Open Bug 750601 Opened 13 years ago Updated 3 years ago

Move the dll blocker from XUL.dll to firefox.exe and other exe files

Categories

(Core :: Widget: Win32, defect)

Product:
Core
Component:
Widget: Win32
Platform:
x86
Windows 7
Type:
defect

Tracking

()

People

(Reporter: nrc, Unassigned)

References

Details

DLLs are able to circumvent our DLL blocker by injecting themselves into our process before XUL.dll (and our DLL blocker) is loaded. We should prevent this by loading the blocker earlier in the startup process, by moving the blocker to firefox.exe. There is some disussion of how this should be done (and an example of a program that can circumvent our blocker) in bug 733892.
I hope it will fix ineffective DLL blocklists (see bug 725503 comment 4).
Blocks: 618899, 519344, 519348, 540692
Blocks: 725503
This has been more or less accomplished in bug 932100. We can now stop most AppInit DLLs, but unfortunately radhslib.dll is still sneaking through (bug 725503 comment 9).
Severity: normal → S3
You need to log in before you can comment on or make changes to this bug.