commit | 70f52985063808f21fd6dd197895cdb9729443a5 | [log] [tgz] |
---|---|---|
author | Jason A. Donenfeld <Jason@zx2c4.com> | Wed Mar 06 17:51:47 2019 +0100 |
committer | Brad Fitzpatrick <bradfitz@golang.org> | Wed Mar 06 17:15:55 2019 +0000 |
tree | 565e31a63fa6ca1a93ade877f05f852f8a14d641 | |
parent | 3e9a981b8ddba4cb37815d4ebf2171df73c5255b [diff] |
windows/svc: safely load system DLLs These DLLs, well advapi32.dll in particular, are vulnerable to classic DLL directory injection attacks. The rest of x/sys/windows moved over to the safe system loader, but apparently the svc package was forgotten. This tidies up that oversight. Change-Id: I330fa752cf2d49ccc5cf1bd60fb4bd612bd2b6b0 Reviewed-on: https://go-review.googlesource.com/c/sys/+/165758 Run-TryBot: Brad Fitzpatrick <bradfitz@golang.org> TryBot-Result: Gobot Gobot <gobot@golang.org> Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org>
This repository holds supplemental Go packages for low-level interactions with the operating system.
The easiest way to install is to run go get -u golang.org/x/sys
. You can also manually git clone the repository to $GOPATH/src/golang.org/x/sys
.
This repository uses Gerrit for code changes. To learn how to submit changes to this repository, see https://golang.org/doc/contribute.html.
The main issue tracker for the sys repository is located at https://github.com/golang/go/issues. Prefix your issue with “x/sys:” in the subject line, so it is easy to find.