Enable CFG in node.exe

[ahtrahdis7]

BinSkim is a binary static analysis tool that provides security and correctness results for Windows Portable Executable and *nix ELF binary formats.

• Browser : N/A
• OS: Windows 8

error BA2008: 'node.exe' does not enable the control flow guard (CFG) mitigation. To resolve this issue, pass /guard:cf on both the compiler and linker command lines. Binaries also require the /DYNAMICBASE linker option in order to enable CFG.

Package used : https://github.com/microsoft/binskim
Command used : .\BinSkim.exe analyze < path to executable >

[nschonni]

@Trott do you want to transfer this to the regular node repo, it doesn't belong here

[richardlau]

cc @nodejs/platform-windows

[ahtrahdis7]

Please check for Linux and MacOS binaries also.

[Trott]

Please check for Linux and MacOS binaries also.

Control flow guard isn't a thing that exists on those platforms.

[ahtrahdis7]

I meant to say, run the Mac and Linux binaries against BinSkim to generate their reports.