warbler
warbler copied to clipboard
Jars created with warbler trigger EMET SimExecFlow when run
As far as I can tell, every .jar or .war file that warbler creates is triggering the EMET SimExecFlow mitigation on Windows 7 (when running EMET of course). I'm not sure exactly what behavior is causing it....running the code through JRuby directly works fine, but when packaged in a JAR it suddenly turns even and EMET kills it.
Here's the simplest test case I could come up with:
- Make sure you're running EMET
- Create the directories and files like this:
/test
/test/bin
/test/bin/test.rb
- Add one line to test.rb:
puts "Hi"
- Using warbler, create the jar file:
cd /test
warble
- Run that jar:
java -jar test.jar
Microsoft EMET shows the following error:
EMET detected SimExecFlow mitigation and will close the application: java.exe
In fact, there are two of those boxes sitting on top of each other saying the exact same thing. There's also a notice saying Java stopped unexpectedly.
OS: Windows 7 JRuby Version: 1.7.2 Warbler version: 1.4.1