Re: DEP and /NXCOMPAT troubles...



Ira Baxter wrote:
So, what on earth does /NXCOMPAT:NO actually *do*?
The other (YES) state, implies the program is compatible
with DEP and can be run that way.

I answered this question on 2008-10-19. In case you missed my reply, here's the relevant bit again:

"The MSDN documentation says "/NXCOMPAT:NO can be used to explicitly specify an executable as not compatible with Data Execution Prevention". This is not how it works, at least not for XP -- the semantics *might* actually be that for Vista (that is, your exe's subsystem version is 6.00), but I have no idea.

For XP and earlier, at least, this should say "/NXCOMPAT:NO can be used to specify an executable as not tested to be compatible with Data Execution Prevention", because that's the actual inverse of /NXCOMPAT. It merely *clears* the bit that says the application *is* compatible with DEP, which does not mean the application definitely is *not* compatible with DEP. If DEP is set to OptOut, your application must still be added to the list of exceptions to disable DEP. /NXCOMPAT can be used to opt-in to DEP, but not to opt-out.

To actually say your application absolutely positively cannot handle DEP and should get a break, you have to call SetProcessDEPPolicy() from within the application. This function is only availabe from Vista SP1 onwards, however."

--
J.
.



Relevant Pages

  • Re: Windows mail problem not fixed - please help (TO THE TOP)
    ... "Data Execution Prevention (DEP) is a security feature that can help prevent damage to your computer from viruses and other security threats. ... Harmful programs can try to attack Windows by attempting to run code from system memory locations reserved for Windows and other authorized programs. ... protects limited system binaries, regardless of the hardware-enforced ...
    (microsoft.public.windows.vista.general)
  • Re: DEP and /NXCOMPAT troubles...
    ... a dynamic allocated buffer and executes it. ... for managing DEP in the control-panel system window). ... But it seems like I'm suddenly getting complaints from Vista users. ... Data Execution Prevention" or not. ...
    (microsoft.public.win32.programmer.kernel)
  • DEP and /NXCOMPAT troubles...
    ... We have long had a robust 32 bit application that loads object code into a ... for managing DEP in the control-panel system window). ... But it seems like I'm suddenly getting complaints from Vista users. ... Data Execution Prevention" or not. ...
    (microsoft.public.win32.programmer.kernel)
  • Re: DEP and /NXCOMPAT troubles...
    ... for managing DEP in the control-panel system window). ... But it seems like I'm suddenly getting complaints from Vista users. ... Data Execution Prevention" or not. ... It appears that EDITBIN isn't doing what I expect. ...
    (microsoft.public.win32.programmer.kernel)
  • Re: 32bit CPU to 64bit upgrade SP2 question
    ... Data Execution Prevention (DEP). ... the No eXecute switch for your CPU will prevent ... DEP software alone helps protect against certain types ... A detailed description of the Data Execution Prevention ...
    (microsoft.public.windowsxp.general)