]> granicus.if.org Git - curl/commit
loadlibrary: Only load system DLLs from the system directory
authorSteve Holme <steve_holme@hotmail.com>
Sun, 29 May 2016 20:57:40 +0000 (22:57 +0200)
committerDaniel Stenberg <daniel@haxx.se>
Mon, 30 May 2016 06:14:27 +0000 (08:14 +0200)
commit6df916d751e72fc9a1febc07bb59c4ddd886c043
tree4719db7dad6c1a8068988e22f5569a120a602091
parentddf25f6b28c944702792b9555d47cdeb8217fece
loadlibrary: Only load system DLLs from the system directory

Inspiration provided by: Daniel Stenberg and Ray Satiro

Bug: https://curl.haxx.se/docs/adv_20160530.html

Ref: Windows DLL hijacking with curl, CVE-2016-4802
lib/Makefile.inc
lib/Makefile.vc6
lib/curl_sspi.c
lib/system_win32.c [new file with mode: 0644]
lib/system_win32.h [new file with mode: 0644]
lib/telnet.c
packages/Symbian/group/libcurl.mmp