[Windows MSVC CFG] Link with CFG only on executables.

build/config/BUILD.gn

 # Copyright (c) 2013 The Chromium Authors. All rights reserved.
 # Use of this source code is governed by a BSD-style license that can be
 # found in the LICENSE file.
 
 import("//build/config/allocator.gni")
 import("//build/config/chrome_build.gni")
 import("//build/config/chromecast_build.gni")
 import("//build/config/crypto.gni")
 import("//build/config/dcheck_always_on.gni")
 import("//build/config/features.gni")
@@ skipping 264 matching lines @@
     "//build/config/win:common_linker_setup",
   ]
 }
 
 # This config defines the configs applied to all executables.
 config("executable_config") {
   configs = []
 
   if (is_win) {
     configs += _windows_linker_configs
+
+    # Currently only turn on linker CFI for executables.

[scottmg, 2017/04/13 06:01:18]

Can you add a link here to the bug?

+    configs += [ "//build/config/win:cfi_linker" ]
   } else if (is_mac) {
     configs += [
       "//build/config/mac:mac_dynamic_flags",
       "//build/config/mac:mac_executable_flags",
     ]
   } else if (is_ios) {
     configs += [ "//build/config/ios:ios_dynamic_flags" ]
   } else if (is_linux || is_android) {
     configs += [ "//build/config/gcc:executable_ldconfig" ]
     if (is_android) {
@@ skipping 76 matching lines @@
       # then delete the precompile.c.obj file, then build again.
       #
       # TODO(sof): determine VS2015 status and retire the setting from all
       # precompiled configurations.
       cflags_c = [ "/wd4206" ]
     } else if (is_mac) {
       precompiled_source = "//build/precompile.h"
     }
   }
 }