commit 2d73fa74728dccde5cc29c4e56b4d781e4ead7c4
author Paolo Bonzini <pbonzini@redhat.com> Wed Nov 02 13:03:51 2022 +0100
committer Paolo Bonzini <pbonzini@redhat.com> Fri Jan 06 00:51:02 2023 +0100
tree 6904662af1dcdd86b7296730c812803e4a2e4e61
parent 10229ec3b0ff77c4894cefa312c21e65a761dcde

meson: tweak hardening options for Windows

meson.build has been enabling ASLR _only_ for debug builds since
commit d2147e04f95f ("configure: move Windows flags detection to meson",
2022-05-07); instead it was supposed to disable it for debug builds.

However, the flag has been enabled for DLLs upstream for roughly 2
years (https://sourceware.org/bugzilla/show_bug.cgi?id=19011), and
also by some distros including Debian for 6 years even
(https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=836365).

Enable it unconditionally; we can fix the reversed logic of commit
d2147e04f95f later if there are any reports, but for now just
enable the hardening.

Also add -Wl,--high-entropy-va, which also controls ASLR.

Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>