diff options
| author | Steve Holme <steve_holme@hotmail.com> | 2016-05-29 22:57:40 +0200 |
|---|---|---|
| committer | Daniel Stenberg <daniel@haxx.se> | 2016-05-30 08:14:27 +0200 |
| commit | 6df916d751e72fc9a1febc07bb59c4ddd886c043 (patch) | |
| tree | 4719db7dad6c1a8068988e22f5569a120a602091 /lib/Makefile.inc | |
| parent | ddf25f6b28c944702792b9555d47cdeb8217fece (diff) | |
| download | curl-6df916d751e72fc9a1febc07bb59c4ddd886c043.tar.gz | |
loadlibrary: Only load system DLLs from the system directory
Inspiration provided by: Daniel Stenberg and Ray Satiro
Bug: https://curl.haxx.se/docs/adv_20160530.html
Ref: Windows DLL hijacking with curl, CVE-2016-4802
Diffstat (limited to 'lib/Makefile.inc')
| -rw-r--r-- | lib/Makefile.inc | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/lib/Makefile.inc b/lib/Makefile.inc index b573e932e..0ed998c13 100644 --- a/lib/Makefile.inc +++ b/lib/Makefile.inc @@ -53,7 +53,7 @@ LIB_CFILES = file.c timeval.c base64.c hostip.c progress.c formdata.c \ http_proxy.c non-ascii.c asyn-ares.c asyn-thread.c curl_gssapi.c \ http_ntlm.c curl_ntlm_wb.c curl_ntlm_core.c curl_sasl.c \ curl_multibyte.c hostcheck.c conncache.c pipeline.c dotdot.c \ - x509asn1.c http2.c smb.c curl_endian.c curl_des.c + x509asn1.c http2.c smb.c curl_endian.c curl_des.c system_win32.c LIB_HFILES = arpa_telnet.h netrc.h file.h timeval.h hostip.h progress.h \ formdata.h cookie.h http.h sendf.h ftp.h url.h dict.h if2ip.h \ @@ -72,7 +72,7 @@ LIB_HFILES = arpa_telnet.h netrc.h file.h timeval.h hostip.h progress.h \ curl_sasl.h curl_multibyte.h hostcheck.h conncache.h \ curl_setup_once.h multihandle.h setup-vms.h pipeline.h dotdot.h \ x509asn1.h http2.h sigpipe.h smb.h curl_endian.h curl_des.h \ - curl_printf.h + curl_printf.h system_win32.h LIB_RCFILES = libcurl.rc |