)]}'
{
  "commit": "9b6e9f0c8c66355c0f0575d808b32f52c8c6d21c",
  "tree": "4b143b84ee9ad075e6342094ee262e7dcc748a42",
  "parents": [
    "243c8eb8c290ebbf2e2811da2dd7538200dde6b3"
  ],
  "author": {
    "name": "Jason A. Donenfeld",
    "email": "Jason@zx2c4.com",
    "time": "Wed Mar 06 19:26:29 2019 +0100"
  },
  "committer": {
    "name": "Alex Brainman",
    "email": "alex.brainman@gmail.com",
    "time": "Sun Mar 10 05:40:13 2019 +0000"
  },
  "message": "runtime: safely load DLLs\n\nWhile many other call sites have been moved to using the proper\nhigher-level system loading, these areas were left out. This prevents\nDLL directory injection attacks. This includes both the runtime load\ncalls (using LoadLibrary prior) and the implicitly linked ones via\ncgo_import_dynamic, which we move to our LoadLibraryEx. The goal is to\nonly loosely load kernel32.dll and strictly load all others.\n\nMeanwhile we make sure that we never fallback to insecure loading on\nolder or unpatched systems.\n\nThis is CVE-2019-9634.\n\nFixes #14959\nFixes #28978\nFixes #30642\n\nChange-Id: I401a13ed8db248ab1bb5039bf2d31915cac72b93\nReviewed-on: https://go-review.googlesource.com/c/go/+/165798\nRun-TryBot: Brad Fitzpatrick \u003cbradfitz@golang.org\u003e\nTryBot-Result: Gobot Gobot \u003cgobot@golang.org\u003e\nReviewed-by: Alex Brainman \u003calex.brainman@gmail.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "2e1ec58a0d9be1b4ebf848128ca3b3eb0e3afea6",
      "old_mode": 33188,
      "old_path": "src/runtime/os_windows.go",
      "new_id": "d3e84fe3dcbf2b2ecc9ae3babe9876bfbf8bef10",
      "new_mode": 33188,
      "new_path": "src/runtime/os_windows.go"
    },
    {
      "type": "modify",
      "old_id": "8cfc71124a5b6b4f2f08827f0f9837804b8a4fe1",
      "old_mode": 33188,
      "old_path": "src/runtime/syscall_windows.go",
      "new_id": "36ad7511af86b5ed8739770b35de95cd4bd049fc",
      "new_mode": 33188,
      "new_path": "src/runtime/syscall_windows.go"
    },
    {
      "type": "modify",
      "old_id": "c57cd34f8225be540cd7119d2337ff5b9890256d",
      "old_mode": 33188,
      "old_path": "src/syscall/dll_windows.go",
      "new_id": "34925f74a44595f29739f258f7d188d4d7ae62fb",
      "new_mode": 33188,
      "new_path": "src/syscall/dll_windows.go"
    },
    {
      "type": "modify",
      "old_id": "ae8b3a17bfb0f77a000726687994b3ab065e6156",
      "old_mode": 33188,
      "old_path": "src/syscall/security_windows.go",
      "new_id": "db80d98a084d019832c52cce5a77126663951ecc",
      "new_mode": 33188,
      "new_path": "src/syscall/security_windows.go"
    },
    {
      "type": "modify",
      "old_id": "de2d4f3adb5d0f7835476aa7212a95a7601d0b3c",
      "old_mode": 33188,
      "old_path": "src/syscall/zsyscall_windows.go",
      "new_id": "2348f6534f7af7c675250bb8091af1963ffa1c87",
      "new_mode": 33188,
      "new_path": "src/syscall/zsyscall_windows.go"
    }
  ]
}