Opened 11 years ago
Closed 11 years ago
#7445 closed enhancement (fixed)
unrarsrc-5.3.11 (unrar-5.3.11)
| Reported by: | Fernando de Oliveira | Owned by: | Fernando de Oliveira |
|---|---|---|---|
| Priority: | normal | Milestone: | 7.9 |
| Component: | BOOK | Version: | SVN |
| Severity: | medium | Keywords: | |
| Cc: |
Description
http://www.rarlab.com/rar/unrarsrc-5.3.11.tar.gz
https://fossies.org/linux/misc/unrarsrc-5.3.11.tar.gz/
MD5 (unrarsrc-5.3.11.tar.gz): 4a29cc1b47ced82db11e06090a95ed51
Very interesting few files modified and I can never find other change info:
https://fossies.org/diffs/unrarsrc/5.3.10_vs_5.3.11/
Two modification, essentially for Windows. No modifications to version and date (?).
$ diff -Nar -U 0 unrar-5.3.10 unrar-5.3.11
diff -Nar -U 0 unrar-5.3.10/system.cpp unrar-5.3.11/system.cpp
--- unrar-5.3.10/system.cpp 2016-02-03 16:41:37.000000000 -0300
+++ unrar-5.3.11/system.cpp 2016-02-08 04:39:15.000000000 -0300
@@ -133,0 +134,12 @@
+#ifdef _WIN_ALL
+// Load library from Windows System32 folder. Use this function to prevent
+// loading a malicious code from current folder or same folder as exe.
+HMODULE WINAPI LoadSysLibrary(const wchar *Name)
+{
+ wchar SysDir[NM];
+ if (GetSystemDirectory(SysDir,ASIZE(SysDir))==0)
+ return NULL;
+ MakeName(SysDir,Name,SysDir,ASIZE(SysDir));
+ return LoadLibrary(SysDir);
+}
+#endif
diff -Nar -U 0 unrar-5.3.10/system.hpp unrar-5.3.11/system.hpp
--- unrar-5.3.10/system.hpp 2016-02-03 16:41:37.000000000 -0300
+++ unrar-5.3.11/system.hpp 2016-02-08 04:39:15.000000000 -0300
@@ -26,0 +27,3 @@
+#ifdef _WIN_ALL
+HMODULE WINAPI LoadSysLibrary(const wchar *Name);
+#endif
https://fossies.org/linux/misc/unrarsrc-5.3.11.tar.gz/cloc.html
Change History (2)
comment:1 by , 11 years ago
| Owner: | changed from to |
|---|---|
| Status: | new → assigned |
comment:2 by , 11 years ago
| Resolution: | → fixed |
|---|---|
| Status: | assigned → closed |
Note:
See TracTickets
for help on using tickets.

Fixed at r16928.