[SERVER-51368] Invoke SetDllDirectory Created: 05/Oct/20 Updated: 06/Dec/22 |
|
| Status: | Backlog |
| Project: | Core Server |
| Component/s: | None |
| Affects Version/s: | None |
| Fix Version/s: | None |
| Type: | Improvement | Priority: | Major - P3 |
| Reporter: | Spencer Jackson | Assignee: | Backlog - Security Team |
| Resolution: | Unresolved | Votes: | 0 |
| Labels: | None | ||
| Remaining Estimate: | Not Specified | ||
| Time Spent: | Not Specified | ||
| Original Estimate: | Not Specified | ||
| Issue Links: |
|
||||
| Assigned Teams: |
Server Security
|
||||
| Participants: | |||||
| Description |
|
On Windows, invoking SetDllDirectory("") will prevent future calls to LoadLibrary from searching the CWD for DLLs. In practice, because our DLLs are either provided by the application or by the operating system, the CWD will never be searched. However, using {SetDllDirectory}} wouild make articulating our binaries' DLL loading policies more straightforward. |