Add more security in Visual Studio 2012

最新推荐文章于 2025-06-12 22:15:20 发布

chuwachen

最新推荐文章于 2025-06-12 22:15:20 发布

阅读量1k

点赞数

CC 4.0 BY-SA版权

分类专栏： Software Security Visual Studio

本文链接：https://blog.youkuaiyun.com/chuwachen/article/details/38402939

Visual Studio 同时被 2 个专栏收录

7 篇文章

订阅专栏

Software Security

2 篇文章

订阅专栏

本文详细介绍了在 Visual Studio Code 中配置安全编码规范和使用相关工具进行代码分析的方法，包括编译选项、链接器选项、注册表设置等，以确保软件开发过程中的安全性。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

Compile flags:
- /GS: Stack protection from buffer overrun.
- /SDL: Subset of W3&W4 security warnings as errors.
- Use warning 4.
- /WX: Treat Warnings As Errors.
Linker flags:
- /DYNAMICBASE: Randomize module base address to ensure that our code is at different location each time it is loaded.
- /NXCOMPAT: Data Execution Prevention to ensure that data is difficult to execute.
- /SAFESEH: Secure Exception Handling. Project->Properties->Linker->Advanced->Image has Safe Exception Handlers.
Using VS Code Analysis to find vulnerability.
Including Banned.h in projects to find unsafe methods which are listed in Banned.h.
Using BannedAPIextension to flag banned api use in editor. (only available for VS2010)
Enable /SEHOP in registry setting:
- 1. Click Start, click Run, type regedit, and then press ENTER.
  2. Locate the following registry subkey:
    
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\kernel\DisableExceptionChainValidation
    
    Note If you cannot find the DisableExceptionChainValidation registry entry under the
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\kernel\
    subkey, follow these steps to create it:
    1. Right-click kernel, point to New, and then click DWORD Value.
    2. Type DisableExceptionChainValidation, and then press ENTER.
  3. Double-click DisableExceptionChainValidation.
  4. Change the value of the DisableExceptionChainValidation registry entry to 0 to enable it, and then click OK.
    
    Note A value of 1 disables the registry entry. A value of 0 enables it.