Hi All,
We found that Postgres12 doesn’t support ASLR. Attached the process explorer screenshot (Process_Explorer_ASLR.png).
Analyzing dumpbin headers of postgres looks like the /HIGHENTROPYVA flag set and not the /DYNAMICBASE flag(dumpbin_headers.txt). According to this link, resulting image will not have ASLR enabled.
Windows has a feature to force randomization of images (Mandatory ASLR for those images which have not been compiled with /DYNAMICBASE).
Enabling this also didn’t have any effect.
The base addresses of postgres in Process Explorer doesn’t change upon restart (Postgres_Imagebase.png).
We would like to know if there is a roadmap to enable ASLR support for postgre.
Let us know if you need more information.
Regards,
Joel
