_message.pyd for Windows Python is missing NX and ASLR

What version of protobuf and what language are you using?

Version: v36-dev
Language: Python

What supported operating system version are you using (e.g. Linux, Windows) ?

Linux

What supported runtime / compiler version are you using (e.g. python version, gcc version)

Python 3.10.11
MinGW-w64 GCC

What did you do?

Steps to reproduce the behavior:

1. Build the Windows extension: bazel build --config=cross_config //python/dist
2. Extract google/_upb/_message.pyd from the wheel zip.
3. (On Windows) run dumpbin.exe /headers _message.pyd to check the DLL headers.

or

1. Run pip install protobuf (currently installs protobuf-7.35.1)
2. Run dumpbin.exe /headers <python directory>Lib\site-packages\google\_upb\_message.pyd

What did you expect to see

For the NX and ASLR security features to be enabled, under OPTIONAL HEADER VALUES these values should be enabled:

             160 DLL characteristics
                   High Entropy Virtual Addresses
                   Dynamic base
                   NX compatible

What did you see instead?

               0 DLL characteristics

Anything else we should know about your project / environment

I would've sent a PR, but I could not find an Google Contributor License Agreement with my employer nor reach our person in charge of those. However fixing this should be quite simple by adding something like below to python\py_extension.bzl.

def py_extension(name, srcs, copts, deps = [], **kwargs):
    """Creates a C++ library to extend python

    Args:
      name: Name of the target
      srcs: List of source files to create the target
      copts: List of C++ compile options to use
      deps: Libraries that the target depends on
    """
    cc_binary(
        name = name + "_binary",
        srcs = srcs,
        copts = copts + ["-fvisibility=hidden"],
        linkopts = selects.with_or({
            (
                "//python/dist:osx_x86_64",
                "//python/dist:osx_aarch64",
            ): ["-Wl,-undefined,dynamic_lookup"],
+           "//python/dist:windows_x86_32": [
+               "-static-libgcc",
+               "-Wl,--nxcompat",
+               "-Wl,--dynamicbase",
+            ],
+            "//python/dist:windows_x86_64": [
+                "-Wl,--nxcompat",
+                "-Wl,--dynamicbase",
+                "-Wl,--high-entropy-va",
+            ],
            "//conditions:default": [],
        }),

Start in python/py_extension.bzl and inspect the Windows linker options used by py_extension. Build the Windows extension with bazel build --config=cross_config //python/dist, extract google/_upb/_message.pyd, and inspect it with dumpbin.exe /headers. Done means the DLL characteristics include High Entropy Virtual Addresses, Dynamic base, and NX compatible.