[cairo] Windows 8.x security requirements / SafeSEHCheck - NXCheck - DBCheck

Tue Mar 31 06:16:31 PDT 2015

Hi Everyone,

For my application that heavily relies on Cairo I am seeking Windows 8 certification in accordance with the following article.

https://msdn.microsoft.com/en-us/windows/desktop/hh749939.aspx <https://msdn.microsoft.com/en-us/windows/desktop/hh749939.aspx>

To verify its complicance I run the installer against The Windows Certification KIT 3.4.

With the Cairo library files available in:  gtk+-bundle_3.6.4-20130921_win32

I run into the following errors.

WARNING
Binary analyzer
Warning:The binary analyzer test detected the following errors:
File C:\Program Files\StakePoint\zlib1.dll has failed the NXCheck check.
File C:\Program Files\StakePoint\zlib1.dll has failed the DBCheck check.
File C:\Program Files\StakePoint\zlib1.dll has failed the SafeSEHCheck check.
File C:\Program Files\StakePoint\pthreadGC2.dll has failed the NXCheck check.
File C:\Program Files\StakePoint\pthreadGC2.dll has failed the DBCheck check.
File C:\Program Files\StakePoint\pthreadGC2.dll has failed the SafeSEHCheck check.
File C:\Program Files\StakePoint\libxml2-2.dll has failed the NXCheck check.
File C:\Program Files\StakePoint\libxml2-2.dll has failed the DBCheck check.
File C:\Program Files\StakePoint\libxml2-2.dll has failed the SafeSEHCheck check.
File C:\Program Files\StakePoint\libtiff-5.dll has failed the NXCheck check.
File C:\Program Files\StakePoint\libtiff-5.dll has failed the DBCheck check.
File C:\Program Files\StakePoint\libtiff-5.dll has failed the SafeSEHCheck check.
File C:\Program Files\StakePoint\librsvg-2-2.dll has failed the NXCheck check.
File C:\Program Files\StakePoint\librsvg-2-2.dll has failed the DBCheck check.
File C:\Program Files\StakePoint\librsvg-2-2.dll has failed the SafeSEHCheck check.
File C:\Program Files\StakePoint\libpng15-15.dll has failed the NXCheck check.
File C:\Program Files\StakePoint\libpng15-15.dll has failed the DBCheck check.
File C:\Program Files\StakePoint\libpng15-15.dll has failed the SafeSEHCheck check.
File C:\Program Files\StakePoint\libpixman-1-0.dll has failed the NXCheck check.
File C:\Program Files\StakePoint\libpixman-1-0.dll has failed the DBCheck check.
File C:\Program Files\StakePoint\libpixman-1-0.dll has failed the SafeSEHCheck check.
File C:\Program Files\StakePoint\libpangowin32-1.0-0.dll has failed the NXCheck check.
File C:\Program Files\StakePoint\libpangowin32-1.0-0.dll has failed the DBCheck check.
File C:\Program Files\StakePoint\libpangowin32-1.0-0.dll has failed the SafeSEHCheck check.
File C:\Program Files\StakePoint\libpangoft2-1.0-0.dll has failed the NXCheck check.
File C:\Program Files\StakePoint\libpangoft2-1.0-0.dll has failed the DBCheck check.
File C:\Program Files\StakePoint\libpangoft2-1.0-0.dll has failed the SafeSEHCheck check.
File C:\Program Files\StakePoint\libpangocairo-1.0-0.dll has failed the NXCheck check.
File C:\Program Files\StakePoint\libpangocairo-1.0-0.dll has failed the DBCheck check.
File C:\Program Files\StakePoint\libpangocairo-1.0-0.dll has failed the SafeSEHCheck check.
File C:\Program Files\StakePoint\libpango-1.0-0.dll has failed the NXCheck check.
File C:\Program Files\StakePoint\libpango-1.0-0.dll has failed the DBCheck check.
File C:\Program Files\StakePoint\libpango-1.0-0.dll has failed the SafeSEHCheck check.
File C:\Program Files\StakePoint\liblzma-5.dll has failed the NXCheck check.
File C:\Program Files\StakePoint\liblzma-5.dll has failed the DBCheck check.
File C:\Program Files\StakePoint\liblzma-5.dll has failed the SafeSEHCheck check.
File C:\Program Files\StakePoint\libjpeg-9.dll has failed the NXCheck check.
File C:\Program Files\StakePoint\libjpeg-9.dll has failed the DBCheck check.
File C:\Program Files\StakePoint\libjpeg-9.dll has failed the SafeSEHCheck check.
File C:\Program Files\StakePoint\libjasper-1.dll has failed the NXCheck check.
File C:\Program Files\StakePoint\libjasper-1.dll has failed the DBCheck check.
File C:\Program Files\StakePoint\libjasper-1.dll has failed the SafeSEHCheck check.
File C:\Program Files\StakePoint\libintl-8.dll has failed the NXCheck check.
File C:\Program Files\StakePoint\libintl-8.dll has failed the DBCheck check.
File C:\Program Files\StakePoint\libintl-8.dll has failed the SafeSEHCheck check.
File C:\Program Files\StakePoint\libiconv-2.dll has failed the NXCheck check.
File C:\Program Files\StakePoint\libiconv-2.dll has failed the DBCheck check.
File C:\Program Files\StakePoint\libiconv-2.dll has failed the SafeSEHCheck check.
File C:\Program Files\StakePoint\libgtk-3-0.dll has failed the NXCheck check.
File C:\Program Files\StakePoint\libgtk-3-0.dll has failed the DBCheck check.
File C:\Program Files\StakePoint\libgtk-3-0.dll has failed the SafeSEHCheck check.
File C:\Program Files\StakePoint\libgthread-2.0-0.dll has failed the NXCheck check.
