WinGet is the Windows Package Manager. This project includes a CLI (Command Line Interface), PowerShell modules, and a COM (Component Object Model) API (Application Programming Interface).
UndockedRegFreeWinRT.vcxproj already had spectre-mitigation enabled, but its dependencies .lib were picked from the non-spectre directory which was causing a BinSkim warning
The following modules were compiled with a toolset that supports /Qspectre but the switch was not enabled on the command-line:
comsuppw.lib, msvcprt.lib, MSVCRT.lib, MSVCRT.lib, vcruntime.lib
Adding explicit reference to the spectre in AdditionalLibraryDirectories to ensure the spectre version of the static libraries are picked by the linker
UndockedRegFreeWinRT.vcxproj
already had spectre-mitigation enabled, but its dependencies.lib
were picked from the non-spectre
directory which was causing a BinSkim warningAdding explicit reference to the
spectre
inAdditionalLibraryDirectories
to ensure thespectre
version of the static libraries are picked by the linkerMicrosoft Reviewers: Open in CodeFlow