This Bugzilla instance is a read-only archive of historic NetBeans bug reports. To report a bug in NetBeans please follow the project's instructions for reporting issues.

Bug 243074 - NetBeans binaries are missing secure runtime flags
Summary: NetBeans binaries are missing secure runtime flags
Status: VERIFIED FIXED
Alias: None
Product: platform
Classification: Unclassified
Component: Launchers&CLI (show other bugs)
Version: 8.0
Hardware: PC Windows 7
: P1 normal (vote)
Assignee: Libor Fischmeistr
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2014-03-20 09:02 UTC by Tomas Hurka
Modified: 2014-04-24 02:16 UTC (History)
1 user (show)

See Also:
Issue Type: DEFECT
Exception Reporter:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Tomas Hurka 2014-03-20 09:02:37 UTC 
Some Windows binaries do not seem to be generated with secure build settings and are therefore missing important runtime security protections:
o.n.bootstrap/launcher/windows/nbexec.dll
o.n.bootstrap/launcher/windows/nbexec.exe
o.n.bootstrap/launcher/windows/nbexec64.dll
o.n.bootstrap/launcher/windows/nbexec64.exe

The lists above were generated with the checkbins tool, http://src.chromium.org/svn/branches/1312/src/tools/checkbins/checkbins.py
Comment 1 Tomas Hurka 2014-03-20 09:06:34 UTC 
The issue is already fixed in trunk. See http://hg.netbeans.org/releases/rev/a62621d2ba71
Comment 2 Tomas Hurka 2014-03-20 09:08:06 UTC 
Please backport the change set to release80 branch.
Comment 3 Tomas Hurka 2014-03-20 09:16:24 UTC 
Verified in trunk:
Checking C:\Users\root\Documents\Projects\releases\o.n.bootstrap\launcher\windows\nbexec.dll for /DYNAMICBASE... PASS
Checking C:\Users\root\Documents\Projects\releases\o.n.bootstrap\launcher\windows\nbexec.dll for /NXCOMPAT... PASS
Checking C:\Users\root\Documents\Projects\releases\o.n.bootstrap\launcher\windows\nbexec.dll for /SAFESEH... PASS
Checking C:\Users\root\Documents\Projects\releases\o.n.bootstrap\launcher\windows\nbexec.exe for /DYNAMICBASE... PASS
Checking C:\Users\root\Documents\Projects\releases\o.n.bootstrap\launcher\windows\nbexec.exe for /NXCOMPAT... PASS
Checking C:\Users\root\Documents\Projects\releases\o.n.bootstrap\launcher\windows\nbexec.exe for /SAFESEH... PASS
Checking C:\Users\root\Documents\Projects\releases\o.n.bootstrap\launcher\windows\nbexec64.dll for /DYNAMICBASE... PASS
Checking C:\Users\root\Documents\Projects\releases\o.n.bootstrap\launcher\windows\nbexec64.dll for /NXCOMPAT... PASS
Checking C:\Users\root\Documents\Projects\releases\o.n.bootstrap\launcher\windows\nbexec64.dll for /SAFESEH... PASS
Checking C:\Users\root\Documents\Projects\releases\o.n.bootstrap\launcher\windows\nbexec64.exe for /DYNAMICBASE... PASS
Checking C:\Users\root\Documents\Projects\releases\o.n.bootstrap\launcher\windows\nbexec64.exe for /NXCOMPAT... PASS
Checking C:\Users\root\Documents\Projects\releases\o.n.bootstrap\launcher\windows\nbexec64.exe for /SAFESEH... PASS
Result: 4 files found, 4 files passed
Comment 4 Tomas Hurka 2014-03-20 11:30:17 UTC 
Additional changeset, which fixes this bug:
http://hg.netbeans.org/releases/rev/e134ada7aced
Comment 5 Libor Fischmeistr 2014-03-20 13:15:12 UTC 
Fixed in release80 branch, changeset -  http://hg.netbeans.org/releases/rev/33bf4f35e46d

Tomas, please verify it.

Thanks
Comment 6 Tomas Hurka 2014-03-20 15:57:03 UTC 
Verified in release80 branch:

C:\Users\root\Documents\Projects\releases\o.n.bootstrap>hg branch
release80

C:\Users\root\Documents\Projects\releases\o.n.bootstrap>"\Program Files\Python27
\python.exe" \Users\root\Documents\Projects\checkbins.py -v launcher\windows
Checking C:\Users\root\Documents\Projects\releases\o.n.bootstrap\launcher\windows\nbexec.dll for /DYNAMICBASE... PASS
Checking C:\Users\root\Documents\Projects\releases\o.n.bootstrap\launcher\windows\nbexec.dll for /NXCOMPAT... PASS
Checking C:\Users\root\Documents\Projects\releases\o.n.bootstrap\launcher\windows\nbexec.dll for /SAFESEH... PASS
Checking C:\Users\root\Documents\Projects\releases\o.n.bootstrap\launcher\windows\nbexec.exe for /DYNAMICBASE... PASS
Checking C:\Users\root\Documents\Projects\releases\o.n.bootstrap\launcher\windows\nbexec.exe for /NXCOMPAT... PASS
Checking C:\Users\root\Documents\Projects\releases\o.n.bootstrap\launcher\windows\nbexec.exe for /SAFESEH... PASS
Checking C:\Users\root\Documents\Projects\releases\o.n.bootstrap\launcher\windows\nbexec64.dll for /DYNAMICBASE... PASS
Checking C:\Users\root\Documents\Projects\releases\o.n.bootstrap\launcher\windows\nbexec64.dll for /NXCOMPAT... PASS
Checking C:\Users\root\Documents\Projects\releases\o.n.bootstrap\launcher\windows\nbexec64.dll for /SAFESEH... PASS
Checking C:\Users\root\Documents\Projects\releases\o.n.bootstrap\launcher\windows\nbexec64.exe for /DYNAMICBASE... PASS
Checking C:\Users\root\Documents\Projects\releases\o.n.bootstrap\launcher\windows\nbexec64.exe for /NXCOMPAT... PASS
Checking C:\Users\root\Documents\Projects\releases\o.n.bootstrap\launcher\windows\nbexec64.exe for /SAFESEH... PASS
Result: 4 files found, 4 files passed
Comment 7 Quality Engineering 2014-04-24 02:16:21 UTC 
Integrated into 'releases/release80', will be available in build *201404240045* or newer. Wait for official and publicly available build.

Changeset: http://hg.netbeans.org/releases/rev/33bf4f35e46d
User: Libor Fischmeistr <lfischmeistr@netbeans.org>
Log: #243074: NetBeans binaries are missing secure runtime flags