This issue tracker has been migrated to GitHub, and is currently read-only.
For more information, see the GitHub FAQs in the Python's Developer Guide.

Author agale031176
Recipients agale031176, eric.araujo, tarek
Date 2012-08-22.08:53:24
SpamBayes Score -1.0
Marked as misclassified Yes
Message-id <1345625605.38.0.633732854192.issue15762@psf.upfronthosting.co.za>
In-reply-to
Content
Hi

We have an application created with python2.7 and created into an executable using py2exe. However we are getting an issue with Windows 8 certification due to compiler parameters. We would like to have this application Windows 8 certified but we can't get pass the following warning:
===============================================
Windows security features test 


WARNING 
Binary analyzer
•
Warning: The binary analyzer test detected the following errors: 
◦File C:\Program Files (x86)\TestApp\test.exe has failed the DBCheck check.
◦File C:\Program Files (x86)\TestApp\test.exe has failed the NXCheck check.

•
Impact if not fixed: If the app doesn’t use the available Windows protections, it can increase the vulnerability of customer's computer to malware. 

•
How to fix: Apply the SAFESEH, DYNAMICBASE, and NXCOMPAT options when you link the app. See link below for more information:
Fixing Binary Analyzer Errors 

========================================================================

In order to fix this issue I had to modify the file msvc9compiler.py by changing the following line from:

self.ldflags_shared = ['/DLL', '/nologo', '/INCREMENTAL:NO']

to

self.ldflags_shared = ['/DLL', '/nologo', '/INCREMENTAL:NO', '/DYNAMICBASE', '/SAFESEH', '/NXCOMPAT']

and rebuild py2exe. Once I have done this the test passed.

I could go about it by having local patch available to my team but preferably I try to avoid patching the standard python modules.

My question is if there is another way to do this? and whether it would be a good idea to include these flags in future distutils?
History
Date User Action Args
2012-08-22 08:53:25agale031176setrecipients: + agale031176, tarek, eric.araujo
2012-08-22 08:53:25agale031176setmessageid: <1345625605.38.0.633732854192.issue15762@psf.upfronthosting.co.za>
2012-08-22 08:53:24agale031176linkissue15762 messages
2012-08-22 08:53:24agale031176create