simon-git: putty (master): Simon Tatham
Commits to Tartarus CVS repository.
tartarus-commits at lists.tartarus.org
Mon Jul 18 20:04:53 BST 2016
TL;DR:
9398d23 Lock down the search path for Windows DLL loading.
Repository: git://git.tartarus.org/simon/putty.git
On the web: http://tartarus.org/~simon-git/gitweb/?p=putty.git
Branch updated: master
Committer: Simon Tatham <anakin at pobox.com>
Date: 2016-07-18 20:04:53
commit 9398d230339d5bfaa94093af89a17abf33b5dfad
web diff http://tartarus.org/~simon-git/gitweb/?p=putty.git;a=commitdiff;h=9398d230339d5bfaa94093af89a17abf33b5dfad;hp=f56dd17709d3239304ad2c4cdb73bcdde13c5703
Author: Simon Tatham <anakin at pobox.com>
Date: Mon Jul 18 20:02:32 2016 +0100
Lock down the search path for Windows DLL loading.
At least on systems providing SetDefaultDllDirectories, this should
stop PuTTY from being willing to load DLLs from its containing
directory - which makes no difference when it's been properly
installed (in which case the application dir contains no DLLs anyway),
but does if it's being run from somewhere uncontrolled like a browser
downloads directory.
Preliminary testing suggests that this shouldn't break any existing
deliberate use of DLLs, including GSSAPI providers.
windows/window.c | 2 ++
windows/winmisc.c | 32 ++++++++++++++++++++++++++++++++
windows/winpgen.c | 2 ++
windows/winpgnt.c | 2 ++
windows/winplink.c | 2 ++
windows/winsftp.c | 2 ++
windows/winstuff.h | 1 +
7 files changed, 43 insertions(+)
More information about the tartarus-commits
mailing list