1568850 - Fix regressions when removing the application dir from the DLL search paths with MITIGATION_DLL_SEARCH_ORDER.

Status: NEW

(Core :: Security: Process Sandboxing, defect, P2)

Description

[Bob Owen (:bobowen)]

Removing the app dir from the DLL search defaults when MITIGATION_DLL_SEARCH_ORDER is used causes issue in bug 1565848.

This bug is to fix that and revert the change made in bug 1565848.
From the original patch review from glandium a plan for fixing the NSPR issue:
"Off the top of my head, a non-breaking way to handle this would be to add a Win32-only PR_GetLibraryFilePathnameU function that returns the multi-byte path for consumption with PR_LoadLibraryWithFlags with PR_LibSpec_PathnameU (which is win32-only). Which, yes, unfortunately, means changing NSS too (and anything else using PR_GetLibraryFilePathname in Gecko)."

Comment 1

[Alessio Placitelli [:Dexter]]

Is this affecting the search order of dlls of native host processes (for host messaging) spawned by Firefox? See this SO question.