trailofbits / cfg-showcase Goto Github PK

This is not really an issue, just a question. (I can't seem to find any info on the subject other than your repository here.)

Say, for a dynamically resolved function call (provided that it's not suppressed via exports), is there a way to disable CFG checks on that function call only? Say in this example:

typedef BOOL /*__declspec(guard(ignore))*/ (WINAPI* FN_GdiFlush)(void);
FN_GdiFlush pfbGdiFlush = (FN_GdiFlush)::GetProcAddress(::LoadLibrary(L"gdi32.dll"), "GdiFlush");
ASSERT(pfbGdiFlush);
pfbGdiFlush();      //Disable __guard_dispatch_icall_fptr() function call here and go with just `call [rax]`

My hope was that using uncommented version of __declspec(guard(ignore)), would do the trick: