wine/loader preloader.c

Mike Hearn m.hearn at signal.QinetiQ.com
Fri Sep 24 07:53:55 CDT 2004


Hi Alexandre!

What's the reasoning for this change? I thought the preloader should not 
be built as a PIE because otherwise the kernel could map it into one of 
the areas we need to reserve.

More to the point, the people trying to do this are thinking it will 
increase security. It won't, even though this code is loaded at a known 
offset it does not contain any code you could exploit in a 
return-to-libc type attack and anyway, exploits through Wine are far 
more likely to come in through the software being run on it than Wine 
itself.

There is a patch in bugzilla (I guess you saw this) to ensure -fno-pie 
and -fno-stack-protector is passed to gcc for the preloader.

thanks -mike

> Log message:
> 	Support compiling with -fPIC for people who somehow think this is a
> 	good idea.





More information about the wine-devel mailing list