Displaying 4 results from an estimated 4 matches for "warrantless".
Did you mean:
warranties
2013 Mar 19
3
Patch to add Unicode filename support for win32 flac
...; LoadLibrary("msvcrt.dll") <- Which msvcrt? Theoretical security exploit.
There is msvcrt.dll in the System32 dir in all supported Windows
systems. That is what the function targets, but of course LoadLibrary
searches from exe's dir first. I think security exploit concerns are
warrantless, if you can place malicious replacement c-runtime dll in the
exe's path you have already won.
>
> I think it is best to link it directly, please use the following
> prototype and call it directly:
>
> =============================================
> #ifdef _DLL
> #define C...
2013 Mar 19
0
Patch to add Unicode filename support for win32 flac
...uot;) <- Which msvcrt?
>> Theoretical security exploit.
>
> There is msvcrt.dll in the System32 dir in all supported Windows
> systems. That is what the function targets, but of course
> LoadLibrary searches from exe's dir first. I think security exploit
> concerns are warrantless, if you can place malicious replacement
> c-runtime dll in the exe's path you have already won.
See [1] for the info. According to that article,
LoadLibraryA("msvcrt.dll") should be perfectly safe.
[1]
http://msdn.microsoft.com/en-us/library/windows/desktop/ms682586%28v=vs.85%29....
2013 Mar 19
1
Patch to add Unicode filename support for win32 flac
...hich msvcrt?
>>> Theoretical security exploit.
>> There is msvcrt.dll in the System32 dir in all supported Windows
>> systems. That is what the function targets, but of course
>> LoadLibrary searches from exe's dir first. I think security exploit
>> concerns are warrantless, if you can place malicious replacement
>> c-runtime dll in the exe's path you have already won.
> See [1] for the info. According to that article,
> LoadLibraryA("msvcrt.dll") should be perfectly safe.
>
>
> [1]
> http://msdn.microsoft.com/en-us/library/window...
2013 Mar 19
2
Patch to add Unicode filename support for win32 flac
On 18.3.2013 12:25, Erik de Castro Lopo wrote:
> JonY wrote:
>
>> Before anyone does anything, see __wgetmainargs
>> <http://msdn.microsoft.com/en-us/library/ff770599.aspx>.
>>
>> It can expand wildcards. Since it already provides argc/argv/env, it is
>> more a less a drop-in replacement for the main() arguments.
> +1
>
> Erik
Alright, here's