File C:\Program Files\StakePoint\libgthread-2.0-0.dll has failed the DBCheck check.
File C:\Program Files\StakePoint\libgthread-2.0-0.dll has failed the SafeSEHCheck check.
File C:\Program Files\StakePoint\libgobject-2.0-0.dll has failed the NXCheck check.
File C:\Program Files\StakePoint\libgobject-2.0-0.dll has failed the DBCheck check.
File C:\Program Files\StakePoint\libgobject-2.0-0.dll has failed the WXCheck check.
File C:\Program Files\StakePoint\libgobject-2.0-0.dll has failed the SafeSEHCheck check.
File C:\Program Files\StakePoint\libgmodule-2.0-0.dll has failed the NXCheck check.
File C:\Program Files\StakePoint\libgmodule-2.0-0.dll has failed the DBCheck check.
File C:\Program Files\StakePoint\libgmodule-2.0-0.dll has failed the SafeSEHCheck check.
File C:\Program Files\StakePoint\libglib-2.0-0.dll has failed the NXCheck check.
File C:\Program Files\StakePoint\libglib-2.0-0.dll has failed the DBCheck check.
File C:\Program Files\StakePoint\libglib-2.0-0.dll has failed the SafeSEHCheck check.
File C:\Program Files\StakePoint\libgio-2.0-0.dll has failed the NXCheck check.
File C:\Program Files\StakePoint\libgio-2.0-0.dll has failed the DBCheck check.
File C:\Program Files\StakePoint\libgio-2.0-0.dll has failed the SafeSEHCheck check.
File C:\Program Files\StakePoint\libgdk_pixbuf-2.0-0.dll has failed the NXCheck check.
File C:\Program Files\StakePoint\libgdk_pixbuf-2.0-0.dll has failed the DBCheck check.
File C:\Program Files\StakePoint\libgdk_pixbuf-2.0-0.dll has failed the SafeSEHCheck check.
File C:\Program Files\StakePoint\libgdk-3-0.dll has failed the NXCheck check.
File C:\Program Files\StakePoint\libgdk-3-0.dll has failed the DBCheck check.
File C:\Program Files\StakePoint\libgdk-3-0.dll has failed the SafeSEHCheck check.
File C:\Program Files\StakePoint\libgailutil-3-0.dll has failed the NXCheck check.
File C:\Program Files\StakePoint\libgailutil-3-0.dll has failed the DBCheck check.
File C:\Program Files\StakePoint\libgailutil-3-0.dll has failed the SafeSEHCheck check.
File C:\Program Files\StakePoint\libfreetype-6.dll has failed the NXCheck check.
File C:\Program Files\StakePoint\libfreetype-6.dll has failed the DBCheck check.
File C:\Program Files\StakePoint\libfreetype-6.dll has failed the SafeSEHCheck check.
File C:\Program Files\StakePoint\libfontconfig-1.dll has failed the NXCheck check.
File C:\Program Files\StakePoint\libfontconfig-1.dll has failed the DBCheck check.
File C:\Program Files\StakePoint\libfontconfig-1.dll has failed the SafeSEHCheck check.
File C:\Program Files\StakePoint\libffi-6.dll has failed the NXCheck check.
File C:\Program Files\StakePoint\libffi-6.dll has failed the DBCheck check.
File C:\Program Files\StakePoint\libffi-6.dll has failed the SafeSEHCheck check.
File C:\Program Files\StakePoint\libcroco-0.6-3.dll has failed the NXCheck check.
File C:\Program Files\StakePoint\libcroco-0.6-3.dll has failed the DBCheck check.
File C:\Program Files\StakePoint\libcroco-0.6-3.dll has failed the SafeSEHCheck check.
File C:\Program Files\StakePoint\libcairo-script-interpreter-2.dll has failed the NXCheck check.
File C:\Program Files\StakePoint\libcairo-script-interpreter-2.dll has failed the DBCheck check.
File C:\Program Files\StakePoint\libcairo-script-interpreter-2.dll has failed the SafeSEHCheck check.
File C:\Program Files\StakePoint\libcairo-gobject-2.dll has failed the NXCheck check.
File C:\Program Files\StakePoint\libcairo-gobject-2.dll has failed the DBCheck check.
File C:\Program Files\StakePoint\libcairo-gobject-2.dll has failed the SafeSEHCheck check.
File C:\Program Files\StakePoint\libcairo-2.dll has failed the NXCheck check.
File C:\Program Files\StakePoint\libcairo-2.dll has failed the DBCheck check.
File C:\Program Files\StakePoint\libcairo-2.dll has failed the SafeSEHCheck check.
File C:\Program Files\StakePoint\libatk-1.0-0.dll has failed the NXCheck check.
File C:\Program Files\StakePoint\libatk-1.0-0.dll has failed the DBCheck check.
File C:\Program Files\StakePoint\libatk-1.0-0.dll has failed the SafeSEHCheck check.
Impact if not fixed: If the app doesn’t use the available Windows protections, it can increase the vulnerability of the customer's computer to malware.
How to fix: Apply the SAFESEH, DYNAMICBASE, and NXCOMPAT options when you link the app. See link below for more information:
Fixing Binary Analyzer Errors <http://go.microsoft.com/fwlink/?LinkId=247433>

So the question is if there are any Windows certified “Compiled” libraries available that pass the above tests, or any other news roadmap or hint related with this subject.

Best regards, and thanks for all the great work you’re putting into Cairo.

Maarten MOSTERT

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cairographics.org/archives/cairo/attachments/20150331/fc202036/attachment-0001.html>