Martin Vejnár
608b11a91f
win32: fix a potential memory leak in Curl_load_library
...
If a call to GetSystemDirectory fails, the `path` pointer that was
previously allocated would be leaked. This makes sure that `path` is
always freed.
Closes #938
2016-08-01 10:43:10 +02:00
Jay Satiro
84a48e5732
checksrc: Add LoadLibrary to the banned functions list
...
LoadLibrary was supplanted by Curl_load_library for security
reasons in 6df916d
2016-06-05 21:07:03 -04:00
Steve Holme
dde5e430e2
win32: Added verify windows version functionality
2016-06-04 21:24:09 +01:00
Steve Holme
6020ce5fa7
win32: Introduced centralised verify windows version function
2016-06-04 21:24:09 +01:00
Steve Holme
6df916d751
loadlibrary: Only load system DLLs from the system directory
...
Inspiration provided by: Daniel Stenberg and Ray Satiro
Bug: https://curl.haxx.se/docs/adv_20160530.html
Ref: Windows DLL hijacking with curl, CVE-2016-4802
2016-05-30 08:14:27 +02:00
