зеркало из https://github.com/mozilla/gecko-dev.git
d98a83f672
Bug 1659438 introduced an exported function `GetDependentModulePaths` in firefox.exe so that our sandboxBroker can easily access the shared section whose handle is owned by firefox.exe. This patch disallows `GetDependentModulePaths` to be called from someone other than xul.dll in order to harden the attack to tamper our shared section. This cannot prevent all possible attacks, but it's better than nothing. Differential Revision: https://phabricator.services.mozilla.com/D97377 |
||
|---|---|---|
| .. | ||
| freestanding | ||
| test | ||
| DllBlocklistInit.cpp | ||
| DllBlocklistInit.h | ||
| ErrorHandler.cpp | ||
| ErrorHandler.h | ||
| LaunchUnelevated.cpp | ||
| LaunchUnelevated.h | ||
| LauncherProcessWin.cpp | ||
| LauncherProcessWin.h | ||
| NtLoaderAPI.cpp | ||
| ProcThreadAttributes.h | ||
| SameBinary.h | ||
| moz.build | ||