EDGEML-13495: Fix Binskim issues in xrt

Signed-off-by: Yvonne Yang <Yvonne.Yang@amd.com>

Revert /OPT:REF back for non-debug builds

Signed-off-by: Yvonne Yang <Yvonne.Yang@amd.com>

Author: xyvonneya

src/CMake/nativeWin.cmake

@@ -44,10 +44,10 @@ if (MSVC)
     /Qspectre     # compile with the Spectre mitigations switch
     /ZH:SHA_256   # enable secure source code hashing
     /guard:cf     # enable compiler control guard feature (CFG) to prevent attackers from redirecting execution to unsafe locations
+    /GF           # eliminate duplicate strings
     $<$<NOT:$<CONFIG:Debug>>:/guard:cast> # enable cast guard to prevent type confusion
     $<$<NOT:$<CONFIG:Debug>>:/d2CastGuardFailureMode:fastfail> # fastfail mode for cast guard
     $<$<NOT:$<CONFIG:Debug>>:/GL>  # enable whole program optimization
-    $<$<NOT:$<CONFIG:Debug>>:/GF>  # eliminate duplicate strings
     )
   add_link_options(
     /NODEFAULTLIB:libucrt$<$<CONFIG:Debug>:d>.lib  # Hybrid CRT

src/runtime_src/tools/scripts/xrtdeps-win.py

@@ -237,7 +237,7 @@ def getBuildAndInstallLibraryMinimum(self, verbose):
     if verbose == True:
       print ("Building and installing the boost library...")
 
-    cmd = "b2 -j6 install toolset=msvc-14.1 --prefix=" + self.install_dir + " --build-type=complete address-model=64 architecture=x86 link=static threading=multi --with-filesystem --with-program_options --with-system"
+    cmd = "b2 -j6 install toolset=msvc-14.1 --prefix=" + self.install_dir + " --build-type=complete address-model=64 architecture=x86 link=static threading=multi cxxflags=/W3 --with-filesystem --with-program_options --with-system"
     print (cmd)
     os.system(cmd)
 
@@ -285,7 +285,7 @@ def getBuildAndInstallLibrary(self, verbose):
     if verbose == True:
       print ("Building and installing the boost library...")
 
-    cmd = "b2 -j6 install toolset=msvc-14.1 --prefix=" + self.install_dir + " --build-type=complete"
+    cmd = "b2 -j6 install toolset=msvc-14.1 --prefix=" + self.install_dir + " --build-type=complete cxxflags=/W3"
     print (cmd)
     os.system(cmd)
 

src/runtime_src/tools/scripts/xrtdeps-win19.py

@@ -237,7 +237,7 @@ def getBuildAndInstallLibraryMinimum(self, verbose):
     if verbose == True:
       print ("Building and installing the boost library...")
 
-    cmd = "b2 -j6 install toolset=msvc --prefix=" + self.install_dir + " --build-type=complete address-model=64 architecture=x86 link=static threading=multi --with-filesystem --with-program_options --with-system"
+    cmd = "b2 -j6 install toolset=msvc --prefix=" + self.install_dir + " --build-type=complete address-model=64 architecture=x86 link=static threading=multi cxxflags=/W3 --with-filesystem --with-program_options --with-system"
     print (cmd)
     os.system(cmd)
 
@@ -285,7 +285,7 @@ def getBuildAndInstallLibrary(self, verbose):
     if verbose == True:
       print ("Building and installing the boost library...")
 
-    cmd = "b2 -j6 install toolset=msvc --prefix=" + self.install_dir + " --build-type=complete"
+    cmd = "b2 -j6 install toolset=msvc --prefix=" + self.install_dir + " --build-type=complete cxxflags=/W3"
     print (cmd)
     os.system(cmd)
 

src/runtime_src/tools/scripts/xrtdeps-win22.py

@@ -249,7 +249,7 @@ def getBuildAndInstallLibraryMinimum(self, verbose):
     if verbose == True:
       print ("Building and installing the boost library...")
 
-    cmd = "b2 -j6 install toolset=msvc --prefix=" + self.install_dir + " --build-type=complete address-model=64 architecture=x86 link=static threading=multi --with-filesystem --with-program_options --with-system"
+    cmd = "b2 -j6 install toolset=msvc --prefix=" + self.install_dir + " --build-type=complete address-model=64 architecture=x86 link=static threading=multi cxxflags=/W3 --with-filesystem --with-program_options --with-system"
     print (cmd)
     os.system(cmd)
 
@@ -297,7 +297,7 @@ def getBuildAndInstallLibrary(self, verbose):
     if verbose == True:
       print ("Building and installing the boost library...")
 
-    cmd = "b2 -j6 install toolset=msvc --prefix=" + self.install_dir + " --build-type=complete"
+    cmd = "b2 -j6 install toolset=msvc --prefix=" + self.install_dir + " --build-type=complete cxxflags=/W3"
     print (cmd)
     os.system(cmd)