On Wed Aug 20 19:41:56 2025 +0000, Tres Finocchiaro wrote:
`HIGHENTROPYVA:NO` allows `DYNAMICBASE` to remain active for both 32-bit and 64-bit executables while only disabling the 64-bit `HIGHENTROPYVA` features. Since `DYNAMICBASE` is widely preferred for security purposes, this provides just-enough granularity to close [#58480](https://bugs.winehq.org/show_bug.cgi?id=58480), and matches more closely to that of cygwin and MSVC compilers. Note that this `HIGHENTROPYVA:NO` solution is new information since creating that bug report. On the other hand, if it's winehq's stance that these flags should be toggled together, I'd happily change this back. I was fearful that handling them together may not be succinct enough, but I'm happy to oblige.
DYNAMICBASE by itself is not meaningful for .exe.so binaries, they are mapped by the Unix loader anyway, which provides its own ASLR.