[vlc-devel] [PATCH] win32: do not load wininet.dll on startup, it's not a Known DLL

[Steve Lhomme]

On Fri, Mar 10, 2017 at 2:46 PM, Rémi Denis-Courmont <remi at remlab.net> wrote:
> On March 10, 2017 3:35:48 PM GMT+02:00, Jean-Baptiste Kempf <jb at videolan.org> wrote:
>>Hello,
>>
>>On Fri, 10 Mar 2017, at 14:32, Rémi Denis-Courmont wrote:
>>> I can hardly believe that every Windows application will load
>>wininet,
>>> winmm or whatever other Microsoft DLL only dynamically and only with
>>the
>>> right flags. Ergo, it seems dubious that Microsoft would actually
>>require
>>> it.
>>
>>Yet, it happens.
>>
>>--
>>Jean-Baptiste Kempf -  President
>>+33 672 704 734
>>_______________________________________________
>>vlc-devel mailing list
>>To unsubscribe or modify your subscription options:
>>https://mailman.videolan.org/listinfo/vlc-devel
>
> Says you. The known DLLs list is ostensibly a matter of system configuration. So if you follow that logic, you need to DllOpen EVERYTHING sinve you don't really have a fixed list. Which is actually inpossible.

That's precisely what the CIA did. You can set a manifest next to the
.exe and target a wininet locally by forcing a specific signature
(maybe even without proper signature). I could replicate this on my
machine and verify it loads the wrong DLL.

> And even if it were true, that does not make it a VLC problem.
> --
> Rémi Denis-Courmont
> _______________________________________________
> vlc-devel mailing list
> To unsubscribe or modify your subscription options:
> https://mailman.videolan.org/listinfo/vlc-devel