launcher\windows
Checking C:\Users\root\Documents\Projects\releases\o.n.bootstrap\launcher\windows\nbexec.dll for /DYNAMICBASE... PASS
Checking C:\Users\root\Documents\Projects\releases\o.n.bootstrap\launcher\windows\nbexec.dll for /NXCOMPAT... PASS
Checking C:\Users\root\Documents\Projects\releases\o.n.bootstrap\launcher\windows\nbexec.dll for /SAFESEH... PASS
Checking C:\Users\root\Documents\Projects\releases\o.n.bootstrap\launcher\windows\nbexec.exe for /DYNAMICBASE... PASS
Checking C:\Users\root\Documents\Projects\releases\o.n.bootstrap\launcher\windows\nbexec.exe for /NXCOMPAT... PASS
Checking C:\Users\root\Documents\Projects\releases\o.n.bootstrap\launcher\windows\nbexec.exe for /SAFESEH... PASS
Checking C:\Users\root\Documents\Projects\releases\o.n.bootstrap\launcher\windows\nbexec64.dll for /DYNAMICBASE... PASS
Checking C:\Users\root\Documents\Projects\releases\o.n.bootstrap\launcher\windows\nbexec64.dll for /NXCOMPAT... PASS
Checking C:\Users\root\Documents\Projects\releases\o.n.bootstrap\launcher\windows\nbexec64.dll for /SAFESEH... PASS
Checking C:\Users\root\Documents\Projects\releases\o.n.bootstrap\launcher\windows\nbexec64.exe for /DYNAMICBASE... PASS
Checking C:\Users\root\Documents\Projects\releases\o.n.bootstrap\launcher\windows\nbexec64.exe for /NXCOMPAT... PASS
Checking C:\Users\root\Documents\Projects\releases\o.n.bootstrap\launcher\windows\nbexec64.exe for /SAFESEH... PASS
Result: 4 files found, 4 files passed

Comment 7 Quality Engineering 2014-04-24 02:16:21 UTC

Integrated into 'releases/release80', will be available in build *201404240045* or newer. Wait for official and publicly available build.

Changeset: http://hg.netbeans.org/releases/rev/33bf4f35e46d
User: Libor Fischmeistr <lfischmeistr@netbeans.org>
Log: #243074: NetBeans binaries are missing secure runtime flags