Skip to content
Snippets Groups Projects
Commit 79dcf19a authored by Christopher Waldon's avatar Christopher Waldon Committed by Christopher Waldon
Browse files

[Windows] restrict DLL load to system libraries

As the docs for NewLazyDLL indicate [0], it is vulnerable to DLL preload
attacks when the path provided is not absolute. Since we're only loading
a system library here, we can safely restrict the search to the system32
directory and eliminate this issue.

[0] https://pkg.go.dev/golang.org/x/sys@v0.29.0/windows#NewLazyDLL
parent 085b585d
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment