Open Bug 1445030 Opened 6 years ago Updated 2 years ago

Bootstrap process should verify integrity of browser process before resuming its main thread

Categories

(Core :: General, enhancement, P3)

Product:
Core
Component:
General
Platform:
Unspecified
Windows
Type:
enhancement

Tracking

()

Tracking Flags:
Tracking Status
firefox61 --- affected

People

(Reporter: bugzilla, Unassigned)

References

(Blocks 1 open bug)

Details

(Whiteboard: inj+) 

In particular, we probably want to check:

Before setting our own hook on ntdll!LdrLoadDll, we should check that the prolog of ntdll!LdrLoadDll matches the code on disk (potentially restoring the original code if not);

Check that the process entry point matches the location specified in the firefox.exe executable header.

This list is not exhaustive.
Priority: P2 → P3
Whiteboard: inj+
Severity: normal → S3
You need to log in before you can comment on or make changes to this bug.