cmake: Enable CET on MSVC x86/x64 builds

Intel CET uses a shadow stack to protect against ROP attacks by
terminating the process if a shadow stack violation is detected in a
module that has marked itself as CET-compatible with the /CETCOMPAT
linker flag (and the process itself has CET enabled).

Author: cgutman

CMakeLists.txt

@@ -227,6 +227,11 @@ if(CMAKE_C_COMPILER_ID MATCHES "MSVC" OR (CMAKE_C_COMPILER_ID STREQUAL "Clang" A
     # Enable control flow guard
     target_link_options(loader_common_options INTERFACE "LINKER:/guard:cf")
 
+    # Enable CET for 32-bit and 64-bit x86 architectures
+    if (CMAKE_GENERATOR_PLATFORM MATCHES "Win32|x64")
+        target_link_options(loader_common_options INTERFACE "LINKER:/cetcompat")
+    endif()
+
     # Prevent <windows.h> from polluting the code. guards against things like MIN and MAX
     target_compile_definitions(loader_common_options INTERFACE WIN32_LEAN_AND_MEAN)