gecko-dev/mozglue
Toshihito Kikuchi c277593b98 Bug 1587539 - Skip bounds check when getting IAT if Import Directory is tampered. r=aklotz
Some applications tamper Import Directory entry of a loaded executable image
to pretend static dependency on their module.  We have `RestoreImportDirectory`
to revert it in the browser process.  If tampering happened in the launcher
process, however, we failed to get an IAT thunk address via `GetIATThunksForModule`
because it could be located outside the mapped image.

With this patch, we skip bounds check in `GetIATThunksForModule` if we detect
tampering in the launcher process.  We can proceed safely because it's expected
that Import Directory is still valid though it's located outside.

Differential Revision: https://phabricator.services.mozilla.com/D49690

--HG--
extra : moz-landing-system : lando
2019-11-06 21:54:55 +00:00
..
android Bug 1558885 - Use separate directory for android gtest libxul; r=bc,nalexander 2019-10-10 21:38:01 +00:00
baseprofiler Bug 1584190 - In JSON profile, counters' sample_groups should be an array of objects - r=canaltinova 2019-10-30 22:20:06 +00:00
build Bug 1590423 - Suppress races related to Rust std::sync::Arc. r=jseward 2019-10-23 10:02:14 +00:00
dllservices Bug 1318858 - Block Digital Guardian's module which crashes Firefox. r=aklotz 2019-11-04 21:58:36 +00:00
linker Bug 1562642 - Part 2 - Add missing MPL2 headers r=Gijs 2019-07-08 09:27:47 +00:00
misc Bug 1587539 - Skip bounds check when getting IAT if Import Directory is tampered. r=aklotz 2019-11-06 21:54:55 +00:00
tests Bug 1583271 - Part 1: Change profiler page information IDs to BrowsingContextID and InnerWindowID r=gerald,nika 2019-10-09 21:25:11 +00:00
moz.build Bug 1542830: Part 4 - Modify mozglue to use new untrusted modules interfaces; r=mhowell 2019-09-23 20:18:41 +00:00